{ "type": "URL", "indicator": "https://github.com/matthewhudson/current-device", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://github.com/matthewhudson/current-device", "type": "url", "type_title": "URL", "validation": [ { "source": "alexa", "message": "Alexa rank: #87", "name": "Listed on Alexa" }, { "source": "akamai", "message": "Akamai rank: #560", "name": "Akamai Popular Domain" }, { "source": "whitelist", "message": "Whitelisted domain github.com", "name": "Whitelisted domain" }, { "source": "majestic", "message": "Whitelisted domain github.com", "name": "Whitelisted domain" } ], "base_indicator": { "id": 3420871291, "indicator": "https://github.com/matthewhudson/current-device", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 4, "pulses": [ { "id": "65708b83a04606c605361cb6", "name": "Nearly ALL App Store VPNs are a huge vulnerability", "description": "", "modified": "2023-12-06T14:56:03.320000", "created": "2023-12-06T14:56:03.320000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 267, "hostname": 78, "URL": 346, "FileHash-SHA256": 79, "email": 4 }, "indicator_count": 774, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b6e599404c47f2aba15", "name": "Malware", "description": "", "modified": "2023-12-06T14:55:42.864000", "created": "2023-12-06T14:55:42.864000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 268, "domain": 202, "FileHash-SHA256": 154, "URL": 845, "FileHash-MD5": 6, "FileHash-SHA1": 1 }, "indicator_count": 1476, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6253b49ac7891a2ad1ab0d09", "name": "Nearly ALL App Store VPNs are a huge vulnerability", "description": "Zt, Z.Z.r, is a new-found acronym for the word \"zt\", which means \"targuments\" or \"farg\" in the same place as the original.", "modified": "2022-05-11T00:02:13.446000", "created": "2022-04-11T04:54:50.508000", "tags": [ "ratio", "regexp", "apple iphone", "apple ipad", "apple ipod", "xmlhttprequest", "post", "contenttype", "text", "function", "symbol", "typeof", "null", "macintel", "attention", "please", "vpn app", "install details", "\u2019m", "purevpn: fast", "secure & easy", "purevpn", "productivity", "utilities", "ios apps", "app", "appstore", "app store", "iphone", "ipad", "ipod touch", "itouch", "itunes", "fast", "secure", "easy", "subscription", "requires", "global nav", "alwayson", "audit", "vpn connection", "service", "download", "enjoy", "first", "kill", "rest", "italian", "korean", "vpn - ip changer & security id", "energise inc", "data", "app privacy", "data privacy", "learn", "sans", "woff", "fontface", "u1c801c88", "u20b4", "u2de02dff", "ua640a69f", "ufe2efe2f", "u04b004b1", "u2116", "truetype", "start", "webflow css", "policy", "crowd ab", "university", "log data", "conditions", "third party", "1px1px", "sf ui", "sf pro", "helvetica", "arial", "alpha", "opacity", "icons", "misc", "overlays", "opacity35", "foundation", "layout", "opacity0", "spinner", "android", "object", "string", "number", "window", "date", "promise", "array", "error", "this", "void", "screen", "typeerror", "invalid attempt" ], "references": [ "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json", "https://unphionetor.com/fv.js?t=56193&cb=200694599", "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319", "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css", "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0", "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729", "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584", "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css", "https://fonts.googleapis.com/css?family=Open+Sans:700,300", "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92", "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325", "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955", "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263", "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js", "https://bestfasttrackservices.com/landers/d/player_default1/send.js" ], "public": 