{
  "type": "URL",
  "indicator": "https://m.bds247.vn/lien",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://m.bds247.vn/lien",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 3625431779,
      "indicator": "https://m.bds247.vn/lien",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 4,
      "pulses": [
        {
          "id": "657096b4440900cf22fd32b0",
          "name": "B\u00e1n \u0111\u1ea5t th\u00f4n C\u1ed5 \u0110i\u1ec3n A, T\u1ee9 Hi\u1ec7p, Thanh Tr\u00ec, H\u00e0 N\u1ed9i.",
          "description": "",
          "modified": "2023-12-06T15:43:48.468000",
          "created": "2023-12-06T15:43:48.468000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 271,
            "FileHash-SHA256": 256,
            "domain": 40,
            "hostname": 111,
            "FileHash-MD5": 3,
            "FileHash-SHA1": 3,
            "CVE": 1,
            "CIDR": 2,
            "URI": 1
          },
          "indicator_count": 688,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "908 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "657096b22a51f1cc56dcfb53",
          "name": "172.217.16.232 BT home router network attack 10th May 2022 - those HTTP headers and JS scripts are taking over the world",
          "description": "",
          "modified": "2023-12-06T15:43:46.083000",
          "created": "2023-12-06T15:43:46.083000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 802,
            "hostname": 392,
            "domain": 134,
            "FileHash-SHA256": 82,
            "FileHash-MD5": 1
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "908 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "63dbc224c528ffca9ac7d598",
          "name": "B\u00e1n \u0111\u1ea5t th\u00f4n C\u1ed5 \u0110i\u1ec3n A, T\u1ee9 Hi\u1ec7p, Thanh Tr\u00ec, H\u00e0 N\u1ed9i.",
          "description": "B\u00e1n nh\u00e0 t\u00e2y Ninh  B\u00e1i B\u00ecnh trong g\u00ean \u00e2'r \u00f4l \u00c2\u00a31.5m.",
          "modified": "2023-03-04T17:04:22.783000",
          "created": "2023-02-02T14:01:08.688000",
          "tags": [
            "sang nh\u01b0\u1ee3ng",
            "chuy\u1ec3n nh\u01b0\u1ee3ng",
            "mua b\u00e1n nh\u00e0 \u0111\u1ea5t",
            "b\u00e1n nh\u00e0",
            "b\u00e1n \u0111\u1ea5t",
            "khng c",
            "miu m",
            "nam t",
            "h ni",
            "ng lu",
            "ng v",
            "n nh",
            "mariot",
            "thu nh",
            "b\u00e1n",
            "\u0111\u1ea5t",
            "th\u00f4n",
            "c\u1ed5",
            "\u0111i\u1ec3n",
            "a",
            "t\u1ee9",
            "hi\u1ec7p",
            "thanh",
            "tr\u00ec",
            "h\u00e0",
            "n\u1ed9i.",
            "thanh tr",
            "bn t",
            "ngy ng",
            "khung gi",
            "loi bs",
            "t hip",
            "t thn",
            "chn theo",
            "lin h"
          ],
          "references": [
            "http://m.bds247.vn/bat-dong-san/24010/Ban-dat-thon-Co-Dien-A-Tu-Hiep-Thanh-Tri-Ha-Noi..html",
            "http://m.bds247.vn/bat-dong-san/26417/Sang-nhuong-GAP-nha-nghi-Mieu-Dam-Nam-Tu-Liem-Ha-Noi.html"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "callmeDoris",
            "id": "205385",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 299,
            "hostname": 131,
            "domain": 120,
            "CIDR": 2,
            "FileHash-SHA256": 408,
            "URI": 1,
            "FileHash-MD5": 3,
            "FileHash-SHA1": 3,
            "CVE": 1
          },
          "indicator_count": 968,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "1185 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "63dbbf6ae4f5433c2bab52e9",
          "name": "172.217.16.232 BT home router network attack 10th May 2022 - those HTTP headers and JS scripts are taking over the world",
          "description": "A guide to some of the key methods used by the web browser, jQuery, to create web pages and add links to the search engine and other parts of its web address system, as well as the address bar.",
