{
  "type": "URL",
  "indicator": "https://www.this.as",
  "general": {
    "sections": [
      "general",
      "url_list",
      "http_scans",
      "screenshot"
    ],
    "indicator": "https://www.this.as",
    "type": "url",
    "type_title": "URL",
    "validation": [],
    "base_indicator": {
      "id": 2636262058,
      "indicator": "https://www.this.as",
      "type": "URL",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 5,
      "pulses": [
        {
          "id": "663d2869e0f3a42bbddc42ff",
          "name": "UPX executable packer.",
          "description": "A new rule has been introduced  a \"suspicious\" ELF binary that is packed with the UPX executable packer.\nSuggested ATT&CK IDs: rule SUSP_ELF_LNX_UPX_Compressed_File { meta: description = \"Detects a suspicious ELF binary with UPX compression\" author = \"Florian Roth (Nextron Systems)\" reference = \"Internal Research\" date = \"2018-12-12\" score = 40 hash1 = \"038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4\" id = \"078937de-59b3-538e-a5c3-57f4e6050212\" strings: $s1 = \"PROT_EXEC|PROT_WRITE failed.\" fullword ascii $s2 = \"$Id: UPX\" fullword ascii $s3 = \"$Info: This file is packed with the UPX executable packer\" ascii $fp1 = \"check your UCL installation !\"",
          "modified": "2024-10-14T00:01:17.069000",
          "created": "2024-05-09T19:47:53.786000",
          "tags": [
            "cioch adrian",
            "centrum usug",
            "sieciowych",
            "elf binary",
            "upx compression",
            "roth",
            "nextron",
            "info",
            "javascript",
            "html",
            "office open",
            "xml document",
            "network capture",
            "win32 exe",
            "xml pakietu",
            "pdf zestawy",
            "przechwytywanie",
            "office",
            "filehashsha1",
            "url https",
            "cve cve20201070",
            "cve cve20203153",
            "cve cve20201048",
            "cve cve20211732",
            "cve20201048 apr",
            "filehashmd5",
            "cve cve20010901",
            "cve cve20021841",
            "cve20153202 apr",
            "cve cve20160728",
            "cve cve20161807",
            "cve cve20175123",
            "cve20185407 apr",
            "cve cve20054605",
            "cve cve20060745",
            "cve cve20070452",
            "cve cve20070453",
            "cve cve20070454",
            "cve cve20071355",
            "cve cve20071358",
            "cve cve20071871",
            "cve20149614 apr",
            "cve cve20151503",
            "cve cve20152080",
            "cve cve20157377",
            "cve cve20170131",
            "cve20200796 may",
            "cve cve20113403"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 6861,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 5771,
            "domain": 3139,
            "URL": 14525,
            "FileHash-SHA1": 2610,
            "IPv4": 108,
            "CIDR": 40,
            "FileHash-SHA256": 10705,
            "FileHash-MD5": 3373,
            "YARA": 2,
            "CVE": 148,
            "Mutex": 7,
            "FilePath": 3,
            "SSLCertFingerprint": 3,
            "email": 23,
            "JA3": 1,
            "IPv6": 2
          },
          "indicator_count": 40460,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 137,
          "modified_text": "552 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "65707e5b7df6f60133e8fb50",
          "name": "Jeeng / Powerbox",
          "description": "",
          "modified": "2023-12-06T13:59:55.129000",
          "created": "2023-12-06T13:59:55.129000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CVE": 3,
            "FileHash-SHA256": 9072,
            "domain": 2500,
            "hostname": 3584,
            "URL": 13548,
            "FileHash-MD5": 197,
            "FileHash-SHA1": 162,
            "email": 19,
            "CIDR": 20,
            "SSLCertFingerprint": 2,
            "BitcoinAddress": 1
          },
          "indicator_count": 29108,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "865 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "630aa58da975d104891c6565",
