{
  "type": "Domain",
  "indicator": "renderfraction.call",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/renderfraction.call",
    "alexa": "http://www.alexa.com/siteinfo/renderfraction.call",
    "indicator": "renderfraction.call",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3418468016,
      "indicator": "renderfraction.call",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 11,
      "pulses": [
        {
          "id": "65708eb824dc4c51811f6de9",
          "name": "Indusface  - in YOUR face ;)",
          "description": "",
          "modified": "2023-12-06T15:09:44.273000",
          "created": "2023-12-06T15:09:44.273000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 307,
            "hostname": 333,
            "domain": 192,
            "URL": 1143,
            "FileHash-MD5": 1
          },
          "indicator_count": 1976,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "908 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708d657f0895a860febf8f",
          "name": "SafeFrame Container",
          "description": "",
          "modified": "2023-12-06T15:04:05.932000",
          "created": "2023-12-06T15:04:05.932000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1416,
            "domain": 2979,
            "URL": 8250,
            "hostname": 2262
          },
          "indicator_count": 14907,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 110,
          "modified_text": "908 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "65708c37c54dd9e78f85c0fa",
          "name": "\u7ea2\u674f\u89c6\u9891 malware",
          "description": "",
          "modified": "2023-12-06T14:59:03.859000",
          "created": "2023-12-06T14:59:03.859000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1686,
            "hostname": 2218,
            "URL": 5740,
            "domain": 901,
            "FileHash-MD5": 3
          },
          "indicator_count": 10548,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "908 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "62752a3d78ce35783bfc85cc",
          "name": "SafeFrame Container",
          "description": "If you want to know what is going to happen when you create a non-iterable object, try these three pieces of code in the form of a new \"word\" or \"phrase\".",
          "modified": "2022-06-05T00:03:45.266000",
          "created": "2022-05-06T14:01:33.267000",
          "tags": [
            "public",
            "typeof",
            "typeof define",
            "array",
            "typeerror",
            "typeof symbol",
            "error",
            "typeof enulle",
            "sdkversion",
            "internal",
            "date",
            "cnzzdata",
            "czuuid",
            "umdistinctid",
            "typeof e",
            "typeof t",
            "version",
            "swiper",
            "most",
            "copyright",
            "mit license",
            "april",
            "trident",
            "win32",
            "class",
            "lh",
            "vd",
            "function",
            "overlaylevel",
            "zdhxiong",
            "customevent",
            "symbol",
            "object",
            "string",
            "number",
            "null",
            "uint8array",
            "typeof b",
            "iframe",
            "android",
            "embed",
            "meta",
            "0x14a",
            "0x104",
            "0x97",
            "0xe1",
            "0x228",
            "0x12b",
            "0x14e",
            "0xf5",
            "0x11a",
            "0xc6",
            "sxa0",
            "typeof d",
            "closure library",
            "array int8array",
            "b1342177279",
            "regexp",
            "typeof r",
            "pseudo",
            "child",
            "typeof n",
            "template",
            "void",
            "this",
            "ienew ca",
            "quota",
            "aafunction",
            "dafunction",
            "gc",
            "trackpageview",
            "trackevent",
            "gtmmdcvhgd",
            "node",
            "element",
            "path",
            "reduceright",
            "p420",
            "gc3w7t6h5qw",
            "kafunction",
            "fafafa",
            "xlfunction",
            "kkfunction",
            "nkfunction",
            "qkfunction",
            "rkfunction",
            "skfunction",
            "span",
            "edge",
            "bad idp",
            "bad event",
            "crios",
            "invalid attempt",
            "afunction",
            "ufunction",
            "kfunction"
          ],
          "references": [
            "xfe-URL-himado.com-stix2-2.1-export.json",
            "xfe-IP-146.148.236.187-stix2-2.1-export.json",
            "xfe-URL-Psychz.net-stix2-2.1-export.json",
            "https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js",
            "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
            "https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js",
            "https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c",
            "https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD",
            "https://www.googletagmanager.com/gtag/js?id=UA-122335014-2",
            "https://himado.com/heihei/layui/layui.all.js",
            "https://securepubads.g.doubleclick.net/tag/js/gpt.js",
            "https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000",
            "https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js",
            "https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js",
            "https://himado.com/heihei/js/swiper.min.js",
            "https://cdn.onesignal.com/sdks/OneSignalSDK.js",
            "https://c.cnzz.com/core.php?web_id=1280305902&t=z",
            "https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902",
            "https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js",
            "https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html",
            "xfe-URL-Cnzz.com-stix2-2.1-export.json",
            "xfe-URL-Aliyun.com-stix2-2.1-export.json"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "Lh",
              "display_name": "Lh",
              "target": null
            },
            {
              "id": "Gc",
              "display_name": "Gc",
              "target": null
            },
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            },
            {
              "id": "Vd",
              "display_name": "Vd",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 16,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 2262,
            "URL": 8251,
            "FileHash-SHA256": 1416,
            "domain": 2979
          },
          "indicator_count": 14908,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "1457 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "628c310ac9ae8e3e8f352e3d",
          "name": "Indusface  - in YOUR face ;)",
          "description": "function D(t,e,n), as well as window.com, has been frozen by a single function, as part of a series of \"snoopers' checks\"...",
          "modified": "2022-05-24T01:12:42.216000",
          "created": "2022-05-24T01:12:42.216000",
          "tags": [
            "fontawesome",
            "font awesome",
            "free",
            "license",
            "cc by",
            "sil ofl",
            "code",
            "mit license",
            "uf007",
            "uf017",
            "segoe ui",
            "emoji",
            "woff2",
            "roboto",
            "helvetica neue",
            "arial",
            "apple color",
            "symbol",
            "noto color",
            "type",
            "getcookie",
            "mxqueryparams",
            "samesitenone",
            "secure",
            "mxcookie",
            "date",
            "null",
            "domain",
            "orgcode",
            "message",
            "apino",
            "allow",
            "close",
            "safari",
            "large safari",
            "subscribe",
            "segment1",
            "segment2",
            "pushengage",
            "click",
            "scroll",
            "body",
            "iframe",
            "false",
            "typeof e",
            "array",
            "typeof t",
            "swiper",
            "most",
            "copyright",
            "july",
            "android",
            "win32",
            "version",
            "typeof n",
            "typeerror",
            "startr",
            "endr",
            "default",
            "typeof",
            "defaulttype",
            "function",
            "error",
            "shown",
            "flip",
            "regexp",
            "mozt",
            "mstransitionend",
            "webkitt",
            "dom element",
            "ua83948896",
            "gtmpf7h94q",
            "vendor site",
            "widget id",
            "page url",
            "write",
            "message api",
            "february",
            "april",
            "june",
            "august",
            "fbcd",
            "398410357733708",
            "prop",
            "init",
            "autoconfig",
            "protocol",
            "adnxsdomain",
            "aoldomain",
            "adrolltpc",
            "26015787",
            "reduceright",
            "tracking file",
            "number",
            "string",
            "aw827450946",
            "uint8array",
            "fnumber",
            "dustmap",
            "void",
            "class",
            "attr",
            "pseudo",
            "child",
            "typeof module",
            "trackevent",
            "trackpageview",
            "register",
            "path",
            "download",
            "verify",
            "xsnull",
            "script",
            "closure library",
            "xdfunction",
            "typeof window",
            "syntaxerror",
            "xmlhttprequest",
            "samesitelax",
            "innull",
            "ennull",
            "typeof symbol",
            "boolean",
            "circular",
            "customevent",
            "cuxref",
            "new r",
            "infinity",
            "image",
            "pnull",
            "html",
            "style",
            "ctnull",
            "post",
            "uint32array",
            "fanull",
            "ynull",
            "config",
            "meta",
            "accept"
          ],
          "references": [
            "https://k.clarity.ms/s/0.6.34/clarity.js",
            "https://www.clarity.ms/tag/uet/26015787",
            "https://dc.cux.io/analyzer.js",
            "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
            "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
            "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
            "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
            "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
            "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
            "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
            "https://bat.bing.com/p/action/26015787.js",
            "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
            "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
            "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
            "https://s.adroll.com/j/sendrolling.js",
            "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
            "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
