{
  "type": "Domain",
  "indicator": "z.mz",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/z.mz",
    "alexa": "http://www.alexa.com/siteinfo/z.mz",
    "indicator": "z.mz",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3421914834,
      "indicator": "z.mz",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 3,
      "pulses": [
        {
          "id": "65708b83a04606c605361cb6",
          "name": "Nearly ALL App Store VPNs are a huge vulnerability",
          "description": "",
          "modified": "2023-12-06T14:56:03.320000",
          "created": "2023-12-06T14:56:03.320000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "StreamMiningEx",
            "id": "262917",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 267,
            "hostname": 78,
            "URL": 346,
            "FileHash-SHA256": 79,
            "email": 4
          },
          "indicator_count": 774,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 109,
          "modified_text": "906 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "62925b989eba65cefe8c5f88",
          "name": "Mathworks.com (work in progress) extractor is malfunctioning",
          "description": "defineProperty(t,n), Object.prototype, E.S.D, e.CmpApiModel, \"DeepClone\", \"deepClones\" - a description of all the functions in this.",
          "modified": "2022-05-28T17:43:49.055000",
          "created": "2022-05-28T17:27:52.332000",
          "tags": [
            "optin",
            "elqsitevisited",
            "qnew date",
            "rnew date",
            "dlkey",
            "dllookup",
            "image",
            "httponly",
            "typeof e",
            "typeerror",
            "typeof symbol",
            "string",
            "array",
            "date",
            "efunction",
            "sfunction",
            "target",
            "typeof h",
            "typeof t",
            "typeof n",
            "typeof",
            "copyright",
            "event",
            "jquery",
            "typeof u",
            "uspapi",
            "confirmation",
            "matlab",
            "matlab speaks",
            "video",
            "system toolbox",
            "international",
            "learning",
            "computer vision",
            "analytics",
            "toolbox",
            "shell",
            "loans",
            "b0b6c1",
            "send",
            "caced6",
            "qualaroo",
            "thank",
            "ffd700",
            "simulink",
            "blank",
            "pass",
            "undef",
            "false",
            "null",
            "martin",
            "6464",
            "12224",
            "survey",
            "close",
            "tools",
            "python",
            "typeof require",
            "error",
            "modulenotfound",
            "abcdef",
            "typeof visitor",
            "adcloud",
            "typeof alloy"
          ],
          "references": [
            "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=m",
            "https://www.everestjs.net/static/le/last-event-tag-latest.min.js",
            "https://s3.amazonaws.com/ki.js/49559/ahy.js",
            "https://rules.quantcount.com/rules-p-zfNtLVVEHXE-1.js",
            "https://secure.quantserve.com/quant.js",
            "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=mathworks.com",
            "https://img03.en25.com/i/elqCfg.min.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 156,
            "hostname": 192,
            "URL": 608,
            "FileHash-SHA256": 22,
            "FileHash-MD5": 2
          },
          "indicator_count": 980,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 67,
          "modified_text": "1463 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6253b49ac7891a2ad1ab0d09",
          "name": "Nearly ALL App Store VPNs are a huge vulnerability",
          "description": "Zt, Z.Z.r, is a new-found acronym for the word \"zt\", which means \"targuments\" or \"farg\" in the same place as the original.",
          "modified": "2022-05-11T00:02:13.446000",
          "created": "2022-04-11T04:54:50.508000",
          "tags": [
            "ratio",
            "regexp",
            "apple iphone",
            "apple ipad",
            "apple ipod",
            "xmlhttprequest",
            "post",
            "contenttype",
            "text",
            "function",
            "symbol",
            "typeof",
            "null",
            "macintel",
            "attention",
            "please",
            "vpn app",
            "install details",
            "\u2019m",
            "purevpn: fast",
            "secure & easy",
            "purevpn",
            "productivity",
            "utilities",
            "ios apps",
            "app",
            "appstore",
            "app store",
            "iphone",
            "ipad",
