{
  "type": "Domain",
  "indicator": "web-wtsapp.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/web-wtsapp.com",
    "alexa": "http://www.alexa.com/siteinfo/web-wtsapp.com",
    "indicator": "web-wtsapp.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 1524669150,
      "indicator": "web-wtsapp.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 1,
      "pulses": [
        {
          "id": "5ba136c3555f0f6a740209ae",
          "name": "Ongoing Android Malware Campaign Targets Palestinians",
          "description": "The APT-C-23 group targets victims in the Middle East, mainly in the Palestinian territories. In our research, we discovered that the group registered hundreds of domains and infected thousands of victims across more than 20 countries.",
          "modified": "2018-09-18T17:32:51.732000",
          "created": "2018-09-18T17:32:51.732000",
          "tags": [],
          "references": [
            "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
          ],
          "public": 1,
          "adversary": "APT-C-23",
          "targeted_countries": [
            "Palestine, State of"
          ],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 50,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "AlienVault",
            "id": "2",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
            "is_subscribed": true,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 225,
            "FileHash-SHA256": 125,
            "hostname": 5
          },
          "indicator_count": 355,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 386656,
          "modified_text": "2812 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
      ],
      "related": {
        "alienvault": {
          "adversary": [
            "APT-C-23"
          ],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 1,
  "pulses": [
    {
      "id": "5ba136c3555f0f6a740209ae",
      "name": "Ongoing Android Malware Campaign Targets Palestinians",
      "description": "The APT-C-23 group targets victims in the Middle East, mainly in the Palestinian territories. In our research, we discovered that the group registered hundreds of domains and infected thousands of victims across more than 20 countries.",
      "modified": "2018-09-18T17:32:51.732000",
      "created": "2018-09-18T17:32:51.732000",
      "tags": [],
      "references": [
        "https://www.symantec.com/blogs/expert-perspectives/ongoing-android-malware-campaign-targets-palestinians-part-2?om_ext_cid=biz_social_NAM_twitter_Asset%2BType%2B%2B-%2BBlog,Campaign%2B-%2BExpert%2BPerspectives"
      ],
      "public": 1,
      "adversary": "APT-C-23",
      "targeted_countries": [
        "Palestine, State of"
      ],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 50,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "AlienVault",
        "id": "2",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
        "is_subscribed": true,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 225,
        "FileHash-SHA256": 125,
        "hostname": 5
      },
      "indicator_count": 355,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 386656,
      "modified_text": "2812 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "web-wtsapp.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "web-wtsapp.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780269701.1066399
}