{
  "type": "URL",
  "indicator": "https://pdfkit.net",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://pdfkit.net",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 4235189335,
      "indicator": "https://pdfkit.net",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 8,
      "pulses": [
        {
          "id": "69ca434ee788ab3d090e6013",
          "name": "PDFKIT.NET - Trust Bypass Continued Concerns",
          "description": "A complete list of key facts and statistics:..3-magnitude-based data-sharing platform, which was first created in 2003, has been published by the University of Oxford.<-- Pretext. Msudosos: Ongoing concerns persist regarding the use of the pdfkit.net library in specific DMV versions, which may allow for trust bypass across multiple platforms. Research indicates that isolating affected areas or voiding certificates will not remediate this issue, as the corrupted trusted root persists even after firmware-level restores.",
          "modified": "2026-05-16T07:23:42.485000",
          "created": "2026-03-30T09:33:02.363000",
          "tags": [
            "fcc",
            "trust bypass",
            "pi",
            "hollow-root",
            "pdfkit.net",
            "cryptographically-invalid",
            "Docusign as an exploit",
            "gov / infra / healthcare / mun",
            "education",
            "US",
            "globalsign2020",
            "noend--point.",
            "null"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "Netherlands",
            "Italy",
            "United States of America"
          ],
          "malware_families": [
            {
              "id": "Stefan",
              "display_name": "Stefan",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1218",
              "name": "Signed Binary Proxy Execution",
              "display_name": "T1218 - Signed Binary Proxy Execution"
            }
          ],
          "industries": [
            "Telecommunications",
            "Education",
            "Government"
          ],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 1,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 156,
            "domain": 49,
            "email": 4,
            "hostname": 227,
            "FileHash-SHA1": 230,
            "FileHash-SHA256": 323,
            "FileHash-MD5": 321,
            "CVE": 6,
            "IPv4": 118
          },
          "indicator_count": 1434,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "16 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69bf6063da146ed025a8890f",
          "name": "Double Umbrella Wixc2 Followup Iocs",
          "description": "The full text of the report on GoDaddy.com, which was published on 1 January 2017, is published online by the Internet Service Authority (icann) and will not be displayed on its website.>>><<<< pretext i didnt write - refer to my double umbrella post for big IP data",
          "modified": "2026-05-16T07:01:20.093000",
          "created": "2026-03-22T03:22:11.640000",
          "tags": [
            "script urls",
            "present jun",
            "present jul",
            "a domains",
            "status",
            "present aug",
            "date",
            "united",
            "present feb",
            "meta",
            "title",
            "encrypt"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 298,
            "FileHash-SHA1": 280,
            "FileHash-SHA256": 336,
            "URL": 327,
            "domain": 548,
            "email": 8,
            "hostname": 136
          },
          "indicator_count": 1933,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "16 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f97a905451e3304319988b",
          "name": ".may 4 clone own on may 5",
          "description": "",
          "modified": "2026-05-07T02:57:38.229000",
          "created": "2026-05-05T05:05:20.493000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": "69f7fa1a282840a6e0aa370c",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 341,
            "FileHash-SHA1": 368,
            "FileHash-SHA256": 3143,
            "hostname": 2037,
            "IPv4": 186,
            "URL": 3288,
            "CIDR": 12,
            "email": 43,
            "domain": 1645,
            "URI": 1,
            "SSLCertFingerprint": 18,
            "CVE": 1
          },
          "indicator_count": 11083,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "25 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f97e85449b1177b410f480",
          "name": "Rats, Trojans,Backdoors, Exploits,- 5/6/26",
          "description": "[20th anniversary of the birth of human evolution is marked by the release of a new set of data, which will show how the world has changed over the past 50 years, and which is likely to change the way we understand it.] pretext. Our current reliance on outsourcing creates a critical failure point: we are exposing sensitive data through existing trust-bypass vulnerabilities, effectively hollowing out our own ecosystem. This 'open-door' policy for agents who lack basic technical fluencies\u2014specifically an inability to define or execute cryptographic validation\u2014is a liability. We are currently leaning on a model that is destined for collapse because it relies on oversight from minds with significant knowledge deficits. Without enforcing Zero Trust protocols and competent surveillance policies, we aren't just vulnerable; we are architecting our own obsolescence.",
