{ "type": "Domain", "indicator": "defragglerupdate.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/defragglerupdate.com", "alexa": "http://www.alexa.com/siteinfo/defragglerupdate.com", "indicator": "defragglerupdate.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 4225410085, "indicator": "defragglerupdate.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 50, "pulses": [ { "id": "699d1091ec69d7e529055573", "name": "URLHaus data - 23-02-2026 (Part 2)", "description": "", "modified": "2026-03-26T02:03:49.946000", "created": "2026-02-24T02:44:33.918000", "tags": [ "32-bit", "elf", "mips", "Mozi", "ClearFake", "geofenced", "ua-wget", "USA", "arm", "mirai", "dropped-by-amadey", "fbf543", "c2-monitor-auto", "Stealc", "opendir", "zip", "bat", "wsh", "txt", "ascii", "powershell", "ps1", "njRAT", "7z", "cab", "iso", "xworm", "CoinMiner", "Encoded", "rev-base64-loader", "SnakeKeylogger", "exe", "archive", "compressed", "Password: lunex", "PureCrypter", "pw-lunex", "backdoor", "censys", "sshdkit", "hajime", "OffLoader", "script", "rat", "RemcosRAT", "jpg-base64-loader", "VIPKeylogger", "PhantomStealer", "Formbook", "connectwise", "screenconnect", "msi", "rmm", "QuasarRAT", "encrypted", "GuLoader", "encodd", "hta", "js", "sh", "BABADEDA", "NetSupport", "encoed", "botnetdomain", "Metasploit", "Rubeus", "meterpreter", "AdaptixC2", "Hive", "Lazagne", "mimikatz", "gafgyt", "DDoSAgent", "Password: ryos", "pw-ryos", "Vidar" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 252, "hostname": 42, "domain": 8 }, "indicator_count": 302, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "68 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a50e982ee9f8602790d627", "name": "Payload_Delivery | Mar 2, 2026", "description": "Payload_Delivery indicators. Date: Mar 2, 2026. Total: 904 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:14:16.201000", "created": "2026-03-02T04:14:16.201000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 371, "hostname": 312, "URL": 218 }, "indicator_count": 901, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a469956618adc66ce65ee9", "name": "PreCog Sweep - 2026-03-01 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-03-01T16:30:13.240000", "created": "2026-03-01T16:30:13.240000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 391, "domain": 107 }, "indicator_count": 498, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a43a9cc30207a2b43be5b2", "name": "Payload_Delivery | Mar 2, 2026", "description": "Payload_Delivery indicators. Date: Mar 2, 2026. Total: 969 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:09:48.358000", "created": "2026-03-01T13:09:48.358000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 393, "domain": 348, "URL": 225 }, "indicator_count": 966, "is_author": false, "is_subscribing": null, "subscriber_count": 98, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40069d24c57cd33ed6e60", "name": "Payload_Delivery | Mar 1, 2026", "description": "Payload_Delivery indicators. Date: Mar 1, 2026. Total: 971 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:01:29.655000", "created": "2026-03-01T09:01:29.655000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 346, "hostname": 397, "URL": 225 }, "indicator_count": 968, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a37ec73ad2fdcbce99a587", "name": "Payload_Delivery | Mar 1, 2026", "description": "Payload_Delivery indicators. Date: Mar 1, 2026. Total: 969 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-28T23:48:23.607000", "created": "2026-02-28T23:48:23.607000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 414, "domain": 326, "URL": 226 }, "indicator_count": 966, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f46c07b6be913644f1314", "name": "PreCog Sweep - 2026-02-25 19h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T19:00:16.547000", "created": "2026-02-25T19:00:16.547000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 244, "domain": 108, "URL": 33 }, "indicator_count": 385, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f3fb6130bee1f2c260ac8", "name": "PreCog Sweep - 2026-02-25 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T18:30:14.842000", "created": "2026-02-25T18:30:14.842000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 110, "hostname": 245, "URL": 33 }, "indicator_count": 388, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f38b1a65782a9d9dcf77c", "name": "PreCog Sweep - 2026-02-25 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T18:00:17.950000", "created": "2026-02-25T18:00:17.950000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 107, "URL": 32, "hostname": 249 }, "indicator_count": 388, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f31a68302605ddecde470", "name": "PreCog Sweep - 2026-02-25 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T17:30:14.415000", "created": "2026-02-25T17:30:14.415000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 243, "domain": 104, "URL": 32 }, "indicator_count": 379, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f2aa2fcc25399d108ac79", "name": "PreCog Sweep - 2026-02-25 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T17:00:18.202000", "created": "2026-02-25T17:00:18.202000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 105, "hostname": 242, "URL": 32 }, "indicator_count": 379, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f23984915c715751e2506", "name": "PreCog Sweep - 2026-02-25 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T16:30:15.952000", "created": "2026-02-25T16:30:15.952000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 102, "hostname": 244, "URL": 34 }, "indicator_count": 380, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f1c913835f01adfef5411", "name": "PreCog Sweep - 2026-02-25 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T16:00:17.767000", "created": "2026-02-25T16:00:17.767000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 102, "URL": 34, "hostname": 238 }, "indicator_count": 374, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f158919bce0a6de6d50be", "name": "PreCog Sweep - 2026-02-25 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T15:30:17.129000", "created": "2026-02-25T15:30:17.129000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 106, "URL": 34, "hostname": 233 }, "indicator_count": 373, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f0074d45056ef3a1bee6c", "name": "PreCog Sweep - 2026-02-25 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T14:00:20.167000", "created": "2026-02-25T14:00:20.167000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 117, "hostname": 213, "URL": 45 }, "indicator_count": 375, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ef967b6c941449252daac", "name": "PreCog Sweep - 2026-02-25 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T13:30:15.680000", "created": "2026-02-25T13:30:15.680000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 43, "domain": 115, "hostname": 217 }, "indicator_count": 375, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ef261c41e583bdec73733", "name": "PreCog Sweep - 2026-02-25 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T13:00:17.866000", "created": "2026-02-25T13:00:17.866000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 42, "domain": 114, "hostname": 219 }, "indicator_count": 375, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699eeb58c76e9be6c4e2f6e3", "name": "PreCog Sweep - 2026-02-25 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T12:30:16.747000", "created": "2026-02-25T12:30:16.747000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 114, "hostname": 229, "URL": 36 }, "indicator_count": 379, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ec8301c2fcacda15b07e9", "name": "PreCog Sweep - 2026-02-25 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T10:00:16.450000", "created": "2026-02-25T10:00:16.450000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 208, "URL": 67, "domain": 121 }, "indicator_count": 396, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ec126da316016c19a288f", "name": "PreCog Sweep - 2026-02-25 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T09:30:14.640000", "created": "2026-02-25T09:30:14.640000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 67, "hostname": 209, "domain": 123 }, "indicator_count": 399, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699eba217cfb406ee034194e", "name": "PreCog Sweep - 2026-02-25 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T09:00:17.212000", "created": "2026-02-25T09:00:17.212000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 213, "URL": 66, "domain": 125 }, "indicator_count": 404, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699eb3173095edebacf1081c", "name": "PreCog Sweep - 2026-02-25 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T08:30:15.811000", "created": "2026-02-25T08:30:15.811000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 213, "URL": 66, "domain": 125 }, "indicator_count": 404, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "97 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d7db94e7c67872af73849", "name": "PreCog Sweep - 2026-02-24 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T10:30:17.422000", "created": "2026-02-24T10:30:17.422000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 202, "URL": 57, "domain": 77 }, "indicator_count": 336, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d457c5649ab94dde558aa", "name": "PreCog Sweep - 2026-02-24 06h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T06:30:18.704000", "created": "2026-02-24T06:30:18.704000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 182, "domain": 59, "URL": 84 }, "indicator_count": 325, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d3e73da411cbee92684a7", "name": "PreCog Sweep - 2026-02-24 06h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T06:00:19.337000", "created": "2026-02-24T06:00:19.337000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 60, "hostname": 189, "URL": 86 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d37681c643b28b19c1a3a", "name": "PreCog Sweep - 2026-02-24 05h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T05:30:16.467000", "created": "2026-02-24T05:30:16.467000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 187, "domain": 62, "URL": 86 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d3061497b9aaf6868f1c6", "name": "PreCog Sweep - 2026-02-24 05h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T05:00:17.187000", "created": "2026-02-24T05:00:17.187000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 187, "domain": 62, "URL": 86 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d295838e8aacefc502545", "name": "PreCog Sweep - 2026-02-24 04h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T04:30:16.955000", "created": "2026-02-24T04:30:16.955000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 61, "hostname": 184, "URL": 86 }, "indicator_count": 331, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d225121937399dd70553c", "name": "PreCog Sweep - 2026-02-24 04h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T04:00:17.739000", "created": "2026-02-24T04:00:17.739000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 186, "domain": 61, "URL": 86 }, "indicator_count": 333, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d1b480ae89f247a62b482", "name": "PreCog Sweep - 2026-02-24 03h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T03:30:16.892000", "created": "2026-02-24T03:30:16.892000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 185, "domain": 61, "URL": 86 }, "indicator_count": 332, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d1441c60396e57249599f", "name": "PreCog Sweep - 2026-02-24 03h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T03:00:17.575000", "created": "2026-02-24T03:00:17.575000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 187, "domain": 62, "URL": 