{ "type": "URL", "indicator": "https://m.facebook.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://m.facebook.com", "type": "url", "type_title": "URL", "validation": [ { "source": "alexa", "message": "Alexa rank: #7", "name": "Listed on Alexa" }, { "source": "akamai", "message": "Akamai rank: #5", "name": "Akamai Popular Domain" }, { "source": "whitelist", "message": "Whitelisted domain facebook.com", "name": "Whitelisted domain" }, { "source": "majestic", "message": "Whitelisted domain facebook.com", "name": "Whitelisted domain" } ], "base_indicator": { "id": 3086397891, "indicator": "https://m.facebook.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 8, "pulses": [ { "id": "698d30c03b57c38dff915023", "name": "Double Umbrella AS15169/AS21928: This evaluates a critical structural convergence between Google (AS15169) and T-Mobile USA (AS21928) within the global Tier-1 routing backbone", "description": "Research credit: msudosos, The research identifies a high-fidelity pattern where traffic from dual origins commingles within a restricted lateral transit hub, allowing for horizontal movement across backbone providers that typically maintain distinct trust boundaries. Specifically, the Content Origin (Umbrella A) originated by Google (AS15169) reaches the core backbone through a high-trust sequence involving Arelion (AS1299), NTT (AS2914), and GTT (AS3257). Simultaneously, the Mobile Origin (Umbrella B) originated by T-Mobile USA (AS21928) enters the backbone via Cogent (AS174) and Lumen (AS3356). The findings designate Lumen (AS3356) as the central lateral hub where traffic pivots horizontally between the \u201cCore Five\u201d partners-including Zayo (AS6461) and Hurricane Electric (AS6939) \u2014before leaking to international sub-transit peers like Sparkle (AS6762) and Telxius (AS12956), finally exiting at global edge points such as PCCW (AS3491) and Tata (AS6453).", "modified": "2026-03-29T06:02:00.914000", "created": "2026-02-12T01:45:36.128000", "tags": [ "The dynamics of the mudoSOSIntersectalign with sophisticated adv" ], "references": [ "as15169" ], "public": 1, "adversary": "Adversary Profile: Salt Typhoon Alignment The architectural gap identified by mudoSO mirrors the act", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 3, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URI": 1, "domain": 2661, "URL": 6810, "hostname": 2147, "email": 56, "FileHash-SHA256": 2781, "CVE": 172, "FileHash-MD5": 365, "FileHash-SHA1": 344, "IPv4": 1, "CIDR": 20940 }, "indicator_count": 36278, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68f5d903f30204d7740b4674", "name": "FFSS - Impacts of University Leadership (U of A) on Global EDU & Healthcare - 11.26.25", "description": "FFSS - Impacts of University Leadership (U of A) on Global EDU & Healthcare\nA missing piece of the puzzle. Redacted PII/PHI. \nRedacted specific users, but contains a list of URLs, IPs, and domains", "modified": "2025-12-26T19:00:31.552000", "created": "2025-10-20T06:38:59.827000", "tags": [ "lgxzvz0r", "entity", "please", "javascript", "Education", "Technology", "University", "Healthcare" ], "references": [ "https://www.virustotal.com/graph/embed/gdeb33b2284ec47739ae15daaf7a0ade8669439cc0f81433d9540e26c7831debc?theme=dark", "https://www.virustotal.com/gui/collection/0d117c1338ea8314404a1bfecd2e96a4b0d48dce795cbe57d702db3eb35998e1/iocs", "https://www.virustotal.com/graph/embed/g2484756a6bca4d9ca3b636b9775705296ed6d403bdd9471aab55afb1d5448630?theme=dark", "https://viz.greynoise.io/ip/analysis/0fc0805a-ed20-4be0-b91e-f4189a9619ce", "https://www.filescan.io/uploads/68f5e2a5c85c5c56972eaebb/reports/56841543-5615-4517-b718-77e27b2e8819/ioc", "https://polyswarm.network/scan/results/file/3a069ad7325feb0cc4d18ef7347ebdbed6290c2285634a2b43e07c7c6a759451", "https://metadefender.com/results/file/bzI1MTAyMEJqaHhnTWEwLU1VS181QVhwNHlP", "https://viz.greynoise.io/ip/analysis/8f018fe6-9b92-4817-9dfd-e0e08177a92c - 10.29.25", "https://viz.greynoise.io/ip/analysis/450bed8c-fc0d-48cb-aebe-56941da4886b - 