            "https://www.gartner.com/reviews/public/Widget/js/widget.js",
            "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
            "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
            "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
            "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
            "https://web.mxradon.com/t/Tracker.js",
            "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
            "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
            "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1144,
            "hostname": 333,
            "FileHash-SHA256": 307,
            "domain": 192,
            "FileHash-MD5": 1
          },
          "indicator_count": 1977,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "1469 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "62634f4db80546374654f4c4",
          "name": "frantech.ca - malware",
          "description": "T,t.F, t.f, is written in the same place as the following:t, d. F, has been added to the end of the document, as well as its own propertyDescriptor.",
          "modified": "2022-05-22T00:01:01.264000",
          "created": "2022-04-23T00:58:53.444000",
          "tags": [
            "overview",
            "typeof symbol",
            "error",
            "typeerror",
            "object",
            "typeof t",
            "string",
            "typeof e",
            "function",
            "array",
            "promise",
            "date",
            "target",
            "class",
            "path",
            "back",
            "bounce",
            "this",
            "iframe",
            "null",
            "0x105684",
            "0xb66229",
            "0xb9b329",
            "0x3eed40",
            "0x2923e0",
            "cookie",
            "0x1d2d25",
            "0x2d6b",
            "0x538ea5",
            "0x240c1a",
            "push",
            "shift",
            "open"
          ],
          "references": [
            "xfe-URL-https___my.frantech.ca_-stix2-2.1-export.json",
            "xfe-URL-frantech.ca-stix2-2.1-export.json",
            "https://my.frantech.ca/templates/lagom/assets/js/lagom-app.min.js?v=1.4.3",
            "https://my.frantech.ca/templates/lagom/assets/js/whmcs-custom.min.js?v=1.4.3"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 5,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 757,
            "hostname": 498,
            "domain": 311,
            "FileHash-SHA256": 21
          },
          "indicator_count": 1587,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "1471 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "62606584633e2b9a3bc935b9",
          "name": "\u7ea2\u674f\u89c6\u9891 malware",
          "description": "function s(t,e), o, is a new type of function, which throws new TypeError when it comes to trying to make a function out of its own language or its form.",
          "modified": "2022-05-20T00:01:19.453000",
          "created": "2022-04-20T19:56:52.162000",
          "tags": [
            "typeof t",
            "typeof define",
            "moztransform",
            "success",
            "error",
            "make sure",
            "stop",
            "ajax",
            "action",
            "click",
            "open",
            "active",
            "button",
            "toggle btn",
            "body",
            "scroll",
            "isotope",
            "preloader",
            "function",
            "javascript",
            "mit license",
            "typeof module",
            "gplv3",
            "license",
            "copyright",
            "metafizzy",
            "math",
            "typeof",
            "typeerror",
            "hidden",
            "show",
            "typeof n",
            "version",
            "hide",
            "focusin",
            "focusout",
            "shown",
            "startr",
            "endr",
            "federico zivolo",
            "distributed",
            "html",
            "statict",
            "flip",
            "regexp",
            "null",
            "void",
            "width",
            "object",
            "pseudo",
            "child",
            "class",
            "date",
            "accept",
            "webpackrequire",
            "name",
            "number",
            "arraybuffer",
            "iterator",
            "typedarray",
            "prototype",
            "string",
            "index",
            "meta",
            "target",
            "infinity",
            "zero",
            "epsilon",
            "observer",
            "android",
            "trim",
            "enumerate",
            "freeze",
            "internal",
            "bind",
            "window",
            "next",
            "find",
            "this",
            "rest",
            "middle",
            "canvas",
            "slidercaptcha",
            "createelement",
            "textdanger",
            "plugin",
            "rgba",
            "imagedata",
            "false",
            "touchstart",
            "trident",
            "applewebkit",
            "safari",
            "base",
            "presto",
            "gecko",
            "khtml",
            "micromessenger",
            "typeof e",
            "swiper",
            "most",
            "september",
            "customevent",
            "image",
            "typeof c",
            "twitter",
            "bootstrap",
            "rolemenu",
            "typeof f",
            "typeof g",
            "cookie plugin",
            "https",
            "klaus hartl",
            "register",
            "nodecommonjs",
            "factory",
            "jquery",
            "write",
            "typeof b",
            "array",
            "sufeffxa0",
            "attr",
            "\u706b\u7bad\u5185\u6d4b\u7b7e\u540d",
            "0x1d9131",
            "0x180bcc",
            "0x4b6177",
            "0x13f349",
            "0x3bcb54",
            "0xbbe80d",
            "0x57b7de",
            "0x2ea74e",
            "0x4fb0f2",
            "0x25f113",
            "push",
            "shift",
            "tencent",
            "barrio",
            "slice",
            "symbol",
            "typeof window",
            "maximum",
            "typeof symbol",
            "udc66udc67",
            "ud83d",
            "ufe0f",
            "ud83e",
            "udc68udc69",
            "udfcbudfcc",
            "u2640u2642",
            "ufe0fg",
            "ud83dudc6cud83c",
            "ud83dudc6dud83c",
            "welcome",
            "datav66d78640",
            "datav2f8052f5",
            "90deg",
            "datav5f1e575c",
            "datave97d7462",
            "helvetica neue",
            "helvetica",
            "10px",
            "pingfang sc",
            "arial",
            "45deg",
            "typenumber",
            "opacity0",
            "mozopacity0",
            "khtmlopacity0",
            "opacity100",
            "event",
            "boolean",
            "uint8array",
            "errordetails",
            "info",
            "checker",
            "generator",
            "blink",
            "keepalive",
            "4096",
            "unknown",
            "meteor",
            "rhino",
            "mini",
            "comment",
            "verify",
            "yeke",
            "codec",
            "media",
            "live",
            "speed",
            "headname",
            "axiostimeout",
            "apiurl",
            "bmi86hjtsk",
            "root",
            "length",
            "indexof",
            "x0ax20x20x20x20",
            "location",
            "0x10",
            "0x18",
            "history",
            "config",
            "cookie",
            "onload",
            "video",
            "afunction",
            "indexnotice",
            "sitehome",
            "x20trnf",
            "please",
            "strong"
          ],
          "references": [
            "xfe-URL-sys95.com-stix2-2.1-export.json",
            "https://2001.habyc.com/?channelNo=2001#/home",
            "https://sdk.51.la/event/js-sdk-event.min.js?u=JdoUNv3VSW0GHUpw",
            "https://2001.habyc.com/static/js/chunk-7d5d3bac.efb700c7.js",
            "https://sdk.51.la/js-sdk-pro.min.js",
            "https://2001.habyc.com/js/config.js",
            "xfe-URL-2001.habyc.com-stix2-2.1-export.json",
            "https://2001.habyc.com/static/js/chunk-vendors.9d7684f4.js",
            "xfe-URL-habyc.com-stix2-2.1-export.json",
            "https://2001.habyc.com/static/css/chunk-vendors.6a41b67e.css",
            "https://2001.habyc.com/static/css/app.88afcfd8.css",
            "https://2001.habyc.com/static/css/chunk-7d5d3bac.e1a32335.css",
            "https://2001.dwlww.com/?channelNo=2001#/home",
            "https://2001.dwlww.com/static/js/chunk-7d5d3bac.efb700c7.js",
            "https://2001.dwlww.com/js/config.js",
            "https://2001.dwlww.com/static/js/chunk-vendors.9d7684f4.js",
            "https://2001.dwlww.com/static/js/app.9d5d18d7.js",
            "https://2001.dwlww.com/static/css/chunk-vendors.6a41b67e.css",
            "https://2001.dwlww.com/static/css/app.88afcfd8.css",
            "https://2001.dwlww.com/static/css/chunk-7d5d3bac.e1a32335.css",
            "https://www.tidio.com/talk/kv6vcosd7tmhsetmarsoawzaglejnny4",
            "https://chatting.page/kv6vcosd7tmhsetmarsoawzaglejnny4",
            "https://widget-v4.tidiochat.com/code/kv6vcosd7tmhsetmarsoawzaglejnny4.js",
            "https://m4244.com:35003/",
            "https://www.8098.app:21568/?agent=7691755704",
            "https://www.8098.app:21568/js/jquery-1.11.3.min.js",
            "https://www.8098.app:21568/js/xinstall_inner_e.min.js?v=1004",
            "https://app.ynsdty.cn//package/GmCC6WISh",
            "https://app.ynsdty.cn/dist/js/jquery.min.js",
            "https://app.ynsdty.cn/dist/js/jquery.cookie.js",
            "https://app.ynsdty.cn/dist/vendors/bootstrap/js/bootstrap.min.js",
            "https://app.ynsdty.cn/dist/vendors/swiper/swiper.min.js",
            "https://app.ynsdty.cn/dist/js/app.base.js",
            "https://app.ynsdty.cn/dist/js/longbow.slidercaptcha.js",
            "https://app.ynsdty.cn/dist/vendors/core-js/core.js",
            "xfe-URL-sun.net.hk-stix2-2.1-export.json",
            "https://www.sunnetwork.com.sg/sun_21/js/vendor/jquery-3.5.0.min.js",
            "https://www.sunnetwork.com.sg/sun_21/js/popper.min.js",
            "https://www.sunnetwork.com.sg/sun_21/js/bootstrap.min.js",
            "https://www.sunnetwork.com.sg/sun_21/js/isotope.pkgd.min.js",
            "https://www.sunnetwork.com.sg/sun_21/js/imagesloaded.pkgd.min.js",
            "https://www.sunnetwork.com.sg/sun_21/js/main.js",
            "https://www.sunnetwork.com.sg/sun_21/js/ajax-form.js",
            "https://www.sunnetwork.com.sg/sun_21/js/slick.min.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1059",
              "name": "Command and Scripting Interpreter",
              "display_name": "T1059 - Command and Scripting Interpreter"
            },
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 901,
            "URL": 5740,
            "hostname": 2218,
            "FileHash-SHA256": 1686,
            "FileHash-MD5": 3
          },
          "indicator_count": 10548,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1473 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "624fff22683106d256390a89",
          "name": "'Chinese botnet",
