{ "type": "URL", "indicator": "https://pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev/tomo.html", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev/tomo.html", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 3671619202, "indicator": "https://pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev/tomo.html", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 20, "pulses": [ { "id": "63d10e46581edfe9bba0da3f", "name": "Microsoft Phishing Collection", "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-06-03T20:38:06.109000", "created": "2023-01-25T11:11:02.458000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3171627, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 13, "hostname": 49, "domain": 21 }, "indicator_count": 83, "is_author": false, "is_subscribing": null, "subscriber_count": 978, "modified_text": "48 minutes ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "688f1877ae2224ff454d2436", "name": "Microsoft Phishing Collection - Follow: https://twitter.com/noladefense", "description": "", "modified": "2025-08-03T08:06:15.561000", "created": "2025-08-03T08:06:15.561000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 10, "hostname": 44, "domain": 18 }, "indicator_count": 72, "is_author": false, "is_subscribing": null, "subscriber_count": 141, "modified_text": "304 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "65d39a15a654825fc9781462", "name": "Microsoft Phishing Collection", "description": "", "modified": "2024-02-19T18:12:37.807000", "created": "2024-02-19T18:12:37.807000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Enqrypted", "id": "272105", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_272105/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8, "hostname": 8, "domain": 2 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "835 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "64b08b029d850c624884fea8", "name": "InQuest - 13-07-2023", "description": "", "modified": "2024-01-22T07:25:01.425000", "created": "2023-07-13T23:38:42.204000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 25, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 340, "hostname": 519, "URL": 1284, "domain": 359, "FileHash-MD5": 59, "FileHash-SHA1": 11 }, "indicator_count": 2572, "is_author": false, "is_subscribing": null, "subscriber_count": 1629, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d6315d00bdc82339895", "name": "InQuest - 17-07-2023", "description": "", "modified": "2023-12-06T16:12:18.867000", "created": "2023-12-06T16:12:18.867000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 459, "FileHash-SHA256": 298, "hostname": 455, "URL": 1350, "FileHash-SHA1": 17, "FileHash-MD5": 50 }, "indicator_count": 2629, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d56f61fccae69d81715", "name": "InQuest - 16-07-2023", "description": "", "modified": "2023-12-06T16:12:06.582000", "created": "2023-12-06T16:12:06.582000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 459, "FileHash-SHA256": 298, "hostname": 459, "URL": 1353, "FileHash-MD5": 50, "FileHash-SHA1": 14 }, "indicator_count": 2633, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d5300e8ade44b8699d7", "name": "InQuest - 15-07-2023", "description": "", "modified": "2023-12-06T16:12:03.894000", "created": "2023-12-06T16:12:03.894000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 433, "FileHash-SHA256": 275, "hostname": 431, "URL": 1281, "FileHash-MD5": 47, "FileHash-SHA1": 14 }, "indicator_count": 2481, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d50c6bd8f47a87bf64e", "name": "InQuest - 14-07-2023", "description": "", "modified": "2023-12-06T16:12:00.334000", "created": "2023-12-06T16:12:00.334000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 441, "FileHash-SHA256": 296, "hostname": 493, "URL": 1333, "FileHash-MD5": 51, "FileHash-SHA1": 11 }, "indicator_count": 2625, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d4c8a5f5b7d0d7eaa12", "name": "InQuest - 13-07-2023", "description": "", "modified": "2023-12-06T16:11:56.272000", "created": "2023-12-06T16:11:56.272000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 340, "hostname": 519, "URL": 1284, "domain": 359, "FileHash-MD5": 59, "FileHash-SHA1": 11 }, "indicator_count": 2572, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d444208c92832a9ae94", "name": "InQuest - 12-07-2023", "description": "", "modified": "2023-12-06T16:11:48.909000", "created": "2023-12-06T16:11:48.909000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 318, "hostname": 540, "URL": 1272, "domain": 326, "FileHash-SHA1": 8, "FileHash-MD5": 53 }, "indicator_count": 