{
  "type": "Domain",
  "indicator": "map-apple.co",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/map-apple.co",
    "alexa": "http://www.alexa.com/siteinfo/map-apple.co",
    "indicator": "map-apple.co",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3550653418,
      "indicator": "map-apple.co",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 8,
      "pulses": [
        {
          "id": "66101e21a1f3534bddb2ff70",
          "name": "Finding Lost iPhone Smishing",
          "description": "The report details an analysis of a smishing campaign involving domains disguising themselves as Apple services to trick users into divulging their login credentials or device information. By leveraging Validin's comprehensive passive DNS data and pivoting capabilities, the analysts were able to uncover a large infrastructure of related malicious domains used in the campaign, painting a clearer picture of the threat actor's tactics and enabling the creation of robust block lists.",
          "modified": "2024-05-05T15:00:26.631000",
          "created": "2024-04-05T15:52:01.166000",
          "tags": [
            "smishing",
            "phishing",
            "credentials",
            "iphone",
            "apple",
            "icloud"
          ],
          "references": [
            "https://www.validin.com/blog/finding-lost-iphone-smishing-with-validin/"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1583",
              "name": "Acquire Infrastructure",
              "display_name": "T1583 - Acquire Infrastructure"
            },
            {
              "id": "T1592",
              "name": "Gather Victim Host Information",
              "display_name": "T1592 - Gather Victim Host Information"
            },
            {
              "id": "T1600",
              "name": "Weaken Encryption",
              "display_name": "T1600 - Weaken Encryption"
            },
            {
              "id": "T1589",
              "name": "Gather Victim Identity Information",
              "display_name": "T1589 - Gather Victim Identity Information"
            },
            {
              "id": "T1595",
              "name": "Active Scanning",
              "display_name": "T1595 - Active Scanning"
            },
            {
              "id": "T1584",
              "name": "Compromise Infrastructure",
              "display_name": "T1584 - Compromise Infrastructure"
            },
            {
              "id": "T1586",
              "name": "Compromise Accounts",
              "display_name": "T1586 - Compromise Accounts"
            },
            {
              "id": "T1597",
              "name": "Search Closed Sources",
              "display_name": "T1597 - Search Closed Sources"
            },
            {
              "id": "T1566",
              "name": "Phishing",
              "display_name": "T1566 - Phishing"
            },
            {
              "id": "T1598",
              "name": "Phishing for Information",
              "display_name": "T1598 - Phishing for Information"
            },
            {
              "id": "T1585",
              "name": "Establish Accounts",
              "display_name": "T1585 - Establish Accounts"
            },
            {
              "id": "T1588",
              "name": "Obtain Capabilities",
              "display_name": "T1588 - Obtain Capabilities"
            }
          ],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 374,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "AlienVault",
            "id": "2",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
            "is_subscribed": true,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 1852,
            "hostname": 5
          },
          "indicator_count": 1857,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 386758,
          "modified_text": "757 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6783308fc0b6e2bd8dfb209c",
          "name": "TTC-CERT_blocklist_recommended",
          "description": "",
          "modified": "2026-02-14T00:03:07.406000",
          "created": "2025-01-12T03:01:35.075000",
          "tags": [],
          "references": [
            "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "skocherhan",
            "id": "249290",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 606,
            "URL": 4,
            "domain": 25122,
            "hostname": 25306
          },
          "indicator_count": 51038,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 187,
          "modified_text": "107 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "67429f73a3f45fa88890276d",
          "name": "StreamMining",
          "description": "",
          "modified": "2024-11-24T03:37:23.616000",
          "created": "2024-11-24T03:37:23.616000",
          "tags": [
            "eliminar",
            "leer ms",
            "wishlist vista",
            "poltica",
            "secadores",
            "vista",
            "sala",
            "vaporal",
            "utensilios",
            "belleza equipos",
            "ciudad"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "670f94e03014212e19fa5a77",
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "rivocado",
            "id": "300960",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 6,
            "URL": 170,
            "domain": 11158,
            "hostname": 3549
          },
          "indicator_count": 14883,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 25,
          "modified_text": "554 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "67429f7224d433f384b935c8",
          "name": "StreamMining",
          "description": "",
          "modified": "2024-11-24T03:37:22.551000",
          "created": "2024-11-24T03:37:22.551000",
          "tags": [
            "eliminar",
            "leer ms",
            "wishlist vista",
            "poltica",
            "secadores",
            "vista",
            "sala",
            "vaporal",
            "utensilios",
            "belleza equipos",
            "ciudad"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "670f94e03014212e19fa5a77",
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "rivocado",
            "id": "300960",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 6,
            "URL": 170,
            "domain": 11158,
            "hostname": 3549
          },
          "indicator_count": 14883,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 20,
          "modified_text": "554 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "670f94e03014212e19fa5a77",
          "name": "Malicious-Dangerous-Domain&URL-New-IOC List",
          "description": "By Helaly",
          "modified": "2024-11-15T10:01:11.688000",
          "created": "2024-10-16T10:26:40.893000",
