{ "type": "URL", "indicator": "https://cdn.cms-twdigitalassets.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://cdn.cms-twdigitalassets.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 2719032937, "indicator": "https://cdn.cms-twdigitalassets.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 15, "pulses": [ { "id": "657090ec38f1bd5e40046c7b", "name": "Twitter Widget Iframe - its astounding how corrupt twitter is for many and no-one seems to highlighting or addressing these issues", "description": "", "modified": "2023-12-06T15:19:08.396000", "created": "2023-12-06T15:19:08.396000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 41, "domain": 36, "hostname": 87, "URL": 287, "FileHash-MD5": 11 }, "indicator_count": 462, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708a78e8b64037edbd6a88", "name": "json iPhone app data 30-3-2022 2/3", "description": "", "modified": "2023-12-06T14:51:36.819000", "created": "2023-12-06T14:51:36.819000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 5234, "hostname": 1530, "domain": 306, "URL": 1478, "FileHash-MD5": 46 }, "indicator_count": 8595, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708a730765663247bf0c34", "name": "my iphone app data json file 31-3-2022 3/3", "description": "", "modified": "2023-12-06T14:51:31.643000", "created": "2023-12-06T14:51:31.643000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 2636, "hostname": 657, "domain": 126, "URL": 277, "FileHash-MD5": 1 }, "indicator_count": 3698, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e5b7df6f60133e8fb50", "name": "Jeeng / Powerbox", "description": "", "modified": "2023-12-06T13:59:55.129000", "created": "2023-12-06T13:59:55.129000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 3, "FileHash-SHA256": 9072, "domain": 2500, "hostname": 3584, "URL": 13548, "FileHash-MD5": 197, "FileHash-SHA1": 162, "email": 19, "CIDR": 20, "SSLCertFingerprint": 2, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "641611d0a91ac7bea350a134", "name": "https://twitter.com/i/js_inst?native=true>=1123988539883040768", "description": "", "modified": "2023-03-18T19:32:32.781000", "created": "2023-03-18T19:32:32.781000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [ "https://twitter.com/i/js_inst?native=true>=1123988539883040768", "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m.." ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 25, "FileHash-SHA256": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 64, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6415faf5c3e448daae4bc54d", "name": "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "description": "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m..", "modified": "2023-03-18T17:55:01.496000", "created": "2023-03-18T17:55:01.496000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 24, "URL": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6415faf10b47af6ed0f3a350", "name": "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "description": "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m..", "modified": "2023-03-18T17:54:56.504000", "created": "2023-03-18T17:54:56.504000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 24, "URL": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63a4f2118fd54fabe98d215f", "name": "Twitter & CDN - Content Disribution Nightmare", "description": "I downloaded a .pdf from \"The Guardian\". Thought the URL was oddly long. Here we are.\n\nFollowed this file (launch-8316c2...min.js.twhash) to an obvious hackers twitter feed. No one @ Twitter seemed to care, can't get so much as a reply.\n\nI know there's something suspect going on here, I'm now finding more out about it.", "modified": "2023-02-12T17:58:12.488000", "created": "2022-12-23T00:10:57.685000", "tags": [ "XML", "Header", "mitm" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaaayson", "id": "217407", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_217407/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 5, "domain": 20, "hostname": 37 }, "indicator_count": 62, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "1162 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63c1cb43d0ebf6da70265159", "name": "PDfffiler?", "description": "Content Deception Network v2", "modified": "2023-02-12T17:57:55.301000", "created": "2023-01-13T21:21:07.056000", "tags": [ "strong", "pdfs", "pdf pdf", "finance legal", "get started", "pdffiller", "pdf api", "api pricing", "convert", "tax