{
  "type": "URL",
  "indicator": "https://r.bottom-r.top",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://r.bottom-r.top",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 3155143865,
      "indicator": "https://r.bottom-r.top",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 4,
      "pulses": [
        {
          "id": "62e1ca167a1591e7b4ca1129",
          "name": "VirusTotal view-source on https://www.virustotal.com/en/file/undefined/analysis/",
          "description": "someone really needs to figure out wtf this is all doing it has to be part of the net.sh",
          "modified": "2022-07-28T02:05:04.183000",
          "created": "2022-07-27T23:28:22.504000",
          "tags": [
            "array",
            "object",
            "typeof t",
            "layer1",
            "error",
            "path",
            "function",
            "typeerror",
            "date",
            "svg export",
            "span",
            "null",
            "unknown",
            "click",
            "february",
            "april",
            "june",
            "august",
            "this",
            "void",
            "bounce",
            "string",
            "regexp",
            "number",
            "sxa0",
            "amptoken",
            "optout",
            "notfound",
            "contenttype",
            "form",
            "copyright",
            "element",
            "polymer project",
            "authors",
            "bsd style",
            "code",
            "google",
            "software",
            "window",
            "generator",
            "comment",
            "trident",
            "typeof e",
            "typeof symbol",
            "typeof btoa",
            "btoa",
            "typeof reflect",
            "boolean",
            "customevent",
            "plugin",
            "build",
            "home",
            "intelligence",
            "graph",
            "report",
            "urls",
            "please",
            "javascript",
            "https://www.virustotal.com/en/file/undefined/analysis/",
            "net.sh"
          ],
          "references": [
            "entity%3Aip%20whois%3Ainfo%40anodicnetwork.com.html",
            "14.main.bundle.91f9f7ff635e0b797de3.js",
            "5.main.bundle.e92e5e24e074f9c2a52b.js",
            "0.main.bundle.a9d68f5204cd3ac257b6.js",
            "webcomponent-polyfill.js",
            "analytics.js",
            "12.main.bundle.50be73a11d1d3745a5ee.js",
            "\"<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"> <html xmlns=\"http://www.w3.org/1999/xhtml\">   <head>     <title>           Page not found       </title>       <meta http-equiv=\"Content-type\" content=\"text/html; charset=utf-8\">     <meta http-equiv=\"Pragma\" content=\"no-cache\">     <meta http-equiv=\"Pragma\" content=\"no-store\">     <meta http-equiv=\"Expires\" content=\"-1\">     <meta name=\"keywords\" content=\"virustotal, antivirus, infected, free, sca",
            "https://www.virustotal.com/en/file/undefined/analysis/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 1,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "dorkingbeauty1",
            "id": "80137",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1538,
            "FileHash-SHA256": 138,
            "hostname": 363,
            "domain": 235
          },
          "indicator_count": 2274,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 392,
          "modified_text": "1404 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6266e05eead46d425dff53c2",
          "name": "inap.com - Drift Widget",
          "description": "function R(a,b,c,d,e,f) is a new type of JavaScript, which allows the browser to control its browser without a set of buttons or controls..",
          "modified": "2022-05-25T00:04:03.622000",
          "created": "2022-04-25T17:54:38.551000",
          "tags": [
            "drift widget",
            "javascript",
            "typeerror",
            "name",
            "typeof t",
            "getconfig",
            "default",
            "typeof e",
            "area",
            "event",
            "shadowroot",
            "boolean",
            "error",
            "shown",
            "click",
            "null",
            "window",
            "trident",
            "body",
            "formdata",
            "property",
            "377867625",
            "script",
            "textjavascript",
            "piscriptnum",
            "function",
            "regexp",
            "class",
            "attr",
            "pseudo",
            "child",
            "typeof module",
            "reduceright",
            "vd",
            "number",
            "string",
            "trackevent",
            "copyright",
            "standard",
            "pageview",
            "hpgform",
            "hpgdownload",
            "path",
            "download",
            "derek",
            "void",
            "date",
            "code",
            "ieproto",
            "object",
            "typeof",
            "typeof n",
            "widgetrootqa",
            "driftconductor",
            "license",
            "small batch",
