{ "type": "Domain", "indicator": "devotetoken.top", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/devotetoken.top", "alexa": "http://www.alexa.com/siteinfo/devotetoken.top", "indicator": "devotetoken.top", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3053313220, "indicator": "devotetoken.top", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 32, "pulses": [ { "id": "69b02cbc2f2a71b7dad550bb", "name": "Phishing | Mar 11, 2026 | Part 131/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 131/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:37:48.078000", "created": "2026-03-10T14:37:48.078000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1633, "domain": 367 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a511dc41ed77c1bc2d4085", "name": "Phishing | Mar 2, 2026 | Part 104/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 104/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:28:12.108000", "created": "2026-03-02T04:28:12.108000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1736, "domain": 264 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a43e346df014e579fdc822", "name": "Phishing | Mar 2, 2026 | Part 105/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 105/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:25:08.686000", "created": "2026-03-01T13:25:08.686000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1653, "domain": 347 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a403f00a408a7ad262f92d", "name": "Phishing | Mar 1, 2026 | Part 105/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 105/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:16:32.417000", "created": "2026-03-01T09:16:32.417000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1653, "domain": 347 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a3824614ffe30f4473aa8e", "name": "Phishing | Mar 1, 2026 | Part 105/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 105/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:03:18.385000", "created": "2026-03-01T00:03:18.385000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1671, "domain": 329 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f90ad435f94ce0f70cd2", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:02:50.815000", "created": "2026-02-20T06:02:50.815000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699766a958528b7e49b986a7", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:38:16.933000", "created": "2026-02-19T19:38:16.933000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997276434564d6c1ec83a5f", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:08:20.943000", "created": "2026-02-19T15:08:20.943000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970838c1eca18679e53eaf", "name": "Phishing | Feb 19, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:55:20.906000", "created": "2026-02-19T12:55:20.906000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699632060cbd6691f89d8368", "name": "Phishing | Feb 19, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:41:26.522000", "created": "2026-02-18T21:41:26.522000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69957311214aa4d110fa5a5c", "name": "Phishing | Feb 18, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:06:41.759000", "created": "2026-02-18T08:06:41.759000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6994ca21dc9964390cd9eaf1", "name": "Phishing | Feb 18, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T20:05:53.896000", "created": "2026-02-17T20:05:53.896000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949780769d5eb09060b667", "name": "Phishing | Feb 18, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:29:52.738000", "created": "2026-02-17T16:29:52.738000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699295923190a28267590101", "name": "Phishing | Feb 16, 2026 | Part 108/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 108/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T03:57:06.229000", "created": "2026-02-16T03:57:06.229000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1670, "domain": 330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6991563ed87d7542387b932e", "name": "Phishing | Feb 15, 2026 | Part 110/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 110/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:14:38.666000", "created": "2026-02-15T05:14:38.666000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 263, "hostname": 1737 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699087a767e35b889d7a6fee", "name": "Phishing | Feb 15, 2026 | Part 111/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 111/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:33:11.269000", "created": "2026-02-14T14:33:11.269000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1695, "domain": 305 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c5a0441da40406d5a8b0c", "name": "Phishing | Feb 11, 2026 | Part 128/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 128/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:29:24.707000", "created": "2026-02-11T10:29:24.707000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1628, "domain": 372 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981a8bd0a36e6047d58ed91", "name": "Phishing | 2026-01-31 | Part 41/163", "description": "Phishing indicators. Date: 2026-01-31. Part 41/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T07:50:21.815000", "created": "2026-02-03T07:50:21.815000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 6639, "domain": 3361 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "117 