{
  "type": "URL",
  "indicator": "https://cdn.syndication.twimg.com",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://cdn.syndication.twimg.com",
    "type": "url",
    "type_title": "URL",
    "validation": [
      {
        "source": "alexa",
        "message": "Alexa rank: #389",
        "name": "Listed on Alexa"
      },
      {
        "source": "akamai",
        "message": "Akamai rank: #161",
        "name": "Akamai Popular Domain"
      },
      {
        "source": "whitelist",
        "message": "Whitelisted domain twimg.com",
        "name": "Whitelisted domain"
      },
      {
        "source": "majestic",
        "message": "Whitelisted domain twimg.com",
        "name": "Whitelisted domain"
      }
    ],
    "base_indicator": {
      "id": 3156338990,
      "indicator": "https://cdn.syndication.twimg.com",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 10,
      "pulses": [
        {
          "id": "69e2c7b1853bf078af9a2866",
          "name": "CAPE Sandbox undefined",
          "description": "",
          "modified": "2026-05-18T01:09:16.309000",
          "created": "2026-04-17T23:52:17.056000",
          "tags": [
            "settings",
            "first counter",
            "default",
            "inprocserver32",
            "mbisslshort",
            "bearer",
            "mwdb",
            "bazaar",
            "sha3384",
            "ssdeep",
            "info",
            "bridge",
            "accept",
            "date",
            "agent",
            "shutdown",
            "root",
            "back"
          ],
          "references": [
            "https://vtbehaviour.commondatastorage.googleapis.com/1cf39e937e336af49cc01531f7bb7be83dfa289155a8437a51026a0e7d58f82c_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1776470073&Signature=Az6LmaO0Ym5MKTBxri4mRH8TsIMHTPjGhKf7HB%2BHbmAk8XD%2Fk7rkH45xODMAg%2BhghaLCCesdheOqanF%2Fewi4x9eJsFd5ly6xpLteVadZVaHMWjTIMnLWbsq%2BiCm0GrE2aA4MptNKtTU5y8axflSdKnYhLcMtkbBgD6NYhypoPDDDFLBEtQ67Cm8rAzGBr05lDzEzHscmIGtfJzBB65OiRVfgxRbhmOd3SBJDCfnjUb58A9YbwSwS"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1003",
              "name": "OS Credential Dumping",
              "display_name": "T1003 - OS Credential Dumping"
            },
            {
              "id": "T1005",
              "name": "Data from Local System",
              "display_name": "T1005 - Data from Local System"
            },
            {
              "id": "T1012",
              "name": "Query Registry",
              "display_name": "T1012 - Query Registry"
            },
            {
              "id": "T1014",
              "name": "Rootkit",
              "display_name": "T1014 - Rootkit"
            },
            {
              "id": "T1055",
              "name": "Process Injection",
              "display_name": "T1055 - Process Injection"
            },
            {
              "id": "T1071",
              "name": "Application Layer Protocol",
              "display_name": "T1071 - Application Layer Protocol"
            },
            {
              "id": "T1082",
              "name": "System Information Discovery",
              "display_name": "T1082 - System Information Discovery"
            },
            {
              "id": "T1112",
              "name": "Modify Registry",
              "display_name": "T1112 - Modify Registry"
            },
            {
              "id": "T1114",
              "name": "Email Collection",
              "display_name": "T1114 - Email Collection"
            },
            {
              "id": "T1203",
              "name": "Exploitation for Client Execution",
              "display_name": "T1203 - Exploitation for Client Execution"
            },
            {
              "id": "T1221",
              "name": "Template Injection",
              "display_name": "T1221 - Template Injection"
            },
            {
              "id": "T1485",
              "name": "Data Destruction",
              "display_name": "T1485 - Data Destruction"
            },
            {
              "id": "T1496",
              "name": "Resource Hijacking",
              "display_name": "T1496 - Resource Hijacking"
            },
            {
              "id": "T1542",
              "name": "Pre-OS Boot",
              "display_name": "T1542 - Pre-OS Boot"
            },
            {
              "id": "T1552",
              "name": "Unsecured Credentials",
              "display_name": "T1552 - Unsecured Credentials"
            },
            {
              "id": "T1562",
              "name": "Impair Defenses",
              "display_name": "T1562 - Impair Defenses"
            },
            {
              "id": "T1564",
              "name": "Hide Artifacts",
              "display_name": "T1564 - Hide Artifacts"
            },
            {
              "id": "T1573",
              "name": "Encrypted Channel",
              "display_name": "T1573 - Encrypted Channel"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 1056,
            "FileHash-SHA1": 848,
            "FileHash-SHA256": 880,
            "URL": 644,
            "hostname": 992,
            "domain": 302,
            "CIDR": 48,
            "email": 18,
            "CVE": 4
          },
          "indicator_count": 4792,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "15 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708eedef45abdffcb1a9ae",