          "tags": [
            "eliminar",
            "leer ms",
            "wishlist vista",
            "poltica",
            "secadores",
            "vista",
            "sala",
            "vaporal",
            "utensilios",
            "belleza equipos",
            "ciudad"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 39659,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Eslam-ElHelaly",
            "id": "259630",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-MD5": 6,
            "URL": 170,
            "domain": 11158,
            "hostname": 3549
          },
          "indicator_count": 14883,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 80,
          "modified_text": "563 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6683bdd1247c16c5855518c7",
          "name": "Domain-URL-IP-Hash-IOC",
          "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes",
          "modified": "2024-08-02T07:05:02.060000",
          "created": "2024-07-02T08:44:01.648000",
          "tags": [
            "word"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 286,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Eslam-ElHelaly",
            "id": "259630",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CVE": 2,
            "FileHash-MD5": 15,
            "FileHash-SHA1": 1,
            "FileHash-SHA256": 1,
            "URL": 2521,
            "domain": 8243,
            "email": 7,
            "hostname": 2893
          },
          "indicator_count": 13683,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "668 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6683bdc8052a11fe921381a0",
          "name": "Domain-URL-IP-Hash-IOC",
          "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes",
          "modified": "2024-08-01T08:02:48.060000",
          "created": "2024-07-02T08:43:52.203000",
          "tags": [
            "word"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 11,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Eslam-ElHelaly",
            "id": "259630",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "CVE": 2,
            "FileHash-MD5": 15,
            "FileHash-SHA1": 1,
            "FileHash-SHA256": 1,
            "URL": 2409,
            "domain": 7836,
            "email": 7,
            "hostname": 2783
          },
          "indicator_count": 13054,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "669 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "631fc5b9d6ec61027a0e2e03",
          "name": "Twitter Feed - ecarlesi - 12-09-2022",
          "description": "",
          "modified": "2022-09-12T23:50:17.703000",
          "created": "2022-09-12T23:50:17.703000",
          "tags": [
            "phishing",
            "malware"
          ],
          "references": [
            "https://twitter.com/ecarlesi/status/1569116878315855873",
            "https://twitter.com/ecarlesi/status/1569117369334636544",
            "https://twitter.com/ecarlesi/status/1569117550746734598",
            "https://twitter.com/ecarlesi/status/1569117562784436230",
            "https://twitter.com/ecarlesi/status/1569117590382936065",
            "https://twitter.com/ecarlesi/status/1569117718149750785",
            "https://twitter.com/ecarlesi/status/1569117805701730304",
            "https://twitter.com/ecarlesi/status/1569117823401598978",
            "https://twitter.com/ecarlesi/status/1569117891546562560",
            "https://twitter.com/ecarlesi/status/1569120645627125760",
            "https://twitter.com/ecarlesi/status/1569127232466984963",
            "https://twitter.com/ecarlesi/status/1569130822891933697",
            "https://twitter.com/ecarlesi/status/1569131281954512896",
            "https://twitter.com/ecarlesi/status/1569131300782497793",
            "https://twitter.com/ecarlesi/status/1569131337461768192",
            "https://twitter.com/ecarlesi/status/1569131379807363073",
            "https://twitter.com/ecarlesi/status/1569131526020792322",
            "https://twitter.com/ecarlesi/status/1569131901507477504",
            "https://twitter.com/ecarlesi/status/1569133180036194306",
            "https://twitter.com/ecarlesi/status/1569133566507745281",
            "https://twitter.com/ecarlesi/status/1569134724609712130",
            "https://twitter.com/ecarlesi/status/1569135498962309120",
            "https://twitter.com/ecarlesi/status/1569135504041594882",
            "https://twitter.com/ecarlesi/status/1569135508613382145",
            "https://twitter.com/ecarlesi/status/1569135571817365506",
            "https://twitter.com/ecarlesi/status/1569137591374553088",
            "https://twitter.com/ecarlesi/status/1569139087436664832",
            "https://twitter.com/ecarlesi/status/1569144393520537600",
            "https://twitter.com/ecarlesi/status/1569144439217463297",
            "https://twitter.com/ecarlesi/status/1569145617460465666",
            "https://twitter.com/ecarlesi/status/1569146297763905542",
            "https://twitter.com/ecarlesi/status/1569147138357211136",
            "https://twitter.com/ecarlesi/status/1569148541771157506",
            "https://twitter.com/ecarlesi/status/1569148694762749952",
            "https://twitter.com/ecarlesi/status/1569148695937191936",
            "https://twitter.com/ecarlesi/status/1569149081041108993",
            "https://twitter.com/ecarlesi/status/1569149118429233152",
            "https://twitter.com/ecarlesi/status/1569149376869634048",
            "https://twitter.com/ecarlesi/status/1569152060150665217",
            "https://twitter.com/ecarlesi/status/1569153817572155392",
            "https://twitter.com/ecarlesi/status/1569154000234110978",
            "https://twitter.com/ecarlesi/status/1569154268816605185",
            "https://twitter.com/ecarlesi/status/1569160035963473920",
            "https://twitter.com/ecarlesi/status/1569160265509240835",
            "https://twitter.com/ecarlesi/status/1569162526671208449",
            "https://twitter.com/ecarlesi/status/1569162814052306945",
            "https://twitter.com/ecarlesi/status/1569162907539185664",
            "https://twitter.com/ecarlesi/status/1569163051370221572",
            "https://twitter.com/ecarlesi/status/1569164473268682753",
            "https://twitter.com/ecarlesi/status/1569164484115136513",
            "https://twitter.com/ecarlesi/status/1569164497692024833",
            "https://twitter.com/ecarlesi/status/1569167890896637952",
            "https://twitter.com/ecarlesi/status/1569173243789217795",
            "https://twitter.com/ecarlesi/status/1569177940260175873",
            "https://twitter.com/ecarlesi/status/1569179477845975043",
            "https://twitter.com/ecarlesi/status/1569180180777959424",
