{ "type": "URL", "indicator": "https://www.cer2.netzkino.de", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://www.cer2.netzkino.de", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3596972463, "indicator": "https://www.cer2.netzkino.de", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 18, "pulses": [ { "id": "657098da69092274d6ba0e32", "name": "grapher", "description": "", "modified": "2023-12-06T15:52:58.296000", "created": "2023-12-06T15:52:58.296000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1183, "domain": 106, "hostname": 287, "URL": 873, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657096426f25db0e546b0c8f", "name": "gala.games and home routers storing malware for theeat actors", "description": "", "modified": "2023-12-06T15:41:54.948000", "created": "2023-12-06T15:41:54.948000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-MD5": 45, "FileHash-SHA1": 44, "FileHash-SHA256": 533, "domain": 64, "hostname": 266, "URL": 663 }, "indicator_count": 1616, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709632333f37e8de4185e9", "name": "whitelisted angular.js", "description": "", "modified": "2023-12-06T15:41:38.498000", "created": "2023-12-06T15:41:38.498000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "domain": 245, "FileHash-MD5": 127, "FileHash-SHA1": 125, "FileHash-SHA256": 424, "hostname": 466, "URL": 1805 }, "indicator_count": 3193, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657095cae448a5d8d4bb49d2", "name": "192.168.0.86 - j2br7yp43f.dattolocal.net - malicious abuse on home router", "description": "", "modified": "2023-12-06T15:39:54.390000", "created": "2023-12-06T15:39:54.390000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 557, "hostname": 249, "URL": 605, "domain": 32, "FileHash-MD5": 40, "FileHash-SHA1": 40 }, "indicator_count": 1523, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657095584e3e8573cf5ecac2", "name": "Graph", "description": "", "modified": "2023-12-06T15:38:00.344000", "created": "2023-12-06T15:38:00.344000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1183, "domain": 106, "hostname": 287, "URL": 873, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570954653c20edf68a04b9c", "name": "zolabud.co.za to", "description": "", "modified": "2023-12-06T15:37:42.534000", "created": "2023-12-06T15:37:42.534000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 585, "URL": 399, "hostname": 293, "domain": 86, "FileHash-MD5": 21, "FileHash-SHA1": 21 }, "indicator_count": 1405, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "641a6d8fab7252498bb2d3db", "name": "grapher", "description": "", "modified": "2023-03-22T02:53:12.826000", "created": "2023-03-22T02:53:03.077000", "tags": [ "roxio creator", "ipp id", "winzip", "global", "trackerurlhttps", "winzip25", "winzip26", "nxt5", "nxt7", "nxt8", "entity" ], "references": [ "https://www.virustotal.com/graph/gdc07fb14cc0e432fa996f01b58fecf8cd97ec785c28e4ba38ab7703e65e43c8e", "trkcfg.ini", "dorkingbeauty1 - Uploading app data TMP files from Lenovo IdeaPad fully updated (apparently) - files.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "63a13d01d5e9794cfde438da", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "1111.1111", "id": "227366", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 873, "hostname": 287, "domain": 106, "FileHash-SHA256": 1183, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 38, "modified_text": "1167 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63cc6547f6bf9dace6d68f6f", "name": "gala.games and home routers storing malware for theeat actors", "description": "Here is a full list of IPv4-related results from the 2016 World IPv3 Conference.. and, if you want to know, here is the full set of results:-1.", "modified": "2023-02-20T22:00:32.919000", "created": "2023-01-21T22:20:55.517000", "tags": [ "sha1", "no expiration", "filehashsha1", "delphi sha1", "trojan", "win32ausiv md5", "win32cve md5", "win32vhorse md5", "upx md5", "mtb md5", "ipv4 url", "hostname", "p2404", "domain", "ipv4 domain", "p11674523086", "p11674791151", "p11674860430", "nwfqvi", "nwfqvo", "nwfqbe", "nwfqav", "nwappleappnone", "unknown", "datatask", "default", "noknowledge" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 663, "hostname": 266, "domain": 64, "FileHash-SHA256": 533, "CVE": 