          "name": "Live Sexcams: XXX Adult Shows - Free Porn Chat - BongaCams",
          "description": "",
          "modified": "2022-08-27T23:15:25.718000",
          "created": "2022-08-27T23:15:25.718000",
          "tags": [
            "hammer",
            "gc",
            "vob",
            "tvb",
            "service",
            "date",
            "check favorite",
            "dare",
            "continuecta",
            "vote",
            "goprivate",
            "buycredits",
            "ff8d00",
            "favorite",
            "error",
            "null",
            "nonce",
            "enterprise",
            "script",
            "please do",
            "not copy",
            "and paste",
            "this code",
            "cgrecaptchacfg",
            "ngrecaptcha",
            "eenterprise",
            "object",
            "customevent",
            "ethis",
            "layouttest",
            "faceliftlayout",
            "stubbutton",
            "similarmodels",
            "purchasepagev3",
            "langtag",
            "newbannerchat",
            "image",
            "typeof atrkopts",
            "dailagill",
            "strong",
            "streams",
            "your",
            "source of",
            "pleasure",
            "live sex",
            "normal",
            "cosplay",
            "fingering",
            "chat",
            "deepthroat",
            "close",
            "live",
            "free cams",
            "sex chat",
            "live porn",
            "sex cam",
            "livesex",
            "webcamsex",
            "adult cams",
            "free live sex chat",
            "webcam sex",
            "chat online",
            "free adults hd",
            "mins",
            "xxx cams",
            "xxx porn",
            "free live cam",
            "adult sex",
            "material",
            "majority",
            "here looking",
            "for child",
            "pornography",
            "move on",
            "on this",
            "website",
            "we will",
            "turn over",
            "free porn webcams",
            "live webcam",
            "online sex cam",
            "xxx girls",
            "live sex chat",
            "teen sexchat",
            "amateur video",
            "web cam",
            "sexcams",
            "shows",
            "porn chat",
            "bongacams",
            "function",
            "i2c1",
            "xeir",
            "cef4",
            "m4sr",
            "e4c4",
            "math",
            "ttmt",
            "y4giwe",
            "h5gg",
            "window",
            "css1062",
            "segoe ui",
            "emoji",
            "href",
            "roboto",
            "helvetica neue",
            "arial",
            "apple color",
            "symbol",
            "typecheckbox",
            "twitter",
            "web design",
            "iran",
            "author url",
            "github",
            "regexp",
            "pseudo",
            "child",
            "typeof n",
            "typeof t",
            "class",
            "attr",
            "typeof module",
            "this"
          ],
          "references": [
            "xfe-URL-payvtylhwjxnr.xyz-stix2-2.1-export.json",
            "https://payvtylhwjxnr.xyz/Content/script?v=2",
            "https://payvtylhwjxnr.xyz/Content/css/banks.css",
            "https://payvtylhwjxnr.xyz/Content/style?v=1",
            "xfe-IP-104.21.72.150-stix2-2.1-export.json",
            "xfe-IP-172.67.151.101-stix2-2.1-export.json",
            "https://static.selfpuc.com/mnpw3.js",
            "https://bcprm.com/promo.php?c=716918&type=embed_chat&page=popular_chat&top_model=1&stream_only_size=full",
            "https://en.bongacams.com/popular-chat-popup?livetab=female&top_model=1&c=716918&hit_url=https%3A%2F%2Fbongacams.com%2Ftrack%3Fc%3D716918%26ps%3Dembed_chat&stream_only=1&amute=1&classic=on",
            "https://bongacams.com/GianaWatson",
            "https://m.bimbim.com/en/DailaGill?psid=crakmedia2&psprogram=revs&pstool=450_1&utm_campaign=main&utm_content=redirect&utm_medium=webmaster&utm_source=promotools",
            "https://d31qbv1cthcecs.cloudfront.net/atrk.js",
