{
  "type": "Domain",
  "indicator": "dvwastt.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/dvwastt.com",
    "alexa": "http://www.alexa.com/siteinfo/dvwastt.com",
    "indicator": "dvwastt.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3786956736,
      "indicator": "dvwastt.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 13,
      "pulses": [
        {
          "id": "63d10e46581edfe9bba0da3f",
          "name": "Microsoft Phishing Collection",
          "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense",
          "modified": "2026-05-31T01:39:52.036000",
          "created": "2023-01-25T11:11:02.458000",
          "tags": [
            "urls",
            "phishing",
            "scam",
            "microsoft"
          ],
          "references": [
            "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 3159628,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "noladefense",
            "id": "222814",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 14,
            "hostname": 49,
            "domain": 21
          },
          "indicator_count": 84,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 978,
          "modified_text": "1 day ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "6341d1aa0a02a3f6251ab540",
          "name": "Sinking Yachts Phishing Domains",
          "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.",
          "modified": "2026-05-14T18:21:18.798000",
          "created": "2022-10-08T19:38:18.341000",
          "tags": [
            "discord",
            "roblox",
            "steam",
            "phishing"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "gaming"
          ],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 75566,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 1,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "__akac__",
            "id": "175104",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 542,
            "hostname": 646
          },
          "indicator_count": 1188,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 521,
          "modified_text": "17 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "69aefcc5d258300fb3e319e4",
          "name": "sinking yachts clone __akac__ ....",
          "description": "",
          "modified": "2026-05-14T18:21:18.798000",
          "created": "2026-03-09T17:00:53.305000",
          "tags": [
            "discord",
            "roblox",
            "steam",
            "phishing"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "gaming"
          ],
          "TLP": "white",
          "cloned_from": "6341d1aa0a02a3f6251ab540",
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 542,
            "hostname": 646
          },
          "indicator_count": 1188,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "17 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "69aefcc810c78c89c7f6bb87",
          "name": "sinking yachts clone __akac__ ....",
          "description": "",
          "modified": "2026-05-14T18:21:18.798000",
          "created": "2026-03-09T17:00:56.488000",
          "tags": [
            "discord",
            "roblox",
            "steam",
            "phishing"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [
            "gaming"
          ],
          "TLP": "white",
          "cloned_from": "6341d1aa0a02a3f6251ab540",
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 542,
            "hostname": 647
          },
          "indicator_count": 1189,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "17 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "69b02cfda513eb9cdbdc9f22",
          "name": "Phishing | Mar 11, 2026 | Part 139/776",
          "description": "Phishing indicators. Date: Mar 11, 2026. Part 139/776. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-10T14:38:53.836000",
          "created": "2026-03-10T14:38:53.836000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1282,
            "domain": 718
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "83 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "698c5a3f4ca71cbd1001fdf4",
          "name": "Phishing | Feb 11, 2026 | Part 136/783",
          "description": "Phishing indicators. Date: Feb 11, 2026. Part 136/783. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-11T10:30:23.162000",
          "created": "2026-02-11T10:30:23.162000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 728,
            "hostname": 1272
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "110 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6981a8c931050b3014f2dc9e",
          "name": "Phishing | 2026-01-31 | Part 42/163",
          "description": "Phishing indicators. Date: 2026-01-31. Part 42/163. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-03T07:50:33.247000",
          "created": "2026-02-03T07:50:33.247000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 6203,
            "domain": 3797
          },
          "indicator_count": 10000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "118 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6785dccb041b628fde283705",
