{ "type": "URL", "indicator": "https://ssl378130.cloudflaressl.com", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://ssl378130.cloudflaressl.com", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3394607710, "indicator": "https://ssl378130.cloudflaressl.com", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 50, "pulses": [ { "id": "65fc62b53b48c882760d6e9e", "name": "Report Compiled by StreamMiningEx", "description": "", "modified": "2024-03-21T16:39:17.927000", "created": "2024-03-21T16:39:17.927000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "657084147a4e5eed3d2ac0de", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 474, "hostname": 1164, "URL": 2358, "domain": 452, "email": 5 }, "indicator_count": 4453, "is_author": false, "is_subscribing": null, "subscriber_count": 224, "modified_text": "759 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657092f1a0501f9d3a40f090", "name": "Whenweallvote.org - and the hacks it connects to.", "description": "", "modified": "2023-12-06T15:27:45.787000", "created": "2023-12-06T15:27:45.787000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-SHA256": 316, "hostname": 519, "URL": 2232, "domain": 333 }, "indicator_count": 3402, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657091a4533a832480459e15", "name": "dos.myflorida.com:elections", "description": "", "modified": "2023-12-06T15:22:12.430000", "created": "2023-12-06T15:22:12.430000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 809, "hostname": 160, "domain": 105, "URL": 434, "CIDR": 1, "FileHash-MD5": 9, "FileHash-SHA1": 1 }, "indicator_count": 1519, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570919b6b36a151ea6d7cbe", "name": "Hillary.ua", "description": "", "modified": "2023-12-06T15:22:03.664000", "created": "2023-12-06T15:22:03.664000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 470, "FileHash-SHA256": 1292, "domain": 207, "URL": 1298, "CIDR": 19, "FileHash-MD5": 195, "FileHash-SHA1": 1 }, "indicator_count": 3482, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709192c17b2699806057e0", "name": "DonaldJTrump.com and all of its subdomains - ewe", "description": "", "modified": "2023-12-06T15:21:54.268000", "created": "2023-12-06T15:21:54.268000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 209, "hostname": 663, "URL": 1847, "domain": 207, "CVE": 1, "email": 1, "FileHash-MD5": 3, "FileHash-SHA1": 6 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570918ad73d46901ccddc5d", "name": "www.donaldjtrump.com 2022", "description": "", "modified": "2023-12-06T15:21:46.477000", "created": "2023-12-06T15:21:46.477000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 561, "FileHash-SHA256": 1509, "domain": 220, "URL": 1586, "CIDR": 18, "FileHash-MD5": 35, "FileHash-SHA1": 2 }, "indicator_count": 3931, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709186b4721854f288709d", "name": "DCDemocraticparty.org", "description": "", "modified": "2023-12-06T15:21:42.506000", "created": "2023-12-06T15:21:42.506000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1403, "URL": 992, "hostname": 382, "domain": 221, "CIDR": 9, "FileHash-MD5": 87, "FileHash-SHA1": 15 }, "indicator_count": 3109, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570917af75d1446c7c109eb", "name": "Apple's crappy FaceTime ~ Nothing has changed", "description": "", "modified": "2023-12-06T15:21:30.720000", "created": "2023-12-06T15:21:30.720000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 727, "domain": 213, "hostname": 342, "URL": 1029, "email": 1, "FileHash-MD5": 2 }, "indicator_count": 2314, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090f1cc164d76aeb361ce", "name": "www.iceland.co.uk - Oh dear looks like dom takeover", "description": "", "modified": "2023-12-06T15:19:13.349000", "created": "2023-12-06T15:19:13.349000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 285, "FileHash-SHA256": 934, "domain": 89, "URL": 716, "FileHash-MD5": 41, "email": 1 }, "indicator_count": 2066, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b4fe416f6d10793d0d0", "name": "malware", "description": "", "modified": "2023-12-06T14:55:11.659000", "created": "2023-12-06T14:55:11.659000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 112, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b44eddb0e778213b050", "name": "malware", "description": "", "modified": "2023-12-06T14:55:00.045000", "created": "2023-12-06T14:55:00.045000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b383c8b03479a9c500f", "name": "malware", "description": "", "modified": "2023-12-06T14:54:48.631000", "created": "2023-12-06T14:54:48.631000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b2e1289df77178ac02a", "name": "malware", "description": "", "modified": "2023-12-06T14:54:38.099000", "created": "2023-12-06T14:54:38.099000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b21e8b64037edbd6a89", "name": "malware", "description": "", "modified": "2023-12-06T14:54:25.584000", "created": "2023-12-06T14:54:25.584000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708acfbf9280d126a8e668", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2023-12-06T14:53:03.195000", "created": "2023-12-06T14:53:03.195000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1751, "hostname": 2775, "URL": 9984, "domain": 665, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708aacc81003c0b481e48f", "name": "inforextreme.com (3)", "description": "", "modified": "2023-12-06T14:52:26.313000", "created": "2023-12-06T14:52:26.313000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 4, "FileHash-SHA256": 2369, "hostname": 1853, "URL": 5088, "domain": 745, "FileHash-SHA1": 1, "FileHash-MD5": 2 }, "indicator_count": 10062, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708a1e324341906eda31dc", "name": "actionfraud its self cant even keep its 3party supply chain in check", "description": "", "modified": "2023-12-06T14:50:06.832000", "created": "2023-12-06T14:50:06.832000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1246, "hostname": 167, "URL": 400, "domain": 94 }, "indicator_count": 1907, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657089aa4b734f1efd8bd0ac", "name": "github_trump_0x729.github.io:%22", "description": "", "modified": "2023-12-06T14:48:10.074000", "created": "2023-12-06T14:48:10.074000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 347, "FileHash-SHA256": 1183, "domain": 145, "URL": 582, "CIDR": 5, "FileHash-MD5": 32, "FileHash-SHA1": 4 }, "indicator_count": 2298, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570897ecb6cec4777625431", "name": "www.routerlogin.net", "description": "", "modified": "2023-12-06T14:47:26.604000", "created": "2023-12-06T14:47:26.604000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1532, "domain": 2033, "URL": 11153, "hostname": 2800, "FileHash-SHA1": 5, "email": 3, "FileHash-MD5": 6 }, "indicator_count": 17532, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570842bc1e3efb7d13f5e30", "name": "pastebin.fun.zlubq7geis.", "description": "", "modified": "2023-12-06T14:24:43.338000", "created": "2023-12-06T14:24:43.338000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 946, "hostname": 306, "domain": 212, "URL": 839, "CIDR": 9, "FileHash-MD5": 18 }, "indicator_count": 2330, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657084286ad40e776a240d3c", "name": "pastebin.fun.mnxtedror6", "description": "", "modified": "2023-12-06T14:24:40.711000", "created": "2023-12-06T14:24:40.711000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 939, "hostname": 306, "domain": 219, "URL": 823, "CIDR": 9, "FileHash-MD5": 18 }, "indicator_count": 2314, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657084147a4e5eed3d2ac0de", "name": "civicalg.com", "description": "", "modified": "2023-12-06T14:24:20.903000", "created": "2023-12-06T14:24:20.903000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 474, "hostname": 1164, "URL": 2358, "domain": 452, "email": 5 }, "indicator_count": 4453, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708400230da39043d8f3eb", "name": "www.ca.gov_08.27.2021.", "description": "", "modified": "2023-12-06T14:24:00.576000", "created": "2023-12-06T14:24:00.576000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1081, "hostname": 288, "domain": 158, "URL": 699, "FileHash-MD5": 33, "CIDR": 3, "FileHash-SHA1": 1 }, "indicator_count": 2263, "is_author": false, "is_subscribing": null, "subscriber_count": 111, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657083ed4fcdc6eded29d59b", "name": "crowdtangle.com 03.29.2017", "description": "", "modified": "2023-12-06T14:23:41.446000", "created": "2023-12-06T14:23:41.446000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 989, "domain": 121, "hostname": 196, "URL": 612, "CIDR": 6, "FileHash-MD5": 4 }, "indicator_count": 1928, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657083ebe553c134e8687e4c", "name": "apps.apple.com:us:app:blockchain-bitcoin- wallet", "description": "", "modified": "2023-12-06T14:23:39.256000", "created": "2023-12-06T14:23:39.256000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 397, "hostname": 209, "URL": 355, "domain": 20, "email": 1, "FileHash-MD5": 53, "CIDR": 1 }, "indicator_count": 1036, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657081d6ab82e2a5046133ad", "name": "maxcdn.bootstrapcdn.com:bootstrap:4.0.0:js:bootstrap.min.js%22,.", "description": "", "modified": "2023-12-06T14:14:46.566000", "created": "2023-12-06T14:14:46.566000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 83, "hostname": 93, "URL": 170, "domain": 61, "FileHash-MD5": 3 }, "indicator_count": 410, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570819b0888b5212998e2ae", "name": "www.vrsystems.com:%22 ~ 03.02.2022", "description": "", "modified": "2023-12-06T14:13:47.648000", "created": "2023-12-06T14:13:47.648000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 339, "FileHash-SHA256": 1161, "domain": 154, "URL": 723, "CIDR": 2, "FileHash-MD5": 27, "FileHash-SHA1": 6 }, "indicator_count": 2412, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570819603ce3886f26d6a30", "name": "unisynvoting.com:%22", "description": "", "modified": "2023-12-06T14:13:42.946000", "created": "2023-12-06T14:13:42.946000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-SHA256": 555, "hostname": 225, "domain": 74, "URL": 394, "CIDR": 3, "FileHash-MD5": 5, "FileHash-SHA1": 6 }, "indicator_count": 1263, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708191cdba4e9f07ba1f93", "name": "mail.ru:%22,", "description": "", "modified": "2023-12-06T14:13:36.976000", "created": "2023-12-06T14:13:36.976000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 2753, "hostname": 1341, "domain": 447, "URL": 3301, "CIDR": 65, "FileHash-MD5": 112, "FileHash-SHA1": 2 }, "indicator_count": 8021, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657081856fc8dcb570f6aae6", "name": "tseries.com", "description": "", "modified": "2023-12-06T14:13:25.510000", "created": "2023-12-06T14:13:25.510000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 2213, "hostname": 1034, "domain": 446, "URL": 3255, "FileHash-MD5": 1, "email": 1 }, "indicator_count": 6950, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570817c03964e671c853054", "name": "https://a.mgid.com/mgsensor.js?d=1646262038223", "description": "", "modified": "2023-12-06T14:13:16.704000", "created": "2023-12-06T14:13:16.704000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 127, "hostname": 98, "URL": 188, "domain": 11, "SSLCertFingerprint": 2, "FileHash-SHA1": 2 }, "indicator_count": 428, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570812db37f753f0d0e2b35", "name": "www.HeidiGanahl.com ~ Republican candidate for Colorado governor", "description": "", "modified": "2023-12-06T14:11:57.248000", "created": "2023-12-06T14:11:57.248000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 293, "hostname": 198, "URL": 491, "domain": 214, "email": 2, "FileHash-SHA1": 10 }, "indicator_count": 1208, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708127d14f133931af519e", "name": "www.StephenMiller.net ~ Former White House senior adviser to President Trump", "description": "", "modified": "2023-12-06T14:11:51.785000", "created": "2023-12-06T14:11:51.785000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 525, "hostname": 688, "URL": 2368, "domain": 1043, "email": 2, "CVE": 1, "FileHash-SHA1": 5 }, "indicator_count": 4632, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708122b0514054bd29b713", "name": "a.pub.network:timcast-com:pubfig.min.js", "description": "", "modified": "2023-12-06T14:11:46.462000", "created": "2023-12-06T14:11:46.462000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "domain": 