{ "type": "Domain", "indicator": "inetcomputers.ca", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/inetcomputers.ca", "alexa": "http://www.alexa.com/siteinfo/inetcomputers.ca", "indicator": "inetcomputers.ca", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3658875868, "indicator": "inetcomputers.ca", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 4, "pulses": [ { "id": "6493880f4f51d2e4eeb8a909", "name": "URLHaus data - 21-06-2023", "description": "", "modified": "2023-07-21T23:04:31.937000", "created": "2023-06-21T23:30:23.598000", "tags": [ "BB33", "geofenced", "js", "Qakbot", "USA", "32-bit", "elf", "mips", "Mozi", "exe", "njRAT", "Obama270", "TR", "zip", "BatchDropperMEMZ", "ddos-bot", "mirai", "hajime", "arm", "dropped-by-amadey", "SystemBC", "remcos", "64", "dll", "botnet", "trojan", "Tsunami", "Gozi", "ursnif", "Formbook", "ArkeiStealer", "Vidar", "ascii", "plugin", "RedLineStealer", "agenziaentrate", "ITA", "32", "PowerShellDiscordKeyLogger", "ua-ps", "Quakbot", "RTF", "AgentTesla", "PureCrypter", "Loki", "encrypted", "GuLoader", "ISFB", "dofoil", "Smoke Loader", "doc", "fabookie", "1234", "7z", "Password-protected", "dropped-by-PrivateLoader", "PrivateLoader", "RedLine", "gafgyt", "NetSupport" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 568, "domain": 94, "hostname": 11 }, "indicator_count": 673, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "1044 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6492361520e56fe57e2c2870", "name": "URLHaus data - 20-06-2023", "description": "", "modified": "2023-07-20T23:00:37.991000", "created": "2023-06-20T23:28:21.809000", "tags": [ "elf", "Mozi", "32-bit", "mips", "arm", "mirai", "Adwind", "BB33", "geofenced", "js", "Qakbot", "USA", "PowerShellDiscordKeyLogger", "exe", "njRAT", "Obama269", "TR", "zip", "hajime", "AsyncRAT", "ASPXChopperWebShell", "dcrat", "7z", "remcos", "RUS", "dropped-by-PrivateLoader", "RedLineStealer", "VoidRAT", "1234", "Password-protected", "dropped-by-amadey", "Rhadamanthys", "AgentTesla", "encrypted", "RedLine", "dropped-by-SmokeLoader", "RaccoonStealer", "IRATA", "sh", "32", "64", "LaplasClipper", "CoinMiner", "motorola", "Pikabot", "gafgyt", "Quakbot", "shellscript", "Loki", "Formbook", "dll", "ua-ps", "qbot", "Tsunami" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 495, "hostname": 17 }, "indicator_count": 1512, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "1045 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64349a68e67aad2c8a8586dd", "name": "URLHaus data - 10-04-2023", "description": "", "modified": "2023-05-10T23:00:24.615000", "created": "2023-04-10T23:23:20.337000", "tags": [ "32-bit", "elf", "mips", "Mozi", "arm", "mirai", "hajime", "exe", "VoidRAT", "32", "bashlite", "gafgyt", "renesas", "64", "sparc", "PowerPC", "shellscript", "intel", "motorola", "script", "SocGholish", "BB23", "geofenced", "Qakbot", "qbot", "Quakbot", "R89", "TR", "USA", "wsf", "zip", "dll", "Stealc", "1234", "7z", "Password-protected", ".net", "eternitystealer", "msil", "ua-ps", "njRAT", "AsyncRAT", "rat", "Vidar", "pw-space", "rar", "gamecenter", "RedLineStealer", "Formbook", "dcrat" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 180, "hostname": 26 }, "indicator_count": 1206, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "1116 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "642f53befef97c2420b4be1b", "name": "URLHaus data - 06-04-2023", "description": "", "modified": "2023-05-06T23:02:18.562000", "created": "2023-04-06T23:20:30.008000", "tags": [ "32-bit", "elf", "mips", "Mozi", "32", "exe", "nitol", "mirai", "arm", "njRAT", "hajime", "geofenced", "obama249", "Qakbot", "qbot", "Quakbot", "USA", "wsf", "zip", "vjw0rm", "dll", "ua-ps", "BB22", "755", "js", "TR", "xworm", "Stealc", "gafgyt" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 462, "hostname": 50 }, "indicator_count": 1512, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1120 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 4, "pulses": [ { "id": "6493880f4f51d2e4eeb8a909", "name": "URLHaus data - 21-06-2023", "description": "", "modified": "2023-07-21T23:04:31.937000", "created": "2023-06-21T23:30:23.598000", "tags": [ "BB33", "geofenced", "js", "Qakbot", "USA", "32-bit", "elf", "mips", "Mozi", "exe", "njRAT", "Obama270", "TR", "zip", "BatchDropperMEMZ", "ddos-bot", "mirai", "hajime", "arm", "dropped-by-amadey", "SystemBC", "remcos", "64", "dll", "botnet", "trojan", "Tsunami", "Gozi", "ursnif", "Formbook", "ArkeiStealer", "Vidar", "ascii", "plugin", "RedLineStealer", "agenziaentrate", "ITA", "32", "PowerShellDiscordKeyLogger", "ua-ps", "Quakbot", "RTF", "AgentTesla", "PureCrypter", "Loki", "encrypted", "GuLoader", "ISFB", "dofoil", "Smoke Loader", "doc", "fabookie", "1234", "7z", "Password-protected", "dropped-by-PrivateLoader", "PrivateLoader", "RedLine", "gafgyt", "NetSupport" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 568, "domain": 94, "hostname": 11 }, "indicator_count": 673, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "1044 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6492361520e56fe57e2c2870", "name": "URLHaus data - 20-06-2023", "description": "", "modified": "2023-07-20T23:00:37.991000", "created": "2023-06-20T23:28:21.809000", "tags": [ "elf", "Mozi", "32-bit", "mips", "arm", "mirai", "Adwind", "BB33", "geofenced", "js", "Qakbot", "USA", "PowerShellDiscordKeyLogger", "exe", "njRAT", "Obama269", "TR", "zip", "hajime", "AsyncRAT", "ASPXChopperWebShell", "dcrat", "7z", "remcos", "RUS", "dropped-by-PrivateLoader", "RedLineStealer", "VoidRAT", "1234", "Password-protected", "dropped-by-amadey", "Rhadamanthys", "AgentTesla", "encrypted", "RedLine", "dropped-by-SmokeLoader", "RaccoonStealer", "IRATA", "sh", "32", "64", "LaplasClipper", "CoinMiner", "motorola", "Pikabot", "gafgyt", "Quakbot", "shellscript", "Loki", "Formbook", "dll", "ua-ps", "qbot", "Tsunami" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 495, "hostname": 17 }, "indicator_count": 1512, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "1045 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64349a68e67aad2c8a8586dd", "name": "URLHaus data - 10-04-2023", "description": "", "modified": "2023-05-10T23:00:24.615000", "created": "2023-04-10T23:23:20.337000", "tags": [ "32-bit", "elf", "mips", "Mozi", "arm", "mirai", "hajime", "exe", "VoidRAT", "32", "bashlite", "gafgyt", "renesas", "64", "sparc", "PowerPC", "shellscript", "intel", "motorola", "script", "SocGholish", "BB23", "geofenced", "Qakbot", "qbot", "Quakbot", "R89", "TR", "USA", "wsf", "zip", "dll", "Stealc", "1234", "7z", "Password-protected", ".net", "eternitystealer", "msil", "ua-ps", "njRAT", "AsyncRAT", "rat", "Vidar", "pw-space", "rar", "gamecenter", "RedLineStealer", "Formbook", "dcrat" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 180, "hostname": 26 }, "indicator_count": 1206, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "1116 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "642f53befef97c2420b4be1b", "name": "URLHaus data - 06-04-2023", "description": "", "modified": "2023-05-06T23:02:18.562000", "created": "2023-04-06T23:20:30.008000", "tags": [ "32-bit", "elf", "mips", "Mozi", "32", "exe", "nitol", "mirai", "arm", "njRAT", "hajime", "geofenced", "obama249", "Qakbot", "qbot", "Quakbot", "USA", "wsf", "zip", "vjw0rm", "dll", "ua-ps", "BB22", "755", "js", "TR", "xworm", "Stealc", "gafgyt" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 462, "hostname": 50 }, "indicator_count": 1512, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1120 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "inetcomputers.ca", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "inetcomputers.ca", "found": true, "verdict": "malicious", "url_count": 4, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "https://inetcomputers.ca/tu/?1", "status": "offline", "threat": "malware_download", "date_added": "2023-06-21", "tags": [ "BB33", "geofenced", "js", "Qakbot", "USA" ] }, { "url": "https://inetcomputers.ca/iooi/?1", "status": "offline", "threat": "malware_download", "date_added": "2023-06-20", "tags": [ "BB33", "geofenced", "js", "Qakbot", "USA" ] }, { "url": "https://inetcomputers.ca/snoe/snoe.php", "status": "offline", "threat": "malware_download", "date_added": "2023-04-10", "tags": [ "BB23", "geofenced", "Qakbot", "qbot", "Quakbot", "R89", "TR", "USA", "wsf", "zip" ] }, { "url": "https://inetcomputers.ca/lo/lo.php", "status": "offline", "threat": "malware_download", "date_added": "2023-04-06", "tags": [ "755", "BB22", "geofenced", "js", "Qakbot", "qbot", "Quakbot", "TR", "USA", "wsf", "zip" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780224466.733003 }