            "https://twitter.com/ecarlesi/status/1569182133205303297",
            "https://twitter.com/ecarlesi/status/1569191582565294081",
            "https://twitter.com/ecarlesi/status/1569192388014358528",
            "https://twitter.com/ecarlesi/status/1569193450871865344",
            "https://twitter.com/ecarlesi/status/1569193464549474304",
            "https://twitter.com/ecarlesi/status/1569193613472501761",
            "https://twitter.com/ecarlesi/status/1569195636469137408",
            "https://twitter.com/ecarlesi/status/1569208356790800384",
            "https://twitter.com/ecarlesi/status/1569208782206418944",
            "https://twitter.com/ecarlesi/status/1569212112869773312",
            "https://twitter.com/ecarlesi/status/1569212636314697728",
            "https://twitter.com/ecarlesi/status/1569214527656415232",
            "https://twitter.com/ecarlesi/status/1569216257156677634",
            "https://twitter.com/ecarlesi/status/1569216767184044033",
            "https://twitter.com/ecarlesi/status/1569217541368602626",
            "https://twitter.com/ecarlesi/status/1569220009464848384",
            "https://twitter.com/ecarlesi/status/1569220667140149248",
            "https://twitter.com/ecarlesi/status/1569222161637773312",
            "https://twitter.com/ecarlesi/status/1569223805553229826",
            "https://twitter.com/ecarlesi/status/1569225409807491073",
            "https://twitter.com/ecarlesi/status/1569226109169827841",
            "https://twitter.com/ecarlesi/status/1569227585133117441",
            "https://twitter.com/ecarlesi/status/1569228111581003776",
            "https://twitter.com/ecarlesi/status/1569228742924304387",
            "https://twitter.com/ecarlesi/status/1569231026303471618",
            "https://twitter.com/ecarlesi/status/1569231250895822848",
            "https://twitter.com/ecarlesi/status/1569231835250425857",
            "https://twitter.com/ecarlesi/status/1569232684970385408",
            "https://twitter.com/ecarlesi/status/1569233760071081984",
            "https://twitter.com/ecarlesi/status/1569233862273679360",
            "https://twitter.com/ecarlesi/status/1569234177115013121",
            "https://twitter.com/ecarlesi/status/1569234586441334785",
            "https://twitter.com/ecarlesi/status/1569235689262256130",
            "https://twitter.com/ecarlesi/status/1569236110135492609",
            "https://twitter.com/ecarlesi/status/1569237844471812096",
            "https://twitter.com/ecarlesi/status/1569239023050280962",
            "https://twitter.com/ecarlesi/status/1569239689902653441",
            "https://twitter.com/ecarlesi/status/1569239705417355264",
            "https://twitter.com/ecarlesi/status/1569239822023249921",
            "https://twitter.com/ecarlesi/status/1569240262706176005",
            "https://twitter.com/ecarlesi/status/1569241099125854209",
            "https://twitter.com/ecarlesi/status/1569241254520623106",
            "https://twitter.com/ecarlesi/status/1569241839105937409",
            "https://twitter.com/ecarlesi/status/1569243745660375042",
            "https://twitter.com/ecarlesi/status/1569243834277629952",
            "https://twitter.com/ecarlesi/status/1569244325736857602",
            "https://twitter.com/ecarlesi/status/1569247094786981889",
            "https://twitter.com/ecarlesi/status/1569247535801270278",
            "https://twitter.com/ecarlesi/status/1569251056898478081",
            "https://twitter.com/ecarlesi/status/1569251676900442114",
            "https://twitter.com/ecarlesi/status/1569252042660528128",
            "https://twitter.com/ecarlesi/status/1569253304856678400",
            "https://twitter.com/ecarlesi/status/1569254697474605058",
            "https://twitter.com/ecarlesi/status/1569257647278379008",
            "https://twitter.com/ecarlesi/status/1569259544378834947",
            "https://twitter.com/ecarlesi/status/1569259724566134785",
            "https://twitter.com/ecarlesi/status/1569263737441492992",
            "https://twitter.com/ecarlesi/status/1569270835927547905",
            "https://twitter.com/ecarlesi/status/1569277558444937216",
            "https://twitter.com/ecarlesi/status/1569281919140896768",
            "https://twitter.com/ecarlesi/status/1569282060916760577",
            "https://twitter.com/ecarlesi/status/1569282797491077124",
            "https://twitter.com/ecarlesi/status/1569283139154878465",
            "https://twitter.com/ecarlesi/status/1569284625423269899",
            "https://twitter.com/ecarlesi/status/1569286680586108930",
            "https://twitter.com/ecarlesi/status/1569291029303418882",
            "https://twitter.com/ecarlesi/status/1569291824396640256",
            "https://twitter.com/ecarlesi/status/1569295766954602496",
            "https://twitter.com/ecarlesi/status/1569297488229580802",
            "https://twitter.com/ecarlesi/status/1569298200661565442",
            "https://twitter.com/ecarlesi/status/1569303407483301888",
            "https://twitter.com/ecarlesi/status/1569305947260047364",
            "https://twitter.com/ecarlesi/status/1569307108490809344",
            "https://twitter.com/ecarlesi/status/1569313708676943874",
            "https://twitter.com/ecarlesi/status/1569316548543750144",
            "https://twitter.com/ecarlesi/status/1569318099119386625",
            "https://twitter.com/ecarlesi/status/1569318709616844800",
            "https://twitter.com/ecarlesi/status/1569325102239547398",
            "https://twitter.com/ecarlesi/status/1569328409624416262",
            "https://twitter.com/ecarlesi/status/1569332239543975936",
            "https://twitter.com/ecarlesi/status/1569334526706319360",
            "https://twitter.com/ecarlesi/status/1569338511936917505",
            "https://twitter.com/ecarlesi/status/1569342170682871810",
            "https://twitter.com/ecarlesi/status/1569343466835951622",
            "https://twitter.com/ecarlesi/status/1569346411874983936",
            "https://twitter.com/ecarlesi/status/1569346552224784384",
            "https://twitter.com/ecarlesi/status/1569347871010340866",
            "https://twitter.com/ecarlesi/status/1569348836497162242",
            "https://twitter.com/ecarlesi/status/1569349545250766848",
            "https://twitter.com/ecarlesi/status/1569353159557931013",
            "https://twitter.com/ecarlesi/status/1569353653512708098",
            "https://twitter.com/ecarlesi/status/1569354174097137666",
            "https://twitter.com/ecarlesi/status/1569354568089075713",
            "https://twitter.com/ecarlesi/status/1569354986055671808",
            "https://twitter.com/ecarlesi/status/1569362553003806727",
            "https://twitter.com/ecarlesi/status/1569367214989479937",
