{ "type": "URL", "indicator": "https://docs.makeidentitysafe.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://docs.makeidentitysafe.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 2798162032, "indicator": "https://docs.makeidentitysafe.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 12, "pulses": [ { "id": "65707eab85e2a9a917487148", "name": "Centergate.com", "description": "", "modified": "2023-12-06T14:01:15.794000", "created": "2023-12-06T14:01:15.794000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "hostname": 810, "FileHash-SHA256": 1327, "URL": 2177, "domain": 453, "FileHash-MD5": 1, "email": 1, "FileHash-SHA1": 1 }, "indicator_count": 4772, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707ea9c0f2231d524c00ae", "name": "www.zetalytics.com", "description": "", "modified": "2023-12-06T14:01:12.637000", "created": "2023-12-06T14:01:12.637000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 747, "hostname": 368, "domain": 116, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e5b7df6f60133e8fb50", "name": "Jeeng / Powerbox", "description": "", "modified": "2023-12-06T13:59:55.129000", "created": "2023-12-06T13:59:55.129000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 3, "FileHash-SHA256": 9072, "domain": 2500, "hostname": 3584, "URL": 13548, "FileHash-MD5": 197, "FileHash-SHA1": 162, "email": 19, "CIDR": 20, "SSLCertFingerprint": 2, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e3f5ecd5ba2eb187178", "name": "Crowdstrike - ewe", "description": "", "modified": "2023-12-06T13:59:27.940000", "created": "2023-12-06T13:59:27.940000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1822, "domain": 2744, "hostname": 3486, "URL": 15692, "FileHash-MD5": 31, "FileHash-SHA1": 1 }, "indicator_count": 23776, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707d9d7e16e010e95b3bcf", "name": "OnVUE-3.78.105.zip", "description": "", "modified": "2023-12-06T13:56:45.319000", "created": "2023-12-06T13:56:45.319000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 471, "domain": 82, "hostname": 304, "URL": 567 }, "indicator_count": 1424, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707bf3841fe9f857870735", "name": "Jack Posobiec\u2019s Pay-share.com Bonanza", "description": "", "modified": "2023-12-06T13:49:39.465000", "created": "2023-12-06T13:49:39.465000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3887, "hostname": 1423, "domain": 675, "FileHash-SHA256": 2044, "FileHash-MD5": 245, "FileHash-SHA1": 212, "CIDR": 18, "email": 10, "CVE": 3, "SSLCertFingerprint": 6 }, "indicator_count": 8523, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "620c3b1f8af7ea0dcf2c1218", "name": "Jeeng / Powerbox", "description": "", "modified": "2022-06-12T22:01:23.105000", "created": "2022-02-15T23:45:35.234000", "tags": [ "Jeeng", "tim pool", "timcast" ], "references": [ "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 9072, "domain": 2500, "URL": 13548, "hostname": 3584, "FileHash-MD5": 197, "FileHash-SHA1": 162, "CVE": 3, "CIDR": 20, "SSLCertFingerprint": 2, "email": 19, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "1406 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "60e6c1075f3f5592cb7d80d2", "name": "Jack Posobiec\u2019s Pay-share.com Bonanza", "description": "Looks like a dead site, talks like a dead site, walks like a dead site, isn\u2019t a dead nor parked site.", "modified": "2022-06-09T00:00:13.607000", "created": "2021-07-08T09:10:31.087000", "tags": [ "enable javascript", "browser", "internet explorer", "firefox", "chrome", "safari", "opera", "codes fire", "stick tricks", "coupons knoji", "discount codes", "best uk", "hosting omega", "media hoekbank", "leasen", "writers per", "hour frskrat" ], "references": [ "https://www.pay-share.com/", "http://www.enable-javascript.com/" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3887, "hostname": 1423, "FileHash-SHA256": 2044, "domain": 675, "FileHash-MD5": 245, "FileHash-SHA1": 212, "CIDR": 18, "email": 10, "CVE": 3, "SSLCertFingerprint": 6 }, "indicator_count": 8523, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "1410 