{ "type": "URL", "indicator": "https://storage.googleapis.com/volusionapi/resources.js", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://storage.googleapis.com/volusionapi/resources.js", "type": "url", "type_title": "URL", "validation": [ { "source": "akamai", "message": "Akamai rank: #5790", "name": "Akamai Popular Domain" }, { "source": "whitelist", "message": "Whitelisted domain googleapis.com", "name": "Whitelisted domain" }, { "source": "majestic", "message": "Whitelisted domain googleapis.com", "name": "Whitelisted domain" } ], "base_indicator": { "id": 2141217751, "indicator": "https://storage.googleapis.com/volusionapi/resources.js", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 33, "pulses": [ { "id": "5d9cf3671d2973bf30d2753f", "name": "Volusion - Theft of Payment Details", "description": "Hackers have breached the infrastructure of Volusion, a provider of cloud-hosted online stores, and are delivering malicious code that records and steals payment card details entered by users in online forms. The investigation lead to identifying a potential list of roughly 20,000 additional victims. Payment details were stolen sent to the malicious infrastructure (Indicators listed). While not yet confirmed, it is believed to be attributed to one of the various Magecart entities.", "modified": "2019-11-07T20:00:13.961000", "created": "2019-10-08T20:36:55.032000", "tags": [ "Data Theft", "Skimmer", "Magecart" ], "references": [ "https://medium.com/@marcelx/sesame-street-volusion-customers-are-comprised-how-the-cookie-monster-is-stealing-cc-numbers-21eb51ec613b", "https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/", "https://blog.trendmicro.com/trendlabs-security-intelligence/fin6-compromised-e-commerce-platform-via-magecart-to-inject-credit-card-skimmers-into-thousands-of-online-shops/" ], "public": 1, "adversary": "Magecart", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 115, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "domain": 2, "URL": 6, "FileHash-SHA256": 3, "FileHash-MD5": 1, "FileHash-SHA1": 1, "hostname": 1 }, "indicator_count": 14, "is_author": false, "is_subscribing": null, "subscriber_count": 377705, "modified_text": "2355 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68c61ecd15dc75b6a31cbc40", "name": "InQuest - 13-09-2025", "description": "", "modified": "2025-10-14T01:04:58.605000", "created": "2025-09-14T01:47:57.242000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 151, "FileHash-SHA1": 8, "domain": 33, "FileHash-SHA256": 452, "FileHash-MD5": 4 }, "indicator_count": 683, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "188 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68bb86c74d26a1eaac880d0f", "name": "InQuest - 05-09-2025", "description": "", "modified": "2025-10-06T00:03:28.374000", "created": "2025-09-06T00:56:39.719000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 73, "URL": 268, "FileHash-SHA1": 7, "domain": 59, "FileHash-SHA256": 369, "FileHash-MD5": 8 }, "indicator_count": 784, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "196 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68b6379553e9978bfcf11f19", "name": "InQuest - 01-09-2025", "description": "", "modified": "2025-10-02T00:00:16.307000", "created": "2025-09-02T00:17:25.854000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 60, "URL": 240, "FileHash-SHA256": 442, "domain": 56, "FileHash-MD5": 4, "FileHash-SHA1": 2 }, "indicator_count": 804, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "200 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68ae4cacce1683b182c69068", "name": "InQuest - 26-08-2025", "description": "", "modified": "2025-09-26T00:01:12.214000", "created": "2025-08-27T00:09:16.382000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 40, "URL": 253, "FileHash-SHA256": 195, "domain": 98, "FileHash-SHA1": 8, "FileHash-MD5": 8 }, "indicator_count": 602, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "206 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68aa5a637f87c235c0d9d04d", "name": "InQuest - 23-08-2025", "description": "", "modified": "2025-09-23T00:00:26.123000", "created": "2025-08-24T00:18:43.713000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 67, "URL": 163, "FileHash-SHA1": 9, "FileHash-SHA256": 407, "domain": 31, "FileHash-MD5": 10 }, "indicator_count": 687, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "209 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68a917b9da31cbfeb18492bb", "name": "InQuest - 