            "https://i.bcicdn.com/js-min/1NCJjq/27984029c73362dbf9ec0727.js",
            "https://www.google.com/recaptcha/enterprise.js?&render=6LeY5wkeAAAAAHNlJZXiHgJrpCTsD-Qu0O2GlYgB",
            "https://staticx1.dditscdn.com/mbl/frontend_backbone/static/_common/modular-member-client/script/maincontext_9af26.min.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "New Caledonia",
            "New Zealand"
          ],
          "malware_families": [
            {
              "id": "Hammer",
              "display_name": "Hammer",
              "target": null
            },
            {
              "id": "Tvb",
              "display_name": "Tvb",
              "target": null
            },
            {
              "id": "Vob",
              "display_name": "Vob",
              "target": null
            },
            {
              "id": "Gc",
              "display_name": "Gc",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1574",
              "name": "Hijack Execution Flow",
              "display_name": "T1574 - Hijack Execution Flow"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": "62509a05316b00bcca30c693",
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Hardtogiveafuck",
            "id": "205637",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 425,
            "domain": 459,
            "URL": 1412,
            "FileHash-SHA256": 125
          },
          "indicator_count": 2421,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 7,
          "modified_text": "1330 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "620c3b1f8af7ea0dcf2c1218",
          "name": "Jeeng / Powerbox",
          "description": "",
          "modified": "2022-06-12T22:01:23.105000",
          "created": "2022-02-15T23:45:35.234000",
          "tags": [
            "Jeeng",
            "tim pool",
            "timcast"
          ],
          "references": [
            "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "United States of America"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "scnrscnr",
            "id": "126475",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 9072,
            "domain": 2500,
            "URL": 13548,
            "hostname": 3584,
            "FileHash-MD5": 197,
            "FileHash-SHA1": 162,
            "CVE": 3,
            "CIDR": 20,
            "SSLCertFingerprint": 2,
            "email": 19,
            "BitcoinAddress": 1
          },
          "indicator_count": 29108,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 97,
          "modified_text": "1406 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        },
        {
          "id": "62509a05316b00bcca30c693",
          "name": "Live Sexcams: XXX Adult Shows - Free Porn Chat - BongaCams",
          "description": "Here is the full text of the code for the new animation, which will take place at 20:00 GMT on Friday, 1:30 BST.. (19:45 GMT)..",
          "modified": "2022-05-08T00:03:14.586000",
          "created": "2022-04-08T20:24:37.141000",
          "tags": [
            "hammer",
            "gc",
            "vob",
            "tvb",
            "service",
            "date",
            "check favorite",
            "dare",
            "continuecta",
            "vote",
            "goprivate",
            "buycredits",
            "ff8d00",
            "favorite",
            "error",
            "null",
            "nonce",
            "enterprise",
            "script",
            "please do",
            "not copy",
            "and paste",
            "this code",
            "cgrecaptchacfg",
            "ngrecaptcha",
            "eenterprise",
            "object",
            "customevent",
            "ethis",
            "layouttest",
            "faceliftlayout",
            "stubbutton",
            "similarmodels",
            "purchasepagev3",
            "langtag",
            "newbannerchat",
            "image",
            "typeof atrkopts",
            "dailagill",
            "strong",
            "streams",
            "your",
            "source of",
            "pleasure",
            "live sex",
            "normal",
            "cosplay",
            "fingering",
            "chat",
            "deepthroat",
            "close",
            "live",
