{
  "type": "URL",
  "indicator": "https://sgrwn.warszawa-straz.pl",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://sgrwn.warszawa-straz.pl",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 4031314385,
      "indicator": "https://sgrwn.warszawa-straz.pl",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 4,
      "pulses": [
        {
          "id": "68ec6fb211d522db441a4f33",
          "name": "Nask Net",
          "description": "Fastest, Free internet , NASK is National Research Institute supervised by the Polish Ministry of Digital Affairs.AI Overview\nNASK, or Naukowa i Akademicka Sie\u0107 Komputerowa (Research and Academic Computer Network), is a Polish research institute focused on internet security and technology. It is responsible for the .pl domain registry, operates the National Cybersecurity Center, and manages Poland's Nationwide Education Network (OSE), providing free, secure internet access to schools",
          "modified": "2025-11-12T01:04:10.649000",
          "created": "2025-10-13T03:19:13.997000",
          "tags": [
            "present oct",
            "meta",
            "poland",
            "a domains",
            "entries",
            "certificate",
            "passive dns",
            "ip address",
            "search",
            "next associated",
            "present sep",
            "a li",
            "p li",
            "h3 dowiedz",
            "div div"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 140,
            "domain": 84,
            "URL": 545,
            "FileHash-MD5": 12,
            "FileHash-SHA1": 11,
            "FileHash-SHA256": 101
          },
          "indicator_count": 893,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 142,
          "modified_text": "203 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6861a19ddc2fe4faaab34617",
          "name": "Premier - Kancelaria Prezesa Rady Ministr\u00f3w - Portal Gov.pl",
          "description": "034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa\nvalidate.min.js\nhttps://www.virustotal.com/gui/file/034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa/relations\nhttps://www.virustotal.com/gui/file/24047f33fa504fb8fa9c972e6a50d2d6ae82c3ab2211dc26b1d3366f12132d8f/details\nhttps://www.virustotal.com/gui/file/538997d7febd6783183dfe87fadec8c3381914de0c934e168cf84d89437d4384/details",
          "modified": "2025-10-01T00:01:22.860000",
          "created": "2025-06-29T20:27:06.692000",
          "tags": [
            "rady ministrw",
            "zobacz",
            "przejd",
            "ministrw",
            "polskiej",
            "prezesa rady",
            "usugi dla",
            "projekt",
            "czonek rady",
            "komunikaty cir",
            "rada",
            "present aug",
            "vhash",
            "ssdeep",
            "file type"
          ],
          "references": [
            "https://maic.gov.pl/projekty/portfel-projektow",
            "http://bip.kprm.gov.pl/",
            "https://matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
            "http//matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
            "validate.min.js  034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 18,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 76,
            "domain": 10,
            "URL": 272,
            "FileHash-MD5": 5,
            "FileHash-SHA256": 4,
            "FileHash-SHA1": 4,
            "CVE": 1
          },
          "indicator_count": 372,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 125,
          "modified_text": "245 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "67b29758aae5c7a759b041fe",
          "name": "us.jelenia_gora@mf.gov.pl",
          "description": "Here is a full list of key words and phrases used by BBC Radio 4's Today programme to describe the events of the recent financial crisis in the Czech Republic, as well as those of other countries.",
          "modified": "2025-09-17T10:19:01.240000",
          "created": "2025-02-17T01:56:40.180000",
          "tags": [
            "polska",
            "warszawa",
            "naukowa",
            "badawczy",
            "katowice",
            "amazon02"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "email": 2,
            "URL": 328,
            "domain": 67,
            "hostname": 156,
            "FileHash-SHA256": 361,
            "FileHash-MD5": 24,
            "FileHash-SHA1": 24
          },
          "indicator_count": 962,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 125,
          "modified_text": "258 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "6798203675faed8671a5d804",
          "name": "Portal Gov.pl   skrypt.exe",
          "description": "6a39a921ef9250e35657098de285f506ea0d1ee26c8e26bc0ec30be00fd8a10f\n\nA rule has been introduced to the Windows operating system to identify files that have been converted to an executable by PyInstaller, which is currently running in its own operating room and on its desktop.",
          "modified": "2025-07-01T21:32:01.225000",
          "created": "2025-01-28T00:09:26.307000",
          "tags": [
            "dowiedz si",
            "zwizane z",
            "polskiej",
            "usugi dla",
            "nieruchomoci i",
            "logowanie",
            "profil zaufany",
            "strona",
            "pomoc dla",
            "ksigi wieczyste",
            "vhash",
            "authentihash",
            "imphash",
            "rich pe",
            "ssdeep",
            "pyinstaller",
            "released",
            "bartblaze",
            "identifies",
            "info",
            "znaleziono http",
            "dania w"
          ],
          "references": [
            "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv",
            "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv/",
            "skrypt.exe  https://www.virustotal.com/gui/file/6a39a921ef9250e35657098de285f506ea0d1ee26c8e26bc0ec30be00fd8a10f/behavior"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 4,
            "URL": 103,
            "FileHash-MD5": 10,
            "FileHash-SHA256": 7,
            "FileHash-SHA1": 3,
            "IPv4": 1,
            "hostname": 22,
            "YARA": 1,
            "email": 1
          },
          "indicator_count": 152,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "336 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://maic.gov.pl/projekty/portfel-projektow",
        "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv/",
        "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv",