11.26.25" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 865, "hostname": 460, "URL": 1031, "FileHash-MD5": 3509, "email": 5, "FileHash-SHA1": 12, "FileHash-SHA256": 12 }, "indicator_count": 5894, "is_author": false, "is_subscribing": null, "subscriber_count": 130, "modified_text": "155 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708f273d1e6f4ccf4ab367", "name": "Instagram", "description": "", "modified": "2023-12-06T15:11:34.553000", "created": "2023-12-06T15:11:34.553000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 267, "hostname": 145, "domain": 34, "FileHash-SHA256": 402, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 856, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707f7d51e635c843c1f5ba", "name": "instagram api 2.27.22", "description": "", "modified": "2023-12-06T14:04:45.884000", "created": "2023-12-06T14:04:45.884000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 227, "hostname": 108, "domain": 32, "FileHash-SHA256": 412, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 787, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6294de5fb87b368df54516b2", "name": "Instagram", "description": "", "modified": "2022-06-29T00:00:46.963000", "created": "2022-05-30T15:10:23.666000", "tags": [], "references": [ "instagram.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 145, "URL": 267, "domain": 34, "FileHash-SHA256": 402, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 856, "is_author": false, "is_subscribing": null, "subscriber_count": 405, "modified_text": "1432 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6279a8b9088adb58bf9ded82", "name": "Twitter Feed - AP_Zenmashi - 09-05-2022", "description": "", "modified": "2022-06-08T23:01:06.690000", "created": "2022-05-09T23:50:17.731000", "tags": [ "phishing" ], "references": [ "https://twitter.com/AP_Zenmashi/status/1523483461369344000", "https://twitter.com/AP_Zenmashi/status/1523483653296500738", "https://twitter.com/AP_Zenmashi/status/1523483810301878273", "https://twitter.com/AP_Zenmashi/status/1523484006964088832", "https://twitter.com/AP_Zenmashi/status/1523484170902970369", "https://twitter.com/AP_Zenmashi/status/1523484303149068288", "https://twitter.com/AP_Zenmashi/status/1523484454291132416", "https://twitter.com/AP_Zenmashi/status/1523484597324972032", "https://twitter.com/AP_Zenmashi/status/1523484747707871232", "https://twitter.com/AP_Zenmashi/status/1523484908462624768", "https://twitter.com/AP_Zenmashi/status/1523506359345770497", "https://twitter.com/AP_Zenmashi/status/1523506530280415233", "https://twitter.com/AP_Zenmashi/status/1523506658085081090", "https://twitter.com/AP_Zenmashi/status/1523506877854023681", "https://twitter.com/AP_Zenmashi/status/1523507008544342018", "https://twitter.com/AP_Zenmashi/status/1523507204850352128", "https://twitter.com/AP_Zenmashi/status/1523507350153220098", "https://twitter.com/AP_Zenmashi/status/1523507523567104000", "https://twitter.com/AP_Zenmashi/status/1523507675203465218", "https://twitter.com/AP_Zenmashi/status/1523507819940438016", "https://twitter.com/AP_Zenmashi/status/1523507984239783936", "https://twitter.com/AP_Zenmashi/status/1523508219116912640", "https://twitter.com/AP_Zenmashi/status/1523508491163693056", "https://twitter.com/AP_Zenmashi/status/1523508727638540288", "https://twitter.com/AP_Zenmashi/status/1523508988142583808", "https://twitter.com/AP_Zenmashi/status/1523509260101230593", "https://twitter.com/AP_Zenmashi/status/1523509537730629632", "https://twitter.com/AP_Zenmashi/status/1523509788692254720", "https://twitter.com/AP_Zenmashi/status/1523510051411226624", "https://twitter.com/AP_Zenmashi/status/1523510323185319937", "https://twitter.com/AP_Zenmashi/status/1523510612235481088", "https://twitter.com/AP_Zenmashi/status/1523510877781372929", "https://twitter.com/AP_Zenmashi/status/1523511154383134720", "https://twitter.com/AP_Zenmashi/status/1523511387477377024", "https://twitter.com/AP_Zenmashi/status/1523511662405615619", "https://twitter.com/AP_Zenmashi/status/1523511913820598273", "https://twitter.com/AP_Zenmashi/status/1523521321036320768", "https://twitter.com/AP_Zenmashi/status/1523521575655714816", "https://twitter.com/AP_Zenmashi/status/1523522219812433920", "https://twitter.com/AP_Zenmashi/status/1523523287581880320", "https://twitter.com/AP_Zenmashi/status/1523524920478625794", "https://twitter.com/AP_Zenmashi/status/1523527589213917184", "https://twitter.com/AP_Zenmashi/status/1523527836283596800", "https://twitter.com/AP_Zenmashi/status/1523604793847021568", "https://twitter.com/AP_Zenmashi/status/1523605223360856065", "https://twitter.com/AP_Zenmashi/status/1523605373705326593", "https://twitter.com/AP_Zenmashi/status/1523605530740109312", "https://twitter.com/AP_Zenmashi/status/1523605966918279169", "https://twitter.com/AP_Zenmashi/status/1523606461913321472", "https://twitter.com/AP_Zenmashi/status/1523606714179719168", "https://twitter.com/AP_Zenmashi/status/1523606985844744193", "https://twitter.com/AP_Zenmashi/status/1523607242192261121", "https://twitter.com/AP_Zenmashi/status/1523607517384757248", "https://twitter.com/AP_Zenmashi/status/1523608329502982146", "https://twitter.com/AP_Zenmashi/status/1523608730855944192", "https://twitter.com/AP_Zenmashi/status/1523609091028910081", "https://twitter.com/AP_Zenmashi/status/1523609887757914112", "https://twitter.com/AP_Zenmashi/status/1523610427975819274", "https://twitter.com/AP_Zenmashi/status/1523610599976239104", "https://twitter.com/AP_Zenmashi/status/1523610737620381698", "https://twitter.com/AP_Zenmashi/status/1523610900296454145", "https://twitter.com/AP_Zenmashi/status/1523619391430348800", "https://twitter.com/AP_Zenmashi/status/1523619705650524160", "https://twitter.com/AP_Zenmashi/status/1523620053954199555", "https://twitter.com/AP_Zenmashi/status/1523623035940786177", "https://twitter.com/AP_Zenmashi/status/1523623848813694977", "https://twitter.com/AP_Zenmashi/status/1523625081888382976", "https://twitter.com/AP_Zenmashi/status/1523625579584450562", "https://twitter.com/AP_Zenmashi/status/1523625844673245186", "https://twitter.com/AP_Zenmashi/status/1523627037000302592", "https://twitter.com/AP_Zenmashi/status/1523627294912221185", "https://twitter.com/AP_Zenmashi/status/1523628131051270144", "https://twitter.com/AP_Zenmashi/status/1523628953860460544", "https://twitter.com/AP_Zenmashi/status/1523629199000731655", "https://twitter.com/AP_Zenmashi/status/1523642539181453312", "https://twitter.com/AP_Zenmashi/status/1523642663647735808", "https://twitter.com/AP_Zenmashi/status/1523649870527037441", "https://twitter.com/AP_Zenmashi/status/1523665027500511233", "https://twitter.com/AP_Zenmashi/status/1523665194572201984", "https://twitter.com/AP_Zenmashi/status/1523665453226553347", "https://twitter.com/AP_Zenmashi/status/1523665695052996608", "https://twitter.com/AP_Zenmashi/status/1523672779249250304", "https://twitter.com/AP_Zenmashi/status/1523695001607151616", "https://twitter.com/AP_Zenmashi/status/1523725169180946432", "https://twitter.com/AP_Zenmashi/status/1523725423586119680", "https://twitter.com/AP_Zenmashi/status/1523725741799911424", "https://twitter.com/AP_Zenmashi/status/1523763066789187585", "https://twitter.com/AP_Zenmashi/status/1523763244288311296", "https://twitter.com/AP_Zenmashi/status/1523793363254018048", "https://twitter.com/AP_Zenmashi/status/1523801089262624769", "https://twitter.com/AP_Zenmashi/status/1523808457224114176" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 89 }, "indicator_count": 89, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1452 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6231f8fc54f3d393b8465d56", "name": "instagram.com_accounts_login_08.30.2021", "description": "", "modified": "2022-04-15T00:03:47.669000", "created": "2022-03-16T14:49:32.139000", "tags": [], "references": [ "instagram.com_accounts_login_08.30.2021.