            "free cams",
            "sex chat",
            "live porn",
            "sex cam",
            "livesex",
            "webcamsex",
            "adult cams",
            "free live sex chat",
            "webcam sex",
            "chat online",
            "free adults hd",
            "mins",
            "xxx cams",
            "xxx porn",
            "free live cam",
            "adult sex",
            "material",
            "majority",
            "here looking",
            "for child",
            "pornography",
            "move on",
            "on this",
            "website",
            "we will",
            "turn over",
            "free porn webcams",
            "live webcam",
            "online sex cam",
            "xxx girls",
            "live sex chat",
            "teen sexchat",
            "amateur video",
            "web cam",
            "sexcams",
            "shows",
            "porn chat",
            "bongacams",
            "function",
            "i2c1",
            "xeir",
            "cef4",
            "m4sr",
            "e4c4",
            "math",
            "ttmt",
            "y4giwe",
            "h5gg",
            "window",
            "css1062",
            "segoe ui",
            "emoji",
            "href",
            "roboto",
            "helvetica neue",
            "arial",
            "apple color",
            "symbol",
            "typecheckbox",
            "twitter",
            "web design",
            "iran",
            "author url",
            "github",
            "regexp",
            "pseudo",
            "child",
            "typeof n",
            "typeof t",
            "class",
            "attr",
            "typeof module",
            "this"
          ],
          "references": [
            "xfe-URL-payvtylhwjxnr.xyz-stix2-2.1-export.json",
            "https://payvtylhwjxnr.xyz/Content/script?v=2",
            "https://payvtylhwjxnr.xyz/Content/css/banks.css",
            "https://payvtylhwjxnr.xyz/Content/style?v=1",
            "xfe-IP-104.21.72.150-stix2-2.1-export.json",
            "xfe-IP-172.67.151.101-stix2-2.1-export.json",
            "https://static.selfpuc.com/mnpw3.js",
            "https://bcprm.com/promo.php?c=716918&type=embed_chat&page=popular_chat&top_model=1&stream_only_size=full",
            "https://en.bongacams.com/popular-chat-popup?livetab=female&top_model=1&c=716918&hit_url=https%3A%2F%2Fbongacams.com%2Ftrack%3Fc%3D716918%26ps%3Dembed_chat&stream_only=1&amute=1&classic=on",
            "https://bongacams.com/GianaWatson",
            "https://m.bimbim.com/en/DailaGill?psid=crakmedia2&psprogram=revs&pstool=450_1&utm_campaign=main&utm_content=redirect&utm_medium=webmaster&utm_source=promotools",
            "https://d31qbv1cthcecs.cloudfront.net/atrk.js",
            "https://i.bcicdn.com/js-min/1NCJjq/27984029c73362dbf9ec0727.js",
            "https://www.google.com/recaptcha/enterprise.js?&render=6LeY5wkeAAAAAHNlJZXiHgJrpCTsD-Qu0O2GlYgB",
            "https://staticx1.dditscdn.com/mbl/frontend_backbone/static/_common/modular-member-client/script/maincontext_9af26.min.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "New Caledonia",
            "New Zealand"
          ],
          "malware_families": [
            {
              "id": "Hammer",
              "display_name": "Hammer",
              "target": null
            },
            {
              "id": "Tvb",
              "display_name": "Tvb",
              "target": null
            },
            {
              "id": "Vob",
              "display_name": "Vob",
              "target": null
            },
            {
              "id": "Gc",
              "display_name": "Gc",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1574",
              "name": "Hijack Execution Flow",
              "display_name": "T1574 - Hijack Execution Flow"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 425,
            "domain": 459,
            "URL": 1412,
            "FileHash-SHA256": 125
          },
          "indicator_count": 2421,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "1442 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "URL",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://m.bimbim.com/en/DailaGill?psid=crakmedia2&psprogram=revs&pstool=450_1&utm_campaign=main&utm_content=redirect&utm_medium=webmaster&utm_source=promotools",