416, "URL": 2786, "FileHash-SHA256": 955, "hostname": 1095, "SSLCertFingerprint": 14, "FileHash-MD5": 66, "FileHash-SHA1": 24, "CIDR": 5, "email": 1 }, "indicator_count": 5363, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6463f9f409ebb866384e7442", "name": "ttps://cdn.strpst.com/assets/bootstrap.20230511082840.js", "description": "from twitter.com/aquinemy48 profile url via urlscan .io", "modified": "2023-05-16T21:47:32.653000", "created": "2023-05-16T21:47:32.653000", "tags": [ "url", "website", "web", "scanner", "analyze", "analyzer", "url search", "domain scan", "url url", "search url", "search domain", "scan url", "deutsch search", "franais search", "espaol search", "italiano search", "full url", "protocol h2", "security tls", "united", "asn13335", "cloudflarenet", "reverse dns", "resource", "hash", "request", "win64" ], "references": [ "Full URL https://creative.xxxivjmp.com/widgets/stripchat/init/index.js Requested by Host: cdn.strpst.com URL: https://cdn.strpst.com/assets/bootstrap.20230511082840.js Protocol H2 Security TLS 1.3, , AES_128_GCM Server 2606:4700:3110::6812:3b96 , United States, ASN13335 (CLOUDFLARENET, US), Reverse DNS Software cloudflare / Resource Hash 26169d80a2fccdadc194301a4bedba25df711bbc448180b1ffc9d57d1ccfdc93 Request headers accept-language en-GB,en;q=0.9 Referer https://stripchat.com/ User-Agent Mozilla/5.0 (Win", "https://urlscan.io/result/84866270-705a-44f1-a50d-288858d7a73b/#transactions", "Well this ties in with old stuff" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 742, "hostname": 218, "FileHash-SHA256": 114, "domain": 61, "IPv4": 3, "IPv6": 9, "FileHash-MD5": 7, "FileHash-SHA1": 3 }, "indicator_count": 1157, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "1069 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6341a8946af6993ada7188e4", "name": "Whenweallvote.org - and the hacks it connects to.", "description": "", "modified": "2022-11-07T16:01:58.911000", "created": "2022-10-08T16:43:00.617000", "tags": [ "ssl certificate", "whois record", "historical ssl", "referrer", "whois domain", "whois whois", "whois sslcert", "threat roundup", "ip check", "contacted", "cobalt strike", "mumblehard", "formbook", "august", "whois" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3855, "hostname": 990, "domain": 652, "FileHash-SHA256": 632, "CVE": 4 }, "indicator_count": 6133, "is_author": false, "is_subscribing": null, "subscriber_count": 413, "modified_text": "1259 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6317f0144fb6f97c9732292f", "name": "JohnFetterman.com", "description": "", "modified": "2022-10-06T00:00:46.407000", "created": "2022-09-07T01:12:52.135000", "tags": [ "namecheap", "namecheap inc", "registrant", "historical ssl", "certificates", "first", "date", "subdomains", "whois record", "ssl certificate", "whois", "vt graph", "ip check", "cobalt strike", "collection", "cbcert", "vitaleameli", "new collection" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1530, "hostname": 467, "FileHash-SHA256": 399, "domain": 549, "CVE": 1, "FileHash-SHA1": 7 }, "indicator_count": 2953, "is_author": false, "is_subscribing": null, "subscriber_count": 410, "modified_text": "1291 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6301079ebe45cb442cae4488", "name": "www.donaldjtrump.com 2022", "description": "", "modified": "2022-09-19T00:10:46.535000", "created": "2022-08-20T16:11:10.558000", "tags": [ "Apple's crappy FaceTime ~ Nothing has changed", "Ransomware" ], "references": [ "www.donaldjtrump.com.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" } ], "attack_ids": [], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 729, "URL": 2072, "domain": 252, "FileHash-SHA256": 1985, "CIDR": 18, "FileHash-MD5": 37, "FileHash-SHA1": 2 }, "indicator_count": 5095, "is_author": false, "is_subscribing": null, "subscriber_count": 406, "modified_text": "1308 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63012cdfb8b36960045a2deb", "name": "dos.myflorida.com:elections", "description": "", "modified": "2022-09-19T00:10:46.535000", "created": "2022-08-20T18:50:07.448000", "tags": [ "Ransomware" ], "references": [ "dos.myflorida.com:elections.