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 156, "hostname": 68, "domain": 20, "FileHash-SHA256": 246, "FileHash-MD5": 3, "FileHash-SHA1": 1 }, "indicator_count": 494, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1507 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "621bbbcda8aee7039e255b31", "name": "instagram api 2.27.22", "description": "", "modified": "2022-03-29T00:03:34.773000", "created": "2022-02-27T17:58:37.517000", "tags": [], "references": [ "instagram api 2.27.22" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 227, "hostname": 108, "domain": 32, "FileHash-SHA256": 412, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 787, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1524 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/AP_Zenmashi/status/1523665695052996608", "https://twitter.com/AP_Zenmashi/status/1523507523567104000", "https://twitter.com/AP_Zenmashi/status/1523510051411226624", "https://twitter.com/AP_Zenmashi/status/1523625579584450562", "https://twitter.com/AP_Zenmashi/status/1523628953860460544", "https://twitter.com/AP_Zenmashi/status/1523665027500511233", "https://twitter.com/AP_Zenmashi/status/1523808457224114176", "https://twitter.com/AP_Zenmashi/status/1523605530740109312", "https://twitter.com/AP_Zenmashi/status/1523628131051270144", "https://twitter.com/AP_Zenmashi/status/1523606461913321472", "https://twitter.com/AP_Zenmashi/status/1523642539181453312", "https://twitter.com/AP_Zenmashi/status/1523604793847021568", "https://twitter.com/AP_Zenmashi/status/1523484006964088832", "https://twitter.com/AP_Zenmashi/status/1523606714179719168", "https://twitter.com/AP_Zenmashi/status/1523605373705326593", "https://twitter.com/AP_Zenmashi/status/1523508988142583808", "https://twitter.com/AP_Zenmashi/status/1523483810301878273", "https://twitter.com/AP_Zenmashi/status/1523665194572201984", "https://twitter.com/AP_Zenmashi/status/1523508219116912640", "https://twitter.com/AP_Zenmashi/status/1523510612235481088", "https://twitter.com/AP_Zenmashi/status/1523619705650524160", "https://twitter.com/AP_Zenmashi/status/1523763244288311296", "https://twitter.com/AP_Zenmashi/status/1523484170902970369", "https://twitter.com/AP_Zenmashi/status/1523483461369344000", "https://twitter.com/AP_Zenmashi/status/1523484454291132416", "https://twitter.com/AP_Zenmashi/status/1523625081888382976", "https://twitter.com/AP_Zenmashi/status/1523506359345770497", "https://twitter.com/AP_Zenmashi/status/1523509788692254720", "https://twitter.com/AP_Zenmashi/status/1523523287581880320", "instagram.com_accounts_login_08.30.2021.pdf", "https://twitter.com/AP_Zenmashi/status/1523607242192261121", "https://twitter.com/AP_Zenmashi/status/1523509260101230593", "https://twitter.com/AP_Zenmashi/status/1523527836283596800", "https://twitter.com/AP_Zenmashi/status/1523610599976239104", "https://www.virustotal.com/graph/embed/gdeb33b2284ec47739ae15daaf7a0ade8669439cc0f81433d9540e26c7831debc?theme=dark", "https://twitter.com/AP_Zenmashi/status/1523620053954199555", "https://www.filescan.io/uploads/68f5e2a5c85c5c56972eaebb/reports/56841543-5615-4517-b718-77e27b2e8819/ioc", "https://twitter.com/AP_Zenmashi/status/1523484747707871232", "https://twitter.com/AP_Zenmashi/status/1523484597324972032", "https://viz.greynoise.io/ip/analysis/450bed8c-fc0d-48cb-aebe-56941da4886b - 11.26.25", "https://twitter.com/AP_Zenmashi/status/1523608329502982146", "https://twitter.com/AP_Zenmashi/status/1523511662405615619", "https://twitter.com/AP_Zenmashi/status/1523619391430348800", "https://twitter.com/AP_Zenmashi/status/1523625844673245186", "https://twitter.com/AP_Zenmashi/status/1523607517384757248", "https://twitter.com/AP_Zenmashi/status/1523510877781372929", "https://twitter.com/AP_Zenmashi/status/1523507350153220098", "https://twitter.com/AP_Zenmashi/status/1523629199000731655", "https://twitter.com/AP_Zenmashi/status/1523725741799911424", "https://twitter.com/AP_Zenmashi/status/1523605966918279169", "https://twitter.com/AP_Zenmashi/status/1523672779249250304", "https://twitter.com/AP_Zenmashi/status/1523763066789187585", "https://twitter.com/AP_Zenmashi/status/1523484303149068288", "https://twitter.com/AP_Zenmashi/status/1523665453226553347", "https://twitter.com/AP_Zenmashi/status/1523