        "https://payvtylhwjxnr.xyz/Content/script?v=2",
        "https://d31qbv1cthcecs.cloudfront.net/atrk.js",
        "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap",
        "https://bcprm.com/promo.php?c=716918&type=embed_chat&page=popular_chat&top_model=1&stream_only_size=full",
        "https://static.selfpuc.com/mnpw3.js",
        "xfe-IP-104.21.72.150-stix2-2.1-export.json",
        "https://en.bongacams.com/popular-chat-popup?livetab=female&top_model=1&c=716918&hit_url=https%3A%2F%2Fbongacams.com%2Ftrack%3Fc%3D716918%26ps%3Dembed_chat&stream_only=1&amute=1&classic=on",
        "https://i.bcicdn.com/js-min/1NCJjq/27984029c73362dbf9ec0727.js",
        "https://payvtylhwjxnr.xyz/Content/css/banks.css",
        "https://staticx1.dditscdn.com/mbl/frontend_backbone/static/_common/modular-member-client/script/maincontext_9af26.min.js",
        "xfe-IP-172.67.151.101-stix2-2.1-export.json",
        "xfe-URL-payvtylhwjxnr.xyz-stix2-2.1-export.json",
        "https://www.google.com/recaptcha/enterprise.js?&render=6LeY5wkeAAAAAHNlJZXiHgJrpCTsD-Qu0O2GlYgB",
        "https://bongacams.com/GianaWatson",
        "https://payvtylhwjxnr.xyz/Content/style?v=1"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": [],
          "unique_indicators": 0
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Vob",
            "Hammer",
            "Tvb",
            "Gc"
          ],
          "industries": [],
          "unique_indicators": 61550
        }
      }
    },
    "false_positive": [],
    "alexa": "http://www.alexa.com/siteinfo/this.as",
    "whois": "http://whois.domaintools.com/this.as",
    "domain": "this.as",
    "hostname": "www.this.as"
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 5,
  "pulses": [
    {
      "id": "663d2869e0f3a42bbddc42ff",
      "name": "UPX executable packer.",
      "description": "A new rule has been introduced  a \"suspicious\" ELF binary that is packed with the UPX executable packer.\nSuggested ATT&CK IDs: rule SUSP_ELF_LNX_UPX_Compressed_File { meta: description = \"Detects a suspicious ELF binary with UPX compression\" author = \"Florian Roth (Nextron Systems)\" reference = \"Internal Research\" date = \"2018-12-12\" score = 40 hash1 = \"038ff8b2fef16f8ee9d70e6c219c5f380afe1a21761791e8cbda21fa4d09fdb4\" id = \"078937de-59b3-538e-a5c3-57f4e6050212\" strings: $s1 = \"PROT_EXEC|PROT_WRITE failed.\" fullword ascii $s2 = \"$Id: UPX\" fullword ascii $s3 = \"$Info: This file is packed with the UPX executable packer\" ascii $fp1 = \"check your UCL installation !\"",
      "modified": "2024-10-14T00:01:17.069000",
      "created": "2024-05-09T19:47:53.786000",
      "tags": [
        "cioch adrian",
        "centrum usug",
        "sieciowych",
        "elf binary",
        "upx compression",
        "roth",
        "nextron",
        "info",
        "javascript",
        "html",
        "office open",
        "xml document",
        "network capture",
        "win32 exe",
        "xml pakietu",
        "pdf zestawy",
        "przechwytywanie",
        "office",
        "filehashsha1",
        "url https",
        "cve cve20201070",
        "cve cve20203153",
        "cve cve20201048",
        "cve cve20211732",
        "cve20201048 apr",
        "filehashmd5",
        "cve cve20010901",
        "cve cve20021841",
        "cve20153202 apr",
        "cve cve20160728",
        "cve cve20161807",
        "cve cve20175123",
        "cve20185407 apr",
        "cve cve20054605",
        "cve cve20060745",
        "cve cve20070452",
        "cve cve20070453",
        "cve cve20070454",
        "cve cve20071355",
        "cve cve20071358",
        "cve cve20071871",
        "cve20149614 apr",
        "cve cve20151503",
        "cve cve20152080",
        "cve cve20157377",
        "cve cve20170131",
        "cve20200796 may",
        "cve cve20113403"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 6861,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 5771,
        "domain": 3139,
        "URL": 14525,
        "FileHash-SHA1": 2610,
        "IPv4": 108,
        "CIDR": 40,
        "FileHash-SHA256": 10705,
        "FileHash-MD5": 3373,
