{ "type": "URL", "indicator": "https://blvas.online/Zoooom/Windows/invite.php", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://blvas.online/Zoooom/Windows/invite.php", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 4161288049, "indicator": "https://blvas.online/Zoooom/Windows/invite.php", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 50, "pulses": [ { "id": "693e45938d431f40d5e0fe1a", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 144 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T05:03:31.755000", "created": "2025-12-14T05:05:23.154000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "domain": 9, "hostname": 6 }, "indicator_count": 91, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e0d4b455894d98940e5b2", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 141 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T01:02:59.421000", "created": "2025-12-14T01:05:15.004000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dff42b301040a8b4afc64", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 143 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T00:05:56.401000", "created": "2025-12-14T00:05:22.280000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693de31c8d706fb0a8d9cbbf", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T22:01:57.329000", "created": "2025-12-13T22:05:16.726000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dd50b82d3a9426de10a97", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T21:02:35.560000", "created": "2025-12-13T21:05:15.469000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693cd7ef8e8a9a68b2dd786f", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 225 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T03:00:26.732000", "created": "2025-12-13T03:05:19.234000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "142 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c757d86870325ab95fca5", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 244 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T20:05:23.417000", "created": "2025-12-12T20:05:17.867000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4ec247d05016aaedb62c", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(151), Unknown malware(140), Aisuru(45). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:20:02.166000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 42, "domain": 19, "URL": 29 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4b4f02bc250f546de8ca", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 243 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:05:19.140000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c40b27dd722ab351ca103", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(204), Unknown Stealer(201), ClearFake(150), Unknown malware(140), Aisuru(34). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T16:00:22.074000", "created": "2025-12-12T16:20:02.115000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 48, "URL": 40, "domain": 18 }, "indicator_count": 106, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c32a16bf837f7b07a53b6", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(149), Unknown malware(143), Aisuru(24). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T15:04:05.638000", "created": "2025-12-12T15:20:01.305000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 44, "domain": 15, "URL": 69 }, "indicator_count": 128, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d73c4e0ff17a751804265", "name": "PreCog Sweep - 2025-12-13 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T14:10:12.828000", "created": "2025-12-13T14:10:12.828000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 202, "domain": 37, "URL": 38 }, "indicator_count": 277, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d716eafb4c8cc1ea999e3", "name": "PreCog Sweep - 2025-12-13 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T14:00:14.977000", "created": "2025-12-13T14:00:14.977000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 202, "domain": 37, "URL": 38 }, "indicator_count": 277, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d6f159ad8fcd71dea04cc", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:50:13.677000", "created": "2025-12-13T13:50:13.677000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 202, "domain": 37, "URL": 38 }, "indicator_count": 277, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d6cbe174a1b02882b0bc5", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:40:14.117000", "created": "2025-12-13T13:40:14.117000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 203, "domain": 37, "URL": 38 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d6a661456ee93f1c03ace", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:30:14.119000", "created": "2025-12-13T13:30:14.119000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 203, "domain": 37, "URL": 38 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d680dd55e18b166f258c9", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:20:13.968000", "created": "2025-12-13T13:20:13.968000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 204, "domain": 37, "URL": 38 }, "indicator_count": 279, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d65b57a122c16687bacef", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:10:13.876000", "created": "2025-12-13T13:10:13.876000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 203, "domain": 37, "URL": 38 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d635f2bbd8504bb3e99f6", "name": "PreCog Sweep - 2025-12-13 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T13:00:15.539000", "created": "2025-12-13T13:00:15.539000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 203, "domain": 37, "URL": 38 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d6107e492d8c7651f89d8", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:50:15.690000", "created": "2025-12-13T12:50:15.690000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 197, "domain": 43, "URL": 38 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d5eaebdcb0933df6b2420", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:40:14.006000", "created": "2025-12-13T12:40:14.006000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 192, "domain": 43, "URL": 38 }, "indicator_count": 273, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d5c5515b82e46b363e92d", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:30:13.155000", "created": "2025-12-13T12:30:13.155000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 192, "domain": 43, "URL": 38 }, "indicator_count": 273, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d59fc2e07e540f84a1328", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:20:12.716000", "created": "2025-12-13T12:20:12.716000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 191, "domain": 44, "URL": 38 }, "indicator_count": 273, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d57a536a0eec25f31497e", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:10:13.580000", "created": "2025-12-13T12:10:13.580000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 190, "domain": 45, "URL": 38 }, "indicator_count": 273, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d554ff29555be2b1aba7e", "name": "PreCog Sweep - 2025-12-13 12h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T12:00:15.659000", "created": "2025-12-13T12:00:15.659000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 188, "URL": 38, "domain": 40 }, "indicator_count": 266, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d52f63f76b156e876f7cb", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:50:14.325000", "created": "2025-12-13T11:50:14.325000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 38, "domain": 30 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d509e36db8ca3c78c9bea", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:40:14.004000", "created": "2025-12-13T11:40:14.004000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 38, "domain": 30 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d4e4678d388ce857fb884", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:30:14.375000", "created": "2025-12-13T11:30:14.375000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 38, "domain": 30 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d4bedab42fe8ca4ec2a55", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:20:13.066000", "created": "2025-12-13T11:20:13.066000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 162, "URL": 38, "domain": 27 }, "indicator_count": 227, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d4994e2c53a061728cd38", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:10:12.556000", "created": "2025-12-13T11:10:12.556000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 