{
  "type": "Domain",
  "indicator": "openweb.bid",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/openweb.bid",
    "alexa": "http://www.alexa.com/siteinfo/openweb.bid",
    "indicator": "openweb.bid",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 4150501574,
      "indicator": "openweb.bid",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 6,
      "pulses": [
        {
          "id": "6a1172cd479d8218e859db0c",
          "name": "Rain + Acid; Questionable Civil Rights Violations.",
          "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
          "modified": "2026-05-23T09:36:11.136000",
          "created": "2026-05-23T09:26:37.608000",
          "tags": [
            "akamai",
            "orgid",
            "akamai ref",
            "net173",
            "net1730000",
            "orgtechhandle",
            "steven jay",
            "orgname",
            "cidr",
            "noc united",
            "orgabusehandle",
            "nethandle",
            "key identifier",
            "x509v3 subject",
            "full name",
            "v3 serial",
            "number",
            "cus cndigicert",
            "tls rsa",
            "sha256",
            "ca1 odigicert",
            "inc validity",
            "city",
            "kam sze",
            "verisign",
            "date",
            "server",
            "data",
            "whois database",
            "whois",
            "registrar abuse",
            "repackaging",
            "registrars",
            "icann whois",
            "form",
            "email",
            "request email",
            "stateprovince",
            "whois status",
            "tech",
            "address range",
            "network name",
            "type",
            "status",
            "whois server",
            "entity akamai",
            "handle",
            "orgtechref",
            "akamai address",
            "broadway city",
            "postalcode",
            "orgtechphone",
            "label akamai",
            "arin country",
            "us continent",
            "services",
            "net192",
            "net1920000",
            "as14153",
            "as15133",
            "edgec25",
            "w jefferson",
            "blvd",
            "algorithm",
            "cus odigicert",
            "cngeotrust tls",
            "rsa ca",
            "g1 validity",
            "subject public",
            "serving ip",
            "address",
            "status code",
            "body length",
            "kb body",
            "responsibility",
            "learn",
            "citizen verizon",
            "drupal",
            "corporate",
            "utc google",
            "tag manager",
            "gtmpz6697q",
            "utc g22l6jkpfvc",
            "utc linkedin",
            "insight tag",
            "utc adobe",
            "dynamic tag",
            "sameorigin",
            "date wed",
            "miss setcookie",
            "secure",
            "httponly",
            "unix",
            "cachecontrol",
            "html info",
            "title",
            "ip address",
            "stworld",
            "stworld og",
            "uetsid",
            "sctr",
            "pinunauth",
            "awsalb",
            "udnsntcsession",
            "tdid",
            "qplatform mfapp",
            "adrollfpc",
            "arv4",
            "udnsntcs",
            "interim sim",
            "newegg",
            "verizon",
            "buy verizon",
            "card",
            "newegg shopping",
            "ver2",
            "vids1",
            "msclkidn"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CIDR": 3,
            "FileHash-SHA256": 316,
            "FileHash-SHA1": 4,
            "domain": 96,
            "hostname": 279,
            "URL": 267,
            "IPv4": 8,
            "email": 11,
            "FileHash-MD5": 12,
            "Mutex": 1,
            "URI": 1
          },
          "indicator_count": 998,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "10 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6a1172cb47ba739f26d5dbd6",
          "name": "Rain + Acid; Questionable Civil Rights Violations.",
          "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
          "modified": "2026-05-23T09:28:45.751000",
          "created": "2026-05-23T09:26:35.365000",
          "tags": [
            "akamai",
            "orgid",
            "akamai ref",
            "net173",
            "net1730000",
            "orgtechhandle",
            "steven jay",
            "orgname",
            "cidr",
            "noc united",
            "orgabusehandle",
            "nethandle",
            "key identifier",
            "x509v3 subject",
            "full name",
            "v3 serial",
            "number",
            "cus cndigicert",
            "tls rsa",
            "sha256",
            "ca1 odigicert",
            "inc validity",
            "city",
            "kam sze",
            "verisign",
            "date",
            "server",
            "data",
            "whois database",
            "whois",
