{ "type": "Domain", "indicator": "karoonpc.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/karoonpc.com", "alexa": "http://www.alexa.com/siteinfo/karoonpc.com", "indicator": "karoonpc.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3901442817, "indicator": "karoonpc.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 37, "pulses": [ { "id": "69feade97906c965ce3a1a59", "name": "jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-17T05:25:39.873000", "created": "2026-05-09T03:45:45.979000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148319, "hostname": 357 }, "indicator_count": 148676, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "14 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feada1983b8b796eeb1b60", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-17T05:25:39.137000", "created": "2026-05-09T03:44:33.206000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148319, "hostname": 357 }, "indicator_count": 148676, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "14 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae531592b3944394d4b1", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:50:22.289000", "created": "2026-05-09T03:47:31.568000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 358, "URL": 1, "FileHash-SHA256": 20 }, "indicator_count": 148697, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae794fc6291c4d851818", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:09.519000", "created": "2026-05-09T03:48:09.519000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae789475c3f913d143c0", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:08.009000", "created": "2026-05-09T03:48:08.009000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae76a04359c50cd81d66", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:06.217000", "created": "2026-05-09T03:48:06.217000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae71b71ee6e854a5661e", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:01.666000", "created": "2026-05-09T03:48:01.666000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae7053c609333d3593f2", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:00.978000", "created": "2026-05-09T03:48:00.978000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae1c799ca001f6df6133", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:36.863000", "created": "2026-05-09T03:46:36.863000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae132b3b0d00aa030f4c", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:27.614000", "created": "2026-05-09T03:46:27.614000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae109475c3f913d143bf", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:24.917000", "created": "2026-05-09T03:46:24.917000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae0f128dc557ed2aa992", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:23.804000", "created": "2026-05-09T03:46:23.804000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae0ead2eba7041a00170", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:22.559000", "created": "2026-05-09T03:46:22.559000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feadf95fc91186156960f7", "name": "jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:01.036000", "created": "2026-05-09T03:46:01.036000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feadecd98e031959dfbcb1", "name": "jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:45:48.318000", "created": "2026-05-09T03:45:48.318000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feada0a790f2dd8bce871e", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:44:32.640000", "created": "2026-05-09T03:44:32.640000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feada0eb37924c978a31a5", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:44:32.011000", "created": "2026-05-09T03:44:32.011000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69fead9f44001188c9312ede", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:44:31.391000", "created": "2026-05-09T03:44:31.391000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69fead9ee0a10d2ea1209e4f", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:44:30.255000", "created": "2026-05-09T03:44:30.255000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69fead9dc36cdaae3ede5452", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:44:29.115000", "created": "2026-05-09T03:44:29.115000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69d47764f2270074641b9efa", "name": "clone urlhaus 23may CREATED 11 MONTHS AGO MODIFIED 2 MONTHS AGO by skocherhan Public TLP: Green REFERENCE: https://urlhaus.abuse.ch/downloads/json_online/", "description": "", "modified": "2026-04-07T03:17:56.739000", "created": "2026-04-07T03:17:56.739000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "682fec831be07e4fdf69fe47", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "54 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69891e6c45e0e5cd7d52479d", "name": "URLHaus", "description": "", "modified": "2026-03-10T23:00:49.662000", "created": "2026-02-08T23:38:20.162000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 