{
  "type": "Domain",
  "indicator": "parrotchat.co",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/parrotchat.co",
    "alexa": "http://www.alexa.com/siteinfo/parrotchat.co",
    "indicator": "parrotchat.co",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 1524669061,
      "indicator": "parrotchat.co",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 1,
      "pulses": [
        {
          "id": "5ba136c3555f0f6a740209ae",
          "name": "Ongoing Android Malware Campaign Targets Palestinians",
          "description": "The APT-C-23 group targets victims in the Middle East, mainly in the Palestinian territories. In our research, we discovered that the group registered hundreds of domains and infected thousands of victims across more than 20 countries.",
          "modified": "2018-09-18T17:32:51.732000",
          "created": "2018-09-18T17:32:51.732000",
          "tags": [],
          "references": [
            "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
          ],
          "public": 1,
          "adversary": "APT-C-23",
          "targeted_countries": [
            "Palestine, State of"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 50,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "AlienVault",
            "id": "2",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
            "is_subscribed": true,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 225,
            "FileHash-SHA256": 125,
            "hostname": 5
          },
          "indicator_count": 355,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 386553,
          "modified_text": "2811 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
      ],
      "related": {
        "alienvault": {
          "adversary": [
            "APT-C-23"
          ],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 1,
  "pulses": [
    {
      "id": "5ba136c3555f0f6a740209ae",
      "name": "Ongoing Android Malware Campaign Targets Palestinians",
      "description": "The APT-C-23 group targets victims in the Middle East, mainly in the Palestinian territories. In our research, we discovered that the group registered hundreds of domains and infected thousands of victims across more than 20 countries.",
      "modified": "2018-09-18T17:32:51.732000",
      "created": "2018-09-18T17:32:51.732000",
      "tags": [],
      "references": [
        "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
      ],
      "public": 1,
      "adversary": "APT-C-23",
      "targeted_countries": [
        "Palestine, State of"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 50,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "AlienVault",
        "id": "2",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
        "is_subscribed": true,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 225,
        "FileHash-SHA256": 125,
        "hostname": 5
      },
      "indicator_count": 355,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 386553,
      "modified_text": "2811 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "parrotchat.co",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "parrotchat.co",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780205661.9526465
}