1, "FileHash-MD5": 45, "FileHash-SHA1": 44 }, "indicator_count": 1616, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1196 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63f106ff111b27f61ceec85e", "name": "23", "description": "", "modified": "2023-02-18T17:12:31.066000", "created": "2023-02-18T17:12:31.066000", "tags": [ "www.lists.mwsys.mine.bz" ], "references": [ "https://www.virustotal.com/graph/ga565cd28cb004dfc90132273ccff8663cc04dfabd88947d49c378c82a31a01c3", "all about the www's" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "63bb5b61ab5d5c9ebc74a954", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ikkeookniet", "id": "120587", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_120587/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 564, "URL": 875, "FileHash-SHA256": 491, "domain": 204, "FileHash-MD5": 83, "FileHash-SHA1": 83 }, "indicator_count": 2300, "is_author": false, "is_subscribing": null, "subscriber_count": 2, "modified_text": "1198 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63c8e04d8e7541291b89f4a1", "name": "whitelisted angular.js", "description": "", "modified": "2023-02-18T15:00:23.103000", "created": "2023-01-19T06:16:45.770000", "tags": [ "sandbox", "malware", "analysis", "online", "submit", "vxstream", "sample", "download", "trojan", "apt", "ansi", "function", "null", "regexp", "date", "controller", "month", "hours", "fullyear", "this", "error", "path", "window", "cookie", "span", "form", "android", "hybrid", "close", "click", "ransomware", "june", "general", "infinity", "strings", "suspicious" ], "references": [ "https://www.hybrid-analysis.com/sample/91fb6887a7d7b8f298f3ea09abd8284404916b3623679b791a71087a12d65523/5936cfa1aac2ed5e205fb505", "bienvenidosnewyork.com/app.php" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1843, "hostname": 471, "domain": 246, "FileHash-MD5": 127, "FileHash-SHA1": 125, "FileHash-SHA256": 444, "CVE": 1 }, "indicator_count": 3257, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1198 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63bb5b61ab5d5c9ebc74a954", "name": "evil.in bum.ms - www.lists.mwsys.mine.bz", "description": "", "modified": "2023-02-07T22:01:16.959000", "created": "2023-01-09T00:10:09.776000", "tags": [ "www.lists.mwsys.mine.bz" ], "references": [ "https://www.virustotal.com/graph/ga565cd28cb004dfc90132273ccff8663cc04dfabd88947d49c378c82a31a01c3", "all about the www's" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 564, "URL": 875, "FileHash-SHA256": 491, "domain": 204, "FileHash-MD5": 83, "FileHash-SHA1": 83 }, "indicator_count": 2300, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "1209 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63af05abbb822d1ef22cb26d", "name": "192.168.0.86 - j2br7yp43f.dattolocal.net - malicious abuse on home router", "description": "192.168.0.23 and 139 - www.yndesen.net - to device-local-(...)remotewd.com bad actor abusing home devices under this cloud/storage provider", "modified": "2023-01-29T14:03:36.994000", "created": "2022-12-30T15:37:15.190000", "tags": [ "j2br7yp43f.dattolocal.net", "www.yndesen.net", "192.168.0.23", "192.168.0139", "192.168.0.24", "192.168.0.86" ], "references": [ "https://www.virustotal.com/graph/g7227176581de4678b6f3bfdeb541cbcfda2a37cf7e894b5e99575774a1969b07", "j2br7yp43f.dattolocal.net", "ccs01lte.vo.ca-cncx.net", "www.concentric.com", "5.5.6.1", "llnwd.net", "twitter i8n locale page error revealing pivot" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 249, "URL": 605, "FileHash-SHA256": 557, "domain": 32, "FileHash-MD5": 40, "FileHash-SHA1": 40 }, "indicator_count": 1523, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "1218 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63a13d01d5e9794cfde438da", "name": "Graph", "description": "https://www.virustotal.com/gui/collection/af71f2cbd4c4a2a04f6c1a781506662e8b8ca56b6faeab665e392355ff6afc0c", "modified": "2023-01-19T04:03:03.278000", "created": "2022-12-20T04:41:37.401000", "tags": [ "roxio creator", "ipp id", "winzip", "global", "trackerurlhttps", "winzip25", "winzip26", "nxt5", "nxt7", "nxt8", "entity" ], "references": [ "https://www.virustotal.com/graph/gdc07fb14cc0e432fa996f01b58fecf8cd97ec785c28e4ba38ab7703e65e43c8e", "trkcfg.ini", "dorkingbeauty1 - Uploading app data TMP files from Lenovo IdeaPad fully updated (apparently) - files.