{
  "type": "Domain",
  "indicator": "zus.pl",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/zus.pl",
    "alexa": "http://www.alexa.com/siteinfo/zus.pl",
    "indicator": "zus.pl",
    "type": "domain",
    "type_title": "Domain",
    "validation": [
      {
        "source": "majestic",
        "message": "Whitelisted domain zus.pl",
        "name": "Whitelisted domain"
      }
    ],
    "base_indicator": {
      "id": 3854851530,
      "indicator": "zus.pl",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 5,
      "pulses": [
        {
          "id": "67b614d76daf5cda65b8af61",
          "name": "Zaklad Ubezpieczen Spolecznych",
          "description": "Master IP CAM 01 Zakodowane na sta\u0142e has\u0142o dla konta g\u0142\u00f3wnego (CVE-2018-5723)\nEkstrakcja C2 wykorzystuje deszyfrowanie xor z najlepszym wysi\u0142kiem. Mog\u0105 wyst\u0119powa\u0107 problemy z niekt\u00f3rymi kluczami xor, takimi jak 0x78",
          "modified": "2025-09-01T07:52:01.899000",
          "created": "2025-02-19T17:28:55.878000",
          "tags": [
            "posiada wany",
            "rpki as5617",
            "polska spka",
            "akcyjna",
            "sha256",
            "ssdeep",
            "files",
            "sha1",
            "telfhash"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 8,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "IPv4": 59,
            "hostname": 304,
            "FileHash-MD5": 6,
            "FileHash-SHA1": 5,
            "CVE": 2,
            "FileHash-SHA256": 16,
            "domain": 33,
            "URL": 414,
            "CIDR": 2
          },
          "indicator_count": 841,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "272 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "676493c5607a603f1785a935",
          "name": "https://ginko.garden/pl/contact tel:+48 797 920 339  ip4 77.79.221.180   77.79.221.148",
          "description": "Pasywna replikacja DNS: \n77.79.221.180  \nSugerowany opis:\nPe\u0142ny tekst Ginko.Garden - Nowoczesne dekoracje i pergole metalowe - wedi dweud eu glass - metaloplastyka.\nSugerowane identyfikatory ATT&CK:\nOgr\u00f3d - Nowoczesne dekoracje z metalu do ogrodu - bi\u017cuteria ogrodowa i dekoracje szklane - pergole metalowe - metaloplastyka Meta Tagi s\u0142owa kluczowe Nowoczesne dekoracje z metalu do ogrodu - pergole metalowe - Ginko.\n77.79.221.148  \n46.41.159.227  \n46.41.159.177",
          "modified": "2025-07-28T11:51:42.400000",
          "created": "2024-12-19T21:44:37.537000",
          "tags": [
            "copyright",
            "customevent",
            "typeof e",
            "boomerang",
            "typeof t",
            "macintosh",
            "os x",
            "post",
            "typeof",
            "iframe",
            "date",
            "nazwa rekordu",
            "aaaaa",
            "na wniosek",
            "bezpieczestwo",
            "serwer",
            "przerwa",
            "informacja o",
            "prace",
            "nazwa",
            "hasze",
            "adresy url",
            "nazwa http",
            "configoverride",
            "continuity",
            "pageparam s",
            "iframedelay",
            "autoxhr",
            "historia",
            "nazwa https",
            "uytkownik",
            "zenbox",
            "komunikacja",
            "pliki",
            "rozmiar",
            "kb data",
            "wykrycia nie",
            "mitre",
            "ids nie",
            "sigmy nie",
            "submission",
            "sha256",
            "ssdeep",
            "file type",
            "html internet",
            "magic html",
            "unicode text",
            "utf8 text",
            "trid hypertext",
            "markup language"
          ],
          "references": [
            "https://s.go-mpulse.net/boomerang/XZ4AH-ABKPW-SQPBC-CYWES-BCG6V",
            "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=7a025cc6-5167-43cf-947f-387a3b830778",
            "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=f3ee4c4e-e009-4d69-82da-eef3bad1ecc4"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 14,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1334,
            "hostname": 454,
            "domain": 346,
            "IPv6": 2,
            "IPv4": 36,
            "FileHash-SHA256": 1499,
            "FileHash-MD5": 92,
            "FileHash-SHA1": 74,
            "CVE": 1,
            "email": 1
          },
          "indicator_count": 3839,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 124,
          "modified_text": "307 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6764c20a49646c5fc3c5a153",
          "name": "https://psz.zus.pl",
          "description": "Sugerowany opis:\nPe\u0142ny raport na temat plan\u00f3w polskiego rz\u0105du dotycz\u0105cych referendum unijnego zosta\u0142 opublikowany w serwisie Zus.pl oraz na stronie g\u0142\u00f3wnej tego portalu, kt\u00f3ra dzia\u0142a obecnie w tym samym czasie.",