          "modified": "2023-03-04T13:00:43.098000",
          "created": "2023-02-02T13:49:30.620000",
          "tags": [
            "null",
            "copyright",
            "jan sorgalla",
            "built",
            "bill scott",
            "http",
            "error",
            "function",
            "title",
            "method",
            "play",
            "fast",
            "click",
            "return",
            "href",
            "target",
            "span",
            "pass",
            "linear",
            "timebuff",
            "block",
            "trigger",
            "nivoslider",
            "display",
            "width",
            "show",
            "next",
            "arrow",
            "restart",
            "stop",
            "iframe",
            "alpha",
            "factory",
            "type",
            "handle",
            "sizzle",
            "match",
            "check",
            "make sure",
            "elem",
            "name",
            "regexp",
            "hooks",
            "false",
            "date",
            "class",
            "internal",
            "done",
            "bind",
            "test",
            "body",
            "copy",
            "hold",
            "mozilla",
            "logic",
            "flash",
            "jquery",
            "fall",
            "bubble",
            "prop",
            "meta",
            "middle",
            "mark",
            "thus",
            "form",
            "script script",
            "a li",
            "div div",
            "mua bn",
            "link",
            "a div",
            "trang ch",
            "gii thiu",
            "tin tc",
            "header http2",
            "gmt cache",
            "gmt server",
            "litespeed",
            "443 ma2592000",
            "172.217.16.232",
            "http://lhr48s28-in-f8.1e100.net"
          ],
          "references": [
            "[object Object] is a string representation of an object instance. Take this example: When the alert runs, it returns [object Object] in the alert modal. It tries to return a string representation of what was passed into alert, but because the engine sees this as an object, and not a string, it tells us that its an instance of an Object instead.",
            "443 Header\tHTTP/2 200 x powered by: PHP/7.4.29 set cookie: PHPSESSID=9158e16820bdbb5be0d1faa520b7dc19 path=/ expires: Thu 19 Nov 1981 08:52:00 GMT cache control: no store no cache must revalidate pragma: no cache content type: text/html charset=UTF 8 date: Thu 02 Feb 2023 13:37:37 GMT server: LiteSpeed alt svc: quic= :443 ma=2592000 v= 35 39 43 44",
            "whitelists are really not the way forward unless you validate the integrity often Speedtest are also being screwed with ie allowing your neural controlled network out on a temp basis to prevent you from ousting the APT controlling your home broadband / wifi network",
            "xml version= 1.0 encoding= utf 8 DOCTYPE html PUBLIC //WAPFORUM//DTD XHTML Mobile 1.0//EN http://www.wapforum.org/DTD/xhtml mobile10.dtd html xmlns= http://www.w3.org/1999/xhtml head meta http equiv= Content Type content= text/html charset=utf 8 / title mua bn nh t cho thu nh t sang nhng sang nhng ca hng /title meta name= copyright content= 2010 2020 bds247.vn / meta name= google site verification content= suyiBYZARDnZ4zGeoAiF VajqMQ0pgLGnEm69aZ aIY / meta name= robots content= index follow / meta name= key",
            "https://m.bds247.vn//view/js/jquery6_1.js 443",
            "https://www.googletagmanager.com/gtag/js?id=G-56M7ZWVN9L",
            "https://m.bds247.vn/lib/nivo-slider/slider.js 443 Script",
            "https://m.bds247.vn/view/js/page.js 443 Script",
            "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js 443 Script",
            "https://m.bds247.vn/lib/pikachoose/lib/jquery.pikachoose.js",
            "This is the full text of the XHTML mobile10.dtd.xml, which is based on the code created by the developers of Google's search engine, iPlayer and other sites.",