            "ipod touch",
            "itouch",
            "itunes",
            "fast",
            "secure",
            "easy",
            "subscription",
            "requires",
            "global nav",
            "alwayson",
            "audit",
            "vpn connection",
            "service",
            "download",
            "enjoy",
            "first",
            "kill",
            "rest",
            "italian",
            "korean",
            "vpn - ip changer & security id",
            "energise inc",
            "data",
            "app privacy",
            "data privacy",
            "learn",
            "sans",
            "woff",
            "fontface",
            "u1c801c88",
            "u20b4",
            "u2de02dff",
            "ua640a69f",
            "ufe2efe2f",
            "u04b004b1",
            "u2116",
            "truetype",
            "start",
            "webflow css",
            "policy",
            "crowd ab",
            "university",
            "log data",
            "conditions",
            "third party",
            "1px1px",
            "sf ui",
            "sf pro",
            "helvetica",
            "arial",
            "alpha",
            "opacity",
            "icons",
            "misc",
            "overlays",
            "opacity35",
            "foundation",
            "layout",
            "opacity0",
            "spinner",
            "android",
            "object",
            "string",
            "number",
            "window",
            "date",
            "promise",
            "array",
            "error",
            "this",
            "void",
            "screen",
            "typeerror",
            "invalid attempt"
          ],
          "references": [
            "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json",
            "https://unphionetor.com/fv.js?t=56193&cb=200694599",
            "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319",
            "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css",
            "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0",
            "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729",
            "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584",
            "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css",
            "https://fonts.googleapis.com/css?family=Open+Sans:700,300",
            "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92",
            "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325",
            "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955",
            "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263",
            "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js",
            "https://bestfasttrackservices.com/landers/d/player_default1/send.js"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [
            "Russian Federation",
            "Australia",
            "Romania"
          ],
          "malware_families": [
            {
              "id": "\u2019m",
              "display_name": "\u2019m",
              "target": null
            }
          ],
          "attack_ids": [
            {
              "id": "T1070",
              "name": "Indicator Removal on Host",
              "display_name": "T1070 - Indicator Removal on Host"
            },
            {
              "id": "T1133",
              "name": "External Remote Services",
              "display_name": "T1133 - External Remote Services"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 5,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "adjadex1@gmail.com",
            "id": "187163",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 267,
            "URL": 346,
            "hostname": 78,
            "FileHash-SHA256": 79,
            "email": 4
          },
          "indicator_count": 774,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "1481 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://secure.quantserve.com/quant.js",
        "https://bestfasttrackservices.com/landers/d/player_default1/send.js",
        "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css",
        "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92",
        "https://fonts.googleapis.com/css?family=Open+Sans:700,300",
        "https://www.everestjs.net/static/le/last-event-tag-latest.min.js",
        "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json",
        "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319",
        "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729",
        "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=m",
        "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0",
        "https://rules.quantcount.com/rules-p-zfNtLVVEHXE-1.js",
        "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css",
        "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955",