1, "adversary": "", "targeted_countries": [ "Russian Federation", "Australia", "Romania" ], "malware_families": [ { "id": "\u2019m", "display_name": "\u2019m", "target": null } ], "attack_ids": [ { "id": "T1070", "name": "Indicator Removal on Host", "display_name": "T1070 - Indicator Removal on Host" }, { "id": "T1133", "name": "External Remote Services", "display_name": "T1133 - External Remote Services" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 267, "URL": 346, "hostname": 78, "FileHash-SHA256": 79, "email": 4 }, "indicator_count": 774, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1481 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62526269ae126bddc2a926db", "name": "Malware", "description": "", "modified": "2022-05-10T00:02:48.350000", "created": "2022-04-10T04:51:53.521000", "tags": [ "webkitkeyframes", "20deg", "5deg", "45deg", "10px00", "2000px00", "2000px", "2000px0", "30deg", "60px0", "input", "typecheckbox", "typeof r", "64e3", "urlsearchparams", "ofunction", "function", "pfunction", "bfunction", "ffunction", "ifunction", "load", "date", "hj", "object", "hotjar", "email", "typeof symbol", "error", "typeof e", "telefon", "regexp", "surveys", "survey", "meta", "cookie", "keypress", "null", "trident", "live", "fullscreen", "generic", "window", "widget", "ciudad", "adore", "experiment", "mutation", "typeof hj", "surveyv2", "surveyisolated", "heatmapviewer", "notification", "sentry", "click", "samesitelax", "tbet", "token1", "token2", "token3", "token4", "token5", "number", "html", "button", "zip code", "lh", "string", "copyright", "xgfunction", "closure library", "xdfunction", "ydfunction", "adfunction", "cdfunction", "typeof t", "class", "attr", "pseudo", "child", "typeof module", "gtmmlvpdtj", "host", "path", "image", "promise", "error send", "subscription", "indexes", "s2no", "trackdata", "push", "unable", "registration", "array", "typeof enulle", "chrome", "view", "welcome", "ad blocker", "safari browser", "phone", "send", "whatsapp", "datasmart", "blank", "amazing body", "level hardcore", "bulking", "cutting", "no side", "effects free", "workout guides", "every", "item free", "click here", "sans", "woff2", "fontface", "u1c801c88", "u20b4", "u2de02dff", "ua640a69f", "ufe2efe2f", "u04b004b1", "u2116", "ratio", "apple iphone", "apple ipad", "apple ipod", "xmlhttprequest", "post", "contenttype", "text", "symbol", "typeof", "macintel" ], "references": [ "http://nvqonvfylkxdjc.com/", "https://unekds98kksw.com/2022/player_default1/current-device.min.js", "https://unekds98kksw.com/2022/player_default1/send.js", "https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,800", "https://youridealbody.xyz/lp6?bemobdata=c%3D752f3aef-dd8a-4507-a8cd-fe0f9b15c4e5..l%3D94aed4ec-30ac-424c-9e71-bf528195b1d7..f%3D928350ba-6450-412a-8ac7-3ee25ff4287e..a%3D2..b%3D1..z%3D0.00031..e%3D536878068779029425..c1%3D2627325..c2%3D2001342..c3%3DUS..c4%3Dios..c5%3Dios15..c6%3Dmobile..c7%3Dverizon-us..c8%3Dsafari..c10%3Den", "https://cpatools.cc/js/linksmart.js", "https://adsiblocker.com/index.php?key=sh3en4m6rxvscfptoc65&visitor_id=536878455372222772&cost=0.000501&zoneid=2627325&campaignid=5420841&device=iphone&browser=safari&os=ios&osversion=ios15&country=US&language=en&isp=verizon%20business&source=propellerads", "https://adsiblocker.com/index.php?lp=1&uclick=sc46oji4", "https://www.flirt4fuck.com/c/1de75401f8c75130?s1=181_4239973_cfa_mob_US_pop&s2=8639661&s3=2627325", "https://www.flirt4fuck.com/js/pushjs/1.0.0/utils.js", "https://www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js", "https://www.flirt4fuck.com/js/pushjs/1.0.0/subscriber.js", "https://www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ", "https://code.jquery.com/jquery-3.6.0.min.js", "https://www.googletagmanager.com/gtag/js?id=UA-145157900-3", "https://onenightflirt.com/lps/jumps/2/script.js", "https://assets.topsrcs.com/js/script_wf.js", "https://static.hotjar.com/c/hotjar-2908146.js?sv=6", "https://script.hotjar.com/modules.9beafb9ca96c2f868fe2.js", "https://static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194", "https://onenightflirt.com/lps/jumps/2/style.css", "https://vars.hotjar.com/box-acca23410e696f2ca3087d947271c3d0.html", "https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css", "xfe-URL-nvqonvfylkxdjc.com-stix2-2.1-export.