            "registrar abuse",
            "repackaging",
            "registrars",
            "icann whois",
            "form",
            "email",
            "request email",
            "stateprovince",
            "whois status",
            "tech",
            "address range",
            "network name",
            "type",
            "status",
            "whois server",
            "entity akamai",
            "handle",
            "orgtechref",
            "akamai address",
            "broadway city",
            "postalcode",
            "orgtechphone",
            "label akamai",
            "arin country",
            "us continent",
            "services",
            "net192",
            "net1920000",
            "as14153",
            "as15133",
            "edgec25",
            "w jefferson",
            "blvd",
            "algorithm",
            "cus odigicert",
            "cngeotrust tls",
            "rsa ca",
            "g1 validity",
            "subject public",
            "serving ip",
            "address",
            "status code",
            "body length",
            "kb body",
            "responsibility",
            "learn",
            "citizen verizon",
            "drupal",
            "corporate",
            "utc google",
            "tag manager",
            "gtmpz6697q",
            "utc g22l6jkpfvc",
            "utc linkedin",
            "insight tag",
            "utc adobe",
            "dynamic tag",
            "sameorigin",
            "date wed",
            "miss setcookie",
            "secure",
            "httponly",
            "unix",
            "cachecontrol",
            "html info",
            "title",
            "ip address",
            "stworld",
            "stworld og",
            "uetsid",
            "sctr",
            "pinunauth",
            "awsalb",
            "udnsntcsession",
            "tdid",
            "qplatform mfapp",
            "adrollfpc",
            "arv4",
            "udnsntcs",
            "interim sim",
            "newegg",
            "verizon",
            "buy verizon",
            "card",
            "newegg shopping",
            "ver2",
            "vids1",
            "msclkidn"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CIDR": 3,
            "FileHash-SHA256": 316,
            "FileHash-SHA1": 4,
            "domain": 101,
            "hostname": 295,
            "URL": 290,
            "IPv4": 8,
            "email": 12,
            "FileHash-MD5": 12,
            "Mutex": 1,
            "URI": 1
          },
          "indicator_count": 1043,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "10 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6a1172cd04ed75967ff3ffc5",
          "name": "Rain + Acid; Questionable Civil Rights Violations.",
          "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
          "modified": "2026-05-23T09:26:37.004000",
          "created": "2026-05-23T09:26:37.004000",
          "tags": [
            "akamai",
            "orgid",
            "akamai ref",
            "net173",
            "net1730000",
            "orgtechhandle",
            "steven jay",
            "orgname",
            "cidr",
            "noc united",
            "orgabusehandle",
            "nethandle",
            "key identifier",
            "x509v3 subject",
            "full name",
            "v3 serial",
            "number",
            "cus cndigicert",
            "tls rsa",
            "sha256",
            "ca1 odigicert",
            "inc validity",
            "city",
            "kam sze",
            "verisign",
            "date",
            "server",
            "data",
            "whois database",
            "whois",
            "registrar abuse",
            "repackaging",
            "registrars",
            "icann whois",
            "form",
            "email",
            "request email",
            "stateprovince",
            "whois status",
            "tech",
            "address range",
            "network name",
            "type",
            "status",
            "whois server",
            "entity akamai",
            "handle",
            "orgtechref",
            "akamai address",
            "broadway city",
            "postalcode",
            "orgtechphone",
            "label akamai",
            "arin country",
            "us continent",
            "services",
            "net192",
            "net1920000",
            "as14153",
            "as15133",
            "edgec25",
            "w jefferson",
            "blvd",
            "algorithm",
            "cus odigicert",
            "cngeotrust tls",
            "rsa ca",
            "g1 validity",
            "subject public",
            "serving ip",
            "address",
            "status code",
            "body length",
            "kb body",
            "responsibility",
            "learn",
            "citizen verizon",
            "drupal",
            "corporate",
            "utc google",
            "tag manager",
            "gtmpz6697q",
            "utc g22l6jkpfvc",
            "utc linkedin",
            "insight tag",
