{ "type": "Domain", "indicator": "modificationamazon.fr", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/modificationamazon.fr", "alexa": "http://www.alexa.com/siteinfo/modificationamazon.fr", "indicator": "modificationamazon.fr", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3544185395, "indicator": "modificationamazon.fr", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 36, "pulses": [ { "id": "6544b0acf1c1eb2efe9e34e0", "name": "French malicious domains - https://red.flag.domains", "description": "Entries from https://red.flag.domains/ - malicious domains targeting french citizens. Auto-updated each day.", "modified": "2026-04-19T03:54:46.157000", "created": "2023-11-03T08:34:52.626000", "tags": [ "red.flag.domains" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2864, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tomtomalien", "id": "258713", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_258713/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 38379, "hostname": 36 }, "indicator_count": 38415, "is_author": false, "is_subscribing": null, "subscriber_count": 236, "modified_text": "21 hours ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b030709e9af294c5c42065", "name": "Phishing | Mar 11, 2026 | Part 262/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 262/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:53:36.608000", "created": "2026-03-10T14:53:36.608000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1011, "domain": 989 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "40 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedcd52eafab3abba77ae6", "name": "Phishing | Mar 10, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:44:37.113000", "created": "2026-03-09T14:44:37.113000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1002, "domain": 998 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "41 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8998fa9c34e96435f604", "name": "Phishing | Mar 9, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:37:12.955000", "created": "2026-03-08T14:37:12.955000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 931, "hostname": 1069 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "42 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac38b985b258c442099840", "name": "Phishing | Mar 8, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:39:53.775000", "created": "2026-03-07T14:39:53.775000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 931, "hostname": 1069 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "43 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae6ce69f5c7e424c7fce5", "name": "Phishing | Mar 7, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:38:06.880000", "created": "2026-03-06T14:38:06.880000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "44 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99aa7f33b7844108f23bb", "name": "Phishing | Mar 6, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:00:55.485000", "created": "2026-03-05T15:00:55.485000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 933, "hostname": 1067 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "45 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a84400158789e69b194994", "name": "Phishing | Mar 5, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:38:56.285000", "created": "2026-03-04T14:38:56.285000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "46 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f1213f4f316bfa513046", "name": "Phishing | Mar 4, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:33:05.810000", "created": "2026-03-03T14:33:05.810000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "47 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b70c8ca14dad623df719", "name": "Phishing | Mar 3, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:13:00.197000", "created": "2026-03-02T16:13:00.197000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 933, "hostname": 1067 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "48 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5154b5332f304604b2d4f", "name": "Phishing | Mar 2, 2026 | Part 223/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 223/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:42:51.073000", "created": "2026-03-02T04:42:51.073000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 999, "domain": 1001 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "48 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a441cc6f79311142c346b1", "name": "Phishing | Mar 2, 2026 | Part 225/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 225/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:40:28.389000", "created": "2026-03-01T13:40:28.389000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1029, "hostname": 971 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "49 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a4078487e0ae6248bf3f93", "name": "Phishing | Mar 1, 2026 | Part 225/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 225/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:31:48.228000", "created": "2026-03-01T09:31:48.228000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1029, "hostname": 971 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "49 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a385f6f98d70830ee771e4", "name": "Phishing | Mar 1, 2026 | Part 225/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 225/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:19:02.775000", "created": "2026-03-01T00:19:02.775000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 954, "hostname": 1046 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "50 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997fcafb4b7c2caf97de063", "name": "Phishing | Feb 20, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:18:23.963000", "created": "2026-02-20T06:18:23.963000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1111, "domain": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "58 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976a70283c70a476d5f359", "name": "Phishing | Feb 20, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:54:24.075000", "created": "2026-02-19T19:54:24.075000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1111, "domain": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "59 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972b320fe49b1a0feacfe3", "name": "Phishing | Feb 20, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:24:34.980000", "created": "2026-02-19T15:24:34.980000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1111, "domain": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "59 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970bf40fe50e6aee3e77c5", "name": "Phishing | Feb 19, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:11:15.571000", "created": "2026-02-19T13:11:15.571000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1111, "domain": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "59 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699635c2dbd33f16a7d02170", "name": "Phishing | Feb 19, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:57:22.270000", "created": "2026-02-18T21:57:22.270000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1111, "domain": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "60 