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211ee3ffa661501f2caa803", "name": "Centergate.com", "description": "", "modified": "2022-03-25T00:03:52.440000", "created": "2022-02-20T07:31:11.659000", "tags": [ "whois", "whois record", "redacted for", "date", "tucows domains", "server", "privacy tech", "tucows", "iana id", "registrar abuse", "registrar whois", "code", "win32 exe", "detections type", "name", "dns replication", "subdomains", "communicating", "files referring", "domain status", "ranks rank", "value ingestion", "time cisco", "umbrella", "utc statvoo", "utc alexa", "dns records", "record type", "submission", "links community", "history first", "analysis", "utc http", "response final", "url http", "ip address", "status code", "body length" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2177, "FileHash-SHA256": 1327, "hostname": 810, "domain": 453, "CVE": 2, "email": 1, "FileHash-SHA1": 1, "FileHash-MD5": 1 }, "indicator_count": 4772, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1486 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211eaee20bc9b0534df6133", "name": "www.zetalytics.com", "description": "", "modified": "2022-03-24T00:00:00.271000", "created": "2022-02-20T07:17:02.872000", "tags": [ "ssl certificate", "whois record", "whois", "key identifier", "x509v3 subject", "v3 serial", "number", "issuer", "cus cngo", "daddy secure", "g2 lscottsdale", "ouhttp", "validity", "info", "date", "tucows domains", "server", "algorithm", "iana id", "registrar url", "status", "registrar whois", "rank value", "ingestion time", "statvoo", "utc alexa", "utc cisco", "umbrella", "submission", "history first", "analysis", "utc http", "response final", "url https", "ip address", "status code", "body length", "kb body", "tools", "Ransomware", "POSSIBLE ETERNAL BLUE" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "China", "Australia", "Belgium" ], "malware_families": [ { "id": "TEL:NoPowShell!msil", "display_name": "TEL:NoPowShell!msil", "target": null }, { "id": "PWS:Win32/QQPass.GP", "display_name": "PWS:Win32/QQPass.GP", "target": "/malware/PWS:Win32/QQPass.GP" }, { "id": "Win.Malware.Razy-6783523-0", "display_name": "Win.Malware.Razy-6783523-0", "target": null }, { "id": "Win.Trojan.Pasta-827", "display_name": "Win.Trojan.Pasta-827", "target": null }, { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" }, { "id": "Win.Malware.Zusy-6840460-0", "display_name": "Win.Malware.Zusy-6840460-0", "target": null }, { "id": "Win.Trojan.Agent-1201096", "display_name": "Win.Trojan.Agent-1201096", "target": null }, { "id": "Win32:Dropper-GUP\\ [Drp]", "display_name": "Win32:Dropper-GUP\\ [Drp]", "target": null }, { "id": "Worm:Win32/Macoute", "display_name": "Worm:Win32/Macoute", "target": "/malware/Worm:Win32/Macoute" }, { "id": "Win32:Sobig-H\\ [Wrm]", "display_name": "Win32:Sobig-H\\ [Wrm]", "target": null }, { "id": "Win.Worm.Sobig-5", "display_name": "Win.Worm.Sobig-5", "target": null }, { "id": "Backdoor:Win32/Berbew", "display_name": "Backdoor:Win32/Berbew", "target": "/malware/Backdoor:Win32/Berbew" }, { "id": "Win.Trojan.Crypted-30", "display_name": "Win.Trojan.Crypted-30", "target": null }, { "id": "#VirTool:Win32/Obfuscator.ADB", "display_name": "#VirTool:Win32/Obfuscator.ADB", "target": "/malware/#VirTool:Win32/Obfuscator.ADB" }, { "id": "Win.Trojan.Kazy-6878", "display_name": "Win.Trojan.Kazy-6878", "target": null }, { "id": "Win32:VB-FBX", "display_name": "Win32:VB-FBX", "target": null }, { "id": "Win.Worm.Pajetbin-6726648-0", "display_name": "Win.Worm.Pajetbin-6726648-0", "target": null }, { "id": "Trojan:Win32/Vindor.B", "display_name": "Trojan:Win32/Vindor.B", "target": "/malware/Trojan:Win32/Vindor.B" }, { "id": "MSIL:BrowseFox-FC\\ [Adw]", "display_name": "MSIL:BrowseFox-FC\\ [Adw]", "target": null }, { "id": "Win.Ransomware.Teslacrypt-7082109-1", "display_name": "Win.Ransomware.Teslacrypt-7082109-1", "target": null }, { "id": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "display_name": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "target": null }, { "id": "Win32:Papras-AX\\ [Trj]", "display_name": "Win32:Papras-AX\\ [Trj]", "target": null }, { "id": "ALF:HSTR:MITM:UtilAds", "display_name": "ALF:HSTR:MITM:UtilAds", "target": null }, { "id": "Win.Malware.Autoit-6753917-0", "display_name": "Win.Malware.Autoit-6753917-0", "target": null } ], "attack_ids": [], "industries": [ "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 368, "URL": 747, "domain": 116, "FileHash-SHA256": 632, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 409, "modified_text": "1487 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "620c170de055c19dbfaf50d4", "name": "Crowdstrike - ewe", "description": "", "modified": "2022-03-17T00:01:08.614000", "created": "2022-02-15T21:11:41.916000", "tags": [ "whois record", "whois", "ssl certificate" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 15692, "domain": 2744, "hostname": 3486, "FileHash-SHA256": 1822, "FileHash-MD5": 31, "FileHash-SHA1": 1 }, "indicator_count": 23776, "is_author": false, "is_subscribing": null, "subscriber_count": 412, "modified_text": "1494 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "61f746ad863156faa43df81f", "name": "OnVUE-3.78.105.zip", "description": "", "modified": "2022-03-01T00:01:00.341000", "created": "2022-01-31T02:17:17.472000", "tags": [ "whois", "whois record", "ssl certificate" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "ALFPER:HSTR:MacOS/DirectHW.A", "display_name": "ALFPER:HSTR:MacOS/DirectHW.A", "target": null }, { "id": "Osx.Malware.Agent-1799619", "display_name": "Osx.Malware.Agent-1799619", "target": null }, { "id": "Win32:DCom-AA\\ [Expl]", "display_name": "Win32:DCom-AA\\ [Expl]", "target": null }, { "id": "Exploit:Win32/RpcDcom.gen", "display_name": "Exploit:Win32/RpcDcom.gen", "target": "/malware/Exploit:Win32/RpcDcom.gen" }, { "id": "Win.Exploit.DCOM-5", "display_name": "Win.Exploit.DCOM-5", "target": null } ], "attack_ids": [], "industries": [ "Education" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 304, "URL": 567, "domain": 82, "FileHash-SHA256": 471 }, "indicator_count": 1424, "is_author": false, "is_subscribing": null, "subscriber_count": 410, "modified_text": "1510 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap", "http://www.enable-javascript.com/", "https://www.pay-share.com/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Win.worm.pajetbin-6726648-0", "Win32:papras-ax\\ [trj]", "Win.trojan.crypted-30", "Win.worm.sobig-5", "Win.trojan.pasta-827", "Backdoor:win32/berbew", "Tel:nopowshell!msil", "Win.trojan.kazy-6878", "Ransom:win32/wannaren.a", "Osx.malware.agent-1799619", "Win32:dcom-aa\\ [expl]", "Win.malware.autoit-6753917-0", "Win32:vb-fbx", "Exploit:win32/rpcdcom.gen", "Win32:dropper-gup\\ [drp]", "Win32:sobig-h\\ [wrm]", "Win.malware.zusy-6840460-0", "Pws:win32/qqpass.gp", "Win.exploit.dcom-5", "Worm:win32/macoute", "Win.malware.razy-6783523-0", "Win.ransomware.teslacrypt-7082109-1", "Alf:hstr:mitm:utilads", "Alf:hstr:trojan:win32/injector.yy!bit", "Trojan:win32/vindor.b", "Win.trojan.agent-1201096", "Msil:browsefox-fc\\ [adw]", "Alfper:hstr:macos/directhw.a", "#virtool:win32/obfuscator.adb" ], "industries": [ "Education", "Technology" ], "unique_indicators": 68257 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/makeidentitysafe.com", "whois": "http://whois.domaintools.com/makeidentitysafe.com", "domain": "makeidentitysafe.com", "hostname": "docs.makeidentitysafe.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 12, "pulses": [ { "id": "65707eab85e2a9a917487148", "name": "Centergate.com", "description": "", "modified": "2023-12-06T14:01:15.794000", "created": "2023-12-06T14:01:15.794000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "hostname": 810, "FileHash-SHA256": 1327, "URL": 2177, "domain": 453, "FileHash-MD5": 1, "email": 1, "FileHash-SHA1": 1 }, "indicator_count": 4772, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707ea9c0f2231d524c00ae", "name": "www.zetalytics.com", "description": "", "modified": "2023-12-06T14:01:12.637000", "created": "2023-12-06T14:01:12.637000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 