            "apache license",
            "version",
            "unless",
            "as is",
            "basis",
            "without",
            "warranties or",
            "apache",
            "sessionid",
            "session",
            "post",
            "contenttype",
            "snull"
          ],
          "references": [
            "xfe-URL-Inap.com-stix2-2.1-export.json",
            "https://ws.zoominfo.com/pixel/1FBtpCEkYmFObuGSt7zC",
            "https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js",
            "https://js.driftt.com/include/1650908400000/puh6a6h2pc6k.js",
            "https://www.googletagmanager.com/gtm.js?id=GTM-KPQ5FFK",
            "https://www.inap.com/inap/wp-includes/js/jquery/jquery.min.js?ver=3.6.0",
            "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
            "https://go.inap.com/analytics?conly=true&visitor_id=377865231&visitor_id_sign=fcd1b8a6054d2c2490cb77f4d0581558910b2792df8a7d07c6a0b0282eba2cd0db306c84706e8688a4165a4437c383a8e130703a&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
            "https://js.driftt.com/conductor/assets/4.fa5fc959.chunk.js",
            "https://www.inap.com/inap/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.4",
            "https://www.inap.com/inap/wp-content/themes/inap/assets/js/bootstrap.bundle.min.js?ver=2.0.0",
            "https://8794842.fls.doubleclick.net/activityi;src=8794842;type=front;cat=newun0;ord=1047846285161;gtm=2wg4k0;auiddc=1226623845.1650908333;~oref=https%3A%2F%2Fwww.inap.com%2F",
            "https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1650908332393",
            "https://js.driftt.com/core?embedId=puh6a6h2pc6k&region=US&forceShow=false&skipCampaigns=false&sessionId=34bf8b51-4431-413e-ac31-6833e0d5600c&sessionStarted=1650908334.439&campaignRefreshToken=6e5a949b-b933-4b76-8614-902cd18d34a6&hideController=false&pageLoadStartTime=1650908332393&mode=CHAT&driftEnableLog=false"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "Vd",
              "display_name": "Vd",
              "target": null
            },
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1239,
            "URL": 3619,
            "domain": 565,
            "FileHash-SHA256": 300
          },
          "indicator_count": 5723,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1468 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "624dbf641e6a04169629e662",
          "name": "Malware-USA",
          "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
          "modified": "2022-05-06T16:01:29.122000",
          "created": "2022-04-06T16:27:16.093000",
          "tags": [
            "dataaos",
            "100px00",
            "dataaosfade",
            "100px0",
            "dataaoszoom",
            "dataaosflip",
            "woff2",
            "fontface",
            "sans",
            "u0259",
            "u1e001eff",
            "u2020",
            "u20a020ab",
            "u20ad20cf",
            "u2113",
            "u2c602c7f",
            "reduceright",
            "number",
            "string",
            "gtl5jtn10ss",
            "regexp",
            "error",
            "r300",
            "copyright",
            "dafunction",
            "gafunction",
            "uint8array",
            "date",
            "path",
            "void",
            "const",
            "click",
            "select",
            "scroll",
            "mobile",
            "template",
            "template url",
            "license",
            "easy selector",
            "easy event",
            "easy",
            "back",
            "typeof e",
            "typeof t",
            "this",
            "main",
            "swiper",
            "button",
            "most",
            "mit license",
            "android",
            "win32",
            "null",
            "dblock",
            "email form",
            "validation",
            "action",
            "formdata",
            "api url",
            "typeof define",
            "typeof module",
            "gplv3",
            "metafizzy",
            "math",
            "plyr",
            "typeof symbol",
            "typeerror",
            "tnull",
            "cnull",
            "typeof",
            "inject",
            "playbook",
            "name",
            "getconfig",
            "default",
            "area",
            "event",
            "shadowroot",
            "boolean",
            "window",
            "trident",
            "body",
            "ofunction",
            "symbol",
            "mfunction",
            "sfunction",
            "quando",
            "quem",
            "fundada em",
            "informtica",
            "sistemas",
            "segurana",
            "softwares",
            "supermercados",
            "lojas",
            "restaurantes",
            "padarias"
          ],
          "references": [
            "http://www.shopsegsistemas.com.br/",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/js/main.js",
            "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
            "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