          "modified": "2025-05-14T21:16:39.393000",
          "created": "2024-12-20T01:02:02.761000",
          "tags": [
            "sha256",
            "vhash",
            "ssdeep",
            "zrzuty ekranu",
            "wykrycia",
            "pliki",
            "liczba prbek",
            "skopiuj",
            "ukryj prbki",
            "pokazywa",
            "skrt",
            "hash",
            "kthreaddi",
            "c start",
            "plik",
            "dgc4ph baza",
            "wiadomoci",
            "kompresor",
            "ip k40g",
            "layton m0355",
            "n o365",
            "ilo o2o",
            "skanowanie",
            "udostpnij",
            "plik sha256",
            "data",
            "zwizane z",
            "zoliwym",
            "awasta elf",
            "zakaenie",
            "pani obroczyni",
            "trojan",
            "mtb zakaenie",
            "ostatnia",
            "2063947519",
            "nazwa",
            "adresy url",
            "nazwa https",
            "adowania",
            "jeli plik",
            "clay",
            "ojsreso",
            "o poniej",
            "url https",
            "http request",
            "method get",
            "country a",
            "polandpoland as",
            "name zaklad",
            "as number",
            "mime type",
            "data size",
            "size",
            "critical",
            "frame id",
            "b time"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 16,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 259,
            "FileHash-SHA256": 282,
            "domain": 161,
            "hostname": 235,
            "FileHash-MD5": 192,
            "FileHash-SHA1": 190
          },
          "indicator_count": 1319,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "381 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6789254ea7fb96491c138d10",
          "name": "Polityka cookies dla PUE ZUS/eZUS - ZUS",
          "description": "Miejscu wedi cyhoeddi eDeklaracje wybodaeth i'wch wrthod pracach serwisowych w us\u0142udze Tw\u00f3j e-PIT.",
          "modified": "2025-02-15T05:00:55.205000",
          "created": "2025-01-16T15:27:10.198000",
          "tags": [
            "pue zusezus",
            "pue zus",
            "pliki",
            "twoich",
            "te pliki",
            "jak moesz",
            "twoje dane",
            "korzystania z",
            "spoecznych",
            "jeli",
            "ssl certificate",
            "pulsedive",
            "informujemy",
            "prace",
            "przejd",
            "en uk",
            "nastpna strona",
            "twj epit",
            "x pl",
            "pit cit",
            "vat akcyza",
            "co pcc",
            "polska"
          ],
          "references": [
            "https://www.zus.pl/o-zus/o-nas/polityka-cookies-dla-pue-zus/ezus     https://193.105.143.40/",
            "https://www.podatki.gov.pl/e-deklaracje/komunikaty-techniczne-edeklaracje/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 1735,
            "hostname": 850,
            "FileHash-SHA256": 76,
            "domain": 1186
          },
          "indicator_count": 3847,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 124,
          "modified_text": "470 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "675297b9110af13304ed97d6",
          "name": "http://regnator.com/Program/Regnator.exe",
          "description": "D7Eok8kO9fuM6YCmU4O wedi i'w'r gael ei gyn-gwrnod o'i'u gyda'n sgil.",
          "modified": "2025-01-06T23:11:01.995000",
          "created": "2024-12-06T06:20:41.420000",
          "tags": [
            "serial number",
            "certum trusted",
            "network ca",
            "algorithm",
            "trusted network",
            "valid",
            "valid usage",
            "thumbprint",
            "name certum",
            "valid from",
            "whasz",
            "sha256",
            "ssdeep",
            "xml c",
            "pdf c",
            "pliki wzoru",
            "vhash"
          ],
          "references": [
            "http://crd.gov.pl/wzor/2020/11/13/10091/wyroznik.xml",
            "http://crd.gov.pl/wzor/2022/11/09/11890/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1056",
              "name": "Input Capture",
              "display_name": "T1056 - Input Capture"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 25,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Arek-BTC",
            "id": "212764",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1046,
            "FileHash-MD5": 217,
            "FileHash-SHA1": 191,
            "URL": 202,
            "domain": 39,
            "email": 1,
            "hostname": 212,
