{ "type": "URL", "indicator": "https://spartanspecialtycafe.com/challenge/cf", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://spartanspecialtycafe.com/challenge/cf", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 4263901308, "indicator": "https://spartanspecialtycafe.com/challenge/cf", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 11, "pulses": [ { "id": "69b658084f2de040996681ef", "name": "URLHaus data - 14-03-2026 (Part 3)", "description": "", "modified": "2026-04-14T06:39:30.620000", "created": "2026-03-15T06:56:08.132000", "tags": [ "ClearFake", "32-bit", "elf", "mips", "Mozi", "pw-ryos", "zip", "arm", "mirai", "c2-monitor-auto", "dropped-by-amadey", "lua", "SmartLoader", "ACRStealer", "fbf543", "pw-2026", "exe", "RemcosRAT", "AsyncRAT", "AgentTesla", "xworm", "rev-base64-loader", "rat", "ascii", "hta", "opendir", "Encoded", "ua-mshta", "SnakeKeylogger", "GuLoader", "powershell", "ps1", "SantaStealer", "QuasarRAT", "Stealc", "WallStealer", "SalatStealer", "emotet", "heodo", "sh", "ua-wget", "bash", "curl", "wget", "pw-NMCLDJX3SK2", "NetSupport", "connectwise", "msi", "rmm", "screenconnect", "CountLoader", "pw-123", "DattoRMM", "script", "hajime", "pw-cyrex", "Vidar", "LummaStealer", "pw-6601", "rar", "remcos", "WsgiDAV", "BlackMoon", "Loader", "DanaBot", "lnk", "botnetdomain", "gafgyt", "pw-7701", "pw-photoshop2026", "pw-9937", "BillGates", "KongTuke", "TAG-124", "IcedID", "Latrodectus", "ClickFix", "FakeCaptcha", "SilverFox" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 255, "domain": 8, "hostname": 52 }, "indicator_count": 315, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "47 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bd55c5fce9da8a5ea57610", "name": "Payload_Delivery | Mar 21, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 21, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-20T14:12:21.412000", "created": "2026-03-20T14:12:21.412000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 89, "hostname": 721, "URL": 363, "domain": 501, "FileHash-MD5": 56, "FileHash-SHA1": 49 }, "indicator_count": 1779, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "71 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bc04acbe4a8aaec1b67e95", "name": "Payload_Delivery | Mar 20, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 20, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-19T14:14:04.504000", "created": "2026-03-19T14:14:04.504000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 389, "URL": 361, "hostname": 824, "FileHash-MD5": 57, "FileHash-SHA256": 85, "FileHash-SHA1": 49 }, "indicator_count": 1765, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "72 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bab2adaa1bf4df291f7430", "name": "Payload_Delivery | Mar 19, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 19, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T14:11:57.508000", "created": "2026-03-18T14:11:57.508000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 312, "hostname": 683, "domain": 330, "FileHash-SHA256": 82, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1605, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "73 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69ba385644f1345d4c73440b", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T05:29:58.148000", "created": "2026-03-18T05:29:58.148000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 688, "URL": 303, "domain": 319, "FileHash-SHA256": 62, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1570, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b9fa97daa9c965ebf2445d", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T01:06:31.439000", "created": "2026-03-18T01:06:31.439000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 135, "FileHash-SHA1": 36, "FileHash-SHA256": 37, "hostname": 475, "domain": 195, "URL": 171 }, "indicator_count": 1049, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b9f5691d38f59cdf69547c", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T00:44:25.826000", "created": "2026-03-18T00:44:25.826000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 133, "FileHash-SHA1": 34, "FileHash-SHA256": 36, "hostname": 479, "domain": 196, "URL": 171 }, "indicator_count": 1049, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b95fe710a461d00bb58879", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-17T14:06:31.046000", "created": "2026-03-17T14:06:31.046000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 550, "domain": 200, "URL": 178, "FileHash-MD5": 100, "FileHash-SHA256": 3 }, "indicator_count": 1031, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b808a8ecd284c2cc585c14", "name": "Payload_Delivery | Mar 17, 2026 | Part 1/2", "description": "Payload_Delivery indicators. Date: Mar 17, 2026. Part 1/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-16T13:42:00.175000", "created": "2026-03-16T13:42:00.175000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 918, "domain": 396, "FileHash-SHA256": 99, "URL": 367, "FileHash-MD5": 155, "FileHash-SHA1": 49 }, "indicator_count": 1984, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b6bc121a952c45ee50b80f", "name": "Payload_Delivery | Mar 16, 2026 | Part 1/2", "description": "Payload_Delivery indicators. Date: Mar 16, 2026. Part 1/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-15T14:02:58.591000", "created": "2026-03-15T14:02:58.591000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 330, "hostname": 1031, "domain": 363, "FileHash-SHA256": 64, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1986, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "76 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b56a84f14760edc6870528", "name": "Payload_Delivery | Mar 15, 2026 | Part 1/2", "description": "Payload_Delivery indicators. Date: Mar 15, 2026. Part 1/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-14T14:02:44.275000", "created": "2026-03-14T14:02:44.275000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1171, "domain": 366, "URL": 300, "FileHash-MD5": 115, "FileHash-SHA256": 33, "FileHash-SHA1": 14 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "77 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://urlhaus.abuse.ch/browse/", "https://ltna.com.au/cyber" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 