          "description": "\u00c2\u00a31.3m (838m euros) - that is the amount of money the Chinese government has to spend on upgrading the country's economy - but how much is it going to cost?",
          "modified": "2022-05-08T09:06:05.710000",
          "created": "2022-04-08T09:23:46.746000",
          "tags": [
            "datav7a53b450",
            "microsoft yahei",
            "label",
            "arial",
            "verdana",
            "simsun",
            "simhei",
            "stheiti",
            "helvetica",
            "aba8a8",
            "font awesome",
            "license",
            "font",
            "sil ofl",
            "mit license",
            "woff2",
            "woff",
            "truetype",
            "fontawesome",
            "0xb6f109",
            "0x9e4f21",
            "0x464801",
            "0x21c094",
            "object",
            "0x54da69",
            "0x28e5ab",
            "promise",
            "0x3aef82",
            "0x12d16a",
            "this",
            "push",
            "window",
            "code",
            "date",
            "bind",
            "error",
            "path",
            "target",
            "middle",
            "null",
            "open",
            "download",
            "blank",
            "refresh",
            "config",
            "span",
            "mark",
            "canvas",
            "mask",
            "9999",
            "close",
            "shift",
            "android",
            "encrypt",
            "getclass",
            "checker",
            "agent",
            "4328",
            "trim",
            "service",
            "slice",
            "crypto",
            "stop",
            "7910",
            "zero",
            "checkbox",
            "format",
            "model",
            "spinner",
            "clickdownload",
            "meta",
            "sport",
            "click",
            "next",
            "class",
            "hammer",
            "body",
            "boolean",
            "number",
            "string",
            "array",
            "typeof t",
            "function",
            "regexp",
            "typeof e",
            "generator",
            "4096",
            "ping",
            "f6cf32",
            "modulenotfound",
            "n noticecontent",
            "typeerror",
            "circular",
            "infinite",
            "mouseevent",
            "dommousescroll",
            "lotteryhallhome",
            "void",
            "bubble",
            "vnode",
            "vuessrcontext",
            "swiper",
            "typeof o",
            "mozperspective",
            "msperspective",
            "tridentg",
            "event",
            "bscroll",
            "u200",
            "typeof s",
            "newatchman",
            "fetch",
            "timeout",
            "ofunction",
            "zfunction",
            "watchman",
            "dfunction",
            "domutils",
            "typeof n",
            "4294967295",
            "parseint",
            "utf8",
            "utils",
            "post",
            "channelcode",
            "0xa60881",
            "0x1e0610",
            "0x489cca",
            "0x4d5bd1",
            "0x1a7a9a",
            "0x3145fc",
            "0x2d9acb",
            "0xbf1b3e",
            "0x47699d",
            "cookie",
            "info",
            "jb3tu",
            "0x1d9131",
            "0x180bcc",
            "0x4b6177",
            "0x13f349",
            "0x3bcb54",
            "0xbbe80d",
            "0x57b7de",
            "0x2ea74e",
            "0x4fb0f2",
            "0x25f113",
            "tencent",
            "barrio",
            "\u77ed\u89c6\u9891",
            "\u641e\u7b11\u89c6\u9891",
            "\u89c6\u9891\u5206\u4eab",
            "\u514d\u8d39\u89c6\u9891",
            "\u5728\u7ebf\u89c6\u9891",
            "\u9884\u544a\u7247",
            "yuwvm",
            "g 18",
            "720p",
            "hd luna",
            "hd 99",
            "ktvp",
            "part",
            "hd h",
            "dykthr",
            "jquery",
            "titlestr",
            "viewport"
          ],
          "references": [
            "xfe-IP-154.36.230.14-stix2-2.0-export.json",
            "http://www.jxhykj1210.com/common.js",
            "http://www.jxhykj1210.com/tj.js",
            "https://17se.xyz/",
            "https://www.bibo18.app:2171/?agent=2207259251",
            "https://www.bibo18.app:2171/js/xinstall_inner_e.min.js?v=1004",
            "https://cstaticdun.126.net/load.min.js?v=2203141811",
            "https://www.shareinstall.com.cn/js/page/jshareinstall.min.js",
            "https://acstatic-dun.126.net/tool.min.js?t=1647252792143",
            "https://9755w.com:2188/m/js/2203141811-HomeLogin~LotteryHall~VnsLogin~activity~amhgLogin~aqvnsLogin~betnewLocgin~blrLogin~blushLogin~cLogin~6995ba01.js",
            "https://9755w.com:2188/m/js/2203141811-LotteryHall~agent-doc~cpxpjLogin~download~game~home~member~sports~vnsoLogin~vnstLogin2.js",
            "https://9755w.com:2188/m/js/2203141811-JieBei~YuEBao~agent-center-modec~agent-center-new~bet~game~home~invite~member.js",
            "https://9755w.com:2188/m/js/2203141811-LotteryHall~home.js",
            "https://9755w.com:2188/m/js/2203141811-home.js",
            "https://9755w.com:2188/m/js/2203141811-fhcpLogin.js",
            "https://9755w.com:2188/m/js/2203141811-view-page.js",
            "https://9755w.com:2188/m/js/2203141811-chunk-vendors.js",
            "https://9755w.com:2188/m/js/2203141811-index.js",
            "https://netdna.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css",
            "https://9755w.com:2188/m/css/fhcpLogin.css?v=2203141811"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 306,
            "URL": 1135,
            "FileHash-SHA256": 122,
            "domain": 172,
            "FileHash-MD5": 4
          },
          "indicator_count": 1739,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "1485 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "625088e80292028d4e82311c",
          "name": "Botnet-malware -lgmhgjm.com",
          "description": "The full list of names and names of people who have taken part in the 2016 Olympics and Paralympics in Rio de Janeiro, Brazil, as part of the Rio Games, and as well as the 2017 Olympics in Brazil.",
          "modified": "2022-05-08T00:03:14.586000",
          "created": "2022-04-08T19:11:36.165000",
          "tags": [
            "function",
            "param",
            "object",
            "return",
            "webpackrequire",
            "constructor",
            "clipboard",
            "typeof",
            "symbol",
            "typeerror",
            "error",
            "click",
            "null",
            "copy",
            "factory",
            "super",
            "date",
            "target",
            "mustflag",
            "html",
            "applewebkit",
            "ipad",
            "mqqbrowser",
            "base",
            "trident",
            "presto",
            "gecko",
            "khtml",
            "ios android",
            "android",
            "array",
            "2f2f2i2i0f",
            "eh0g",
            "exptable",
            "logtable",
            "typeof h",
            "typeof e",
            "regexp",
            "typeof n",
            "typeof t",
            "width",
            "typeof r",
            "pseudo",
            "class",
            "this",
            "accept",
            "false",
            "https",
            "zeno rocha",
            "typeof define",
            "select",
            "input",
            "textarea",
            "0x455d",
            "0x34260b",
            "0x4ce9d1",
            "avge",
            "tung",
            "3ctz",
            "n33m",
            "0x514351",
            "hn4d",
            "0x70c2f4",
            "push",
            "shift",
            "baidu",
            "instanceof",
            "adjust",
            "body",
            "nulli",
            "windowi",
            "typeof jquery",
            "tthis",
            "mspointerdown",
            "child",
            "sfunction",
            "microsoft yahei",
            "arial",
            "x20trnf",
            "version",
            "swiper",
            "most",
            "copyright",
            "mit license",
            "october",
            "win32",
            "meta",
            "parsefloat",
            "androidgi",
            "iphonegi",
            "\u77ed\u89c6\u9891",
            "\u641e\u7b11\u89c6\u9891",
            "\u89c6\u9891\u5206\u4eab",
            "\u514d\u8d39\u89c6\u9891",
            "\u5728\u7ebf\u89c6\u9891",
            "\u9884\u544a\u7247",
            "wifi",
            "saol",
            "fc2ppv12518005",
            "oretd633riana01",
            "hodv sex",
            "orec37502",
            "06inn01",
            "siro2661ol2401",
            "garea742kou01",
            "175cm9av",
            "attr",
            "typeof symbol",
            "root",
            "length",
            "indexof",
            "x0ax20x20x20x20",
            "location",
            "math",
            "0x10",
            "0x18",
            "history",
            "config",
            "slice",
            "cookie",
            "open",
            "onload",
            "adunit",
            "refresh",
            "style",
            "position",
            "creativetplid",
            "show",
            "tcmod",
            "tcheight",
            "height",
            "yahei",
            "truetype",
            "f8f8f8",
            "typeof module",
            "reserved",
            "18hdxxxx\u4e2d\u56fd",
            "\u5973\u4e3b\u7a7f\u8d8a\u88ab\u8089\u6765\u8089\u53bbnp",
            "\u7537\u753718\u7981\u6c61\u8089\u56fe\u65e0\u7801",
            "\u65e0\u7801\u4e9a\u6d32\u6210a\u4eba\u7247\u5728\u7ebf\u89c2\u770b",
            "ore572s04",
            "ore572s03",
            "ore572s02",
            "ore572s01",
            "fc2ppv117430501",
            "cmi1513707",
            "cmi1513706",
            "cmi1513705",
            "cmi1513704",
            "cmi1513703",
            "\u514d\u8d39\u89c6\u9891\u7231\u7231\u592a\u723d\u4e86\u7f51\u7ad9_\u8001\u8272\u9b3c\u5728\u7ebf\u7cbe\u54c1\u89c6\u9891\u5728\u7ebf\u89c2\u770b_\u767d\u6d01\u4e00\u591c\u88ab\u723d\u4e86\u4e03\u6b21_\u5fd8\u4e86\u6234\u80f8\u7f69\u88ab\u540c\u5b66\u6478\u4e86\u4e00\u8282\u8bfe",
            "viewport"
          ],
          "references": [
            "xfe-URL-lgmhgjm.com-stix2-2.0-export.json",
            "http://www.lgmhgjm.com/common.js",
            "http://www.lgmhgjm.com/tj.js",
            "http://www.sp385.com/",
            "http://avtv10.com",
            "http://9766.tv",
            "https://xc.6xc.tv/?channelCode=xiaosu03_8",
            "https://app.okoockec.xyz:8443/apps/v2/index1/0c1d6cd4e9634a3d?m=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiZzByUjNpMUczaEt0Sk5sZmVNSE44NEhjVDlDOVFTM2xEcm5pM1dIWG9UM1FBSklpR1phN01teTZOcjFxVVJIWVlhZnJPQkE9IiwiZXhwIjoxNjQ5NDQ0NDcyfQ.utSNnRI7C9FuWMUxhY4cufCJBIuHUk5vdk8Dj6WnXYs",
            "https://xc.6xc.tv/js/jquery-3.6.0.min.js",
            "https://xc.6xc.tv/css/index.css",
            "https://xctg07.cc/?channelCode=xiaosu03_8",
            "https://ad.abilm.info/bid?url=http%3A%2F%2Fkniveb.info%2F&frm=0&ref=http%3A%2F%2Fwww.sp385.com%2F&ic=1&pl=0&ml=0&sid=105:80:104:111:110:101:58:50:53:48:50:50:51:49:53:54:58:51:58:51:57:48:46:56:52:52&ps=20030107&lgs=0&zo=240&ws=390x844&gdm=0&iw=1&cpn=0&fid=5d80d32079e9fdb035e4886c32c6612e&hl=2&ihn=0&md=1&ns=undefined&np=undefined&pj=0&top=650&left=0&id=47&rid=ec5a07ef8f3e3f2c25ba75c7da106dcc&dcc=&dcl=&gvd=Apple%20Inc.&grr=Apple%20GPU&ct=unknown&diit=&dit=&cmn=",