            "utc adobe",
            "dynamic tag",
            "sameorigin",
            "date wed",
            "miss setcookie",
            "secure",
            "httponly",
            "unix",
            "cachecontrol",
            "html info",
            "title",
            "ip address",
            "stworld",
            "stworld og",
            "uetsid",
            "sctr",
            "pinunauth",
            "awsalb",
            "udnsntcsession",
            "tdid",
            "qplatform mfapp",
            "adrollfpc",
            "arv4",
            "udnsntcs",
            "interim sim",
            "newegg",
            "verizon",
            "buy verizon",
            "card",
            "newegg shopping",
            "ver2",
            "vids1",
            "msclkidn"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CIDR": 3,
            "FileHash-SHA256": 316,
            "FileHash-SHA1": 4,
            "domain": 95,
            "hostname": 279,
            "URL": 267,
            "IPv4": 8,
            "email": 11,
            "FileHash-MD5": 12,
            "Mutex": 1,
            "URI": 1
          },
          "indicator_count": 997,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "10 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6a1172cc0a8d5c02b90c7abf",
          "name": "Rain + Acid; Questionable Civil Rights Violations.",
          "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
          "modified": "2026-05-23T09:26:36.279000",
          "created": "2026-05-23T09:26:36.279000",
          "tags": [
            "akamai",
            "orgid",
            "akamai ref",
            "net173",
            "net1730000",
            "orgtechhandle",
            "steven jay",
            "orgname",
            "cidr",
            "noc united",
            "orgabusehandle",
            "nethandle",
            "key identifier",
            "x509v3 subject",
            "full name",
            "v3 serial",
            "number",
            "cus cndigicert",
            "tls rsa",
            "sha256",
            "ca1 odigicert",
            "inc validity",
            "city",
            "kam sze",
            "verisign",
            "date",
            "server",
            "data",
            "whois database",
            "whois",
            "registrar abuse",
            "repackaging",
            "registrars",
            "icann whois",
            "form",
            "email",
            "request email",
            "stateprovince",
            "whois status",
            "tech",
            "address range",
            "network name",
            "type",
            "status",
            "whois server",
            "entity akamai",
            "handle",
            "orgtechref",
            "akamai address",
            "broadway city",
            "postalcode",
            "orgtechphone",
            "label akamai",
            "arin country",
            "us continent",
            "services",
            "net192",
            "net1920000",
            "as14153",
            "as15133",
            "edgec25",
            "w jefferson",
            "blvd",
            "algorithm",
            "cus odigicert",
            "cngeotrust tls",
            "rsa ca",
            "g1 validity",
            "subject public",
            "serving ip",
            "address",
            "status code",
            "body length",
            "kb body",
            "responsibility",
            "learn",
            "citizen verizon",
            "drupal",
            "corporate",
            "utc google",
            "tag manager",
            "gtmpz6697q",
            "utc g22l6jkpfvc",
            "utc linkedin",
            "insight tag",
            "utc adobe",
            "dynamic tag",
            "sameorigin",
            "date wed",
            "miss setcookie",
            "secure",
            "httponly",
            "unix",
            "cachecontrol",
            "html info",
            "title",
            "ip address",
            "stworld",
            "stworld og",
            "uetsid",
            "sctr",
            "pinunauth",
            "awsalb",
            "udnsntcsession",
            "tdid",
            "qplatform mfapp",
            "adrollfpc",
            "arv4",
            "udnsntcs",
            "interim sim",
            "newegg",
            "verizon",
            "buy verizon",
            "card",
            "newegg shopping",
            "ver2",
            "vids1",
            "msclkidn"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CIDR": 3,
            "FileHash-SHA256": 316,
            "FileHash-SHA1": 4,
            "domain": 95,
            "hostname": 279,
            "URL": 267,
            "IPv4": 8,
            "email": 11,
            "FileHash-MD5": 12,
            "Mutex": 1,
            "URI": 1
          },
          "indicator_count": 997,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "10 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "695089cbedad5c86f39b1363",
          "name": "Tracking Domains 03.03.26 (Updated Test)",