          "modified": "2026-05-07T02:57:32.843000",
          "created": "2026-05-05T05:22:13.367000",
          "tags": [
            "ipv4",
            "url http",
            "url https",
            "type indicator",
            "role title",
            "added active",
            "related pulses"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 33,
            "FileHash-SHA1": 19,
            "FileHash-SHA256": 21,
            "IPv4": 12,
            "URL": 12,
            "domain": 1,
            "hostname": 6,
            "CVE": 1
          },
          "indicator_count": 105,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "25 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f97e847898f4a8bfa4acba",
          "name": "Rats, Trojans,Backdoors, Exploits,- 5/6/26",
          "description": "[20th anniversary of the birth of human evolution is marked by the release of a new set of data, which will show how the world has changed over the past 50 years, and which is likely to change the way we understand it.] pretext. Our current reliance on outsourcing creates a critical failure point: we are exposing sensitive data through existing trust-bypass vulnerabilities, effectively hollowing out our own ecosystem. This 'open-door' policy for agents who lack basic technical fluencies\u2014specifically an inability to define or execute cryptographic validation\u2014is a liability. We are currently leaning on a model that is destined for collapse because it relies on oversight from minds with significant knowledge deficits. Without enforcing Zero Trust protocols and competent surveillance policies, we aren't just vulnerable; we are architecting our own obsolescence.",
          "modified": "2026-05-07T02:57:31.822000",
          "created": "2026-05-05T05:22:12.699000",
          "tags": [
            "ipv4",
            "url http",
            "url https",
            "type indicator",
            "role title",
            "added active",
            "related pulses"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 23,
            "FileHash-SHA1": 15,
            "FileHash-SHA256": 15,
            "IPv4": 12,
            "URL": 12,
            "domain": 1,
            "hostname": 6,
            "CVE": 1
          },
          "indicator_count": 85,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "25 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f7fa1a282840a6e0aa370c",
          "name": "May the 4th be with... every destructed file that never died",
          "description": "[undreds of thousands of people have been signing a petition calling for the removal of the president, Barack Obama, from the White House and the UK's prime minister, Theresa May, to be remove] The wording here. Its also May3rd not May 4th.",
          "modified": "2026-05-05T05:04:02.911000",
          "created": "2026-05-04T01:44:57.811000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 341,
            "FileHash-SHA1": 368,
            "FileHash-SHA256": 3142,
            "hostname": 1890,
            "IPv4": 162,
            "URL": 3241,
            "CIDR": 12,
            "email": 37,
            "domain": 1616,
            "URI": 1,
            "SSLCertFingerprint": 18
          },
          "indicator_count": 10828,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "27 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69bf65566ad1032d77814945",
          "name": "Double Umbrella Wixc2 Followup Iocs [cloned pulse by msudosos]",
          "description": "",
          "modified": "2026-04-21T03:04:40.439000",
          "created": "2026-03-22T03:43:18.431000",
          "tags": [
            "script urls",
            "present jun",
            "present jul",
            "a domains",
            "status",
            "present aug",
            "date",
            "united",
            "present feb",
            "meta",
            "title",
            "encrypt"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69bf6063da146ed025a8890f",
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 148,
            "FileHash-SHA1": 130,
            "FileHash-SHA256": 186,
            "URL": 324,
            "domain": 545,
            "email": 8,
            "hostname": 136
          },
          "indicator_count": 1477,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 143,
          "modified_text": "41 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a552fd9d101a62085afa08",
          "name": "48f3d614d7a5bb1d98de0387af6f48fb8d08f892982821bbe9fd7dc867185454",
          "description": "More to come. #acoupleofbadapples",
          "modified": "2026-04-01T09:17:38.908000",
          "created": "2026-03-02T09:06:05.279000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 39,
            "FileHash-SHA1": 45,
            "FileHash-SHA256": 202,
            "CIDR": 2,
            "URL": 24,
            "domain": 121,