            "https://twitter.com/ecarlesi/status/1569368524199542786",
            "https://twitter.com/ecarlesi/status/1569375922658201601",
            "https://twitter.com/ecarlesi/status/1569385473637744644",
            "https://twitter.com/ecarlesi/status/1569387350999928835",
            "https://twitter.com/ecarlesi/status/1569388439992139776",
            "https://twitter.com/ecarlesi/status/1569388988590342146",
            "https://twitter.com/ecarlesi/status/1569390272038985728",
            "https://twitter.com/ecarlesi/status/1569390863842680834",
            "https://twitter.com/ecarlesi/status/1569391085536804864",
            "https://twitter.com/ecarlesi/status/1569395386644570113",
            "https://twitter.com/ecarlesi/status/1569406351553478656",
            "https://twitter.com/ecarlesi/status/1569406917033824256",
            "https://twitter.com/ecarlesi/status/1569407069354090497",
            "https://twitter.com/ecarlesi/status/1569415191800020993",
            "https://twitter.com/ecarlesi/status/1569416387046563846",
            "https://twitter.com/ecarlesi/status/1569449631674781702",
            "https://twitter.com/ecarlesi/status/1569452008049893383",
            "https://twitter.com/ecarlesi/status/1569464865030373378",
            "https://twitter.com/ecarlesi/status/1569465635507249162",
            "https://twitter.com/ecarlesi/status/1569465909076443141"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 169,
            "domain": 3
          },
          "indicator_count": 172,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "1357 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://twitter.com/ecarlesi/status/1569234177115013121",
        "https://twitter.com/ecarlesi/status/1569243745660375042",
        "https://twitter.com/ecarlesi/status/1569362553003806727",
        "https://twitter.com/ecarlesi/status/1569225409807491073",
        "https://twitter.com/ecarlesi/status/1569307108490809344",
        "https://twitter.com/ecarlesi/status/1569120645627125760",
        "https://twitter.com/ecarlesi/status/1569286680586108930",
        "https://www.validin.com/blog/finding-lost-iphone-smishing-with-validin/",
        "https://twitter.com/ecarlesi/status/1569144393520537600",
        "https://twitter.com/ecarlesi/status/1569247094786981889",
        "https://twitter.com/ecarlesi/status/1569406351553478656",
        "https://twitter.com/ecarlesi/status/1569231026303471618",
        "https://twitter.com/ecarlesi/status/1569216767184044033",
        "https://twitter.com/ecarlesi/status/1569239023050280962",
        "https://twitter.com/ecarlesi/status/1569313708676943874",
        "https://twitter.com/ecarlesi/status/1569182133205303297",
        "https://twitter.com/ecarlesi/status/1569146297763905542",
        "https://twitter.com/ecarlesi/status/1569162526671208449",
        "https://twitter.com/ecarlesi/status/1569416387046563846",
        "https://twitter.com/ecarlesi/status/1569233862273679360",
        "https://twitter.com/ecarlesi/status/1569164497692024833",
        "https://twitter.com/ecarlesi/status/1569148695937191936",
        "https://twitter.com/ecarlesi/status/1569135498962309120",
        "https://twitter.com/ecarlesi/status/1569332239543975936",
        "https://twitter.com/ecarlesi/status/1569117369334636544",
        "https://twitter.com/ecarlesi/status/1569214527656415232",
        "https://twitter.com/ecarlesi/status/1569282797491077124",
        "https://twitter.com/ecarlesi/status/1569239689902653441",
        "https://twitter.com/ecarlesi/status/1569241099125854209",
        "https://twitter.com/ecarlesi/status/1569284625423269899",
        "https://twitter.com/ecarlesi/status/1569251676900442114",
        "https://twitter.com/ecarlesi/status/1569298200661565442",
        "https://twitter.com/ecarlesi/status/1569328409624416262",
        "https://twitter.com/ecarlesi/status/1569116878315855873",
        "https://twitter.com/ecarlesi/status/1569135571817365506",
        "https://twitter.com/ecarlesi/status/1569367214989479937",
        "https://twitter.com/ecarlesi/status/1569152060150665217",
        "https://twitter.com/ecarlesi/status/1569318709616844800",
        "https://twitter.com/ecarlesi/status/1569388439992139776",
        "https://twitter.com/ecarlesi/status/1569160035963473920",
        "https://twitter.com/ecarlesi/status/1569354568089075713",
        "https://twitter.com/ecarlesi/status/1569303407483301888",
        "https://twitter.com/ecarlesi/status/1569395386644570113",
        "https://twitter.com/ecarlesi/status/1569407069354090497",
        "https://twitter.com/ecarlesi/status/1569251056898478081",
        "https://twitter.com/ecarlesi/status/1569295766954602496",
        "https://twitter.com/ecarlesi/status/1569465909076443141",
        "https://twitter.com/ecarlesi/status/1569346552224784384",
        "https://twitter.com/ecarlesi/status/1569144439217463297",
        "https://twitter.com/ecarlesi/status/1569149081041108993",
        "https://twitter.com/ecarlesi/status/1569239822023249921",
        "https://twitter.com/ecarlesi/status/1569257647278379008",
        "https://twitter.com/ecarlesi/status/1569338511936917505",
        "https://twitter.com/ecarlesi/status/1569135508613382145",
        "https://twitter.com/ecarlesi/status/1569375922658201601",
        "https://twitter.com/ecarlesi/status/1569127232466984963",
        "https://twitter.com/ecarlesi/status/1569154268816605185",
        "https://twitter.com/ecarlesi/status/1569235689262256130",
        "https://twitter.com/ecarlesi/status/1569216257156677634",
        "https://twitter.com/ecarlesi/status/1569354986055671808",
        "https://twitter.com/ecarlesi/status/1569391085536804864",
        "https://twitter.com/ecarlesi/status/1569349545250766848",
        "https://twitter.com/ecarlesi/status/1569385473637744644",
        "https://twitter.com/ecarlesi/status/1569179477845975043",
        "https://twitter.com/ecarlesi/status/1569131379807363073",
        "https://twitter.com/ecarlesi/status/1569177940260175873",
        "https://twitter.com/ecarlesi/status/1569231250895822848",
        "https://twitter.com/ecarlesi/status/1569318099119386625",
        "https://twitter.com/ecarlesi/status/1569208782206418944",
        "https://twitter.com/ecarlesi/status/1569167890896637952",
        "https://twitter.com/ecarlesi/status/1569243834277629952",
        "https://twitter.com/ecarlesi/status/1569195636469137408",
        "https://twitter.com/ecarlesi/status/1569212636314697728",
        "https://twitter.com/ecarlesi/status/1569133180036194306",
        "https://twitter.com/ecarlesi/status/1569236110135492609",
        "https://twitter.com/ecarlesi/status/1569133566507745281",
        "https://twitter.com/ecarlesi/status/1569192388014358528",
