{ "type": "URL", "indicator": "https://bpnnw.com/jp", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://bpnnw.com/jp", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3637972557, "indicator": "https://bpnnw.com/jp", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 7, "pulses": [ { "id": "63d10cda81e3658e38dec59c", "name": "Amazon Phishing Collection", "description": "This page stores Amazon phishing page IOCs. Legitimate website for the brand is https://amazon.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2025-12-16T22:37:39.690000", "created": "2023-01-25T11:04:58.120000", "tags": [ "urls", "phishing", "scam", "amazon" ], "references": [ "https://www.virustotal.com/gui/collection/5c309a3b670313e97d8015d71161dd35d4a3d28f22ad35ddc633d91683a5c60a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 207, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3, "hostname": 2, "domain": 1 }, "indicator_count": 6, "is_author": false, "is_subscribing": null, "subscriber_count": 438, "modified_text": "124 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "65612df1531ea0c35d79b1f4", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "Source: http://dev.findatoyota.com/\ntracking, vehicle tracking, mobile phone tracking, active threat , warbot, target tracking, tracking targeted associates, network, cyber stalking, boomrmq string, malvertizing\n\n\nResource: https://www.hybrid-analysis.com/sample/ea8a341cbd3666af7bfce260d86b465844314d86faba75c80eab3ce4d3bc3b45", "modified": "2023-12-24T22:02:36.942000", "created": "2023-11-24T23:12:49.909000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 223, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65612df2a7b287c614a94f94", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "Source: http://dev.findatoyota.com/\ntracking, vehicle tracking, mobile phone tracking, active threat , warbot, target tracking, tracking targeted associates, network, cyber stalking, boomrmq string, malvertizing\n\n\nResource: https://www.hybrid-analysis.com/sample/ea8a341cbd3666af7bfce260d86b465844314d86faba75c80eab3ce4d3bc3b45", "modified": "2023-12-24T22:02:36.942000", "created": "2023-11-24T23:12:50.158000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 222, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "656e19dfeee6ead11dc6354e", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "", "modified": "2023-12-24T22:02:36.942000", "created": "2023-12-04T18:26:39.448000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "65612df2a7b287c614a94f94", "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 230, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64ff7418030c1908b63c1da3", "name": "Amazon Phishing Collection", "description": "", "modified": "2023-09-11T20:10:00.089000", "created": "2023-09-11T20:10:00.089000", "tags": [ "urls", "phishing", "scam", "amazon" ], "references": [ "https://www.virustotal.com/gui/collection/5c309a3b670313e97d8015d71161dd35d4a3d28f22ad35ddc633d91683a5c60a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10cda81e3658e38dec59c", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3, "hostname": 3 }, "indicator_count": 6, "is_author": false, "is_subscribing": null, "subscriber_count": 218, "modified_text": "951 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "63ffe9bf72b67129fca2e13a", "name": "Twitter Feed - romonlyht - 01-03-2023", "description": "", "modified": "2023-04-01T00:02:17.805000", "created": "2023-03-02T00:11:43.847000", "tags": [ "phishing" ], "references": [ "https://twitter.com/romonlyht/status/1630724373526216706", "https://twitter.com/romonlyht/status/1630733066900762625", "https://twitter.com/romonlyht/status/1630733441393360897", "https://twitter.com/romonlyht/status/1630733819786706945", "https://twitter.com/romonlyht/status/1630734117049626625", "https://twitter.com/romonlyht/status/1630739033793105920", "https://twitter.com/romonlyht/status/1630742677716336643", "https://twitter.com/romonlyht/status/1630742979744006146", "https://twitter.com/romonlyht/status/1630747462649647109", "https://twitter.com/romonlyht/status/1630747748713795584", "https://twitter.com/romonlyht/status/1630748000078409728", "https://twitter.com/romonlyht/status/1630752364218175489", "https://twitter.com/romonlyht/status/1630760060904427521", "https://twitter.com/romonlyht/status/1630760566963990528", "https://twitter.com/romonlyht/status/1630761054648303617", "https://twitter.com/romonlyht/status/1630761803465768963", "https://twitter.com/romonlyht/status/1630762301602279425", "https://twitter.com/romonlyht/status/1630762753240752128", "https://twitter.com/romonlyht/status/1630774286926639105", "https://twitter.com/romonlyht/status/1630774793959247874", "https://twitter.com/romonlyht/status/1630775158159073281", "https://twitter.com/romonlyht/status/1630775549496012806", "https://twitter.com/romonlyht/status/1630777630948753408", "https://twitter.com/romonlyht/status/1630777952400199681", "https://twitter.com/romonlyht/status/1630778297276841990", "https://twitter.com/romonlyht/status/1630778765637980160", "https://twitter.com/romonlyht/status/1630779259873824768", "https://twitter.com/romonlyht/status/1630918791227113473" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 