            "http://sdk.51.la/js-sdk-pro.min.js",
            "http://sdk.51.la/event/js-sdk-event.min.js?u=JYWHYgTN1B6iZ5P2",
            "http://kniveb.info/template/9c/ads/gonggao.js",
            "http://kniveb.info/",
            "https://koban360.com/ky/?shareName=1736.com",
            "https://koban360.com/ky/js/flexible.js",
            "https://koban360.com/ky/js/swiper.min.js",
            "https://koban360.com/ky/js/jquery.min.js",
            "https://koban360.com/ky/css/m.css?vs=1.7",
            "https://libs.baidu.com/jquery/2.0.0/jquery.min.js",
            "https://xbt.0lunwen.com/3/js/flexible.js",
            "https://xbt.0lunwen.com/boinstall.js",
            "https://miaouuuc.com/?channelCode=852890&aid=852890",
            "https://miaouuuc.com/template/static/js/clipborad.min.js",
            "https://am96.vip/",
            "https://unpkg.com/jquery-1.10.2@1.10.2/jquery-1.10.2.min.js",
            "https://unpkg.com/jquery.qrcode@1.0.3/jquery.qrcode.min.js",
            "https://www.gootft.com/js/app.base.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
            "https://www.gootft.com/js/poplayer.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
            "https://unpkg.com/clipboard@2.0.8/dist/clipboard.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1547",
              "name": "Boot or Logon Autostart Execution",
              "display_name": "T1547 - Boot or Logon Autostart Execution"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 3,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 482,
            "URL": 1383,
            "FileHash-SHA256": 104,
            "domain": 199,
            "FileHash-MD5": 2,
            "FileHash-SHA1": 1
          },
          "indicator_count": 2171,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1485 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "624dbf641e6a04169629e662",
          "name": "Malware-USA",
          "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
          "modified": "2022-05-06T16:01:29.122000",
          "created": "2022-04-06T16:27:16.093000",
          "tags": [
            "dataaos",
            "100px00",
            "dataaosfade",
            "100px0",
            "dataaoszoom",
            "dataaosflip",
            "woff2",
            "fontface",
            "sans",
            "u0259",
            "u1e001eff",
            "u2020",
            "u20a020ab",
            "u20ad20cf",
            "u2113",
            "u2c602c7f",
            "reduceright",
            "number",
            "string",
            "gtl5jtn10ss",
            "regexp",
            "error",
            "r300",
            "copyright",
            "dafunction",
            "gafunction",
            "uint8array",
            "date",
            "path",
            "void",
            "const",
            "click",
            "select",
            "scroll",
            "mobile",
            "template",
            "template url",
            "license",
            "easy selector",
            "easy event",
            "easy",
            "back",
            "typeof e",
            "typeof t",
            "this",
            "main",
            "swiper",
            "button",
            "most",
            "mit license",
            "android",
            "win32",
            "null",
            "dblock",
            "email form",
            "validation",
            "action",
            "formdata",
            "api url",
            "typeof define",
            "typeof module",
            "gplv3",
            "metafizzy",
            "math",
            "plyr",
            "typeof symbol",
            "typeerror",
            "tnull",
            "cnull",
            "typeof",
            "inject",
            "playbook",
            "name",
            "getconfig",
            "default",
            "area",
            "event",
            "shadowroot",
            "boolean",
            "window",
            "trident",
            "body",
            "ofunction",
            "symbol",
            "mfunction",
            "sfunction",
            "quando",
            "quem",
            "fundada em",
            "informtica",
            "sistemas",
            "segurana",
            "softwares",
            "supermercados",
            "lojas",
            "restaurantes",
            "padarias"
          ],
          "references": [
            "http://www.shopsegsistemas.com.br/",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/js/main.js",
            "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
            "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
            "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
            "xfe-IP-50.116.87.164-stix2-2.0-export.json"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            },
            {
              "id": "Quando",
              "display_name": "Quando",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1498",
              "name": "Network Denial of Service",
              "display_name": "T1498 - Network Denial of Service"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 254,
            "URL": 815,
            "FileHash-SHA256": 168,
            "domain": 174
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1486 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "624dbf64e7682b3bf049129c",
          "name": "Malware-USA",
          "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
          "modified": "2022-05-06T16:01:29.122000",
          "created": "2022-04-06T16:27:16.842000",
          "tags": [
            "dataaos",
            "100px00",
            "dataaosfade",
            "100px0",
            "dataaoszoom",
            "dataaosflip",
            "woff2",
            "fontface",
            "sans",
            "u0259",
            "u1e001eff",
            "u2020",
            "u20a020ab",
            "u20ad20cf",
            "u2113",
            "u2c602c7f",
            "reduceright",
            "number",
            "string",
            "gtl5jtn10ss",
            "regexp",
            "error",
            "r300",
            "copyright",
            "dafunction",
            "gafunction",
            "uint8array",
            "date",
            "path",
            "void",
            "const",
            "click",
            "select",
            "scroll",
            "mobile",
            "template",
            "template url",
            "license",
            "easy selector",
            "easy event",
            "easy",
            "back",
            "typeof e",
            "typeof t",
            "this",
            "main",
            "swiper",
            "button",
            "most",
            "mit license",
            "android",
            "win32",
            "null",
            "dblock",
            "email form",
            "validation",
            "action",
            "formdata",
            "api url",
            "typeof define",
            "typeof module",
            "gplv3",
            "metafizzy",
            "math",
            "plyr",
            "typeof symbol",
            "typeerror",
            "tnull",
            "cnull",
            "typeof",
            "inject",
            "playbook",
            "name",
            "getconfig",
            "default",
            "area",
            "event",
            "shadowroot",
            "boolean",
            "window",
            "trident",
            "body",
            "ofunction",
            "symbol",
            "mfunction",
            "sfunction",
            "quando",
            "quem",
            "fundada em",
            "informtica",
            "sistemas",
            "segurana",
            "softwares",
            "supermercados",
            "lojas",
            "restaurantes",
            "padarias"
          ],
          "references": [
            "http://www.shopsegsistemas.com.br/",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
            "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
            "http://www.shopsegsistemas.com.br/assets/js/main.js",
            "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
            "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
            "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
            "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
            "xfe-IP-50.116.87.164-stix2-2.0-export.json"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [
            {
              "id": "ReduceRight",
              "display_name": "ReduceRight",
              "target": null
            },
            {
              "id": "Quando",
              "display_name": "Quando",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1140",
              "name": "Deobfuscate/Decode Files or Information",
              "display_name": "T1140 - Deobfuscate/Decode Files or Information"
            },
            {
              "id": "T1498",
              "name": "Network Denial of Service",
              "display_name": "T1498 - Network Denial of Service"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 254,
            "URL": 815,
            "FileHash-SHA256": 168,
            "domain": 174
          },
          "indicator_count": 1411,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "1486 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://m4244.com:35003/",
        "https://www.sunnetwork.com.sg/sun_21/js/slick.min.js",
        "https://xc.6xc.tv/js/jquery-3.6.0.min.js",
        "https://2001.habyc.com/static/css/chunk-vendors.6a41b67e.css",
        "https://c.cnzz.com/core.php?web_id=1280305902&t=z",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
        "https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000",
        "https://2001.habyc.com/static/css/app.88afcfd8.css",
        "https://sdk.51.la/js-sdk-pro.min.js",
        "https://9755w.com:2188/m/js/2203141811-LotteryHall~home.js",
        "https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js",
        "xfe-IP-146.148.236.187-stix2-2.1-export.json",
        "xfe-URL-frantech.ca-stix2-2.1-export.json",
        "https://www.gootft.com/js/poplayer.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
        "https://9755w.com:2188/m/js/2203141811-JieBei~YuEBao~agent-center-modec~agent-center-new~bet~game~home~invite~member.js",
        "https://9755w.com:2188/m/js/2203141811-home.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
        "http://sdk.51.la/event/js-sdk-event.min.js?u=JYWHYgTN1B6iZ5P2",
        "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
        "xfe-URL-himado.com-stix2-2.1-export.json",
        "https://unpkg.com/jquery-1.10.2@1.10.2/jquery-1.10.2.min.js",
        "https://xbt.0lunwen.com/3/js/flexible.js",
        "https://www.gartner.com/reviews/public/Widget/js/widget.js",
        "https://bat.bing.com/p/action/26015787.js",
        "https://my.frantech.ca/templates/lagom/assets/js/whmcs-custom.min.js?v=1.4.3",
        "http://kniveb.info/template/9c/ads/gonggao.js",
        "xfe-IP-154.36.230.14-stix2-2.0-export.json",
        "https://koban360.com/ky/?shareName=1736.com",
        "https://app.ynsdty.cn/dist/vendors/bootstrap/js/bootstrap.min.js",
        "https://am96.vip/",
        "https://2001.dwlww.com/static/css/chunk-7d5d3bac.e1a32335.css",
        "https://www.sunnetwork.com.sg/sun_21/js/imagesloaded.pkgd.min.js",
        "http://www.shopsegsistemas.com.br/",
        "https://libs.baidu.com/jquery/2.0.0/jquery.min.js",
        "https://koban360.com/ky/js/flexible.js",
