{ "type": "Domain", "indicator": "mapdatamsna.info", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/mapdatamsna.info", "alexa": "http://www.alexa.com/siteinfo/mapdatamsna.info", "indicator": "mapdatamsna.info", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3744445568, "indicator": "mapdatamsna.info", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 49, "pulses": [ { "id": "64e8688ae20e56da413ac148", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study", "description": "Generative AI has been around for nearly a decade, strictly speaking, but the recent boom in this technology has inspired renewed interest in its possible applications to challenges facing the information security community. Finding these challenges entails searching through a very large haystack consisting of brand-new binaries, documents, domains and other artifacts that flood the web every day.", "modified": "2023-08-25T08:38:33.465000", "created": "2023-08-25T08:38:33.465000", "tags": [ "deepdns", "dns tunneling", "coinloader", "sunburst" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1572", "name": "Protocol Tunneling", "display_name": "T1572 - Protocol Tunneling" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 375, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "domain": 15, "hostname": 1 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 386497, "modified_text": "1009 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c88a77e953c666b3efb12f", "name": "aaaaaaaaaaaaa", "description": "The latest in a long series of reports from around the world on the state of the European Union has been released, with the release of a number of key figures, including those from the EU referendum.", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:51:51.834000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "URL": 238, "domain": 260, "hostname": 435 }, "indicator_count": 935, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c880c9db66354caf63b2ca", "name": "aaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:10:33.474000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 273, "FileHash-SHA256": 358, "FileHash-MD5": 272, "domain": 260, "hostname": 436 }, "indicator_count": 1839, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c880c14cbd5294e370b445", "name": "aaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:10:25.961000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 273, "FileHash-SHA256": 358, "FileHash-MD5": 272, "domain": 260, "hostname": 436 }, "indicator_count": 1839, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87f9cd5ec3405bbb38239", "name": "aaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:05:32.166000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 117, "FileHash-MD5": 180, "FileHash-SHA1": 190, "FileHash-SHA256": 227, "domain": 141, "hostname": 228 }, "indicator_count": 1083, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87e997afce56805741ab1", "name": "aaaaaaaaaaaaaaaaaaaaaaaaa", "description": "", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:01:13.264000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 150, "FileHash-MD5": 257, "FileHash-SHA1": 233, "FileHash-SHA256": 310, "domain": 209, "hostname": 271 }, "indicator_count": 1430, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87d7004062994ccf6424a", "name": "aaaaaaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T20:00:31.666000", "created": "2025-09-15T20:56:16.591000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 262, "FileHash-SHA256": 360, "FileHash-MD5": 285, "domain": 260, "hostname": 436 }, "indicator_count": 1843, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c7716ffdfe12b9ae2b8471", "name": "IOC Blocking", "description": "", "modified": "2025-10-15T01:10:34.787000", "created": "2025-09-15T01:52:47.855000", "tags": [ "indicator name", "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2138, "FileHash-SHA1": 325, "FileHash-SHA256": 378, "domain": 271, "hostname": 452 }, "indicator_count": 3871, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c7212ce06750a77e6a3a6c", "name": "aaaaaaaaaa", "description": "A look back at some of the most eye-catching snippets from the past year, as well as those of those from this year's BBC World News: \u00c2\u00a31.5m.", "modified": "2025-10-14T20:40:46.498000", "created": "2025-09-14T20:10:20.054000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2, "FileHash-SHA256": 1, "domain": 271, "hostname": 452 }, "indicator_count": 1033, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c71aadb4f09ac8e6d97bdd", "name": "aaaaaaaaaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-14T19:44:37.552000", "created": "2025-09-14T19:42:37.477000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2139, "FileHash-SHA1": 