{ "type": "URL", "indicator": "https://game-sp.cdreader.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://game-sp.cdreader.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3491495818, "indicator": "https://game-sp.cdreader.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 14, "pulses": [ { "id": "6570913a03b8f1cdc6abe32e", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2023-12-06T15:20:26.615000", "created": "2023-12-06T15:20:26.615000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 546, "domain": 162, "URL": 1042, "hostname": 282, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090fe5e8c659c7e5cb094", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "", "modified": "2023-12-06T15:19:26.152000", "created": "2023-12-06T15:19:26.152000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090e5dc9b2e91369b6c56", "name": "bunch of KR muck", "description": "", "modified": "2023-12-06T15:19:01.428000", "created": "2023-12-06T15:19:01.428000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "hostname": 227, "domain": 101, "URL": 496 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f5310de81e9c86719c4606", "name": "empr.online", "description": "", "modified": "2022-09-10T00:03:24.542000", "created": "2022-08-11T16:40:45.460000", "tags": [ "naser rony", "alles sehr", "aber zuerst", "zusammen", "nummern", "brnette", "blondine", "es wre", "reply lisa", "parker lisa", "empr.online" ], "references": [ "comments on security weekly from episode on 10 Aug 2022", "Naser Rony Naser Rony 11 hours ago Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine empr.ONLINE Br\u00fcnette und eine anderec Blondine. Es w\u00e4re unfair, wenn ich 4 w\u00e4hlen w\u00fcrde REPLY Lisa Parker Lisa Parker 10 hours ago \u2764Only for fans over 18 year\u2935\ufe0f Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine warmthhh.Online Br\u00fcnette und eine andere" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 3124, "URL": 5818, "hostname": 2126, "FileHash-SHA256": 1401, "CVE": 3, "FileHash-MD5": 156, "FileHash-SHA1": 135 }, "indicator_count": 12763, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1317 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f2cd9eb0a80cca60963a40", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T21:11:58.646000", "tags": [ "dongfangtoutiao", "higeshi", "kuaizip", "\": [ \"http://dl.baofeng.com/baofeng5/bf5_new.exe\" ], \"match\": []" ], "references": [ "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 162, "hostname": 282, "FileHash-SHA256": 546, "URL": 1042, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 394, "modified_text": "1319 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62ea85a0fe61cd1af7f223a4", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "CVE-2021-22941\nCVE-2017-8977", "modified": "2022-09-02T00:00:40.172000", "created": "2022-08-03T14:26:40.603000", "tags": [ "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2021-22941", "CVE-2017-8977" ], "references": [ "https://hybrid-analysis.com/sample/82b38c9312deb8005122fb331f52898190ac29e26bd464b169f4c60599836f14/62e9cf2b9226df6fea34c0de", "CVE-2021-22941", "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2017-8977", "https://books.google.co.uk/books?id=S3kWAAAAIAAJ&dq=university%2Bof%2Bhuesca&pg=PR3&redir_esc=y#v%3Donepage%26q%3Duniversity%20of%20huesca%26f%3Dfalse" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1325 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e5b8d7e77537fbb1629232", "name": "dnserver.co.kr", "description": "", "modified": "2022-08-29T00:01:52.177000", "created": "2022-07-30T23:03:51.135000", "tags": [ "http://www.qy0531.com/gb513376_1473435.htm", "kr" ], "references": [ "http://www.qy0531.com/gb513376_1473435.htm" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1933, "hostname": 648, "domain": 741, "FileHash-SHA256": 250 }, "indicator_count": 3572, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1329 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e30981f283ef6de2035dce", "name": "bunch of KR muck", "description": "", "modified": "2022-08-27T00:02:51.006000", "created": "2022-07-28T22:11:13.491000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 496, "hostname": 227, "domain": 101 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1331 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62dd3c2d995db8d35f0b4e48", "name": "How tracker/3rd party abuse translates to much bigger crime netw", "description": "ooo I wonder how much malware is being delivered by numerous means masked in whitelisted and false positive ip's", "modified": "2022-08-23T00:02:12.321000", "created": "2022-07-24T12:33:49.953000", "tags": [], "references": [ "VT graph Json upload to otx", "https://www.virustotal.com/graph/g4655ac448333498bac4fb8b20fed4be62d42ea86d1824fcd9401ba5b30027f57", "can no longer create collections in account - get exceeded api allowance even on just 28 req's in 24 hours", "https://udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1137, "domain": 138, "hostname": 421, "FileHash-SHA256": 893, "CVE": 1 }, "indicator_count": 2590, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1335 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62c035df9d1c1df8ca3fcaea", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2022-08-01T00:01:42.977000", "created": "2022-07-02T12:11:11.592000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "FileHash-SHA256": 2141, "domain": 308, "URL": 2036 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 396, "modified_text": "1357 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb08310a8957d97aa23c30", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T13:54:57.927000", "tags": [ "entity", "ubotbrowser", "20.99.132.105", "minecraft" ], "references": [ "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 502, "URL": 1437, "domain": 110, "FileHash-SHA256": 812 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 398, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62bb7b6820f1de44d02cdc75", "name": "eset.rosconnect.ru -VT Graph JSON upload", "description": "", "modified": "2022-07-28T00:02:14.384000", "created": "2022-06-28T22:06:32.059000", "tags": [ "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332a", "CVE-2017-11882" ], "references": [ "CVE-2017-11882", "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "URL": 535, "hostname": 128, "FileHash-SHA256": 236, "domain": 197 }, "indicator_count": 1097, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1361 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216", "https://books.google.co.uk/books?id=S3kWAAAAIAAJ&dq=university%2Bof%2Bhuesca&pg=PR3&redir_esc=y#v%3Donepage%26q%3Duniversity%20of%20huesca%26f%3Dfalse", "https://udc-neb.kampyle.com/v1/qceuv8449dzg58ptt1bhda9g8ue19c7s/track", "can no longer create collections in account - get exceeded api allowance even on just 28 req's in 24 hours", "VT graph Json upload to otx", "https://www.virustotal.com/graph/gebaa4d3d53cd4a3ea2559b9b96332ac7139ae27294bc4bc2ba9728cdd62917f9", "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "comments on security weekly from episode on 10 Aug 2022", "CVE-2021-22941", "https://www.virustotal.com/graph/g4655ac448333498bac4fb8b20fed4be62d42ea86d1824fcd9401ba5b30027f57", "https://www.virustotal.com/graph/g57851267a0734f7fab3824bb4cca5cb9afab6573d8fa4b54a4f624390f9ba0bc", "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2017-11882", "http://www.qy0531.com/gb513376_1473435.htm", "Naser Rony Naser Rony 11 hours ago Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine empr.ONLINE Br\u00fcnette und eine anderec Blondine. Es w\u00e4re unfair, wenn ich 4 w\u00e4hlen w\u00fcrde REPLY Lisa Parker Lisa Parker 10 hours ago \u2764Only for fans over 18 year\u2935\ufe0f Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine warmthhh.Online Br\u00fcnette und eine andere", "https://hybrid-analysis.com/sample/82b38c9312deb8005122fb331f52898190ac29e26bd464b169f4c60599836f14/62e9cf2b9226df6fea34c0de", "CVE-2017-8977" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 24285 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/cdreader.com", "whois": "http://whois.domaintools.com/cdreader.com", "domain": "cdreader.com", "hostname": "game-sp.cdreader.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 14, "pulses": [ { "id": "6570913a03b8f1cdc6abe32e", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2023-12-06T15:20:26.615000", "created": "2023-12-06T15:20:26.615000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 546, "domain": 162, "URL": 1042, "hostname": 282, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090fe5e8c659c7e5cb094", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "", "modified": "2023-12-06T15:19:26.152000", "created": "2023-12-06T15:19:26.152000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090e5dc9b2e91369b6c56", "name": "bunch of KR muck", "description": "", "modified": "2023-12-06T15:19:01.428000", "created": "2023-12-06T15:19:01.428000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "hostname": 227, "domain": 101, "URL": 496 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090132deb7fd89b09d555", "name": "a whole bunch of hell effected by the recent mozilla/firefox