          "description": "Privacy Badger - Update on 01.09.26\nTracking domains on a hybrid (mobile laptop) clone of an AHS/Covenant Health, UAlberta (University of Alberta), and Government of Alberta Laptop.\nHealthcare: No Cybersecurity, EDU: No Cybersecurity / Remote only, GoA = Informed & don't quite know what to do or to whom this should be brought up with.",
          "modified": "2026-04-05T06:35:43.679000",
          "created": "2025-12-28T01:37:15.993000",
          "tags": [
            "privacy badger",
            "sites general",
            "settings widget",
            "domains manage",
            "data privacy",
            "badger",
            "hide"
          ],
          "references": [
            "https://hybrid-analysis.com/sample/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
            "https://yaraify.abuse.ch/scan/results/32bfc760-1757-11f1-b47f-42010aa4000b",
            "https://polyswarm.network/scan/results/file/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
            "https://app.threat.zone/submission/c8b0b1e4-0c9b-4210-b5ce-1dc2303445df/overview",
            "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/iocs",
            "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/summary",
            "https://www.virustotal.com/graph/embed/g6d4bce6162064ac09cd20411c1947e69d7d5a1d475f0447da023ac933d338fce?theme=dark",
            "https://viz.greynoise.io/ip/analysis/6356f330-63a7-4ce3-91fa-7ab355a1dc1a"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "Canada",
            "United States of America",
            "Netherlands"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "Education",
            "Healthcare",
            "Government",
            "Technology",
            "Telecommunications"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Disable_Duck",
            "id": "244325",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 50404,
            "hostname": 10879,
            "URL": 715,
            "FileHash-MD5": 1
          },
          "indicator_count": 61999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 132,
          "modified_text": "58 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "691b61e16cea7624a6606a69",
          "name": "For Later",
          "description": "***",
          "modified": "2025-11-17T18:46:19.094000",
          "created": "2025-11-17T17:56:49.875000",
          "tags": [
            "wormhole",
            "want",
            "sign",
            "submit send",
            "copy",
            "share show",
            "report delete",
            "faq roadmap",
            "security legal",
            "twitter discord",
            "protected"
          ],
          "references": [
            "https://wormhole.app/Pp5DdP#3EpzsqLhw5lJdQ0Xe_mRQA",
            "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/iocs"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Disable_Duck",
            "id": "244325",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 72127,
            "hostname": 16700,
            "URL": 50
          },
          "indicator_count": 88877,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 131,
          "modified_text": "197 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://wormhole.app/Pp5DdP#3EpzsqLhw5lJdQ0Xe_mRQA",
        "https://yaraify.abuse.ch/scan/results/32bfc760-1757-11f1-b47f-42010aa4000b",
        "https://www.virustotal.com/graph/embed/g6d4bce6162064ac09cd20411c1947e69d7d5a1d475f0447da023ac933d338fce?theme=dark",
        "https://polyswarm.network/scan/results/file/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
        "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/summary",
        "https://hybrid-analysis.com/sample/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
        "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/iocs",
        "https://app.threat.zone/submission/c8b0b1e4-0c9b-4210-b5ce-1dc2303445df/overview",
        "https://viz.greynoise.io/ip/analysis/6356f330-63a7-4ce3-91fa-7ab355a1dc1a"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [
            "Education",
            "Healthcare",
            "Telecommunications",
            "Government",
            "Technology"
          ]
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 6,
  "pulses": [
    {
      "id": "6a1172cd479d8218e859db0c",
      "name": "Rain + Acid; Questionable Civil Rights Violations.",
      "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
      "modified": "2026-05-23T09:36:11.136000",
      "created": "2026-05-23T09:26:37.608000",
      "tags": [
        "akamai",
        "orgid",
        "akamai ref",
        "net173",
        "net1730000",
        "orgtechhandle",
        "steven jay",
        "orgname",
        "cidr",
        "noc united",
        "orgabusehandle",
        "nethandle",
        "key identifier",
        "x509v3 subject",
        "full name",
        "v3 serial",
        "number",
        "cus cndigicert",
        "tls rsa",
        "sha256",
        "ca1 odigicert",
        "inc validity",
        "city",
        "kam sze",
        "verisign",
        "date",
        "server",
        "data",
        "whois database",