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" } ], "attack_ids": [], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 160, "URL": 435, "domain": 105, "FileHash-SHA256": 809, "CIDR": 1, "FileHash-MD5": 9, "FileHash-SHA1": 1 }, "indicator_count": 1520, "is_author": false, "is_subscribing": null, "subscriber_count": 405, "modified_text": "1308 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63011e5637ff62db06e9d023", "name": "Smartmatic.com 8.20.22", "description": "", "modified": "2022-09-19T00:10:46.535000", "created": "2022-08-20T17:48:06.374000", "tags": [], "references": [ "Smartmatic.com 8.20.22.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 46, "URL": 80, "domain": 6, "FileHash-SHA256": 64, "FileHash-MD5": 3 }, "indicator_count": 199, "is_author": false, "is_subscribing": null, "subscriber_count": 405, "modified_text": "1308 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63011c808c89bad2a1b8914c", "name": "Hillary.ua", "description": "", "modified": "2022-09-19T00:10:46.535000", "created": "2022-08-20T17:40:16.199000", "tags": [ "http", "request chain", "august", "lookup go", "rescan add", "verdict report", "gb summary", "redirects links", "behaviour", "similar dom", "meta", "content api", "Ransomware" ], "references": [ "hillary.ua.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1299, "hostname": 470, "domain": 207, "FileHash-SHA256": 1292, "CIDR": 19, "FileHash-MD5": 195, "FileHash-SHA1": 1 }, "indicator_count": 3483, "is_author": false, "is_subscribing": null, "subscriber_count": 407, "modified_text": "1308 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "630113c451440430351e28ab", "name": "DonaldJTrump.com and all of its subdomains - ewe", "description": "", "modified": "2022-09-19T00:10:46.535000", "created": "2022-08-20T17:03:00.019000", "tags": [ "domain status", "server", "aaaa", "full name", "rank value", "ingestion time", "utc statvoo", "utc alexa", "utc cisco", "umbrella", "info", "date", "email", "registrar abuse", "iana id", "contact phone", "registrar url", "registrar whois", "registry domain", "format", "twitter", "passive dns" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1847, "hostname": 663, "domain": 207, "FileHash-SHA256": 209, "email": 1, "CVE": 1, "FileHash-MD5": 3, "FileHash-SHA1": 6 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 407, "modified_text": "1308 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63003c89e59330c5e5aa71f2", "name": "DCDemocraticparty.org", "description": "", "modified": "2022-09-18T00:03:55.814000", "created": "2022-08-20T01:44:41.321000", "tags": [ "url search", "domain scan", "url url", "search url", "search domain", "scan url", "august", "lookup go", "rescan add", "verdict report", "behaviour", "http", "request chain", "de summary", "redirects links", "similar dom", "meta", "value", "variables", "sentry", "imageclientapi", "reactdom", "react", "object", "fbq function", "htmlcomponent", "function", "Apple's crappy FaceTime ~ Nothing has changed", "Ransomware" ], "references": [ "dcdemocraticparty.org.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" } ], "attack_ids": [], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 382, "URL": 993, "domain": 221, "FileHash-SHA256": 1403, "CIDR": 9, "FileHash-MD5": 87, "FileHash-SHA1": 15 }, "indicator_count": 3110, "is_author": false, "is_subscribing": null, "subscriber_count": 407, "modified_text": "1309 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "630035db5aa6a5edefe7798d", "name": "MichiganDems.com", "description": "", "modified": "2022-09-18T00:03:55.814000", "created": "2022-08-20T01:16:11.986000", "tags": [ "Apple's crappy FaceTime ~ Nothing has changed" ], "references": [ "MichiganDems.com.pdf", "Michigandems1.pdf", "Michigandems4.pdf", "Michigandems5.pdf", "Michigandems2.pdf", "Michigandems6.pdf", "Michigandems3.pdf" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [], "attack_ids": [], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 72, "URL": 145, "domain": 25, "FileHash-SHA256": 87, "FileHash-MD5": 3, "FileHash-SHA1": 1 }, "indicator_count": 333, "is_author": false, "is_subscribing": null, "subscriber_count": 405, "modified_text": "1309 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63002a17b34d067bf9ed7e35", "name": "Apple's crappy FaceTime ~ Nothing has