2517, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64e796960663c015dc710bd8", "name": "Microsoft Phishing Collection (by NolaDefence)", "description": "", "modified": "2023-08-24T17:42:46.762000", "created": "2023-08-24T17:42:46.762000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "OctoSeek", "id": "243548", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_243548/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8, "hostname": 5 }, "indicator_count": 13, "is_author": false, "is_subscribing": null, "subscriber_count": 221, "modified_text": "1014 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "64b5d168e0349aa7acd58910", "name": "InQuest - 17-07-2023", "description": "", "modified": "2023-08-16T23:00:04.929000", "created": "2023-07-17T23:40:24.664000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 298, "hostname": 455, "URL": 1350, "domain": 459, "FileHash-SHA1": 17, "FileHash-MD5": 50 }, "indicator_count": 2629, "is_author": false, "is_subscribing": null, "subscriber_count": 1625, "modified_text": "1021 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64b47f967d985173d80c924b", "name": "InQuest - 16-07-2023", "description": "", "modified": "2023-08-15T23:04:38.777000", "created": "2023-07-16T23:39:02.906000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 16, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 298, "hostname": 459, "URL": 1353, "domain": 459, "FileHash-SHA1": 14, "FileHash-MD5": 50 }, "indicator_count": 2633, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "1022 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64b32dab8ab409cabd86a073", "name": "InQuest - 15-07-2023", "description": "", "modified": "2023-08-14T23:00:49.133000", "created": "2023-07-15T23:37:15.619000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 275, "hostname": 431, "URL": 1281, "domain": 433, "FileHash-SHA1": 14, "FileHash-MD5": 47 }, "indicator_count": 2481, "is_author": false, "is_subscribing": null, "subscriber_count": 1625, "modified_text": "1023 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64b1dc7e8c4eee4782397ed4", "name": "InQuest - 14-07-2023", "description": "", "modified": "2023-08-13T23:04:07.863000", "created": "2023-07-14T23:38:38.237000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 19, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 296, "hostname": 493, "URL": 1333, "domain": 441, "FileHash-MD5": 51, "FileHash-SHA1": 11 }, "indicator_count": 2625, "is_author": false, "is_subscribing": null, "subscriber_count": 1625, "modified_text": "1024 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64af399993de1c4396203328", "name": "InQuest - 12-07-2023", "description": "", "modified": "2023-08-11T23:01:48.785000", "created": "2023-07-12T23:39:05.595000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 28, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 318, "hostname": 540, "URL": 1272, "domain": 326, "FileHash-SHA1": 8, "FileHash-MD5": 53 }, "indicator_count": 2517, "is_author": false, "is_subscribing": null, "subscriber_count": 1629, "modified_text": "1026 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64ade805a32f63aa10fbfb78", "name": "InQuest - 11-07-2023", "description": "", "modified": "2023-08-10T23:01:06.867000", "created": "2023-07-11T23:38:45.778000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 29, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 239, "hostname": 551, "URL": 1305, "domain": 378, "FileHash-MD5": 52, "FileHash-SHA1": 6 }, "indicator_count": 2531, "is_author": false, "is_subscribing": null, "subscriber_count": 1628, "modified_text": "1027 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64ac9697752f652a2a1ccf0b", "name": "InQuest - 10-07-2023", "description": "", "modified": "2023-08-09T23:03:48.883000", "created": "2023-07-10T23:39:03", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 32, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1298, "domain": 324, "hostname": 495, "FileHash-SHA256": 256, "FileHash-SHA1": 4, "FileHash-MD5": 46 }, "indicator_count": 2423, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "1028 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "64ac967b47fed466f1a090b4", "name": "Twitter Feed - noladefense - 10-07-2023", "description": "", "modified": "2023-08-09T23:03:48.883000", "created": "2023-07-10T23:38:35.582000", "tags": [ "phishing" ], "references": [ "https://twitter.com/noladefense/status/1678227074870304772", "https://twitter.com/noladefense/status/1678227100388532226", "https://twitter.com/noladefense/status/1678227117685764096", "https://twitter.com/noladefense/status/1678230849764900864", "https://twitter.com/noladefense/status/1678234643126968320", "https://twitter.com/noladefense/status/1678238402146123777", "https://twitter.com/noladefense/status/1678242176499691520", "https://twitter.com/noladefense/status/1678249748577263617", "https://twitter.com/noladefense/status/1678249765350285312", "https://twitter.com/noladefense/status/1678257279374704640", "https://twitter.com/noladefense/status/1678261056232124416", "https://twitter.com/noladefense/status/1678261068584321024", "https://twitter.com/noladefense/status/1678264845462913030", "https://twitter.com/noladefense/status/1678264857022414848", "https://twitter.com/noladefense/status/1678264864857309184", "https://twitter.com/noladefense/status/1678264874621599745", "https://twitter.com/noladefense/status/1678264879789031424", "https://twitter.com/noladefense/status/1678264882678956032", "https://twitter.com/noladefense/status/1678264901049917440", "https://twitter.com/noladefense/status/1678268623935217665", "https://twitter.com/noladefense/status/1678272407361015808", "https://twitter.com/noladefense/status/1678272420061360129", "https://twitter.com/noladefense/status/1678272430115102720", "https://twitter.com/noladefense/status/1678272436402364419", "https://twitter.com/noladefense/status/1678272441276145664", "https://twitter.com/noladefense/status/1678272449652174848", "https://twitter.com/noladefense/status/1678272455591223298", "https://twitter.com/noladefense/status/1678272477338714113", "https://twitter.com/noladefense/status/1678295026265194497", "https://twitter.com/noladefense/status/1678295052936724481", "https://twitter.com/noladefense/status/1678299349019762689", "https://twitter.com/noladefense/status/1678302613689729026", "https://twitter.com/noladefense/status/1678310127743410176", "https://twitter.com/noladefense/status/1678310141295206400", "https://twitter.com/noladefense/status/1678310161331437568", "https://twitter.com/noladefense/status/1678310165538373633", "https://twitter.com/noladefense/status/1678313900041748482", "https://twitter.com/noladefense/status/1678313927032094722", "https://twitter.com/noladefense/status/1678313932065259520", "https://twitter.com/noladefense/status/1678317685044572160", "https://twitter.com/noladefense/status/1678321454968872960", "https://twitter.com/noladefense/status/1678325223957970944", "https://twitter.com/noladefense/status/1678325238029864962", "https://twitter.com/noladefense/status/1678325256191180800", "https://twitter.com/noladefense/status/1678325283974152197", "https://twitter.com/noladefense/status/1678325956811923457", "https://twitter.com/noladefense/status/1678326023207759873", "https://twitter.com/noladefense/status/1678329016237916160", "https://twitter.com/noladefense/status/1678329038857748480", "https://twitter.com/noladefense/status/1678332767858311168", "https://twitter.com/noladefense/status/1678332831674650625", "https://twitter.com/noladefense/status/1678340325901754368", "https://twitter.com/noladefense/status/1678340658216435713", "https://twitter.com/noladefense/status/1678344100230176770", "https://twitter.com/noladefense/status/1678347883886657536", "https://twitter.com/noladefense/status/1678347901565648896", "https://twitter.com/noladefense/status/1678351652057673728", "https://twitter.com/noladefense/status/1678370575335448577", "https://twitter.com/noladefense/status/1678370590032384000", "https://twitter.com/noladefense/status/1678374300133228546", "https://twitter.com/noladefense/status/1678381845749153793", "https://twitter.com/noladefense/status/1678381861628698624", "https://twitter.com/noladefense/status/1678381880738021378", "https://twitter.com/noladefense/status/1678385623583924225", "https://twitter.com/noladefense/status/1678385811660611595", "https://twitter.com/noladefense/status/1678389402039377920", "https://twitter.com/noladefense/status/1678389427054301184", "https://twitter.com/noladefense/status/1678389443013607424", "https://twitter.com/noladefense/status/1678389445001658368", "https://twitter.com/noladefense/status/1678389463049699330", "https://twitter.com/noladefense/status/1678389465612529664", "https://twitter.com/noladefense/status/1678389480053456898", "https://twitter.com/noladefense/status/1678389482939138049", "https://twitter.com/noladefense/status/1678389485707436033", "https://twitter.com/noladefense/status/1678393189294657540", "https://twitter.com/noladefense/status/1678393217060945922", "https://twitter.com/noladefense/status/1678393257997238275", "https://twitter.com/noladefense/status/1678396981918531584", "https://twitter.com/noladefense/status/1678400746818097153", "https://twitter.com/noladefense/status/1678404512522878976", "https://twitter.com/noladefense/status/1678408292245094400", "https://twitter.com/noladefense/status/1678408309894787075", "https://twitter.com/noladefense/status/1678408334351769600", "https://twitter.com/noladefense/status/1678415831011606536", "https://twitter.com/noladefense/status/1678415861911101442", "https://twitter.com/noladefense/status/1678415873369858054", "https://twitter.com/noladefense/status/1678419600118108162", "https://twitter.com/noladefense/status/1678422149495767044", "https://twitter.com/noladefense/status/1678423399629037569", "https://twitter.com/noladefense/status/1678423703397310465", "https://twitter.com/noladefense/status/1678438484292378630", "https://twitter.com/noladefense/status/1678442247799414794", "https://twitter.com/noladefense/status/1678449814827147280", "https://twitter.com/noladefense/status/1678464892771115024", "https://twitter.com/noladefense/status/1678468665191137281", "https://twitter.com/noladefense/status/1678468694958022672", "https://twitter.com/noladefense/status/1678472447312404487", "https://twitter.com/noladefense/status/1678476228037079060", "https://twitter.com/noladefense/status/1678521518479777793", "https://twitter.com/noladefense/status/1678521537513627654", "https://twitter.com/noladefense/status/1678529068424200192" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 31, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 97, "FileHash-MD5": 7 }, "indicator_count": 104, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1028 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "646aa79ff94bb4c597f9ba67", "name": "Twitter Feed - AtomSpam - 21-05-2023", "description": "", "modified": "2023-05-21T23:22:07.797000", "created": "2023-05-21T23:22:07.797000", "tags": [ "phishing" ], "references": [ "https://twitter.com/AtomSpam/status/1660082743814901760", "https://twitter.com/AtomSpam/status/1660085258513948675", "https://twitter.com/AtomSpam/status/1660086217596190727", "https://twitter.com/AtomSpam/status/1660090287811641344", "https://twitter.com/AtomSpam/status/1660092819858440193", "https://twitter.com/AtomSpam/status/1660105389663309827", "https://twitter.com/AtomSpam/status/1660106290151006208", "https://twitter.com/AtomSpam/status/1660110423763345410", "https://twitter.com/AtomSpam/status/1660120486221697026", "https://twitter.com/AtomSpam/status/1660121641236480000", "https://twitter.com/AtomSpam/status/1660122650599911427", "https://twitter.com/AtomSpam/status/1660123431902347264", "https://twitter.com/AtomSpam/status/1660124383388549120", "https://twitter.com/AtomSpam/status/1660125028757934085", "https://twitter.com/AtomSpam/status/1660128057028427776", "https://twitter.com/AtomSpam/status/1660129114353795074", "https://twitter.com/AtomSpam/status/1660143164311896065", "https://twitter.com/AtomSpam/status/1660150721314971648", "https://twitter.com/AtomSpam/status/1660150991507914754", "https://twitter.com/AtomSpam/status/1660151702572474369", "https://twitter.com/AtomSpam/status/1660153204305190913", "https://twitter.com/AtomSpam/status/1660160782800232451", "https://twitter.com/AtomSpam/status/1660161447781867523", "https://twitter.com/AtomSpam/status/1660165817315602432", "https://twitter.com/AtomSpam/status/1660166396049780744", "https://twitter.com/AtomSpam/status/1660166700560535555", "https://twitter.com/AtomSpam/status/1660167196008390656", "https://twitter.com/AtomSpam/status/1660167747270217728", "https://twitter.com/AtomSpam/status/1660168256995426304", "https://twitter.com/AtomSpam/status/1660168628644335616", "https://twitter.com/AtomSpam/status/1660169381802909697", "https://twitter.com/AtomSpam/status/1660170851373776896", "https://twitter.com/AtomSpam/status/1660171230173863937", "https://twitter.com/AtomSpam/status/1660171891762425857", "https://twitter.com/AtomSpam/status/1660172210672156673", "https://twitter.com/AtomSpam/status/1660172688302776321", "https://twitter.com/AtomSpam/status/1660173307637817344", "https://twitter.com/AtomSpam/status/1660180888620093441", "https://twitter.com/AtomSpam/status/1660181807185244160", "https://twitter.com/AtomSpam/status/1660182764098863107", "https://twitter.com/AtomSpam/status/1660183309727457280", "https://twitter.com/AtomSpam/status/1660184018975965184", "https://twitter.com/AtomSpam/status/1660184349449371649", "https://twitter.com/AtomSpam/status/1660184636025102344", "https://twitter.com/AtomSpam/status/1660185172388503553", "https://twitter.com/AtomSpam/status/1660185677609291778", "https://twitter.com/AtomSpam/status/1660196026064556035", "https://twitter.com/AtomSpam/status/1660196572519440384", "https://twitter.com/AtomSpam/status/1660201058642063361", "https://twitter.com/AtomSpam/status/1660201762723168258", "https://