          "name": "tracking more than space junk",
          "description": "",
          "modified": "2023-12-06T15:10:37.631000",
          "created": "2023-12-06T15:10:37.631000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 371,
            "domain": 139,
            "URL": 1034,
            "FileHash-SHA256": 113,
            "FileHash-MD5": 1
          },
          "indicator_count": 1658,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "909 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708ed8f7d4b5483117bb66",
          "name": "abuse.ch",
          "description": "",
          "modified": "2023-12-06T15:10:16.397000",
          "created": "2023-12-06T15:10:16.397000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 223,
            "domain": 383,
            "URL": 1639,
            "hostname": 560,
            "email": 1,
            "FileHash-MD5": 2
          },
          "indicator_count": 2808,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 114,
          "modified_text": "909 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708105cfc42f9740d5cdc1",
          "name": "case.house.gov",
          "description": "",
          "modified": "2023-12-06T14:11:17.482000",
          "created": "2023-12-06T14:11:17.482000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 689,
            "hostname": 64,
            "domain": 34,
            "URL": 141,
            "FileHash-MD5": 6,
            "FileHash-SHA1": 3
          },
          "indicator_count": 937,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "909 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65707fe17dfdfe16066d16de",
          "name": "Bexar.org",
          "description": "",
          "modified": "2023-12-06T14:06:25.800000",
          "created": "2023-12-06T14:06:25.800000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1735,
            "hostname": 1833,
            "domain": 1025,
            "URL": 4668,
            "email": 4,
            "FileHash-MD5": 133,
            "FileHash-SHA1": 6,
            "CIDR": 5
          },
          "indicator_count": 9409,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "909 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "628e4ddc014aff9f1d08aa71",
          "name": "tracking more than space junk",
          "description": "var Cc,Dc andEc, all of whom have the same name, can now be identified by their own code, if they want to use it, as a symbol or symbol.",
          "modified": "2022-05-25T15:40:12.368000",
          "created": "2022-05-25T15:40:12.368000",
          "tags": [
            "padre medium",
            "your angel",
            "discover",
            "angel",
            "get your",
            "c0c0ff",
            "gray",
            "e0e0e0",
            "f0f0f0",
            "verdana",
            "cccccc",
            "white",
            "ffffcc",
            "cc55ff",
            "ffffc0",
            "date",
            "error",
            "function",
            "typeof t",
            "array",
            "regexp",
            "twitter",
            "copyright",
            "msie",
            "1011",
            "false",
            "experiment",
            "blank",
            "this",
            "dispatcher",
            "button",
            "string",
            "twitter follow",
            "twitter tweet",
            "dnull",
            "msies",
            "number",
            "twopi",
            "typeof b",
            "pseudo",
            "child",
            "sufeffxa0",
            "class",
            "attr",
            "null",
            "void",
            "typeerror",
            "symbol",
            "array int8array",
            "argument",
            "rafunction",
            "iframe",
            "edge",
            "sxa0",
            "qafunction",
            "trident",
            "android"
          ],
          "references": [
            "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
            "https://apis.google.com/js/plusone.js",
            "https://code.jquery.com/jquery-1.12.0.min.js",
            "https://www.heavens-above.com/scripts/standard.min.js",
            "https://impl.onscroll.com/vet-takeover/2017/02/1487848477922.js",
            "https://impl.onscroll.com/engaged-refresh/2016/12/1481103489249.js",
            "https://platform.twitter.com/js/button.e878ad6ba18f0bdda53d6861059b0edd.js",
            "https://platform.twitter.com/widgets.js",
            "https://tags.onscroll.com/608ff96c-526d-43c0-92d3-5faa546bc80e/tag.min.js",
            "https://www.heavens-above.com/css/ha.css",
            "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5668297076217155&output=html&h=90&twa=1&slotname=5479771053&adk=1840069807&adf=1414646361&pi=t.ma~as.5479771053&w=396&fwrn=4&fwrnh=100&lmt=1653492727&format=396x90&url=https%3A%2F%2Fwww.heavens-above.com%2F&fwr=0&rh=90&rw=396&wgl=1&dt=1653492727387&bpp=10&bdt=19&idt=116&shv=r20220523&mjsv=m202205230101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D3d7fd49730f9716e-226e20b4a7d200c9%3AT%3D1653492408%3ART%3D1653492408%3AS%3DALNI_MY5x7-J93w8BBEbj3tqtpARwaFfjA&gpi",
            "https://www.google.com/recaptcha/api2/aframe"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1034,
            "hostname": 371,
            "FileHash-SHA256": 113,
            "domain": 139,
            "FileHash-MD5": 1
          },