609091028910081", "https://twitter.com/AP_Zenmashi/status/1523627037000302592", "https://twitter.com/AP_Zenmashi/status/1523508491163693056", "https://viz.greynoise.io/ip/analysis/0fc0805a-ed20-4be0-b91e-f4189a9619ce", "https://twitter.com/AP_Zenmashi/status/1523521321036320768", "https://twitter.com/AP_Zenmashi/status/1523527589213917184", "https://twitter.com/AP_Zenmashi/status/1523725423586119680", "https://twitter.com/AP_Zenmashi/status/1523507675203465218", "https://twitter.com/AP_Zenmashi/status/1523610427975819274", "https://twitter.com/AP_Zenmashi/status/1523510323185319937", "https://twitter.com/AP_Zenmashi/status/1523524920478625794", "https://twitter.com/AP_Zenmashi/status/1523507008544342018", "https://metadefender.com/results/file/bzI1MTAyMEJqaHhnTWEwLU1VS181QVhwNHlP", "https://viz.greynoise.io/ip/analysis/8f018fe6-9b92-4817-9dfd-e0e08177a92c - 10.29.25", "https://www.virustotal.com/graph/embed/g2484756a6bca4d9ca3b636b9775705296ed6d403bdd9471aab55afb1d5448630?theme=dark", "https://twitter.com/AP_Zenmashi/status/1523627294912221185", "https://twitter.com/AP_Zenmashi/status/1523511154383134720", "https://twitter.com/AP_Zenmashi/status/1523521575655714816", "https://polyswarm.network/scan/results/file/3a069ad7325feb0cc4d18ef7347ebdbed6290c2285634a2b43e07c7c6a759451", "https://twitter.com/AP_Zenmashi/status/1523606985844744193", "https://twitter.com/AP_Zenmashi/status/1523506530280415233", "https://twitter.com/AP_Zenmashi/status/1523623035940786177", "https://twitter.com/AP_Zenmashi/status/1523507204850352128", "https://twitter.com/AP_Zenmashi/status/1523483653296500738", "https://twitter.com/AP_Zenmashi/status/1523801089262624769", "https://twitter.com/AP_Zenmashi/status/1523484908462624768", "https://twitter.com/AP_Zenmashi/status/1523506877854023681", "https://twitter.com/AP_Zenmashi/status/1523623848813694977", "instagram.pdf", "https://twitter.com/AP_Zenmashi/status/1523511387477377024", "https://twitter.com/AP_Zenmashi/status/1523642663647735808", "https://twitter.com/AP_Zenmashi/status/1523725169180946432", "https://twitter.com/AP_Zenmashi/status/1523793363254018048", "as15169", "https://twitter.com/AP_Zenmashi/status/1523610900296454145", "https://twitter.com/AP_Zenmashi/status/1523508727638540288", "https://twitter.com/AP_Zenmashi/status/1523522219812433920", "instagram api 2.27.22", "https://twitter.com/AP_Zenmashi/status/1523506658085081090", "https://twitter.com/AP_Zenmashi/status/1523507819940438016", "https://twitter.com/AP_Zenmashi/status/1523608730855944192", "https://twitter.com/AP_Zenmashi/status/1523609887757914112", "https://twitter.com/AP_Zenmashi/status/1523610737620381698", "https://twitter.com/AP_Zenmashi/status/1523507984239783936", "https://twitter.com/AP_Zenmashi/status/1523605223360856065", "https://twitter.com/AP_Zenmashi/status/1523511913820598273", "https://twitter.com/AP_Zenmashi/status/1523509537730629632", "https://www.virustotal.com/gui/collection/0d117c1338ea8314404a1bfecd2e96a4b0d48dce795cbe57d702db3eb35998e1/iocs", "https://twitter.com/AP_Zenmashi/status/1523695001607151616", "https://twitter.com/AP_Zenmashi/status/1523649870527037441" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [ "Adversary Profile: Salt Typhoon Alignment The architectural gap identified by mudoSO mirrors the act" ], "malware_families": [], "industries": [ "Telecommunications", "Education", "Healthcare", "Technology" ], "unique_indicators": 21389 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/facebook.com", "whois": "http://whois.domaintools.com/facebook.com", "domain": "facebook.com", "hostname": "m.facebook.