IoC Investigation

g.gm.XMLHttpRequest

DOMAIN IN DATABASE

Domain · threat 0.50 · 1× seen · 0 datasets · Disinformation · last seen 2d ago

🔄 Pivot:📁 Disinformation

Threat Score

0.50

Sightings

1
0 sources

Detected Type

DOMAIN

Enrichments

0

Related IoCs

20
URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Hostg.gm.XMLHttpRequest
WHOISNot cached locally.
DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
NREUM.info DOMAIN Disinformation investigate →
https://hu-manity.co/ URL Disinformation investigate →
Hu-manity.co DOMAIN Disinformation investigate →
https://dfrlab.org/wp-includes/js/wp-emoji-l… URL Disinformation investigate →
t.twemoji DOMAIN Disinformation investigate →
t.wpemoji DOMAIN Disinformation investigate →
t.concatemoji DOMAIN Disinformation investigate →
a.source DOMAIN Disinformation investigate →
a.supports.flag DOMAIN Disinformation investigate →
a.supports.everythingExceptFlag DOMAIN Disinformation investigate →
a.supports.everything DOMAIN Disinformation investigate →
r.terminate DOMAIN Disinformation investigate →
r.onmessage DOMAIN Disinformation investigate →
p.toString DOMAIN Disinformation investigate →
c.toString DOMAIN Disinformation investigate →
u.toString DOMAIN Disinformation investigate →
f.toString DOMAIN Disinformation investigate →
URL.createObjectURL DOMAIN Disinformation investigate →
e.supportTests DOMAIN Disinformation investigate →
sessionStorage.getItem DOMAIN Disinformation investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--99f1d9a2-796e-4eb0-293b-0000bb80417b",
    "created": "2026-08-09T04:47:04Z",
    "modified": "2026-08-09T04:47:04Z",
    "name": "Domain: g.gm.XMLHttpRequest",
    "pattern": "[domain-name:value = 'g.gm.XMLHttpRequest']",
    "pattern_type": "stix",
    "valid_from": "2026-08-09T04:47:04Z",
    "labels": [
        "disinformation"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center