        "skrypt.exe  https://www.virustotal.com/gui/file/6a39a921ef9250e35657098de285f506ea0d1ee26c8e26bc0ec30be00fd8a10f/behavior",
        "http//matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
        "https://matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
        "validate.min.js  034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa",
        "http://bip.kprm.gov.pl/"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 2001
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/warszawa-straz.pl",
    "whois": "http://whois.domaintools.com/warszawa-straz.pl",
    "domain": "warszawa-straz.pl",
    "hostname": "sgrwn.warszawa-straz.pl"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 4,
  "pulses": [
    {
      "id": "68ec6fb211d522db441a4f33",
      "name": "Nask Net",
      "description": "Fastest, Free internet , NASK is National Research Institute supervised by the Polish Ministry of Digital Affairs.AI Overview\nNASK, or Naukowa i Akademicka Sie\u0107 Komputerowa (Research and Academic Computer Network), is a Polish research institute focused on internet security and technology. It is responsible for the .pl domain registry, operates the National Cybersecurity Center, and manages Poland's Nationwide Education Network (OSE), providing free, secure internet access to schools",
      "modified": "2025-11-12T01:04:10.649000",
      "created": "2025-10-13T03:19:13.997000",
      "tags": [
        "present oct",
        "meta",
        "poland",
        "a domains",
        "entries",
        "certificate",
        "passive dns",
        "ip address",
        "search",
        "next associated",
        "present sep",
        "a li",
        "p li",
        "h3 dowiedz",
        "div div"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 140,
        "domain": 84,
        "URL": 545,
        "FileHash-MD5": 12,
        "FileHash-SHA1": 11,
        "FileHash-SHA256": 101
      },
      "indicator_count": 893,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 142,
      "modified_text": "203 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6861a19ddc2fe4faaab34617",
      "name": "Premier - Kancelaria Prezesa Rady Ministr\u00f3w - Portal Gov.pl",
      "description": "034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa\nvalidate.min.js\nhttps://www.virustotal.com/gui/file/034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa/relations\nhttps://www.virustotal.com/gui/file/24047f33fa504fb8fa9c972e6a50d2d6ae82c3ab2211dc26b1d3366f12132d8f/details\nhttps://www.virustotal.com/gui/file/538997d7febd6783183dfe87fadec8c3381914de0c934e168cf84d89437d4384/details",
      "modified": "2025-10-01T00:01:22.860000",
      "created": "2025-06-29T20:27:06.692000",
      "tags": [
        "rady ministrw",
        "zobacz",
        "przejd",
        "ministrw",
        "polskiej",
        "prezesa rady",
        "usugi dla",
        "projekt",
        "czonek rady",
        "komunikaty cir",
        "rada",
        "present aug",
        "vhash",
        "ssdeep",
        "file type"
      ],
      "references": [
        "https://maic.gov.pl/projekty/portfel-projektow",
        "http://bip.kprm.gov.pl/",
        "https://matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
        "http//matomo.www.gov.pl/analytics/js/container_68lYTZ79.js",
        "validate.min.js  034d253726213bb6c7eb661afa1116e7f2b17e8ad4befd4619b187083c1f9dfa"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 18,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 76,
        "domain": 10,
        "URL": 272,
        "FileHash-MD5": 5,
        "FileHash-SHA256": 4,
        "FileHash-SHA1": 4,
        "CVE": 1
      },
      "indicator_count": 372,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 125,
      "modified_text": "245 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "67b29758aae5c7a759b041fe",
      "name": "us.jelenia_gora@mf.gov.pl",
      "description": "Here is a full list of key words and phrases used by BBC Radio 4's Today programme to describe the events of the recent financial crisis in the Czech Republic, as well as those of other countries.",
      "modified": "2025-09-17T10:19:01.240000",
      "created": "2025-02-17T01:56:40.180000",
      "tags": [
        "polska",
        "warszawa",
        "naukowa",
        "badawczy",
        "katowice",
        "amazon02"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "email": 2,
        "URL": 328,
        "domain": 67,
        "hostname": 156,
        "FileHash-SHA256": 361,
        "FileHash-MD5": 24,
        "FileHash-SHA1": 24
      },
      "indicator_count": 962,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 125,
      "modified_text": "258 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "6798203675faed8671a5d804",
      "name": "Portal Gov.pl   skrypt.exe",
      "description": "6a39a921ef9250e35657098de285f506ea0d1ee26c8e26bc0ec30be00fd8a10f\n\nA rule has been introduced to the Windows operating system to identify files that have been converted to an executable by PyInstaller, which is currently running in its own operating room and on its desktop.",
      "modified": "2025-07-01T21:32:01.225000",
      "created": "2025-01-28T00:09:26.307000",
      "tags": [
        "dowiedz si",
        "zwizane z",
        "polskiej",
        "usugi dla",
        "nieruchomoci i",
        "logowanie",
        "profil zaufany",
        "strona",
        "pomoc dla",
        "ksigi wieczyste",
        "vhash",
        "authentihash",
        "imphash",
        "rich pe",
        "ssdeep",
        "pyinstaller",
        "released",
        "bartblaze",
        "identifies",
        "info",
        "znaleziono http",
        "dania w"
      ],
      "references": [
        "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv",
        "https://www.gov.pl/documents/33377/436740/wmo122850iso.txt&sa=U&ved=2ahUKEwjs2eaZ-JaLAxV8RvEDHckFL4gQFnoECAQQAQ&usg=AOvVaw1K3st1Ruzq6UWg_lzmqBKv/",
        "skrypt.exe  https://www.virustotal.com/gui/file/6a39a921ef9250e35657098de285f506ea0d1ee26c8e26bc0ec30be00fd8a10f/behavior"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 13,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 4,
        "URL": 103,
        "FileHash-MD5": 10,
        "FileHash-SHA256": 7,
        "FileHash-SHA1": 3,
        "IPv4": 1,
        "hostname": 22,
        "YARA": 1,
        "email": 1
      },
      "indicator_count": 152,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "336 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://sgrwn.warszawa-straz.pl",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://sgrwn.warszawa-straz.pl",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780463558.0769997
}