          "indicator_count": 1658,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "1469 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "628d21a4558f3ccf49c07931",
          "name": "abuse.ch",
          "description": "Looking for wizard spider. Some domains have .ru and .su (Soviet Union)",
          "modified": "2022-05-24T18:19:16.027000",
          "created": "2022-05-24T18:19:16.027000",
          "tags": [
            "twitter follow",
            "button follow",
            "reduceright",
            "number",
            "string",
            "regexp",
            "error",
            "f420",
            "gmzsj4f05dr",
            "copyright",
            "deviceandgeo",
            "googlesignals",
            "json",
            "date",
            "void",
            "sxa0",
            "typeerror",
            "cbfunction",
            "deferred",
            "closure library",
            "b1342177279",
            "this",
            "infinity",
            "iframe",
            "trident",
            "show",
            "typeof e",
            "version",
            "hidden",
            "bootstrap",
            "click",
            "javascript",
            "clickdataapi",
            "collapse",
            "typeof t",
            "class",
            "attr",
            "pseudo",
            "child",
            "function",
            "typeof module",
            "button",
            "tridentmsieedge",
            "linux",
            "twttr",
            "area",
            "false",
            "twitter",
            "blank",
            "gvjsj",
            "gvjsyt",
            "license",
            "small batch",
            "apache license",
            "unless",
            "as is",
            "basis",
            "without",
            "warranties or",
            "null",
            "node",
            "dan vanderkam",
            "dygraph",
            "gc",
            "gvjs8s",
            "mmm dd",
            "infinity0",
            "gvjs6s",
            "mmm d",
            "axis",
            "cell",
            "column",
            "arial",
            "drawingframe",
            "select",
            "textarea",
            "line",
            "inside",
            "gvjsih",
            "rnrn",
            "roboto",
            "body",
            "template",
            "outside",
            "rial",
            "gvjsob",
            "azaz09",
            "array",
            "april",
            "june",
            "august",
            "february",
            "span",
            "android",
            "christ",
            "bbfunction",
            "twitter tweet",
            "font awesome",
            "free",
            "cc by",
            "sil ofl",
            "code",
            "mit license",
            "brands",
            "segoe ui",
            "emoji",
            "helvetica neue",
            "noto",
            "apple color",
            "symbol",
            "noto color",
            "typebutton",
            "sprymedia ltd",
            "datatables",
            "typeof f",
            "without any",
            "warranty",
            "merchantability",
            "fitness",
            "a particular",
            "adata",
            "first",
            "next",
            "typeof",
            "typeof n",
            "hide",
            "focusin",
            "focusout",
            "shown",
            "js foundation",
            "g5gqv3cj17n"
          ],
          "references": [
            "https://www.googletagmanager.com/gtag/js?id=G-5GQV3CJ17N",
            "https://bazaar.abuse.ch/js/jquery-3.5.1.min.js",
            "https://bazaar.abuse.ch/js/bootstrap.min.js",
            "https://bazaar.abuse.ch/js/datatables.min.js",
            "https://bazaar.abuse.ch/css/bootstrap.min.css",
            "https://bazaar.abuse.ch/css/all.min.css",
            "https://platform.twitter.com/js/button.3ccb64e61d4c01fae12cd2b0ed9b2bab.js",
            "https://www.gstatic.com/charts/50/loader.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_default_module.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_ui_module.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_graphics_module.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_corechart_module.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_fw_module.js",
            "https://www.gstatic.com/charts/50/third_party/dygraphs/dygraph-tickers-combined.js",
            "https://www.gstatic.com/charts/50/third_party/webfontloader/webfont.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_line_module.js",
            "https://www.gstatic.com/charts/50/js/jsapi_compiled_bar_module.js",
            "https://abuse.ch/js/twitter_widget.js",
            "https://abuse.ch/js/jquery-3.6.0.min.js",
            "https://abuse.ch/js/bootstrap.min.js",
            "https://abuse.ch/js/google-charts.js",
            "https://www.googletagmanager.com/gtag/js?id=G-MZSJ4F05DR",
            "https://platform.twitter.com/widgets/follow_button.f8c8d971a6ac545cf416e3c1ad4bbc65.en.html#dnt=false&id=twitter-widget-0&lang=en&screen_name=abuse_ch&show_count=false&show_screen_name=true&size=l&time=1653415551742"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "Gc",
              "display_name": "Gc",
              "target": null
            },
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 12,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 560,
            "URL": 1639,