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 8, "pulses": [ { "id": "698d30c03b57c38dff915023", "name": "Double Umbrella AS15169/AS21928: This evaluates a critical structural convergence between Google (AS15169) and T-Mobile USA (AS21928) within the global Tier-1 routing backbone", "description": "Research credit: msudosos, The research identifies a high-fidelity pattern where traffic from dual origins commingles within a restricted lateral transit hub, allowing for horizontal movement across backbone providers that typically maintain distinct trust boundaries. Specifically, the Content Origin (Umbrella A) originated by Google (AS15169) reaches the core backbone through a high-trust sequence involving Arelion (AS1299), NTT (AS2914), and GTT (AS3257). Simultaneously, the Mobile Origin (Umbrella B) originated by T-Mobile USA (AS21928) enters the backbone via Cogent (AS174) and Lumen (AS3356). The findings designate Lumen (AS3356) as the central lateral hub where traffic pivots horizontally between the \u201cCore Five\u201d partners-including Zayo (AS6461) and Hurricane Electric (AS6939) \u2014before leaking to international sub-transit peers like Sparkle (AS6762) and Telxius (AS12956), finally exiting at global edge points such as PCCW (AS3491) and Tata (AS6453).", "modified": "2026-03-29T06:02:00.914000", "created": "2026-02-12T01:45:36.128000", "tags": [ "The dynamics of the mudoSOSIntersectalign with sophisticated adv" ], "references": [ "as15169" ], "public": 1, "adversary": "Adversary Profile: Salt Typhoon Alignment The architectural gap identified by mudoSO mirrors the act", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 3, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URI": 1, "domain": 2661, "URL": 6810, "hostname": 2147, "email": 56, "FileHash-SHA256": 2781, "CVE": 172, "FileHash-MD5": 365, "FileHash-SHA1": 344, "IPv4": 1, "CIDR": 20940 }, "indicator_count": 36278, "is_author": false, "is_subscribing": null, "subscriber_count": 73, "modified_text": "63 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68f5d903f30204d7740b4674", "name": "FFSS - Impacts of University Leadership (U of A) on Global EDU & Healthcare - 11.26.25", "description": "FFSS - Impacts of University Leadership (U of A) on Global EDU & Healthcare\nA missing piece of the puzzle. Redacted PII/PHI. \nRedacted specific users, but contains a list of URLs, IPs, and domains", "modified": "2025-12-26T19:00:31.552000", "created": "2025-10-20T06:38:59.827000", "tags": [ "lgxzvz0r", "entity", "please", "javascript", "Education", "Technology", "University", "Healthcare" ], "references": [ "https://www.virustotal.com/graph/embed/gdeb33b2284ec47739ae15daaf7a0ade8669439cc0f81433d9540e26c7831debc?theme=dark", "https://www.virustotal.com/gui/collection/0d117c1338ea8314404a1bfecd2e96a4b0d48dce795cbe57d702db3eb35998e1/iocs", "https://www.virustotal.com/graph/embed/g2484756a6bca4d9ca3b636b9775705296ed6d403bdd9471aab55afb1d5448630?theme=dark", "https://viz.greynoise.io/ip/analysis/0fc0805a-ed20-4be0-b91e-f4189a9619ce", "https://www.filescan.io/uploads/68f5e2a5c85c5c56972eaebb/reports/56841543-5615-4517-b718-77e27b2e8819/ioc", "https://polyswarm.network/scan/results/file/3a069ad7325feb0cc4d18ef7347ebdbed6290c2285634a2b43e07c7c6a759451", "https://metadefender.com/results/file/bzI1MTAyMEJqaHhnTWEwLU1VS181QVhwNHlP", "https://viz.greynoise.io/ip/analysis/8f018fe6-9b92-4817-9dfd-e0e08177a92c - 10.29.25", "https://viz.greynoise.io/ip/analysis/450bed8c-fc0d-48cb-aebe-56941da4886b - 11.26.25" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Education", "Healthcare", "Technology", "Telecommunications" ], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 2, "follower_count": 0, "vote": 0, "author": { "username": "Disable_Duck", "id": "244325", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 865, "hostname": 460, "URL": 1031, "FileHash-MD5": 3509, "email": 5, "FileHash-SHA1": 12, "FileHash-SHA256": 12 }, "indicator_count": 5894, "is_author": false, "is_subscribing": null, "subscriber_count": 130, "modified_text": "155 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708f273d1e6f4ccf4ab367", "name": "Instagram", "description": "", "modified": "2023-12-06T15:11:34.553000", "created": "2023-12-06T15:11:34.553000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 267, "hostname": 145, "domain": 34, "FileHash-SHA256": 402, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 856, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65707f7d51e635c843c1f5ba", "name": "instagram api 2.27.22", "description": "", "modified": "2023-12-06T14:04:45.884000", "created": "2023-12-06T14:04:45.884000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 227, "hostname": 108, "domain": 32, "FileHash-SHA256": 412, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 787, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6294de5fb87b368df54516b2", "name": "Instagram", "description": "", "modified": "2022-06-29T00:00:46.963000", "created": "2022-05-30T15:10:23.666000", "tags": [], "references": [ "instagram.