          "name": "phish.directory",
          "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory",
          "modified": "2026-01-25T18:05:17.629000",
          "created": "2025-01-14T03:40:59.456000",
          "tags": [
            "phishing",
            "scams",
            "steam",
            "discord",
            "roblox"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 17,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": true,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "jaspermayone",
            "id": "305022",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 41514,
            "hostname": 11318
          },
          "indicator_count": 52832,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 3,
          "modified_text": "126 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "688f1877ae2224ff454d2436",
          "name": "Microsoft Phishing Collection - Follow: https://twitter.com/noladefense",
          "description": "",
          "modified": "2025-08-03T08:06:15.561000",
          "created": "2025-08-03T08:06:15.561000",
          "tags": [
            "urls",
            "phishing",
            "scam",
            "microsoft"
          ],
          "references": [
            "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "63d10e46581edfe9bba0da3f",
          "export_count": 10,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 10,
            "hostname": 44,
            "domain": 18
          },
          "indicator_count": 72,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 141,
          "modified_text": "302 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "67dd8fe7cf298fa34843de78",
          "name": "NSTH-POC",
          "description": "For POC",
          "modified": "2025-03-24T06:10:43.345000",
          "created": "2025-03-21T16:12:23.823000",
          "tags": [],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 5,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": true,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "nsthsharedotx",
            "id": "274519",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 154,
            "FileHash-SHA1": 3,
            "domain": 8339,
            "hostname": 10122
          },
          "indicator_count": 18618,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 3,
          "modified_text": "434 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "65cffae5588f64be4ed29ce2",
          "name": "Twitter Feed - noladefense - 16-02-2024",
          "description": "",
          "modified": "2024-03-18T00:02:35.519000",
          "created": "2024-02-17T00:16:37.232000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://twitter.com/noladefense/status/1758289498553921596",
            "https://twitter.com/noladefense/status/1758289511002595695",
            "https://twitter.com/noladefense/status/1758289910753382651",
            "https://twitter.com/noladefense/status/1758293143403819205",
            "https://twitter.com/noladefense/status/1758296595928387725",
            "https://twitter.com/noladefense/status/1758303840472813568",
            "https://twitter.com/noladefense/status/1758303899469959626",
            "https://twitter.com/noladefense/status/1758304605488759131",
            "https://twitter.com/noladefense/status/1758304620940538035",
            "https://twitter.com/noladefense/status/1758304626330194229",
            "https://twitter.com/noladefense/status/1758304648950079492",
            "https://twitter.com/noladefense/status/1758304685943898280",
            "https://twitter.com/noladefense/status/1758304702796624172",
            "https://twitter.com/noladefense/status/1758304726683210144",
            "https://twitter.com/noladefense/status/1758304732911735184",
            "https://twitter.com/noladefense/status/1758304751484051725",
            "https://twitter.com/noladefense/status/1758304877959131456",
            "https://twitter.com/noladefense/status/1758308752606834890",
            "https://twitter.com/noladefense/status/1758308806621110329",
            "https://twitter.com/noladefense/status/1758308852741668931",
            "https://twitter.com/noladefense/status/1758308907854839957",
            "https://twitter.com/noladefense/status/1758309046505832866",
            "https://twitter.com/noladefense/status/1758312237540778025",
            "https://twitter.com/noladefense/status/1758312312773947572",
            "https://twitter.com/noladefense/status/1758312375814402184",
            "https://twitter.com/noladefense/status/1758312431414116578",
            "https://twitter.com/noladefense/status/1758312484379713599",
            "https://twitter.com/noladefense/status/1758312542164635675",
            "https://twitter.com/noladefense/status/1758315795384340723",
            "https://twitter.com/noladefense/status/1758315851965514207",
            "https://twitter.com/noladefense/status/1758317800307740981",
            "https://twitter.com/noladefense/status/1758317956172325184",