        "http://sdk.51.la/js-sdk-pro.min.js",
        "https://2001.habyc.com/static/js/chunk-vendors.9d7684f4.js",
        "https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js",
        "https://himado.com/heihei/layui/layui.all.js",
        "https://www.8098.app:21568/?agent=7691755704",
        "https://app.ynsdty.cn/dist/js/jquery.min.js",
        "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
        "https://xctg07.cc/?channelCode=xiaosu03_8",
        "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
        "xfe-URL-Cnzz.com-stix2-2.1-export.json",
        "xfe-URL-2001.habyc.com-stix2-2.1-export.json",
        "http://9766.tv",
        "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
        "https://cstaticdun.126.net/load.min.js?v=2203141811",
        "https://unpkg.com/clipboard@2.0.8/dist/clipboard.js",
        "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
        "https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902",
        "https://chatting.page/kv6vcosd7tmhsetmarsoawzaglejnny4",
        "http://www.sp385.com/",
        "https://www.bibo18.app:2171/?agent=2207259251",
        "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
        "https://www.sunnetwork.com.sg/sun_21/js/ajax-form.js",
        "https://www.sunnetwork.com.sg/sun_21/js/popper.min.js",
        "https://xbt.0lunwen.com/boinstall.js",
        "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
        "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
        "https://2001.habyc.com/js/config.js",
        "https://app.ynsdty.cn/dist/vendors/core-js/core.js",
        "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
        "https://app.ynsdty.cn/dist/vendors/swiper/swiper.min.js",
        "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
        "https://2001.dwlww.com/static/js/app.9d5d18d7.js",
        "https://my.frantech.ca/templates/lagom/assets/js/lagom-app.min.js?v=1.4.3",
        "https://app.ynsdty.cn/dist/js/app.base.js",
        "https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js",
        "https://app.ynsdty.cn/dist/js/longbow.slidercaptcha.js",
        "https://www.8098.app:21568/js/jquery-1.11.3.min.js",
        "https://himado.com/heihei/js/swiper.min.js",
        "https://9755w.com:2188/m/js/2203141811-fhcpLogin.js",
        "https://www.sunnetwork.com.sg/sun_21/js/isotope.pkgd.min.js",
        "https://www.shareinstall.com.cn/js/page/jshareinstall.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
        "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
        "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
        "https://2001.dwlww.com/static/js/chunk-vendors.9d7684f4.js",
        "xfe-URL-sys95.com-stix2-2.1-export.json",
        "https://www.8098.app:21568/js/xinstall_inner_e.min.js?v=1004",
        "https://2001.habyc.com/static/js/chunk-7d5d3bac.efb700c7.js",
        "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
        "https://2001.habyc.com/static/css/chunk-7d5d3bac.e1a32335.css",
        "xfe-IP-50.116.87.164-stix2-2.0-export.json",
        "https://www.tidio.com/talk/kv6vcosd7tmhsetmarsoawzaglejnny4",
        "https://k.clarity.ms/s/0.6.34/clarity.js",
        "https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c",
        "https://9755w.com:2188/m/js/2203141811-index.js",
        "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
        "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
        "https://www.sunnetwork.com.sg/sun_21/js/bootstrap.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
        "https://widget-v4.tidiochat.com/code/kv6vcosd7tmhsetmarsoawzaglejnny4.js",
        "xfe-URL-https___my.frantech.ca_-stix2-2.1-export.json",
        "xfe-URL-Psychz.net-stix2-2.1-export.json",
        "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
        "https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD",
        "https://www.sunnetwork.com.sg/sun_21/js/main.js",
        "https://9755w.com:2188/m/css/fhcpLogin.css?v=2203141811",
        "https://9755w.com:2188/m/js/2203141811-chunk-vendors.js",
        "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css",
        "https://app.ynsdty.cn/dist/js/jquery.cookie.js",
        "https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js",
        "https://xc.6xc.tv/?channelCode=xiaosu03_8",
        "https://2001.dwlww.com/static/js/chunk-7d5d3bac.efb700c7.js",
        "https://2001.dwlww.com/?channelNo=2001#/home",
        "https://www.bibo18.app:2171/js/xinstall_inner_e.min.js?v=1004",
        "https://app.okoockec.xyz:8443/apps/v2/index1/0c1d6cd4e9634a3d?m=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiZzByUjNpMUczaEt0Sk5sZmVNSE44NEhjVDlDOVFTM2xEcm5pM1dIWG9UM1FBSklpR1phN01teTZOcjFxVVJIWVlhZnJPQkE9IiwiZXhwIjoxNjQ5NDQ0NDcyfQ.utSNnRI7C9FuWMUxhY4cufCJBIuHUk5vdk8Dj6WnXYs",
        "https://www.sunnetwork.com.sg/sun_21/js/vendor/jquery-3.5.0.min.js",
        "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
        "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
        "https://9755w.com:2188/m/js/2203141811-view-page.js",
        "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
        "https://www.clarity.ms/tag/uet/26015787",
        "xfe-URL-Aliyun.com-stix2-2.1-export.json",
        "https://s.adroll.com/j/sendrolling.js",
        "https://koban360.com/ky/js/swiper.min.js",
        "http://kniveb.info/",
        "https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js",
        "https://ad.abilm.info/bid?url=http%3A%2F%2Fkniveb.info%2F&frm=0&ref=http%3A%2F%2Fwww.sp385.com%2F&ic=1&pl=0&ml=0&sid=105:80:104:111:110:101:58:50:53:48:50:50:51:49:53:54:58:51:58:51:57:48:46:56:52:52&ps=20030107&lgs=0&zo=240&ws=390x844&gdm=0&iw=1&cpn=0&fid=5d80d32079e9fdb035e4886c32c6612e&hl=2&ihn=0&md=1&ns=undefined&np=undefined&pj=0&top=650&left=0&id=47&rid=ec5a07ef8f3e3f2c25ba75c7da106dcc&dcc=&dcl=&gvd=Apple%20Inc.&grr=Apple%20GPU&ct=unknown&diit=&dit=&cmn=",
        "https://www.gootft.com/js/app.base.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
        "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
        "https://app.ynsdty.cn//package/GmCC6WISh",
        "https://miaouuuc.com/template/static/js/clipborad.min.js",
        "https://www.googletagmanager.com/gtag/js?id=UA-122335014-2",
        "https://2001.dwlww.com/js/config.js",
        "http://www.lgmhgjm.com/tj.js",
        "https://koban360.com/ky/css/m.css?vs=1.7",
        "https://securepubads.g.doubleclick.net/tag/js/gpt.js",
        "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
        "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
        "http://www.lgmhgjm.com/common.js",
        "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
        "http://www.jxhykj1210.com/tj.js",
        "xfe-URL-habyc.com-stix2-2.1-export.json",
        "https://miaouuuc.com/?channelCode=852890&aid=852890",
        "https://acstatic-dun.126.net/tool.min.js?t=1647252792143",
        "https://2001.habyc.com/?channelNo=2001#/home",
        "https://2001.dwlww.com/static/css/app.88afcfd8.css",
        "https://cdn.onesignal.com/sdks/OneSignalSDK.js",
        "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
        "https://xc.6xc.tv/css/index.css",
        "https://koban360.com/ky/js/jquery.min.js",
        "https://2001.dwlww.com/static/css/chunk-vendors.6a41b67e.css",
        "https://sdk.51.la/event/js-sdk-event.min.js?u=JdoUNv3VSW0GHUpw",
        "https://netdna.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css",
        "https://9755w.com:2188/m/js/2203141811-LotteryHall~agent-doc~cpxpjLogin~download~game~home~member~sports~vnsoLogin~vnstLogin2.js",
        "https://17se.xyz/",
        "https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html",
        "xfe-URL-lgmhgjm.com-stix2-2.0-export.json",
        "https://web.mxradon.com/t/Tracker.js",
        "https://9755w.com:2188/m/js/2203141811-HomeLogin~LotteryHall~VnsLogin~activity~amhgLogin~aqvnsLogin~betnewLocgin~blrLogin~blushLogin~cLogin~6995ba01.js",
        "https://dc.cux.io/analyzer.js",
        "http://avtv10.com",
        "https://unpkg.com/jquery.qrcode@1.0.3/jquery.qrcode.min.js",
        "http://www.shopsegsistemas.com.br/assets/js/main.js",
        "xfe-URL-sun.net.hk-stix2-2.1-export.json",
        "http://www.jxhykj1210.com/common.js"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "Quando",
            "Gc",
            "Vd",
            "Reduceright",
            "Lh"
          ],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 11,
  "pulses": [
    {
      "id": "65708eb824dc4c51811f6de9",
      "name": "Indusface  - in YOUR face ;)",
      "description": "",
      "modified": "2023-12-06T15:09:44.273000",
      "created": "2023-12-06T15:09:44.273000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 307,
        "hostname": 333,
        "domain": 192,
        "URL": 1143,
        "FileHash-MD5": 1
      },
      "indicator_count": 1976,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 110,
      "modified_text": "908 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708d657f0895a860febf8f",
      "name": "SafeFrame Container",
      "description": "",
      "modified": "2023-12-06T15:04:05.932000",
      "created": "2023-12-06T15:04:05.932000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1416,
        "domain": 2979,
        "URL": 8250,
        "hostname": 2262
      },
      "indicator_count": 14907,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 110,
      "modified_text": "908 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "65708c37c54dd9e78f85c0fa",
      "name": "\u7ea2\u674f\u89c6\u9891 malware",
      "description": "",
      "modified": "2023-12-06T14:59:03.859000",
      "created": "2023-12-06T14:59:03.859000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1686,
        "hostname": 2218,
        "URL": 5740,
        "domain": 901,
        "FileHash-MD5": 3
      },
      "indicator_count": 10548,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "908 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "62752a3d78ce35783bfc85cc",
      "name": "SafeFrame Container",
      "description": "If you want to know what is going to happen when you create a non-iterable object, try these three pieces of code in the form of a new \"word\" or \"phrase\".",
      "modified": "2022-06-05T00:03:45.266000",
      "created": "2022-05-06T14:01:33.267000",
      "tags": [
        "public",
        "typeof",
        "typeof define",
        "array",
        "typeerror",
        "typeof symbol",
        "error",
        "typeof enulle",
        "sdkversion",
        "internal",
        "date",
        "cnzzdata",
        "czuuid",
        "umdistinctid",
        "typeof e",
        "typeof t",
        "version",
        "swiper",
        "most",
        "copyright",
        "mit license",
        "april",
        "trident",
        "win32",
        "class",
        "lh",
        "vd",
        "function",
        "overlaylevel",
        "zdhxiong",
        "customevent",
        "symbol",
        "object",
        "string",
        "number",
        "null",
        "uint8array",
        "typeof b",
        "iframe",
        "android",
        "embed",
        "meta",
        "0x14a",
        "0x104",
        "0x97",
        "0xe1",
        "0x228",
        "0x12b",
        "0x14e",
        "0xf5",
        "0x11a",
        "0xc6",
        "sxa0",
        "typeof d",
        "closure library",
        "array int8array",
        "b1342177279",
        "regexp",
        "typeof r",
        "pseudo",
        "child",
        "typeof n",
        "template",
        "void",
        "this",
        "ienew ca",
        "quota",