            "IPv4": 12
          },
          "indicator_count": 1920,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 123,
          "modified_text": "509 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "http://crd.gov.pl/wzor/2020/11/13/10091/wyroznik.xml",
        "https://www.zus.pl/o-zus/o-nas/polityka-cookies-dla-pue-zus/ezus     https://193.105.143.40/",
        "https://s.go-mpulse.net/boomerang/XZ4AH-ABKPW-SQPBC-CYWES-BCG6V",
        "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=7a025cc6-5167-43cf-947f-387a3b830778",
        "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=f3ee4c4e-e009-4d69-82da-eef3bad1ecc4",
        "http://crd.gov.pl/wzor/2022/11/09/11890/",
        "https://www.podatki.gov.pl/e-deklaracje/komunikaty-techniczne-edeklaracje/"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 5,
  "pulses": [
    {
      "id": "67b614d76daf5cda65b8af61",
      "name": "Zaklad Ubezpieczen Spolecznych",
      "description": "Master IP CAM 01 Zakodowane na sta\u0142e has\u0142o dla konta g\u0142\u00f3wnego (CVE-2018-5723)\nEkstrakcja C2 wykorzystuje deszyfrowanie xor z najlepszym wysi\u0142kiem. Mog\u0105 wyst\u0119powa\u0107 problemy z niekt\u00f3rymi kluczami xor, takimi jak 0x78",
      "modified": "2025-09-01T07:52:01.899000",
      "created": "2025-02-19T17:28:55.878000",
      "tags": [
        "posiada wany",
        "rpki as5617",
        "polska spka",
        "akcyjna",
        "sha256",
        "ssdeep",
        "files",
        "sha1",
        "telfhash"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 8,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "IPv4": 59,
        "hostname": 304,
        "FileHash-MD5": 6,
        "FileHash-SHA1": 5,
        "CVE": 2,
        "FileHash-SHA256": 16,
        "domain": 33,
        "URL": 414,
        "CIDR": 2
      },
      "indicator_count": 841,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "272 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "676493c5607a603f1785a935",
      "name": "https://ginko.garden/pl/contact tel:+48 797 920 339  ip4 77.79.221.180   77.79.221.148",
      "description": "Pasywna replikacja DNS: \n77.79.221.180  \nSugerowany opis:\nPe\u0142ny tekst Ginko.Garden - Nowoczesne dekoracje i pergole metalowe - wedi dweud eu glass - metaloplastyka.\nSugerowane identyfikatory ATT&CK:\nOgr\u00f3d - Nowoczesne dekoracje z metalu do ogrodu - bi\u017cuteria ogrodowa i dekoracje szklane - pergole metalowe - metaloplastyka Meta Tagi s\u0142owa kluczowe Nowoczesne dekoracje z metalu do ogrodu - pergole metalowe - Ginko.\n77.79.221.148  \n46.41.159.227  \n46.41.159.177",
      "modified": "2025-07-28T11:51:42.400000",
      "created": "2024-12-19T21:44:37.537000",
      "tags": [
        "copyright",
        "customevent",
        "typeof e",
        "boomerang",
        "typeof t",
        "macintosh",
        "os x",
        "post",
        "typeof",
        "iframe",
        "date",
        "nazwa rekordu",
        "aaaaa",
        "na wniosek",
        "bezpieczestwo",
        "serwer",
        "przerwa",
        "informacja o",
        "prace",
        "nazwa",
        "hasze",
        "adresy url",
        "nazwa http",
        "configoverride",
        "continuity",
        "pageparam s",
        "iframedelay",
        "autoxhr",
        "historia",
        "nazwa https",
        "uytkownik",
        "zenbox",
        "komunikacja",
        "pliki",
        "rozmiar",
        "kb data",
        "wykrycia nie",
        "mitre",
        "ids nie",
        "sigmy nie",
        "submission",
        "sha256",
        "ssdeep",
        "file type",
        "html internet",
        "magic html",
        "unicode text",
        "utf8 text",
        "trid hypertext",
        "markup language"
      ],
      "references": [
        "https://s.go-mpulse.net/boomerang/XZ4AH-ABKPW-SQPBC-CYWES-BCG6V",
        "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=7a025cc6-5167-43cf-947f-387a3b830778",
        "https://aplikacja.ceidg.gov.pl/CEIDG/CEIDG.Public.UI/SearchDetails.aspx?Id=f3ee4c4e-e009-4d69-82da-eef3bad1ecc4"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1027",
          "name": "Obfuscated Files or Information",
          "display_name": "T1027 - Obfuscated Files or Information"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 14,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1334,
        "hostname": 454,
        "domain": 346,
        "IPv6": 2,
        "IPv4": 36,
        "FileHash-SHA256": 1499,
        "FileHash-MD5": 92,
        "FileHash-SHA1": 74,
        "CVE": 1,
        "email": 1
      },
      "indicator_count": 3839,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 124,
      "modified_text": "307 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6764c20a49646c5fc3c5a153",
      "name": "https://psz.zus.pl",