vulns", "description": "", "modified": "2023-12-06T15:15:31.177000", "created": "2023-12-06T15:15:31.177000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 825, "domain": 308, "URL": 2036, "FileHash-SHA256": 2141 }, "indicator_count": 5310, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708fdef7d4b5483117bb67", "name": "BINGO \ud83d\udea8\ud83d\udea8\ud83d\udea8 VT Graph json upload of UBotBrowser.exe - 20.99.132.105 - 33 collections - minecraft instances", "description": "", "modified": "2023-12-06T15:14:38.824000", "created": "2023-12-06T15:14:38.824000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 812, "domain": 110, "hostname": 502, "URL": 1437 }, "indicator_count": 2861, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f5310de81e9c86719c4606", "name": "empr.online", "description": "", "modified": "2022-09-10T00:03:24.542000", "created": "2022-08-11T16:40:45.460000", "tags": [ "naser rony", "alles sehr", "aber zuerst", "zusammen", "nummern", "brnette", "blondine", "es wre", "reply lisa", "parker lisa", "empr.online" ], "references": [ "comments on security weekly from episode on 10 Aug 2022", "Naser Rony Naser Rony 11 hours ago Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine empr.ONLINE Br\u00fcnette und eine anderec Blondine. Es w\u00e4re unfair, wenn ich 4 w\u00e4hlen w\u00fcrde REPLY Lisa Parker Lisa Parker 10 hours ago \u2764Only for fans over 18 year\u2935\ufe0f Alles sehr sch\u00f6n. Aber zuerst zusammen die Nummern 10 und 1. Eine warmthhh.Online Br\u00fcnette und eine andere" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 3124, "URL": 5818, "hostname": 2126, "FileHash-SHA256": 1401, "CVE": 3, "FileHash-MD5": 156, "FileHash-SHA1": 135 }, "indicator_count": 12763, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1317 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62f2cd9eb0a80cca60963a40", "name": "btloader.com - yep clean as a babies bum", "description": "", "modified": "2022-09-08T00:01:12.540000", "created": "2022-08-09T21:11:58.646000", "tags": [ "dongfangtoutiao", "higeshi", "kuaizip", "\": [ \"http://dl.baofeng.com/baofeng5/bf5_new.exe\" ], \"match\": []" ], "references": [ "g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216.json", "https://www.virustotal.com/graph/g110e315c6ce34a02a043f315490fd5ba3975905f72874717b06e3de696641216" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 162, "hostname": 282, "FileHash-SHA256": 546, "URL": 1042, "FileHash-MD5": 251, "FileHash-SHA1": 224 }, "indicator_count": 2507, "is_author": false, "is_subscribing": null, "subscriber_count": 394, "modified_text": "1319 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62ea85a0fe61cd1af7f223a4", "name": "http://e.ca/?e.ca=!1:f.stopPropagation - is there no end to this shit RU/CN/UA/GB/ net sh", "description": "CVE-2021-22941\nCVE-2017-8977", "modified": "2022-09-02T00:00:40.172000", "created": "2022-08-03T14:26:40.603000", "tags": [ "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2021-22941", "CVE-2017-8977" ], "references": [ "https://hybrid-analysis.com/sample/82b38c9312deb8005122fb331f52898190ac29e26bd464b169f4c60599836f14/62e9cf2b9226df6fea34c0de", "CVE-2021-22941", "http://e.ca/?e.ca=!1:f.stopPropagation", "CVE-2017-8977", "https://books.google.co.uk/books?id=S3kWAAAAIAAJ&dq=university%2Bof%2Bhuesca&pg=PR3&redir_esc=y#v%3Donepage%26q%3Duniversity%20of%20huesca%26f%3Dfalse" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1091, "hostname": 702, "URL": 1728, "domain": 279, "CVE": 2, "FileHash-MD5": 50, "FileHash-SHA1": 46 }, "indicator_count": 3898, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1325 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e5b8d7e77537fbb1629232", "name": "dnserver.co.kr", "description": "", "modified": "2022-08-29T00:01:52.177000", "created": "2022-07-30T23:03:51.135000", "tags": [ "http://www.qy0531.com/gb513376_1473435.htm", "kr" ], "references": [ "http://www.qy0531.com/gb513376_1473435.htm" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1933, "hostname": 648, "domain": 741, "FileHash-SHA256": 250 }, "indicator_count": 3572, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1329 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e30981f283ef6de2035dce", "name": "bunch of KR muck", "description": "", "modified": "2022-08-27T00:02:51.006000", "created": "2022-07-28T22:11:13.491000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 632, "URL": 496, "hostname": 227, "domain": 101 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1331 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://game-sp.cdreader.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://game-sp.cdreader.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776629499.0787117 }