            "https://twitter.com/noladefense/status/1758318009758687526",
            "https://twitter.com/noladefense/status/1758319806569128214",
            "https://twitter.com/noladefense/status/1758319868187713918",
            "https://twitter.com/noladefense/status/1758320657740271619",
            "https://twitter.com/noladefense/status/1758324582459560118",
            "https://twitter.com/noladefense/status/1758326528528584945",
            "https://twitter.com/noladefense/status/1758326730903749068",
            "https://twitter.com/noladefense/status/1758329164329795949",
            "https://twitter.com/noladefense/status/1758329521642606621",
            "https://twitter.com/noladefense/status/1758332258983854464",
            "https://twitter.com/noladefense/status/1758333030395973857",
            "https://twitter.com/noladefense/status/1758334812069208552",
            "https://twitter.com/noladefense/status/1758334877529710996",
            "https://twitter.com/noladefense/status/1758334903018459335",
            "https://twitter.com/noladefense/status/1758335079409951160",
            "https://twitter.com/noladefense/status/1758337196791111762",
            "https://twitter.com/noladefense/status/1758338903281369442",
            "https://twitter.com/noladefense/status/1758346104603599134",
            "https://twitter.com/noladefense/status/1758346158441640438",
            "https://twitter.com/noladefense/status/1758346312041320806",
            "https://twitter.com/noladefense/status/1758347843994107906",
            "https://twitter.com/noladefense/status/1758351127576301726",
            "https://twitter.com/noladefense/status/1758354906790924452",
            "https://twitter.com/noladefense/status/1758358143199826425",
            "https://twitter.com/noladefense/status/1758361453130559546",
            "https://twitter.com/noladefense/status/1758364759399837747",
            "https://twitter.com/noladefense/status/1758364818673746153",
            "https://twitter.com/noladefense/status/1758364877611999560",
            "https://twitter.com/noladefense/status/1758365017039143390",
            "https://twitter.com/noladefense/status/1758365197658448234",
            "https://twitter.com/noladefense/status/1758366324567196139",
            "https://twitter.com/noladefense/status/1758366425712873600",
            "https://twitter.com/noladefense/status/1758366530197233757",
            "https://twitter.com/noladefense/status/1758368197827334415",
            "https://twitter.com/noladefense/status/1758371275657863434",
            "https://twitter.com/noladefense/status/1758371341432950959",
            "https://twitter.com/noladefense/status/1758371726000329122",
            "https://twitter.com/noladefense/status/1758378647621152823",
            "https://twitter.com/noladefense/status/1758378715757629791",
            "https://twitter.com/noladefense/status/1758378779406143810",
            "https://twitter.com/noladefense/status/1758380107398324692",
            "https://twitter.com/noladefense/status/1758380124460687635",
            "https://twitter.com/noladefense/status/1758386204691546469",
            "https://twitter.com/noladefense/status/1758387573532016700",
            "https://twitter.com/noladefense/status/1758389312842784871",
            "https://twitter.com/noladefense/status/1758389605630411163",
            "https://twitter.com/noladefense/status/1758391423173341342",
            "https://twitter.com/noladefense/status/1758397127607136435",
            "https://twitter.com/noladefense/status/1758405160424943861",
            "https://twitter.com/noladefense/status/1758405292667101312",
            "https://twitter.com/noladefense/status/1758410282924155340",
            "https://twitter.com/noladefense/status/1758410298703192320",
            "https://twitter.com/noladefense/status/1758410469071573400",
            "https://twitter.com/noladefense/status/1758410485475471484",
            "https://twitter.com/noladefense/status/1758410504807006537",
            "https://twitter.com/noladefense/status/1758411140739072085",
            "https://twitter.com/noladefense/status/1758416764268945595",
            "https://twitter.com/noladefense/status/1758418252844106021",
            "https://twitter.com/noladefense/status/1758420098275057742",
            "https://twitter.com/noladefense/status/1758422020696555646",
            "https://twitter.com/noladefense/status/1758425394930204725",
            "https://twitter.com/noladefense/status/1758425453063225513",
            "https://twitter.com/noladefense/status/1758425492229627957",
            "https://twitter.com/noladefense/status/1758425518964121745",
            "https://twitter.com/noladefense/status/1758425534411776236",
            "https://twitter.com/noladefense/status/1758433113833656582",
            "https://twitter.com/noladefense/status/1758436756125323596",
            "https://twitter.com/noladefense/status/1758440671218725239",
            "https://twitter.com/noladefense/status/1758440681519956098",