        "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325",
        "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=mathworks.com",
        "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263",
        "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js",
        "https://img03.en25.com/i/elqCfg.min.js",
        "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584",
        "https://s3.amazonaws.com/ki.js/49559/ahy.js",
        "https://unphionetor.com/fv.js?t=56193&cb=200694599"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [
            "\u2019m"
          ],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 3,
  "pulses": [
    {
      "id": "65708b83a04606c605361cb6",
      "name": "Nearly ALL App Store VPNs are a huge vulnerability",
      "description": "",
      "modified": "2023-12-06T14:56:03.320000",
      "created": "2023-12-06T14:56:03.320000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "StreamMiningEx",
        "id": "262917",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 267,
        "hostname": 78,
        "URL": 346,
        "FileHash-SHA256": 79,
        "email": 4
      },
      "indicator_count": 774,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 109,
      "modified_text": "906 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "62925b989eba65cefe8c5f88",
      "name": "Mathworks.com (work in progress) extractor is malfunctioning",
      "description": "defineProperty(t,n), Object.prototype, E.S.D, e.CmpApiModel, \"DeepClone\", \"deepClones\" - a description of all the functions in this.",
      "modified": "2022-05-28T17:43:49.055000",
      "created": "2022-05-28T17:27:52.332000",
      "tags": [
        "optin",
        "elqsitevisited",
        "qnew date",
        "rnew date",
        "dlkey",
        "dllookup",
        "image",
        "httponly",
        "typeof e",
        "typeerror",
        "typeof symbol",
        "string",
        "array",
        "date",
        "efunction",
        "sfunction",
        "target",
        "typeof h",
        "typeof t",
        "typeof n",
        "typeof",
        "copyright",
        "event",
        "jquery",
        "typeof u",
        "uspapi",
        "confirmation",
        "matlab",
        "matlab speaks",
        "video",
        "system toolbox",
        "international",
        "learning",
        "computer vision",
        "analytics",
        "toolbox",
        "shell",
        "loans",
        "b0b6c1",
        "send",
        "caced6",
        "qualaroo",
        "thank",
        "ffd700",
        "simulink",
        "blank",
        "pass",
        "undef",
        "false",
        "null",
        "martin",
        "6464",
        "12224",
        "survey",
        "close",
        "tools",
        "python",
        "typeof require",
        "error",
        "modulenotfound",
        "abcdef",
        "typeof visitor",
        "adcloud",
        "typeof alloy"
      ],
      "references": [
        "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=m",
        "https://www.everestjs.net/static/le/last-event-tag-latest.min.js",
        "https://s3.amazonaws.com/ki.js/49559/ahy.js",
        "https://rules.quantcount.com/rules-p-zfNtLVVEHXE-1.js",
        "https://secure.quantserve.com/quant.js",
        "https://quantcast.mgr.consensu.org/tcfv2/27/cmp2.js?referer=mathworks.com",
        "https://img03.en25.com/i/elqCfg.min.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 13,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 156,
        "hostname": 192,
        "URL": 608,
        "FileHash-SHA256": 22,
        "FileHash-MD5": 2
      },
      "indicator_count": 980,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 67,
      "modified_text": "1463 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6253b49ac7891a2ad1ab0d09",
      "name": "Nearly ALL App Store VPNs are a huge vulnerability",
      "description": "Zt, Z.Z.r, is a new-found acronym for the word \"zt\", which means \"targuments\" or \"farg\" in the same place as the original.",
      "modified": "2022-05-11T00:02:13.446000",
      "created": "2022-04-11T04:54:50.508000",
      "tags": [
        "ratio",
        "regexp",
        "apple iphone",
        "apple ipad",
        "apple ipod",
        "xmlhttprequest",
        "post",
        "contenttype",
        "text",
        "function",
        "symbol",
        "typeof",
        "null",
        "macintel",
        "attention",
        "please",
        "vpn app",
        "install details",
        "\u2019m",
        "purevpn: fast",
        "secure & easy",
        "purevpn",
        "productivity",
        "utilities",
        "ios apps",
        "app",
        "appstore",
        "app store",
        "iphone",
        "ipad",
        "ipod touch",
        "itouch",
        "itunes",
        "fast",
        "secure",
        "easy",
        "subscription",
        "requires",
