baseline from threatparser source