        "aafunction",
        "dafunction",
        "gc",
        "trackpageview",
        "trackevent",
        "gtmmdcvhgd",
        "node",
        "element",
        "path",
        "reduceright",
        "p420",
        "gc3w7t6h5qw",
        "kafunction",
        "fafafa",
        "xlfunction",
        "kkfunction",
        "nkfunction",
        "qkfunction",
        "rkfunction",
        "skfunction",
        "span",
        "edge",
        "bad idp",
        "bad event",
        "crios",
        "invalid attempt",
        "afunction",
        "ufunction",
        "kfunction"
      ],
      "references": [
        "xfe-URL-himado.com-stix2-2.1-export.json",
        "xfe-IP-146.148.236.187-stix2-2.1-export.json",
        "xfe-URL-Psychz.net-stix2-2.1-export.json",
        "https://cdn.ampproject.org/rtv/012204221712000/amp4ads-host-v0.js",
        "https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.iTmf4rxOyWc.O/m=auth2/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-LTnDn-AS2QlMWYZdnaV1OuFR7Iw/cb=gapi.loaded_0?le=scs",
        "https://securepubads.g.doubleclick.net/gpt/pubads_impl_page_level_ads_2022050201.js",
        "https://www.googletagmanager.com/gtag/js?id=G-C3W7T6H5QW&l=dataLayer&cx=c",
        "https://www.googletagmanager.com/gtm.js?id=GTM-MDCVHGD",
        "https://www.googletagmanager.com/gtag/js?id=UA-122335014-2",
        "https://himado.com/heihei/layui/layui.all.js",
        "https://securepubads.g.doubleclick.net/tag/js/gpt.js",
        "https://himado.com/cdn-cgi/challenge-platform/h/g/scripts/invisible.js?ts=1651842000",
        "https://securepubads.g.doubleclick.net/gpt/pubads_impl_2022050201.js",
        "https://himado.com/heihei/node_modules/mdui/dist/js/mdui.min.js",
        "https://himado.com/heihei/js/swiper.min.js",
        "https://cdn.onesignal.com/sdks/OneSignalSDK.js",
        "https://c.cnzz.com/core.php?web_id=1280305902&t=z",
        "https://s4.cnzz.com/z_stat.php?id=1280305902&web_id=1280305902",
        "https://www.gstatic.com/firebasejs/8.1.2/firebase-app.js",
        "https://281cecd8ae73dff542e13679e60d5fb9.safeframe.googlesyndication.com/safeframe/1-0-38/html/container.html",
        "xfe-URL-Cnzz.com-stix2-2.1-export.json",
        "xfe-URL-Aliyun.com-stix2-2.1-export.json"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "Lh",
          "display_name": "Lh",
          "target": null
        },
        {
          "id": "Gc",
          "display_name": "Gc",
          "target": null
        },
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        },
        {
          "id": "Vd",
          "display_name": "Vd",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 16,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 2262,
        "URL": 8251,
        "FileHash-SHA256": 1416,
        "domain": 2979
      },
      "indicator_count": 14908,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "1457 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "628c310ac9ae8e3e8f352e3d",
      "name": "Indusface  - in YOUR face ;)",
      "description": "function D(t,e,n), as well as window.com, has been frozen by a single function, as part of a series of \"snoopers' checks\"...",
      "modified": "2022-05-24T01:12:42.216000",
      "created": "2022-05-24T01:12:42.216000",
      "tags": [
        "fontawesome",
        "font awesome",
        "free",
        "license",
        "cc by",
        "sil ofl",
        "code",
        "mit license",
        "uf007",
        "uf017",
        "segoe ui",
        "emoji",
        "woff2",
        "roboto",
        "helvetica neue",
        "arial",
        "apple color",
        "symbol",
        "noto color",
        "type",
        "getcookie",
        "mxqueryparams",
        "samesitenone",
        "secure",
        "mxcookie",
        "date",
        "null",
        "domain",
        "orgcode",
        "message",
        "apino",
        "allow",
        "close",
        "safari",
        "large safari",
        "subscribe",
        "segment1",
        "segment2",
        "pushengage",
        "click",
        "scroll",
        "body",
        "iframe",
        "false",
        "typeof e",
        "array",
        "typeof t",
        "swiper",
        "most",
        "copyright",
        "july",
        "android",
        "win32",
        "version",
        "typeof n",
        "typeerror",
        "startr",
        "endr",
        "default",
        "typeof",
        "defaulttype",
        "function",
        "error",
        "shown",
        "flip",
        "regexp",
        "mozt",
        "mstransitionend",
        "webkitt",
        "dom element",
        "ua83948896",
        "gtmpf7h94q",
        "vendor site",
        "widget id",
        "page url",
        "write",
        "message api",
        "february",
        "april",
        "june",
        "august",
        "fbcd",
        "398410357733708",
        "prop",
        "init",
        "autoconfig",
        "protocol",
        "adnxsdomain",
        "aoldomain",
        "adrolltpc",
        "26015787",
        "reduceright",
        "tracking file",
        "number",
        "string",
        "aw827450946",
        "uint8array",
        "fnumber",
        "dustmap",
        "void",
        "class",
        "attr",
        "pseudo",
        "child",
        "typeof module",
        "trackevent",
        "trackpageview",
        "register",
        "path",
        "download",
        "verify",
        "xsnull",
        "script",
        "closure library",
        "xdfunction",
        "typeof window",
        "syntaxerror",
        "xmlhttprequest",
        "samesitelax",
        "innull",
        "ennull",
        "typeof symbol",
        "boolean",
        "circular",
        "customevent",
        "cuxref",
        "new r",
        "infinity",
        "image",
        "pnull",
        "html",
        "style",
        "ctnull",
        "post",
        "uint32array",
        "fanull",
        "ynull",
        "config",
        "meta",
        "accept"
      ],
      "references": [
        "https://k.clarity.ms/s/0.6.34/clarity.js",
        "https://www.clarity.ms/tag/uet/26015787",
        "https://dc.cux.io/analyzer.js",
        "https://sc.lfeeder.com/lftracker_v1_kn9Eq4R1l2K7RlvP.js",
        "https://www.google-analytics.com/gtm/js?id=GTM-PF7H94Q&t=gartner&cid=559436367.1653353775",
        "https://www.googletagmanager.com/gtm.js?id=GTM-PMC6JX",
        "https://www.indusface.com/js/fontawesome.js.pagespeed.jm.X4kSHwBNxI.js",
        "https://www.indusface.com/js/jquery.3.5.1.min.js.pagespeed.jm.A8biqtTJrt.js",
        "https://www.googletagmanager.com/gtag/js?id=AW-827450946",
        "https://tracking.g2crowd.com/attribution_tracking/conversions/2226.js?p=https://www.indusface.com/&e=",
        "https://bat.bing.com/p/action/26015787.js",
        "https://s.adroll.com/j/pre/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR/index.js",
        "https://d.adroll.com/consent/check/Q7CW4G7ZJJGWDLUB76P5IV?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&_s=1316674c131c34cc157a9ad9119512a2&_b=2",
        "https://d.adroll.com/pixel/Q7CW4G7ZJJGWDLUB76P5IV/WH2M5MREOVC4HNKNZPPJZR?adroll_fpc=7c06a492879ac231294c1fe2e6e394f3-1653353535991&arrfrr=https%3A%2F%2Fwww.indusface.com%2F&pv=54603716107.79724&cookie=BIJ6M3OZKNCW7OIMIJSZED%3A2%7CWH2M5MREOVC4HNKNZPPJZR%3A2%7CQ7CW4G7ZJJGWDLUB76P5IV%3A2&adroll_s_ref=&keyw=&adroll_external_data=",
        "https://s.adroll.com/j/sendrolling.js",
        "https://web.mxradon.com/t/WebTracker.aspx?p1=18917&p2=Web%20Application%20Security%2C%20WAF%2C%20SSL%20Certificates&p3=-1&p4=&p5=1&p6=8415a029-248f-4eeb-bc18-338560430ff7&p7=&p8=&p9=0",
        "https://trackcmp.net/visit?actid=223422163&e=&r=&u=https%3A%2F%2Fwww.indusface.com%2F",
        "https://www.gartner.com/reviews/public/Widget/js/widget.js",
        "https://www.indusface.com/js/cookieconsent.min.js.pagespeed.jm.FCA-2RWV9s.js",
        "https://www.indusface.com/js/popper.min.js+bootstrap.min.js+modernizr-custom.js+menu.js.pagespeed.jc.WlixBHq4Fv.js",
        "https://www.indusface.com/js/swiper.min.js.pagespeed.jm.47RtcloJQ-.js",
        "https://clientcdn.pushengage.com/core/80780b73b5a3f4655fee62041e51f1be.js",
        "https://web.mxradon.com/t/Tracker.js",
        "https://www.indusface.com/css/A.font-styles1.css+bootstrap.css+skin.css+responsive.css+menu.css+swiper.min.css,Mcc.nAV12exFII.css.pagespeed.cf.a_yWJedOjY.css",
        "https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css",
        "https://www.indusface.com/css/A.cookieconsent.min.css.pagespeed.cf.t1fRd9Ouvj.css"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 9,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1144,
        "hostname": 333,
        "FileHash-SHA256": 307,
        "domain": 192,
        "FileHash-MD5": 1
      },
      "indicator_count": 1977,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "1469 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "62634f4db80546374654f4c4",
      "name": "frantech.ca - malware",
      "description": "T,t.F, t.f, is written in the same place as the following:t, d. F, has been added to the end of the document, as well as its own propertyDescriptor.",
      "modified": "2022-05-22T00:01:01.264000",
      "created": "2022-04-23T00:58:53.444000",
      "tags": [
        "overview",
        "typeof symbol",
        "error",
        "typeerror",
        "object",
        "typeof t",
        "string",
        "typeof e",
        "function",
        "array",
        "promise",
        "date",
        "target",
        "class",
        "path",
        "back",
        "bounce",
        "this",
        "iframe",
        "null",
        "0x105684",
        "0xb66229",
        "0xb9b329",
        "0x3eed40",
        "0x2923e0",
        "cookie",
        "0x1d2d25",
        "0x2d6b",
        "0x538ea5",
        "0x240c1a",
        "push",
        "shift",
        "open"
      ],
      "references": [
        "xfe-URL-https___my.frantech.ca_-stix2-2.1-export.json",
        "xfe-URL-frantech.ca-stix2-2.1-export.json",
        "https://my.frantech.ca/templates/lagom/assets/js/lagom-app.min.js?v=1.4.3",
        "https://my.frantech.ca/templates/lagom/assets/js/whmcs-custom.min.js?v=1.4.3"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 5,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 757,
        "hostname": 498,
        "domain": 311,
        "FileHash-SHA256": 21
      },
      "indicator_count": 1587,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "1471 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "62606584633e2b9a3bc935b9",
      "name": "\u7ea2\u674f\u89c6\u9891 malware",
      "description": "function s(t,e), o, is a new type of function, which throws new TypeError when it comes to trying to make a function out of its own language or its form.",
      "modified": "2022-05-20T00:01:19.453000",
      "created": "2022-04-20T19:56:52.162000",
      "tags": [
        "typeof t",
        "typeof define",
        "moztransform",
        "success",
        "error",
        "make sure",
        "stop",
        "ajax",
        "action",
        "click",
        "open",
        "active",
        "button",
        "toggle btn",
        "body",
        "scroll",
        "isotope",
        "preloader",
        "function",
        "javascript",
        "mit license",
        "typeof module",
        "gplv3",
        "license",
        "copyright",
        "metafizzy",
        "math",
        "typeof",
        "typeerror",
        "hidden",
        "show",
        "typeof n",
        "version",
        "hide",
        "focusin",
        "focusout",
        "shown",
        "startr",
        "endr",
        "federico zivolo",