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 36, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 873, "hostname": 287, "domain": 106, "FileHash-SHA256": 1183, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 94, "modified_text": "1229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "639e27a3b31414e62c523031", "name": "zolabud.co.za to", "description": "", "modified": "2023-01-16T19:02:26.658000", "created": "2022-12-17T20:33:39.420000", "tags": [ "www.msftconnecttest.com.9.1.dcd316b5.roksit.net: hostname" ], "references": [ "www.msftconnecttest.com.9.1.dcd316b5.roksit.net:" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 20, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 293, "URL": 399, "FileHash-SHA256": 585, "domain": 86, "FileHash-MD5": 21, "FileHash-SHA1": 21 }, "indicator_count": 1405, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "1231 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6399cfd2a2e42a91e57cc82a", "name": "KR Crypto Theft I guess via jotform and api.signalone.com - makes total sense to 4 both domains", "description": "How much do you want to know about the Airdrop Giveaway and how much of your prize money will be sent to the winner in a free Jotform-style giveaway?", "modified": "2023-01-13T13:02:29.978000", "created": "2022-12-14T13:29:54.052000", "tags": [ "next submit", "press enter", "select", "request", "withdraw nft", "issue wallet", "connect unable", "form", "enter", "jotform", "api.onesignal.com" ], "references": [ "https://form.jotform.com/kiheli2856/AirdropGiveaway", "api.onesgnal.cm", "with \"www\" and without \"www\"" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 450, "hostname": 77, "URL": 322, "domain": 17, "FileHash-MD5": 45, "FileHash-SHA1": 45 }, "indicator_count": 956, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "1234 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "638fef9c0dc3cca2cff5ac42", "name": "coldzone.tk - btcvip.com - Tweet", "description": "", "modified": "2023-01-05T18:10:20.257000", "created": "2022-12-07T01:42:52.861000", "tags": [ "coldzone.tk", "btcvip.com" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 18, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 642, "URL": 470, "hostname": 208, "domain": 65 }, "indicator_count": 1385, "is_author": false, "is_subscribing": null, "subscriber_count": 393, "modified_text": "1242 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "638c0d9d17099aad3e3dcc94", "name": "Twitter Email Header for unknown request for twitter ads account, claiming my twitter account in ineligible for ad acc", "description": "Twitter Email Header for unknown request for twitter ads account, claiming my twitter account in ineligible for ad acc", "modified": "2023-01-03T02:02:59.827000", "created": "2022-12-04T03:01:49.626000", "tags": [ "hash seen", "size", "copy md5", "sha1", "copy sha1", "copy sha256", "sha256", "united", "runtime process", "osint", "date", "accept", "malicious", "strings", "hybrid", "general", "click", "hosts", "exim", "info", "subject", "twitter ads", "mimeversion", "feedbackid", "Russian", "twitter", "headers", "paymentsense.cloud" ], "references": [ "text.txt", "g217f1ea17c224d32b505815a1bddd48496c6d20425d744e9b9bced28785aaa74.json", "yandex.uz", "smart tv", "payment connector - paymentsense.cloud", "Russian" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 484, "hostname": 250, "FileHash-SHA256": 640, "domain": 127, "email": 6, "FileHash-MD5": 13, "FileHash-SHA1": 8 }, "indicator_count": 1528, "is_author": false, "is_subscribing": null, "subscriber_count": 394, "modified_text": "1245 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "638c0d9fbdf2a9311be4ec4a", "name": "Twitter Email Header for unknown request for twitter ads account, claiming my twitter account in ineligible for ad acc", "description": "Twitter Email Header for unknown request for twitter ads account, claiming my twitter account in ineligible for ad acc", "modified": "2023-01-03T02:02:59.827000", "created": "2022-12-04T03:01:51.801000", "tags": [ "hash seen", "size", "copy md5", "sha1", "copy sha1", "copy sha256", "sha256", "united", "runtime process", "osint", "date", "accept", "malicious", "strings", "hybrid", "general", "click", "hosts", "exim", "info", "subject", "twitter