            "FileHash-SHA256": 223,
            "domain": 383,
            "email": 1,
            "FileHash-MD5": 2
          },
          "indicator_count": 2808,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 73,
          "modified_text": "1470 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6228bd4ae80abc010a03b287",
          "name": "case.house.gov",
          "description": "",
          "modified": "2022-04-08T00:05:40.239000",
          "created": "2022-03-09T14:44:26.921000",
          "tags": [],
          "references": [
            "case.house.gov.pdf"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "Government"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 5,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Kailula4",
            "id": "131997",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 64,
            "URL": 142,
            "FileHash-SHA256": 689,
            "domain": 34,
            "FileHash-MD5": 6,
            "FileHash-SHA1": 3
          },
          "indicator_count": 938,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 408,
          "modified_text": "1516 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "621fff12d2c54f70fea90576",
          "name": "Bexar.org",
          "description": "",
          "modified": "2022-04-01T00:01:54.852000",
          "created": "2022-03-02T23:34:42.531000",
          "tags": [],
          "references": [
            "www.bexar.org - urlscan.io.pdf",
            "bexar api 4.pdf",
            "bexar api 8.pdf",
            "bexar 6.pdf",
            "bexar api 2.pdf",
            "bexar api 7.pdf",
            "bexar api 3.pdf",
            "bexar api 9.pdf",
            "bexar api 12.pdf",
            "bexar api 17.pdf",
            "bexar api 15.pdf",
            "bexar api 18.pdf",
            "bexar api 10.pdf",
            "bexar api 19.pdf",
            "bexar api 20.pdf",
            "bexar api 13.pdf",
            "bexar api 21.pdf",
            "bexar api 14.pdf",
            "bexar api 22.pdf",
            "bexar1.pdf",
            "bexar api5.pdf",
            "bexar2.pdf",
            "bexar3.pdf",
            "bexar.org 3.2.22.pdf",
            "bexar6.pdf",
            "bexar5.pdf",
            "bexar api_1.pdf",
            "bexar10.pdf",
            "bexar api.pdf",
            "bexar_v1df.pdf",
            "bexarv4df.pdf",
            "bexarv2df.pdf",
            "bexarv6df.pdf",
            "bexasv3df.pdf",
            "bexarv7df.pdf",
            "bear_v apidf.pdf"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "Government"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Kailula4",
            "id": "131997",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1833,
            "URL": 4669,
            "domain": 1025,
            "FileHash-SHA256": 1735,
            "email": 4,
            "FileHash-MD5": 133,
            "FileHash-SHA1": 6,
            "CIDR": 5
          },
          "indicator_count": 9410,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 406,
          "modified_text": "1523 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "623d27e77204a6f159a2d198",
          "name": "cdn twitter",
          "description": "",
          "modified": "2022-03-25T02:45:40.496000",
          "created": "2022-03-25T02:24:39.384000",
          "tags": [
            "typeerror",
            "regexp",
            "please use",
            "custom code",
            "sufeffxa0",
            "typeof symbol",
            "azaz09",
            "typeof e",
            "cookie",
            "info",
            "path",
            "error"
          ],
          "references": [
            "https://cdn.cms-twdigitalassets.com/etc/clientlibs/dtm/careers-twitter/c411b4930511/a8cc55fef771/launch-8316c22d6c21.min.js.twhash.a.f.fa775873612ba6791823f846fc74ef73.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "dorkingbeauty1",
            "id": "80137",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 88,
            "URL": 203,
            "domain": 19,
            "FileHash-MD5": 1,
            "FileHash-SHA256": 228
          },
          "indicator_count": 539,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 393,
          "modified_text": "1530 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://bazaar.abuse.ch/css/all.min.css",
        "https://code.jquery.com/jquery-1.12.0.min.js",
        "https://platform.twitter.com/js/button.e878ad6ba18f0bdda53d6861059b0edd.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_bar_module.js",
        "bexar api 19.pdf",
        "bexar.org 3.2.22.pdf",
        "https://abuse.ch/js/google-charts.js",
        "bexar10.pdf",
        "bexar1.pdf",
        "https://abuse.ch/js/jquery-3.6.0.min.js",
        "bexar6.pdf",
        "https://bazaar.abuse.ch/css/bootstrap.min.css",
        "bexar api5.pdf",
        "https://bazaar.abuse.ch/js/bootstrap.min.js",
        "www.bexar.org - urlscan.io.pdf",
        "https://www.google.com/recaptcha/api2/aframe",
        "bexar api_1.pdf",
        "bexar api 3.pdf",
        "bexarv2df.pdf",
        "bexar api 2.pdf",
        "bexar api 15.pdf",
        "https://www.heavens-above.com/css/ha.css",
        "https://abuse.ch/js/bootstrap.min.js",
        "https://www.gstatic.com/charts/50/third_party/webfontloader/webfont.js",
        "bear_v apidf.pdf",
        "bexar2.pdf",
        "https://www.gstatic.com/charts/50/third_party/dygraphs/dygraph-tickers-combined.js",