22-08-2025", "description": "", "modified": "2025-09-22T01:03:23.691000", "created": "2025-08-23T01:22:01.412000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 8, "hostname": 41, "URL": 186, "domain": 58, "FileHash-SHA256": 234, "FileHash-MD5": 10 }, "indicator_count": 537, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "210 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688ee0ea46f01ef1ef04e021", "name": "InQuest - 02-08-2025", "description": "", "modified": "2025-09-02T04:01:31.218000", "created": "2025-08-03T04:09:14.088000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 23, "URL": 110, "FileHash-SHA256": 339, "domain": 20, "FileHash-MD5": 10, "FileHash-SHA1": 6 }, "indicator_count": 508, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "230 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688d84dd329cefe36f3b06b2", "name": "InQuest - 01-08-2025", "description": "", "modified": "2025-09-01T03:01:43.765000", "created": "2025-08-02T03:24:13.908000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 37, "URL": 159, "FileHash-SHA256": 391, "domain": 50, "FileHash-MD5": 8, "FileHash-SHA1": 2 }, "indicator_count": 647, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "231 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68845556533101595428451b", "name": "InQuest - 25-07-2025", "description": "", "modified": "2025-08-25T04:03:31.154000", "created": "2025-07-26T04:11:02.841000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 25, "URL": 241, "FileHash-SHA256": 388, "FileHash-MD5": 11, "domain": 106, "FileHash-SHA1": 6 }, "indicator_count": 777, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "238 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "687739a6d0dd92f3a9ae3a9d", "name": "InQuest - 15-07-2025", "description": "", "modified": "2025-08-15T05:01:22.570000", "created": "2025-07-16T05:33:26.837000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 236, "domain": 72, "FileHash-SHA1": 20, "FileHash-SHA256": 245, "FileHash-MD5": 4 }, "indicator_count": 612, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "248 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6840de67a4e8457b2e6a0bdc", "name": "InQuest - 04-06-2025", "description": "", "modified": "2025-07-05T00:03:03.269000", "created": "2025-06-05T00:01:43.758000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 40, "URL": 176, "FileHash-SHA1": 18, "FileHash-SHA256": 196, "domain": 47, "FileHash-MD5": 9 }, "indicator_count": 486, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "289 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f5b0da593113fca17f4f10", "name": "InQuest - 08-04-2025", "description": "", "modified": "2025-05-08T23:02:05.353000", "created": "2025-04-08T23:27:22.966000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 25, "domain": 149, "URL": 543, "hostname": 113, "FileHash-SHA256": 666, "FileHash-MD5": 55 }, "indicator_count": 1551, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "346 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f45f868a615cb8060ae209", "name": "InQuest - 07-04-2025", "description": "", "modified": "2025-05-07T23:04:26.129000", "created": "2025-04-07T23:28:06.737000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 146, "URL": 504, "FileHash-SHA256": 670, "hostname": 110, "FileHash-MD5": 15, "FileHash-SHA1": 35 }, "indicator_count": 1480, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "347 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f30d1e5f894bef93248ddd", "name": "InQuest - 06-04-2025", "description": "", "modified": "2025-05-06T23:04:02.399000", "created": "2025-04-06T23:24:14.704000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 100, "URL": 435, "domain": 113, "FileHash-SHA256": 614, "FileHash-SHA1": 26, "FileHash-MD5": 22 }, "indicator_count": 1310, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "348 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f1bbda9e928a3743d1c379", "name": "InQuest - 05-04-2025", "description": "", "modified": "2025-05-05T23:03:32.288000", "created": "2025-04-05T23:25:13.994000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 569, "FileHash-SHA256": 550, "domain": 150, "hostname": 107, "FileHash-SHA1": 39, "FileHash-MD5": 41 }, "indicator_count": 1456, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "349 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67f06bc5e8059cb562270235", "name": "InQuest - 04-04-2025", "description": "", "modified": "2025-05-04T23:03:41.880000", "created": "2025-04-04T23:31:17.659000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 