34, "FileHash-MD5": 1, "FileHash-SHA256": 2 }, "indicator_count": 37, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "1114 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63fe9855619498a894e1a027", "name": "Twitter Feed - noladefense - 28-02-2023", "description": "", "modified": "2023-03-31T00:00:04.367000", "created": "2023-03-01T00:12:05.531000", "tags": [ "phishing" ], "references": [ "https://twitter.com/noladefense/status/1630357327718100995", "https://twitter.com/noladefense/status/1630357329186025474", "https://twitter.com/noladefense/status/1630359683776016386", "https://twitter.com/noladefense/status/1630364255064129536", "https://twitter.com/noladefense/status/1630364377084821505", "https://twitter.com/noladefense/status/1630364539257487360", "https://twitter.com/noladefense/status/1630364866836938752", "https://twitter.com/noladefense/status/1630364873317134336", "https://twitter.com/noladefense/status/1630364877985398785", "https://twitter.com/noladefense/status/1630364884813639680", "https://twitter.com/noladefense/status/1630364890362703872", "https://twitter.com/noladefense/status/1630364904891793413", "https://twitter.com/noladefense/status/1630372450234974212", "https://twitter.com/noladefense/status/1630374930066882561", "https://twitter.com/noladefense/status/1630379994223370241", "https://twitter.com/noladefense/status/1630379998367436801", "https://twitter.com/noladefense/status/1630380004998623233", "https://twitter.com/noladefense/status/1630380009377472513", "https://twitter.com/noladefense/status/1630380015123587077", "https://twitter.com/noladefense/status/1630380036061646848", "https://twitter.com/noladefense/status/1630394177115639809", "https://twitter.com/noladefense/status/1630394694172651521", "https://twitter.com/noladefense/status/1630395375780495360", "https://twitter.com/noladefense/status/1630395605305499649", "https://twitter.com/noladefense/status/1630395840085868545", "https://twitter.com/noladefense/status/1630395906343174144", "https://twitter.com/noladefense/status/1630396114326175744", "https://twitter.com/noladefense/status/1630402631641313281", "https://twitter.com/noladefense/status/1630402648519188481", "https://twitter.com/noladefense/status/1630407635785641985", "https://twitter.com/noladefense/status/1630408466434015232", "https://twitter.com/noladefense/status/1630409247266689024", "https://twitter.com/noladefense/status/1630409740575551489", "https://twitter.com/noladefense/status/1630409756178259972", "https://twitter.com/noladefense/status/1630409815921942530", "https://twitter.com/noladefense/status/1630409875565031426", "https://twitter.com/noladefense/status/1630409987393462274", "https://twitter.com/noladefense/status/1630410057182527488", "https://twitter.com/noladefense/status/1630410213466537986", "https://twitter.com/noladefense/status/1630410222228439041", "https://twitter.com/noladefense/status/1630410662730924032", "https://twitter.com/noladefense/status/1630410938766467072", "https://twitter.com/noladefense/status/1630411814084177920", "https://twitter.com/noladefense/status/1630411829431107584", "https://twitter.com/noladefense/status/1630417724143812608", "https://twitter.com/noladefense/status/1630417720935063556", "https://twitter.com/noladefense/status/1630417771711348738", "https://twitter.com/noladefense/status/1630417780104208389", "https://twitter.com/noladefense/status/1630425302139564032", "https://twitter.com/noladefense/status/1630425327372578818", "https://twitter.com/noladefense/status/1630428361901199363", "https://twitter.com/noladefense/status/1630428781847404546", "https://twitter.com/noladefense/status/1630428981760606208", "https://twitter.com/noladefense/status/1630429775943593985", "https://twitter.com/noladefense/status/1630430081452482561", "https://twitter.com/noladefense/status/1630440419606642688", "https://twitter.com/noladefense/status/1630445470878236675", "https://twitter.com/noladefense/status/1630446559597920256", "https://twitter.com/noladefense/status/1630450291685441539", "https://twitter.com/noladefense/status/1630450299432206336", "https://twitter.com/noladefense/status/1630455482262380545", "https://twitter.com/noladefense/status/1630464189994082305", "https://twitter.com/noladefense/status/1630464508752691200", "https://twitter.com/noladefense/status/1630470599