325, "FileHash-SHA256": 379, "domain": 271, "hostname": 452 }, "indicator_count": 3873, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c65c55555abc6f1ce57b05", "name": "IBCART - Indicator", "description": "", "modified": "2025-10-14T06:02:54.904000", "created": "2025-09-14T06:10:29.236000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 122, "FileHash-MD5": 1440, "FileHash-SHA1": 245, "FileHash-SHA256": 298, "domain": 186, "hostname": 188 }, "indicator_count": 2479, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c66763845aaadf51accfa4", "name": "IBCART Indicators", "description": "", "modified": "2025-10-14T06:02:54.904000", "created": "2025-09-14T06:57:39.266000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 45, "FileHash-MD5": 754, "FileHash-SHA1": 34, "FileHash-SHA256": 43, "domain": 60, "hostname": 17 }, "indicator_count": 953, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c667619adacee4cea6f2bd", "name": "IBCART Indicators", "description": "", "modified": "2025-10-14T06:02:54.904000", "created": "2025-09-14T06:57:37.646000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 45, "FileHash-MD5": 754, "FileHash-SHA1": 34, "FileHash-SHA256": 43, "domain": 60, "hostname": 17 }, "indicator_count": 953, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c6676138d8a247463dc368", "name": "IBCART Indicators", "description": "", "modified": "2025-10-14T06:02:54.904000", "created": "2025-09-14T06:57:37.572000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 45, "FileHash-MD5": 754, "FileHash-SHA1": 34, "FileHash-SHA256": 43, "domain": 60, "hostname": 17 }, "indicator_count": 953, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c65c5b93d05a28c2512f32", "name": "IBCART - Indicator", "description": "", "modified": "2025-10-14T06:02:54.904000", "created": "2025-09-14T06:10:35.313000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 122, "FileHash-MD5": 1440, "FileHash-SHA1": 245, "FileHash-SHA256": 298, "domain": 186, "hostname": 188 }, "indicator_count": 2479, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "229 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c891251756804a22266ce2", "name": "aaaaaaaaaa", "description": "The world's most-wanted man is a man, but he is not the only one who has a problem with being in the wrong place at the right time of the day:..", "modified": "2025-09-15T22:20:21.519000", "created": "2025-09-15T22:20:21.519000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 259, "hostname": 1 }, "indicator_count": 260, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "257 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a1aa360cc88cf348557b", "name": "InQuest - 06-09-2023", "description": "", "modified": "2023-12-06T16:30:34.009000", "created": "2023-12-06T16:30:34.009000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 257, "hostname": 208, "FileHash-MD5": 979, "URL": 745, "FileHash-SHA1": 539 }, "indicator_count": 3286, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a185efc1841f0d8cae24", "name": "InQuest - 05-09-2023", "description": "", "modified": "2023-12-06T16:29:57.462000", "created": "2023-12-06T16:29:57.462000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 255, "hostname": 206, "FileHash-MD5": 1000, "URL": 724, "FileHash-SHA1": 539 }, "indicator_count": 3282, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a1822e97b9fce90093c2", "name": "InQuest - 04-09-2023", "description": "", "modified": "2023-12-06T16:29:54.091000", "created": "2023-12-06T16:29:54.091000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 258, "hostname": 206, "FileHash-MD5": 1000, "URL": 732, "FileHash-SHA1": 539 }, "indicator_count": 3293, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a17da4ef145116f15938", "name": "InQuest - 03-09-2023", "description": "", "modified": "2023-12-06T16:29:49.347000", "created": "2023-12-06T16:29:49.347000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 264, "hostname": 205, "FileHash-MD5": 998, "URL": 736, "FileHash-SHA1": 539 }, "indicator_count": 3300, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a179d3ae1a152a8840a8", "name": "InQuest - 02-09-2023", "description": "", "modified": "2023-12-06T16:29:45.407000", "created": "2023-12-06T16:29:45.407000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 255, "hostname": 205, "FileHash-MD5": 998, "URL": 723, "FileHash-SHA1": 539 }, "indicator_count": 3278, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a13dd08c5fb937175f50", "name": "InQuest - 01-09-2023", "description": "", "modified": "2023-12-06T16:28:45.779000", "created": "2023-12-06T16:28:45.779000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 