            "hostname": 23,
            "email": 6
          },
          "indicator_count": 462,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 66,
          "modified_text": "60 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Stefan"
          ],
          "industries": [
            "Telecommunications",
            "Education",
            "Government"
          ],
          "unique_indicators": 6128
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/pdfkit.net",
    "whois": "http://whois.domaintools.com/pdfkit.net",
    "domain": "pdfkit.net",
    "hostname": "Unavailable"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 8,
  "pulses": [
    {
      "id": "69ca434ee788ab3d090e6013",
      "name": "PDFKIT.NET - Trust Bypass Continued Concerns",
      "description": "A complete list of key facts and statistics:..3-magnitude-based data-sharing platform, which was first created in 2003, has been published by the University of Oxford.<-- Pretext. Msudosos: Ongoing concerns persist regarding the use of the pdfkit.net library in specific DMV versions, which may allow for trust bypass across multiple platforms. Research indicates that isolating affected areas or voiding certificates will not remediate this issue, as the corrupted trusted root persists even after firmware-level restores.",
      "modified": "2026-05-16T07:23:42.485000",
      "created": "2026-03-30T09:33:02.363000",
      "tags": [
        "fcc",
        "trust bypass",
        "pi",
        "hollow-root",
        "pdfkit.net",
        "cryptographically-invalid",
        "Docusign as an exploit",
        "gov / infra / healthcare / mun",
        "education",
        "US",
        "globalsign2020",
        "noend--point.",
        "null"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "Netherlands",
        "Italy",
        "United States of America"
      ],
      "malware_families": [
        {
          "id": "Stefan",
          "display_name": "Stefan",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1218",
          "name": "Signed Binary Proxy Execution",
          "display_name": "T1218 - Signed Binary Proxy Execution"
        }
      ],
      "industries": [
        "Telecommunications",
        "Education",
        "Government"
      ],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 1,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 156,
        "domain": 49,
        "email": 4,
        "hostname": 227,
        "FileHash-SHA1": 230,
        "FileHash-SHA256": 323,
        "FileHash-MD5": 321,
        "CVE": 6,
        "IPv4": 118
      },
      "indicator_count": 1434,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "16 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69bf6063da146ed025a8890f",
      "name": "Double Umbrella Wixc2 Followup Iocs",
      "description": "The full text of the report on GoDaddy.com, which was published on 1 January 2017, is published online by the Internet Service Authority (icann) and will not be displayed on its website.>>><<<< pretext i didnt write - refer to my double umbrella post for big IP data",
      "modified": "2026-05-16T07:01:20.093000",
      "created": "2026-03-22T03:22:11.640000",
      "tags": [
        "script urls",
        "present jun",
        "present jul",
        "a domains",
        "status",
        "present aug",
        "date",
        "united",
        "present feb",
        "meta",
        "title",
        "encrypt"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 298,
        "FileHash-SHA1": 280,
        "FileHash-SHA256": 336,
        "URL": 327,
        "domain": 548,
        "email": 8,
        "hostname": 136
      },
      "indicator_count": 1933,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "16 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f97a905451e3304319988b",
      "name": ".may 4 clone own on may 5",
      "description": "",
      "modified": "2026-05-07T02:57:38.229000",
      "created": "2026-05-05T05:05:20.493000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": "69f7fa1a282840a6e0aa370c",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 341,
        "FileHash-SHA1": 368,
        "FileHash-SHA256": 3143,
        "hostname": 2037,
        "IPv4": 186,
        "URL": 3288,
        "CIDR": 12,
        "email": 43,
        "domain": 1645,
        "URI": 1,
        "SSLCertFingerprint": 18,
        "CVE": 1
      },
      "indicator_count": 11083,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "25 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f97e85449b1177b410f480",
      "name": "Rats, Trojans,Backdoors, Exploits,- 5/6/26",
      "description": "[20th anniversary of the birth of human evolution is marked by the release of a new set of data, which will show how the world has changed over the past 50 years, and which is likely to change the way we understand it.] pretext. Our current reliance on outsourcing creates a critical failure point: we are exposing sensitive data through existing trust-bypass vulnerabilities, effectively hollowing out our own ecosystem. This 'open-door' policy for agents who lack basic technical fluencies\u2014specifically an inability to define or execute cryptographic validation\u2014is a liability. We are currently leaning on a model that is destined for collapse because it relies on oversight from minds with significant knowledge deficits. Without enforcing Zero Trust protocols and competent surveillance policies, we aren't just vulnerable; we are architecting our own obsolescence.",