        "distributed",
        "html",
        "statict",
        "flip",
        "regexp",
        "null",
        "void",
        "width",
        "object",
        "pseudo",
        "child",
        "class",
        "date",
        "accept",
        "webpackrequire",
        "name",
        "number",
        "arraybuffer",
        "iterator",
        "typedarray",
        "prototype",
        "string",
        "index",
        "meta",
        "target",
        "infinity",
        "zero",
        "epsilon",
        "observer",
        "android",
        "trim",
        "enumerate",
        "freeze",
        "internal",
        "bind",
        "window",
        "next",
        "find",
        "this",
        "rest",
        "middle",
        "canvas",
        "slidercaptcha",
        "createelement",
        "textdanger",
        "plugin",
        "rgba",
        "imagedata",
        "false",
        "touchstart",
        "trident",
        "applewebkit",
        "safari",
        "base",
        "presto",
        "gecko",
        "khtml",
        "micromessenger",
        "typeof e",
        "swiper",
        "most",
        "september",
        "customevent",
        "image",
        "typeof c",
        "twitter",
        "bootstrap",
        "rolemenu",
        "typeof f",
        "typeof g",
        "cookie plugin",
        "https",
        "klaus hartl",
        "register",
        "nodecommonjs",
        "factory",
        "jquery",
        "write",
        "typeof b",
        "array",
        "sufeffxa0",
        "attr",
        "\u706b\u7bad\u5185\u6d4b\u7b7e\u540d",
        "0x1d9131",
        "0x180bcc",
        "0x4b6177",
        "0x13f349",
        "0x3bcb54",
        "0xbbe80d",
        "0x57b7de",
        "0x2ea74e",
        "0x4fb0f2",
        "0x25f113",
        "push",
        "shift",
        "tencent",
        "barrio",
        "slice",
        "symbol",
        "typeof window",
        "maximum",
        "typeof symbol",
        "udc66udc67",
        "ud83d",
        "ufe0f",
        "ud83e",
        "udc68udc69",
        "udfcbudfcc",
        "u2640u2642",
        "ufe0fg",
        "ud83dudc6cud83c",
        "ud83dudc6dud83c",
        "welcome",
        "datav66d78640",
        "datav2f8052f5",
        "90deg",
        "datav5f1e575c",
        "datave97d7462",
        "helvetica neue",
        "helvetica",
        "10px",
        "pingfang sc",
        "arial",
        "45deg",
        "typenumber",
        "opacity0",
        "mozopacity0",
        "khtmlopacity0",
        "opacity100",
        "event",
        "boolean",
        "uint8array",
        "errordetails",
        "info",
        "checker",
        "generator",
        "blink",
        "keepalive",
        "4096",
        "unknown",
        "meteor",
        "rhino",
        "mini",
        "comment",
        "verify",
        "yeke",
        "codec",
        "media",
        "live",
        "speed",
        "headname",
        "axiostimeout",
        "apiurl",
        "bmi86hjtsk",
        "root",
        "length",
        "indexof",
        "x0ax20x20x20x20",
        "location",
        "0x10",
        "0x18",
        "history",
        "config",
        "cookie",
        "onload",
        "video",
        "afunction",
        "indexnotice",
        "sitehome",
        "x20trnf",
        "please",
        "strong"
      ],
      "references": [
        "xfe-URL-sys95.com-stix2-2.1-export.json",
        "https://2001.habyc.com/?channelNo=2001#/home",
        "https://sdk.51.la/event/js-sdk-event.min.js?u=JdoUNv3VSW0GHUpw",
        "https://2001.habyc.com/static/js/chunk-7d5d3bac.efb700c7.js",
        "https://sdk.51.la/js-sdk-pro.min.js",
        "https://2001.habyc.com/js/config.js",
        "xfe-URL-2001.habyc.com-stix2-2.1-export.json",
        "https://2001.habyc.com/static/js/chunk-vendors.9d7684f4.js",
        "xfe-URL-habyc.com-stix2-2.1-export.json",
        "https://2001.habyc.com/static/css/chunk-vendors.6a41b67e.css",
        "https://2001.habyc.com/static/css/app.88afcfd8.css",
        "https://2001.habyc.com/static/css/chunk-7d5d3bac.e1a32335.css",
        "https://2001.dwlww.com/?channelNo=2001#/home",
        "https://2001.dwlww.com/static/js/chunk-7d5d3bac.efb700c7.js",
        "https://2001.dwlww.com/js/config.js",
        "https://2001.dwlww.com/static/js/chunk-vendors.9d7684f4.js",
        "https://2001.dwlww.com/static/js/app.9d5d18d7.js",
        "https://2001.dwlww.com/static/css/chunk-vendors.6a41b67e.css",
        "https://2001.dwlww.com/static/css/app.88afcfd8.css",
        "https://2001.dwlww.com/static/css/chunk-7d5d3bac.e1a32335.css",
        "https://www.tidio.com/talk/kv6vcosd7tmhsetmarsoawzaglejnny4",
        "https://chatting.page/kv6vcosd7tmhsetmarsoawzaglejnny4",
        "https://widget-v4.tidiochat.com/code/kv6vcosd7tmhsetmarsoawzaglejnny4.js",
        "https://m4244.com:35003/",
        "https://www.8098.app:21568/?agent=7691755704",
        "https://www.8098.app:21568/js/jquery-1.11.3.min.js",
        "https://www.8098.app:21568/js/xinstall_inner_e.min.js?v=1004",
        "https://app.ynsdty.cn//package/GmCC6WISh",
        "https://app.ynsdty.cn/dist/js/jquery.min.js",
        "https://app.ynsdty.cn/dist/js/jquery.cookie.js",
        "https://app.ynsdty.cn/dist/vendors/bootstrap/js/bootstrap.min.js",
        "https://app.ynsdty.cn/dist/vendors/swiper/swiper.min.js",
        "https://app.ynsdty.cn/dist/js/app.base.js",
        "https://app.ynsdty.cn/dist/js/longbow.slidercaptcha.js",
        "https://app.ynsdty.cn/dist/vendors/core-js/core.js",
        "xfe-URL-sun.net.hk-stix2-2.1-export.json",
        "https://www.sunnetwork.com.sg/sun_21/js/vendor/jquery-3.5.0.min.js",
        "https://www.sunnetwork.com.sg/sun_21/js/popper.min.js",
        "https://www.sunnetwork.com.sg/sun_21/js/bootstrap.min.js",
        "https://www.sunnetwork.com.sg/sun_21/js/isotope.pkgd.min.js",
        "https://www.sunnetwork.com.sg/sun_21/js/imagesloaded.pkgd.min.js",
        "https://www.sunnetwork.com.sg/sun_21/js/main.js",
        "https://www.sunnetwork.com.sg/sun_21/js/ajax-form.js",
        "https://www.sunnetwork.com.sg/sun_21/js/slick.min.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1059",
          "name": "Command and Scripting Interpreter",
          "display_name": "T1059 - Command and Scripting Interpreter"
        },
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 8,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 901,
        "URL": 5740,
        "hostname": 2218,
        "FileHash-SHA256": 1686,
        "FileHash-MD5": 3
      },
      "indicator_count": 10548,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1473 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "624fff22683106d256390a89",
      "name": "'Chinese botnet",
      "description": "\u00c2\u00a31.3m (838m euros) - that is the amount of money the Chinese government has to spend on upgrading the country's economy - but how much is it going to cost?",
      "modified": "2022-05-08T09:06:05.710000",
      "created": "2022-04-08T09:23:46.746000",
      "tags": [
        "datav7a53b450",
        "microsoft yahei",
        "label",
        "arial",
        "verdana",
        "simsun",
        "simhei",
        "stheiti",
        "helvetica",
        "aba8a8",
        "font awesome",
        "license",
        "font",
        "sil ofl",
        "mit license",
        "woff2",
        "woff",
        "truetype",
        "fontawesome",
        "0xb6f109",
        "0x9e4f21",
        "0x464801",
        "0x21c094",
        "object",
        "0x54da69",
        "0x28e5ab",
        "promise",
        "0x3aef82",
        "0x12d16a",
        "this",
        "push",
        "window",
        "code",
        "date",
        "bind",
        "error",
        "path",
        "target",
        "middle",
        "null",
        "open",
        "download",
        "blank",
        "refresh",
        "config",
        "span",
        "mark",
        "canvas",
        "mask",
        "9999",
        "close",
        "shift",
        "android",
        "encrypt",
        "getclass",
        "checker",
        "agent",
        "4328",
        "trim",
        "service",
        "slice",
        "crypto",
        "stop",
        "7910",
        "zero",
        "checkbox",
        "format",
        "model",
        "spinner",
        "clickdownload",
        "meta",
        "sport",
        "click",
        "next",
        "class",
        "hammer",
        "body",
        "boolean",
        "number",
        "string",
        "array",
        "typeof t",
        "function",
        "regexp",
        "typeof e",
        "generator",
        "4096",
        "ping",
        "f6cf32",
        "modulenotfound",
        "n noticecontent",
        "typeerror",
        "circular",
        "infinite",
        "mouseevent",
        "dommousescroll",
        "lotteryhallhome",
        "void",
        "bubble",
        "vnode",
        "vuessrcontext",
        "swiper",
        "typeof o",
        "mozperspective",
        "msperspective",
        "tridentg",
        "event",
        "bscroll",
        "u200",
        "typeof s",
        "newatchman",
        "fetch",
        "timeout",
        "ofunction",
        "zfunction",
        "watchman",
        "dfunction",
        "domutils",
        "typeof n",
        "4294967295",
        "parseint",
        "utf8",
        "utils",
        "post",
        "channelcode",
        "0xa60881",
        "0x1e0610",
        "0x489cca",
        "0x4d5bd1",
        "0x1a7a9a",
        "0x3145fc",
        "0x2d9acb",
        "0xbf1b3e",
        "0x47699d",
        "cookie",
        "info",
        "jb3tu",
        "0x1d9131",
        "0x180bcc",
        "0x4b6177",
        "0x13f349",
        "0x3bcb54",
        "0xbbe80d",
        "0x57b7de",
        "0x2ea74e",
        "0x4fb0f2",
        "0x25f113",
        "tencent",
        "barrio",
        "\u77ed\u89c6\u9891",
        "\u641e\u7b11\u89c6\u9891",
        "\u89c6\u9891\u5206\u4eab",
        "\u514d\u8d39\u89c6\u9891",
        "\u5728\u7ebf\u89c6\u9891",
        "\u9884\u544a\u7247",
        "yuwvm",
        "g 18",
        "720p",
        "hd luna",
        "hd 99",
        "ktvp",
        "part",
        "hd h",
        "dykthr",
        "jquery",
        "titlestr",
        "viewport"
      ],
      "references": [
        "xfe-IP-154.36.230.14-stix2-2.0-export.json",
        "http://www.jxhykj1210.com/common.js",
        "http://www.jxhykj1210.com/tj.js",
        "https://17se.xyz/",
        "https://www.bibo18.app:2171/?agent=2207259251",
        "https://www.bibo18.app:2171/js/xinstall_inner_e.min.js?v=1004",
        "https://cstaticdun.126.net/load.min.js?v=2203141811",
        "https://www.shareinstall.com.cn/js/page/jshareinstall.min.js",
        "https://acstatic-dun.126.net/tool.min.js?t=1647252792143",
        "https://9755w.com:2188/m/js/2203141811-HomeLogin~LotteryHall~VnsLogin~activity~amhgLogin~aqvnsLogin~betnewLocgin~blrLogin~blushLogin~cLogin~6995ba01.js",
        "https://9755w.com:2188/m/js/2203141811-LotteryHall~agent-doc~cpxpjLogin~download~game~home~member~sports~vnsoLogin~vnstLogin2.js",
        "https://9755w.com:2188/m/js/2203141811-JieBei~YuEBao~agent-center-modec~agent-center-new~bet~game~home~invite~member.js",
        "https://9755w.com:2188/m/js/2203141811-LotteryHall~home.js",
        "https://9755w.com:2188/m/js/2203141811-home.js",
        "https://9755w.com:2188/m/js/2203141811-fhcpLogin.js",
        "https://9755w.com:2188/m/js/2203141811-view-page.js",
        "https://9755w.com:2188/m/js/2203141811-chunk-vendors.js",
        "https://9755w.com:2188/m/js/2203141811-index.js",
        "https://netdna.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css",