            "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
            "xfe-IP-50.116.87.164-stix2-2.0-export.json"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            },
            {
              "id": "Quando",
              "display_name": "Quando",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1498",
              "name": "Network Denial of Service",
              "display_name": "T1498 - Network Denial of Service"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 254,
            "URL": 815,
            "FileHash-SHA256": 168,
            "domain": 174
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1486 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "624dbf64e7682b3bf049129c",
          "name": "Malware-USA",
          "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
          "modified": "2022-05-06T16:01:29.122000",
          "created": "2022-04-06T16:27:16.842000",
          "tags": [
            "dataaos",
            "100px00",
            "dataaosfade",
            "100px0",
            "dataaoszoom",
            "dataaosflip",
            "woff2",
            "fontface",
            "sans",
            "u0259",
            "u1e001eff",
            "u2020",
            "u20a020ab",
            "u20ad20cf",
            "u2113",
            "u2c602c7f",
            "reduceright",
            "number",
            "string",
            "gtl5jtn10ss",
            "regexp",
            "error",
            "r300",
            "copyright",
            "dafunction",
            "gafunction",
            "uint8array",
            "date",
            "path",
            "void",
            "const",
            "click",
            "select",
            "scroll",
            "mobile",
            "template",
            "template url",
            "license",
            "easy selector",
            "easy event",
            "easy",
            "back",
            "typeof e",
            "typeof t",
            "this",
            "main",
            "swiper",
            "button",
            "most",
            "mit license",
            "android",
            "win32",
            "null",
            "dblock",
            "email form",
            "validation",
            "action",
            "formdata",
            "api url",
            "typeof define",
            "typeof module",
            "gplv3",
            "metafizzy",
            "math",
            "plyr",
            "typeof symbol",
            "typeerror",
            "tnull",
            "cnull",
            "typeof",
            "inject",
            "playbook",
            "name",
            "getconfig",
            "default",
            "area",
            "event",
            "shadowroot",
            "boolean",
            "window",
            "trident",
            "body",
            "ofunction",
            "symbol",
            "mfunction",
            "sfunction",
            "quando",
            "quem",
            "fundada em",
            "informtica",
            "sistemas",
            "segurana",
            "softwares",
            "supermercados",
            "lojas",
            "restaurantes",
            "padarias"
          ],
          "references": [
            "http://www.shopsegsistemas.com.br/",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/js/main.js",
            "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
            "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
            "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
            "xfe-IP-50.116.87.164-stix2-2.0-export.json"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            },
            {
              "id": "Quando",
              "display_name": "Quando",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1498",
              "name": "Network Denial of Service",
              "display_name": "T1498 - Network Denial of Service"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 254,
            "URL": 815,
            "FileHash-SHA256": 168,
            "domain": 174
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1486 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://www.googletagmanager.com/gtm.js?id=GTM-KPQ5FFK",
        "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
        "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
        "14.main.bundle.91f9f7ff635e0b797de3.js",
        "https://www.inap.com/inap/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.4",
        "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
        "https://js.driftt.com/conductor/assets/4.fa5fc959.chunk.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
        "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
        "\"<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"> <html xmlns=\"http://www.w3.org/1999/xhtml\">   <head>     <title>           Page not found       </title>       <meta http-equiv=\"Content-type\" content=\"text/html; charset=utf-8\">     <meta http-equiv=\"Pragma\" content=\"no-cache\">     <meta http-equiv=\"Pragma\" content=\"no-store\">     <meta http-equiv=\"Expires\" content=\"-1\">     <meta name=\"keywords\" content=\"virustotal, antivirus, infected, free, sca",