        "YARA": 2,
        "CVE": 148,
        "Mutex": 7,
        "FilePath": 3,
        "SSLCertFingerprint": 3,
        "email": 23,
        "JA3": 1,
        "IPv6": 2
      },
      "indicator_count": 40460,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 137,
      "modified_text": "552 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "65707e5b7df6f60133e8fb50",
      "name": "Jeeng / Powerbox",
      "description": "",
      "modified": "2023-12-06T13:59:55.129000",
      "created": "2023-12-06T13:59:55.129000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CVE": 3,
        "FileHash-SHA256": 9072,
        "domain": 2500,
        "hostname": 3584,
        "URL": 13548,
        "FileHash-MD5": 197,
        "FileHash-SHA1": 162,
        "email": 19,
        "CIDR": 20,
        "SSLCertFingerprint": 2,
        "BitcoinAddress": 1
      },
      "indicator_count": 29108,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "865 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "630aa58da975d104891c6565",
      "name": "Live Sexcams: XXX Adult Shows - Free Porn Chat - BongaCams",
      "description": "",
      "modified": "2022-08-27T23:15:25.718000",
      "created": "2022-08-27T23:15:25.718000",
      "tags": [
        "hammer",
        "gc",
        "vob",
        "tvb",
        "service",
        "date",
        "check favorite",
        "dare",
        "continuecta",
        "vote",
        "goprivate",
        "buycredits",
        "ff8d00",
        "favorite",
        "error",
        "null",
        "nonce",
        "enterprise",
        "script",
        "please do",
        "not copy",
        "and paste",
        "this code",
        "cgrecaptchacfg",
        "ngrecaptcha",
        "eenterprise",
        "object",
        "customevent",
        "ethis",
        "layouttest",
        "faceliftlayout",
        "stubbutton",
        "similarmodels",
        "purchasepagev3",
        "langtag",
        "newbannerchat",
        "image",
        "typeof atrkopts",
        "dailagill",
        "strong",
        "streams",
        "your",
        "source of",
        "pleasure",
        "live sex",
        "normal",
        "cosplay",
        "fingering",
        "chat",
        "deepthroat",
        "close",
        "live",
        "free cams",
        "sex chat",
        "live porn",
        "sex cam",
        "livesex",
        "webcamsex",
        "adult cams",
        "free live sex chat",
        "webcam sex",
        "chat online",
        "free adults hd",
        "mins",
        "xxx cams",
        "xxx porn",
        "free live cam",
        "adult sex",
        "material",
        "majority",
        "here looking",
        "for child",
        "pornography",
        "move on",
        "on this",
        "website",
        "we will",
        "turn over",
        "free porn webcams",
        "live webcam",
        "online sex cam",
        "xxx girls",
        "live sex chat",
        "teen sexchat",
        "amateur video",
        "web cam",
        "sexcams",
        "shows",
        "porn chat",
        "bongacams",
        "function",
        "i2c1",
        "xeir",
        "cef4",
        "m4sr",
        "e4c4",
        "math",
        "ttmt",
        "y4giwe",
        "h5gg",
        "window",
        "css1062",
        "segoe ui",
        "emoji",
        "href",
        "roboto",
        "helvetica neue",
        "arial",
        "apple color",
        "symbol",
        "typecheckbox",
        "twitter",
        "web design",
        "iran",
        "author url",
        "github",
        "regexp",
        "pseudo",
        "child",
        "typeof n",
        "typeof t",
        "class",
        "attr",
        "typeof module",
        "this"
      ],
      "references": [
        "xfe-URL-payvtylhwjxnr.xyz-stix2-2.1-export.json",
        "https://payvtylhwjxnr.xyz/Content/script?v=2",
        "https://payvtylhwjxnr.xyz/Content/css/banks.css",
        "https://payvtylhwjxnr.xyz/Content/style?v=1",
        "xfe-IP-104.21.72.150-stix2-2.1-export.json",
        "xfe-IP-172.67.151.101-stix2-2.1-export.json",
        "https://static.selfpuc.com/mnpw3.js",
        "https://bcprm.com/promo.php?c=716918&type=embed_chat&page=popular_chat&top_model=1&stream_only_size=full",