guide", "contact", "form", "powerful", "turn", "alliance", "solve", "accept", "communicating", "confuserex mod", "aspirecrypt", "detects", "beds protector", "ps2exe", "bsjb", "boxedapp", "cyaxsharp", "cyaxpng", "silent install", "smartassembly", "confuserex", "obfuscator", "aspack", "titan", "enigma", "vmprotect", "strings", "rlpack", "antiem", "antisb", "themida", "loader", "sality", "dnguard", "XML", "Header", "mitm" ], "references": [ "Jaaayson - Analyzing PDfffiler.com.json", "indicator_packed.yar", "undefined.csv", "https://www.pdffiller.com/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaaayson", "id": "217407", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_217407/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3, "URL": 3, "FileHash-SHA256": 21, "FileHash-MD5": 1, "YARA": 49, "domain": 4 }, "indicator_count": 81, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "1162 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63ac76354386f4d5056c5b70", "name": "Shanel", "description": "", "modified": "2023-01-27T00:03:27.242000", "created": "2022-12-28T17:00:37.263000", "tags": [ "XML", "Header", "mitm" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "green", "cloned_from": "63a4f2118fd54fabe98d215f", "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Shaenel11", "id": "219442", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 5, "domain": 11, "hostname": 28 }, "indicator_count": 44, "is_author": false, "is_subscribing": null, "subscriber_count": 6, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e41774491bb401deeb6e35", "name": "Twitter Widget Iframe - its astounding how corrupt twitter is for many and no-one seems to highlighting or addressing these issues", "description": "", "modified": "2022-08-28T00:01:38.268000", "created": "2022-07-29T17:23:00.402000", "tags": [ "script", "satellite", "promise", "date", "pageview", "click", "twitter", "image", "event", "button", "null", "accept", "void", "scroll", "iframe", "body", "twitter widget" ], "references": [ "https://platform.twitter.com/widgets/widget_iframe.dc05643fdb8d0e2b89e5cc3c1d26d1b5.html?origin=https%3A%2F%2Fbusiness.twitter.com", "widget_iframe.dc05643fdb8d0e2b89e5cc3c1d26d1b5.html", "many script present on business twitter com pg no acc access for me.txt", "Connect on Twitter.pdf", "from my twitter analytics using the unknown account id.pdf", "Events Manager new in twitter analytics.pdf", "twitter crashing only displays home tweets - i8nl script url from view source.pdf", "from unlogged in twitter https accounts.google.com gsi client- URL - 2ca11d6133b5a313fb740fbdb8c4f6a2a99482dd30044c82635e53f43e16d.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 87, "URL": 287, "domain": 36, "FileHash-SHA256": 41, "FileHash-MD5": 11 }, "indicator_count": 462, "is_author": false, "is_subscribing": null, "subscriber_count": 391, "modified_text": "1330 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "620c3b1f8af7ea0dcf2c1218", "name": "Jeeng / Powerbox", "description": "", "modified": "2022-06-12T22:01:23.105000", "created": "2022-02-15T23:45:35.234000", "tags": [ "Jeeng", "tim pool", "timcast" ], "references": [ "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 9072, "domain": 2500, "URL": 13548, "hostname": 3584, "FileHash-MD5": 197, "FileHash-SHA1": 162, "CVE": 3, "CIDR": 20, "SSLCertFingerprint": 2, "email": 19, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "1407 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6248580442d77854f497511d", "name": "my iphone app data json file 31-3-2022 3/3", "description": "absolute travesty and total corruption of my reality", "modified": "2022-05-02T00:00:42.176000", "created": "2022-04-02T14:04:52.844000", "tags": [ "appinitiated", "google llc", "akamai", "facebook", "twitter", "fastly", "amplitude", "bounce exchange", "liveramp", "index exchange", "baidu" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 657, "URL": 277, "CVE": 1, "domain": 126, "FileHash-SHA256": 2636, "FileHash-MD5": 1 }, "indicator_count": 3698, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1448 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624894564dad1a51f309f237", "name": "json iPhone app data 30-3-2022 2/3", "description": "", "modified": "2022-05-02T00:00:42.176000", "created": "2022-04-02T18:22:14.190000", "tags": [ "appinitiated", "google llc", "akamai", "twitter", "corporation", "fastly", "hubspot", "new relic", "teads", "luxenbourg", "facebook" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1478, "hostname": 