twitter.com/AtomSpam/status/1660228995495911425", "https://twitter.com/AtomSpam/status/1660233736783372289", "https://twitter.com/AtomSpam/status/1660248870629134336", "https://twitter.com/AtomSpam/status/1660250110851264515", "https://twitter.com/AtomSpam/status/1660256420061650944", "https://twitter.com/AtomSpam/status/1660258945817034760", "https://twitter.com/AtomSpam/status/1660271526040444929", "https://twitter.com/AtomSpam/status/1660276550862880772", "https://twitter.com/AtomSpam/status/1660289403611119619", "https://twitter.com/AtomSpam/status/1660301684654972929", "https://twitter.com/AtomSpam/status/1660302734388502533", "https://twitter.com/AtomSpam/status/1660306761369149447", "https://twitter.com/AtomSpam/status/1660308147691573251", "https://twitter.com/AtomSpam/status/1660314328661123072", "https://twitter.com/AtomSpam/status/1660316842903101441", "https://twitter.com/AtomSpam/status/1660317110239633409", "https://twitter.com/AtomSpam/status/1660317869807108097", "https://twitter.com/AtomSpam/status/1660318368455376896", "https://twitter.com/AtomSpam/status/1660318633833136129", "https://twitter.com/AtomSpam/status/1660321877204557827", "https://twitter.com/AtomSpam/status/1660322272475742208", "https://twitter.com/AtomSpam/status/1660329403467874315", "https://twitter.com/AtomSpam/status/1660332197495054339", "https://twitter.com/AtomSpam/status/1660332567386529801", "https://twitter.com/AtomSpam/status/1660334464587661313", "https://twitter.com/AtomSpam/status/1660357097203040256", "https://twitter.com/AtomSpam/status/1660362149397495811", "https://twitter.com/AtomSpam/status/1660367698893602819", "https://twitter.com/AtomSpam/status/1660369695667544065", "https://twitter.com/AtomSpam/status/1660370218953179137", "https://twitter.com/AtomSpam/status/1660374982503825414", "https://twitter.com/AtomSpam/status/1660375243196596226", "https://twitter.com/AtomSpam/status/1660392346955939842", "https://twitter.com/AtomSpam/status/1660404864000704513", "https://twitter.com/AtomSpam/status/1660412412791586819" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 85, "FileHash-MD5": 18 }, "indicator_count": 103, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "1108 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/noladefense/status/1678264901049917440", "https://twitter.com/AtomSpam/status/1660106290151006208", "https://twitter.com/noladefense/status/1678321454968872960", "https://twitter.com/AtomSpam/status/1660125028757934085", "https://twitter.com/noladefense/status/1678374300133228546", "https://twitter.com/AtomSpam/status/1660201058642063361", "https://twitter.com/AtomSpam/status/1660128057028427776", "https://twitter.com/noladefense/status/1678230849764900864", "https://twitter.com/AtomSpam/status/1660168628644335616", "https://twitter.com/AtomSpam/status/1660086217596190727", "https://twitter.com/AtomSpam/status/1660167747270217728", "https://twitter.com/noladefense/status/1678326023207759873", "https://twitter.com/AtomSpam/status/1660185677609291778", "https://twitter.com/noladefense/status/1678227117685764096", "https://twitter.com/AtomSpam/status/1660334464587661313", "https://twitter.com/AtomSpam/status/1660196026064556035", "https://twitter.com/AtomSpam/status/1660370218953179137", "https://twitter.com/AtomSpam/status/1660153204305190913", "https://twitter.com/AtomSpam/status/1660357097203040256", "https://twitter.com/noladefense/status/1678310165538373633", "https://twitter.com/noladefense/status/1678381861628698624", "https://twitter.com/noladefense/status/1678393189294657540", "https://twitter.com/noladefense/status/1678227100388532226", "https://twitter.com/noladefense/status/1678419600118108162", "https://twitter.com/AtomSpam/status/1660362149397495811", "https://twitter.com/noladefense/status/1678264879789031424", "https://twitter.com/noladefense/status/1678464892771115024", "https://twitter.com/noladefense/status/1678389480053456898", "https://twitter.com/noladefense/status/1678325256191180800", "https://twitter.com/noladefense/status/1678408334351769600", "https://twitter.com/noladefense/status/1678272407361015808", "https://twitter.com/AtomSpam/status/1660171891762425857", "https://twitter.com/noladefense/status/1678408292245094400", "https://twitter.com/AtomSpam/status/1660256420061650944", "https://twitter.com/noladefense/status/1678521518479777793", "https://twitter.com/AtomSpam/status/1660172688302776321", "https://twitter.com/AtomSpam/status/1660129114353795074", "https://twitter.com/noladefense/status/1678310161331437568", "https://twitter.com/noladefense/status/1678389443013607424", "https://twitter.com/AtomSpam/status/1660182764098863107", "https://twitter.com/AtomSpam/status/1660196572519440384", "https://twitter.com/noladefense/status/1678261056232124416", "https://twitter.com/AtomSpam/status/1660166396049780744", "https://twitter.com/noladefense/status/1678468694958022672", "https://twitter.com/noladefense/status/1678317685044572160", "https://twitter.com/noladefense/status/1678422149495767044", "https://twitter.com/noladefense/status/1678302613689729026", "https://twitter.com/noladefense/status/1678340658216435713", "https://twitter.com/noladefense/status/1678476228037079060", "https://twitter.com/AtomSpam/status/1660085258513948675", "https://twitter.com/AtomSpam/status/1660248870629134336", "https://twitter.com/AtomSpam/status/1660121641236480000", "https://twitter.com/AtomSpam/status/1660329403467874315", "https://twitter.com/noladefense/status/1678381880738021378", "https://twitter.com/noladefense/status/1678238402146123777", "https://twitter.com/AtomSpam/status/1660184349449371649", "https://twitter.com/AtomSpam/status/1660092819858440193", "https://twitter.com/noladefense/status/1678249748577263617", "https://twitter.com/noladefense/status/1678264857022414848", "https://twitter.com/noladefense/status/1678438484292378630", "https://twitter.com/AtomSpam/status/1660258945817034760", "https://twitter.com/noladefense/status/1678332767858311168", "https://twitter.com/noladefense/status/1678370575335448577", "https://twitter.com/noladefense/status/1678529068424200192", "https://twitter.com/noladefense/status/1678272449652174848", "https://twitter.com/AtomSpam/status/1660170851373776896", "https://twitter.com/AtomSpam/status/1660181807185244160", "https://twitter.com/AtomSpam/status/1660367698893602819", "https://twitter.com/AtomSpam/status/1660374982503825414", "https://twitter.com/AtomSpam/status/1660317110239633409", "https://twitter.com/AtomSpam/status/1660167196008390656", "https://labs.inquest.net/iocdb", "https://twitter.com/AtomSpam/status/1660184636025102344", "https://twitter.com/AtomSpam/status/1660276550862880772", "https://twitter.com/noladefense/status/1678385811660611595", "https://twitter.com/noladefense/status/1678272441276145664", "https://twitter.com/AtomSpam/status/1660404864000704513", "https://twitter.com/AtomSpam/status/1660166700560535555", "https://twitter.com/noladefense/status/1678268623935217665", "https://twitter.com/AtomSpam/status/1660183309727457280", "https://twitter.com/AtomSpam/status/1660161447781867523", "https://twitter.com/noladefense/status/1678257279374704640", "https://twitter.com/AtomSpam/status/1660090287811641344", "https://twitter.com/AtomSpam/status/1660302734388502533", "https://twitter.com/noladefense/status/1678325956811923457", "https://twitter.com/noladefense/status/1678344100230176770", "https://twitter.com/AtomSpam/status/1660322272475742208", "https://twitter.com/noladefense/status/1678415861911101442", "https://twitter.com/noladefense/status/1678423703397310465", "https://twitter.com/noladefense/status/1678313927032094722", "https://twitter.com/noladefense/status/1678234643126968320", "https://twitter.com/noladefense/status/1678389427054301184", "https://twitter.com/noladefense/status/1678393257997238275", "https://twitter.com/noladefense/status/1678389482939138049", "https://twitter.com/noladefense/status/1678329038857748480", "https://twitter.com/AtomSpam/status/1660180888620093441", "https://twitter.com/noladefense/status/1678389465612529664", "https://twitter.com/noladefense/status/1678408309894787075", "https://twitter.com/noladefense/status/1678310141295206400", "https://twitter.com/noladefense/status/1678404512522878976", "https://twitter.com/AtomSpam/status/1660150991507914754", "https://twitter.com/noladefense/status/1678295052936724481", "https://twitter.com/AtomSpam/status/1660316842903101441", "https://twitter.com/noladefense/status/1678415873369858054", "https://twitter.com/AtomSpam/status/1660369695667544065", "https://twitter.com/noladefense/status/1678261068584321024", "https://twitter.com/noladefense/status/1678396981918531584", "https://twitter.com/noladefense/status/1678385623583924225", "https://twitter.com/noladefense/status/1678468665191137281", "https://twitter.com/AtomSpam/status/1660110423763345410", "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70", "https://twitter.com/AtomSpam/status/1660289403611119619", "https://twitter.com/AtomSpam/status/1660124383388549120", "https://twitter.com/AtomSpam/status/1660122650599911427", "https://twitter.com/noladefense/status/1678389445001658368", "https://twitter.com/noladefense/status/1678325238029864962", "https://twitter.com/noladefense/status/1678389463049699330", "https://twitter.com/noladefense/status/1678472447