        "whois",
        "registrar abuse",
        "repackaging",
        "registrars",
        "icann whois",
        "form",
        "email",
        "request email",
        "stateprovince",
        "whois status",
        "tech",
        "address range",
        "network name",
        "type",
        "status",
        "whois server",
        "entity akamai",
        "handle",
        "orgtechref",
        "akamai address",
        "broadway city",
        "postalcode",
        "orgtechphone",
        "label akamai",
        "arin country",
        "us continent",
        "services",
        "net192",
        "net1920000",
        "as14153",
        "as15133",
        "edgec25",
        "w jefferson",
        "blvd",
        "algorithm",
        "cus odigicert",
        "cngeotrust tls",
        "rsa ca",
        "g1 validity",
        "subject public",
        "serving ip",
        "address",
        "status code",
        "body length",
        "kb body",
        "responsibility",
        "learn",
        "citizen verizon",
        "drupal",
        "corporate",
        "utc google",
        "tag manager",
        "gtmpz6697q",
        "utc g22l6jkpfvc",
        "utc linkedin",
        "insight tag",
        "utc adobe",
        "dynamic tag",
        "sameorigin",
        "date wed",
        "miss setcookie",
        "secure",
        "httponly",
        "unix",
        "cachecontrol",
        "html info",
        "title",
        "ip address",
        "stworld",
        "stworld og",
        "uetsid",
        "sctr",
        "pinunauth",
        "awsalb",
        "udnsntcsession",
        "tdid",
        "qplatform mfapp",
        "adrollfpc",
        "arv4",
        "udnsntcs",
        "interim sim",
        "newegg",
        "verizon",
        "buy verizon",
        "card",
        "newegg shopping",
        "ver2",
        "vids1",
        "msclkidn"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CIDR": 3,
        "FileHash-SHA256": 316,
        "FileHash-SHA1": 4,
        "domain": 96,
        "hostname": 279,
        "URL": 267,
        "IPv4": 8,
        "email": 11,
        "FileHash-MD5": 12,
        "Mutex": 1,
        "URI": 1
      },
      "indicator_count": 998,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "10 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6a1172cb47ba739f26d5dbd6",
      "name": "Rain + Acid; Questionable Civil Rights Violations.",
      "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
      "modified": "2026-05-23T09:28:45.751000",
      "created": "2026-05-23T09:26:35.365000",
      "tags": [
        "akamai",
        "orgid",
        "akamai ref",
        "net173",
        "net1730000",
        "orgtechhandle",
        "steven jay",
        "orgname",
        "cidr",
        "noc united",
        "orgabusehandle",
        "nethandle",
        "key identifier",
        "x509v3 subject",
        "full name",
        "v3 serial",
        "number",
        "cus cndigicert",
        "tls rsa",
        "sha256",
        "ca1 odigicert",
        "inc validity",
        "city",
        "kam sze",
        "verisign",
        "date",
        "server",
        "data",
        "whois database",
        "whois",
        "registrar abuse",
        "repackaging",
        "registrars",
        "icann whois",
        "form",
        "email",
        "request email",
        "stateprovince",
        "whois status",
        "tech",
        "address range",
        "network name",
        "type",
        "status",
        "whois server",
        "entity akamai",
        "handle",
        "orgtechref",
        "akamai address",
        "broadway city",
        "postalcode",
        "orgtechphone",
        "label akamai",
        "arin country",
        "us continent",
        "services",
        "net192",
        "net1920000",
        "as14153",
        "as15133",
        "edgec25",
        "w jefferson",
        "blvd",
        "algorithm",
        "cus odigicert",
        "cngeotrust tls",
        "rsa ca",
        "g1 validity",
        "subject public",
        "serving ip",
        "address",
        "status code",
        "body length",
        "kb body",
        "responsibility",
        "learn",
        "citizen verizon",
        "drupal",
        "corporate",
        "utc google",
        "tag manager",
        "gtmpz6697q",
        "utc g22l6jkpfvc",
        "utc linkedin",
        "insight tag",
        "utc adobe",
        "dynamic tag",
        "sameorigin",
        "date wed",
        "miss setcookie",
        "secure",
        "httponly",
        "unix",
        "cachecontrol",
        "html info",
        "title",
        "ip address",
        "stworld",
        "stworld og",
        "uetsid",
        "sctr",
        "pinunauth",
        "awsalb",
        "udnsntcsession",
        "tdid",
        "qplatform mfapp",
        "adrollfpc",
        "arv4",
        "udnsntcs",
        "interim sim",
        "newegg",
        "verizon",
        "buy verizon",
        "card",
        "newegg shopping",
        "ver2",
        "vids1",
        "msclkidn"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CIDR": 3,
        "FileHash-SHA256": 316,