            "https://m.bds247.vn//view/js/jquery6_1.js",
            "https://m.bds247.vn/lib/nivo-slider/slider.js",
            "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            },
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            },
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1218",
              "name": "Signed Binary Proxy Execution",
              "display_name": "T1218 - Signed Binary Proxy Execution"
            },
            {
              "id": "T1546",
              "name": "Event Triggered Execution",
              "display_name": "T1546 - Event Triggered Execution"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "callmeDoris",
            "id": "205385",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 802,
            "hostname": 392,
            "FileHash-SHA256": 82,
            "domain": 134,
            "FileHash-MD5": 1
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 93,
          "modified_text": "1186 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "http://m.bds247.vn/bat-dong-san/24010/Ban-dat-thon-Co-Dien-A-Tu-Hiep-Thanh-Tri-Ha-Noi..html",
        "443 Header\tHTTP/2 200 x powered by: PHP/7.4.29 set cookie: PHPSESSID=9158e16820bdbb5be0d1faa520b7dc19 path=/ expires: Thu 19 Nov 1981 08:52:00 GMT cache control: no store no cache must revalidate pragma: no cache content type: text/html charset=UTF 8 date: Thu 02 Feb 2023 13:37:37 GMT server: LiteSpeed alt svc: quic= :443 ma=2592000 v= 35 39 43 44",
        "https://m.bds247.vn//view/js/jquery6_1.js",
        "This is the full text of the XHTML mobile10.dtd.xml, which is based on the code created by the developers of Google's search engine, iPlayer and other sites.",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js",
        "http://m.bds247.vn/bat-dong-san/26417/Sang-nhuong-GAP-nha-nghi-Mieu-Dam-Nam-Tu-Liem-Ha-Noi.html",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.pikachoose.js",
        "https://www.googletagmanager.com/gtag/js?id=G-56M7ZWVN9L",
        "https://m.bds247.vn/view/js/page.js 443 Script",
        "https://m.bds247.vn/lib/nivo-slider/slider.js",
        "[object Object] is a string representation of an object instance. Take this example: When the alert runs, it returns [object Object] in the alert modal. It tries to return a string representation of what was passed into alert, but because the engine sees this as an object, and not a string, it tells us that its an instance of an Object instead.",
        "https://m.bds247.vn/lib/nivo-slider/slider.js 443 Script",
        "https://m.bds247.vn//view/js/jquery6_1.js 443",
        "whitelists are really not the way forward unless you validate the integrity often Speedtest are also being screwed with ie allowing your neural controlled network out on a temp basis to prevent you from ousting the APT controlling your home broadband / wifi network",
        "xml version= 1.0 encoding= utf 8 DOCTYPE html PUBLIC //WAPFORUM//DTD XHTML Mobile 1.0//EN http://www.wapforum.org/DTD/xhtml mobile10.dtd html xmlns= http://www.w3.org/1999/xhtml head meta http equiv= Content Type content= text/html charset=utf 8 / title mua bn nh t cho thu nh t sang nhng sang nhng ca hng /title meta name= copyright content= 2010 2020 bds247.vn / meta name= google site verification content= suyiBYZARDnZ4zGeoAiF VajqMQ0pgLGnEm69aZ aIY / meta name= robots content= index follow / meta name= key",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js 443 Script"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 2097
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/bds247.vn",
    "whois": "http://whois.domaintools.com/bds247.vn",
    "domain": "bds247.vn",
    "hostname": "m.bds247.vn"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 4,
  "pulses": [
    {
      "id": "657096b4440900cf22fd32b0",
      "name": "B\u00e1n \u0111\u1ea5t th\u00f4n C\u1ed5 \u0110i\u1ec3n A, T\u1ee9 Hi\u1ec7p, Thanh Tr\u00ec, H\u00e0 N\u1ed9i.",
      "description": "",
      "modified": "2023-12-06T15:43:48.468000",
      "created": "2023-12-06T15:43:48.468000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 271,