        "https://twitter.com/ecarlesi/status/1569212112869773312",
        "https://twitter.com/ecarlesi/status/1569145617460465666",
        "https://twitter.com/ecarlesi/status/1569131526020792322",
        "https://twitter.com/ecarlesi/status/1569117550746734598",
        "https://twitter.com/ecarlesi/status/1569117562784436230",
        "https://twitter.com/ecarlesi/status/1569247535801270278",
        "https://twitter.com/ecarlesi/status/1569244325736857602",
        "https://twitter.com/ecarlesi/status/1569117823401598978",
        "https://twitter.com/ecarlesi/status/1569162814052306945",
        "https://twitter.com/ecarlesi/status/1569387350999928835",
        "https://twitter.com/ecarlesi/status/1569164484115136513",
        "https://twitter.com/ecarlesi/status/1569343466835951622",
        "https://twitter.com/ecarlesi/status/1569180180777959424",
        "https://twitter.com/ecarlesi/status/1569130822891933697",
        "https://twitter.com/ecarlesi/status/1569131901507477504",
        "https://twitter.com/ecarlesi/status/1569237844471812096",
        "https://twitter.com/ecarlesi/status/1569415191800020993",
        "https://twitter.com/ecarlesi/status/1569334526706319360",
        "https://twitter.com/ecarlesi/status/1569388988590342146",
        "https://twitter.com/ecarlesi/status/1569193464549474304",
        "https://twitter.com/ecarlesi/status/1569117590382936065",
        "https://twitter.com/ecarlesi/status/1569270835927547905",
        "https://twitter.com/ecarlesi/status/1569228111581003776",
        "https://twitter.com/ecarlesi/status/1569139087436664832",
        "https://twitter.com/ecarlesi/status/1569149118429233152",
        "https://twitter.com/ecarlesi/status/1569227585133117441",
        "https://twitter.com/ecarlesi/status/1569316548543750144",
        "https://twitter.com/ecarlesi/status/1569208356790800384",
        "https://twitter.com/ecarlesi/status/1569253304856678400",
        "https://twitter.com/ecarlesi/status/1569348836497162242",
        "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt",
        "https://twitter.com/ecarlesi/status/1569281919140896768",
        "https://twitter.com/ecarlesi/status/1569193613472501761",
        "https://twitter.com/ecarlesi/status/1569154000234110978",
        "https://twitter.com/ecarlesi/status/1569353159557931013",
        "https://twitter.com/ecarlesi/status/1569464865030373378",
        "https://twitter.com/ecarlesi/status/1569406917033824256",
        "https://twitter.com/ecarlesi/status/1569117891546562560",
        "https://twitter.com/ecarlesi/status/1569291824396640256",
        "https://twitter.com/ecarlesi/status/1569226109169827841",
        "https://twitter.com/ecarlesi/status/1569148694762749952",
        "https://twitter.com/ecarlesi/status/1569222161637773312",
        "https://twitter.com/ecarlesi/status/1569305947260047364",
        "https://twitter.com/ecarlesi/status/1569220009464848384",
        "https://twitter.com/ecarlesi/status/1569465635507249162",
        "https://twitter.com/ecarlesi/status/1569131300782497793",
        "https://twitter.com/ecarlesi/status/1569217541368602626",
        "https://twitter.com/ecarlesi/status/1569231835250425857",
        "https://twitter.com/ecarlesi/status/1569241254520623106",
        "https://twitter.com/ecarlesi/status/1569232684970385408",
        "https://twitter.com/ecarlesi/status/1569228742924304387",
        "https://twitter.com/ecarlesi/status/1569134724609712130",
        "https://twitter.com/ecarlesi/status/1569390272038985728",
        "https://twitter.com/ecarlesi/status/1569283139154878465",
        "https://twitter.com/ecarlesi/status/1569234586441334785",
        "https://twitter.com/ecarlesi/status/1569240262706176005",
        "https://twitter.com/ecarlesi/status/1569241839105937409",
        "https://twitter.com/ecarlesi/status/1569259724566134785",
        "https://twitter.com/ecarlesi/status/1569342170682871810",
        "https://twitter.com/ecarlesi/status/1569160265509240835",
        "https://twitter.com/ecarlesi/status/1569390863842680834",
        "https://twitter.com/ecarlesi/status/1569149376869634048",
        "https://twitter.com/ecarlesi/status/1569346411874983936",
        "https://twitter.com/ecarlesi/status/1569193450871865344",
        "https://twitter.com/ecarlesi/status/1569147138357211136",
        "https://twitter.com/ecarlesi/status/1569117805701730304",
        "https://twitter.com/ecarlesi/status/1569162907539185664",
        "https://twitter.com/ecarlesi/status/1569353653512708098",
        "https://twitter.com/ecarlesi/status/1569131337461768192",
        "https://twitter.com/ecarlesi/status/1569137591374553088",
        "https://twitter.com/ecarlesi/status/1569449631674781702",
        "https://twitter.com/ecarlesi/status/1569220667140149248",
        "https://twitter.com/ecarlesi/status/1569282060916760577",
        "https://twitter.com/ecarlesi/status/1569164473268682753",
        "https://twitter.com/ecarlesi/status/1569191582565294081",
        "https://twitter.com/ecarlesi/status/1569254697474605058",
        "https://twitter.com/ecarlesi/status/1569297488229580802",
        "https://twitter.com/ecarlesi/status/1569259544378834947",
        "https://twitter.com/ecarlesi/status/1569252042660528128",
        "https://twitter.com/ecarlesi/status/1569263737441492992",
        "https://twitter.com/ecarlesi/status/1569325102239547398",
        "https://twitter.com/ecarlesi/status/1569347871010340866",
        "https://twitter.com/ecarlesi/status/1569239705417355264",
        "https://twitter.com/ecarlesi/status/1569148541771157506",
        "https://twitter.com/ecarlesi/status/1569277558444937216",
        "https://twitter.com/ecarlesi/status/1569117718149750785",
        "https://twitter.com/ecarlesi/status/1569131281954512896",
        "https://twitter.com/ecarlesi/status/1569135504041594882",
        "https://twitter.com/ecarlesi/status/1569163051370221572",
        "https://twitter.com/ecarlesi/status/1569173243789217795",
        "https://twitter.com/ecarlesi/status/1569223805553229826",
        "https://twitter.com/ecarlesi/status/1569233760071081984",
        "https://twitter.com/ecarlesi/status/1569368524199542786",
        "https://twitter.com/ecarlesi/status/1569354174097137666",
        "https://twitter.com/ecarlesi/status/1569291029303418882",
        "https://twitter.com/ecarlesi/status/1569153817572155392",
        "https://twitter.com/ecarlesi/status/1569452008049893383"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 8,
  "pulses": [
    {
      "id": "66101e21a1f3534bddb2ff70",
      "name": "Finding Lost iPhone Smishing",
