{
  "type": "Domain",
  "indicator": "itech.ru",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/itech.ru",
    "alexa": "http://www.alexa.com/siteinfo/itech.ru",
    "indicator": "itech.ru",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3872963120,
      "indicator": "itech.ru",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 2,
      "pulses": [
        {
          "id": "6764c20a49646c5fc3c5a153",
          "name": "https://psz.zus.pl",
          "description": "Sugerowany opis:\nPe\u0142ny raport na temat plan\u00f3w polskiego rz\u0105du dotycz\u0105cych referendum unijnego zosta\u0142 opublikowany w serwisie Zus.pl oraz na stronie g\u0142\u00f3wnej tego portalu, kt\u00f3ra dzia\u0142a obecnie w tym samym czasie.",
          "modified": "2025-05-14T21:16:39.393000",
          "created": "2024-12-20T01:02:02.761000",
          "tags": [
            "sha256",
            "vhash",
            "ssdeep",
            "zrzuty ekranu",
            "wykrycia",
            "pliki",
            "liczba prbek",
            "skopiuj",
            "ukryj prbki",
            "pokazywa",
            "skrt",
            "hash",
            "kthreaddi",
            "c start",
            "plik",
            "dgc4ph baza",
            "wiadomoci",
            "kompresor",
            "ip k40g",
            "layton m0355",
            "n o365",
            "ilo o2o",
            "skanowanie",
            "udostpnij",
            "plik sha256",
            "data",
            "zwizane z",
            "zoliwym",
            "awasta elf",
            "zakaenie",
            "pani obroczyni",
            "trojan",
            "mtb zakaenie",
            "ostatnia",
            "2063947519",
            "nazwa",
            "adresy url",
            "nazwa https",
            "adowania",
            "jeli plik",
            "clay",
            "ojsreso",
            "o poniej",
            "url https",
            "http request",
            "method get",
            "country a",
            "polandpoland as",
            "name zaklad",
            "as number",
            "mime type",
            "data size",
            "size",
            "critical",
            "frame id",
            "b time"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 16,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 259,
            "FileHash-SHA256": 282,
            "domain": 161,
            "hostname": 235,
            "FileHash-MD5": 192,
            "FileHash-SHA1": 190
          },
          "indicator_count": 1319,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "381 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "66ce8795f74ccdc8a4ad972f",
          "name": "Home | Sanselo | Realizare site web \u0219i aplica\u021bii de mobil",
          "description": "Aplica\u021bii mobile, \u00c2\u00a31bn, \u00e2\u201a\u00ac1.5bn \u00e2\u20ac\u00b5\u00a6 \u00c3\u20ac\u201c  \u00f4l iau i'r iddo.",
          "modified": "2025-05-14T21:14:50.899000",
          "created": "2024-08-28T02:12:37.280000",
          "tags": [
            "sanselo",
            "i aplicaii",
            "home",
            "realizare site",
            "servicii web",
            "mobile app",
            "contact blog",
            "selecteaz",
            "pagin",
            "future",
            "adres url",
            "ipv4",
            "ccro asnas39668",
            "intersat srl",
            "rola",
            "url http",
            "odcisk palca"
          ],
          "references": [
            "https://sanselo.com/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "IPv4": 11,
            "URL": 1533,
            "domain": 150,
            "email": 2,
            "hostname": 471,
            "FileHash-MD5": 236,
            "FileHash-SHA1": 141,
            "FileHash-SHA256": 979,
            "SSLCertFingerprint": 4
          },
          "indicator_count": 3527,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 124,
          "modified_text": "381 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://sanselo.com/"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 2,
  "pulses": [
    {
      "id": "6764c20a49646c5fc3c5a153",
      "name": "https://psz.zus.pl",
      "description": "Sugerowany opis:\nPe\u0142ny raport na temat plan\u00f3w polskiego rz\u0105du dotycz\u0105cych referendum unijnego zosta\u0142 opublikowany w serwisie Zus.pl oraz na stronie g\u0142\u00f3wnej tego portalu, kt\u00f3ra dzia\u0142a obecnie w tym samym czasie.",
      "modified": "2025-05-14T21:16:39.393000",
      "created": "2024-12-20T01:02:02.761000",
      "tags": [
        "sha256",
        "vhash",
        "ssdeep",
        "zrzuty ekranu",
        "wykrycia",
        "pliki",
        "liczba prbek",
        "skopiuj",
        "ukryj prbki",
        "pokazywa",
        "skrt",
        "hash",
        "kthreaddi",
        "c start",
        "plik",
        "dgc4ph baza",
        "wiadomoci",
        "kompresor",
        "ip k40g",
        "layton m0355",
        "n o365",
        "ilo o2o",
        "skanowanie",
        "udostpnij",
        "plik sha256",
        "data",
        "zwizane z",
        "zoliwym",
        "awasta elf",
        "zakaenie",
        "pani obroczyni",
        "trojan",
        "mtb zakaenie",
        "ostatnia",
        "2063947519",
        "nazwa",
        "adresy url",
        "nazwa https",
        "adowania",
        "jeli plik",
        "clay",
        "ojsreso",
        "o poniej",
        "url https",
        "http request",
        "method get",
        "country a",
        "polandpoland as",
        "name zaklad",
        "as number",
        "mime type",
        "data size",
        "size",
        "critical",
        "frame id",
        "b time"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 16,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 259,
        "FileHash-SHA256": 282,
        "domain": 161,
        "hostname": 235,
        "FileHash-MD5": 192,
        "FileHash-SHA1": 190
      },
      "indicator_count": 1319,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "381 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "66ce8795f74ccdc8a4ad972f",
      "name": "Home | Sanselo | Realizare site web \u0219i aplica\u021bii de mobil",
      "description": "Aplica\u021bii mobile, \u00c2\u00a31bn, \u00e2\u201a\u00ac1.5bn \u00e2\u20ac\u00b5\u00a6 \u00c3\u20ac\u201c  \u00f4l iau i'r iddo.",
      "modified": "2025-05-14T21:14:50.899000",
      "created": "2024-08-28T02:12:37.280000",
      "tags": [
        "sanselo",
        "i aplicaii",
        "home",
        "realizare site",
        "servicii web",
        "mobile app",
        "contact blog",
        "selecteaz",
        "pagin",
        "future",
        "adres url",
        "ipv4",
        "ccro asnas39668",
        "intersat srl",
        "rola",
        "url http",
        "odcisk palca"
      ],
      "references": [
        "https://sanselo.com/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "IPv4": 11,
        "URL": 1533,
        "domain": 150,
        "email": 2,
        "hostname": 471,
        "FileHash-MD5": 236,
        "FileHash-SHA1": 141,
        "FileHash-SHA256": 979,
        "SSLCertFingerprint": 4
      },
      "indicator_count": 3527,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 124,
      "modified_text": "381 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "itech.ru",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "itech.ru",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780221795.6190522
}