        "FileHash-SHA256": 256,
        "domain": 40,
        "hostname": 111,
        "FileHash-MD5": 3,
        "FileHash-SHA1": 3,
        "CVE": 1,
        "CIDR": 2,
        "URI": 1
      },
      "indicator_count": 688,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "908 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "657096b22a51f1cc56dcfb53",
      "name": "172.217.16.232 BT home router network attack 10th May 2022 - those HTTP headers and JS scripts are taking over the world",
      "description": "",
      "modified": "2023-12-06T15:43:46.083000",
      "created": "2023-12-06T15:43:46.083000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 802,
        "hostname": 392,
        "domain": 134,
        "FileHash-SHA256": 82,
        "FileHash-MD5": 1
      },
      "indicator_count": 1411,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "908 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "63dbc224c528ffca9ac7d598",
      "name": "B\u00e1n \u0111\u1ea5t th\u00f4n C\u1ed5 \u0110i\u1ec3n A, T\u1ee9 Hi\u1ec7p, Thanh Tr\u00ec, H\u00e0 N\u1ed9i.",
      "description": "B\u00e1n nh\u00e0 t\u00e2y Ninh  B\u00e1i B\u00ecnh trong g\u00ean \u00e2'r \u00f4l \u00c2\u00a31.5m.",
      "modified": "2023-03-04T17:04:22.783000",
      "created": "2023-02-02T14:01:08.688000",
      "tags": [
        "sang nh\u01b0\u1ee3ng",
        "chuy\u1ec3n nh\u01b0\u1ee3ng",
        "mua b\u00e1n nh\u00e0 \u0111\u1ea5t",
        "b\u00e1n nh\u00e0",
        "b\u00e1n \u0111\u1ea5t",
        "khng c",
        "miu m",
        "nam t",
        "h ni",
        "ng lu",
        "ng v",
        "n nh",
        "mariot",
        "thu nh",
        "b\u00e1n",
        "\u0111\u1ea5t",
        "th\u00f4n",
        "c\u1ed5",
        "\u0111i\u1ec3n",
        "a",
        "t\u1ee9",
        "hi\u1ec7p",
        "thanh",
        "tr\u00ec",
        "h\u00e0",
        "n\u1ed9i.",
        "thanh tr",
        "bn t",
        "ngy ng",
        "khung gi",
        "loi bs",
        "t hip",
        "t thn",
        "chn theo",
        "lin h"
      ],
      "references": [
        "http://m.bds247.vn/bat-dong-san/24010/Ban-dat-thon-Co-Dien-A-Tu-Hiep-Thanh-Tri-Ha-Noi..html",
        "http://m.bds247.vn/bat-dong-san/26417/Sang-nhuong-GAP-nha-nghi-Mieu-Dam-Nam-Tu-Liem-Ha-Noi.html"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 10,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "callmeDoris",
        "id": "205385",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 299,
        "hostname": 131,
        "domain": 120,
        "CIDR": 2,
        "FileHash-SHA256": 408,
        "URI": 1,
        "FileHash-MD5": 3,
        "FileHash-SHA1": 3,
        "CVE": 1
      },
      "indicator_count": 968,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 92,
      "modified_text": "1185 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "63dbbf6ae4f5433c2bab52e9",
      "name": "172.217.16.232 BT home router network attack 10th May 2022 - those HTTP headers and JS scripts are taking over the world",
      "description": "A guide to some of the key methods used by the web browser, jQuery, to create web pages and add links to the search engine and other parts of its web address system, as well as the address bar.",
      "modified": "2023-03-04T13:00:43.098000",
      "created": "2023-02-02T13:49:30.620000",
      "tags": [
        "null",
        "copyright",
        "jan sorgalla",
        "built",
        "bill scott",
        "http",
        "error",
        "function",
        "title",
        "method",
        "play",
        "fast",
        "click",
        "return",
        "href",
        "target",
        "span",
        "pass",
        "linear",
        "timebuff",
        "block",
        "trigger",
        "nivoslider",
        "display",
        "width",
        "show",
        "next",
        "arrow",
        "restart",
        "stop",
        "iframe",
        "alpha",
        "factory",
        "type",
        "handle",
        "sizzle",
        "match",
        "check",
        "make sure",
        "elem",
        "name",
        "regexp",
        "hooks",