ads", "mimeversion", "feedbackid", "Russian", "twitter", "headers", "paymentsense.cloud" ], "references": [ "text.txt", "g217f1ea17c224d32b505815a1bddd48496c6d20425d744e9b9bced28785aaa74.json", "yandex.uz", "smart tv", "payment connector - paymentsense.cloud", "Russian" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "dorkingbeauty1", "id": "80137", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 484, "hostname": 250, "FileHash-SHA256": 640, "domain": 127, "email": 6, "FileHash-MD5": 13, "FileHash-SHA1": 8 }, "indicator_count": 1528, "is_author": false, "is_subscribing": null, "subscriber_count": 395, "modified_text": "1245 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "dorkingbeauty1 - Uploading app data TMP files from Lenovo IdeaPad fully updated (apparently) - files.json", "api.onesgnal.cm", "text.txt", "payment connector - paymentsense.cloud", "j2br7yp43f.dattolocal.net", "twitter i8n locale page error revealing pivot", "yandex.uz", "https://www.virustotal.com/graph/g7227176581de4678b6f3bfdeb541cbcfda2a37cf7e894b5e99575774a1969b07", "g217f1ea17c224d32b505815a1bddd48496c6d20425d744e9b9bced28785aaa74.json", "www.msftconnecttest.com.9.1.dcd316b5.roksit.net:", "trkcfg.ini", "https://form.jotform.com/kiheli2856/AirdropGiveaway", "Russian", "bienvenidosnewyork.com/app.php", "https://www.virustotal.com/graph/gdc07fb14cc0e432fa996f01b58fecf8cd97ec785c28e4ba38ab7703e65e43c8e", "https://www.virustotal.com/graph/ga565cd28cb004dfc90132273ccff8663cc04dfabd88947d49c378c82a31a01c3", "llnwd.net", "https://www.hybrid-analysis.com/sample/91fb6887a7d7b8f298f3ea09abd8284404916b3623679b791a71087a12d65523/5936cfa1aac2ed5e205fb505", "all about the www's", "with \"www\" and without \"www\"", "ccs01lte.vo.ca-cncx.net", "smart tv", "5.5.6.1", "www.concentric.com" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 14893 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/netzkino.de", "whois": "http://whois.domaintools.com/netzkino.de", "domain": "netzkino.de", "hostname": "www.cer2.netzkino.de" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 18, "pulses": [ { "id": "657098da69092274d6ba0e32", "name": "grapher", "description": "", "modified": "2023-12-06T15:52:58.296000", "created": "2023-12-06T15:52:58.296000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1183, "domain": 106, "hostname": 287, "URL": 873, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657096426f25db0e546b0c8f", "name": "gala.games and home routers storing malware for theeat actors", "description": "", "modified": "2023-12-06T15:41:54.948000", "created": "2023-12-06T15:41:54.948000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "FileHash-MD5": 45, "FileHash-SHA1": 44, "FileHash-SHA256": 533, "domain": 64, "hostname": 266, "URL": 663 }, "indicator_count": 1616, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709632333f37e8de4185e9", "name": "whitelisted angular.js", "description": "", "modified": "2023-12-06T15:41:38.498000", "created": "2023-12-06T15:41:38.498000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 1, "domain": 245, "FileHash-MD5": 127, "FileHash-SHA1": 125, "FileHash-SHA256": 424, "hostname": 466, "URL": 1805 }, "indicator_count": 3193, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657095cae448a5d8d4bb49d2", "name": "192.168.0.86 - j2br7yp43f.dattolocal.net - malicious abuse on home router", "description": "", "modified": "2023-12-06T15:39:54.390000", "created": "2023-12-06T15:39:54.390000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 557, "hostname": 249, "URL": 605, "domain": 32, "FileHash-MD5": 40, "FileHash-SHA1": 40 }, "indicator_count": 1523, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "657095584e3e8573cf5ecac2", "name": "Graph", "description": "", "modified": "2023-12-06T15:38:00.344000", "created": "2023-12-06T15:38:00.344000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 1183, "domain": 106, "hostname": 287, "URL": 873, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "6570954653c20edf68a04b9c", "name": "zolabud.co.za to", "description": "", "modified": "2023-12-06T15:37:42.534000", "created": "2023-12-06T15:37:42.534000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 585, "URL": 399, "hostname": 293, "domain": 86, "FileHash-MD5": 21, "FileHash-SHA1": 