1530, "domain": 306, "FileHash-SHA256": 5234, "CVE": 1, "FileHash-MD5": 46 }, "indicator_count": 8595, "is_author": false, "is_subscribing": null, "subscriber_count": 397, "modified_text": "1448 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "623d27e77204a6f159a2d198", "name": "cdn twitter", "description": "", "modified": "2022-03-25T02:45:40.496000", "created": "2022-03-25T02:24:39.384000", "tags": [ "typeerror", "regexp", "please use", "custom code", "sufeffxa0", "typeof symbol", "azaz09", "typeof e", "cookie", "info", "path", "error" ], "references": [ "https://cdn.cms-twdigitalassets.com/etc/clientlibs/dtm/careers-twitter/c411b4930511/a8cc55fef771/launch-8316c22d6c21.min.js.twhash.a.f.fa775873612ba6791823f846fc74ef73.js" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 88, "URL": 203, "domain": 19, "FileHash-MD5": 1, "FileHash-SHA256": 228 }, "indicator_count": 539, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1486 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "Jaaayson - Analyzing PDfffiler.com.json", "from unlogged in twitter https accounts.google.com gsi client- URL - 2ca11d6133b5a313fb740fbdb8c4f6a2a99482dd30044c82635e53f43e16d.pdf", "https://www.pdffiller.com/", "https://platform.twitter.com/widgets/widget_iframe.dc05643fdb8d0e2b89e5cc3c1d26d1b5.html?origin=https%3A%2F%2Fbusiness.twitter.com", "https://twitter.com/i/js_inst?native=true>=1123988539883040768", "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "from my twitter analytics using the unknown account id.pdf", "https://cdn.cms-twdigitalassets.com/etc/clientlibs/dtm/careers-twitter/c411b4930511/a8cc55fef771/launch-8316c22d6c21.min.js.twhash.a.f.fa775873612ba6791823f846fc74ef73.js", "many script present on business twitter com pg no acc access for me.txt", "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap", "indicator_packed.yar", "Connect on Twitter.pdf", "twitter crashing only displays home tweets - i8nl script url from view source.pdf", "undefined.csv", "widget_iframe.dc05643fdb8d0e2b89e5cc3c1d26d1b5.html", "Events Manager new in twitter analytics.pdf", "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m.." ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [ "Twitter" ], "unique_indicators": 39123 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/cms-twdigitalassets.com", "whois": "http://whois.domaintools.com/cms-twdigitalassets.com", "domain": "cms-twdigitalassets.com", "hostname": "cdn.cms-twdigitalassets.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 15, "pulses": [ { "id": "657090ec38f1bd5e40046c7b", "name": "Twitter Widget Iframe - its astounding how corrupt twitter is for many and no-one seems to highlighting or addressing these issues", "description": "", "modified": "2023-12-06T15:19:08.396000", "created": "2023-12-06T15:19:08.396000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 41, "domain": 36, "hostname": 87, "URL": 287, "FileHash-MD5": 11 }, "indicator_count": 462, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708a78e8b64037edbd6a88", "name": "json iPhone app data 30-3-2022 2/3", "description": "", "modified": "2023-12-06T14:51:36.819000", "created": "2023-12-06T14:51:36.819000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 5234, "hostname": 1530, "domain": 306, "URL": 1478, "FileHash-MD5": 46 }, "indicator_count": 8595, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708a730765663247bf0c34", "name": "my iphone app data json file 31-3-2022 3/3", "description": "", "modified": "2023-12-06T14:51:31.643000", "created": "2023-12-06T14:51:31.643000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 2636, "hostname": 657, "domain": 126, "URL": 277, "FileHash-MD5": 1 }, "indicator_count": 3698, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e5b7df6f60133e8fb50", "name": "Jeeng / Powerbox", "description": "", "modified": "2023-12-06T13:59:55.129000", "created": "2023-12-06T13:59:55.129000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 3, "FileHash-SHA256": 9072, "domain": 2500, "hostname": 3584, "URL": 13548, "FileHash-MD5": 197, "FileHash-SHA1": 162, "email": 19, "CIDR": 20, "SSLCertFingerprint": 2, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "641611d0a91ac7bea350a134", "name": "https://twitter.com/i/js_inst?native=true>=1123988539883040768", "description": "", "modified": "2023-03-18T19:32:32.781000", "created": "2023-03-18T19:32:32.781000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [ "https://twitter.com/i/js_inst?native=true>=1123988539883040768", "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m.." ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 25, "FileHash-SHA256": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 64, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6415faf5c3e448daae4bc54d", "name": "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "description": "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m..", "modified": "2023-03-18T17:55:01.496000", "created": "2023-03-18T17:55:01.496000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 24, "URL": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6415faf10b47af6ed0f3a350", "name": "https://business.twitter.com/en/help/troubleshooting/how-twitter-ads-work.html?ref=web-twc-ao-gbl-adsinfo&utm_source=twc&utm_medium=web&utm_campaign=ao&utm_content=adsinfo", "description": "Here is the full text of the report on the BBC News website, which was published on Thursday, 27 Apr 2017: \u00c2\u00a31.5m, $2.6m..", "modified": "2023-03-18T17:54:56.504000", "created": "2023-03-18T17:54:56.504000", "tags": [ "self", "response code", "path", "expiressat", "expires", "gmt server", "cachecontrol" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 24, "URL": 24, "hostname": 13, "domain": 1, "FileHash-MD5": 1 }, "indicator_count": 63, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "1128 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63a4f2118fd54fabe98d215f", "name": "Twitter & CDN - Content Disribution Nightmare", "description": "I downloaded a .pdf from \"The Guardian\". Thought the URL was oddly long. Here we are.\n\nFollowed this file (launch-8316c2...min.js.twhash) to an obvious hackers twitter feed. No one @ Twitter seemed to care, can't get so much as a reply.\n\nI know there's something suspect going on here, I'm now finding more out about it.", "modified": "2023-02-12T17:58:12.488000", "created": "2022-12-23T00:10:57.685000", "tags": [ "XML", "Header", "mitm" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaaayson", "id": "217407", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_217407/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 5, "domain": 20, "hostname": 37 }, "indicator_count": 62, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "1162 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63c1cb43d0ebf6da70265159", "name": "PDfffiler?", "description": "Content Deception Network v2", "modified": "2023-02-12T17:57:55.301000", "created": "2023-01-13T21:21:07.056000", "tags": [ "strong", "pdfs", "pdf pdf", "finance legal", "get started", "pdffiller", "pdf api", "api pricing", "convert", "tax guide", "contact", "form", "powerful", "turn", "alliance", "solve", "accept", "communicating", "confuserex mod", "aspirecrypt", "detects", "beds protector", "ps2exe", "bsjb", "boxedapp", "cyaxsharp", "cyaxpng", "silent install", "smartassembly", "confuserex", "obfuscator", "aspack", "titan", "enigma", "vmprotect", "strings", "rlpack", "antiem", "antisb", "themida", "loader", "sality", "dnguard", "XML", "Header", "mitm" ], "references": [ "Jaaayson - Analyzing PDfffiler.com.json", "indicator_packed.yar", "undefined.csv", "https://www.pdffiller.com/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaaayson", "id": "217407", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_217407/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 3, "URL": 3, "FileHash-SHA256": 21, "FileHash-MD5": 1, "YARA": 49, "domain": 4 }, "indicator_count": 81, "is_author": false, "is_subscribing": null, "subscriber_count": 29, "modified_text": "1162 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63ac76354386f4d5056c5b70", "name": "Shanel", "description": "", "modified": "2023-01-27T00:03:27.242000", "created": "2022-12-28T17:00:37.263000", "tags": [ "XML", "Header", "mitm" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Twitter" ], "TLP": "green", "cloned_from": "63a4f2118fd54fabe98d215f", "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Shaenel11", "id": "219442", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 5, "domain": 11, "hostname": 28 }, "indicator_count": 44, "is_author": false, "is_subscribing": null, "subscriber_count": 6, "modified_text": "1178 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://cdn.cms-twdigitalassets.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://cdn.cms-twdigitalassets.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776641532.9771595 }