        "false",
        "date",
        "class",
        "internal",
        "done",
        "bind",
        "test",
        "body",
        "copy",
        "hold",
        "mozilla",
        "logic",
        "flash",
        "jquery",
        "fall",
        "bubble",
        "prop",
        "meta",
        "middle",
        "mark",
        "thus",
        "form",
        "script script",
        "a li",
        "div div",
        "mua bn",
        "link",
        "a div",
        "trang ch",
        "gii thiu",
        "tin tc",
        "header http2",
        "gmt cache",
        "gmt server",
        "litespeed",
        "443 ma2592000",
        "172.217.16.232",
        "http://lhr48s28-in-f8.1e100.net"
      ],
      "references": [
        "[object Object] is a string representation of an object instance. Take this example: When the alert runs, it returns [object Object] in the alert modal. It tries to return a string representation of what was passed into alert, but because the engine sees this as an object, and not a string, it tells us that its an instance of an Object instead.",
        "443 Header\tHTTP/2 200 x powered by: PHP/7.4.29 set cookie: PHPSESSID=9158e16820bdbb5be0d1faa520b7dc19 path=/ expires: Thu 19 Nov 1981 08:52:00 GMT cache control: no store no cache must revalidate pragma: no cache content type: text/html charset=UTF 8 date: Thu 02 Feb 2023 13:37:37 GMT server: LiteSpeed alt svc: quic= :443 ma=2592000 v= 35 39 43 44",
        "whitelists are really not the way forward unless you validate the integrity often Speedtest are also being screwed with ie allowing your neural controlled network out on a temp basis to prevent you from ousting the APT controlling your home broadband / wifi network",
        "xml version= 1.0 encoding= utf 8 DOCTYPE html PUBLIC //WAPFORUM//DTD XHTML Mobile 1.0//EN http://www.wapforum.org/DTD/xhtml mobile10.dtd html xmlns= http://www.w3.org/1999/xhtml head meta http equiv= Content Type content= text/html charset=utf 8 / title mua bn nh t cho thu nh t sang nhng sang nhng ca hng /title meta name= copyright content= 2010 2020 bds247.vn / meta name= google site verification content= suyiBYZARDnZ4zGeoAiF VajqMQ0pgLGnEm69aZ aIY / meta name= robots content= index follow / meta name= key",
        "https://m.bds247.vn//view/js/jquery6_1.js 443",
        "https://www.googletagmanager.com/gtag/js?id=G-56M7ZWVN9L",
        "https://m.bds247.vn/lib/nivo-slider/slider.js 443 Script",
        "https://m.bds247.vn/view/js/page.js 443 Script",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js 443 Script",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.pikachoose.js",
        "This is the full text of the XHTML mobile10.dtd.xml, which is based on the code created by the developers of Google's search engine, iPlayer and other sites.",
        "https://m.bds247.vn//view/js/jquery6_1.js",
        "https://m.bds247.vn/lib/nivo-slider/slider.js",
        "https://m.bds247.vn/lib/pikachoose/lib/jquery.jcarousel.min.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        },
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        },
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1218",
          "name": "Signed Binary Proxy Execution",
          "display_name": "T1218 - Signed Binary Proxy Execution"
        },
        {
          "id": "T1546",
          "name": "Event Triggered Execution",
          "display_name": "T1546 - Event Triggered Execution"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 11,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "callmeDoris",
        "id": "205385",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 802,
        "hostname": 392,
        "FileHash-SHA256": 82,
        "domain": 134,
        "FileHash-MD5": 1
      },
      "indicator_count": 1411,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 93,
      "modified_text": "1186 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://m.bds247.vn/lien",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://m.bds247.vn/lien",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780406909.2614079
}