255, "hostname": 205, "FileHash-MD5": 998, "URL": 723, "FileHash-SHA1": 539 }, "indicator_count": 3278, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a135e7d74f25c209652c", "name": "InQuest - 31-08-2023", "description": "", "modified": "2023-12-06T16:28:37.773000", "created": "2023-12-06T16:28:37.773000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 264, "hostname": 205, "FileHash-MD5": 998, "URL": 736, "FileHash-SHA1": 539 }, "indicator_count": 3300, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a12ca0652458c6534f1d", "name": "InQuest - 30-08-2023", "description": "", "modified": "2023-12-06T16:28:28.885000", "created": "2023-12-06T16:28:28.885000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 520, "domain": 271, "hostname": 205, "FileHash-MD5": 968, "URL": 729, "FileHash-SHA1": 597 }, "indicator_count": 3290, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a121970ec6097f14145c", "name": "InQuest - 29-08-2023", "description": "", "modified": "2023-12-06T16:28:17.914000", "created": "2023-12-06T16:28:17.914000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 528, "domain": 215, "hostname": 244, "FileHash-MD5": 998, "URL": 724, "FileHash-SHA1": 603 }, "indicator_count": 3312, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a10da48ef5014cd9e478", "name": "InQuest - 28-08-2023", "description": "", "modified": "2023-12-06T16:27:57.494000", "created": "2023-12-06T16:27:57.494000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 435, "FileHash-SHA256": 498, "hostname": 284, "FileHash-MD5": 587, "URL": 1157, "FileHash-SHA1": 130 }, "indicator_count": 3091, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a1025f19b27aafa1c705", "name": "InQuest - 27-08-2023", "description": "", "modified": "2023-12-06T16:27:46.540000", "created": "2023-12-06T16:27:46.540000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 432, "FileHash-SHA256": 409, "hostname": 295, "FileHash-MD5": 590, "URL": 1171, "FileHash-SHA1": 130 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a0f2b55816611379fc75", "name": "InQuest - 26-08-2023", "description": "", "modified": "2023-12-06T16:27:30.200000", "created": "2023-12-06T16:27:30.200000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 432, "FileHash-SHA256": 409, "hostname": 295, "FileHash-MD5": 590, "URL": 1171, "FileHash-SHA1": 130 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a0ce0f08bbc22b5f90c9", "name": "InQuest - 25-08-2023", "description": "", "modified": "2023-12-06T16:26:54.844000", "created": "2023-12-06T16:26:54.844000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 432, "FileHash-SHA256": 409, "hostname": 295, "FileHash-MD5": 590, "URL": 1171, "FileHash-SHA1": 130 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6570a0c269092274d6ba0e35", "name": "InQuest - 24-08-2023", "description": "", "modified": "2023-12-06T16:26:42.076000", "created": "2023-12-06T16:26:42.076000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 432, "FileHash-SHA256": 410, "hostname": 305, "FileHash-MD5": 586, "URL": 1171, "FileHash-SHA1": 126 }, "indicator_count": 3030, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "906 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f90c8c68d2d8366df66981", "name": "InQuest - 06-09-2023", "description": "", "modified": "2023-10-06T23:03:14.766000", "created": "2023-09-06T23:34:36.647000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "FileHash-MD5": 979, "hostname": 208, "URL": 745, "domain": 257, "FileHash-SHA1": 539 }, "indicator_count": 3286, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "967 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f7bc72da7bffbd3eb1d0cd", "name": "InQuest - 05-09-2023", "description": "", "modified": "2023-10-05T23:01:12.461000", "created": "2023-09-05T23:40:34.790000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "FileHash-SHA1": 539, "FileHash-MD5": 1000, "hostname": 206, "URL": 724, "domain": 255 }, "indicator_count": 3282, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "968 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f66a333369a8f8533c7b6f", "name": "InQuest - 04-09-2023", "description": "", "modified": "2023-10-04T23:04:05.846000", "created": "2023-09-04T23:37:23.965000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "FileHash-MD5": 1000, "URL": 732, "hostname": 206, "domain": 258, "FileHash-SHA1": 539 }, "indicator_count": 3293, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "969 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f518963e4703ce1d90d5c1", "name": "InQuest - 03-09-2023", "description": "", "modified": "2023-10-03T23:00:28", "created": "2023-09-03T23:36:54.275000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 