changed", "description": "", "modified": "2022-09-18T00:03:55.814000", "created": "2022-08-20T00:25:59.852000", "tags": [ "whois record", "whois", "vt graph", "collection", "devils work", "dsp1", "keepaliveyes", "mac malware", "ip check", "chinese", "qakbot", "ransomexx", "quasar", "mirai", "Apple Zero Day", "Ransomware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Ransom:Win32/Wannaren.A", "display_name": "Ransom:Win32/Wannaren.A", "target": "/malware/Ransom:Win32/Wannaren.A" } ], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 727, "hostname": 342, "email": 1, "domain": 213, "URL": 1029, "FileHash-MD5": 2 }, "indicator_count": 2314, "is_author": false, "is_subscribing": null, "subscriber_count": 411, "modified_text": "1309 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e4a7a88f336737829495e0", "name": "www.iceland.co.uk - Oh dear looks like dom takeover", "description": "", "modified": "2022-08-29T00:01:52.177000", "created": "2022-07-30T03:38:16.809000", "tags": [], "references": [ "https://urlscan.io/result/858b39b1-7162-4b94-914a-b3040cd28c9f/#transactions", "https://urlscan.io/result/858b39b1-7162-4b94-914a-b3040cd28c9f/#redirects" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 285, "URL": 717, "domain": 89, "FileHash-SHA256": 934, "FileHash-MD5": 41, "email": 1 }, "indicator_count": 2067, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1329 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62e49974a998bbdc92804d6c", "name": "infura-ipfs.io - gandi svr - host of hell - fuck this is bad", "description": "ties some more loose ends thou thats for sure", "modified": "2022-08-28T00:01:38.268000", "created": "2022-07-30T02:37:40.622000", "tags": [], "references": [ "https://urlscan.io/result/7c834a69-5364-4d4d-8395-1fb2cad344ce/#transactions", "https://infura-ipfs.io/?filename=", "bafkreibkcb3mnoipk6w7ccenr4uqhracxm3ajgwg5nbz6nolyoaldcugnq" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 695, "hostname": 292, "domain": 70, "FileHash-SHA256": 228, "FileHash-MD5": 2 }, "indicator_count": 1287, "is_author": false, "is_subscribing": null, "subscriber_count": 392, "modified_text": "1330 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "624d8d844d2bc304c780d158", "name": "McKesson.com ~ 04.06.2022", "description": "", "modified": "2022-08-20T16:20:43.684000", "created": "2022-04-06T12:54:28.513000", "tags": [ "registrar csc", "date", "sophos health", "comodo valkyrie", "verdict mobile", "businesseconomy", "ranks rank", "value ingestion", "time majestic", "utc statvoo", "umbrella", "algorithm", "key identifier", "x509v3 subject", "data", "v3 serial", "number", "issuer", "atlas r3", "dv tls", "q1 oglobalsign", "server", "domain status", "code", "registrar abuse", "rancho cordova", "contact phone", "registrar url", "csc corporate", "domains", "community", "links https", "httponly", "submission", "samesitelax", "navlanguage1033", "sitecurrency840", "conttype", "userculture1033", "health comodo", "Ransomware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "United States of America", "Canada" ], "malware_families": [ { "id": "W32/Scribble-B", "display_name": "W32/Scribble-B", "target": null }, { "id": "Win32/Virut.E", "display_name": "Win32/Virut.E", "target": null }, { "id": "Trojan.Dropper.UXZ", "display_name": "Trojan.Dropper.UXZ", "target": null }, { "id": "Win32/Virut.NBP", "display_name": "Win32/Virut.NBP", "target": null }, { "id": "Win32:Vitro", "display_name": "Win32:Vitro", "target": null }, { "id": "W32/Virut.n.gen", "display_name": "W32/Virut.n.gen", "target": null }, { "id": "Backdoor.Win32.Pushdo.rns", "display_name": "Backdoor.Win32.Pushdo.rns", "target": null }, { "id": "PE_VIRUX.Q-1", "display_name": "PE_VIRUX.Q-1", "target": null }, { "id": "Win.Trojan.Agent-1139129", "display_name": "Win.Trojan.Agent-1139129", "target": null }, { "id": "W32.Virut.CF", "display_name": "W32.Virut.CF", "target": null }, { "id": "Virus:Win32/Virut.EPO", "display_name": "Virus:Win32/Virut.EPO", "target": "/malware/Virus:Win32/Virut.EPO" }, { "id": "Ransom:Win64/Gojdu.A", "display_name": "Ransom:Win64/Gojdu.A", "target": "/malware/Ransom:Win64/Gojdu.A" } ], "attack_ids": [], "industries": [ "Healthcare" ], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Kailula4", "id": "131997", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 