659, "FileHash-SHA256": 572, "FileHash-SHA1": 30, "FileHash-MD5": 43, "hostname": 138, "domain": 135 }, "indicator_count": 1577, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "350 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ca394df02a68ad4f8bdd44", "name": "InQuest - 06-03-2025", "description": "", "modified": "2025-04-06T00:01:42.553000", "created": "2025-03-07T00:09:49.679000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 597, "FileHash-SHA1": 84, "URL": 688, "hostname": 142, "domain": 209, "FileHash-MD5": 82 }, "indicator_count": 1802, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "379 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67b27deec91c946e9675e7fa", "name": "InQuest - 16-02-2025", "description": "", "modified": "2025-03-19T00:03:04.847000", "created": "2025-02-17T00:08:14.062000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1603, "modified_text": "397 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67b12c3c4632a0d8c2aa4404", "name": "InQuest - 15-02-2025", "description": "", "modified": "2025-03-18T00:02:17.088000", "created": "2025-02-16T00:07:24.725000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "398 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67afdaf25d973df1506db9ed", "name": "InQuest - 14-02-2025", "description": "", "modified": "2025-03-17T00:02:40.155000", "created": "2025-02-15T00:08:18.304000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1602, "modified_text": "399 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ae8977777bce12d0bdefb8", "name": "InQuest - 13-02-2025", "description": "", "modified": "2025-03-16T00:02:02.909000", "created": "2025-02-14T00:08:23.844000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "URL": 435, "hostname": 110, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "400 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ad37ac07b803850cd5019d", "name": "InQuest - 12-02-2025", "description": "", "modified": "2025-03-15T00:02:35.409000", "created": "2025-02-13T00:07:08.824000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1152, "URL": 435, "hostname": 110, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1831, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "401 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67abe6989c669db0193ae9db", "name": "InQuest - 11-02-2025", "description": "", "modified": "2025-03-14T00:03:58.923000", "created": "2025-02-12T00:08:56.544000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1150, "hostname": 110, "URL": 435, "FileHash-MD5": 20, "FileHash-SHA1": 23, "domain": 91 }, "indicator_count": 1829, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "402 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67ab03f304b42508f38e1888", "name": "InQuest - 10-02-2025", "description": "", "modified": "2025-03-13T08:02:58.413000", "created": "2025-02-11T08:01:55.601000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 442, "hostname": 110, "FileHash-SHA256": 874, "FileHash-MD5": 21, "FileHash-SHA1": 24, "domain": 91 }, "indicator_count": 1562, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "403 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675b7a8d715bea8dae799800", "name": "InQuest - 12-12-2024", "description": "", "modified": "2025-01-12T00:06:37.933000", "created": "2024-12-13T00:06:37.316000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 528, "FileHash-SHA256": 884, "FileHash-MD5": 23, "FileHash-SHA1": 26, "domain": 174, "hostname": 85 }, "indicator_count": 1720, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "463 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "675a291c4db55758a6c9939f", "name": "InQuest - 11-12-2024", "description": "", "modified": "2025-01-11T00:05:21.483000", "created": "2024-12-12T00:06:52.807000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 486, "FileHash-SHA256": 791, "domain": 169, "hostname": 73, "FileHash-SHA1": 25, "FileHash-MD5": 22 }, "indicator_count": 1566, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "464 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6758d6b537b2a55149ef62d8", "name": "InQuest - 10-12-2024", "description": "", "modified": "2025-01-10T00:01:00.333000", "created": "2024-12-11T00:03:01.699000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 477, "FileHash-SHA256": 774, "FileHash-SHA1": 25, "domain": 170, "hostname": 92, "FileHash-MD5": 22 }, "indicator_count": 1560, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "465 