        "https://en.bongacams.com/popular-chat-popup?livetab=female&top_model=1&c=716918&hit_url=https%3A%2F%2Fbongacams.com%2Ftrack%3Fc%3D716918%26ps%3Dembed_chat&stream_only=1&amute=1&classic=on",
        "https://bongacams.com/GianaWatson",
        "https://m.bimbim.com/en/DailaGill?psid=crakmedia2&psprogram=revs&pstool=450_1&utm_campaign=main&utm_content=redirect&utm_medium=webmaster&utm_source=promotools",
        "https://d31qbv1cthcecs.cloudfront.net/atrk.js",
        "https://i.bcicdn.com/js-min/1NCJjq/27984029c73362dbf9ec0727.js",
        "https://www.google.com/recaptcha/enterprise.js?&render=6LeY5wkeAAAAAHNlJZXiHgJrpCTsD-Qu0O2GlYgB",
        "https://staticx1.dditscdn.com/mbl/frontend_backbone/static/_common/modular-member-client/script/maincontext_9af26.min.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "New Caledonia",
        "New Zealand"
      ],
      "malware_families": [
        {
          "id": "Hammer",
          "display_name": "Hammer",
          "target": null
        },
        {
          "id": "Tvb",
          "display_name": "Tvb",
          "target": null
        },
        {
          "id": "Vob",
          "display_name": "Vob",
          "target": null
        },
        {
          "id": "Gc",
          "display_name": "Gc",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1574",
          "name": "Hijack Execution Flow",
          "display_name": "T1574 - Hijack Execution Flow"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": "62509a05316b00bcca30c693",
      "export_count": 7,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Hardtogiveafuck",
        "id": "205637",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 425,
        "domain": 459,
        "URL": 1412,
        "FileHash-SHA256": 125
      },
      "indicator_count": 2421,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 7,
      "modified_text": "1330 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "620c3b1f8af7ea0dcf2c1218",
      "name": "Jeeng / Powerbox",
      "description": "",
      "modified": "2022-06-12T22:01:23.105000",
      "created": "2022-02-15T23:45:35.234000",
      "tags": [
        "Jeeng",
        "tim pool",
        "timcast"
      ],
      "references": [
        "cf20ed53-cb6d-4dfd-a4e8-794fbe163efc.pcap"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "United States of America"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 10,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "scnrscnr",
        "id": "126475",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_126475/resized/80/avatar_67ca5b7bae.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 9072,
        "domain": 2500,
        "URL": 13548,
        "hostname": 3584,
        "FileHash-MD5": 197,
        "FileHash-SHA1": 162,
        "CVE": 3,
        "CIDR": 20,
        "SSLCertFingerprint": 2,
        "email": 19,
        "BitcoinAddress": 1
      },
      "indicator_count": 29108,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 97,
      "modified_text": "1406 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    },
    {
      "id": "62509a05316b00bcca30c693",
      "name": "Live Sexcams: XXX Adult Shows - Free Porn Chat - BongaCams",
      "description": "Here is the full text of the code for the new animation, which will take place at 20:00 GMT on Friday, 1:30 BST.. (19:45 GMT)..",
      "modified": "2022-05-08T00:03:14.586000",
      "created": "2022-04-08T20:24:37.141000",
      "tags": [
        "hammer",
        "gc",
        "vob",
        "tvb",
        "service",
        "date",
        "check favorite",
        "dare",
        "continuecta",
        "vote",
        "goprivate",
        "buycredits",
        "ff8d00",
        "favorite",
        "error",
        "null",
        "nonce",
        "enterprise",
        "script",
        "please do",
        "not copy",
        "and paste",
        "this code",
        "cgrecaptchacfg",
        "ngrecaptcha",
        "eenterprise",
        "object",
        "customevent",
        "ethis",
        "layouttest",
        "faceliftlayout",
        "stubbutton",
        "similarmodels",
        "purchasepagev3",
        "langtag",
        "newbannerchat",
        "image",
        "typeof atrkopts",
        "dailagill",