        "bexarv4df.pdf",
        "https://www.googletagmanager.com/gtag/js?id=G-5GQV3CJ17N",
        "bexar 6.pdf",
        "bexar api 20.pdf",
        "https://bazaar.abuse.ch/js/datatables.min.js",
        "https://tags.onscroll.com/608ff96c-526d-43c0-92d3-5faa546bc80e/tag.min.js",
        "bexar_v1df.pdf",
        "https://vtbehaviour.commondatastorage.googleapis.com/1cf39e937e336af49cc01531f7bb7be83dfa289155a8437a51026a0e7d58f82c_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1776470073&Signature=Az6LmaO0Ym5MKTBxri4mRH8TsIMHTPjGhKf7HB%2BHbmAk8XD%2Fk7rkH45xODMAg%2BhghaLCCesdheOqanF%2Fewi4x9eJsFd5ly6xpLteVadZVaHMWjTIMnLWbsq%2BiCm0GrE2aA4MptNKtTU5y8axflSdKnYhLcMtkbBgD6NYhypoPDDDFLBEtQ67Cm8rAzGBr05lDzEzHscmIGtfJzBB65OiRVfgxRbhmOd3SBJDCfnjUb58A9YbwSwS",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_fw_module.js",
        "https://www.googletagmanager.com/gtag/js?id=G-MZSJ4F05DR",
        "bexar api 8.pdf",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_line_module.js",
        "bexar api 4.pdf",
        "bexar3.pdf",
        "bexarv6df.pdf",
        "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5668297076217155&output=html&h=90&twa=1&slotname=5479771053&adk=1840069807&adf=1414646361&pi=t.ma~as.5479771053&w=396&fwrn=4&fwrnh=100&lmt=1653492727&format=396x90&url=https%3A%2F%2Fwww.heavens-above.com%2F&fwr=0&rh=90&rw=396&wgl=1&dt=1653492727387&bpp=10&bdt=19&idt=116&shv=r20220523&mjsv=m202205230101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D3d7fd49730f9716e-226e20b4a7d200c9%3AT%3D1653492408%3ART%3D1653492408%3AS%3DALNI_MY5x7-J93w8BBEbj3tqtpARwaFfjA&gpi",
        "case.house.gov.pdf",
        "bexar5.pdf",
        "bexar api.pdf",
        "https://platform.twitter.com/widgets/follow_button.f8c8d971a6ac545cf416e3c1ad4bbc65.en.html#dnt=false&id=twitter-widget-0&lang=en&screen_name=abuse_ch&show_count=false&show_screen_name=true&size=l&time=1653415551742",
        "bexar api 7.pdf",
        "https://www.gstatic.com/charts/50/loader.js",
        "bexar api 17.pdf",
        "https://impl.onscroll.com/engaged-refresh/2016/12/1481103489249.js",
        "https://abuse.ch/js/twitter_widget.js",
        "bexar api 12.pdf",
        "bexarv7df.pdf",
        "bexar api 22.pdf",
        "bexar api 9.pdf",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_graphics_module.js",
        "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_ui_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_default_module.js",
        "https://platform.twitter.com/widgets.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_corechart_module.js",
        "https://platform.twitter.com/js/button.3ccb64e61d4c01fae12cd2b0ed9b2bab.js",
        "bexar api 18.pdf",
        "bexar api 10.pdf",
        "bexar api 13.pdf",
        "bexar api 14.pdf",
        "bexasv3df.pdf",
        "https://cdn.cms-twdigitalassets.com/etc/clientlibs/dtm/careers-twitter/c411b4930511/a8cc55fef771/launch-8316c22d6c21.min.js.twhash.a.f.fa775873612ba6791823f846fc74ef73.js",
        "https://apis.google.com/js/plusone.js",
        "https://www.heavens-above.com/scripts/standard.min.js",
        "https://impl.onscroll.com/vet-takeover/2017/02/1487848477922.js",
        "bexar api 21.pdf",
        "https://bazaar.abuse.ch/js/jquery-3.5.1.min.js"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Gc",
            "Reduceright"
          ],
          "industries": [
            "Government"
          ],
          "unique_indicators": 14105
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/twimg.com",
    "whois": "http://whois.domaintools.com/twimg.com",
    "domain": "twimg.com",
    "hostname": "cdn.syndication.twimg.com"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 10,
  "pulses": [
    {
      "id": "69e2c7b1853bf078af9a2866",
      "name": "CAPE Sandbox undefined",
      "description": "",
      "modified": "2026-05-18T01:09:16.309000",
      "created": "2026-04-17T23:52:17.056000",
      "tags": [
        "settings",
        "first counter",
        "default",
        "inprocserver32",
        "mbisslshort",
        "bearer",
        "mwdb",
        "bazaar",
        "sha3384",
        "ssdeep",
        "info",
        "bridge",
        "accept",
        "date",
        "agent",
        "shutdown",
        "root",
        "back"
      ],
      "references": [
        "https://vtbehaviour.commondatastorage.googleapis.com/1cf39e937e336af49cc01531f7bb7be83dfa289155a8437a51026a0e7d58f82c_CAPE%20Sandbox.html?GoogleAccessId=758681729565-rc7fgq07icj8c9dm2gi34a4cckv235v1@developer.gserviceaccount.com&Expires=1776470073&Signature=Az6LmaO0Ym5MKTBxri4mRH8TsIMHTPjGhKf7HB%2BHbmAk8XD%2Fk7rkH45xODMAg%2BhghaLCCesdheOqanF%2Fewi4x9eJsFd5ly6xpLteVadZVaHMWjTIMnLWbsq%2BiCm0GrE2aA4MptNKtTU5y8axflSdKnYhLcMtkbBgD6NYhypoPDDDFLBEtQ67Cm8rAzGBr05lDzEzHscmIGtfJzBB65OiRVfgxRbhmOd3SBJDCfnjUb58A9YbwSwS"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1003",
          "name": "OS Credential Dumping",
          "display_name": "T1003 - OS Credential Dumping"
        },
        {
          "id": "T1005",
          "name": "Data from Local System",
          "display_name": "T1005 - Data from Local System"
        },
        {
          "id": "T1012",
          "name": "Query Registry",
          "display_name": "T1012 - Query Registry"
        },
        {
          "id": "T1014",
          "name": "Rootkit",
          "display_name": "T1014 - Rootkit"
        },
        {