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6757868d091fe41a5f4eb7f7", "name": "InQuest - 09-12-2024", "description": "", "modified": "2025-01-09T00:00:38.235000", "created": "2024-12-10T00:08:45.010000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 662, "domain": 158, "URL": 439, "FileHash-MD5": 9, "hostname": 90, "FileHash-SHA1": 19 }, "indicator_count": 1377, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "466 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6756344c5a91b110c510ec07", "name": "InQuest - 08-12-2024", "description": "", "modified": "2025-01-08T00:04:53.735000", "created": "2024-12-09T00:05:32.432000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 157, "URL": 431, "FileHash-MD5": 9, "hostname": 86, "FileHash-SHA256": 608, "FileHash-SHA1": 14 }, "indicator_count": 1305, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "467 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6754e40e5e5e805cd290d36f", "name": "InQuest - 07-12-2024", "description": "", "modified": "2025-01-07T00:02:14.438000", "created": "2024-12-08T00:10:54.259000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 19, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 106, "URL": 316, "FileHash-SHA256": 614, "FileHash-SHA1": 13, "FileHash-MD5": 8, "hostname": 64 }, "indicator_count": 1121, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "468 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "67523f9ec860e7a311ee7941", "name": "InQuest - 05-12-2024", "description": "", "modified": "2025-01-06T23:11:01.995000", "created": "2024-12-06T00:04:46.305000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 19, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 257, "domain": 54, "FileHash-SHA256": 771, "FileHash-MD5": 1, "hostname": 54, "FileHash-SHA1": 16 }, "indicator_count": 1153, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "468 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6750ef0b094398caed24334d", "name": "InQuest - 04-12-2024", "description": "", "modified": "2025-01-06T23:11:01.995000", "created": "2024-12-05T00:08:43.209000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 798, "FileHash-MD5": 47, "hostname": 68, "URL": 322, "domain": 69, "FileHash-SHA1": 27 }, "indicator_count": 1331, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "468 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://labs.inquest.net/iocdb", "https://blog.trendmicro.com/trendlabs-security-intelligence/fin6-compromised-e-commerce-platform-via-magecart-to-inject-credit-card-skimmers-into-thousands-of-online-shops/", "https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/", "https://medium.com/@marcelx/sesame-street-volusion-customers-are-comprised-how-the-cookie-monster-is-stealing-cc-numbers-21eb51ec613b" ], "related": { "alienvault": { "adversary": [ "Magecart" ], "malware_families": [], "industries": [], "unique_indicators": 16 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 7709 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/googleapis.com", "whois": "http://whois.domaintools.com/googleapis.com", "domain": "googleapis.com", "hostname": "storage.googleapis.com" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 33, "pulses": [ { "id": "5d9cf3671d2973bf30d2753f", "name": "Volusion - Theft of Payment Details", "description": "Hackers have breached the infrastructure of Volusion, a provider of cloud-hosted online stores, and are delivering malicious code that records and steals payment card details entered by users in online forms. The investigation lead to identifying a potential list of roughly 20,000 additional victims. Payment details were stolen sent to the malicious infrastructure (Indicators listed). While not yet confirmed, it is believed to be attributed to one of the various Magecart entities.", "modified": "2019-11-07T20:00:13.961000", "created": "2019-10-08T20:36:55.032000", "tags": [ "Data Theft", "Skimmer", "Magecart" ], "references": [ "https://medium.com/@marcelx/sesame-street-volusion-customers-are-comprised-how-the-cookie-monster-is-stealing-cc-numbers-21eb51ec613b", "https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/", "https://blog.trendmicro.com/trendlabs-security-intelligence/fin6-compromised-e-commerce-platform-via-magecart-to-inject-credit-card-skimmers-into-thousands-of-online-shops/" ], "public": 1, "adversary": "Magecart", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 115, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "domain": 