        "strong",
        "streams",
        "your",
        "source of",
        "pleasure",
        "live sex",
        "normal",
        "cosplay",
        "fingering",
        "chat",
        "deepthroat",
        "close",
        "live",
        "free cams",
        "sex chat",
        "live porn",
        "sex cam",
        "livesex",
        "webcamsex",
        "adult cams",
        "free live sex chat",
        "webcam sex",
        "chat online",
        "free adults hd",
        "mins",
        "xxx cams",
        "xxx porn",
        "free live cam",
        "adult sex",
        "material",
        "majority",
        "here looking",
        "for child",
        "pornography",
        "move on",
        "on this",
        "website",
        "we will",
        "turn over",
        "free porn webcams",
        "live webcam",
        "online sex cam",
        "xxx girls",
        "live sex chat",
        "teen sexchat",
        "amateur video",
        "web cam",
        "sexcams",
        "shows",
        "porn chat",
        "bongacams",
        "function",
        "i2c1",
        "xeir",
        "cef4",
        "m4sr",
        "e4c4",
        "math",
        "ttmt",
        "y4giwe",
        "h5gg",
        "window",
        "css1062",
        "segoe ui",
        "emoji",
        "href",
        "roboto",
        "helvetica neue",
        "arial",
        "apple color",
        "symbol",
        "typecheckbox",
        "twitter",
        "web design",
        "iran",
        "author url",
        "github",
        "regexp",
        "pseudo",
        "child",
        "typeof n",
        "typeof t",
        "class",
        "attr",
        "typeof module",
        "this"
      ],
      "references": [
        "xfe-URL-payvtylhwjxnr.xyz-stix2-2.1-export.json",
        "https://payvtylhwjxnr.xyz/Content/script?v=2",
        "https://payvtylhwjxnr.xyz/Content/css/banks.css",
        "https://payvtylhwjxnr.xyz/Content/style?v=1",
        "xfe-IP-104.21.72.150-stix2-2.1-export.json",
        "xfe-IP-172.67.151.101-stix2-2.1-export.json",
        "https://static.selfpuc.com/mnpw3.js",
        "https://bcprm.com/promo.php?c=716918&type=embed_chat&page=popular_chat&top_model=1&stream_only_size=full",
        "https://en.bongacams.com/popular-chat-popup?livetab=female&top_model=1&c=716918&hit_url=https%3A%2F%2Fbongacams.com%2Ftrack%3Fc%3D716918%26ps%3Dembed_chat&stream_only=1&amute=1&classic=on",
        "https://bongacams.com/GianaWatson",
        "https://m.bimbim.com/en/DailaGill?psid=crakmedia2&psprogram=revs&pstool=450_1&utm_campaign=main&utm_content=redirect&utm_medium=webmaster&utm_source=promotools",
        "https://d31qbv1cthcecs.cloudfront.net/atrk.js",
        "https://i.bcicdn.com/js-min/1NCJjq/27984029c73362dbf9ec0727.js",
        "https://www.google.com/recaptcha/enterprise.js?&render=6LeY5wkeAAAAAHNlJZXiHgJrpCTsD-Qu0O2GlYgB",
        "https://staticx1.dditscdn.com/mbl/frontend_backbone/static/_common/modular-member-client/script/maincontext_9af26.min.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "New Caledonia",
        "New Zealand"
      ],
      "malware_families": [
        {
          "id": "Hammer",
          "display_name": "Hammer",
          "target": null
        },
        {
          "id": "Tvb",
          "display_name": "Tvb",
          "target": null
        },
        {
          "id": "Vob",
          "display_name": "Vob",
          "target": null
        },
        {
          "id": "Gc",
          "display_name": "Gc",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1574",
          "name": "Hijack Execution Flow",
          "display_name": "T1574 - Hijack Execution Flow"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 425,
        "domain": 459,
        "URL": 1412,
        "FileHash-SHA256": 125
      },
      "indicator_count": 2421,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "1442 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "URL",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "https://www.this.as",
    "type": "URL"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "https://www.this.as",
    "type": "URL",
    "found": false,
    "verdict": "clean",
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1776631006.9647532
}