        "https://9755w.com:2188/m/css/fhcpLogin.css?v=2203141811"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 306,
        "URL": 1135,
        "FileHash-SHA256": 122,
        "domain": 172,
        "FileHash-MD5": 4
      },
      "indicator_count": 1739,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "1485 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "625088e80292028d4e82311c",
      "name": "Botnet-malware -lgmhgjm.com",
      "description": "The full list of names and names of people who have taken part in the 2016 Olympics and Paralympics in Rio de Janeiro, Brazil, as part of the Rio Games, and as well as the 2017 Olympics in Brazil.",
      "modified": "2022-05-08T00:03:14.586000",
      "created": "2022-04-08T19:11:36.165000",
      "tags": [
        "function",
        "param",
        "object",
        "return",
        "webpackrequire",
        "constructor",
        "clipboard",
        "typeof",
        "symbol",
        "typeerror",
        "error",
        "click",
        "null",
        "copy",
        "factory",
        "super",
        "date",
        "target",
        "mustflag",
        "html",
        "applewebkit",
        "ipad",
        "mqqbrowser",
        "base",
        "trident",
        "presto",
        "gecko",
        "khtml",
        "ios android",
        "android",
        "array",
        "2f2f2i2i0f",
        "eh0g",
        "exptable",
        "logtable",
        "typeof h",
        "typeof e",
        "regexp",
        "typeof n",
        "typeof t",
        "width",
        "typeof r",
        "pseudo",
        "class",
        "this",
        "accept",
        "false",
        "https",
        "zeno rocha",
        "typeof define",
        "select",
        "input",
        "textarea",
        "0x455d",
        "0x34260b",
        "0x4ce9d1",
        "avge",
        "tung",
        "3ctz",
        "n33m",
        "0x514351",
        "hn4d",
        "0x70c2f4",
        "push",
        "shift",
        "baidu",
        "instanceof",
        "adjust",
        "body",
        "nulli",
        "windowi",
        "typeof jquery",
        "tthis",
        "mspointerdown",
        "child",
        "sfunction",
        "microsoft yahei",
        "arial",
        "x20trnf",
        "version",
        "swiper",
        "most",
        "copyright",
        "mit license",
        "october",
        "win32",
        "meta",
        "parsefloat",
        "androidgi",
        "iphonegi",
        "\u77ed\u89c6\u9891",
        "\u641e\u7b11\u89c6\u9891",
        "\u89c6\u9891\u5206\u4eab",
        "\u514d\u8d39\u89c6\u9891",
        "\u5728\u7ebf\u89c6\u9891",
        "\u9884\u544a\u7247",
        "wifi",
        "saol",
        "fc2ppv12518005",
        "oretd633riana01",
        "hodv sex",
        "orec37502",
        "06inn01",
        "siro2661ol2401",
        "garea742kou01",
        "175cm9av",
        "attr",
        "typeof symbol",
        "root",
        "length",
        "indexof",
        "x0ax20x20x20x20",
        "location",
        "math",
        "0x10",
        "0x18",
        "history",
        "config",
        "slice",
        "cookie",
        "open",
        "onload",
        "adunit",
        "refresh",
        "style",
        "position",
        "creativetplid",
        "show",
        "tcmod",
        "tcheight",
        "height",
        "yahei",
        "truetype",
        "f8f8f8",
        "typeof module",
        "reserved",
        "18hdxxxx\u4e2d\u56fd",
        "\u5973\u4e3b\u7a7f\u8d8a\u88ab\u8089\u6765\u8089\u53bbnp",
        "\u7537\u753718\u7981\u6c61\u8089\u56fe\u65e0\u7801",
        "\u65e0\u7801\u4e9a\u6d32\u6210a\u4eba\u7247\u5728\u7ebf\u89c2\u770b",
        "ore572s04",
        "ore572s03",
        "ore572s02",
        "ore572s01",
        "fc2ppv117430501",
        "cmi1513707",
        "cmi1513706",
        "cmi1513705",
        "cmi1513704",
        "cmi1513703",
        "\u514d\u8d39\u89c6\u9891\u7231\u7231\u592a\u723d\u4e86\u7f51\u7ad9_\u8001\u8272\u9b3c\u5728\u7ebf\u7cbe\u54c1\u89c6\u9891\u5728\u7ebf\u89c2\u770b_\u767d\u6d01\u4e00\u591c\u88ab\u723d\u4e86\u4e03\u6b21_\u5fd8\u4e86\u6234\u80f8\u7f69\u88ab\u540c\u5b66\u6478\u4e86\u4e00\u8282\u8bfe",
        "viewport"
      ],
      "references": [
        "xfe-URL-lgmhgjm.com-stix2-2.0-export.json",
        "http://www.lgmhgjm.com/common.js",
        "http://www.lgmhgjm.com/tj.js",
        "http://www.sp385.com/",
        "http://avtv10.com",
        "http://9766.tv",
        "https://xc.6xc.tv/?channelCode=xiaosu03_8",
        "https://app.okoockec.xyz:8443/apps/v2/index1/0c1d6cd4e9634a3d?m=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiZzByUjNpMUczaEt0Sk5sZmVNSE44NEhjVDlDOVFTM2xEcm5pM1dIWG9UM1FBSklpR1phN01teTZOcjFxVVJIWVlhZnJPQkE9IiwiZXhwIjoxNjQ5NDQ0NDcyfQ.utSNnRI7C9FuWMUxhY4cufCJBIuHUk5vdk8Dj6WnXYs",
        "https://xc.6xc.tv/js/jquery-3.6.0.min.js",
        "https://xc.6xc.tv/css/index.css",
        "https://xctg07.cc/?channelCode=xiaosu03_8",
        "https://ad.abilm.info/bid?url=http%3A%2F%2Fkniveb.info%2F&frm=0&ref=http%3A%2F%2Fwww.sp385.com%2F&ic=1&pl=0&ml=0&sid=105:80:104:111:110:101:58:50:53:48:50:50:51:49:53:54:58:51:58:51:57:48:46:56:52:52&ps=20030107&lgs=0&zo=240&ws=390x844&gdm=0&iw=1&cpn=0&fid=5d80d32079e9fdb035e4886c32c6612e&hl=2&ihn=0&md=1&ns=undefined&np=undefined&pj=0&top=650&left=0&id=47&rid=ec5a07ef8f3e3f2c25ba75c7da106dcc&dcc=&dcl=&gvd=Apple%20Inc.&grr=Apple%20GPU&ct=unknown&diit=&dit=&cmn=",
        "http://sdk.51.la/js-sdk-pro.min.js",
        "http://sdk.51.la/event/js-sdk-event.min.js?u=JYWHYgTN1B6iZ5P2",
        "http://kniveb.info/template/9c/ads/gonggao.js",
        "http://kniveb.info/",
        "https://koban360.com/ky/?shareName=1736.com",
        "https://koban360.com/ky/js/flexible.js",
        "https://koban360.com/ky/js/swiper.min.js",
        "https://koban360.com/ky/js/jquery.min.js",
        "https://koban360.com/ky/css/m.css?vs=1.7",
        "https://libs.baidu.com/jquery/2.0.0/jquery.min.js",
        "https://xbt.0lunwen.com/3/js/flexible.js",
        "https://xbt.0lunwen.com/boinstall.js",
        "https://miaouuuc.com/?channelCode=852890&aid=852890",
        "https://miaouuuc.com/template/static/js/clipborad.min.js",
        "https://am96.vip/",
        "https://unpkg.com/jquery-1.10.2@1.10.2/jquery-1.10.2.min.js",
        "https://unpkg.com/jquery.qrcode@1.0.3/jquery.qrcode.min.js",
        "https://www.gootft.com/js/app.base.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
        "https://www.gootft.com/js/poplayer.js;jsessionid=20F7490B81FBD25B0DE24EE1076D230D",
        "https://unpkg.com/clipboard@2.0.8/dist/clipboard.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1547",
          "name": "Boot or Logon Autostart Execution",
          "display_name": "T1547 - Boot or Logon Autostart Execution"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 3,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 482,
        "URL": 1383,
        "FileHash-SHA256": 104,
        "domain": 199,
        "FileHash-MD5": 2,
        "FileHash-SHA1": 1
      },
      "indicator_count": 2171,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1485 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "624dbf641e6a04169629e662",
      "name": "Malware-USA",
      "description": "Shopseg Sistemas, a company specialising in software and equipamentos for supermercados, wedi dweud eu s\u00f4n i'n \u00f4l.",
      "modified": "2022-05-06T16:01:29.122000",
      "created": "2022-04-06T16:27:16.093000",
      "tags": [
        "dataaos",
        "100px00",
        "dataaosfade",
        "100px0",
        "dataaoszoom",
        "dataaosflip",
        "woff2",
        "fontface",
        "sans",
        "u0259",
        "u1e001eff",
        "u2020",
        "u20a020ab",
        "u20ad20cf",
        "u2113",
        "u2c602c7f",
        "reduceright",
        "number",
        "string",
        "gtl5jtn10ss",
        "regexp",
        "error",
        "r300",
        "copyright",
        "dafunction",
        "gafunction",
        "uint8array",
        "date",
        "path",
        "void",
        "const",
        "click",
        "select",
        "scroll",
        "mobile",
        "template",
        "template url",
        "license",
        "easy selector",
        "easy event",
        "easy",
        "back",
        "typeof e",
        "typeof t",
        "this",
        "main",
        "swiper",
        "button",
        "most",
        "mit license",
        "android",
        "win32",
        "null",
        "dblock",
        "email form",
        "validation",
        "action",
        "formdata",
        "api url",
        "typeof define",
        "typeof module",
        "gplv3",
        "metafizzy",
        "math",
        "plyr",
        "typeof symbol",
        "typeerror",
        "tnull",
        "cnull",
        "typeof",
        "inject",
        "playbook",
        "name",
        "getconfig",
        "default",
        "area",
        "event",
        "shadowroot",
        "boolean",
        "window",
        "trident",
        "body",
        "ofunction",
        "symbol",
        "mfunction",
        "sfunction",
        "quando",
        "quem",
        "fundada em",
        "informtica",
        "sistemas",
        "segurana",
        "softwares",
        "supermercados",
        "lojas",
        "restaurantes",
        "padarias"
      ],
      "references": [
        "http://www.shopsegsistemas.com.br/",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/bootstrap/js/bootstrap.bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/glightbox/js/glightbox.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/isotope-layout/isotope.pkgd.min.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/php-email-form/validate.js",
        "http://www.shopsegsistemas.com.br/assets/vendor/swiper/swiper-bundle.min.js",
        "http://www.shopsegsistemas.com.br/assets/js/main.js",
        "https://www.googletagmanager.com/gtag/js?id=G-TL5JTN10SS",
        "https://fonts.googleapis.com/css?family=Open+Sans:300,300i,400,400i,600,600i,700,700i%7CRaleway:300,300i,400,400i,500,500i,600,600i,700,700i%7CPoppins:300,300i,400,400i,500,500i,600,600i,700,700i",
        "http://www.shopsegsistemas.com.br/assets/vendor/aos/aos.css",
        "https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d3730.503584706544!2d-41.67284568552043!3d-20.770905270369408!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0xbb93dcc0beb01f%3A0x97397d38847b3692!2sShopSeg%20Sistemas!5e0!3m2!1spt-BR!2sbr!4v1636561779046!5m2!1spt-BR!2sbr",
        "xfe-IP-50.116.87.164-stix2-2.0-export.json"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [
        {
          "id": "ReduceRight",
          "display_name": "ReduceRight",
          "target": null
        },
        {
          "id": "Quando",
          "display_name": "Quando",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1140",
          "name": "Deobfuscate/Decode Files or Information",
          "display_name": "T1140 - Deobfuscate/Decode Files or Information"
        },
        {
          "id": "T1498",
          "name": "Network Denial of Service",
          "display_name": "T1498 - Network Denial of Service"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 254,
        "URL": 815,
        "FileHash-SHA256": 168,
        "domain": 174
      },
      "indicator_count": 1411,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "1486 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "renderfraction.call",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "renderfraction.call",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780329302.8305695
}