            "https://twitter.com/noladefense/status/1758441585350459854",
            "https://twitter.com/noladefense/status/1758450396110991790",
            "https://twitter.com/noladefense/status/1758462931736330461",
            "https://twitter.com/noladefense/status/1758470693706989629",
            "https://twitter.com/noladefense/status/1758470712388473037",
            "https://twitter.com/noladefense/status/1758470723230732296",
            "https://twitter.com/noladefense/status/1758470741501104348",
            "https://twitter.com/noladefense/status/1758470751739342889",
            "https://twitter.com/noladefense/status/1758470761898017123",
            "https://twitter.com/noladefense/status/1758470774283780444",
            "https://twitter.com/noladefense/status/1758470820383297564",
            "https://twitter.com/noladefense/status/1758470957834895534",
            "https://twitter.com/noladefense/status/1758470971952877734",
            "https://twitter.com/noladefense/status/1758474572414812628",
            "https://twitter.com/noladefense/status/1758474634561761543",
            "https://twitter.com/noladefense/status/1758478442415198587",
            "https://twitter.com/noladefense/status/1758501907369230688",
            "https://twitter.com/noladefense/status/1758515991720411323",
            "https://twitter.com/noladefense/status/1758516010410222051",
            "https://twitter.com/noladefense/status/1758516042211483850",
            "https://twitter.com/noladefense/status/1758516048972636163",
            "https://twitter.com/noladefense/status/1758516068014801040",
            "https://twitter.com/noladefense/status/1758516094183125057",
            "https://twitter.com/noladefense/status/1758516326027432174",
            "https://twitter.com/noladefense/status/1758531046436474922",
            "https://twitter.com/noladefense/status/1758531141143867765",
            "https://twitter.com/noladefense/status/1758531395637440959",
            "https://twitter.com/noladefense/status/1758546221109571592",
            "https://twitter.com/noladefense/status/1758546310129467744",
            "https://twitter.com/noladefense/status/1758546339388866989",
            "https://twitter.com/noladefense/status/1758546350990413847",
            "https://twitter.com/noladefense/status/1758561301914169838",
            "https://twitter.com/noladefense/status/1758561337217515898",
            "https://twitter.com/noladefense/status/1758561351855726830",
            "https://twitter.com/noladefense/status/1758561431094522076",
            "https://twitter.com/noladefense/status/1758567551775232494",
            "https://twitter.com/noladefense/status/1758569324246086137",
            "https://twitter.com/noladefense/status/1758574393758720207",
            "https://twitter.com/noladefense/status/1758576426356248944",
            "https://twitter.com/noladefense/status/1758576438150635786",
            "https://twitter.com/noladefense/status/1758576535760441544",
            "https://twitter.com/noladefense/status/1758576555251405235",
            "https://twitter.com/noladefense/status/1758581220642873605",
            "https://twitter.com/noladefense/status/1758591523975832060",
            "https://twitter.com/noladefense/status/1758591570419323351",
            "https://twitter.com/noladefense/status/1758591641634459910",
            "https://twitter.com/noladefense/status/1758606638104076507",
            "https://twitter.com/noladefense/status/1758606651370717206",
            "https://twitter.com/noladefense/status/1758606713354174945",
            "https://twitter.com/noladefense/status/1758606727736443274",
            "https://twitter.com/noladefense/status/1758606755280359557",
            "https://twitter.com/noladefense/status/1758606913481093239",
            "https://twitter.com/noladefense/status/1758610000593707490",
            "https://twitter.com/noladefense/status/1758636779245351225",
            "https://twitter.com/noladefense/status/1758636866126094370",
            "https://twitter.com/noladefense/status/1758636883574452441",
            "https://twitter.com/noladefense/status/1758636896539070571"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 82,
            "URL": 126,
            "FileHash-SHA256": 152,
            "domain": 40,
            "FileHash-MD5": 7
          },
          "indicator_count": 407,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1622,
          "modified_text": "805 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "65d39a15a654825fc9781462",
          "name": "Microsoft Phishing Collection",
          "description": "",
          "modified": "2024-02-19T18:12:37.807000",
          "created": "2024-02-19T18:12:37.807000",
          "tags": [
            "urls",
            "phishing",
            "scam",
            "microsoft"
          ],
          "references": [
            "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "63d10e46581edfe9bba0da3f",
          "export_count": 9,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Enqrypted",