      "description": "The report details an analysis of a smishing campaign involving domains disguising themselves as Apple services to trick users into divulging their login credentials or device information. By leveraging Validin's comprehensive passive DNS data and pivoting capabilities, the analysts were able to uncover a large infrastructure of related malicious domains used in the campaign, painting a clearer picture of the threat actor's tactics and enabling the creation of robust block lists.",
      "modified": "2024-05-05T15:00:26.631000",
      "created": "2024-04-05T15:52:01.166000",
      "tags": [
        "smishing",
        "phishing",
        "credentials",
        "iphone",
        "apple",
        "icloud"
      ],
      "references": [
        "https://www.validin.com/blog/finding-lost-iphone-smishing-with-validin/"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1583",
          "name": "Acquire Infrastructure",
          "display_name": "T1583 - Acquire Infrastructure"
        },
        {
          "id": "T1592",
          "name": "Gather Victim Host Information",
          "display_name": "T1592 - Gather Victim Host Information"
        },
        {
          "id": "T1600",
          "name": "Weaken Encryption",
          "display_name": "T1600 - Weaken Encryption"
        },
        {
          "id": "T1589",
          "name": "Gather Victim Identity Information",
          "display_name": "T1589 - Gather Victim Identity Information"
        },
        {
          "id": "T1595",
          "name": "Active Scanning",
          "display_name": "T1595 - Active Scanning"
        },
        {
          "id": "T1584",
          "name": "Compromise Infrastructure",
          "display_name": "T1584 - Compromise Infrastructure"
        },
        {
          "id": "T1586",
          "name": "Compromise Accounts",
          "display_name": "T1586 - Compromise Accounts"
        },
        {
          "id": "T1597",
          "name": "Search Closed Sources",
          "display_name": "T1597 - Search Closed Sources"
        },
        {
          "id": "T1566",
          "name": "Phishing",
          "display_name": "T1566 - Phishing"
        },
        {
          "id": "T1598",
          "name": "Phishing for Information",
          "display_name": "T1598 - Phishing for Information"
        },
        {
          "id": "T1585",
          "name": "Establish Accounts",
          "display_name": "T1585 - Establish Accounts"
        },
        {
          "id": "T1588",
          "name": "Obtain Capabilities",
          "display_name": "T1588 - Obtain Capabilities"
        }
      ],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 374,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "AlienVault",
        "id": "2",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_2/resized/80/avatar_dacfad0ca8.png",
        "is_subscribed": true,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 1852,
        "hostname": 5
      },
      "indicator_count": 1857,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 386758,
      "modified_text": "757 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6783308fc0b6e2bd8dfb209c",
      "name": "TTC-CERT_blocklist_recommended",
      "description": "",
      "modified": "2026-02-14T00:03:07.406000",
      "created": "2025-01-12T03:01:35.075000",
      "tags": [],
      "references": [
        "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "skocherhan",
        "id": "249290",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 606,
        "URL": 4,
        "domain": 25122,
        "hostname": 25306
      },
      "indicator_count": 51038,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 187,
      "modified_text": "107 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "67429f73a3f45fa88890276d",
      "name": "StreamMining",
      "description": "",
      "modified": "2024-11-24T03:37:23.616000",
      "created": "2024-11-24T03:37:23.616000",
      "tags": [
        "eliminar",
        "leer ms",
        "wishlist vista",
        "poltica",
        "secadores",
        "vista",
        "sala",
        "vaporal",
        "utensilios",
        "belleza equipos",
        "ciudad"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "670f94e03014212e19fa5a77",
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "rivocado",
        "id": "300960",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 6,
        "URL": 170,
        "domain": 11158,
        "hostname": 3549
      },
      "indicator_count": 14883,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 25,
      "modified_text": "554 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "67429f7224d433f384b935c8",
      "name": "StreamMining",
      "description": "",
      "modified": "2024-11-24T03:37:22.551000",
      "created": "2024-11-24T03:37:22.551000",
      "tags": [
        "eliminar",
        "leer ms",
        "wishlist vista",
        "poltica",
        "secadores",
        "vista",
        "sala",
        "vaporal",
        "utensilios",
        "belleza equipos",
        "ciudad"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "670f94e03014212e19fa5a77",
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "rivocado",
        "id": "300960",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 6,
        "URL": 170,
        "domain": 11158,
        "hostname": 3549
      },
      "indicator_count": 14883,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 20,
      "modified_text": "554 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "670f94e03014212e19fa5a77",
      "name": "Malicious-Dangerous-Domain&URL-New-IOC List",
      "description": "By Helaly",
      "modified": "2024-11-15T10:01:11.688000",
      "created": "2024-10-16T10:26:40.893000",
      "tags": [
        "eliminar",
        "leer ms",
        "wishlist vista",
        "poltica",
        "secadores",
        "vista",
        "sala",
        "vaporal",
        "utensilios",
        "belleza equipos",
        "ciudad"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 39659,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Eslam-ElHelaly",
        "id": "259630",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-MD5": 6,
        "URL": 170,
        "domain": 11158,
        "hostname": 3549
      },
      "indicator_count": 14883,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 80,
      "modified_text": "563 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6683bdd1247c16c5855518c7",
      "name": "Domain-URL-IP-Hash-IOC",
      "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes",
      "modified": "2024-08-02T07:05:02.060000",
      "created": "2024-07-02T08:44:01.648000",
      "tags": [
        "word"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 286,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Eslam-ElHelaly",