385423875", "https://twitter.com/noladefense/status/1630478131818577922", "https://twitter.com/noladefense/status/1630478152161021953", "https://twitter.com/noladefense/status/1630479525355159555", "https://twitter.com/noladefense/status/1630479793694154752", "https://twitter.com/noladefense/status/1630480406565797889", "https://twitter.com/noladefense/status/1630480965762990083", "https://twitter.com/noladefense/status/1630488035988045830", "https://twitter.com/noladefense/status/1630488040073314304", "https://twitter.com/noladefense/status/1630488043051266049", "https://twitter.com/noladefense/status/1630488060935782400", "https://twitter.com/noladefense/status/1630493250162245634", "https://twitter.com/noladefense/status/1630493252716462080", "https://twitter.com/noladefense/status/1630493268537495555", "https://twitter.com/noladefense/status/1630497159685480448", "https://twitter.com/noladefense/status/1630512487610064896", "https://twitter.com/noladefense/status/1630512851717615617", "https://twitter.com/noladefense/status/1630514084427726848", "https://twitter.com/noladefense/status/1630546078394208259", "https://twitter.com/noladefense/status/1630553631907782659", "https://twitter.com/noladefense/status/1630561160264052737", "https://twitter.com/noladefense/status/1630561187803934721", "https://twitter.com/noladefense/status/1630561197417197569", "https://twitter.com/noladefense/status/1630561213326450688", "https://twitter.com/noladefense/status/1630561217189146625", "https://twitter.com/noladefense/status/1630561250043129857", "https://twitter.com/noladefense/status/1630561255000817664", "https://twitter.com/noladefense/status/1630561268129046531", "https://twitter.com/noladefense/status/1630566552721403905", "https://twitter.com/noladefense/status/1630568757377617920", "https://twitter.com/noladefense/status/1630568795717746688", "https://twitter.com/noladefense/status/1630576260190466049", "https://twitter.com/noladefense/status/1630576314565443584", "https://twitter.com/noladefense/status/1630576349013221378", "https://twitter.com/noladefense/status/1630583019370164225", "https://twitter.com/noladefense/status/1630583080862793728", "https://twitter.com/noladefense/status/1630583144247074818", "https://twitter.com/noladefense/status/1630583362417991684", "https://twitter.com/noladefense/status/1630583806754185218", "https://twitter.com/noladefense/status/1630584313363267585", "https://twitter.com/noladefense/status/1630584701931978754", "https://twitter.com/noladefense/status/1630598911827095553", "https://twitter.com/noladefense/status/1630598944500621314", "https://twitter.com/noladefense/status/1630598952171995137", "https://twitter.com/noladefense/status/1630602388808560641", "https://twitter.com/noladefense/status/1630602706590072832", "https://twitter.com/noladefense/status/1630602708645298183", "https://twitter.com/noladefense/status/1630602709261860871", "https://twitter.com/noladefense/status/1630602716081733633", "https://twitter.com/noladefense/status/1630602756066095104", "https://twitter.com/noladefense/status/1630602775745765377", "https://twitter.com/noladefense/status/1630602780627836931", "https://twitter.com/noladefense/status/1630621551849619463", "https://twitter.com/noladefense/status/1630621576344354832", "https://twitter.com/noladefense/status/1630621590005202956", "https://twitter.com/noladefense/status/1630629145175638017", "https://twitter.com/noladefense/status/1630635838651416602", "https://twitter.com/noladefense/status/1630636660147777536", "https://twitter.com/noladefense/status/1630654467631640578", "https://twitter.com/noladefense/status/1630670308381274113", "https://twitter.com/noladefense/status/1630670941813461007", "https://twitter.com/noladefense/status/1630676777319251973", "https://twitter.com/noladefense/status/1630702592773746688", "https://twitter.com/noladefense/status/1630702644493709312" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 111 }, "indicator_count": 111, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "1115 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/noladefense/status/1630409875565031426", "https://twitter.com/noladefense/status/1630380015123587077", "https://twitter.com/romonlyht/status/1630752364218175489", "https://twitter.com/noladefense/status/1630636660147777536", "https://twitter.com/romonlyht/status/1630739033793105920", "https://twitter.com/noladefense/status/1630702644493709312", "https://twitter.com/noladefense/status/1630440419606642688", "https://twitter.com/noladefense/status/1630379998367436801", "https://twitter.com/noladefense/status/1630364377084821505", "https://twitter.com/noladefense/status/1630670941813461007", "https://twitter.com/noladefense/status/1630425327372578818", "https://twitter.com/noladefense/status