        "https://www.virustotal.com/en/file/undefined/analysis/",
        "xfe-URL-Inap.com-stix2-2.1-export.json",
        "http://www.shopsegsistemas.com.br/assets/js/main.js",
        "https://go.inap.com/analytics?conly=true&visitor_id=377865231&visitor_id_sign=fcd1b8a6054d2c2490cb77f4d0581558910b2792df8a7d07c6a0b0282eba2cd0db306c84706e8688a4165a4437c383a8e130703a&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
        "webcomponent-polyfill.js",
        "https://js.driftt.com/core?embedId=puh6a6h2pc6k&region=US&forceShow=false&skipCampaigns=false&sessionId=34bf8b51-4431-413e-ac31-6833e0d5600c&sessionStarted=1650908334.439&campaignRefreshToken=6e5a949b-b933-4b76-8614-902cd18d34a6&hideController=false&pageLoadStartTime=1650908332393&mode=CHAT&driftEnableLog=false",
        "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
        "https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1650908332393",
        "5.main.bundle.e92e5e24e074f9c2a52b.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
        "http://www.shopsegsistemas.com.br/",
        "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
        "xfe-IP-50.116.87.164-stix2-2.0-export.json",
        "https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js",
        "12.main.bundle.50be73a11d1d3745a5ee.js",
        "https://js.driftt.com/include/1650908400000/puh6a6h2pc6k.js",
        "entity%3Aip%20whois%3Ainfo%40anodicnetwork.com.html",
        "https://8794842.fls.doubleclick.net/activityi;src=8794842;type=front;cat=newun0;ord=1047846285161;gtm=2wg4k0;auiddc=1226623845.1650908333;~oref=https%3A%2F%2Fwww.inap.com%2F",
        "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
        "https://www.inap.com/inap/wp-includes/js/jquery/jquery.min.js?ver=3.6.0",
        "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
        "https://ws.zoominfo.com/pixel/1FBtpCEkYmFObuGSt7zC",
        "analytics.js",
        "https://www.inap.com/inap/wp-content/themes/inap/assets/js/bootstrap.bundle.min.js?ver=2.0.0",
        "0.main.bundle.a9d68f5204cd3ac257b6.js"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Quando",
            "Reduceright",
            "Vd"
          ],
          "industries": [],
          "unique_indicators": 8320
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/bottom-r.top",
    "whois": "http://whois.domaintools.com/bottom-r.top",
    "domain": "bottom-r.top",
    "hostname": "r.bottom-r.top"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 4,
  "pulses": [
    {
      "id": "62e1ca167a1591e7b4ca1129",
      "name": "VirusTotal view-source on https://www.virustotal.com/en/file/undefined/analysis/",
      "description": "someone really needs to figure out wtf this is all doing it has to be part of the net.sh",
      "modified": "2022-07-28T02:05:04.183000",
      "created": "2022-07-27T23:28:22.504000",
      "tags": [
        "array",
        "object",
        "typeof t",
        "layer1",
        "error",
        "path",
        "function",
        "typeerror",
        "date",
        "svg export",
        "span",
        "null",
        "unknown",
        "click",
        "february",
        "april",
        "june",
        "august",
        "this",
        "void",
        "bounce",
        "string",
        "regexp",
        "number",
        "sxa0",
        "amptoken",
        "optout",
        "notfound",
        "contenttype",
        "form",
        "copyright",
        "element",
        "polymer project",
        "authors",
        "bsd style",
        "code",
        "google",
        "software",
        "window",
        "generator",
        "comment",
        "trident",
        "typeof e",
        "typeof symbol",
        "typeof btoa",
        "btoa",
        "typeof reflect",
        "boolean",
        "customevent",
        "plugin",
        "build",
        "home",
        "intelligence",
        "graph",
        "report",
        "urls",
        "please",
        "javascript",
        "https://www.virustotal.com/en/file/undefined/analysis/",
        "net.sh"
      ],
      "references": [
        "entity%3Aip%20whois%3Ainfo%40anodicnetwork.com.html",
        "14.main.bundle.91f9f7ff635e0b797de3.js",
        "5.main.bundle.e92e5e24e074f9c2a52b.js",
        "0.main.bundle.a9d68f5204cd3ac257b6.js",
        "webcomponent-polyfill.js",
        "analytics.js",
        "12.main.bundle.50be73a11d1d3745a5ee.js",
        "\"<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"> <html xmlns=\"http://www.w3.org/1999/xhtml\">   <head>     <title>           Page not found       </title>       <meta http-equiv=\"Content-type\" content=\"text/html; charset=utf-8\">     <meta http-equiv=\"Pragma\" content=\"no-cache\">     <meta http-equiv=\"Pragma\" content=\"no-store\">     <meta http-equiv=\"Expires\" content=\"-1\">     <meta name=\"keywords\" content=\"virustotal, antivirus, infected, free, sca",
        "https://www.virustotal.com/en/file/undefined/analysis/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 1,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "dorkingbeauty1",
        "id": "80137",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1538,
        "FileHash-SHA256": 138,