          "id": "T1055",
          "name": "Process Injection",
          "display_name": "T1055 - Process Injection"
        },
        {
          "id": "T1071",
          "name": "Application Layer Protocol",
          "display_name": "T1071 - Application Layer Protocol"
        },
        {
          "id": "T1082",
          "name": "System Information Discovery",
          "display_name": "T1082 - System Information Discovery"
        },
        {
          "id": "T1112",
          "name": "Modify Registry",
          "display_name": "T1112 - Modify Registry"
        },
        {
          "id": "T1114",
          "name": "Email Collection",
          "display_name": "T1114 - Email Collection"
        },
        {
          "id": "T1203",
          "name": "Exploitation for Client Execution",
          "display_name": "T1203 - Exploitation for Client Execution"
        },
        {
          "id": "T1221",
          "name": "Template Injection",
          "display_name": "T1221 - Template Injection"
        },
        {
          "id": "T1485",
          "name": "Data Destruction",
          "display_name": "T1485 - Data Destruction"
        },
        {
          "id": "T1496",
          "name": "Resource Hijacking",
          "display_name": "T1496 - Resource Hijacking"
        },
        {
          "id": "T1542",
          "name": "Pre-OS Boot",
          "display_name": "T1542 - Pre-OS Boot"
        },
        {
          "id": "T1552",
          "name": "Unsecured Credentials",
          "display_name": "T1552 - Unsecured Credentials"
        },
        {
          "id": "T1562",
          "name": "Impair Defenses",
          "display_name": "T1562 - Impair Defenses"
        },
        {
          "id": "T1564",
          "name": "Hide Artifacts",
          "display_name": "T1564 - Hide Artifacts"
        },
        {
          "id": "T1573",
          "name": "Encrypted Channel",
          "display_name": "T1573 - Encrypted Channel"
        }
      ],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 1056,
        "FileHash-SHA1": 848,
        "FileHash-SHA256": 880,
        "URL": 644,
        "hostname": 992,
        "domain": 302,
        "CIDR": 48,
        "email": 18,
        "CVE": 4
      },
      "indicator_count": 4792,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "15 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708eedef45abdffcb1a9ae",
      "name": "tracking more than space junk",
      "description": "",
      "modified": "2023-12-06T15:10:37.631000",
      "created": "2023-12-06T15:10:37.631000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 371,
        "domain": 139,
        "URL": 1034,
        "FileHash-SHA256": 113,
        "FileHash-MD5": 1
      },
      "indicator_count": 1658,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "909 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708ed8f7d4b5483117bb66",
      "name": "abuse.ch",
      "description": "",
      "modified": "2023-12-06T15:10:16.397000",
      "created": "2023-12-06T15:10:16.397000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 223,
        "domain": 383,
        "URL": 1639,
        "hostname": 560,
        "email": 1,
        "FileHash-MD5": 2
      },
      "indicator_count": 2808,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 114,
      "modified_text": "909 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708105cfc42f9740d5cdc1",
      "name": "case.house.gov",
      "description": "",
      "modified": "2023-12-06T14:11:17.482000",
      "created": "2023-12-06T14:11:17.482000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 689,
        "hostname": 64,
        "domain": 34,
        "URL": 141,
        "FileHash-MD5": 6,
        "FileHash-SHA1": 3
      },
      "indicator_count": 937,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "909 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65707fe17dfdfe16066d16de",
      "name": "Bexar.org",
      "description": "",
      "modified": "2023-12-06T14:06:25.800000",
      "created": "2023-12-06T14:06:25.800000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1735,
        "hostname": 1833,
        "domain": 1025,
        "URL": 4668,
        "email": 4,
        "FileHash-MD5": 133,
        "FileHash-SHA1": 6,
        "CIDR": 5
      },
      "indicator_count": 9409,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 110,
      "modified_text": "909 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "628e4ddc014aff9f1d08aa71",
      "name": "tracking more than space junk",
      "description": "var Cc,Dc andEc, all of whom have the same name, can now be identified by their own code, if they want to use it, as a symbol or symbol.",
      "modified": "2022-05-25T15:40:12.368000",
      "created": "2022-05-25T15:40:12.368000",
      "tags": [
        "padre medium",
        "your angel",
        "discover",
        "angel",
        "get your",
        "c0c0ff",
        "gray",
        "e0e0e0",
        "f0f0f0",
        "verdana",
        "cccccc",
        "white",
        "ffffcc",
        "cc55ff",
        "ffffc0",
        "date",
        "error",
        "function",
        "typeof t",
        "array",
        "regexp",
        "twitter",
        "copyright",
        "msie",
        "1011",
        "false",
        "experiment",
        "blank",
        "this",
        "dispatcher",
        "button",
        "string",
        "twitter follow",