        "FileHash-SHA1": 4,
        "domain": 101,
        "hostname": 295,
        "URL": 290,
        "IPv4": 8,
        "email": 12,
        "FileHash-MD5": 12,
        "Mutex": 1,
        "URI": 1
      },
      "indicator_count": 1043,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "10 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6a1172cd04ed75967ff3ffc5",
      "name": "Rain + Acid; Questionable Civil Rights Violations.",
      "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
      "modified": "2026-05-23T09:26:37.004000",
      "created": "2026-05-23T09:26:37.004000",
      "tags": [
        "akamai",
        "orgid",
        "akamai ref",
        "net173",
        "net1730000",
        "orgtechhandle",
        "steven jay",
        "orgname",
        "cidr",
        "noc united",
        "orgabusehandle",
        "nethandle",
        "key identifier",
        "x509v3 subject",
        "full name",
        "v3 serial",
        "number",
        "cus cndigicert",
        "tls rsa",
        "sha256",
        "ca1 odigicert",
        "inc validity",
        "city",
        "kam sze",
        "verisign",
        "date",
        "server",
        "data",
        "whois database",
        "whois",
        "registrar abuse",
        "repackaging",
        "registrars",
        "icann whois",
        "form",
        "email",
        "request email",
        "stateprovince",
        "whois status",
        "tech",
        "address range",
        "network name",
        "type",
        "status",
        "whois server",
        "entity akamai",
        "handle",
        "orgtechref",
        "akamai address",
        "broadway city",
        "postalcode",
        "orgtechphone",
        "label akamai",
        "arin country",
        "us continent",
        "services",
        "net192",
        "net1920000",
        "as14153",
        "as15133",
        "edgec25",
        "w jefferson",
        "blvd",
        "algorithm",
        "cus odigicert",
        "cngeotrust tls",
        "rsa ca",
        "g1 validity",
        "subject public",
        "serving ip",
        "address",
        "status code",
        "body length",
        "kb body",
        "responsibility",
        "learn",
        "citizen verizon",
        "drupal",
        "corporate",
        "utc google",
        "tag manager",
        "gtmpz6697q",
        "utc g22l6jkpfvc",
        "utc linkedin",
        "insight tag",
        "utc adobe",
        "dynamic tag",
        "sameorigin",
        "date wed",
        "miss setcookie",
        "secure",
        "httponly",
        "unix",
        "cachecontrol",
        "html info",
        "title",
        "ip address",
        "stworld",
        "stworld og",
        "uetsid",
        "sctr",
        "pinunauth",
        "awsalb",
        "udnsntcsession",
        "tdid",
        "qplatform mfapp",
        "adrollfpc",
        "arv4",
        "udnsntcs",
        "interim sim",
        "newegg",
        "verizon",
        "buy verizon",
        "card",
        "newegg shopping",
        "ver2",
        "vids1",
        "msclkidn"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CIDR": 3,
        "FileHash-SHA256": 316,
        "FileHash-SHA1": 4,
        "domain": 95,
        "hostname": 279,
        "URL": 267,
        "IPv4": 8,
        "email": 11,
        "FileHash-MD5": 12,
        "Mutex": 1,
        "URI": 1
      },
      "indicator_count": 997,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "10 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6a1172cc0a8d5c02b90c7abf",
      "name": "Rain + Acid; Questionable Civil Rights Violations.",
      "description": "[The full list of names and addresses for Akamai, the world's largest web hosting company, has been released..and it is not clear how many of them have been registered or used] <the first time I agree with pretext.",
      "modified": "2026-05-23T09:26:36.279000",
      "created": "2026-05-23T09:26:36.279000",
      "tags": [
        "akamai",
        "orgid",
        "akamai ref",
        "net173",
        "net1730000",
        "orgtechhandle",
        "steven jay",
        "orgname",
        "cidr",
        "noc united",
        "orgabusehandle",
        "nethandle",
        "key identifier",
        "x509v3 subject",
        "full name",
        "v3 serial",
        "number",
        "cus cndigicert",
        "tls rsa",
        "sha256",
        "ca1 odigicert",
        "inc validity",
        "city",
        "kam sze",
        "verisign",
        "date",
        "server",
        "data",
        "whois database",
        "whois",
        "registrar abuse",
        "repackaging",
        "registrars",
        "icann whois",
        "form",
        "email",
        "request email",
        "stateprovince",
        "whois status",
        "tech",
        "address range",
        "network name",
        "type",
        "status",
        "whois server",
        "entity akamai",
        "handle",
        "orgtechref",
        "akamai address",
        "broadway city",
        "postalcode",
        "orgtechphone",
        "label akamai",
        "arin country",
        "us continent",