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "hj", "display_name": "hj", "target": null }, { "id": "Lh", "display_name": "Lh", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 202, "URL": 846, "FileHash-SHA256": 154, "hostname": 268, "FileHash-MD5": 6, "FileHash-SHA1": 1 }, "indicator_count": 1477, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "1482 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://unekds98kksw.com/2022/player_default1/current-device.min.js", "https://script.hotjar.com/modules.9beafb9ca96c2f868fe2.js", "https://unphionetor.com/fv.js?t=56193&cb=200694599", "https://vars.hotjar.com/box-acca23410e696f2ca3087d947271c3d0.html", "https://unekds98kksw.com/2022/player_default1/send.js", "https://www.flirt4fuck.com/js/pushjs/1.0.0/utils.js", "https://bestfasttrackservices.com/landers/d/player_default1/send.js", "http://nvqonvfylkxdjc.com/", "https://static.hotjar.com/c/hotjar-2908146.js?sv=6", "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325", "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json", "https://static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194", "xfe-URL-nvqonvfylkxdjc.com-stix2-2.1-export.json", "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0", "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css", "https://adsiblocker.com/index.php?key=sh3en4m6rxvscfptoc65&visitor_id=536878455372222772&cost=0.000501&zoneid=2627325&campaignid=5420841&device=iphone&browser=safari&os=ios&osversion=ios15&country=US&language=en&isp=verizon%20business&source=propellerads", "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584", "https://onenightflirt.com/lps/jumps/2/script.js", "https://youridealbody.xyz/lp6?bemobdata=c%3D752f3aef-dd8a-4507-a8cd-fe0f9b15c4e5..l%3D94aed4ec-30ac-424c-9e71-bf528195b1d7..f%3D928350ba-6450-412a-8ac7-3ee25ff4287e..a%3D2..b%3D1..z%3D0.00031..e%3D536878068779029425..c1%3D2627325..c2%3D2001342..c3%3DUS..c4%3Dios..c5%3Dios15..c6%3Dmobile..c7%3Dverizon-us..c8%3Dsafari..c10%3Den", "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319", "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js", "https://www.googletagmanager.com/gtag/js?id=UA-145157900-3", "https://www.flirt4fuck.com/c/1de75401f8c75130?s1=181_4239973_cfa_mob_US_pop&s2=8639661&s3=2627325", "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729", "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css", "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263", "https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,800", "https://onenightflirt.com/lps/jumps/2/style.css", "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955", "https://www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ", "https://code.jquery.com/jquery-3.6.0.min.js", "https://adsiblocker.com/index.php?lp=1&uclick=sc46oji4", "https://assets.topsrcs.com/js/script_wf.js", "https://cpatools.cc/js/linksmart.js", "https://fonts.googleapis.com/css?family=Open+Sans:700,300", "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92", "https://www.flirt4fuck.com/js/pushjs/1.0.0/subscriber.js", "https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css", "https://www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Lh", "Hj", "\u2019m" ], "industries": [], "unique_indicators": 2060 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/github.com", "whois": "http://whois.domaintools.com/github.com", "domain": "github.com", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 4, "pulses": [ { "id": "65708b83a04606c605361cb6", "name": "Nearly ALL App Store VPNs are a huge vulnerability", "description": "", "modified": "2023-12-06T14:56:03.320000", "created": "2023-12-06T14:56:03.320000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 