{
  "type": "URL",
  "indicator": "https://newsoutlets.net/mega1",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://newsoutlets.net/mega1",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 3831385509,
      "indicator": "https://newsoutlets.net/mega1",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 1,
      "pulses": [
        {
          "id": "65908437d0069b27827ec6be",
          "name": "Crypto Phishing Sites",
          "description": "These sites impersonate cryptocurrency exchanges like OpenSea, Etherscan, and Bittrex, and attempt to trick users into giving access to their cryptocurrency wallets.\n\nFindings are primarily my own, but the collection includes IOCs identified by other researchers.",
          "modified": "2025-02-03T19:58:08.040000",
          "created": "2023-12-30T20:57:27.100000",
          "tags": [
            "id3d79580 url",
            "id url",
            "Crypto",
            "Cryptocurrency"
          ],
          "references": [
            "https://www.virustotal.com/gui/collection/ae8247821d12c4b8653c15034eeb3f0bf04e4e5104055fb2756fe32804fa2b3a"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1566",
              "name": "Phishing",
              "display_name": "T1566 - Phishing"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 19,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "ajmeese7",
            "id": "218349",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_218349/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 82,
            "FileHash-MD5": 2,
            "FileHash-SHA1": 1,
            "FileHash-SHA256": 13,
            "domain": 117,
            "hostname": 28,
            "email": 5
          },
          "indicator_count": 248,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 52,
          "modified_text": "481 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://www.virustotal.com/gui/collection/ae8247821d12c4b8653c15034eeb3f0bf04e4e5104055fb2756fe32804fa2b3a"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 260
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/newsoutlets.net",
    "whois": "http://whois.domaintools.com/newsoutlets.net",
    "domain": "newsoutlets.net",
    "hostname": "Unavailable"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 1,
  "pulses": [
    {
      "id": "65908437d0069b27827ec6be",
      "name": "Crypto Phishing Sites",
      "description": "These sites impersonate cryptocurrency exchanges like OpenSea, Etherscan, and Bittrex, and attempt to trick users into giving access to their cryptocurrency wallets.\n\nFindings are primarily my own, but the collection includes IOCs identified by other researchers.",
      "modified": "2025-02-03T19:58:08.040000",
      "created": "2023-12-30T20:57:27.100000",
      "tags": [
        "id3d79580 url",
        "id url",
        "Crypto",
        "Cryptocurrency"
      ],
      "references": [
        "https://www.virustotal.com/gui/collection/ae8247821d12c4b8653c15034eeb3f0bf04e4e5104055fb2756fe32804fa2b3a"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1566",
          "name": "Phishing",
          "display_name": "T1566 - Phishing"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 19,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "ajmeese7",
        "id": "218349",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_218349/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 82,
        "FileHash-MD5": 2,
        "FileHash-SHA1": 1,
        "FileHash-SHA256": 13,
        "domain": 117,
        "hostname": 28,
        "email": 5
      },
      "indicator_count": 248,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 52,
      "modified_text": "481 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://newsoutlets.net/mega1",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://newsoutlets.net/mega1",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780213577.153387
}