2, "URL": 6, "FileHash-SHA256": 3, "FileHash-MD5": 1, "FileHash-SHA1": 1, "hostname": 1 }, "indicator_count": 14, "is_author": false, "is_subscribing": null, "subscriber_count": 377705, "modified_text": "2355 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68c61ecd15dc75b6a31cbc40", "name": "InQuest - 13-09-2025", "description": "", "modified": "2025-10-14T01:04:58.605000", "created": "2025-09-14T01:47:57.242000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 35, "URL": 151, "FileHash-SHA1": 8, "domain": 33, "FileHash-SHA256": 452, "FileHash-MD5": 4 }, "indicator_count": 683, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "188 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68bb86c74d26a1eaac880d0f", "name": "InQuest - 05-09-2025", "description": "", "modified": "2025-10-06T00:03:28.374000", "created": "2025-09-06T00:56:39.719000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 73, "URL": 268, "FileHash-SHA1": 7, "domain": 59, "FileHash-SHA256": 369, "FileHash-MD5": 8 }, "indicator_count": 784, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "196 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68b6379553e9978bfcf11f19", "name": "InQuest - 01-09-2025", "description": "", "modified": "2025-10-02T00:00:16.307000", "created": "2025-09-02T00:17:25.854000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 60, "URL": 240, "FileHash-SHA256": 442, "domain": 56, "FileHash-MD5": 4, "FileHash-SHA1": 2 }, "indicator_count": 804, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "200 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68ae4cacce1683b182c69068", "name": "InQuest - 26-08-2025", "description": "", "modified": "2025-09-26T00:01:12.214000", "created": "2025-08-27T00:09:16.382000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 40, "URL": 253, "FileHash-SHA256": 195, "domain": 98, "FileHash-SHA1": 8, "FileHash-MD5": 8 }, "indicator_count": 602, "is_author": false, "is_subscribing": null, "subscriber_count": 1601, "modified_text": "206 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68aa5a637f87c235c0d9d04d", "name": "InQuest - 23-08-2025", "description": "", "modified": "2025-09-23T00:00:26.123000", "created": "2025-08-24T00:18:43.713000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 67, "URL": 163, "FileHash-SHA1": 9, "FileHash-SHA256": 407, "domain": 31, "FileHash-MD5": 10 }, "indicator_count": 687, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "209 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68a917b9da31cbfeb18492bb", "name": "InQuest - 22-08-2025", "description": "", "modified": "2025-09-22T01:03:23.691000", "created": "2025-08-23T01:22:01.412000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 8, "hostname": 41, "URL": 186, "domain": 58, "FileHash-SHA256": 234, "FileHash-MD5": 10 }, "indicator_count": 537, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "210 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688ee0ea46f01ef1ef04e021", "name": "InQuest - 02-08-2025", "description": "", "modified": "2025-09-02T04:01:31.218000", "created": "2025-08-03T04:09:14.088000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 23, "URL": 110, "FileHash-SHA256": 339, "domain": 20, "FileHash-MD5": 10, "FileHash-SHA1": 6 }, "indicator_count": 508, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "230 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "688d84dd329cefe36f3b06b2", "name": "InQuest - 01-08-2025", "description": "", "modified": "2025-09-01T03:01:43.765000", "created": "2025-08-02T03:24:13.908000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 37, "URL": 159, "FileHash-SHA256": 391, "domain": 50, "FileHash-MD5": 8, "FileHash-SHA1": 2 }, "indicator_count": 647, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "231 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "68845556533101595428451b", "name": "InQuest - 25-07-2025", "description": "", "modified": "2025-08-25T04:03:31.154000", "created": "2025-07-26T04:11:02.841000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 25, "URL": 241, "FileHash-SHA256": 388, "FileHash-MD5": 11, "domain": 106, "FileHash-SHA1": 6 }, "indicator_count": 777, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "238 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://storage.googleapis.com/volusionapi/resources.js", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://storage.googleapis.com/volusionapi/resources.js", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776676872.9275568 }