        "services",
        "net192",
        "net1920000",
        "as14153",
        "as15133",
        "edgec25",
        "w jefferson",
        "blvd",
        "algorithm",
        "cus odigicert",
        "cngeotrust tls",
        "rsa ca",
        "g1 validity",
        "subject public",
        "serving ip",
        "address",
        "status code",
        "body length",
        "kb body",
        "responsibility",
        "learn",
        "citizen verizon",
        "drupal",
        "corporate",
        "utc google",
        "tag manager",
        "gtmpz6697q",
        "utc g22l6jkpfvc",
        "utc linkedin",
        "insight tag",
        "utc adobe",
        "dynamic tag",
        "sameorigin",
        "date wed",
        "miss setcookie",
        "secure",
        "httponly",
        "unix",
        "cachecontrol",
        "html info",
        "title",
        "ip address",
        "stworld",
        "stworld og",
        "uetsid",
        "sctr",
        "pinunauth",
        "awsalb",
        "udnsntcsession",
        "tdid",
        "qplatform mfapp",
        "adrollfpc",
        "arv4",
        "udnsntcs",
        "interim sim",
        "newegg",
        "verizon",
        "buy verizon",
        "card",
        "newegg shopping",
        "ver2",
        "vids1",
        "msclkidn"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CIDR": 3,
        "FileHash-SHA256": 316,
        "FileHash-SHA1": 4,
        "domain": 95,
        "hostname": 279,
        "URL": 267,
        "IPv4": 8,
        "email": 11,
        "FileHash-MD5": 12,
        "Mutex": 1,
        "URI": 1
      },
      "indicator_count": 997,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "10 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "695089cbedad5c86f39b1363",
      "name": "Tracking Domains 03.03.26 (Updated Test)",
      "description": "Privacy Badger - Update on 01.09.26\nTracking domains on a hybrid (mobile laptop) clone of an AHS/Covenant Health, UAlberta (University of Alberta), and Government of Alberta Laptop.\nHealthcare: No Cybersecurity, EDU: No Cybersecurity / Remote only, GoA = Informed & don't quite know what to do or to whom this should be brought up with.",
      "modified": "2026-04-05T06:35:43.679000",
      "created": "2025-12-28T01:37:15.993000",
      "tags": [
        "privacy badger",
        "sites general",
        "settings widget",
        "domains manage",
        "data privacy",
        "badger",
        "hide"
      ],
      "references": [
        "https://hybrid-analysis.com/sample/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
        "https://yaraify.abuse.ch/scan/results/32bfc760-1757-11f1-b47f-42010aa4000b",
        "https://polyswarm.network/scan/results/file/6a8efb46a1811fab955b629b37b5c483a812cc66519436acd726ff2a854f7a86",
        "https://app.threat.zone/submission/c8b0b1e4-0c9b-4210-b5ce-1dc2303445df/overview",
        "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/iocs",
        "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/summary",
        "https://www.virustotal.com/graph/embed/g6d4bce6162064ac09cd20411c1947e69d7d5a1d475f0447da023ac933d338fce?theme=dark",
        "https://viz.greynoise.io/ip/analysis/6356f330-63a7-4ce3-91fa-7ab355a1dc1a"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "Canada",
        "United States of America",
        "Netherlands"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "Education",
        "Healthcare",
        "Government",
        "Technology",
        "Telecommunications"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Disable_Duck",
        "id": "244325",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 50404,
        "hostname": 10879,
        "URL": 715,
        "FileHash-MD5": 1
      },
      "indicator_count": 61999,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 132,
      "modified_text": "58 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "691b61e16cea7624a6606a69",
      "name": "For Later",
      "description": "***",
      "modified": "2025-11-17T18:46:19.094000",
      "created": "2025-11-17T17:56:49.875000",
      "tags": [
        "wormhole",
        "want",
        "sign",
        "submit send",
        "copy",
        "share show",
        "report delete",
        "faq roadmap",
        "security legal",
        "twitter discord",
        "protected"
      ],
      "references": [
        "https://wormhole.app/Pp5DdP#3EpzsqLhw5lJdQ0Xe_mRQA",
        "https://www.virustotal.com/gui/collection/18b52f4087178dedfee577ab7e53c5a86e84c2a7f901fa796240247f4be76f32/iocs"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Disable_Duck",
        "id": "244325",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_244325/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 72127,
        "hostname": 16700,
        "URL": 50
      },
      "indicator_count": 88877,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 131,
      "modified_text": "197 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "openweb.bid",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "openweb.bid",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780449624.651096
}