3885 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/spartanspecialtycafe.com", "whois": "http://whois.domaintools.com/spartanspecialtycafe.com", "domain": "spartanspecialtycafe.com", "hostname": "Unavailable" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 11, "pulses": [ { "id": "69b658084f2de040996681ef", "name": "URLHaus data - 14-03-2026 (Part 3)", "description": "", "modified": "2026-04-14T06:39:30.620000", "created": "2026-03-15T06:56:08.132000", "tags": [ "ClearFake", "32-bit", "elf", "mips", "Mozi", "pw-ryos", "zip", "arm", "mirai", "c2-monitor-auto", "dropped-by-amadey", "lua", "SmartLoader", "ACRStealer", "fbf543", "pw-2026", "exe", "RemcosRAT", "AsyncRAT", "AgentTesla", "xworm", "rev-base64-loader", "rat", "ascii", "hta", "opendir", "Encoded", "ua-mshta", "SnakeKeylogger", "GuLoader", "powershell", "ps1", "SantaStealer", "QuasarRAT", "Stealc", "WallStealer", "SalatStealer", "emotet", "heodo", "sh", "ua-wget", "bash", "curl", "wget", "pw-NMCLDJX3SK2", "NetSupport", "connectwise", "msi", "rmm", "screenconnect", "CountLoader", "pw-123", "DattoRMM", "script", "hajime", "pw-cyrex", "Vidar", "LummaStealer", "pw-6601", "rar", "remcos", "WsgiDAV", "BlackMoon", "Loader", "DanaBot", "lnk", "botnetdomain", "gafgyt", "pw-7701", "pw-photoshop2026", "pw-9937", "BillGates", "KongTuke", "TAG-124", "IcedID", "Latrodectus", "ClickFix", "FakeCaptcha", "SilverFox" ], "references": [ "https://urlhaus.abuse.ch/browse/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 255, "domain": 8, "hostname": 52 }, "indicator_count": 315, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "47 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bd55c5fce9da8a5ea57610", "name": "Payload_Delivery | Mar 21, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 21, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-20T14:12:21.412000", "created": "2026-03-20T14:12:21.412000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 89, "hostname": 721, "URL": 363, "domain": 501, "FileHash-MD5": 56, "FileHash-SHA1": 49 }, "indicator_count": 1779, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "71 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bc04acbe4a8aaec1b67e95", "name": "Payload_Delivery | Mar 20, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 20, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-19T14:14:04.504000", "created": "2026-03-19T14:14:04.504000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 389, "URL": 361, "hostname": 824, "FileHash-MD5": 57, "FileHash-SHA256": 85, "FileHash-SHA1": 49 }, "indicator_count": 1765, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "72 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69bab2adaa1bf4df291f7430", "name": "Payload_Delivery | Mar 19, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 19, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T14:11:57.508000", "created": "2026-03-18T14:11:57.508000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 312, "hostname": 683, "domain": 330, "FileHash-SHA256": 82, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1605, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "73 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69ba385644f1345d4c73440b", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T05:29:58.148000", "created": "2026-03-18T05:29:58.148000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 688, "URL": 303, "domain": 319, "FileHash-SHA256": 62, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1570, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b9fa97daa9c965ebf2445d", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T01:06:31.439000", "created": "2026-03-18T01:06:31.439000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 135, "FileHash-SHA1": 36, "FileHash-SHA256": 37, "hostname": 475, "domain": 195, "URL": 171 }, "indicator_count": 1049, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b9f5691d38f59cdf69547c", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T00:44:25.826000", "created": "2026-03-18T00:44:25.826000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 133, "FileHash-SHA1": 34, "FileHash-SHA256": 36, "hostname": 479, "domain": 196, "URL": 171 }, "indicator_count": 1049, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b95fe710a461d00bb58879", "name": "Payload_Delivery | Mar 18, 2026 | Part 2/2", "description": "Payload_Delivery indicators. Date: Mar 18, 2026. Part 2/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-17T14:06:31.046000", "created": "2026-03-17T14:06:31.046000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 550, "domain": 200, "URL": 178, "FileHash-MD5": 100, "FileHash-SHA256": 3 }, "indicator_count": 1031, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b808a8ecd284c2cc585c14", "name": "Payload_Delivery | Mar 17, 2026 | Part 1/2", "description": "Payload_Delivery indicators. Date: Mar 17, 2026. Part 1/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-16T13:42:00.175000", "created": "2026-03-16T13:42:00.175000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 918, "domain": 396, "FileHash-SHA256": 99, "URL": 367, "FileHash-MD5": 155, "FileHash-SHA1": 49 }, "indicator_count": 1984, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "69b6bc121a952c45ee50b80f", "name": "Payload_Delivery | Mar 16, 2026 | Part 1/2", "description": "Payload_Delivery indicators. Date: Mar 16, 2026. Part 1/2. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-15T14:02:58.591000", "created": "2026-03-15T14:02:58.591000", "tags": [ "payload_delivery" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 330, "hostname": 1031, "domain": 363, "FileHash-SHA256": 64, "FileHash-MD5": 149, "FileHash-SHA1": 49 }, "indicator_count": 1986, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "76 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://spartanspecialtycafe.com/challenge/cf", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://spartanspecialtycafe.com/challenge/cf", "type": "URL", "found": true, "verdict": "malicious", "url_status": "offline", "threat": "malware_download", "tags": [ "ClearFake" ], "date_added": "2026-03-14", "last_online": "", "reporter": "anonymous", "host": "spartanspecialtycafe.com", "payloads": [], "error": null }, "from_cache": true, "_cached_at": 1780210834.544724 }