        "id": "259630",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CVE": 2,
        "FileHash-MD5": 15,
        "FileHash-SHA1": 1,
        "FileHash-SHA256": 1,
        "URL": 2521,
        "domain": 8243,
        "email": 7,
        "hostname": 2893
      },
      "indicator_count": 13683,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "668 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "6683bdc8052a11fe921381a0",
      "name": "Domain-URL-IP-Hash-IOC",
      "description": "Updated collection of malicious , malware , phishing ... etc of domain , UR , IP , Hashes",
      "modified": "2024-08-01T08:02:48.060000",
      "created": "2024-07-02T08:43:52.203000",
      "tags": [
        "word"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 11,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "Eslam-ElHelaly",
        "id": "259630",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_259630/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "CVE": 2,
        "FileHash-MD5": 15,
        "FileHash-SHA1": 1,
        "FileHash-SHA256": 1,
        "URL": 2409,
        "domain": 7836,
        "email": 7,
        "hostname": 2783
      },
      "indicator_count": 13054,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "669 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "631fc5b9d6ec61027a0e2e03",
      "name": "Twitter Feed - ecarlesi - 12-09-2022",
      "description": "",
      "modified": "2022-09-12T23:50:17.703000",
      "created": "2022-09-12T23:50:17.703000",
      "tags": [
        "phishing",
        "malware"
      ],
      "references": [
        "https://twitter.com/ecarlesi/status/1569116878315855873",
        "https://twitter.com/ecarlesi/status/1569117369334636544",
        "https://twitter.com/ecarlesi/status/1569117550746734598",
        "https://twitter.com/ecarlesi/status/1569117562784436230",
        "https://twitter.com/ecarlesi/status/1569117590382936065",
        "https://twitter.com/ecarlesi/status/1569117718149750785",
        "https://twitter.com/ecarlesi/status/1569117805701730304",
        "https://twitter.com/ecarlesi/status/1569117823401598978",
        "https://twitter.com/ecarlesi/status/1569117891546562560",
        "https://twitter.com/ecarlesi/status/1569120645627125760",
        "https://twitter.com/ecarlesi/status/1569127232466984963",
        "https://twitter.com/ecarlesi/status/1569130822891933697",
        "https://twitter.com/ecarlesi/status/1569131281954512896",
        "https://twitter.com/ecarlesi/status/1569131300782497793",
        "https://twitter.com/ecarlesi/status/1569131337461768192",
        "https://twitter.com/ecarlesi/status/1569131379807363073",
        "https://twitter.com/ecarlesi/status/1569131526020792322",
        "https://twitter.com/ecarlesi/status/1569131901507477504",
        "https://twitter.com/ecarlesi/status/1569133180036194306",
        "https://twitter.com/ecarlesi/status/1569133566507745281",
        "https://twitter.com/ecarlesi/status/1569134724609712130",
        "https://twitter.com/ecarlesi/status/1569135498962309120",
        "https://twitter.com/ecarlesi/status/1569135504041594882",
        "https://twitter.com/ecarlesi/status/1569135508613382145",
        "https://twitter.com/ecarlesi/status/1569135571817365506",
        "https://twitter.com/ecarlesi/status/1569137591374553088",
        "https://twitter.com/ecarlesi/status/1569139087436664832",
        "https://twitter.com/ecarlesi/status/1569144393520537600",
        "https://twitter.com/ecarlesi/status/1569144439217463297",
        "https://twitter.com/ecarlesi/status/1569145617460465666",
        "https://twitter.com/ecarlesi/status/1569146297763905542",
        "https://twitter.com/ecarlesi/status/1569147138357211136",
        "https://twitter.com/ecarlesi/status/1569148541771157506",
        "https://twitter.com/ecarlesi/status/1569148694762749952",
        "https://twitter.com/ecarlesi/status/1569148695937191936",
        "https://twitter.com/ecarlesi/status/1569149081041108993",
        "https://twitter.com/ecarlesi/status/1569149118429233152",
        "https://twitter.com/ecarlesi/status/1569149376869634048",
        "https://twitter.com/ecarlesi/status/1569152060150665217",
        "https://twitter.com/ecarlesi/status/1569153817572155392",
        "https://twitter.com/ecarlesi/status/1569154000234110978",
        "https://twitter.com/ecarlesi/status/1569154268816605185",
        "https://twitter.com/ecarlesi/status/1569160035963473920",
        "https://twitter.com/ecarlesi/status/1569160265509240835",
        "https://twitter.com/ecarlesi/status/1569162526671208449",
        "https://twitter.com/ecarlesi/status/1569162814052306945",
        "https://twitter.com/ecarlesi/status/1569162907539185664",
        "https://twitter.com/ecarlesi/status/1569163051370221572",
        "https://twitter.com/ecarlesi/status/1569164473268682753",
        "https://twitter.com/ecarlesi/status/1569164484115136513",
        "https://twitter.com/ecarlesi/status/1569164497692024833",
        "https://twitter.com/ecarlesi/status/1569167890896637952",
        "https://twitter.com/ecarlesi/status/1569173243789217795",
        "https://twitter.com/ecarlesi/status/1569177940260175873",
        "https://twitter.com/ecarlesi/status/1569179477845975043",
        "https://twitter.com/ecarlesi/status/1569180180777959424",
        "https://twitter.com/ecarlesi/status/1569182133205303297",
        "https://twitter.com/ecarlesi/status/1569191582565294081",
        "https://twitter.com/ecarlesi/status/1569192388014358528",
        "https://twitter.com/ecarlesi/status/1569193450871865344",
        "https://twitter.com/ecarlesi/status/1569193464549474304",
        "https://twitter.com/ecarlesi/status/1569193613472501761",
        "https://twitter.com/ecarlesi/status/1569195636469137408",
        "https://twitter.com/ecarlesi/status/1569208356790800384",
        "https://twitter.com/ecarlesi/status/1569208782206418944",
        "https://twitter.com/ecarlesi/status/1569212112869773312",
        "https://twitter.com/ecarlesi/status/1569212636314697728",
        "https://twitter.com/ecarlesi/status/1569214527656415232",
        "https://twitter.com/ecarlesi/status/1569216257156677634",
        "https://twitter.com/ecarlesi/status/1569216767184044033",
        "https://twitter.com/ecarlesi/status/1569217541368602626",
        "https://twitter.com/ecarlesi/status/1569220009464848384",
        "https://twitter.com/ecarlesi/status/1569220667140149248",
        "https://twitter.com/ecarlesi/status/1569222161637773312",
        "https://twitter.com/ecarlesi/status/1569223805553229826",
        "https://twitter.com/ecarlesi/status/1569225409807491073",
        "https://twitter.com/ecarlesi/status/1569226109169827841",
        "https://twitter.com/ecarlesi/status/1569227585133117441",