86 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d0d399a4082611c7c9279", "name": "PreCog Sweep - 2026-02-24 02h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T02:30:17.237000", "created": "2026-02-24T02:30:17.237000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 63, "hostname": 186, "URL": 86 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699d063294f72be4702b1636", "name": "PreCog Sweep - 2026-02-24 02h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T02:00:18.163000", "created": "2026-02-24T02:00:18.163000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 86, "domain": 63, "hostname": 186 }, "indicator_count": 335, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cff28db12f743004dc615", "name": "PreCog Sweep - 2026-02-24 01h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T01:30:16.263000", "created": "2026-02-24T01:30:16.263000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 65, "hostname": 186, "URL": 85 }, "indicator_count": 336, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cf82006915c428dd10122", "name": "PreCog Sweep - 2026-02-24 01h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T01:00:16.800000", "created": "2026-02-24T01:00:16.800000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 185, "domain": 67, "URL": 85 }, "indicator_count": 337, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cf1172ceda524c659dbfe", "name": "PreCog Sweep - 2026-02-24 00h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T00:30:15.282000", "created": "2026-02-24T00:30:15.282000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 183, "domain": 70, "URL": 85 }, "indicator_count": 338, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cea14c68b758b5e0638b0", "name": "PreCog Sweep - 2026-02-24 00h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-24T00:00:20.407000", "created": "2026-02-24T00:00:20.407000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 178, "domain": 77, "URL": 85 }, "indicator_count": 340, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ce30950cc4b340ed80f3d", "name": "PreCog Sweep - 2026-02-23 23h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T23:30:17.607000", "created": "2026-02-23T23:30:17.607000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 175, "domain": 81, "URL": 85 }, "indicator_count": 341, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cdc0199addc6c8594a96a", "name": "PreCog Sweep - 2026-02-23 23h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T23:00:17.495000", "created": "2026-02-23T23:00:17.495000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 163, "domain": 107, "URL": 85 }, "indicator_count": 355, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cd4f79fabf019fcae9344", "name": "PreCog Sweep - 2026-02-23 22h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T22:30:15.803000", "created": "2026-02-23T22:30:15.803000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 107, "hostname": 161, "URL": 85 }, "indicator_count": 353, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ccdf03aa92e137aa6f0d3", "name": "PreCog Sweep - 2026-02-23 22h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T22:00:16.808000", "created": "2026-02-23T22:00:16.808000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 160, "domain": 112, "URL": 84 }, "indicator_count": 356, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cc6e82f6a6d58df17417d", "name": "PreCog Sweep - 2026-02-23 21h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T21:30:15.958000", "created": "2026-02-23T21:30:15.958000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 158, "domain": 114, "URL": 84 }, "indicator_count": 356, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cbfe03b59bc4e6db9ff6c", "name": "PreCog Sweep - 2026-02-23 21h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T21:00:16.526000", "created": "2026-02-23T21:00:16.526000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 155, "domain": 118, "URL": 84 }, "indicator_count": 357, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cb8da821560960e7725ca", "name": "PreCog Sweep - 2026-02-23 20h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T20:30:18.110000", "created": "2026-02-23T20:30:18.110000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 123, "hostname": 151, "URL": 84 }, "indicator_count": 358, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699cb1d1f91f2547d417ca5f", "name": "PreCog Sweep - 2026-02-23 20h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T20:00:17.028000", "created": "2026-02-23T20:00:17.028000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 148, "domain": 139, "URL": 84 }, "indicator_count": 371, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699caacabe6f8f93f247e887", "name": "PreCog Sweep - 2026-02-23 19h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T19:30:17.999000", "created": "2026-02-23T19:30:17.999000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 146, "domain": 137, "URL": 84 }, "indicator_count": 367, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699ca3c3eec8c71f9be8387a", "name": "PreCog Sweep - 2026-02-23 19h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T19:00:19.063000", "created": "2026-02-23T19:00:19.063000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 138, "URL": 84, "domain": 156 }, "indicator_count": 378, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699c9cc0fd7b16c68f59d706", "name": "PreCog Sweep - 2026-02-23 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T18:30:24.205000", "created": "2026-02-23T18:30:24.205000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 134, "domain": 157, "URL": 83 }, "indicator_count": 374, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699c95b4d63b3d32fdd5e68b", "name": "PreCog Sweep - 2026-02-23 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T18:00:20.932000", "created": "2026-02-23T18:00:20.932000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 169, "hostname": 