264, "URL": 736, "FileHash-MD5": 998, "FileHash-SHA1": 539, "hostname": 205 }, "indicator_count": 3300, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "970 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f3c77a6916c53d3554cbf0", "name": "InQuest - 02-09-2023", "description": "", "modified": "2023-10-02T23:05:27.575000", "created": "2023-09-02T23:38:34.696000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 255, "URL": 723, "FileHash-MD5": 998, "FileHash-SHA1": 539, "hostname": 205 }, "indicator_count": 3278, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "971 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f275999e7cd850bbe0559f", "name": "InQuest - 01-09-2023", "description": "", "modified": "2023-10-01T23:00:17.810000", "created": "2023-09-01T23:36:57.590000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 255, "URL": 723, "FileHash-MD5": 998, "FileHash-SHA1": 539, "hostname": 205 }, "indicator_count": 3278, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "972 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64f124b9e9f823e6fe3c4484", "name": "InQuest - 31-08-2023", "description": "", "modified": "2023-09-30T23:05:04.433000", "created": "2023-08-31T23:39:37.388000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 558, "domain": 264, "URL": 736, "FileHash-MD5": 998, "FileHash-SHA1": 539, "hostname": 205 }, "indicator_count": 3300, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "973 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64efd394eeaaf4e16e10cf99", "name": "InQuest - 30-08-2023", "description": "", "modified": "2023-09-29T23:05:34.777000", "created": "2023-08-30T23:41:08.937000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 271, "URL": 729, "FileHash-SHA256": 520, "FileHash-MD5": 968, "FileHash-SHA1": 597, "hostname": 205 }, "indicator_count": 3290, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "974 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ee81c78b8e43abe567fe48", "name": "InQuest - 29-08-2023", "description": "", "modified": "2023-09-28T23:02:46.957000", "created": "2023-08-29T23:39:51.628000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 215, "URL": 724, "FileHash-SHA256": 528, "FileHash-SHA1": 603, "FileHash-MD5": 998, "hostname": 244 }, "indicator_count": 3312, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "975 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ed30738598093319da3800", "name": "InQuest - 28-08-2023", "description": "", "modified": "2023-09-27T23:02:22.908000", "created": "2023-08-28T23:40:35.967000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 435, "URL": 1157, "FileHash-SHA256": 498, "hostname": 284, "FileHash-MD5": 587, "FileHash-SHA1": 130 }, "indicator_count": 3091, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "976 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ebdf066fe205bf143ae522", "name": "InQuest - 27-08-2023", "description": "", "modified": "2023-09-26T23:02:04.122000", "created": "2023-08-27T23:40:54.430000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 409, "domain": 432, "URL": 1171, "hostname": 295, "FileHash-SHA1": 130, "FileHash-MD5": 590 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "977 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ea8dd077cd9c3e91963d61", "name": "InQuest - 26-08-2023", "description": "", "modified": "2023-09-25T23:01:30.471000", "created": "2023-08-26T23:42:08.178000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 409, "domain": 432, "URL": 1171, "hostname": 295, "FileHash-SHA1": 130, "FileHash-MD5": 590 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "978 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e93bd951f0516678c93051", "name": "InQuest - 25-08-2023", "description": "", "modified": "2023-09-24T23:02:17.815000", "created": "2023-08-25T23:40:09.517000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 409, "domain": 432, "URL": 1171, "hostname": 295, "FileHash-SHA1": 130, "FileHash-MD5": 590 }, "indicator_count": 3027, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "979 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e7eaa597de176e1181ef21", "name": "InQuest - 24-08-2023", "description": "", "modified": "2023-09-23T23:00:36.707000", "created": "2023-08-24T23:41:25.417000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 410, "domain": 432, "URL": 1171, "FileHash-MD5": 586, "hostname": 305, "FileHash-SHA1": 126 }, "indicator_count": 3030, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "980 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ed81509070c4359c9834c6", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study", "description": "", "modified": "2023-08-29T05:25:36.966000", "created": "2023-08-29T05:25:36.966000", "tags": [ "deepdns", "dns tunneling", "coinloader", "sunburst" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1572", "name": "Protocol Tunneling", "display_name": "T1572 - Protocol Tunneling" } ], "industries": [], "TLP": "white", "cloned_from": "64ed6e6841659795470a14ee", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Tr1sa111", "id": "192483", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "domain": 15, "hostname": 1 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 276, "modified_text": "1006 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ed6e6841659795470a14ee", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study", "description": "", "modified": "2023-08-29T04:04:56.864000", "created": "2023-08-29T04:04:56.864000", "tags": [ "deepdns", "dns tunneling", "coinloader", "sunburst" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1572", "name": "Protocol Tunneling", "display_name": "T1572 - Protocol Tunneling" } ], "industries": [], "TLP": "white", "cloned_from": "64e8688ae20e56da413ac148", "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tr2222200", "id": "207905", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "domain": 15, "hostname": 1 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 186, "modified_text": "1006 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64ea12687d3450d3b1c703c3", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns [by @AlienVault]", "description": "", "modified": "2023-08-26T14:55:36.546000", "created": "2023-08-26T14:55:36.546000", "tags": [ "deepdns", "dns tunneling", "coinloader", "sunburst" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1572", "name": "Protocol Tunneling", "display_name": "T1572 - Protocol Tunneling" } ], "industries": [], "TLP": "white", "cloned_from": "64e8688ae20e56da413ac148", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "domain": 15, "hostname": 1 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 220, "modified_text": "1008 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e9678eb06859ce508b8fd3", "name": "August 26th, 2023 - CryptoGen Cyber Threat Intelligence Advisory #3123 - Used Generative Modules to Expose DNS Tunneling Campaign", "description": "", "modified": "2023-08-26T02:46:38.155000", "created": "2023-08-26T02:46:38.155000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 3, "FileHash-SHA1": 3, "FileHash-SHA256": 3, "domain": 16, "hostname": 16 }, "indicator_count": 41, "is_author": false, "is_subscribing": null, "subscriber_count": 499, "modified_text": "1009 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e89445f1145c1698631852", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study - Check Point Research", "description": "In this blog post, security firm Check Point outlines how it is using Generative AI (AI) to thwart malicious campaigns using the Domain Name Server (DNS) protocol to communicate with C&C servers.", "modified": "2023-08-25T11:45:09.059000", "created": "2023-08-25T11:45:09.059000", "tags": [ "addr", "deepdns", "dns tunneling", "abstractmethod", "false", "dict", "dns protocol", "funct", "check point", "coinloader", "sunburst", "python", "error" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 1, "domain": 17, "hostname": 7 }, "indicator_count": 25, "is_author": false, "is_subscribing": null, "subscriber_count": 863, "modified_text": "1009 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://labs.inquest.net/iocdb", "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 49, "pulses": [ { "id": "64e8688ae20e56da413ac148", "name": "Tunnel Warfare: Exposing DNS Tunneling Campaigns using Generative Models \u2013 CoinLoader Case Study", "description": "Generative AI has been around for nearly a decade, strictly speaking, but the recent boom in this technology has inspired renewed interest in its possible applications to challenges facing the information security community. Finding these challenges entails searching through a very large haystack consisting of brand-new binaries, documents, domains and other artifacts that flood the web every day.", "modified": "2023-08-25T08:38:33.465000", "created": "2023-08-25T08:38:33.465000", "tags": [ "deepdns", "dns tunneling", "coinloader", "sunburst" ], "references": [ "https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1560", "name": "Archive Collected Data", "display_name": "T1560 - Archive Collected Data" }, { "id": "T1106", "name": "Native API", "display_name": "T1106 - Native API" }, { "id": "T1095", "name": "Non-Application Layer Protocol", "display_name": "T1095 - Non-Application Layer Protocol" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1102", "name": "Web