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699576939368929671700f56", "name": "Phishing | Feb 18, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:21:39.530000", "created": "2026-02-18T08:21:39.530000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1112, "domain": 888 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "60 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949b09e9a5a64246d571c8", "name": "Phishing | Feb 18, 2026 | Part 227/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 227/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:44:57.246000", "created": "2026-02-17T16:44:57.246000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1112, "domain": 888 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "61 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699299288a2a15ae957c7392", "name": "Phishing | Feb 16, 2026 | Part 230/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 230/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:12:24.429000", "created": "2026-02-16T04:12:24.429000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1030, "domain": 970 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "62 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699159e8b9aaf0ffd4f192d1", "name": "Phishing | Feb 15, 2026 | Part 235/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 235/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:30:16.712000", "created": "2026-02-15T05:30:16.712000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1044, "hostname": 956 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "63 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908b4e3c1b475e11a53e09", "name": "Phishing | Feb 15, 2026 | Part 237/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 237/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:48:46.995000", "created": "2026-02-14T14:48:46.995000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 879, "hostname": 1121 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "64 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c5dba147a0096316e7c80", "name": "Phishing | Feb 11, 2026 | Part 259/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 259/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:45:14.983000", "created": "2026-02-11T10:45:14.983000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 850, "hostname": 1150 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "67 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981aa260e6f5baea68b1c59", "name": "Phishing | 2026-01-31 | Part 67/163", "description": "Phishing indicators. Date: 2026-01-31. Part 67/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T07:56:22.406000", "created": "2026-02-03T07:56:22.406000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 5870, "domain": 4130 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "655e4ad4441b4cd4352a4cb2", "name": "DGA by Cybsec", "description": "", "modified": "2023-12-22T18:04:37.131000", "created": "2023-11-22T18:39:16.220000", "tags": [ "DGA" ], "references": [ "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Libfy", "id": "14964", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 4359, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 1, "domain": 76669, "hostname": 85783 }, "indicator_count": 166814, "is_author": false, "is_subscribing": null, "subscriber_count": 106, "modified_text": "849 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "655e49bf7fb5ebc444e8db6a", "name": "DGA by Cybsec", "description": "", "modified": "2023-12-22T18:04:37.131000", "created": "2023-11-22T18:34:39.799000", "tags": [ "DGA" ], "references": [ "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 26, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Libfy", "id": "14964", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 4359, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 1, "domain": 76669, "hostname": 85783 }, "indicator_count": 166814, "is_author": false, "is_subscribing": null, "subscriber_count": 102, "modified_text": "849 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6510a2dd9c7acab85a26f978", "name": "Phishing sites 2023-09-24", "description": "https://github.com/olbat/ut1-blacklists/blob/master/blacklists/phishing/domains", "modified": "2023-10-24T20:02:37.137000", "created": "2023-09-24T20:58:05.025000", "tags": [ "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 24, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 10, "URL": 5, "domain": 37579, "hostname": 3238 }, "indicator_count": 40832, "is_author": false, "is_subscribing": null, "subscriber_count": 190, "modified_text": "908 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "650c30c89613ab03b6d706de", "name": "Cybercriminals Exploit the Moroccan Tragedy in New Scam Campaign", "description": "Red Flag Domains are lists of very recently registered probably malicious domain names in french TLDs (see here). Data are published for security purposes only, and can be used to feed an automatic filtering solution like proxy. More details here.", "modified": "2023-09-21T12:02:16.237000", "created": "2023-09-21T12:02:16.237000", "tags": [], "references": [ "https://dl.red.flag.domains/red.flag.domains.txt", "https://www.trendmicro.com/en_us/research/23/i/cybercriminals-exploit-the-moroccan-tragedy-in-new-scam-campaign.html" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 21, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 17894 }, "indicator_count": 17894, "is_author": false, "is_subscribing": null, "subscriber_count": 846, "modified_text": "941 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "650c30c1a3f836220dfe197d", "name": "Cybercriminals Exploit the Moroccan Tragedy in New Scam Campaign", "description": "Red Flag Domains are lists of very recently registered probably malicious domain names in french TLDs (see here). Data are published for security purposes only, and can be used to feed an automatic filtering solution like proxy. More details here.", "modified": "2023-09-21T12:02:09.346000", "created": "2023-09-21T12:02:09.346000", "tags": [], "references": [ "https://dl.red.flag.domains/red.flag.domains.txt", "https://www.trendmicro.com/en_us/research/23/i/cybercriminals-exploit-the-moroccan-tragedy-in-new-scam-campaign.html" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 17894 }, "indicator_count": 17894, "is_author": false, "is_subscribing": null, "subscriber_count": 845, "modified_text": "941 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "644720ce9fb34a6f5e1345ba", "name": "threat-intelligence/ameli_cta_20221118_iocs.csv at main \u00b7 infobloxopen/threat-intelligence \u00b7 GitHub", "description": "", "modified": "2023-04-25T00:37:34.504000", "created": "2023-04-25T00:37:34.504000", "tags": [ "dedicated", "france", "europe", "github", "jump", "sign", "strong", "view", "code issues", "pull", "copy", "star", "open", "footer" ], "references": [ "https://github.com/infobloxopen/threat-intelligence/blob/main/cta_indicators/ameli_cta_20221118_iocs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "satyagunupuru", "id": "220559", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 8033 }, "indicator_count": 8033, "is_author": false, "is_subscribing": null, "subscriber_count": 41, "modified_text": "1091 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "644720bc911e18b719de19aa", "name": "threat-intelligence/ameli_cta_20221118_iocs.csv at main \u00b7 infobloxopen/threat-intelligence \u00b7 