{
  "type": "Domain",
  "indicator": "smtpsync.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/smtpsync.com",
    "alexa": "http://www.alexa.com/siteinfo/smtpsync.com",
    "indicator": "smtpsync.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 2193632860,
      "indicator": "smtpsync.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 1,
      "pulses": [
        {
          "id": "5e4430d06ed4c78cf4aa7872",
          "name": "PowerBand the APT33 Variant",
          "description": "Since the Islamic revolution, US and regional rivals have put continuos effort in containing and isolating Iran. Implementing a foreign policy generally addressed as \u201cstrategic loneliness\u201d, Iran\u2019s defense strategy has been designed to compensate for the country\u2019s low level of conventional capabilities with its activity in asymmetric warfare, and especially in the cyber domain.",
          "modified": "2020-02-12T17:08:41.883000",
          "created": "2020-02-12T17:07:27.974000",
          "tags": [
            "APT33",
            "Iran"
          ],
          "references": [
            "https://blog.telsy.com/meeting-powerband-the-apt33-net-powerton-variant/",
            "https://app.threatconnect.com/auth/incident/incident.xhtml?incident=2928984041#/"
          ],
          "public": 1,
          "adversary": "APT33",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 108,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "AlienVault",
            "id": "2",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
            "is_subscribed": true,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 13,
            "FileHash-SHA256": 2,
            "URL": 4,
            "email": 10,
            "hostname": 1
          },
          "indicator_count": 30,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 386633,
          "modified_text": "2300 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://blog.telsy.com/meeting-powerband-the-apt33-net-powerton-variant/",
        "https://app.threatconnect.com/auth/incident/incident.xhtml?incident=2928984041#/"
      ],
      "related": {
        "alienvault": {
          "adversary": [
            "APT33"
          ],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 1,
  "pulses": [
    {
      "id": "5e4430d06ed4c78cf4aa7872",
      "name": "PowerBand the APT33 Variant",
      "description": "Since the Islamic revolution, US and regional rivals have put continuos effort in containing and isolating Iran. Implementing a foreign policy generally addressed as \u201cstrategic loneliness\u201d, Iran\u2019s defense strategy has been designed to compensate for the country\u2019s low level of conventional capabilities with its activity in asymmetric warfare, and especially in the cyber domain.",
      "modified": "2020-02-12T17:08:41.883000",
      "created": "2020-02-12T17:07:27.974000",
      "tags": [
        "APT33",
        "Iran"
      ],
      "references": [
        "https://blog.telsy.com/meeting-powerband-the-apt33-net-powerton-variant/",
        "https://app.threatconnect.com/auth/incident/incident.xhtml?incident=2928984041#/"
      ],
      "public": 1,
      "adversary": "APT33",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 108,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "AlienVault",
        "id": "2",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
        "is_subscribed": true,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 13,
        "FileHash-SHA256": 2,
        "URL": 4,
        "email": 10,
        "hostname": 1
      },
      "indicator_count": 30,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 386633,
      "modified_text": "2300 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "smtpsync.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "smtpsync.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780290803.569589
}