      "description": "Sugerowany opis:\nPe\u0142ny raport na temat plan\u00f3w polskiego rz\u0105du dotycz\u0105cych referendum unijnego zosta\u0142 opublikowany w serwisie Zus.pl oraz na stronie g\u0142\u00f3wnej tego portalu, kt\u00f3ra dzia\u0142a obecnie w tym samym czasie.",
      "modified": "2025-05-14T21:16:39.393000",
      "created": "2024-12-20T01:02:02.761000",
      "tags": [
        "sha256",
        "vhash",
        "ssdeep",
        "zrzuty ekranu",
        "wykrycia",
        "pliki",
        "liczba prbek",
        "skopiuj",
        "ukryj prbki",
        "pokazywa",
        "skrt",
        "hash",
        "kthreaddi",
        "c start",
        "plik",
        "dgc4ph baza",
        "wiadomoci",
        "kompresor",
        "ip k40g",
        "layton m0355",
        "n o365",
        "ilo o2o",
        "skanowanie",
        "udostpnij",
        "plik sha256",
        "data",
        "zwizane z",
        "zoliwym",
        "awasta elf",
        "zakaenie",
        "pani obroczyni",
        "trojan",
        "mtb zakaenie",
        "ostatnia",
        "2063947519",
        "nazwa",
        "adresy url",
        "nazwa https",
        "adowania",
        "jeli plik",
        "clay",
        "ojsreso",
        "o poniej",
        "url https",
        "http request",
        "method get",
        "country a",
        "polandpoland as",
        "name zaklad",
        "as number",
        "mime type",
        "data size",
        "size",
        "critical",
        "frame id",
        "b time"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 16,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 259,
        "FileHash-SHA256": 282,
        "domain": 161,
        "hostname": 235,
        "FileHash-MD5": 192,
        "FileHash-SHA1": 190
      },
      "indicator_count": 1319,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "381 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6789254ea7fb96491c138d10",
      "name": "Polityka cookies dla PUE ZUS/eZUS - ZUS",
      "description": "Miejscu wedi cyhoeddi eDeklaracje wybodaeth i'wch wrthod pracach serwisowych w us\u0142udze Tw\u00f3j e-PIT.",
      "modified": "2025-02-15T05:00:55.205000",
      "created": "2025-01-16T15:27:10.198000",
      "tags": [
        "pue zusezus",
        "pue zus",
        "pliki",
        "twoich",
        "te pliki",
        "jak moesz",
        "twoje dane",
        "korzystania z",
        "spoecznych",
        "jeli",
        "ssl certificate",
        "pulsedive",
        "informujemy",
        "prace",
        "przejd",
        "en uk",
        "nastpna strona",
        "twj epit",
        "x pl",
        "pit cit",
        "vat akcyza",
        "co pcc",
        "polska"
      ],
      "references": [
        "https://www.zus.pl/o-zus/o-nas/polityka-cookies-dla-pue-zus/ezus     https://193.105.143.40/",
        "https://www.podatki.gov.pl/e-deklaracje/komunikaty-techniczne-edeklaracje/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 11,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 1735,
        "hostname": 850,
        "FileHash-SHA256": 76,
        "domain": 1186
      },
      "indicator_count": 3847,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 124,
      "modified_text": "470 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "675297b9110af13304ed97d6",
      "name": "http://regnator.com/Program/Regnator.exe",
      "description": "D7Eok8kO9fuM6YCmU4O wedi i'w'r gael ei gyn-gwrnod o'i'u gyda'n sgil.",
      "modified": "2025-01-06T23:11:01.995000",
      "created": "2024-12-06T06:20:41.420000",
      "tags": [
        "serial number",
        "certum trusted",
        "network ca",
        "algorithm",
        "trusted network",
        "valid",
        "valid usage",
        "thumbprint",
        "name certum",
        "valid from",
        "whasz",
        "sha256",
        "ssdeep",
        "xml c",
        "pdf c",
        "pliki wzoru",
        "vhash"
      ],
      "references": [
        "http://crd.gov.pl/wzor/2020/11/13/10091/wyroznik.xml",
        "http://crd.gov.pl/wzor/2022/11/09/11890/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1056",
          "name": "Input Capture",
          "display_name": "T1056 - Input Capture"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 25,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Arek-BTC",
        "id": "212764",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_212764/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1046,
        "FileHash-MD5": 217,
        "FileHash-SHA1": 191,
        "URL": 202,
        "domain": 39,
        "email": 1,
        "hostname": 212,
        "IPv4": 12
      },
      "indicator_count": 1920,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 123,
      "modified_text": "509 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "zus.pl",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "zus.pl",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780248548.471631
}