6, "FileHash-MD5": 19, "FileHash-SHA1": 20, "FileHash-SHA256": 3, "URL": 13688, "domain": 308, "hostname": 399 }, "indicator_count": 14443, "is_author": false, "is_subscribing": null, "subscriber_count": 183, "modified_text": "81 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f593f25ab8c2f6d8a515", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 667 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T05:48:03.949000", "created": "2026-02-20T05:48:03.949000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 352, "domain": 313 }, "indicator_count": 665, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699763269fb5c468aa8402ec", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 701 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:23:18.064000", "created": "2026-02-19T19:23:18.064000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 385, "domain": 314 }, "indicator_count": 699, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699723f9569f051cac511b65", "name": "Malware_Distribution | Feb 20, 2026", "description": "Malware_Distribution indicators. Date: Feb 20, 2026. Total: 697 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T14:53:45.790000", "created": "2026-02-19T14:53:45.790000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 384, "domain": 311 }, "indicator_count": 695, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699704cd598ce2606a8248a1", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 727 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:40:45.392000", "created": "2026-02-19T12:40:45.392000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 404, "domain": 321 }, "indicator_count": 725, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69962eb0ac8a1d2e65b9bcc7", "name": "Malware_Distribution | Feb 19, 2026", "description": "Malware_Distribution indicators. Date: Feb 19, 2026. Total: 679 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:27:12.851000", "created": "2026-02-18T21:27:12.851000", "tags": [ "malware_distribution" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 373, "domain": 304 }, "indicator_count": 677, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69956fd33d4d725a294b3190", "name": "Malware_Distribution | Feb 18, 2026", "description": "Malware_Distribution indicators. Date: Feb 18, 2026. Total: 673 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T07:52:51.611000", "created": "2026-02-18T07:52:51.611000", "tags": [ "malware_distribution", "urlhaus-rpz" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 374, "domain": 297 }, "indicator_count": 671, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "682fec831be07e4fdf69fe47", "name": "urlhaus 23may", "description": "", "modified": "2026-02-09T00:10:22.199000", "created": "2025-05-23T03:33:23.189000", "tags": [], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 29, "FileHash-SHA1": 16, "FileHash-SHA256": 1, "CVE": 11, "URL": 12396, "domain": 433, "hostname": 572 }, "indicator_count": 13458, "is_author": false, "is_subscribing": null, "subscriber_count": 182, "modified_text": "111 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "677f9d750c21100324bd26a7", "name": "IoC Feed test", "description": "test", "modified": "2025-02-08T09:03:17.379000", "created": "2025-01-09T09:57:09.583000", "tags": [ "e http", "b5tu", "b6910", "anti", "vcommand3002" ], "references": [ "https://raw.githubusercontent.com/openphish/public_feed/refs/heads/main/feed.txt", "https://urlhaus.abuse.ch/downloads/text_online/" ], "public": 1, "adversary": "", "targeted_countries": [ "Italy" ], "malware_families": [], "attack_ids": [ { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1192", "name": "Spearphishing Link", "display_name": "T1192 - Spearphishing Link" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ste_avbr", "id": "262315", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 12803, "FileHash-MD5": 23, "domain": 523, "hostname": 277, "CVE": 6, "FileHash-SHA1": 7 }, "indicator_count": 13639, "is_author": false, "is_subscribing": null, "subscriber_count": 26, "modified_text": "477 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "677f9d73e8c5a667c1cfdd90", "name": "IoC Feed test", "description": "test", "modified": "2025-02-08T09:03:17.379000", "created": "2025-01-09T09:57:07.732000", "tags": [ "e http", "b5tu", "b6910", "anti", "vcommand3002" ], "references": [ "https://raw.githubusercontent.com/openphish/public_feed/refs/heads/main/feed.txt", "https://urlhaus.abuse.ch/downloads/text_online/" ], "public": 1, "adversary": "", "targeted_countries": [ "Italy" ], "malware_families": [], "attack_ids": [ { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1192", "name": "Spearphishing Link", "display_name": "T1192 - Spearphishing Link" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ste_avbr", "id": "262315", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 12803, "FileHash-MD5": 23, "domain": 523, "hostname": 277, "CVE": 6, "FileHash-SHA1": 7 }, "indicator_count": 