            "id": "272105",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_272105/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 8,
            "hostname": 8,
            "domain": 2
          },
          "indicator_count": 18,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 57,
          "modified_text": "832 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 0
        },
        {
          "id": "6567d401423440496f4c1a8e",
          "name": "Malware Filter - Phishing List - 29-11-2023",
          "description": "",
          "modified": "2023-11-30T00:14:54.918000",
          "created": "2023-11-30T00:14:54.918000",
          "tags": [],
          "references": [
            "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 13,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 638,
            "domain": 211
          },
          "indicator_count": 849,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "914 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://twitter.com/noladefense/status/1758364759399837747",
        "https://twitter.com/noladefense/status/1758338903281369442",
        "https://twitter.com/noladefense/status/1758433113833656582",
        "https://twitter.com/noladefense/status/1758317956172325184",
        "https://twitter.com/noladefense/status/1758410485475471484",
        "https://twitter.com/noladefense/status/1758289910753382651",
        "https://twitter.com/noladefense/status/1758576426356248944",
        "https://twitter.com/noladefense/status/1758308806621110329",
        "https://twitter.com/noladefense/status/1758319806569128214",
        "https://twitter.com/noladefense/status/1758470957834895534",
        "https://twitter.com/noladefense/status/1758304648950079492",
        "https://twitter.com/noladefense/status/1758576555251405235",
        "https://twitter.com/noladefense/status/1758546350990413847",
        "https://twitter.com/noladefense/status/1758591523975832060",
        "https://twitter.com/noladefense/status/1758308752606834890",
        "https://twitter.com/noladefense/status/1758546221109571592",
        "https://twitter.com/noladefense/status/1758576438150635786",
        "https://twitter.com/noladefense/status/1758516010410222051",
        "https://twitter.com/noladefense/status/1758334877529710996",
        "https://twitter.com/noladefense/status/1758516326027432174",
        "https://twitter.com/noladefense/status/1758410298703192320",
        "https://twitter.com/noladefense/status/1758420098275057742",
        "https://twitter.com/noladefense/status/1758531395637440959",
        "https://twitter.com/noladefense/status/1758304702796624172",
        "https://twitter.com/noladefense/status/1758411140739072085",
        "https://twitter.com/noladefense/status/1758380124460687635",
        "https://twitter.com/noladefense/status/1758470774283780444",
        "https://ltna.com.au/cyber",
        "https://twitter.com/noladefense/status/1758326730903749068",
        "https://twitter.com/noladefense/status/1758416764268945595",
        "https://twitter.com/noladefense/status/1758389605630411163",
        "https://twitter.com/noladefense/status/1758378647621152823",
        "https://twitter.com/noladefense/status/1758470761898017123",
        "https://twitter.com/noladefense/status/1758561351855726830",
        "https://twitter.com/noladefense/status/1758354906790924452",
        "https://twitter.com/noladefense/status/1758391423173341342",
        "https://twitter.com/noladefense/status/1758304751484051725",
        "https://twitter.com/noladefense/status/1758289498553921596",
        "https://twitter.com/noladefense/status/1758351127576301726",
        "https://twitter.com/noladefense/status/1758470693706989629",
        "https://twitter.com/noladefense/status/1758516048972636163",
        "https://twitter.com/noladefense/status/1758346104603599134",
        "https://twitter.com/noladefense/status/1758304626330194229",
        "https://twitter.com/noladefense/status/1758312484379713599",
        "https://twitter.com/noladefense/status/1758329164329795949",
        "https://twitter.com/noladefense/status/1758304605488759131",
        "https://twitter.com/noladefense/status/1758312312773947572",
        "https://twitter.com/noladefense/status/1758289511002595695",
        "https://twitter.com/noladefense/status/1758441585350459854",
        "https://twitter.com/noladefense/status/1758312375814402184",
        "https://twitter.com/noladefense/status/1758308852741668931",
        "https://twitter.com/noladefense/status/1758606638104076507",
        "https://twitter.com/noladefense/status/1758574393758720207",
        "https://twitter.com/noladefense/status/1758364877611999560",
        "https://twitter.com/noladefense/status/1758315795384340723",
        "https://twitter.com/noladefense/status/1758567551775232494",
        "https://twitter.com/noladefense/status/1758462931736330461",
        "https://twitter.com/noladefense/status/1758636883574452441",
        "https://twitter.com/noladefense/status/1758425518964121745",