161, "URL": 38, "domain": 27 }, "indicator_count": 226, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d473e14a577b6b356579c", "name": "PreCog Sweep - 2025-12-13 11h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T11:00:14.673000", "created": "2025-12-13T11:00:14.673000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d44e514a577b6b356579b", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:50:13.256000", "created": "2025-12-13T10:50:13.256000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d428c5d58a9003187048b", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:40:12.968000", "created": "2025-12-13T10:40:12.968000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d40351e9b02c789993c8b", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:30:13.815000", "created": "2025-12-13T10:30:13.815000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d3ddccb350e1e1028262a", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:20:12.529000", "created": "2025-12-13T10:20:12.529000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d3b86f4d19280286ac9d6", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:10:14.452000", "created": "2025-12-13T10:10:14.452000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 170, "URL": 37, "domain": 31 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d392e19abcfd93f0e2434", "name": "PreCog Sweep - 2025-12-13 10h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T10:00:14.907000", "created": "2025-12-13T10:00:14.907000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 169, "URL": 39, "domain": 29 }, "indicator_count": 237, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d36d5ca7f27ae8d8ec05c", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:50:13.896000", "created": "2025-12-13T09:50:13.896000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 169, "URL": 39, "domain": 29 }, "indicator_count": 237, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d347db7a0fd63910a3b4b", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:40:13.655000", "created": "2025-12-13T09:40:13.655000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 166, "URL": 39, "domain": 31 }, "indicator_count": 236, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d32263e9ee408b39192a0", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:30:14.326000", "created": "2025-12-13T09:30:14.326000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 167, "domain": 31, "URL": 37 }, "indicator_count": 235, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d2fce2b14ae1071307cbd", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:20:14.303000", "created": "2025-12-13T09:20:14.303000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 169, "domain": 39, "URL": 37 }, "indicator_count": 245, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d2d755ca3a692ded01bec", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:10:13.286000", "created": "2025-12-13T09:10:13.286000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 172, "domain": 39, "URL": 37 }, "indicator_count": 248, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d2b1e3b311870c785acbe", "name": "PreCog Sweep - 2025-12-13 09h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T09:00:14.799000", "created": "2025-12-13T09:00:14.799000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 179, "domain": 41, "URL": 37 }, "indicator_count": 257, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d28c699221ac852b0d818", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:50:14.026000", "created": "2025-12-13T08:50:14.026000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 166, "domain": 27, "URL": 67 }, "indicator_count": 260, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d266d96e2c6e6c451510f", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:40:13.733000", "created": "2025-12-13T08:40:13.733000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 164, "domain": 27, "URL": 76 }, "indicator_count": 267, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d24177da3496005cd9839", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:30:15.679000", "created": "2025-12-13T08:30:15.679000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 163, "domain": 27, "URL": 77 }, "indicator_count": 267, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d21bd17e795dc753fedb0", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:20:13.487000", "created": "2025-12-13T08:20:13.487000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 162, "domain": 27, "URL": 77 }, "indicator_count": 266, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d1f65b258525a36742814", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:10:13.202000", "created": "2025-12-13T08:10:13.202000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 161, "domain": 27, "URL": 77 }, "indicator_count": 265, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c5f36ba47c4826dbd1c24", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:30:14.221000", "created": "2025-12-12T18:30:14.221000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 182, "domain": 109, "URL": 73 }, "indicator_count": 364, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c5cdeed8d4cf1bdf23a55", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:20:14.695000", "created": "2025-12-12T18:20:14.695000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 181, "domain": 109, "URL": 73 }, "indicator_count": 363, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://github.com/pduggusa/dugganusa-research", "https://analytics.dugganusa.com/api/v1/stix/master" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 830 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/blvas.online", "whois": "http://whois.domaintools.com/blvas.online", "domain": "blvas.online", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 50, "pulses": [ { "id": "693e45938d431f40d5e0fe1a", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 144 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T05:03:31.755000", "created": "2025-12-14T05:05:23.154000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "domain": 9, "hostname": 6 }, "indicator_count": 91, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e0d4b455894d98940e5b2", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 141 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T01:02:59.421000", "created": "2025-12-14T01:05:15.004000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dff42b301040a8b4afc64", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 143 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T00:05:56.401000", "created": "2025-12-14T00:05:22.280000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693de31c8d706fb0a8d9cbbf", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T22:01:57.329000", "created": "2025-12-13T22:05:16.726000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dd50b82d3a9426de10a97", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T21:02:35.560000", "created": "2025-12-13T21:05:15.469000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693cd7ef8e8a9a68b2dd786f", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 225 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T03:00:26.732000", "created": "2025-12-13T03:05:19.234000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "142 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c757d86870325ab95fca5", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 244 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T20:05:23.417000", "created": "2025-12-12T20:05:17.867000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4ec247d05016aaedb62c", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(151), Unknown malware(140), Aisuru(45). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:20:02.166000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 42, "domain": 19, "URL": 29 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4b4f02bc250f546de8ca", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 243 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:05:19.140000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c40b27dd722ab351ca103", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(204), Unknown Stealer(201), ClearFake(150), Unknown malware(140), Aisuru(34). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T16:00:22.074000", "created": "2025-12-12T16:20:02.115000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 48, "URL": 40, "domain": 18 }, "indicator_count": 106, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://blvas.online/Zoooom/Windows/invite.php", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://blvas.online/Zoooom/Windows/invite.php", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780517237.4250553 }