        "global nav",
        "alwayson",
        "audit",
        "vpn connection",
        "service",
        "download",
        "enjoy",
        "first",
        "kill",
        "rest",
        "italian",
        "korean",
        "vpn - ip changer & security id",
        "energise inc",
        "data",
        "app privacy",
        "data privacy",
        "learn",
        "sans",
        "woff",
        "fontface",
        "u1c801c88",
        "u20b4",
        "u2de02dff",
        "ua640a69f",
        "ufe2efe2f",
        "u04b004b1",
        "u2116",
        "truetype",
        "start",
        "webflow css",
        "policy",
        "crowd ab",
        "university",
        "log data",
        "conditions",
        "third party",
        "1px1px",
        "sf ui",
        "sf pro",
        "helvetica",
        "arial",
        "alpha",
        "opacity",
        "icons",
        "misc",
        "overlays",
        "opacity35",
        "foundation",
        "layout",
        "opacity0",
        "spinner",
        "android",
        "object",
        "string",
        "number",
        "window",
        "date",
        "promise",
        "array",
        "error",
        "this",
        "void",
        "screen",
        "typeerror",
        "invalid attempt"
      ],
      "references": [
        "xfe-URL-dk9ctyhidjrvgn.xyz-stix2-2.1-export.json",
        "https://unphionetor.com/fv.js?t=56193&cb=200694599",
        "https://ptauxofi.net/pfe/current/micro.tag.min.js?sw=/sw-check-permissions/3683319&var=iUnZZblURYgnN6e&z=3683319",
        "https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css",
        "https://littlecdn.com/apps/templates/video/ytube-player-system-message/css/style.css?v=1.0",
        "https://saumeechoa.com/?track=aHR0cHM6Ly90cmFja2luZy51bml2ZXJzZXZwbi51cy9jbGljaz9waWQ9NjcxNSZvZmZlcl9pZD0yMTI3NDYmc3ViMT01MzcyMzcxNDM4NjU4ODkwNzImc3ViMj0yNjI3MzI1&meta-id=Nzc0OTkw&brandSafe=0&rsz=2627325&cd_meta_crid=25922&meta-tracking-id=17537694&s=537237143865889072&z=2627325&b=12554414&g=US&svar=1649650835&ssk=bcc25276d94a6fa37bb24c13fd15de7a&oaid=42988e84a84a44628299d1d3d4b64ca7&did=4&campid=5453729",
        "https://univvpn.page.link/jdF1?utm_medium=paid%20advertising&_branch_referrer=H4sIAAAAAAAAAx3Juw6DIBQA0K%2Bxo8JFQJqQTh2bdOtILo%2BqEZEIDvbrm3Y9Z6o1l2vXxRGGscWc2zinpZPn5yle%2BTEme2ugZ1mjcUep22oooUICp0woNfAegKtLI%2B8luC153E%2BTDxvnMoVdC0n573JEF9aQqgYBksEf0ZvZawGcYaBqcG%2BhLCGEoreesS%2BPLJI5mAAAAA%3D%3D&%243p=a_custom_1016725136998542259&~secondary_publisher=6715&~placement=2627325&~ad_id=6253ae198cf69b0001adbd33&_branch_match_id=1041559436699840584",
        "https://locationvpn.info/landers/swvpn/p25f_prop/styles.css",
        "https://fonts.googleapis.com/css?family=Open+Sans:700,300",
        "https://easyvpn.app.link/Hsj5csEsrob?%243p=a_custom_1032593427266339085&~click_id=b4f8buqlp9zvrbed&~trafficsource=propellerads&~externalid=537238981268836734&~camp=92&~channel=propellerads&~campaign_id=92&~campaign=92",
        "https://cdrvrs.com/4/1008180?var=2627325&rsz=2627325",
        "https://app.adjust.com/jt7cgc7?campaign=4969955&adgroup=1008180&creative=12542008&redirect_windows=https://billing.purevpn.com/aff.php?aff=45706&chan=propeller&event_callback_bs7gvg=http%3A%2F%2Fad.propellerads.com%2Fconversion.php%3Faid%3D3414548%26pid%3D%26tid%3D84891%26visitor_id%3D537239929124823177%26payout%3D$%7BPAYOUT%7D%26zoneid%3D$4969955",
        "https://bestfasttrackservices.com/landers/d/player_default1/?&domain=besttvllc.com&uclick=g6bg8rsc6o&uclickhash=g6bg8rsc6o-g6bg8rsc6o-gha4-0-xra3-4kghfe-4kirbl-015263",
        "https://bestfasttrackservices.com/landers/d/player_default1/current-device.min.js",
        "https://bestfasttrackservices.com/landers/d/player_default1/send.js"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [
        "Russian Federation",
        "Australia",
        "Romania"
      ],
      "malware_families": [
        {
          "id": "\u2019m",
          "display_name": "\u2019m",
          "target": null
        }
      ],
      "attack_ids": [
        {
          "id": "T1070",
          "name": "Indicator Removal on Host",
          "display_name": "T1070 - Indicator Removal on Host"
        },
        {
          "id": "T1133",
          "name": "External Remote Services",
          "display_name": "T1133 - External Remote Services"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 5,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "adjadex1@gmail.com",
        "id": "187163",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 267,
        "URL": 346,
        "hostname": 78,
        "FileHash-SHA256": 79,
        "email": 4
      },
      "indicator_count": 774,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "1481 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "z.mz",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "z.mz",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780221952.2162275
}