267, "hostname": 78, "URL": 346, "FileHash-SHA256": 79, "email": 4 }, "indicator_count": 774, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b6e599404c47f2aba15", "name": "Malware", "description": "", "modified": "2023-12-06T14:55:42.864000", "created": "2023-12-06T14:55:42.864000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 268, "domain": 202, "FileHash-SHA256": 154, "URL": 845, "FileHash-MD5": 6, "FileHash-SHA1": 1 }, "indicator_count": 1476, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6253b49ac7891a2ad1ab0d09", "name": "Nearly ALL App Store VPNs are a huge vulnerability", "description": "Zt, Z.Z.r, is a new-found acronym for the word \"zt\", which means \"targuments\" or \"farg\" in the same place as the original.", "modified": "2022-05-11T00:02:13.446000", "created": "2022-04-11T04:54:50.508000", "tags": [ "ratio", "regexp", "apple iphone", "apple ipad", "apple ipod", "xmlhttprequest", "post", "contenttype", "text", "function", "symbol", "typeof", "null", "macintel", "attention", "please", "vpn app", "install details", "\u2019m", "purevpn: fast", "secure & easy", "purevpn", "productivity", "utilities", "ios apps", "app", "appstore", "app store", "iphone", "ipad", "ipod touch", "itouch", "itunes", "fast", "secure", "easy", "subscription", "requires", "global nav", "alwayson", "audit", "vpn connection", "service", "download", "enjoy", "first", "kill", "rest", "italian", "korean", "vpn - ip changer & security id", "energise inc", "data", "app privacy", "data privacy", "learn", "sans", "woff", "fontface", "u1c801c88", "u20b4", "u2de02dff", "ua640a69f", "ufe2efe2f", "u04b004b1", "u2116", "truetype", "start", "webflow css", "policy", "crowd ab", "university", "log data", "conditions", "third party", "1px1px", "sf ui", "sf pro", "helvetica", "arial", "alpha", "opacity", "icons", "misc", "overlays", "opacity35", "foundation", "layout", "opacity0", "spinner", "android", "object", "string", "number", "window", "date", "promise", "array", "error", "this", "void", "screen", "typeerror", "invalid attempt" ], "references": [ "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json", "https://unphionetor.com/fv.js?t=56193&cb=200694599", "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319", "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css", "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0", "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729", "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584", "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css", "https://fonts.googleapis.com/css?family=Open+Sans:700,300", "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92", "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325", "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955", "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263", "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js", "https://bestfasttrackservices.com/landers/d/player_default1/send.js" ], "public": 1, "adversary": "", "targeted_countries": [ "Russian Federation", "Australia", "Romania" ], "malware_families": [ { "id": "\u2019m", "display_name": "\u2019m", "target": null } ], "attack_ids": [ { "id": "T1070", "name": "Indicator Removal on Host", "display_name": "T1070 - Indicator Removal on Host" }, { "id": "T1133", "name": "External Remote Services", "display_name": "T1133 - External Remote Services" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 267, "URL": 346, "hostname": 78, "FileHash-SHA256": 79, "email": 4 }, "indicator_count": 774, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "1481 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62526269ae126bddc2a926db", "name": "Malware", "description": "", "modified": "2022-05-10T00:02:48.350000", "created": "2022-04-10T04:51:53.521000", "tags": [ "webkitkeyframes", "20deg", "5deg", "45deg", "10px00", "2000px00", "2000px", "2000px0", "30deg", "60px0", "input", "typecheckbox", "typeof