      "modified": "2026-05-07T02:57:32.843000",
      "created": "2026-05-05T05:22:13.367000",
      "tags": [
        "ipv4",
        "url http",
        "url https",
        "type indicator",
        "role title",
        "added active",
        "related pulses"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 33,
        "FileHash-SHA1": 19,
        "FileHash-SHA256": 21,
        "IPv4": 12,
        "URL": 12,
        "domain": 1,
        "hostname": 6,
        "CVE": 1
      },
      "indicator_count": 105,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "25 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f97e847898f4a8bfa4acba",
      "name": "Rats, Trojans,Backdoors, Exploits,- 5/6/26",
      "description": "[20th anniversary of the birth of human evolution is marked by the release of a new set of data, which will show how the world has changed over the past 50 years, and which is likely to change the way we understand it.] pretext. Our current reliance on outsourcing creates a critical failure point: we are exposing sensitive data through existing trust-bypass vulnerabilities, effectively hollowing out our own ecosystem. This 'open-door' policy for agents who lack basic technical fluencies\u2014specifically an inability to define or execute cryptographic validation\u2014is a liability. We are currently leaning on a model that is destined for collapse because it relies on oversight from minds with significant knowledge deficits. Without enforcing Zero Trust protocols and competent surveillance policies, we aren't just vulnerable; we are architecting our own obsolescence.",
      "modified": "2026-05-07T02:57:31.822000",
      "created": "2026-05-05T05:22:12.699000",
      "tags": [
        "ipv4",
        "url http",
        "url https",
        "type indicator",
        "role title",
        "added active",
        "related pulses"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 23,
        "FileHash-SHA1": 15,
        "FileHash-SHA256": 15,
        "IPv4": 12,
        "URL": 12,
        "domain": 1,
        "hostname": 6,
        "CVE": 1
      },
      "indicator_count": 85,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "25 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f7fa1a282840a6e0aa370c",
      "name": "May the 4th be with... every destructed file that never died",
      "description": "[undreds of thousands of people have been signing a petition calling for the removal of the president, Barack Obama, from the White House and the UK's prime minister, Theresa May, to be remove] The wording here. Its also May3rd not May 4th.",
      "modified": "2026-05-05T05:04:02.911000",
      "created": "2026-05-04T01:44:57.811000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 341,
        "FileHash-SHA1": 368,
        "FileHash-SHA256": 3142,
        "hostname": 1890,
        "IPv4": 162,
        "URL": 3241,
        "CIDR": 12,
        "email": 37,
        "domain": 1616,
        "URI": 1,
        "SSLCertFingerprint": 18
      },
      "indicator_count": 10828,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "27 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69bf65566ad1032d77814945",
      "name": "Double Umbrella Wixc2 Followup Iocs [cloned pulse by msudosos]",
      "description": "",
      "modified": "2026-04-21T03:04:40.439000",
      "created": "2026-03-22T03:43:18.431000",
      "tags": [
        "script urls",
        "present jun",
        "present jul",
        "a domains",
        "status",
        "present aug",
        "date",
        "united",
        "present feb",
        "meta",
        "title",
        "encrypt"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69bf6063da146ed025a8890f",
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 148,
        "FileHash-SHA1": 130,
        "FileHash-SHA256": 186,
        "URL": 324,
        "domain": 545,
        "email": 8,
        "hostname": 136
      },
      "indicator_count": 1477,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 143,
      "modified_text": "41 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "69a552fd9d101a62085afa08",
      "name": "48f3d614d7a5bb1d98de0387af6f48fb8d08f892982821bbe9fd7dc867185454",
      "description": "More to come. #acoupleofbadapples",
      "modified": "2026-04-01T09:17:38.908000",
      "created": "2026-03-02T09:06:05.279000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 39,
        "FileHash-SHA1": 45,
        "FileHash-SHA256": 202,
        "CIDR": 2,
        "URL": 24,
        "domain": 121,
        "hostname": 23,
        "email": 6
      },
      "indicator_count": 462,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 66,
      "modified_text": "60 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://pdfkit.net",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://pdfkit.net",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780304454.4690347
}