        "hostname": 363,
        "domain": 235
      },
      "indicator_count": 2274,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 392,
      "modified_text": "1404 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6266e05eead46d425dff53c2",
      "name": "inap.com - Drift Widget",
      "description": "function R(a,b,c,d,e,f) is a new type of JavaScript, which allows the browser to control its browser without a set of buttons or controls..",
      "modified": "2022-05-25T00:04:03.622000",
      "created": "2022-04-25T17:54:38.551000",
      "tags": [
        "drift widget",
        "javascript",
        "typeerror",
        "name",
        "typeof t",
        "getconfig",
        "default",
        "typeof e",
        "area",
        "event",
        "shadowroot",
        "boolean",
        "error",
        "shown",
        "click",
        "null",
        "window",
        "trident",
        "body",
        "formdata",
        "property",
        "377867625",
        "script",
        "textjavascript",
        "piscriptnum",
        "function",
        "regexp",
        "class",
        "attr",
        "pseudo",
        "child",
        "typeof module",
        "reduceright",
        "vd",
        "number",
        "string",
        "trackevent",
        "copyright",
        "standard",
        "pageview",
        "hpgform",
        "hpgdownload",
        "path",
        "download",
        "derek",
        "void",
        "date",
        "code",
        "ieproto",
        "object",
        "typeof",
        "typeof n",
        "widgetrootqa",
        "driftconductor",
        "license",
        "small batch",
        "apache license",
        "version",
        "unless",
        "as is",
        "basis",
        "without",
        "warranties or",
        "apache",
        "sessionid",
        "session",
        "post",
        "contenttype",
        "snull"
      ],
      "references": [
        "xfe-URL-Inap.com-stix2-2.1-export.json",
        "https://ws.zoominfo.com/pixel/1FBtpCEkYmFObuGSt7zC",
        "https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js",
        "https://js.driftt.com/include/1650908400000/puh6a6h2pc6k.js",
        "https://www.googletagmanager.com/gtm.js?id=GTM-KPQ5FFK",
        "https://www.inap.com/inap/wp-includes/js/jquery/jquery.min.js?ver=3.6.0",
        "https://pi.pardot.com/analytics?ver=3&visitor_id=&visitor_id_sign=&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
        "https://go.inap.com/analytics?conly=true&visitor_id=377865231&visitor_id_sign=fcd1b8a6054d2c2490cb77f4d0581558910b2792df8a7d07c6a0b0282eba2cd0db306c84706e8688a4165a4437c383a8e130703a&pi_opt_in=&campaign_id=28453&account_id=235392&title=Hybrid%20IT%20%26%20Enterprise%20Cloud%20Solutions%20-%20INAP&url=https%3A%2F%2Fwww.inap.com%2F&referrer=",
        "https://js.driftt.com/conductor/assets/4.fa5fc959.chunk.js",
        "https://www.inap.com/inap/wp-content/plugins/wp-user-avatar/assets/js/frontend.min.js?ver=3.2.4",
        "https://www.inap.com/inap/wp-content/themes/inap/assets/js/bootstrap.bundle.min.js?ver=2.0.0",
        "https://8794842.fls.doubleclick.net/activityi;src=8794842;type=front;cat=newun0;ord=1047846285161;gtm=2wg4k0;auiddc=1226623845.1650908333;~oref=https%3A%2F%2Fwww.inap.com%2F",
        "https://js.driftt.com/core/chat?region=US&driftEnableLog=false&pageLoadStartTime=1650908332393",
        "https://js.driftt.com/core?embedId=puh6a6h2pc6k&region=US&forceShow=false&skipCampaigns=false&sessionId=34bf8b51-4431-413e-ac31-6833e0d5600c&sessionStarted=1650908334.439&campaignRefreshToken=6e5a949b-b933-4b76-8614-902cd18d34a6&hideController=false&pageLoadStartTime=1650908332393&mode=CHAT&driftEnableLog=false"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "Vd",
          "display_name": "Vd",
          "target": null
        },
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 9,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 1239,
        "URL": 3619,
        "domain": 565,
        "FileHash-SHA256": 300
      },
      "indicator_count": 5723,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1468 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "624dbf641e6a04169629e662",
      "name": "Malware-USA",
      "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
      "modified": "2022-05-06T16:01:29.122000",
      "created": "2022-04-06T16:27:16.093000",
      "tags": [
        "dataaos",
        "100px00",
        "dataaosfade",
        "100px0",
        "dataaoszoom",
        "dataaosflip",
        "woff2",
        "fontface",
        "sans",
        "u0259",
        "u1e001eff",
        "u2020",
        "u20a020ab",
        "u20ad20cf",
        "u2113",
        "u2c602c7f",
        "reduceright",
        "number",
        "string",
        "gtl5jtn10ss",
        "regexp",
        "error",
        "r300",
        "copyright",
        "dafunction",
        "gafunction",
        "uint8array",
        "date",
        "path",
        "void",
        "const",
        "click",
        "select",
        "scroll",
        "mobile",
        "template",
        "template url",
        "license",
        "easy selector",
        "easy event",
        "easy",
        "back",
        "typeof e",