312404487", "https://twitter.com/AtomSpam/status/1660082743814901760", "https://twitter.com/AtomSpam/status/1660228995495911425", "https://twitter.com/noladefense/status/1678347901565648896", "https://twitter.com/noladefense/status/1678264845462913030", "https://twitter.com/AtomSpam/status/1660318368455376896", "https://twitter.com/AtomSpam/status/1660233736783372289", "https://twitter.com/noladefense/status/1678389402039377920", "https://twitter.com/noladefense/status/1678272477338714113", "https://twitter.com/noladefense/status/1678332831674650625", "https://twitter.com/noladefense/status/1678389485707436033", "https://twitter.com/noladefense/status/1678449814827147280", "https://twitter.com/AtomSpam/status/1660172210672156673", "https://twitter.com/AtomSpam/status/1660301684654972929", "https://twitter.com/AtomSpam/status/1660123431902347264", "https://twitter.com/noladefense/status/1678347883886657536", "https://twitter.com/noladefense/status/1678351652057673728", "https://twitter.com/noladefense/status/1678272436402364419", "https://twitter.com/AtomSpam/status/1660151702572474369", "https://twitter.com/AtomSpam/status/1660184018975965184", "https://twitter.com/noladefense/status/1678370590032384000", "https://twitter.com/noladefense/status/1678299349019762689", "https://twitter.com/AtomSpam/status/1660171230173863937", "https://twitter.com/noladefense/status/1678227074870304772", "https://twitter.com/noladefense/status/1678264864857309184", "https://twitter.com/AtomSpam/status/1660332197495054339", "https://twitter.com/AtomSpam/status/1660173307637817344", "https://twitter.com/AtomSpam/status/1660318633833136129", "https://twitter.com/AtomSpam/status/1660105389663309827", "https://twitter.com/noladefense/status/1678313900041748482", "https://twitter.com/AtomSpam/status/1660165817315602432", "https://twitter.com/noladefense/status/1678415831011606536", "https://twitter.com/AtomSpam/status/1660271526040444929", "https://twitter.com/AtomSpam/status/1660250110851264515", "https://twitter.com/AtomSpam/status/1660317869807108097", "https://twitter.com/AtomSpam/status/1660392346955939842", "https://twitter.com/noladefense/status/1678442247799414794", "https://twitter.com/noladefense/status/1678272420061360129", "https://twitter.com/AtomSpam/status/1660308147691573251", "https://twitter.com/noladefense/status/1678340325901754368", "https://twitter.com/noladefense/status/1678295026265194497", "https://twitter.com/noladefense/status/1678381845749153793", "https://twitter.com/noladefense/status/1678325223957970944", "https://twitter.com/AtomSpam/status/1660168256995426304", "https://twitter.com/AtomSpam/status/1660321877204557827", "https://twitter.com/noladefense/status/1678249765350285312", "https://twitter.com/AtomSpam/status/1660143164311896065", "https://twitter.com/noladefense/status/1678400746818097153", "https://twitter.com/AtomSpam/status/1660160782800232451", "https://twitter.com/noladefense/status/1678329016237916160", "https://twitter.com/AtomSpam/status/1660169381802909697", "https://twitter.com/noladefense/status/1678521537513627654", "https://twitter.com/noladefense/status/1678310127743410176", "https://twitter.com/AtomSpam/status/1660120486221697026", "https://twitter.com/noladefense/status/1678313932065259520", "https://twitter.com/AtomSpam/status/1660314328661123072", "https://twitter.com/noladefense/status/1678272455591223298", "https://twitter.com/noladefense/status/1678242176499691520", "https://twitter.com/AtomSpam/status/1660412412791586819", "https://twitter.com/AtomSpam/status/1660185172388503553", "https://twitter.com/AtomSpam/status/1660375243196596226", "https://twitter.com/noladefense/status/1678264882678956032", "https://twitter.com/AtomSpam/status/1660201762723168258", "https://twitter.com/noladefense/status/1678264874621599745", "https://twitter.com/noladefense/status/1678325283974152197", "https://twitter.com/AtomSpam/status/1660306761369149447", "https://twitter.com/AtomSpam/status/1660150721314971648", "https://twitter.com/noladefense/status/1678423399629037569", "https://twitter.com/noladefense/status/1678272430115102720", "https://twitter.com/AtomSpam/status/1660332567386529801", "https://twitter.com/noladefense/status/1678393217060945922" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 18719 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/r2.dev", "whois": "http://whois.domaintools.com/r2.dev", "domain": "r2.dev", "hostname": "pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 20, "pulses": [ { "id": "63d10e46581edfe9bba0da3f", "name": "Microsoft Phishing