r", "64e3", "urlsearchparams", "ofunction", "function", "pfunction", "bfunction", "ffunction", "ifunction", "load", "date", "hj", "object", "hotjar", "email", "typeof symbol", "error", "typeof e", "telefon", "regexp", "surveys", "survey", "meta", "cookie", "keypress", "null", "trident", "live", "fullscreen", "generic", "window", "widget", "ciudad", "adore", "experiment", "mutation", "typeof hj", "surveyv2", "surveyisolated", "heatmapviewer", "notification", "sentry", "click", "samesitelax", "tbet", "token1", "token2", "token3", "token4", "token5", "number", "html", "button", "zip code", "lh", "string", "copyright", "xgfunction", "closure library", "xdfunction", "ydfunction", "adfunction", "cdfunction", "typeof t", "class", "attr", "pseudo", "child", "typeof module", "gtmmlvpdtj", "host", "path", "image", "promise", "error send", "subscription", "indexes", "s2no", "trackdata", "push", "unable", "registration", "array", "typeof enulle", "chrome", "view", "welcome", "ad blocker", "safari browser", "phone", "send", "whatsapp", "datasmart", "blank", "amazing body", "level hardcore", "bulking", "cutting", "no side", "effects free", "workout guides", "every", "item free", "click here", "sans", "woff2", "fontface", "u1c801c88", "u20b4", "u2de02dff", "ua640a69f", "ufe2efe2f", "u04b004b1", "u2116", "ratio", "apple iphone", "apple ipad", "apple ipod", "xmlhttprequest", "post", "contenttype", "text", "symbol", "typeof", "macintel" ], "references": [ "http://nvqonvfylkxdjc.com/", "https://unekds98kksw.com/2022/player_default1/current-device.min.js", "https://unekds98kksw.com/2022/player_default1/send.js", "https://fonts.googleapis.com/css?family=Open+Sans:400,600,700,800", "https://youridealbody.xyz/lp6?bemobdata=c%3D752f3aef-dd8a-4507-a8cd-fe0f9b15c4e5..l%3D94aed4ec-30ac-424c-9e71-bf528195b1d7..f%3D928350ba-6450-412a-8ac7-3ee25ff4287e..a%3D2..b%3D1..z%3D0.00031..e%3D536878068779029425..c1%3D2627325..c2%3D2001342..c3%3DUS..c4%3Dios..c5%3Dios15..c6%3Dmobile..c7%3Dverizon-us..c8%3Dsafari..c10%3Den", "https://cpatools.cc/js/linksmart.js", "https://adsiblocker.com/index.php?key=sh3en4m6rxvscfptoc65&visitor_id=536878455372222772&cost=0.000501&zoneid=2627325&campaignid=5420841&device=iphone&browser=safari&os=ios&osversion=ios15&country=US&language=en&isp=verizon%20business&source=propellerads", "https://adsiblocker.com/index.php?lp=1&uclick=sc46oji4", "https://www.flirt4fuck.com/c/1de75401f8c75130?s1=181_4239973_cfa_mob_US_pop&s2=8639661&s3=2627325", "https://www.flirt4fuck.com/js/pushjs/1.0.0/utils.js", "https://www.gstatic.com/firebasejs/5.0.2/firebase-messaging.js", "https://www.flirt4fuck.com/js/pushjs/1.0.0/subscriber.js", "https://www.googletagmanager.com/gtm.js?id=GTM-MLVPDTJ", "https://code.jquery.com/jquery-3.6.0.min.js", "https://www.googletagmanager.com/gtag/js?id=UA-145157900-3", "https://onenightflirt.com/lps/jumps/2/script.js", "https://assets.topsrcs.com/js/script_wf.js", "https://static.hotjar.com/c/hotjar-2908146.js?sv=6", "https://script.hotjar.com/modules.9beafb9ca96c2f868fe2.js", "https://static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194", "https://onenightflirt.com/lps/jumps/2/style.css", "https://vars.hotjar.com/box-acca23410e696f2ca3087d947271c3d0.html", "https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css", "xfe-URL-nvqonvfylkxdjc.com-stix2-2.1-export.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "hj", "display_name": "hj", "target": null }, { "id": "Lh", "display_name": "Lh", "target": null } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "adjadex1@gmail.com", "id": "187163", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 202, "URL": 846, "FileHash-SHA256": 154, "hostname": 268, "FileHash-MD5": 6, "FileHash-SHA1": 1 }, "indicator_count": 1477, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "1482 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://github.com/matthewhudson/current-device", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://github.com/matthewhudson/current-device", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780225136.1263666 }