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 145, "URL": 267, "domain": 34, "FileHash-SHA256": 402, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 856, "is_author": false, "is_subscribing": null, "subscriber_count": 405, "modified_text": "1432 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6279a8b9088adb58bf9ded82", "name": "Twitter Feed - AP_Zenmashi - 09-05-2022", "description": "", "modified": "2022-06-08T23:01:06.690000", "created": "2022-05-09T23:50:17.731000", "tags": [ "phishing" ], "references": [ "https://twitter.com/AP_Zenmashi/status/1523483461369344000", "https://twitter.com/AP_Zenmashi/status/1523483653296500738", "https://twitter.com/AP_Zenmashi/status/1523483810301878273", "https://twitter.com/AP_Zenmashi/status/1523484006964088832", "https://twitter.com/AP_Zenmashi/status/1523484170902970369", "https://twitter.com/AP_Zenmashi/status/1523484303149068288", "https://twitter.com/AP_Zenmashi/status/1523484454291132416", "https://twitter.com/AP_Zenmashi/status/1523484597324972032", "https://twitter.com/AP_Zenmashi/status/1523484747707871232", "https://twitter.com/AP_Zenmashi/status/1523484908462624768", "https://twitter.com/AP_Zenmashi/status/1523506359345770497", "https://twitter.com/AP_Zenmashi/status/1523506530280415233", "https://twitter.com/AP_Zenmashi/status/1523506658085081090", "https://twitter.com/AP_Zenmashi/status/1523506877854023681", "https://twitter.com/AP_Zenmashi/status/1523507008544342018", "https://twitter.com/AP_Zenmashi/status/1523507204850352128", "https://twitter.com/AP_Zenmashi/status/1523507350153220098", "https://twitter.com/AP_Zenmashi/status/1523507523567104000", "https://twitter.com/AP_Zenmashi/status/1523507675203465218", "https://twitter.com/AP_Zenmashi/status/1523507819940438016", "https://twitter.com/AP_Zenmashi/status/1523507984239783936", "https://twitter.com/AP_Zenmashi/status/1523508219116912640", "https://twitter.com/AP_Zenmashi/status/1523508491163693056", "https://twitter.com/AP_Zenmashi/status/1523508727638540288", "https://twitter.com/AP_Zenmashi/status/1523508988142583808", "https://twitter.com/AP_Zenmashi/status/1523509260101230593", "https://twitter.com/AP_Zenmashi/status/1523509537730629632", "https://twitter.com/AP_Zenmashi/status/1523509788692254720", "https://twitter.com/AP_Zenmashi/status/1523510051411226624", "https://twitter.com/AP_Zenmashi/status/1523510323185319937", "https://twitter.com/AP_Zenmashi/status/1523510612235481088", "https://twitter.com/AP_Zenmashi/status/1523510877781372929", "https://twitter.com/AP_Zenmashi/status/1523511154383134720", "https://twitter.com/AP_Zenmashi/status/1523511387477377024", "https://twitter.com/AP_Zenmashi/status/1523511662405615619", "https://twitter.com/AP_Zenmashi/status/1523511913820598273", "https://twitter.com/AP_Zenmashi/status/1523521321036320768", "https://twitter.com/AP_Zenmashi/status/1523521575655714816", "https://twitter.com/AP_Zenmashi/status/1523522219812433920", "https://twitter.com/AP_Zenmashi/status/1523523287581880320", "https://twitter.com/AP_Zenmashi/status/1523524920478625794", "https://twitter.com/AP_Zenmashi/status/1523527589213917184", "https://twitter.com/AP_Zenmashi/status/1523527836283596800", "https://twitter.com/AP_Zenmashi/status/1523604793847021568", "https://twitter.com/AP_Zenmashi/status/1523605223360856065", "https://twitter.com/AP_Zenmashi/status/1523605373705326593", "https://twitter.com/AP_Zenmashi/status/1523605530740109312", "https://twitter.com/AP_Zenmashi/status/1523605966