13639, "is_author": false, "is_subscribing": null, "subscriber_count": 25, "modified_text": "477 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "677f9d7059174cdad6f42041", "name": "IoC Feed test", "description": "test", "modified": "2025-02-08T09:03:17.379000", "created": "2025-01-09T09:57:04.368000", "tags": [ "e http", "b5tu", "b6910", "anti", "vcommand3002" ], "references": [ "https://raw.githubusercontent.com/openphish/public_feed/refs/heads/main/feed.txt", "https://urlhaus.abuse.ch/downloads/text_online/" ], "public": 1, "adversary": "", "targeted_countries": [ "Italy" ], "malware_families": [], "attack_ids": [ { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" }, { "id": "T1192", "name": "Spearphishing Link", "display_name": "T1192 - Spearphishing Link" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ste_avbr", "id": "262315", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 12803, "FileHash-MD5": 23, "domain": 523, "hostname": 277, "CVE": 6, "FileHash-SHA1": 7 }, "indicator_count": 13639, "is_author": false, "is_subscribing": null, "subscriber_count": 23, "modified_text": "477 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6776d3a8bad5e5591b90c296", "name": "Auto-generated Pulse", "description": "46.166.184.104 = goog.pl", "modified": "2025-02-01T17:05:58.066000", "created": "2025-01-02T17:58:00.076000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 48, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlessandroFiori", "id": "91912", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_91912/resized/80/avatar_2b1b2b88b6.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 455, "modified_text": "483 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "670a762b348f01dd15851287", "name": "URLhaus Country Feed (Iran)", "description": "", "modified": "2024-11-11T13:00:21.858000", "created": "2024-10-12T13:14:19.908000", "tags": [], "references": [ "https://urlhaus.abuse.ch/feeds/country/IR/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 4, "URL": 6641, "domain": 1596, "hostname": 170 }, "indicator_count": 8411, "is_author": false, "is_subscribing": null, "subscriber_count": 184, "modified_text": "565 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66d9eb082ba8ee6c0db1c9cf", "name": "urlhaus.abuse.ch", "description": "", "modified": "2024-10-05T17:03:18.260000", "created": "2024-09-05T17:31:52.439000", "tags": [ "nda0e", "mozi", "clearlynotb", "coinminer", "cobaltstrike", "bitsight", "guloader", "redlinestealer", "stealc", "lummastealer", "vidar", "ransomware", "remcosrat", "asyncrat", "gandcrab", "agenttesla", "amadey", "systembc", "recordbreaker", "quasarrat", "spynote", "formbook", "babadeda", "metasploit", "metastealer", "loki", "blackmoon", "loader", "raccoonstealer", "piratestealer", "dridex", "cobalt strike", "stormkitty", "darktortilla", "venomrat", "sliver", "avemariarat", "neshta", "triada", "fakechrome", "grayware", "danabot", "darkgate", "connectback", "troldesh", "rhadamanthys", "nukesped", "tofsee", "purplefox", "earthworm", "azorult", "redosdru", "getshell", "donut", "aurora stealer", "laplasclipper", "redline", "wingo", "flyagent", "darkside", "badpotato", "juicypotato", "dharma", "casbaneiro", "clearfake", "parallax", "parallaxrat", "phonk", "qakbot", "purecrypter", "revengerat" ], "references": [ "https://urlhaus.abuse.ch/downloads/json_online/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 95, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "JohnnyCS", "id": "293079", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "CVE": 9, "FileHash-MD5": 3, "FileHash-SHA1": 8, "URL": 7927, "domain": 119, "hostname": 162 }, "indicator_count": 8228, "is_author": false, "is_subscribing": null, "subscriber_count": 2, "modified_text": "602 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "667df07bd2e87a5ad132f4bd", "name": "URLHaus data - 27-06-2024", "description": "", "modified": "2024-07-27T23:02:29.208000", "created": "2024-06-27T23:06:35.249000", "tags": [ "32-bit", "elf", "mips", "Mozi", "botnet", "mirai", "arm", "32", "exe", "mimikatz", "hajime", "ascii", "Encoded", "RemcosRAT", "rev-base64-loader", "vbs", "AgentTesla", "DBatLoader", "encrypted", "doc", "ps1", "SocGholish", "tftp", "BGR", "geofenced", "IND", "ua-wget", "hacktool", "shellscript", "Amadey", "GuLoader", "AsyncRAT", "zip", "7z", "malicious-asn", "SystemBC", "RedLineStealer", "Stealc", "gafgyt", "CHE", "USA", "dll", "CobaltStrike", "Loki", "rat", "powershell", "formbook", "Formbook", "encrypted", "ascii", "encoded", "discord", "sparc", "PowerPC", "motorola", "LummaStealer", "Vidar", "PureLogStealer", "x86-32" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 51, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 4, "domain": 5 }, "indicator_count": 1009, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "672 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66624116bd55dd1ca8d8442c", "name": "URLHaus data - 06-06-2024", "description": "", "modified": "2024-07-06T23:04:09.118000", "created": "2024-06-06T23:07:02.193000", "tags": [ "32-bit", "elf", "mips", "Mozi", "mirai", "hajime", "32", "arm", "exe", "remcos", "SocGholish", "script", "AsyncRAT", "x86-32", "VenomRAT", "rat", "RemcosRAT", "ascii", "powershell", "ps1", "doc", "apk", "obfuscated", "xworm", "Amadey", "LummaStealer", "PrivateLoader", "CobaltStrike", "QuasarRAT", "DBatLoader", "Formbook", "GuLoader", "AgentTesla", "RevengeRAT", "Encoded", "text", "opendir", "dropped-by-PrivateLoader", "encrypted", "rev-base64-loader", "PureCrypter", "PureLogStealer", "OriginLogger", "dcrat", "njRAT", "botnet", "quasar", "64", "sparc", "renesas", "PowerPC", "intel", "motorola", "Cheaterscc", "Password-protected", "zip", "Eyeddocx", "Ransomware", "CoinMiner", "1703", "rar", "dll", "trojan", "gafgyt", "backdoor", "c2", "123", "shellscript", "ua-wget", "hacktool" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 85, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "domain": 11, "hostname": 11 }, "indicator_count": 1022, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "693 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://raw.githubusercontent.com/openphish/public_feed/refs/heads/main/feed.txt", "https://urlhaus.abuse.ch/downloads/json_online/", "https://ltna.com.au/cyber", "https://urlhaus.abuse.ch/feeds/country/IR/", "https://urlhaus.abuse.ch/downloads/text_online/", "https://urlhaus.abuse.ch/browse/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 37, "pulses": [ { "id": "69feade97906c965ce3a1a59", "name": "jan2,2025 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-17T05:25:39.873000", "created": "2026-05-09T03:45:45.979000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148319, "hostname": 357 }, "indicator_count": 148676, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "14 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feada1983b8b796eeb1b60", "name": "jan2.2025clone-Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-17T05:25:39.137000", "created": "2026-05-09T03:44:33.206000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148319, "hostname": 357 }, "indicator_count": 148676, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "14 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae531592b3944394d4b1", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:50:22.289000", "created": "2026-05-09T03:47:31.568000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 358, "URL": 1, "FileHash-SHA256": 20 }, "indicator_count": 148697, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae794fc6291c4d851818", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:09.519000", "created": "2026-05-09T03:48:09.519000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae789475c3f913d143c0", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:08.009000", "created": "2026-05-09T03:48:08.009000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae76a04359c50cd81d66", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:06.217000", "created": "2026-05-09T03:48:06.217000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae71b71ee6e854a5661e", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:01.666000", "created": "2026-05-09T03:48:01.666000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae7053c609333d3593f2", "name": "jan 2 25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:48:00.978000", "created": "2026-05-09T03:48:00.978000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae1c799ca001f6df6133", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:36.863000", "created": "2026-05-09T03:46:36.863000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69feae132b3b0d00aa030f4c", "name": "1/2/25 clone Auto-generated Pulse CREATED 1 YEAR AGO MODIFIED 1 YEAR AGO by AlessandroFiori", "description": "", "modified": "2026-05-09T03:46:27.614000", "created": "2026-05-09T03:46:27.614000", "tags": [ "auto-generated security" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": "6776d3a8bad5e5591b90c296", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 148318, "hostname": 357 }, "indicator_count": 148675, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "22 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "karoonpc.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "karoonpc.com", "found": true, "verdict": "malicious", "url_count": 4, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "https://karoonpc.com/Deccastationers.msi", "status": "offline", "threat": "malware_download", "date_added": "2024-06-27", "tags": [ " ascii", " encoded", "ascii", "Encoded", "GuLoader" ] }, { "url": "http://karoonpc.com/Deccastationers.msi", "status": "offline", "threat": "malware_download", "date_added": "2024-06-27", "tags": [ " ascii", " encoded", "ascii", "Encoded", "GuLoader" ] }, { "url": "http://karoonpc.com/Slade107.psm", "status": "offline", "threat": "malware_download", "date_added": "2024-06-06", "tags": [ "GuLoader" ] }, { "url": "http://karoonpc.com/Walesboller.pcx", "status": "offline", "threat": "malware_download", "date_added": "2024-06-04", "tags": [ "GuLoader" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780224820.3364117 }