IoC Investigation

https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json

URL IN DATABASE

URL · threat 0.50 · 2× seen · 0 datasets · Threat Actors · last seen 3d ago

🔄 Pivot:📁 Threat Actors

Threat Score

0.50

Sightings

0 sources

Detected Type

URL

Enrichments

Related IoCs

URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Host	`github.com`
Registrar	MarkMonitor, Inc.
Org	Github
Abuse Contact	`-`
Country	US

DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

Indicator	Type	Category
`a0c8c5ccd0c4c5d3cbe0c5d4c4c18ecfd28ed4c8`	HASH_SHA1	Threat Actors	investigate →
`d3bbb6bfa3b7b6a0b893b6a7b7b2fdbca1fda7bb`	HASH_SHA1	Threat Actors	investigate →
`adc5c8c1ddc9c8dec6edc8d9c9cc83c2df83d9c5`	HASH_SHA1	Threat Actors	investigate →
`8ce4e9e0fce8e9ffe7cce9f8e8eda2e3fea2f8e4`	HASH_SHA1	Threat Actors	investigate →
`https://twitter.com/etda_thailand`	URL	Threat Actors	investigate →
`https://facebook.com/ETDA.Thailand`	URL	Threat Actors	investigate →
`https://creativecommons.org/licenses/by-nc-s…`	URL	Threat Actors	investigate →
`https://otx.alienvault.com/`	URL	Threat Actors	investigate →
`https://malpedia.caad.fkie.fraunhofer.de/`	URL	Threat Actors	investigate →
`https://attack.mitre.org/groups/`	URL	Threat Actors	investigate →
`https://attack.mitre.org/`	URL	Threat Actors	investigate →
`tgc-tools.json`	OTHER	Threat Actors	investigate →
`tgc-actors.json`	OTHER	Threat Actors	investigate →
`getmisp.cgi`	OTHER	Threat Actors	investigate →
`https://www.circl.lu/doc/misp/galaxy/`	URL	Threat Actors	investigate →
`aptstats.cgi`	OTHER	Threat Actors	investigate →
`aptsearch.cgi`	OTHER	Threat Actors	investigate →
`listtools.cgi`	OTHER	Threat Actors	investigate →
`listgroups.cgi`	OTHER	Threat Actors	investigate →
`https://www.etda.or.th`	URL	Threat Actors	investigate →

Copy as STIX 2.1

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--0bcde54e-89d2-4f02-5c86-000048ae5ccb",
    "created": "2026-08-10T12:33:48Z",
    "modified": "2026-08-10T12:33:48Z",
    "name": "URL: https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json",
    "pattern": "[url:value = 'https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json']",
    "pattern_type": "stix",
    "valid_from": "2026-08-10T12:33:48Z",
    "labels": [
        "threat actors"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

https://github.com/MISP/misp-galaxy/blob/master/clusters/threat-actor.json

Threat Score

Sightings

Detected Type

Enrichments

Related IoCs

Domain / URL Intelligence

Seen in Datasets (0)

OSINT Pivots

Related Indicators (20)

Copy as STIX 2.1 Copy

Linked Cases (0)

🤖 AI Copilot

⚡ AI Skills

🔍 Lookup & Enrich

📚 Docs & Reports

💡 Recommendations

⚙ Automation

📜 Playbook

🔗 Related Tools

Copy as STIX 2.1