        "https://twitter.com/noladefense/status/1758516068014801040",
        "https://twitter.com/noladefense/status/1758591570419323351",
        "https://twitter.com/noladefense/status/1758312542164635675",
        "https://twitter.com/noladefense/status/1758347843994107906",
        "https://twitter.com/noladefense/status/1758337196791111762",
        "https://twitter.com/noladefense/status/1758397127607136435",
        "https://twitter.com/noladefense/status/1758515991720411323",
        "https://twitter.com/noladefense/status/1758319868187713918",
        "https://twitter.com/noladefense/status/1758636779245351225",
        "https://twitter.com/noladefense/status/1758303899469959626",
        "https://twitter.com/noladefense/status/1758371275657863434",
        "https://twitter.com/noladefense/status/1758304685943898280",
        "https://twitter.com/noladefense/status/1758546339388866989",
        "https://twitter.com/noladefense/status/1758606755280359557",
        "https://twitter.com/noladefense/status/1758329521642606621",
        "https://twitter.com/noladefense/status/1758308907854839957",
        "https://twitter.com/noladefense/status/1758606713354174945",
        "https://twitter.com/noladefense/status/1758440681519956098",
        "https://twitter.com/noladefense/status/1758501907369230688",
        "https://twitter.com/noladefense/status/1758561337217515898",
        "https://twitter.com/noladefense/status/1758317800307740981",
        "https://twitter.com/noladefense/status/1758531141143867765",
        "https://twitter.com/noladefense/status/1758425394930204725",
        "https://twitter.com/noladefense/status/1758425453063225513",
        "https://twitter.com/noladefense/status/1758303840472813568",
        "https://twitter.com/noladefense/status/1758581220642873605",
        "https://twitter.com/noladefense/status/1758474572414812628",
        "https://twitter.com/noladefense/status/1758436756125323596",
        "https://twitter.com/noladefense/status/1758320657740271619",
        "https://twitter.com/noladefense/status/1758346158441640438",
        "https://twitter.com/noladefense/status/1758440671218725239",
        "https://twitter.com/noladefense/status/1758470971952877734",
        "https://twitter.com/noladefense/status/1758606727736443274",
        "https://twitter.com/noladefense/status/1758470741501104348",
        "https://twitter.com/noladefense/status/1758358143199826425",
        "https://twitter.com/noladefense/status/1758405292667101312",
        "https://twitter.com/noladefense/status/1758364818673746153",
        "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70",
        "https://twitter.com/noladefense/status/1758410504807006537",
        "https://twitter.com/noladefense/status/1758315851965514207",
        "https://twitter.com/noladefense/status/1758333030395973857",
        "https://twitter.com/noladefense/status/1758576535760441544",
        "https://twitter.com/noladefense/status/1758410469071573400",
        "https://twitter.com/noladefense/status/1758470751739342889",
        "https://twitter.com/noladefense/status/1758296595928387725",
        "https://twitter.com/noladefense/status/1758312237540778025",
        "https://twitter.com/noladefense/status/1758324582459560118",
        "https://twitter.com/noladefense/status/1758516042211483850",
        "https://twitter.com/noladefense/status/1758418252844106021",
        "https://twitter.com/noladefense/status/1758304620940538035",
        "https://twitter.com/noladefense/status/1758304877959131456",
        "https://twitter.com/noladefense/status/1758610000593707490",
        "https://twitter.com/noladefense/status/1758516094183125057",
        "https://twitter.com/noladefense/status/1758546310129467744",
        "https://twitter.com/noladefense/status/1758636866126094370",
        "https://twitter.com/noladefense/status/1758636896539070571",
        "https://twitter.com/noladefense/status/1758531046436474922",
        "https://twitter.com/noladefense/status/1758346312041320806",
        "https://twitter.com/noladefense/status/1758410282924155340",
        "https://twitter.com/noladefense/status/1758361453130559546",
        "https://twitter.com/noladefense/status/1758334903018459335",
        "https://twitter.com/noladefense/status/1758366530197233757",
        "https://twitter.com/noladefense/status/1758378715757629791",
        "https://twitter.com/noladefense/status/1758470723230732296",
        "https://twitter.com/noladefense/status/1758591641634459910",
        "https://twitter.com/noladefense/status/1758425492229627957",
        "https://twitter.com/noladefense/status/1758561431094522076",
        "https://twitter.com/noladefense/status/1758365197658448234",
        "https://twitter.com/noladefense/status/1758332258983854464",
        "https://twitter.com/noladefense/status/1758606651370717206",
        "https://twitter.com/noladefense/status/1758309046505832866",
        "https://twitter.com/noladefense/status/1758304726683210144",
        "https://twitter.com/noladefense/status/1758335079409951160",