        "typeof t",
        "this",
        "main",
        "swiper",
        "button",
        "most",
        "mit license",
        "android",
        "win32",
        "null",
        "dblock",
        "email form",
        "validation",
        "action",
        "formdata",
        "api url",
        "typeof define",
        "typeof module",
        "gplv3",
        "metafizzy",
        "math",
        "plyr",
        "typeof symbol",
        "typeerror",
        "tnull",
        "cnull",
        "typeof",
        "inject",
        "playbook",
        "name",
        "getconfig",
        "default",
        "area",
        "event",
        "shadowroot",
        "boolean",
        "window",
        "trident",
        "body",
        "ofunction",
        "symbol",
        "mfunction",
        "sfunction",
        "quando",
        "quem",
        "fundada em",
        "informtica",
        "sistemas",
        "segurana",
        "softwares",
        "supermercados",
        "lojas",
        "restaurantes",
        "padarias"
      ],
      "references": [
        "http://www.shopsegsistemas.com.br/",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/js/main.js",
        "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
        "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
        "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
        "xfe-IP-50.116.87.164-stix2-2.0-export.json"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        },
        {
          "id": "Quando",
          "display_name": "Quando",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1498",
          "name": "Network Denial of Service",
          "display_name": "T1498 - Network Denial of Service"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 254,
        "URL": 815,
        "FileHash-SHA256": 168,
        "domain": 174
      },
      "indicator_count": 1411,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1486 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "624dbf64e7682b3bf049129c",
      "name": "Malware-USA",
      "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
      "modified": "2022-05-06T16:01:29.122000",
      "created": "2022-04-06T16:27:16.842000",
      "tags": [
        "dataaos",
        "100px00",
        "dataaosfade",
        "100px0",
        "dataaoszoom",
        "dataaosflip",
        "woff2",
        "fontface",
        "sans",
        "u0259",
        "u1e001eff",
        "u2020",
        "u20a020ab",
        "u20ad20cf",
        "u2113",
        "u2c602c7f",
        "reduceright",
        "number",
        "string",
        "gtl5jtn10ss",
        "regexp",
        "error",
        "r300",
        "copyright",
        "dafunction",
        "gafunction",
        "uint8array",
        "date",
        "path",
        "void",
        "const",
        "click",
        "select",
        "scroll",
        "mobile",
        "template",
        "template url",
        "license",
        "easy selector",
        "easy event",
        "easy",
        "back",
        "typeof e",
        "typeof t",
        "this",
        "main",
        "swiper",
        "button",
        "most",
        "mit license",
        "android",
        "win32",
        "null",
        "dblock",
        "email form",
        "validation",
        "action",
        "formdata",
        "api url",
        "typeof define",
        "typeof module",
        "gplv3",
        "metafizzy",
        "math",
        "plyr",
        "typeof symbol",
        "typeerror",
        "tnull",
        "cnull",
        "typeof",
        "inject",
        "playbook",
        "name",
        "getconfig",
        "default",
        "area",
        "event",
        "shadowroot",
        "boolean",
        "window",
        "trident",
        "body",
        "ofunction",
        "symbol",
        "mfunction",
        "sfunction",
        "quando",
        "quem",
        "fundada em",
        "informtica",
        "sistemas",
        "segurana",
        "softwares",
        "supermercados",
        "lojas",
        "restaurantes",
        "padarias"
      ],
      "references": [
        "http://www.shopsegsistemas.com.br/",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/js/main.js",
        "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
        "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
        "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
        "xfe-IP-50.116.87.164-stix2-2.0-export.json"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        },
        {
          "id": "Quando",
          "display_name": "Quando",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1498",
          "name": "Network Denial of Service",
          "display_name": "T1498 - Network Denial of Service"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 254,
        "URL": 815,
        "FileHash-SHA256": 168,
        "domain": 174
      },
      "indicator_count": 1411,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1486 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://r.bottom-r.top",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://r.bottom-r.top",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780329135.411353
}