GitHub", "description": "", "modified": "2023-04-25T00:37:16.052000", "created": "2023-04-25T00:37:16.052000", "tags": [ "dedicated", "france", "europe", "github", "jump", "sign", "strong", "view", "code issues", "pull", "copy", "star", "open", "footer" ], "references": [ "https://github.com/infobloxopen/threat-intelligence/blob/main/cta_indicators/ameli_cta_20221118_iocs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "satyagunupuru", "id": "220559", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 8033 }, "indicator_count": 8033, "is_author": false, "is_subscribing": null, "subscriber_count": 37, "modified_text": "1091 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "644720af9434b3424468f8c3", "name": "threat-intelligence/ameli_cta_20221118_iocs.csv at main \u00b7 infobloxopen/threat-intelligence \u00b7 GitHub", "description": "", "modified": "2023-04-25T00:37:03.431000", "created": "2023-04-25T00:37:03.431000", "tags": [ "dedicated", "france", "europe", "github", "jump", "sign", "strong", "view", "code issues", "pull", "copy", "star", "open", "footer" ], "references": [ "https://github.com/infobloxopen/threat-intelligence/blob/main/cta_indicators/ameli_cta_20221118_iocs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "satyagunupuru", "id": "220559", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 8033 }, "indicator_count": 8033, "is_author": false, "is_subscribing": null, "subscriber_count": 37, "modified_text": "1091 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "644720af08521f3b9389af14", "name": "threat-intelligence/ameli_cta_20221118_iocs.csv at main \u00b7 infobloxopen/threat-intelligence \u00b7 GitHub", "description": "", "modified": "2023-04-25T00:37:03.378000", "created": "2023-04-25T00:37:03.378000", "tags": [ "dedicated", "france", "europe", "github", "jump", "sign", "strong", "view", "code issues", "pull", "copy", "star", "open", "footer" ], "references": [ "https://github.com/infobloxopen/threat-intelligence/blob/main/cta_indicators/ameli_cta_20221118_iocs.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "satyagunupuru", "id": "220559", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 8033 }, "indicator_count": 8033, "is_author": false, "is_subscribing": null, "subscriber_count": 36, "modified_text": "1091 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63dd11ec50de198886f68c7b", "name": "Redflag", "description": "Extract from https://red.flag.domains/", "modified": "2023-02-03T13:53:48.415000", "created": "2023-02-03T13:53:48.415000", "tags": [ "malicious domain", "french tld" ], "references": [ "https://dl.red.flag.domains/red.flag.domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Yougow59", "id": "162465", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 12964 }, "indicator_count": 12964, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "1171 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://www.trendmicro.com/en_us/research/23/i/cybercriminals-exploit-the-moroccan-tragedy-in-new-scam-campaign.html", "https://ltna.com.au/cyber", "https://dl.red.flag.domains/red.flag.domains.txt", "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt", "https://github.com/infobloxopen/threat-intelligence/blob/main/cta_indicators/ameli_cta_20221118_iocs.csv" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 36, "pulses": [ { "id": "6544b0acf1c1eb2efe9e34e0", "name": "French malicious domains - https://red.flag.domains", "description": "Entries from https://red.flag.domains/ - malicious domains targeting french citizens. Auto-updated each day.", "modified": "2026-04-19T03:54:46.157000", "created": "2023-11-03T08:34:52.626000", "tags": [ "red.flag.domains" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [ "France" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2864, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "tomtomalien", "id": "258713", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_258713/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 38379, "hostname": 36 }, "indicator_count": 38415, "is_author": false, "is_subscribing": null, "subscriber_count": 236, "modified_text": "21 hours ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b030709e9af294c5c42065", "name": "Phishing | Mar 11, 2026 | Part 262/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 262/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:53:36.608000", "created": "2026-03-10T14:53:36.608000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1011, "domain": 989 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "40 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedcd52eafab3abba77ae6", "name": "Phishing | Mar 10, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:44:37.113000", "created": "2026-03-09T14:44:37.113000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1002, "domain": 998 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "41 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8998fa9c34e96435f604", "name": "Phishing | Mar 9, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:37:12.955000", "created": "2026-03-08T14:37:12.955000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 931, "hostname": 1069 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "42 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac38b985b258c442099840", "name": "Phishing | Mar 8, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:39:53.775000", "created": "2026-03-07T14:39:53.775000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 931, "hostname": 1069 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "43 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae6ce69f5c7e424c7fce5", "name": "Phishing | Mar 7, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:38:06.880000", "created": "2026-03-06T14:38:06.880000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "44 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99aa7f33b7844108f23bb", "name": "Phishing | Mar 6, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:00:55.485000", "created": "2026-03-05T15:00:55.485000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 933, "hostname": 1067 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 66, "modified_text": "45 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a84400158789e69b194994", "name": "Phishing | Mar 5, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:38:56.285000", "created": "2026-03-04T14:38:56.285000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "46 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f1213f4f316bfa513046", "name": "Phishing | Mar 4, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:33:05.810000", "created": "2026-03-03T14:33:05.810000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 932, "hostname": 1068 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "47 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b70c8ca14dad623df719", "name": "Phishing | Mar 3, 2026 | Part 221/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 221/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:13:00.197000", "created": "2026-03-02T16:13:00.197000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 933, "hostname": 1067 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 67, "modified_text": "48 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "modificationamazon.fr", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "modificationamazon.fr", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1776648716.5043173 }