        "https://twitter.com/noladefense/status/1758606913481093239",
        "https://twitter.com/noladefense/status/1758334812069208552",
        "https://twitter.com/noladefense/status/1758318009758687526",
        "https://twitter.com/noladefense/status/1758365017039143390",
        "https://twitter.com/noladefense/status/1758368197827334415",
        "https://twitter.com/noladefense/status/1758378779406143810",
        "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt",
        "https://twitter.com/noladefense/status/1758569324246086137",
        "https://twitter.com/noladefense/status/1758474634561761543",
        "https://twitter.com/noladefense/status/1758450396110991790",
        "https://twitter.com/noladefense/status/1758478442415198587",
        "https://twitter.com/noladefense/status/1758389312842784871",
        "https://twitter.com/noladefense/status/1758422020696555646",
        "https://twitter.com/noladefense/status/1758366425712873600",
        "https://twitter.com/noladefense/status/1758366324567196139",
        "https://twitter.com/noladefense/status/1758326528528584945",
        "https://twitter.com/noladefense/status/1758380107398324692",
        "https://twitter.com/noladefense/status/1758561301914169838",
        "https://twitter.com/noladefense/status/1758293143403819205",
        "https://twitter.com/noladefense/status/1758425534411776236",
        "https://twitter.com/noladefense/status/1758312431414116578",
        "https://twitter.com/noladefense/status/1758387573532016700",
        "https://twitter.com/noladefense/status/1758470712388473037",
        "https://twitter.com/noladefense/status/1758371726000329122",
        "https://twitter.com/noladefense/status/1758405160424943861",
        "https://twitter.com/noladefense/status/1758304732911735184",
        "https://twitter.com/noladefense/status/1758470820383297564",
        "https://twitter.com/noladefense/status/1758371341432950959",
        "https://twitter.com/noladefense/status/1758386204691546469"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [
            "Gaming"
          ]
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 13,
  "pulses": [
    {
      "id": "63d10e46581edfe9bba0da3f",
      "name": "Microsoft Phishing Collection",
      "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense",
      "modified": "2026-05-31T01:39:52.036000",
      "created": "2023-01-25T11:11:02.458000",
      "tags": [
        "urls",
        "phishing",
        "scam",
        "microsoft"
      ],
      "references": [
        "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 3159628,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "noladefense",
        "id": "222814",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 14,
        "hostname": 49,
        "domain": 21
      },
      "indicator_count": 84,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 978,
      "modified_text": "1 day ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 0
    },
    {
      "id": "6341d1aa0a02a3f6251ab540",
      "name": "Sinking Yachts Phishing Domains",
      "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.",
      "modified": "2026-05-14T18:21:18.798000",
      "created": "2022-10-08T19:38:18.341000",
      "tags": [
        "discord",
        "roblox",
        "steam",
        "phishing"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "gaming"
      ],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 75566,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 1,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "__akac__",
        "id": "175104",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 542,
        "hostname": 646
      },
      "indicator_count": 1188,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 521,
      "modified_text": "17 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 0
    },
    {
      "id": "69aefcc5d258300fb3e319e4",
      "name": "sinking yachts clone __akac__ ....",
      "description": "",
      "modified": "2026-05-14T18:21:18.798000",
      "created": "2026-03-09T17:00:53.305000",
      "tags": [
        "discord",
        "roblox",
        "steam",
        "phishing"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "gaming"
      ],
      "TLP": "white",
      "cloned_from": "6341d1aa0a02a3f6251ab540",
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 542,
        "hostname": 646
      },
      "indicator_count": 1188,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "17 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 0
    },
    {
      "id": "69aefcc810c78c89c7f6bb87",
      "name": "sinking yachts clone __akac__ ....",
      "description": "",
      "modified": "2026-05-14T18:21:18.798000",
      "created": "2026-03-09T17:00:56.488000",
      "tags": [
        "discord",
        "roblox",
        "steam",
        "phishing"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [
        "gaming"
      ],
      "TLP": "white",
      "cloned_from": "6341d1aa0a02a3f6251ab540",
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 542,