9984, "hostname": 2775, "domain": 665, "FileHash-SHA256": 1751, "email": 3, "FileHash-SHA1": 2, "FileHash-MD5": 4 }, "indicator_count": 15184, "is_author": false, "is_subscribing": null, "subscriber_count": 411, "modified_text": "1338 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "629bd9e96d9996ad90c5e2af", "name": "http://athenaprodsn1.crmreplication.azure.net/ = redirect.microsoft - urlscan.io 100% malicious redirect - ssl issues via civicalg.com", "description": "This old chestnut again, been on vacatiin maybe", "modified": "2022-07-04T00:03:29.389000", "created": "2022-06-04T22:17:13.682000", "tags": [ "security tls", "reverse dns", "windows nt", "win64", "khtml", "accept", "june", "meta", "date", "phishing", "jquery", "civicalg.com" ], "references": [ "https://urlscan.io/result/f4f0923f-6846-49dc-bb97-a6b62111e91c/#behaviour", "civicalg.com", "http://athenaprodsn1.crmreplication.azure.net/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 16, "hostname": 79, "URL": 89, "FileHash-SHA256": 70, "FileHash-MD5": 1 }, "indicator_count": 255, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1385 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "62298f3e6e3fb7012a880988", "name": "a.pub.network:timcast-com:pubfig.min.js", "description": "a.pub.network:timcast-com:pubfig.min.js.webloc", "modified": "2022-06-12T22:01:23.105000", "created": "2022-03-10T05:40:14.909000", "tags": [], "references": [ "a.pub.network:timcast-com:pubfig.min.js.webloc" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scnrscnr", "id": "126475", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2786, "FileHash-SHA256": 955, "hostname": 1095, "FileHash-MD5": 66, "FileHash-SHA1": 24, "domain": 416, "email": 1, "CIDR": 5, "SSLCertFingerprint": 14, "CVE": 1 }, "indicator_count": 5363, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "1407 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "Michigandems1.pdf", "dcdemocraticparty.org.pdf", "a.pub.network:timcast-com:pubfig.min.js.webloc", "Smartmatic.com 8.20.22.pdf", "Full URL https://creative.xxxivjmp.com/widgets/stripchat/init/index.js Requested by Host: cdn.strpst.com URL: https://cdn.strpst.com/assets/bootstrap.20230511082840.js Protocol H2 Security TLS 1.3, , AES_128_GCM Server 2606:4700:3110::6812:3b96 , United States, ASN13335 (CLOUDFLARENET, US), Reverse DNS Software cloudflare / Resource Hash 26169d80a2fccdadc194301a4bedba25df711bbc448180b1ffc9d57d1ccfdc93 Request headers accept-language en-GB,en;q=0.9 Referer https://stripchat.com/ User-Agent Mozilla/5.0 (Win", "dos.myflorida.com:elections.pdf", "https://urlscan.io/result/f4f0923f-6846-49dc-bb97-a6b62111e91c/#behaviour", "Michigandems4.pdf", "https://infura-ipfs.io/?filename=", "hillary.ua.pdf", "bafkreibkcb3mnoipk6w7ccenr4uqhracxm3ajgwg5nbz6nolyoaldcugnq", "MichiganDems.com.pdf", "www.donaldjtrump.com.pdf", "Michigandems5.pdf", "http://athenaprodsn1.crmreplication.azure.net/", "Michigandems6.pdf", "civicalg.com", "https://urlscan.io/result/7c834a69-5364-4d4d-8395-1fb2cad344ce/#transactions", "https://urlscan.io/result/858b39b1-7162-4b94-914a-b3040cd28c9f/#transactions", "Michigandems2.pdf", "https://urlscan.io/result/84866270-705a-44f1-a50d-288858d7a73b/#transactions", "https://urlscan.io/result/858b39b1-7162-4b94-914a-b3040cd28c9f/#redirects", "Well this ties in with old stuff", "Michigandems3.pdf" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "Virus:win32/virut.epo", "Ransom:win64/gojdu.a", "W32/scribble-b", "Win32:vitro", "Trojan.dropper.uxz", "W32/virut.n.gen", "Pe_virux.q-1", "Win.trojan.agent-1139129", "Backdoor.win32.pushdo.rns", "Win32/virut.e", "Ransom:win32/wannaren.a", "Win32/virut.nbp", "W32.virut.cf" ], "industries": [ "Government", "Healthcare" ], "unique_indicators": 104292 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/cloudflaressl.com", "whois": "http://whois.domaintools.com/cloudflaressl.com", "domain": "cloudflaressl.com", "hostname": "ssl378130.cloudflaressl.