        "twitter tweet",
        "dnull",
        "msies",
        "number",
        "twopi",
        "typeof b",
        "pseudo",
        "child",
        "sufeffxa0",
        "class",
        "attr",
        "null",
        "void",
        "typeerror",
        "symbol",
        "array int8array",
        "argument",
        "rafunction",
        "iframe",
        "edge",
        "sxa0",
        "qafunction",
        "trident",
        "android"
      ],
      "references": [
        "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
        "https://apis.google.com/js/plusone.js",
        "https://code.jquery.com/jquery-1.12.0.min.js",
        "https://www.heavens-above.com/scripts/standard.min.js",
        "https://impl.onscroll.com/vet-takeover/2017/02/1487848477922.js",
        "https://impl.onscroll.com/engaged-refresh/2016/12/1481103489249.js",
        "https://platform.twitter.com/js/button.e878ad6ba18f0bdda53d6861059b0edd.js",
        "https://platform.twitter.com/widgets.js",
        "https://tags.onscroll.com/608ff96c-526d-43c0-92d3-5faa546bc80e/tag.min.js",
        "https://www.heavens-above.com/css/ha.css",
        "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5668297076217155&output=html&h=90&twa=1&slotname=5479771053&adk=1840069807&adf=1414646361&pi=t.ma~as.5479771053&w=396&fwrn=4&fwrnh=100&lmt=1653492727&format=396x90&url=https%3A%2F%2Fwww.heavens-above.com%2F&fwr=0&rh=90&rw=396&wgl=1&dt=1653492727387&bpp=10&bdt=19&idt=116&shv=r20220523&mjsv=m202205230101&ptt=5&saldr=sa&abxe=1&cookie=ID%3D3d7fd49730f9716e-226e20b4a7d200c9%3AT%3D1653492408%3ART%3D1653492408%3AS%3DALNI_MY5x7-J93w8BBEbj3tqtpARwaFfjA&gpi",
        "https://www.google.com/recaptcha/api2/aframe"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 10,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1034,
        "hostname": 371,
        "FileHash-SHA256": 113,
        "domain": 139,
        "FileHash-MD5": 1
      },
      "indicator_count": 1658,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "1469 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "628d21a4558f3ccf49c07931",
      "name": "abuse.ch",
      "description": "Looking for wizard spider. Some domains have .ru and .su (Soviet Union)",
      "modified": "2022-05-24T18:19:16.027000",
      "created": "2022-05-24T18:19:16.027000",
      "tags": [
        "twitter follow",
        "button follow",
        "reduceright",
        "number",
        "string",
        "regexp",
        "error",
        "f420",
        "gmzsj4f05dr",
        "copyright",
        "deviceandgeo",
        "googlesignals",
        "json",
        "date",
        "void",
        "sxa0",
        "typeerror",
        "cbfunction",
        "deferred",
        "closure library",
        "b1342177279",
        "this",
        "infinity",
        "iframe",
        "trident",
        "show",
        "typeof e",
        "version",
        "hidden",
        "bootstrap",
        "click",
        "javascript",
        "clickdataapi",
        "collapse",
        "typeof t",
        "class",
        "attr",
        "pseudo",
        "child",
        "function",
        "typeof module",
        "button",
        "tridentmsieedge",
        "linux",
        "twttr",
        "area",
        "false",
        "twitter",
        "blank",
        "gvjsj",
        "gvjsyt",
        "license",
        "small batch",
        "apache license",
        "unless",
        "as is",
        "basis",
        "without",
        "warranties or",
        "null",
        "node",
        "dan vanderkam",
        "dygraph",
        "gc",
        "gvjs8s",
        "mmm dd",
        "infinity0",
        "gvjs6s",
        "mmm d",
        "axis",
        "cell",
        "column",
        "arial",
        "drawingframe",
        "select",
        "textarea",
        "line",
        "inside",
        "gvjsih",
        "rnrn",
        "roboto",
        "body",
        "template",
        "outside",
        "rial",
        "gvjsob",
        "azaz09",
        "array",
        "april",
        "june",
        "august",
        "february",
        "span",
        "android",
        "christ",
        "bbfunction",
        "twitter tweet",
        "font awesome",
        "free",
        "cc by",
        "sil ofl",
        "code",
        "mit license",
        "brands",
        "segoe ui",
        "emoji",
        "helvetica neue",
        "noto",
        "apple color",
        "symbol",
        "noto color",
        "typebutton",
        "sprymedia ltd",
        "datatables",
        "typeof f",
        "without any",
        "warranty",
        "merchantability",
        "fitness",
        "a particular",
        "adata",
        "first",
        "next",
        "typeof",
        "typeof n",
        "hide",
        "focusin",
        "focusout",
        "shown",
        "js foundation",
        "g5gqv3cj17n"
      ],
      "references": [
        "https://www.googletagmanager.com/gtag/js?id=G-5GQV3CJ17N",
        "https://bazaar.abuse.ch/js/jquery-3.5.1.min.js",
        "https://bazaar.abuse.ch/js/bootstrap.min.js",
        "https://bazaar.abuse.ch/js/datatables.min.js",
        "https://bazaar.abuse.ch/css/bootstrap.min.css",
        "https://bazaar.abuse.ch/css/all.min.css",
        "https://platform.twitter.com/js/button.3ccb64e61d4c01fae12cd2b0ed9b2bab.js",