        "hostname": 647
      },
      "indicator_count": 1189,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "17 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 0
    },
    {
      "id": "69b02cfda513eb9cdbdc9f22",
      "name": "Phishing | Mar 11, 2026 | Part 139/776",
      "description": "Phishing indicators. Date: Mar 11, 2026. Part 139/776. For more threat intelligence visit https://ltna.com.au/cyber",
      "modified": "2026-03-10T14:38:53.836000",
      "created": "2026-03-10T14:38:53.836000",
      "tags": [
        "phishing"
      ],
      "references": [
        "https://ltna.com.au/cyber"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "LTNA-Australia",
        "id": "380633",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 1282,
        "domain": 718
      },
      "indicator_count": 2000,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 91,
      "modified_text": "83 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "698c5a3f4ca71cbd1001fdf4",
      "name": "Phishing | Feb 11, 2026 | Part 136/783",
      "description": "Phishing indicators. Date: Feb 11, 2026. Part 136/783. For more threat intelligence visit https://ltna.com.au/cyber",
      "modified": "2026-02-11T10:30:23.162000",
      "created": "2026-02-11T10:30:23.162000",
      "tags": [
        "phishing",
        "phishing-database"
      ],
      "references": [
        "https://ltna.com.au/cyber"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "LTNA-Australia",
        "id": "380633",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 728,
        "hostname": 1272
      },
      "indicator_count": 2000,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 91,
      "modified_text": "110 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6981a8c931050b3014f2dc9e",
      "name": "Phishing | 2026-01-31 | Part 42/163",
      "description": "Phishing indicators. Date: 2026-01-31. Part 42/163. For more threat intelligence visit https://ltna.com.au/cyber",
      "modified": "2026-02-03T07:50:33.247000",
      "created": "2026-02-03T07:50:33.247000",
      "tags": [
        "phishing",
        "phishing-database"
      ],
      "references": [
        "https://ltna.com.au/cyber"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "LTNA-Australia",
        "id": "380633",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 6203,
        "domain": 3797
      },
      "indicator_count": 10000,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 91,
      "modified_text": "118 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6785dccb041b628fde283705",
      "name": "phish.directory",
      "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory",
      "modified": "2026-01-25T18:05:17.629000",
      "created": "2025-01-14T03:40:59.456000",
      "tags": [
        "phishing",
        "scams",
        "steam",
        "discord",
        "roblox"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 17,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": true,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "jaspermayone",
        "id": "305022",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 41514,
        "hostname": 11318
      },
      "indicator_count": 52832,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 3,
      "modified_text": "126 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "688f1877ae2224ff454d2436",
      "name": "Microsoft Phishing Collection - Follow: https://twitter.com/noladefense",
      "description": "",
      "modified": "2025-08-03T08:06:15.561000",
      "created": "2025-08-03T08:06:15.561000",
      "tags": [
        "urls",
        "phishing",
        "scam",
        "microsoft"
      ],
      "references": [
        "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "63d10e46581edfe9bba0da3f",
      "export_count": 10,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Q.Vashti",
        "id": "337942",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 10,
        "hostname": 44,
        "domain": 18
      },
      "indicator_count": 72,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 141,
      "modified_text": "302 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 0
    },
    {
      "id": "67dd8fe7cf298fa34843de78",
      "name": "NSTH-POC",
      "description": "For POC",
      "modified": "2025-03-24T06:10:43.345000",
      "created": "2025-03-21T16:12:23.823000",
      "tags": [],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 5,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": true,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "nsthsharedotx",
        "id": "274519",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 154,
        "FileHash-SHA1": 3,
        "domain": 8339,
        "hostname": 10122
      },
      "indicator_count": 18618,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 3,
      "modified_text": "434 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "dvwastt.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "dvwastt.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780327714.0548887
}