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6373ddb1f06b9fcb2fc20b96", "name": "CYJAX | Fangxiao a Chinese threat actor", "description": "A large-scale phishing campaign that exploits the reputation of well-known brands is being targeted by a group based in China, according to a report published in the International Security Review (ISR).", "modified": "2022-12-15T18:01:04.713000", "created": "2022-11-15T18:42:57.008000", "tags": [ "android", "fangxiao", "phishing", "triada" ], "references": [ "https://www.cyjax.com/app/uploads/2022/11/Fangxiao-a-Chinese-threat-actor.pdf", "https://www.cyjax.com/app/uploads/2022/11/fangxiao-a-chinese-threat-actor.txt" ], "public": 1, "adversary": "", "targeted_countries": [ "Indonesia", "Singapore" ], "malware_families": [ { "id": "Triada", "display_name": "Triada", "target": null }, { "id": "Phishing", "display_name": "Phishing", "target": null }, { "id": "Fangxiao", "display_name": "Fangxiao", "target": null }, { "id": "Android", "display_name": "Android", "target": null } ], "attack_ids": [ { "id": "T1036", "name": "Masquerading", "display_name": "T1036 - Masquerading" }, { "id": "T1056", "name": "Input Capture", "display_name": "T1056 - Input Capture" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1176", "name": "Browser Extensions", "display_name": "T1176 - Browser Extensions" }, { "id": "T1204", "name": "User Execution", "display_name": "T1204 - User Execution" } ], "industries": [ "Cryptocurrency", "Financial Services", "Transport", "Food", "Pharmaceuticals", "Travel", "Banking", "Retail", "Energy" ], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Cyber74Team", "id": "202637", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_202637/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 9, "URL": 9, "domain": 39440, "email": 22, "hostname": 6 }, "indicator_count": 39486, "is_author": false, "is_subscribing": null, "subscriber_count": 168, "modified_text": "1263 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63769e4a807939f54ee041b3", "name": "Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign", "description": "", "modified": "2022-11-17T20:49:14.078000", "created": "2022-11-17T20:49:14.078000", "tags": [], "references": [ "https://www.cyjax.com/app/uploads/2022/11/fangxiao-a-chinese-threat-actor.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohammedkaif_98", "id": "214759", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 39397 }, "indicator_count": 39397, "is_author": false, "is_subscribing": null, "subscriber_count": 46, "modified_text": "1291 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63769e4582f7fca5a3b40878", "name": "Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign", "description": "", "modified": "2022-11-17T20:49:09.134000", "created": "2022-11-17T20:49:09.134000", "tags": [], "references": [ "https://www.cyjax.com/app/uploads/2022/11/fangxiao-a-chinese-threat-actor.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohammedkaif_98", "id": "214759", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 39397 }, "indicator_count": 39397, "is_author": false, "is_subscribing": null, "subscriber_count": 46, "modified_text": "1291 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63769e427360fe9e614f6a48", "name": "Chinese Hackers Using 42,000 Imposter Domains in Massive Phishing Attack Campaign", "description": "", "modified": "2022-11-17T20:49:06.723000", "created": "2022-11-17T20:49:06.723000", "tags": [], "references": [ "https://www.cyjax.com/app/uploads/2022/11/fangxiao-a-chinese-threat-actor.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohammedkaif_98", "id": "214759", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 39397 }, "indicator_count": 39397, "is_author": false, "is_subscribing": null, "subscriber_count": 47, "modified_text": "1291 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63736ec1ae24ca332dc4c349", "name": "Fangxiao: a Chinese threat actor - Cyjax", "description": "", "modified": "2022-11-15T10:49:37.223000", "created": "2022-11-15T10:49:37.223000", "tags": [ "fangxiao", "phishing", "triada", "china", "cloudflare", "cyjax", "fanxgiao", "october", "emirates", "singapore", "shopee", "unilever", "indonesia" ], "references": [ "https://www.cyjax.com/2022/11/14/fangxiao-a-chinese-threat-actor/" ], "public": 1, "adversary": "Fangxiao", "targeted_countries": [ "Indonesia", "Singapore", "China" ], "malware_families": [ { "id": "Triada", "display_name": "Triada", "target": null }, { "id": "Phishing", "display_name": "Phishing", "target": null } ], "attack_ids": [], "industries": [ "Energy", "Pharmaceuticals", "Banking", "Retail", "Travel" ], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 39397 }, "indicator_count": 39397, "is_author": false, "is_subscribing": null, "subscriber_count": 866, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcfc0d04cac7385808d5", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:44:12.495000", "created": "2022-11-15T02:44:12.495000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 508, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcf6f2aade2e6b5c2bfd", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:44:06.962000", "created": "2022-11-15T02:44:06.962000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 503, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcf56fa2562abf8839be", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:44:05.706000", "created": "2022-11-15T02:44:05.706000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 500, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fce823a0cf2542969ee5", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:52.392000", "created": "2022-11-15T02:43:52.392000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 500, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fce770e0dd03672b95b9", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:51.666000", "created": "2022-11-15T02:43:51.666000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 500, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fce4e53e5f579920e5e3", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:48.441000", "created": "2022-11-15T02:43:48.441000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 500, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcdc13b6be612c3ac2a7", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:40.905000", "created": "2022-11-15T02:43:40.905000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 501, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcd8445c8fd680a58fbb", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:36.542000", "created": "2022-11-15T02:43:36.542000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 500, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6372fcbbdf0f94984ca6b1ee", "name": "42,000 malicious web domains impersonating well-known brands", "description": "", "modified": "2022-11-15T02:43:07.882000", "created": "2022-11-15T02:43:07.882000", "tags": [], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "cryptocti", "id": "110256", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_110256/resized/80/avatar_e237a4257c.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 2, "hostname": 1, "domain": 39397 }, "indicator_count": 39400, "is_author": false, "is_subscribing": null, "subscriber_count": 502, "modified_text": "1293 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "November 15th, 2022 - CryptoGen Cyber Threat Intelligence - 42,000 malicious web domains impersonating well-known brands.pdf", "https://www.cyjax.com/app/uploads/2022/11/fangxiao-a-chinese-threat-actor.txt", "https://www.cyjax.com/2022/11/14/fangxiao-a-chinese-threat-actor/", "https://ltna.com.au/cyber", "https://www.cyjax.com/app/uploads/2022/11/Fangxiao-a-Chinese-threat-actor.pdf" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "Fangxiao" ], "malware_families": [ "Fangxiao", "Android", "Phishing", "Triada" ], "industries": [ "Financial services", "Cryptocurrency", "Retail", "Energy", "Transport", "Pharmaceuticals", "Food", "Banking", "Travel" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 32, "pulses": [ { "id": "69b02cbc2f2a71b7dad550bb", "name": "Phishing | Mar 11, 2026 | Part 131/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 131/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:37:48.078000", "created": "2026-03-10T14:37:48.078000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1633, "domain": 367 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a511dc41ed77c1bc2d4085", "name": "Phishing | Mar 2, 2026 | Part 104/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 104/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:28:12.108000", "created": "2026-03-02T04:28:12.108000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1736, "domain": 264 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a43e346df014e579fdc822", "name": "Phishing | Mar 2, 2026 | Part 105/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 105/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:25:08.686000", "created": "2026-03-01T13:25:08.686000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1653, "domain": 347 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a403f00a408a7ad262f92d", "name": "Phishing | Mar 1, 2026 | Part 105/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 105/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:16:32.417000", "created": "2026-03-01T09:16:32.417000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1653, "domain": 347 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a3824614ffe30f4473aa8e", "name": "Phishing | Mar 1, 2026 | Part 105/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 105/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:03:18.385000", "created": "2026-03-01T00:03:18.385000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1671, "domain": 329 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f90ad435f94ce0f70cd2", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:02:50.815000", "created": "2026-02-20T06:02:50.815000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699766a958528b7e49b986a7", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:38:16.933000", "created": "2026-02-19T19:38:16.933000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997276434564d6c1ec83a5f", "name": "Phishing | Feb 20, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:08:20.943000", "created": "2026-02-19T15:08:20.943000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970838c1eca18679e53eaf", "name": "Phishing | Feb 19, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:55:20.906000", "created": "2026-02-19T12:55:20.906000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699632060cbd6691f89d8368", "name": "Phishing | Feb 19, 2026 | Part 106/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 106/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:41:26.522000", "created": "2026-02-18T21:41:26.522000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1668, "domain": 332 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "devotetoken.top", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "devotetoken.top", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780274208.678561 }