        "https://www.gstatic.com/charts/50/loader.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_default_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_ui_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_graphics_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_corechart_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_fw_module.js",
        "https://www.gstatic.com/charts/50/third_party/dygraphs/dygraph-tickers-combined.js",
        "https://www.gstatic.com/charts/50/third_party/webfontloader/webfont.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_line_module.js",
        "https://www.gstatic.com/charts/50/js/jsapi_compiled_bar_module.js",
        "https://abuse.ch/js/twitter_widget.js",
        "https://abuse.ch/js/jquery-3.6.0.min.js",
        "https://abuse.ch/js/bootstrap.min.js",
        "https://abuse.ch/js/google-charts.js",
        "https://www.googletagmanager.com/gtag/js?id=G-MZSJ4F05DR",
        "https://platform.twitter.com/widgets/follow_button.f8c8d971a6ac545cf416e3c1ad4bbc65.en.html#dnt=false&id=twitter-widget-0&lang=en&screen_name=abuse_ch&show_count=false&show_screen_name=true&size=l&time=1653415551742"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "Gc",
          "display_name": "Gc",
          "target": null
        },
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 12,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 560,
        "URL": 1639,
        "FileHash-SHA256": 223,
        "domain": 383,
        "email": 1,
        "FileHash-MD5": 2
      },
      "indicator_count": 2808,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 73,
      "modified_text": "1470 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6228bd4ae80abc010a03b287",
      "name": "case.house.gov",
      "description": "",
      "modified": "2022-04-08T00:05:40.239000",
      "created": "2022-03-09T14:44:26.921000",
      "tags": [],
      "references": [
        "case.house.gov.pdf"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "Government"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 5,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Kailula4",
        "id": "131997",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 64,
        "URL": 142,
        "FileHash-SHA256": 689,
        "domain": 34,
        "FileHash-MD5": 6,
        "FileHash-SHA1": 3
      },
      "indicator_count": 938,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 408,
      "modified_text": "1516 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "621fff12d2c54f70fea90576",
      "name": "Bexar.org",
      "description": "",
      "modified": "2022-04-01T00:01:54.852000",
      "created": "2022-03-02T23:34:42.531000",
      "tags": [],
      "references": [
        "www.bexar.org - urlscan.io.pdf",
        "bexar api 4.pdf",
        "bexar api 8.pdf",
        "bexar 6.pdf",
        "bexar api 2.pdf",
        "bexar api 7.pdf",
        "bexar api 3.pdf",
        "bexar api 9.pdf",
        "bexar api 12.pdf",
        "bexar api 17.pdf",
        "bexar api 15.pdf",
        "bexar api 18.pdf",
        "bexar api 10.pdf",
        "bexar api 19.pdf",
        "bexar api 20.pdf",
        "bexar api 13.pdf",
        "bexar api 21.pdf",
        "bexar api 14.pdf",
        "bexar api 22.pdf",
        "bexar1.pdf",
        "bexar api5.pdf",
        "bexar2.pdf",
        "bexar3.pdf",
        "bexar.org 3.2.22.pdf",
        "bexar6.pdf",
        "bexar5.pdf",
        "bexar api_1.pdf",
        "bexar10.pdf",
        "bexar api.pdf",
        "bexar_v1df.pdf",
        "bexarv4df.pdf",
        "bexarv2df.pdf",
        "bexarv6df.pdf",
        "bexasv3df.pdf",
        "bexarv7df.pdf",
        "bear_v apidf.pdf"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "Government"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 7,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Kailula4",
        "id": "131997",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 1833,
        "URL": 4669,
        "domain": 1025,
        "FileHash-SHA256": 1735,
        "email": 4,
        "FileHash-MD5": 133,
        "FileHash-SHA1": 6,
        "CIDR": 5
      },
      "indicator_count": 9410,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 406,
      "modified_text": "1523 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "623d27e77204a6f159a2d198",
      "name": "cdn twitter",
      "description": "",
      "modified": "2022-03-25T02:45:40.496000",
      "created": "2022-03-25T02:24:39.384000",
      "tags": [
        "typeerror",
        "regexp",
        "please use",
        "custom code",
        "sufeffxa0",
        "typeof symbol",
        "azaz09",
        "typeof e",
        "cookie",
        "info",
        "path",
        "error"
      ],
      "references": [
        "https://cdn.cms-twdigitalassets.com/etc/clientlibs/dtm/careers-twitter/c411b4930511/a8cc55fef771/launch-8316c22d6c21.min.js.twhash.a.f.fa775873612ba6791823f846fc74ef73.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "dorkingbeauty1",
        "id": "80137",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 88,
        "URL": 203,
        "domain": 19,
        "FileHash-MD5": 1,
        "FileHash-SHA256": 228
      },
      "indicator_count": 539,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 393,
      "modified_text": "1530 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://cdn.syndication.twimg.com",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://cdn.syndication.twimg.com",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780442950.420452
}