/1630409987393462274", "https://twitter.com/noladefense/status/1630470599385423875", "https://twitter.com/noladefense/status/1630635838651416602", "https://twitter.com/noladefense/status/1630455482262380545", "https://twitter.com/noladefense/status/1630479793694154752", "https://twitter.com/noladefense/status/1630602709261860871", "https://twitter.com/noladefense/status/1630602706590072832", "https://twitter.com/noladefense/status/1630409756178259972", "https://twitter.com/romonlyht/status/1630760060904427521", "https://twitter.com/noladefense/status/1630402648519188481", "https://twitter.com/noladefense/status/1630364539257487360", "https://twitter.com/noladefense/status/1630514084427726848", "https://twitter.com/noladefense/status/1630670308381274113", "https://twitter.com/noladefense/status/1630409815921942530", "https://twitter.com/noladefense/status/1630394177115639809", "https://twitter.com/noladefense/status/1630621590005202956", "https://twitter.com/noladefense/status/1630561213326450688", "https://twitter.com/noladefense/status/1630478152161021953", "https://twitter.com/noladefense/status/1630561197417197569", "https://twitter.com/noladefense/status/1630480965762990083", "https://twitter.com/noladefense/status/1630512487610064896", "https://twitter.com/noladefense/status/1630359683776016386", "https://twitter.com/noladefense/status/1630583362417991684", "https://twitter.com/noladefense/status/1630410222228439041", "https://twitter.com/noladefense/status/1630512851717615617", "https://twitter.com/noladefense/status/1630417771711348738", "https://twitter.com/noladefense/status/1630583144247074818", "https://twitter.com/romonlyht/status/1630733819786706945", "https://twitter.com/romonlyht/status/1630747748713795584", "https://www.virustotal.com/gui/collection/5c309a3b670313e97d8015d71161dd35d4a3d28f22ad35ddc633d91683a5c60a", "https://twitter.com/noladefense/status/1630561160264052737", "https://twitter.com/noladefense/status/1630395906343174144", "https://twitter.com/noladefense/status/1630357327718100995", "https://twitter.com/romonlyht/status/1630777630948753408", "https://twitter.com/noladefense/status/1630409247266689024", "https://twitter.com/romonlyht/status/1630775549496012806", "https://twitter.com/noladefense/status/1630410057182527488", "https://twitter.com/noladefense/status/1630497159685480448", "https://twitter.com/noladefense/status/1630598911827095553", "https://twitter.com/noladefense/status/1630425302139564032", "https://twitter.com/noladefense/status/1630364884813639680", "https://twitter.com/noladefense/status/1630583019370164225", "https://twitter.com/noladefense/status/1630488035988045830", "https://twitter.com/noladefense/status/1630629145175638017", "https://twitter.com/noladefense/status/1630380036061646848", "https://twitter.com/noladefense/status/1630561187803934721", "https://twitter.com/noladefense/status/1630395840085868545", "https://twitter.com/noladefense/status/1630364873317134336", "https://twitter.com/noladefense/status/1630407635785641985", "https://twitter.com/romonlyht/status/1630761054648303617", "https://twitter.com/noladefense/status/1630561255000817664", "https://twitter.com/noladefense/status/1630374930066882561", "https://twitter.com/romonlyht/status/1630733441393360897", "https://twitter.com/noladefense/status/1630702592773746688", "https://twitter.com/noladefense/status/1630598952171995137", "https://twitter.com/romonlyht/status/1630724373526216706", "https://twitter.com/noladefense/status/1630602388808560641", "https://twitter.com/romonlyht/status/1630760566963990528", "https://twitter.com/noladefense/status/1630394694172651521", "https://twitter.com/noladefense/status/1630417720935063556", "https://twitter.com/noladefense/status/1630493268537495555", "https://twitter.com/noladefense/status/1630621551849619463", "https://twitter.com/noladefense/status/1630417780104208389", "https://twitter.com/noladefense/status/1630450299432206336", "https://twitter.com/noladefense/status/1630576314565443584", "https://twitter.com/noladefense/status/1630621576344354832", "https://twitter.com/noladefense/status/1630364890362703872", "https://twitter.com/romonlyht/status/1630918791227113473", "https://twitter.com/noladefense/status/1630602716081733633", "https://twitter.com/noladefense/status/1630429775943593985", "https://twitter.com/romonlyht/status/1630774793959247874", "https://twitter.com/noladefense/status/1630428361901199363", "https://twitter.com/noladefense/status/1630364866836938752", "https://twitter.com/noladefense/status/1630372450234974212", "https://twitter.com/noladefense/status/1630676777319251973", "https://twitter.com/noladefense/status/1630493252716462080", "https://twitter.com/noladefense/status/1630428781847404546", "https://twitter.com/noladefense/status/1630