Service", "display_name": "T1102 - Web Service" }, { "id": "T1572", "name": "Protocol Tunneling", "display_name": "T1572 - Protocol Tunneling" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 375, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "AlienVault", "id": "2", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png", "is_subscribed": true, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "domain": 15, "hostname": 1 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 386497, "modified_text": "1009 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c88a77e953c666b3efb12f", "name": "aaaaaaaaaaaaa", "description": "The latest in a long series of reports from around the world on the state of the European Union has been released, with the release of a number of key figures, including those from the EU referendum.", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:51:51.834000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 2, "URL": 238, "domain": 260, "hostname": 435 }, "indicator_count": 935, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c880c9db66354caf63b2ca", "name": "aaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:10:33.474000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 273, "FileHash-SHA256": 358, "FileHash-MD5": 272, "domain": 260, "hostname": 436 }, "indicator_count": 1839, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c880c14cbd5294e370b445", "name": "aaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:10:25.961000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 273, "FileHash-SHA256": 358, "FileHash-MD5": 272, "domain": 260, "hostname": 436 }, "indicator_count": 1839, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87f9cd5ec3405bbb38239", "name": "aaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:05:32.166000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 117, "FileHash-MD5": 180, "FileHash-SHA1": 190, "FileHash-SHA256": 227, "domain": 141, "hostname": 228 }, "indicator_count": 1083, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87e997afce56805741ab1", "name": "aaaaaaaaaaaaaaaaaaaaaaaaa", "description": "", "modified": "2025-10-15T21:02:46.703000", "created": "2025-09-15T21:01:13.264000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 150, "FileHash-MD5": 257, "FileHash-SHA1": 233, "FileHash-SHA256": 310, "domain": 209, "hostname": 271 }, "indicator_count": 1430, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c87d7004062994ccf6424a", "name": "aaaaaaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-15T20:00:31.666000", "created": "2025-09-15T20:56:16.591000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 240, "FileHash-SHA1": 262, "FileHash-SHA256": 360, "FileHash-MD5": 285, "domain": 260, "hostname": 436 }, "indicator_count": 1843, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "227 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c7716ffdfe12b9ae2b8471", "name": "IOC Blocking", "description": "", "modified": "2025-10-15T01:10:34.787000", "created": "2025-09-15T01:52:47.855000", "tags": [ "indicator name", "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2138, "FileHash-SHA1": 325, "FileHash-SHA256": 378, "domain": 271, "hostname": 452 }, "indicator_count": 3871, "is_author": false, "is_subscribing": null, "subscriber_count": 22, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c7212ce06750a77e6a3a6c", "name": "aaaaaaaaaa", "description": "A look back at some of the most eye-catching snippets from the past year, as well as those of those from this year's BBC World News: \u00c2\u00a31.5m.", "modified": "2025-10-14T20:40:46.498000", "created": "2025-09-14T20:10:20.054000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2, "FileHash-SHA256": 1, "domain": 271, "hostname": 452 }, "indicator_count": 1033, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68c71aadb4f09ac8e6d97bdd", "name": "aaaaaaaaaaaaaaaaaaaaa", "description": "A look back at some of the most eye-catching stories of 2015:.1.3.4.6.2.5.7.9.0, as well as those of 2016:", "modified": "2025-10-14T19:44:37.552000", "created": "2025-09-14T19:42:37.477000", "tags": [ "xamzexpires300" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Abinsiby12345", "id": "358730", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 307, "FileHash-MD5": 2139, "FileHash-SHA1": 325, "FileHash-SHA256": 379, "domain": 271, "hostname": 452 }, "indicator_count": 3873, "is_author": false, "is_subscribing": null, "subscriber_count": 21, "modified_text": "228 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "mapdatamsna.info", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "mapdatamsna.info", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780215640.8417592 }