747, "hostname": 368, "domain": 116, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e5b7df6f60133e8fb50", "name": "Jeeng / Powerbox", "description": "", "modified": "2023-12-06T13:59:55.129000", "created": "2023-12-06T13:59:55.129000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 3, "FileHash-SHA256": 9072, "domain": 2500, "hostname": 3584, "URL": 13548, "FileHash-MD5": 197, "FileHash-SHA1": 162, "email": 19, "CIDR": 20, "SSLCertFingerprint": 2, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707e3f5ecd5ba2eb187178", "name": "Crowdstrike - ewe", "description": "", "modified": "2023-12-06T13:59:27.940000", "created": "2023-12-06T13:59:27.940000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1822, "domain": 2744, "hostname": 3486, "URL": 15692, "FileHash-MD5": 31, "FileHash-SHA1": 1 }, "indicator_count": 23776, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707d9d7e16e010e95b3bcf", "name": "OnVUE-3.78.105.zip", "description": "", "modified": "2023-12-06T13:56:45.319000", "created": "2023-12-06T13:56:45.319000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 471, "domain": 82, "hostname": 304, "URL": 567 }, "indicator_count": 1424, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707bf3841fe9f857870735", "name": "Jack Posobiec\u2019s Pay-share.com Bonanza", "description": "", "modified": "2023-12-06T13:49:39.465000", "created": "2023-12-06T13:49:39.465000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3887, "hostname": 1423, "domain": 675, "FileHash-SHA256": 2044, "FileHash-MD5": 245, "FileHash-SHA1": 212, "CIDR": 18, "email": 10, "CVE": 3, "SSLCertFingerprint": 6 }, "indicator_count": 8523, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "620c3b1f8af7ea0dcf2c1218", "name": "Jeeng / Powerbox", "description": "", "modified": "2022-06-12T22:01:23.105000", "created": "2022-02-15T23:45:35.234000", "tags": [ "Jeeng", "tim pool", "timcast" ], "references": [ "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 9072, "domain": 2500, "URL": 13548, "hostname": 3584, "FileHash-MD5": 197, "FileHash-SHA1": 162, "CVE": 3, "CIDR": 20, "SSLCertFingerprint": 2, "email": 19, "BitcoinAddress": 1 }, "indicator_count": 29108, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "1406 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "60e6c1075f3f5592cb7d80d2", "name": "Jack Posobiec\u2019s Pay-share.com Bonanza", "description": "Looks like a dead site, talks like a dead site, walks like a dead site, isn\u2019t a dead nor parked site.", "modified": "2022-06-09T00:00:13.607000", "created": "2021-07-08T09:10:31.087000", "tags": [ "enable javascript", "browser", "internet explorer", "firefox", "chrome", "safari", "opera", "codes fire", "stick tricks", "coupons knoji", "discount codes", "best uk", "hosting omega", "media hoekbank", "leasen", "writers per", "hour frskrat" ], "references": [ "https://www.pay-share.com/", "http://www.enable-javascript.com/" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [ { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3887, "hostname": 1423, "FileHash-SHA256": 2044, "domain": 675, "FileHash-MD5": 245, "FileHash-SHA1": 212, "CIDR": 18, "email": 10, "CVE": 3, "SSLCertFingerprint": 6 }, "indicator_count": 8523, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "1410 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211ee3ffa661501f2caa803", "name": "Centergate.com", "description": "", "modified": "2022-03-25T00:03:52.440000", "created": "2022-02-20T07:31:11.659000", "tags": [ "whois", "whois record", "redacted for", "date", "tucows domains", "server", "privacy tech", "tucows", "iana id", "registrar abuse", "registrar whois", "code", "win32 exe", "detections type", "name", "dns replication", "subdomains", "communicating", "files referring", "domain status", "ranks rank", "value ingestion", "time cisco", "umbrella", "utc statvoo", "utc alexa", "dns records", "record type", "submission", "links community", "history first", "analysis", "utc http", "response final", "url http", "ip address", "status code", "body length" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2177, "FileHash-SHA256": 1327, "hostname": 810, "domain": 453, "CVE": 2, "email": 1, "FileHash-SHA1": 1, "FileHash-MD5": 1 }, "indicator_count": 4772, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1486 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6211eaee20bc9b0534df6133", "name": "www.zetalytics.com", "description": "", "modified": "2022-03-24T00:00:00.271000", "created": "2022-02-20T07:17:02.872000", "tags": [ "ssl certificate", "whois record", "whois", "key identifier", "x509v3 subject", "v3 serial", "number", "issuer", "cus cngo", "daddy secure", "g2 lscottsdale", "ouhttp", "validity", "info", "date", "tucows domains", "server", "algorithm", "iana id", "registrar url", "status", "registrar whois", "rank value", "ingestion time", "statvoo", "utc alexa", "utc cisco", "umbrella", "submission", "history first", "analysis", "utc http", "response final", "url https", "ip address", "status code", "body length", "kb body", "tools", "Ransomware", "POSSIBLE ETERNAL BLUE" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "China", "Australia", "Belgium" ], "malware_families": [ { "id": "TEL:NoPowShell!msil", "display_name": "TEL:NoPowShell!msil", "target": null }, { "id": "PWS:Win32/QQPass.GP", "display_name": "PWS:Win32/QQPass.GP", "target": "/malware/PWS:Win32/QQPass.GP" }, { "id": "Win.Malware.Razy-6783523-0", "display_name": "Win.Malware.Razy-6783523-0", "target": null }, { "id": "Win.Trojan.Pasta-827", "display_name": "Win.Trojan.Pasta-827", "target": null }, { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" }, { "id": "Win.Malware.Zusy-6840460-0", "display_name": "Win.Malware.Zusy-6840460-0", "target": null }, { "id": "Win.Trojan.Agent-1201096", "display_name": "Win.Trojan.Agent-1201096", "target": null }, { "id": "Win32:Dropper-GUP\\ [Drp]", "display_name": "Win32:Dropper-GUP\\ [Drp]", "target": null }, { "id": "Worm:Win32/Macoute", "display_name": "Worm:Win32/Macoute", "target": "/malware/Worm:Win32/Macoute" }, { "id": "Win32:Sobig-H\\ [Wrm]", "display_name": "Win32:Sobig-H\\ [Wrm]", "target": null }, { "id": "Win.Worm.Sobig-5", "display_name": "Win.Worm.Sobig-5", "target": null }, { "id": "Backdoor:Win32/Berbew", "display_name": "Backdoor:Win32/Berbew", "target": "/malware/Backdoor:Win32/Berbew" }, { "id": "Win.Trojan.Crypted-30", "display_name": "Win.Trojan.Crypted-30", "target": null }, { "id": "#VirTool:Win32/Obfuscator.ADB", "display_name": "#VirTool:Win32/Obfuscator.ADB", "target": "/malware/#VirTool:Win32/Obfuscator.ADB" }, { "id": "Win.Trojan.Kazy-6878", "display_name": "Win.Trojan.Kazy-6878", "target": null }, { "id": "Win32:VB-FBX", "display_name": "Win32:VB-FBX", "target": null }, { "id": "Win.Worm.Pajetbin-6726648-0", "display_name": "Win.Worm.Pajetbin-6726648-0", "target": null }, { "id": "Trojan:Win32/Vindor.B", "display_name": "Trojan:Win32/Vindor.B", "target": "/malware/Trojan:Win32/Vindor.B" }, { "id": "MSIL:BrowseFox-FC\\ [Adw]", "display_name": "MSIL:BrowseFox-FC\\ [Adw]", "target": null }, { "id": "Win.Ransomware.Teslacrypt-7082109-1", "display_name": "Win.Ransomware.Teslacrypt-7082109-1", "target": null }, { "id": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "display_name": "ALF:HSTR:Trojan:Win32/Injector.YY!bit", "target": null }, { "id": "Win32:Papras-AX\\ [Trj]", "display_name": "Win32:Papras-AX\\ [Trj]", "target": null }, { "id": "ALF:HSTR:MITM:UtilAds", "display_name": "ALF:HSTR:MITM:UtilAds", "target": null }, { "id": "Win.Malware.Autoit-6753917-0", "display_name": "Win.Malware.Autoit-6753917-0", "target": null } ], "attack_ids": [], "industries": [ "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 368, "URL": 747, "domain": 116, "FileHash-SHA256": 632, "email": 1, "FileHash-SHA1": 2 }, "indicator_count": 1866, "is_author": false, "is_subscribing": null, "subscriber_count": 409, "modified_text": "1487 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://docs.makeidentitysafe.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://docs.makeidentitysafe.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776629439.037914 }