Collection", "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-06-03T20:38:06.109000", "created": "2023-01-25T11:11:02.458000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3171627, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 13, "hostname": 49, "domain": 21 }, "indicator_count": 83, "is_author": false, "is_subscribing": null, "subscriber_count": 978, "modified_text": "48 minutes ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "688f1877ae2224ff454d2436", "name": "Microsoft Phishing Collection - Follow: https://twitter.com/noladefense", "description": "", "modified": "2025-08-03T08:06:15.561000", "created": "2025-08-03T08:06:15.561000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 10, "hostname": 44, "domain": 18 }, "indicator_count": 72, "is_author": false, "is_subscribing": null, "subscriber_count": 141, "modified_text": "304 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "65d39a15a654825fc9781462", "name": "Microsoft Phishing Collection", "description": "", "modified": "2024-02-19T18:12:37.807000", "created": "2024-02-19T18:12:37.807000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Enqrypted", "id": "272105", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_272105/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8, "hostname": 8, "domain": 2 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "835 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 0 }, { "id": "64b08b029d850c624884fea8", "name": "InQuest - 13-07-2023", "description": "", "modified": "2024-01-22T07:25:01.425000", "created": "2023-07-13T23:38:42.204000", "tags": [], "references": [ "https://labs.inquest.net/iocdb" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 25, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 340, "hostname": 519, "URL": 1284, "domain": 359, "FileHash-MD5": 59, "FileHash-SHA1": 11 }, "indicator_count": 2572, "is_author": false, "is_subscribing": null, "subscriber_count": 1629, "modified_text": "863 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d6315d00bdc82339895", "name": "InQuest - 17-07-2023", "description": "", "modified": "2023-12-06T16:12:18.867000", "created": "2023-12-06T16:12:18.867000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 459, "FileHash-SHA256": 298, "hostname": 455, "URL": 1350, "FileHash-SHA1": 17, "FileHash-MD5": 50 }, "indicator_count": 2629, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d56f61fccae69d81715", "name": "InQuest - 16-07-2023", "description": "", "modified": "2023-12-06T16:12:06.582000", "created": "2023-12-06T16:12:06.582000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 459, "FileHash-SHA256": 298, "hostname": 459, "URL": 1353, "FileHash-MD5": 50, "FileHash-SHA1": 14 }, "indicator_count": 2633, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d5300e8ade44b8699d7", "name": "InQuest - 15-07-2023", "description": "", "modified": "2023-12-06T16:12:03.894000", "created": "2023-12-06T16:12:03.894000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 433, "FileHash-SHA256": 275, "hostname": 431, "URL": 1281, "FileHash-MD5": 47, "FileHash-SHA1": 14 }, "indicator_count": 2481, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d50c6bd8f47a87bf64e", "name": "InQuest - 14-07-2023", "description": "", "modified": "2023-12-06T16:12:00.334000", "created": "2023-12-06T16:12:00.334000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 441, "FileHash-SHA256": 296, "hostname": 493, "URL": 1333, "FileHash-MD5": 51, "FileHash-SHA1": 11 }, "indicator_count": 2625, "is_author": false, "is_subscribing": null, "subscriber_count": 109, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d4c8a5f5b7d0d7eaa12", "name": "InQuest - 13-07-2023", "description": "", "modified": "2023-12-06T16:11:56.272000", "created": "2023-12-06T16:11:56.272000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 340, "hostname": 519, "URL": 1284, "domain": 359, "FileHash-MD5": 59, "FileHash-SHA1": 11 }, "indicator_count": 2572, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "65709d444208c92832a9ae94", "name": "InQuest - 12-07-2023", "description": "", "modified": "2023-12-06T16:11:48.909000", "created": "2023-12-06T16:11:48.909000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "StreamMiningEx", "id": "262917", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 318, "hostname": 540, "URL": 1272, "domain": 326, "FileHash-SHA1": 8, "FileHash-MD5": 53 }, "indicator_count": 2517, "is_author": false, "is_subscribing": null, "subscriber_count": 110, "modified_text": "910 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev/tomo.html", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://pub-e0c36c831c484af1b1c7e3e8ccf4ecf1.r2.dev/tomo.html", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780521998.9030588 }