364255064129536", "https://twitter.com/romonlyht/status/1630778297276841990", "https://twitter.com/romonlyht/status/1630774286926639105", "https://twitter.com/noladefense/status/1630450291685441539", "https://twitter.com/noladefense/status/1630464508752691200", "https://twitter.com/romonlyht/status/1630747462649647109", "https://twitter.com/romonlyht/status/1630779259873824768", "https://twitter.com/noladefense/status/1630480406565797889", "https://twitter.com/noladefense/status/1630546078394208259", "https://twitter.com/noladefense/status/1630478131818577922", "https://twitter.com/noladefense/status/1630602780627836931", "https://twitter.com/romonlyht/status/1630742677716336643", "https://twitter.com/noladefense/status/1630446559597920256", "https://twitter.com/noladefense/status/1630411829431107584", "https://twitter.com/noladefense/status/1630576349013221378", "https://twitter.com/noladefense/status/1630479525355159555", "https://twitter.com/noladefense/status/1630488060935782400", "https://twitter.com/noladefense/status/1630379994223370241", "https://twitter.com/noladefense/status/1630396114326175744", "https://twitter.com/noladefense/status/1630561217189146625", "https://twitter.com/noladefense/status/1630584701931978754", "https://twitter.com/noladefense/status/1630364904891793413", "https://twitter.com/noladefense/status/1630430081452482561", "https://twitter.com/romonlyht/status/1630734117049626625", "https://twitter.com/noladefense/status/1630602775745765377", "https://twitter.com/noladefense/status/1630488043051266049", "https://twitter.com/noladefense/status/1630357329186025474", "https://twitter.com/noladefense/status/1630602756066095104", "https://twitter.com/noladefense/status/1630411814084177920", "https://twitter.com/noladefense/status/1630584313363267585", "https://twitter.com/noladefense/status/1630409740575551489", "https://twitter.com/noladefense/status/1630566552721403905", "https://twitter.com/noladefense/status/1630408466434015232", "https://twitter.com/noladefense/status/1630568795717746688", "https://twitter.com/noladefense/status/1630402631641313281", "https://twitter.com/romonlyht/status/1630733066900762625", "https://twitter.com/noladefense/status/1630380009377472513", "https://twitter.com/noladefense/status/1630410213466537986", "https://twitter.com/noladefense/status/1630428981760606208", "https://twitter.com/noladefense/status/1630410938766467072", "https://twitter.com/noladefense/status/1630464189994082305", "https://twitter.com/noladefense/status/1630561250043129857", "https://twitter.com/noladefense/status/1630417724143812608", "https://twitter.com/noladefense/status/1630598944500621314", "https://twitter.com/romonlyht/status/1630762301602279425", "https://twitter.com/noladefense/status/1630380004998623233", "https://twitter.com/noladefense/status/1630488040073314304", "https://twitter.com/romonlyht/status/1630761803465768963", "https://twitter.com/romonlyht/status/1630762753240752128", "https://twitter.com/romonlyht/status/1630777952400199681", "https://twitter.com/romonlyht/status/1630742979744006146", "https://twitter.com/noladefense/status/1630493250162245634", "https://twitter.com/noladefense/status/1630576260190466049", "https://twitter.com/romonlyht/status/1630778765637980160", "https://twitter.com/noladefense/status/1630364877985398785", "https://twitter.com/noladefense/status/1630553631907782659", "https://twitter.com/noladefense/status/1630568757377617920", "https://twitter.com/noladefense/status/1630583080862793728", "https://twitter.com/noladefense/status/1630561268129046531", "https://twitter.com/noladefense/status/1630654467631640578", "https://twitter.com/noladefense/status/1630602708645298183", "https://twitter.com/noladefense/status/1630410662730924032", "https://twitter.com/romonlyht/status/1630748000078409728", "https://twitter.com/romonlyht/status/1630775158159073281", "https://twitter.com/noladefense/status/1630395605305499649", "https://twitter.com/noladefense/status/1630395375780495360", "https://twitter.com/noladefense/status/1630445470878236675", "https://twitter.com/noladefense/status/1630583806754185218" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 28843 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/bpnnw.com", "whois": "http://whois.domaintools.com/bpnnw.com", "domain": "bpnnw.com", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 7, "pulses": [ { "id": "63d10cda81e3658e38dec59c", "name": "Amazon Phishing Collection", "description": "This page stores Amazon phishing page IOCs. Legitimate website for the brand is https://amazon.