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 50, "pulses": [ { "id": "65fc62b53b48c882760d6e9e", "name": "Report Compiled by StreamMiningEx", "description": "", "modified": "2024-03-21T16:39:17.927000", "created": "2024-03-21T16:39:17.927000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "657084147a4e5eed3d2ac0de", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 474, "hostname": 1164, "URL": 2358, "domain": 452, "email": 5 }, "indicator_count": 4453, "is_author": false, "is_subscribing": null, "subscriber_count": 224, "modified_text": "759 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657092f1a0501f9d3a40f090", "name": "Whenweallvote.org - and the hacks it connects to.", "description": "", "modified": "2023-12-06T15:27:45.787000", "created": "2023-12-06T15:27:45.787000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 2, "FileHash-SHA256": 316, "hostname": 519, "URL": 2232, "domain": 333 }, "indicator_count": 3402, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657091a4533a832480459e15", "name": "dos.myflorida.com:elections", "description": "", "modified": "2023-12-06T15:22:12.430000", "created": "2023-12-06T15:22:12.430000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 809, "hostname": 160, "domain": 105, "URL": 434, "CIDR": 1, "FileHash-MD5": 9, "FileHash-SHA1": 1 }, "indicator_count": 1519, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570919b6b36a151ea6d7cbe", "name": "Hillary.ua", "description": "", "modified": "2023-12-06T15:22:03.664000", "created": "2023-12-06T15:22:03.664000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 470, "FileHash-SHA256": 1292, "domain": 207, "URL": 1298, "CIDR": 19, "FileHash-MD5": 195, "FileHash-SHA1": 1 }, "indicator_count": 3482, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709192c17b2699806057e0", "name": "DonaldJTrump.com and all of its subdomains - ewe", "description": "", "modified": "2023-12-06T15:21:54.268000", "created": "2023-12-06T15:21:54.268000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 209, "hostname": 663, "URL": 1847, "domain": 207, "CVE": 1, "email": 1, "FileHash-MD5": 3, "FileHash-SHA1": 6 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570918ad73d46901ccddc5d", "name": "www.donaldjtrump.com 2022", "description": "", "modified": "2023-12-06T15:21:46.477000", "created": "2023-12-06T15:21:46.477000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 561, "FileHash-SHA256": 1509, "domain": 220, "URL": 1586, "CIDR": 18, "FileHash-MD5": 35, "FileHash-SHA1": 2 }, "indicator_count": 3931, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709186b4721854f288709d", "name": "DCDemocraticparty.org", "description": "", "modified": "2023-12-06T15:21:42.506000", "created": "2023-12-06T15:21:42.506000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1403, "URL": 992, "hostname": 382, "domain": 221, "CIDR": 9, "FileHash-MD5": 87, "FileHash-SHA1": 15 }, "indicator_count": 3109, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570917af75d1446c7c109eb", "name": "Apple's crappy FaceTime ~ Nothing has changed", "description": "", "modified": "2023-12-06T15:21:30.720000", "created": "2023-12-06T15:21:30.720000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 727, "domain": 213, "hostname": 342, "URL": 1029, "email": 1, "FileHash-MD5": 2 }, "indicator_count": 2314, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657090f1cc164d76aeb361ce", "name": "www.iceland.co.uk - Oh dear looks like dom takeover", "description": "", "modified": "2023-12-06T15:19:13.349000", "created": "2023-12-06T15:19:13.349000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 285, "FileHash-SHA256": 934, "domain": 89, "URL": 716, "FileHash-MD5": 41, "email": 1 }, "indicator_count": 2066, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65708b4fe416f6d10793d0d0", "name": "malware", "description": "", "modified": "2023-12-06T14:55:11.659000", "created": "2023-12-06T14:55:11.659000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1778, "FileHash-MD5": 781, "FileHash-SHA1": 499, "hostname": 3563, "URL": 9459, "domain": 692, "email": 9, "CIDR": 1, "SSLCertFingerprint": 18 }, "indicator_count": 16800, "is_author": false, "is_subscribing": null, "subscriber_count": 112, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://ssl378130.cloudflaressl.com", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://ssl378130.cloudflaressl.com", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776642313.099641 }