{ "type": "Domain", "indicator": "vashovskycorp.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/vashovskycorp.com", "alexa": "http://www.alexa.com/siteinfo/vashovskycorp.com", "indicator": "vashovskycorp.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3358613417, "indicator": "vashovskycorp.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 3, "pulses": [ { "id": "63f6aff3bf8be3af512b2716", "name": "URLHaus data - 22-02-2023", "description": "", "modified": "2023-04-13T13:14:08.076000", "created": "2023-02-23T00:14:43.819000", "tags": [ "32-bit", "elf", "mips", "Mozi", "arm", "hajime", "mirai", "Gamaredon", "geofenced", "hta", "x86-32", "ddos", "dll", "32", "renesas", "cryptbot", "motorola", "sparc", "intel", "PowerPC", "Stealc", "dropped-by-PrivateLoader", "script", "Qakbot", "qbot", "Quakbot", "USA", "encrypted", "RedLine", "ascii", "Encoded", "opendir", "Vidar", "doc", "AgentTesla", "exe", "Formbook", "SocGholish", "njRAT", "dropped-by-amadey", "PowerShellDiscordKeyLogger", "obama241", "gcleaner", "Rhadamanthys", "Socelars", "Loki", "IcedID", "RTF", "rat", "RemcosRAT", "zip", "1234", "Password-protected", "AveMariaRAT", "botsant", "hacktool", "kit", "phishing", "xloader", "GuLoader", "geo-fence", "Gozi", "ISFB", "ITA", "ursnif", "SnakeKeylogger", "Smoke Loader", "eex", "DDoS Bot", "AuroraStealer", "orcusrat", "chm", "vbs", "rar", "bat" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 11, "domain": 28 }, "indicator_count": 1039, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1146 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63f6affbb34efc8ec8d6dd80", "name": "InQuest - 22-02-2023", "description": "", "modified": "2023-03-25T00:02:33.269000", "created": "2023-02-23T00:14:51.733000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1598, "hostname": 232, "FileHash-SHA256": 147, "domain": 1055, "FileHash-MD5": 28, "FileHash-SHA1": 14 }, "indicator_count": 3074, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1165 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "61e7bdd9ef99a45628573ea4", "name": "NewDom-4-20220119", "description": "ICANN-Dom", "modified": "2022-03-05T00:01:03.599000", "created": "2022-01-19T07:29:29.407000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 202, "modified_text": "1550 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 } ], "references": [ "https://urlhaus.abuse.ch/browse/", "https://labs.inquest.net/iocdb" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 3, "pulses": [ { "id": "63f6aff3bf8be3af512b2716", "name": "URLHaus data - 22-02-2023", "description": "", "modified": "2023-04-13T13:14:08.076000", "created": "2023-02-23T00:14:43.819000", "tags": [ "32-bit", "elf", "mips", "Mozi", "arm", "hajime", "mirai", "Gamaredon", "geofenced", "hta", "x86-32", "ddos", "dll", "32", "renesas", "cryptbot", "motorola", "sparc", "intel", "PowerPC", "Stealc", "dropped-by-PrivateLoader", "script", "Qakbot", "qbot", "Quakbot", "USA", "encrypted", "RedLine", "ascii", "Encoded", "opendir", "Vidar", "doc", "AgentTesla", "exe", "Formbook", "SocGholish", "njRAT", "dropped-by-amadey", "PowerShellDiscordKeyLogger", "obama241", "gcleaner", "Rhadamanthys", "Socelars", "Loki", "IcedID", "RTF", "rat", "RemcosRAT", "zip", "1234", "Password-protected", "AveMariaRAT", "botsant", "hacktool", "kit", "phishing", "xloader", "GuLoader", "geo-fence", "Gozi", "ISFB", "ITA", "ursnif", "SnakeKeylogger", "Smoke Loader", "eex", "DDoS Bot", "AuroraStealer", "orcusrat", "chm", "vbs", "rar", "bat" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1000, "hostname": 11, "domain": 28 }, "indicator_count": 1039, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1146 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63f6affbb34efc8ec8d6dd80", "name": "InQuest - 22-02-2023", "description": "", "modified": "2023-03-25T00:02:33.269000", "created": "2023-02-23T00:14:51.733000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1598, "hostname": 232, "FileHash-SHA256": 147, "domain": 1055, "FileHash-MD5": 28, "FileHash-SHA1": 14 }, "indicator_count": 3074, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1165 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "61e7bdd9ef99a45628573ea4", "name": "NewDom-4-20220119", "description": "ICANN-Dom", "modified": "2022-03-05T00:01:03.599000", "created": "2022-01-19T07:29:29.407000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 202, "modified_text": "1550 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "vashovskycorp.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "vashovskycorp.com", "found": true, "verdict": "malicious", "url_count": 26, "online_count": 0, "blacklists": { "spamhaus_dbl": "not listed", "surbl": "not listed" }, "urls": [ { "url": "http://vashovskycorp.com/odCEh179.rar", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/olMGpnKKsxnVAZWuRWzItzBQt195.psm", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/iRlMwdLbyFxbhEHodfBBZ198.psm", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/MhfemBGTm16", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/UUAlaRdKxk58.snp", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/jLtcRcPT137.prm", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/Dymyx183.inf", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/WwkZBJFIicZu32.pcz", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/nIJfQrOKIj221.snp", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] }, { "url": "http://vashovskycorp.com/JVwGAAPzwzVpS69.ttf", "status": "offline", "threat": "malware_download", "date_added": "2023-02-22", "tags": [ "encrypted", "opendir" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780440870.906659 }