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2025-12-16T22:37:39.690000", "created": "2023-01-25T11:04:58.120000", "tags": [ "urls", "phishing", "scam", "amazon" ], "references": [ "https://www.virustotal.com/gui/collection/5c309a3b670313e97d8015d71161dd35d4a3d28f22ad35ddc633d91683a5c60a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 207, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3, "hostname": 2, "domain": 1 }, "indicator_count": 6, "is_author": false, "is_subscribing": null, "subscriber_count": 438, "modified_text": "124 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "65612df1531ea0c35d79b1f4", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "Source: http://dev.findatoyota.com/\ntracking, vehicle tracking, mobile phone tracking, active threat , warbot, target tracking, tracking targeted associates, network, cyber stalking, boomrmq string, malvertizing\n\n\nResource: https://www.hybrid-analysis.com/sample/ea8a341cbd3666af7bfce260d86b465844314d86faba75c80eab3ce4d3bc3b45", "modified": "2023-12-24T22:02:36.942000", "created": "2023-11-24T23:12:49.909000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 223, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65612df2a7b287c614a94f94", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "Source: http://dev.findatoyota.com/\ntracking, vehicle tracking, mobile phone tracking, active threat , warbot, target tracking, tracking targeted associates, network, cyber stalking, boomrmq string, malvertizing\n\n\nResource: https://www.hybrid-analysis.com/sample/ea8a341cbd3666af7bfce260d86b465844314d86faba75c80eab3ce4d3bc3b45", "modified": "2023-12-24T22:02:36.942000", "created": "2023-11-24T23:12:50.158000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 222, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "656e19dfeee6ead11dc6354e", "name": "BlackNET RAT | CIArmyTracking: http://dev.findatoyota.com/", "description": "", "modified": "2023-12-24T22:02:36.942000", "created": "2023-12-04T18:26:39.448000", "tags": [ "adgroupid", "x350", "lwii", "ejan", "kfrontier", "qkvt0tvj ejan", "eja ota", "njii", "mqkvt0tvj ejan", "eqkoatlvqia", "unknown", "expiration", "no expiration", "url https", "url http", "iocs", "vj101", "slc1", "scan endpoints", "all octoseek", "create new", "uw1600", "uh1200", "next", "pulse use", "searchbox0", "kwwikipedia", "bit64", "oswindows", "cardstandard", "pack", "kw1download", "qchlemail no", "bit32bit", "ver9", "from", "mpass", "num0", "dig0", "kbetu1", "maxads0", "kld1040", "opnslfp1", "downloader", "pdf report", "clickid", "price", "campaignid", "domain", "text", "hostname", "aufffdufffd", "hostname xn", "pcap", "filehashsha256", "stix", "filehashmd5", "filehashsha1" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "65612df2a7b287c614a94f94", "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "scoreblue", "id": "254100", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_254100/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA1": 805, "URL": 9065, "hostname": 3080, "FileHash-MD5": 1373, "domain": 1190, "FileHash-SHA256": 3468, "email": 6, "CIDR": 4, "CVE": 12 }, "indicator_count": 19003, "is_author": false, "is_subscribing": null, "subscriber_count": 230, "modified_text": "847 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64ff7418030c1908b63c1da3", "name": "Amazon Phishing Collection", "description": "", "modified": "2023-09-11T20:10:00.089000", "created": "2023-09-11T20:10:00.089000", "tags": [ "urls", "phishing", "scam", "amazon" ], "references": [ "https://www.virustotal.com/gui/collection/5c309a3b670313e97d8015d71161dd35d4a3d28f22ad35ddc633d91683a5c60a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10cda81e3658e38dec59c", "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 3, "hostname": 3 }, "indicator_count": 6, "is_author": false, "is_subscribing": null, "subscriber_count": 218, "modified_text": "951 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "63ffe9bf72b67129fca2e13a", "name": "Twitter Feed - romonlyht - 01-03-2023", "description": "", "modified": "2023-04-01T00:02:17.805000", "created": "2023-03-02T00:11:43.847000", "tags": [ "phishing" ], "references": [ "https://twitter.com/romonlyht/status/1630724373526216706", "https://twitter.com/romonlyht/status/1630733066900762625", "https://twitter.com/romonlyht/status/1630733441393360897", "https://twitter.com/romonlyht/status/1630733819786706945", "https://twitter.com/romonlyht/status/1630734117049626625", "https://twitter.com/romonlyht/status/1630739033793105920", "https://twitter.com/romonlyht/status/1630742677716336643", "https://twitter.com/romonlyht/status/1630742979744006146", "https://twitter.com/romonlyht/status/1630747462649647109", "https://twitter.com/romonlyht/status/1630747748713795584", "https://twitter.com/romonlyht/status/1630748000078409728", "https://twitter.com/romonlyht/status/1630752364218175489", "https://twitter.com/romonlyht/status/1630760060904427521", "https://twitter.com/romonlyht/status/1630760566963990528", "https://twitter.com/romonlyht/status/1630761054648303617", "https://twitter.com/romonlyht/status/1630761803465768963", "https://twitter.com/romonlyht/status/1630762301602279425", "https://twitter.com/romonlyht/status/1630762753240752128", "https://twitter.com/romonlyht/status/1630774286926639105", "https://twitter.com/romonlyht/status/1630774793959247874", "https://twitter.com/romonlyht/status/1630775158159073281", "https://twitter.com/romonlyht/status/1630775549496012806", "https://twitter.com/romonlyht/status/1630777630948753408", "https://twitter.com/romonlyht/status/1630777952400199681", "https://twitter.com/romonlyht/status/1630778297276841990", "https://twitter.com/romonlyht/status/1630778765637980160", "https://twitter.com/romonlyht/status/1630779259873824768", "https://twitter.com/romonlyht/status/1630918791227113473" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 11, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 34, "FileHash-MD5": 1, "FileHash-SHA256": 2 }, "indicator_count": 37, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "1114 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "63fe9855619498a894e1a027", "name": "Twitter Feed - noladefense - 28-02-2023", "description": "", "modified": "2023-03-31T00:00:04.367000", "created": "2023-03-01T00:12:05.531000", "tags": [ "phishing" ], "references": [ "https://twitter.com/noladefense/status/1630357327718100995", "https://twitter.com/noladefense/status/1630357329186025474", "https://twitter.com/noladefense/status/1630359683776016386", "https://twitter.com/noladefense/status/1630364255064129536", "https://twitter.com/noladefense/status/1630364377084821505", "https://twitter.com/noladefense/status/1630364539257487360", "https://twitter.com/noladefense/status/1630364866836938752", "https://twitter.com/noladefense/status/1630364873317134336", "https://twitter.com/noladefense/status/1630364877985398785", "https://twitter.com/noladefense/status/1630364884813639680", "https://twitter.com/noladefense/status/1630364890362703872", "https://twitter.com/noladefense/status/1630364904891793413", "https://twitter.com/noladefense/status/1630372450234974212", "https://twitter.com/noladefense/status/1630374930066882561", "https://twitter.com/noladefense/status/1630379994223370241", "https://twitter.com/noladefense/status/1630379998367436801", "https://twitter.com/noladefense/status/1630380004998623233", "https://twitter.com/noladefense/status/1630380009377472513", "https://twitter.com/noladefense/status/1630380015123587077", "https://twitter.com/noladefense/status/1630380036061646848", "https://twitter.com/noladefense/status/1630394177115639809", "https://twitter.com/noladefense/status/1630394694172651521", "https://twitter.com/noladefense/status/1630395375780495360", "https://twitter.com/noladefense/status/1630395605305499649", "https://twitter.com/noladefense/status/1630395840085868545", "https://twitter.com/noladefense/status/1630395906343174144", "https://twitter.com/noladefense/status/1630396114326175744", "https://twitter.com/noladefense/status/1630402631641313281", "https://twitter.com/noladefense/status/1630402648519188481", "https://twitter.com/noladefense/status/1630407635785641985", "https://twitter.com/noladefense/status/1630408466434015232", "https://twitter.com/noladefense/status/1630409247266689024", "https://twitter.com/noladefense/status/1630409740575551489", "https://twitter.com/noladefense/status/1630409756178259972", "https://twitter.com/noladefense/status/1630409815921942530", "https://twitter.com/noladefense/status/1630409875565031426", "https://twitter.com/noladefense/status/1630409987393462274", "https://twitter.com/noladefense/status/1630410057182527488", "https://twitter.com/noladefense/status/1630410213466537986", "https://twitter.com/noladefense/status/1630410222228439041", "https://twitter.com/noladefense/status/1630410662730924032", "https://twitter.com/noladefense/status/1630410938766467072", "https://twitter.com/noladefense/status/1630411814084177920", "https://twitter.com/noladefense/status/1630411829431107584", "https://twitter.com/noladefense/status/1630417724143812608", "https://twitter.com/noladefense/status/1630417720935063556", "https://twitter.com/noladefense/status/1630417771711348738", "https://twitter.com/noladefense/status/1630417780104208389", "https://twitter.com/noladefense/status/1630425302139564032", "https://twitter.com/noladefense/status/1630425327372578818", "https://twitter.com/noladefense/status/1630428361901199363", "https://twitter.com/noladefense/status/1630428781847404546", "https://twitter.com/noladefense/status/1630428981760606208", "https://twitter.com/noladefense/status/1630429775943593985", "https://twitter.com/noladefense/status/1630430081452482561", "https://twitter.com/noladefense/status/1630440