127, "URL": 80 }, "indicator_count": 376, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699c8ea79f17fa73279d4be0", "name": "PreCog Sweep - 2026-02-23 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-23T17:30:15.226000", "created": "2026-02-23T17:30:15.226000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 126, "domain": 171, "URL": 80 }, "indicator_count": 377, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "98 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://urlhaus.abuse.ch/browse/", "https://ltna.com.au/cyber", "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 50, "pulses": [ { "id": "699d1091ec69d7e529055573", "name": "URLHaus data - 23-02-2026 (Part 2)", "description": "", "modified": "2026-03-26T02:03:49.946000", "created": "2026-02-24T02:44:33.918000", "tags": [ "32-bit", "elf", "mips", "Mozi", "ClearFake", "geofenced", "ua-wget", "USA", "arm", "mirai", "dropped-by-amadey", "fbf543", "c2-monitor-auto", "Stealc", "opendir", "zip", "bat", "wsh", "txt", "ascii", "powershell", "ps1", "njRAT", "7z", "cab", "iso", "xworm", "CoinMiner", "Encoded", "rev-base64-loader", "SnakeKeylogger", "exe", "archive", "compressed", "Password: lunex", "PureCrypter", "pw-lunex", "backdoor", "censys", "sshdkit", "hajime", "OffLoader", "script", "rat", "RemcosRAT", "jpg-base64-loader", "VIPKeylogger", "PhantomStealer", "Formbook", "connectwise", "screenconnect", "msi", "rmm", "QuasarRAT", "encrypted", "GuLoader", "encodd", "hta", "js", "sh", "BABADEDA", "NetSupport", "encoed", "botnetdomain", "Metasploit", "Rubeus", "meterpreter", "AdaptixC2", "Hive", "Lazagne", "mimikatz", "gafgyt", "DDoSAgent", "Password: ryos", "pw-ryos", "Vidar" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 252, "hostname": 42, "domain": 8 }, "indicator_count": 302, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "68 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a50e982ee9f8602790d627", "name": "Payload_Delivery | Mar 2, 2026", "description": "Payload_Delivery indicators. Date: Mar 2, 2026. Total: 904 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:14:16.201000", "created": "2026-03-02T04:14:16.201000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 371, "hostname": 312, "URL": 218 }, "indicator_count": 901, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a469956618adc66ce65ee9", "name": "PreCog Sweep - 2026-03-01 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-03-01T16:30:13.240000", "created": "2026-03-01T16:30:13.240000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 391, "domain": 107 }, "indicator_count": 498, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a43a9cc30207a2b43be5b2", "name": "Payload_Delivery | Mar 2, 2026", "description": "Payload_Delivery indicators. Date: Mar 2, 2026. Total: 969 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:09:48.358000", "created": "2026-03-01T13:09:48.358000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 393, "domain": 348, "URL": 225 }, "indicator_count": 966, "is_author": false, "is_subscribing": null, "subscriber_count": 98, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40069d24c57cd33ed6e60", "name": "Payload_Delivery | Mar 1, 2026", "description": "Payload_Delivery indicators. Date: Mar 1, 2026. Total: 971 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:01:29.655000", "created": "2026-03-01T09:01:29.655000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 346, "hostname": 397, "URL": 225 }, "indicator_count": 968, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a37ec73ad2fdcbce99a587", "name": "Payload_Delivery | Mar 1, 2026", "description": "Payload_Delivery indicators. Date: Mar 1, 2026. Total: 969 indicators. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-28T23:48:23.607000", "created": "2026-02-28T23:48:23.607000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 414, "domain": 326, "URL": 226 }, "indicator_count": 966, "is_author": false, "is_subscribing": null, "subscriber_count": 97, "modified_text": "93 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f46c07b6be913644f1314", "name": "PreCog Sweep - 2026-02-25 19h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T19:00:16.547000", "created": "2026-02-25T19:00:16.547000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 244, "domain": 108, "URL": 33 }, "indicator_count": 385, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f3fb6130bee1f2c260ac8", "name": "PreCog Sweep - 2026-02-25 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T18:30:14.842000", "created": "2026-02-25T18:30:14.842000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 110, "hostname": 245, "URL": 33 }, "indicator_count": 388, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f38b1a65782a9d9dcf77c", "name": "PreCog Sweep - 2026-02-25 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T18:00:17.950000", "created": "2026-02-25T18:00:17.950000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 107, "URL": 32, "hostname": 249 }, "indicator_count": 388, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699f31a68302605ddecde470", "name": "PreCog Sweep - 2026-02-25 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2026-02-25T17:30:14.415000", "created": "2026-02-25T17:30:14.415000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 243, "domain": 104, "URL": 32 }, "indicator_count": 379, "is_author": false, "is_subscribing": null, "subscriber_count": 196, "modified_text": "96 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "defragglerupdate.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "defragglerupdate.com", "found": true, "verdict": "malicious", "url_count": 1, "online_count": 0, "blacklists": { "spamhaus_dbl": "phishing_domain", "surbl": "not listed" }, "urls": [ { "url": "https://defragglerupdate.com/software.zip", "status": "offline", "threat": "malware_download", "date_added": "2026-02-23", "tags": [ "NetSupport", "rat", "zip" ] } ], "error": null }, "from_cache": true, "_cached_at": 1780419563.7886152 }