918279169", "https://twitter.com/AP_Zenmashi/status/1523606461913321472", "https://twitter.com/AP_Zenmashi/status/1523606714179719168", "https://twitter.com/AP_Zenmashi/status/1523606985844744193", "https://twitter.com/AP_Zenmashi/status/1523607242192261121", "https://twitter.com/AP_Zenmashi/status/1523607517384757248", "https://twitter.com/AP_Zenmashi/status/1523608329502982146", "https://twitter.com/AP_Zenmashi/status/1523608730855944192", "https://twitter.com/AP_Zenmashi/status/1523609091028910081", "https://twitter.com/AP_Zenmashi/status/1523609887757914112", "https://twitter.com/AP_Zenmashi/status/1523610427975819274", "https://twitter.com/AP_Zenmashi/status/1523610599976239104", "https://twitter.com/AP_Zenmashi/status/1523610737620381698", "https://twitter.com/AP_Zenmashi/status/1523610900296454145", "https://twitter.com/AP_Zenmashi/status/1523619391430348800", "https://twitter.com/AP_Zenmashi/status/1523619705650524160", "https://twitter.com/AP_Zenmashi/status/1523620053954199555", "https://twitter.com/AP_Zenmashi/status/1523623035940786177", "https://twitter.com/AP_Zenmashi/status/1523623848813694977", "https://twitter.com/AP_Zenmashi/status/1523625081888382976", "https://twitter.com/AP_Zenmashi/status/1523625579584450562", "https://twitter.com/AP_Zenmashi/status/1523625844673245186", "https://twitter.com/AP_Zenmashi/status/1523627037000302592", "https://twitter.com/AP_Zenmashi/status/1523627294912221185", "https://twitter.com/AP_Zenmashi/status/1523628131051270144", "https://twitter.com/AP_Zenmashi/status/1523628953860460544", "https://twitter.com/AP_Zenmashi/status/1523629199000731655", "https://twitter.com/AP_Zenmashi/status/1523642539181453312", "https://twitter.com/AP_Zenmashi/status/1523642663647735808", "https://twitter.com/AP_Zenmashi/status/1523649870527037441", "https://twitter.com/AP_Zenmashi/status/1523665027500511233", "https://twitter.com/AP_Zenmashi/status/1523665194572201984", "https://twitter.com/AP_Zenmashi/status/1523665453226553347", "https://twitter.com/AP_Zenmashi/status/1523665695052996608", "https://twitter.com/AP_Zenmashi/status/1523672779249250304", "https://twitter.com/AP_Zenmashi/status/1523695001607151616", "https://twitter.com/AP_Zenmashi/status/1523725169180946432", "https://twitter.com/AP_Zenmashi/status/1523725423586119680", "https://twitter.com/AP_Zenmashi/status/1523725741799911424", "https://twitter.com/AP_Zenmashi/status/1523763066789187585", "https://twitter.com/AP_Zenmashi/status/1523763244288311296", "https://twitter.com/AP_Zenmashi/status/1523793363254018048", "https://twitter.com/AP_Zenmashi/status/1523801089262624769", "https://twitter.com/AP_Zenmashi/status/1523808457224114176" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 89 }, "indicator_count": 89, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1452 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6231f8fc54f3d393b8465d56", "name": "instagram.com_accounts_login_08.30.2021", "description": "", "modified": "2022-04-15T00:03:47.669000", "created": "2022-03-16T14:49:32.139000", "tags": [], "references": [ "instagram.com_accounts_login_08.30.2021.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 156, "hostname": 68, "domain": 20, "FileHash-SHA256": 246, "FileHash-MD5": 3, "FileHash-SHA1": 1 }, "indicator_count": 494, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1507 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "621bbbcda8aee7039e255b31", "name": "instagram api 2.27.22", "description": "", "modified": "2022-03-29T00:03:34.773000", "created": "2022-02-27T17:58:37.517000", "tags": [], "references": [ "instagram api 2.27.22" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 227, "hostname": 108, "domain": 32, "FileHash-SHA256": 412, "CIDR": 1, "FileHash-MD5": 7 }, "indicator_count": 787, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1524 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://m.facebook.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://m.facebook.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780242712.5661435 }