21 }, "indicator_count": 1405, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "907 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "641a6d8fab7252498bb2d3db", "name": "grapher", "description": "", "modified": "2023-03-22T02:53:12.826000", "created": "2023-03-22T02:53:03.077000", "tags": [ "roxio creator", "ipp id", "winzip", "global", "trackerurlhttps", "winzip25", "winzip26", "nxt5", "nxt7", "nxt8", "entity" ], "references": [ "https://www.virustotal.com/graph/gdc07fb14cc0e432fa996f01b58fecf8cd97ec785c28e4ba38ab7703e65e43c8e", "trkcfg.ini", "dorkingbeauty1 - Uploading app data TMP files from Lenovo IdeaPad fully updated (apparently) - files.json" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "63a13d01d5e9794cfde438da", "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "1111.1111", "id": "227366", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 873, "hostname": 287, "domain": 106, "FileHash-SHA256": 1183, "FileHash-MD5": 244, "FileHash-SHA1": 244 }, "indicator_count": 2937, "is_author": false, "is_subscribing": null, "subscriber_count": 38, "modified_text": "1167 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63cc6547f6bf9dace6d68f6f", "name": "gala.games and home routers storing malware for theeat actors", "description": "Here is a full list of IPv4-related results from the 2016 World IPv3 Conference.. and, if you want to know, here is the full set of results:-1.", "modified": "2023-02-20T22:00:32.919000", "created": "2023-01-21T22:20:55.517000", "tags": [ "sha1", "no expiration", "filehashsha1", "delphi sha1", "trojan", "win32ausiv md5", "win32cve md5", "win32vhorse md5", "upx md5", "mtb md5", "ipv4 url", "hostname", "p2404", "domain", "ipv4 domain", "p11674523086", "p11674791151", "p11674860430", "nwfqvi", "nwfqvo", "nwfqbe", "nwfqav", "nwappleappnone", "unknown", "datatask", "default", "noknowledge" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 663, "hostname": 266, "domain": 64, "FileHash-SHA256": 533, "CVE": 1, "FileHash-MD5": 45, "FileHash-SHA1": 44 }, "indicator_count": 1616, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1196 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63f106ff111b27f61ceec85e", "name": "23", "description": "", "modified": "2023-02-18T17:12:31.066000", "created": "2023-02-18T17:12:31.066000", "tags": [ "www.lists.mwsys.mine.bz" ], "references": [ "https://www.virustotal.com/graph/ga565cd28cb004dfc90132273ccff8663cc04dfabd88947d49c378c82a31a01c3", "all about the www's" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "63bb5b61ab5d5c9ebc74a954", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ikkeookniet", "id": "120587", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_120587/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 564, "URL": 875, "FileHash-SHA256": 491, "domain": 204, "FileHash-MD5": 83, "FileHash-SHA1": 83 }, "indicator_count": 2300, "is_author": false, "is_subscribing": null, "subscriber_count": 2, "modified_text": "1198 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63c8e04d8e7541291b89f4a1", "name": "whitelisted angular.js", "description": "", "modified": "2023-02-18T15:00:23.103000", "created": "2023-01-19T06:16:45.770000", "tags": [ "sandbox", "malware", "analysis", "online", "submit", "vxstream", "sample", "download", "trojan", "apt", "ansi", "function", "null", "regexp", "date", "controller", "month", "hours", "fullyear", "this", "error", "path", "window", "cookie", "span", "form", "android", "hybrid", "close", "click", "ransomware", "june", "general", "infinity", "strings", "suspicious" ], "references": [ "https://www.hybrid-analysis.com/sample/91fb6887a7d7b8f298f3ea09abd8284404916b3623679b791a71087a12d65523/5936cfa1aac2ed5e205fb505", "bienvenidosnewyork.com/app.php" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "callmeDoris", "id": "205385", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1843, "hostname": 471, "domain": 246, "FileHash-MD5": 127, "FileHash-SHA1": 125, "FileHash-SHA256": 444, "CVE": 1 }, "indicator_count": 3257, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "1198 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://www.cer2.netzkino.de", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://www.cer2.netzkino.de", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780312145.7403426 }