        "https://twitter.com/ecarlesi/status/1569228111581003776",
        "https://twitter.com/ecarlesi/status/1569228742924304387",
        "https://twitter.com/ecarlesi/status/1569231026303471618",
        "https://twitter.com/ecarlesi/status/1569231250895822848",
        "https://twitter.com/ecarlesi/status/1569231835250425857",
        "https://twitter.com/ecarlesi/status/1569232684970385408",
        "https://twitter.com/ecarlesi/status/1569233760071081984",
        "https://twitter.com/ecarlesi/status/1569233862273679360",
        "https://twitter.com/ecarlesi/status/1569234177115013121",
        "https://twitter.com/ecarlesi/status/1569234586441334785",
        "https://twitter.com/ecarlesi/status/1569235689262256130",
        "https://twitter.com/ecarlesi/status/1569236110135492609",
        "https://twitter.com/ecarlesi/status/1569237844471812096",
        "https://twitter.com/ecarlesi/status/1569239023050280962",
        "https://twitter.com/ecarlesi/status/1569239689902653441",
        "https://twitter.com/ecarlesi/status/1569239705417355264",
        "https://twitter.com/ecarlesi/status/1569239822023249921",
        "https://twitter.com/ecarlesi/status/1569240262706176005",
        "https://twitter.com/ecarlesi/status/1569241099125854209",
        "https://twitter.com/ecarlesi/status/1569241254520623106",
        "https://twitter.com/ecarlesi/status/1569241839105937409",
        "https://twitter.com/ecarlesi/status/1569243745660375042",
        "https://twitter.com/ecarlesi/status/1569243834277629952",
        "https://twitter.com/ecarlesi/status/1569244325736857602",
        "https://twitter.com/ecarlesi/status/1569247094786981889",
        "https://twitter.com/ecarlesi/status/1569247535801270278",
        "https://twitter.com/ecarlesi/status/1569251056898478081",
        "https://twitter.com/ecarlesi/status/1569251676900442114",
        "https://twitter.com/ecarlesi/status/1569252042660528128",
        "https://twitter.com/ecarlesi/status/1569253304856678400",
        "https://twitter.com/ecarlesi/status/1569254697474605058",
        "https://twitter.com/ecarlesi/status/1569257647278379008",
        "https://twitter.com/ecarlesi/status/1569259544378834947",
        "https://twitter.com/ecarlesi/status/1569259724566134785",
        "https://twitter.com/ecarlesi/status/1569263737441492992",
        "https://twitter.com/ecarlesi/status/1569270835927547905",
        "https://twitter.com/ecarlesi/status/1569277558444937216",
        "https://twitter.com/ecarlesi/status/1569281919140896768",
        "https://twitter.com/ecarlesi/status/1569282060916760577",
        "https://twitter.com/ecarlesi/status/1569282797491077124",
        "https://twitter.com/ecarlesi/status/1569283139154878465",
        "https://twitter.com/ecarlesi/status/1569284625423269899",
        "https://twitter.com/ecarlesi/status/1569286680586108930",
        "https://twitter.com/ecarlesi/status/1569291029303418882",
        "https://twitter.com/ecarlesi/status/1569291824396640256",
        "https://twitter.com/ecarlesi/status/1569295766954602496",
        "https://twitter.com/ecarlesi/status/1569297488229580802",
        "https://twitter.com/ecarlesi/status/1569298200661565442",
        "https://twitter.com/ecarlesi/status/1569303407483301888",
        "https://twitter.com/ecarlesi/status/1569305947260047364",
        "https://twitter.com/ecarlesi/status/1569307108490809344",
        "https://twitter.com/ecarlesi/status/1569313708676943874",
        "https://twitter.com/ecarlesi/status/1569316548543750144",
        "https://twitter.com/ecarlesi/status/1569318099119386625",
        "https://twitter.com/ecarlesi/status/1569318709616844800",
        "https://twitter.com/ecarlesi/status/1569325102239547398",
        "https://twitter.com/ecarlesi/status/1569328409624416262",
        "https://twitter.com/ecarlesi/status/1569332239543975936",
        "https://twitter.com/ecarlesi/status/1569334526706319360",
        "https://twitter.com/ecarlesi/status/1569338511936917505",
        "https://twitter.com/ecarlesi/status/1569342170682871810",
        "https://twitter.com/ecarlesi/status/1569343466835951622",
        "https://twitter.com/ecarlesi/status/1569346411874983936",
        "https://twitter.com/ecarlesi/status/1569346552224784384",
        "https://twitter.com/ecarlesi/status/1569347871010340866",
        "https://twitter.com/ecarlesi/status/1569348836497162242",
        "https://twitter.com/ecarlesi/status/1569349545250766848",
        "https://twitter.com/ecarlesi/status/1569353159557931013",
        "https://twitter.com/ecarlesi/status/1569353653512708098",
        "https://twitter.com/ecarlesi/status/1569354174097137666",
        "https://twitter.com/ecarlesi/status/1569354568089075713",
        "https://twitter.com/ecarlesi/status/1569354986055671808",
        "https://twitter.com/ecarlesi/status/1569362553003806727",
        "https://twitter.com/ecarlesi/status/1569367214989479937",
        "https://twitter.com/ecarlesi/status/1569368524199542786",
        "https://twitter.com/ecarlesi/status/1569375922658201601",
        "https://twitter.com/ecarlesi/status/1569385473637744644",
        "https://twitter.com/ecarlesi/status/1569387350999928835",
        "https://twitter.com/ecarlesi/status/1569388439992139776",
        "https://twitter.com/ecarlesi/status/1569388988590342146",
        "https://twitter.com/ecarlesi/status/1569390272038985728",
        "https://twitter.com/ecarlesi/status/1569390863842680834",
        "https://twitter.com/ecarlesi/status/1569391085536804864",
        "https://twitter.com/ecarlesi/status/1569395386644570113",
        "https://twitter.com/ecarlesi/status/1569406351553478656",
        "https://twitter.com/ecarlesi/status/1569406917033824256",
        "https://twitter.com/ecarlesi/status/1569407069354090497",
        "https://twitter.com/ecarlesi/status/1569415191800020993",
        "https://twitter.com/ecarlesi/status/1569416387046563846",
        "https://twitter.com/ecarlesi/status/1569449631674781702",
        "https://twitter.com/ecarlesi/status/1569452008049893383",
        "https://twitter.com/ecarlesi/status/1569464865030373378",
        "https://twitter.com/ecarlesi/status/1569465635507249162",
        "https://twitter.com/ecarlesi/status/1569465909076443141"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "CyberHunterAutoFeed",
        "id": "182496",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "URL": 169,
        "domain": 3
      },
      "indicator_count": 172,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 1623,
      "modified_text": "1357 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "map-apple.co",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "map-apple.co",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780351032.3907611
}