419606642688", "https://twitter.com/noladefense/status/1630445470878236675", "https://twitter.com/noladefense/status/1630446559597920256", "https://twitter.com/noladefense/status/1630450291685441539", "https://twitter.com/noladefense/status/1630450299432206336", "https://twitter.com/noladefense/status/1630455482262380545", "https://twitter.com/noladefense/status/1630464189994082305", "https://twitter.com/noladefense/status/1630464508752691200", "https://twitter.com/noladefense/status/1630470599385423875", "https://twitter.com/noladefense/status/1630478131818577922", "https://twitter.com/noladefense/status/1630478152161021953", "https://twitter.com/noladefense/status/1630479525355159555", "https://twitter.com/noladefense/status/1630479793694154752", "https://twitter.com/noladefense/status/1630480406565797889", "https://twitter.com/noladefense/status/1630480965762990083", "https://twitter.com/noladefense/status/1630488035988045830", "https://twitter.com/noladefense/status/1630488040073314304", "https://twitter.com/noladefense/status/1630488043051266049", "https://twitter.com/noladefense/status/1630488060935782400", "https://twitter.com/noladefense/status/1630493250162245634", "https://twitter.com/noladefense/status/1630493252716462080", "https://twitter.com/noladefense/status/1630493268537495555", "https://twitter.com/noladefense/status/1630497159685480448", "https://twitter.com/noladefense/status/1630512487610064896", "https://twitter.com/noladefense/status/1630512851717615617", "https://twitter.com/noladefense/status/1630514084427726848", "https://twitter.com/noladefense/status/1630546078394208259", "https://twitter.com/noladefense/status/1630553631907782659", "https://twitter.com/noladefense/status/1630561160264052737", "https://twitter.com/noladefense/status/1630561187803934721", "https://twitter.com/noladefense/status/1630561197417197569", "https://twitter.com/noladefense/status/1630561213326450688", "https://twitter.com/noladefense/status/1630561217189146625", "https://twitter.com/noladefense/status/1630561250043129857", "https://twitter.com/noladefense/status/1630561255000817664", "https://twitter.com/noladefense/status/1630561268129046531", "https://twitter.com/noladefense/status/1630566552721403905", "https://twitter.com/noladefense/status/1630568757377617920", "https://twitter.com/noladefense/status/1630568795717746688", "https://twitter.com/noladefense/status/1630576260190466049", "https://twitter.com/noladefense/status/1630576314565443584", "https://twitter.com/noladefense/status/1630576349013221378", "https://twitter.com/noladefense/status/1630583019370164225", "https://twitter.com/noladefense/status/1630583080862793728", "https://twitter.com/noladefense/status/1630583144247074818", "https://twitter.com/noladefense/status/1630583362417991684", "https://twitter.com/noladefense/status/1630583806754185218", "https://twitter.com/noladefense/status/1630584313363267585", "https://twitter.com/noladefense/status/1630584701931978754", "https://twitter.com/noladefense/status/1630598911827095553", "https://twitter.com/noladefense/status/1630598944500621314", "https://twitter.com/noladefense/status/1630598952171995137", "https://twitter.com/noladefense/status/1630602388808560641", "https://twitter.com/noladefense/status/1630602706590072832", "https://twitter.com/noladefense/status/1630602708645298183", "https://twitter.com/noladefense/status/1630602709261860871", "https://twitter.com/noladefense/status/1630602716081733633", "https://twitter.com/noladefense/status/1630602756066095104", "https://twitter.com/noladefense/status/1630602775745765377", "https://twitter.com/noladefense/status/1630602780627836931", "https://twitter.com/noladefense/status/1630621551849619463", "https://twitter.com/noladefense/status/1630621576344354832", "https://twitter.com/noladefense/status/1630621590005202956", "https://twitter.com/noladefense/status/1630629145175638017", "https://twitter.com/noladefense/status/1630635838651416602", "https://twitter.com/noladefense/status/1630636660147777536", "https://twitter.com/noladefense/status/1630654467631640578", "https://twitter.com/noladefense/status/1630670308381274113", "https://twitter.com/noladefense/status/1630670941813461007", "https://twitter.com/noladefense/status/1630676777319251973", "https://twitter.com/noladefense/status/1630702592773746688", "https://twitter.com/noladefense/status/1630702644493709312" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 111 }, "indicator_count": 111, "is_author": false, "is_subscribing": null, "subscriber_count": 1600, "modified_text": "1115 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://bpnnw.com/jp", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://bpnnw.com/jp", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1776641968.9675977 }