{ "type": "Domain", "indicator": "roblox.com.et", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/roblox.com.et", "alexa": "http://www.alexa.com/siteinfo/roblox.com.et", "indicator": "roblox.com.et", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3608782216, "indicator": "roblox.com.et", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 36, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69c5d6b0cd7b83c0a6317b4e", "name": "URLert Daily Threat Intel \u2014 2026-03-27", "description": "URLert Daily Threat Intel \u2014 2026-03-27\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 87 | Indicators: 156\nConfirmed: 35 | Likely: 49 | Domain intel: 3\nTop threats: Phishing (73), Malware Hosting (6), Unknown (3), Dropper (2), Malvertising (1)\nDomains: 1337x.pro, 17-f.com, 472expres.vip, 682541.xin, 783je.cn, afflat3a2.com, apexnova.info, applepaysupplies.com, beehiiv.com, bkng-id2958572165912.com, c.gle, canadamilksettlement.com, casajo...\n\n87 unique threats producing 156 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-26T00:05:54.045000", "created": "2026-03-27T01:00:32.734000", "tags": [ "abuse-of-legitimate-service", "advance-fee-scam", "african-development-bank", "aggressive-advertising", "apple", "apple-impersonation", "automated-scan", "automotive-sector", "bbva", "booking-com-impersonation", "brand-impersonation", "brazil", "browser-locking", "camera-access", "canadian-milk-settlement", "cloaking", "cloud-storage", "cn-domain", "colombia", "combosquatting", "command-and-control", "counterfeit-goods", "credential-harvesting", "cryptocurrency", "cryptocurrency-phishing", "cryptocurrency-scam", "daily-threat-intel", "dana-impersonation", "data-collection", "data-exfiltration", "data-harvesting", "data-theft", "deception", "deceptive-buttons", "deceptive-design", "deceptive-offers", "deceptive-url", "delivery-fee-scam", "delivery-scam", "delivery-service-scam", "deposit-solicitation", "dhl-impersonation", "digital-piracy", "domain-classification", "dpd-impersonation", "ewallet-scam", "fake-app-store", "fake-gift-card", "fake-id", "fake-login-page", "fake-security-check", "fake-voting-platform", "fifa", "financial-fraud", "financial-scam", "financial-service-impersonation", "fraud", "fraudulent-documents", "fraudulent-infrastructure", "fraudulent-platform", "fraudulent-shopping-site", "fraudulent-site", "free-hosting", "game-exploit", "gibberish-domain", "gibberish-subdomain", "google-impersonation", "government-impersonation", "grayware", "high-risk-tld", "illegal-goods", "impersonation", "impersonation-facilitation", "impersonation-site", "information-gathering", "instagram-impersonation", "intelcom-impersonation", "investment-scam", "invite-code-scam", "lightshot-impersonation", "logistics-sector", "logistics-supply-chain", "lookalike-domain", "malaysia", "malicious-advertising", "malicious-commands", "malicious-redirect", "malicious-redirects", "malvertising", "malware-as-a-service", "malware-delivery", "malware-distribution", "mcdonalds", "microsoft-impersonation", "mobile-malware", "monetized-url-shortener", "myntra", "new-domain", "newly-registered-domain", "payload-delivery", "payment-information-theft", "persistent-malware", "personal-information-collection", "personal-information-harvesting", "phishing", "phishing-campaign", "phishing-site", "pirated-content", "pirated-games", "privacy-violation", "qr-code", "rbx.social", "recent-domain", "recent-registration", "redirector", "remote-access-scam", "retail-e-commerce", "retail-sector", "reward-scam", "roblox", "sars", "saudi-aramco-impersonation", "scam", "scam-domain", "security-bypass", "shein-impersonation", "shopping-scam", "social-engineering", "social-media-login", "south-africa", "sri-lanka", "survey-scam", "suspicious-domain", "task-scam", "tech-support-scam", "technical-support-scam", "threat-vector", "ticket-scam", "torrent-site", "twitter-impersonation", "typosquatting", "unauthorized-software-installation", "unauthorized-tracking", "unknown-application", "unknown-domain", "unregulated-gambling", "unverified-executables", "unwanted-software", "url-shortener", "urlert", "user-deception", "venomrat", "video-lure", "vipersoftx", "walmart", "webcam-capture", "webcam-streaming", "webcam360", "windows-logo" ], "references": [ "https://urlert.com/domain/1337x.pro", "https://urlert.com/domain/17-f.com", "https://urlert.com/domain/472expres.vip", "https://urlert.com/domain/682541.xin", "https://urlert.com/domain/783je.cn", "https://urlert.com/domain/afflat3a2.com", "https://urlert.com/domain/apexnova.info", "https://urlert.com/domain/applepaysupplies.com", "https://urlert.com/domain/beehiiv.com", "https://urlert.com/domain/bkng-id2958572165912.com", "https://urlert.com/domain/c.gle", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/cloudfront.net", "https://urlert.com/domain/co-uk.my.id", "https://urlert.com/domain/daelsoilstorage.com", "https://urlert.com/domain/darino.vip", "https://urlert.com/domain/deepwebnest.com", "https://urlert.com/domain/deliverypath.cfd", "https://urlert.com/domain/delsrvios.im" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Automotive", "Energy", "Financial Services", "Government", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 51, "hostname": 20 }, "indicator_count": 120, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "35 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b03238fff5512568ae1698", "name": "Phishing | Mar 11, 2026 | Part 327/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 327/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:01:12.576000", "created": "2026-03-10T15:01:12.576000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 608, "hostname": 1392 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "81 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aede7b3c2e7f7b2481cf88", "name": "Phishing | Mar 10, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:51:39.041000", "created": "2026-03-09T14:51:39.041000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1186, "domain": 814 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8b40070f99c760fc3e29", "name": "Phishing | Mar 9, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:44:16.919000", "created": "2026-03-08T14:44:16.919000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3a577eb6fc25ed93c56a", "name": "Phishing | Mar 8, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:46:47.990000", "created": "2026-03-07T14:46:47.990000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae8826f72abf4237ab70d", "name": "Phishing | Mar 7, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:45:22.687000", "created": "2026-03-06T14:45:22.687000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99c5c0eb13253ba40b606", "name": "Phishing | Mar 6, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:08:12.485000", "created": "2026-03-05T15:08:12.485000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a845a37f15de82050a8609", "name": "Phishing | Mar 5, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:45:55.516000", "created": "2026-03-04T14:45:55.516000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a7cd027d626e6ed2cc7014", "name": "Malware Filter - Phishing List - 03-03-2026", "description": "", "modified": "2026-03-04T06:11:14.227000", "created": "2026-03-04T06:11:14.227000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 231, "domain": 88 }, "indicator_count": 319, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f2dbea51d0bd8f277376", "name": "Phishing | Mar 4, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:40:27.696000", "created": "2026-03-03T14:40:27.696000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b8c3fa92183c24ef4a9f", "name": "Phishing | Mar 3, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:20:19.581000", "created": "2026-03-02T16:20:19.581000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517021334261da3eeaa07", "name": "Phishing | Mar 2, 2026 | Part 282/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 282/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:50:10.850000", "created": "2026-03-02T04:50:10.850000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1212, "domain": 788 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a4438671761720f2440614", "name": "Phishing | Mar 2, 2026 | Part 284/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 284/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:47:50.338000", "created": "2026-03-01T13:47:50.338000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1449, "domain": 551 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40940da9f948e62601b75", "name": "Phishing | Mar 1, 2026 | Part 284/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 284/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:39:12.823000", "created": "2026-03-01T09:39:12.823000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1449, "domain": 551 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a387be1f4e636b8f3f549f", "name": "Phishing | Mar 1, 2026 | Part 285/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 285/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:26:38.677000", "created": "2026-03-01T00:26:38.677000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 655, "hostname": 1345 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997fe65503e43567450fe2c", "name": "Phishing | Feb 20, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:25:41.984000", "created": "2026-02-20T06:25:41.984000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 670, "hostname": 1330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "99 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976c35a032c81d7ec15f1c", "name": "Phishing | Feb 20, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:01:57.096000", "created": "2026-02-19T20:01:57.096000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 670, "hostname": 1330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972d0be34d499f1494ed86", "name": "Phishing | Feb 20, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:32:27.231000", "created": "2026-02-19T15:32:27.231000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 670, "hostname": 1330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970dc5d30cf156e1854c37", "name": "Phishing | Feb 19, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:19:01.881000", "created": "2026-02-19T13:19:01.881000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 670, "hostname": 1330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69963798fd1c0eb4196be4a6", "name": "Phishing | Feb 19, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:05:12.714000", "created": "2026-02-18T22:05:12.714000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 670, "hostname": 1330 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69957856101c9ae2c636b13f", "name": "Phishing | Feb 18, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:29:10.209000", "created": "2026-02-18T08:29:10.209000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 671, "hostname": 1329 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949cdf5bd77498cec155c5", "name": "Phishing | Feb 18, 2026 | Part 287/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 287/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:52:47.109000", "created": "2026-02-17T16:52:47.109000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 671, "hostname": 1329 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929ae02929f5381d3560a4", "name": "Phishing | Feb 16, 2026 | Part 291/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 291/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:19:44.526000", "created": "2026-02-16T04:19:44.526000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1437, "domain": 563 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915bb4f8e587690c8c6005", "name": "Phishing | Feb 15, 2026 | Part 297/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 297/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:37:56.777000", "created": "2026-02-15T05:37:56.777000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1385, "domain": 615 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908d2c247cf8897d27da6d", "name": "Phishing | Feb 15, 2026 | Part 300/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 300/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:56:44.479000", "created": "2026-02-14T14:56:44.479000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1408, "domain": 592 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c5fb40c598a07fdac0e9b", "name": "Phishing | Feb 11, 2026 | Part 325/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 325/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:53:40.228000", "created": "2026-02-11T10:53:40.228000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 664, "hostname": 1336 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "108 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981aae29fa73af3aabfbc55", "name": "Phishing | 2026-01-31 | Part 80/163", "description": "Phishing indicators. Date: 2026-01-31. Part 80/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T07:59:30.052000", "created": "2026-02-03T07:59:30.052000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 6040, "domain": 3960 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "116 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6785dccb041b628fde283705", "name": "phish.directory", "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory", "modified": "2026-01-25T18:05:17.629000", "created": "2025-01-14T03:40:59.456000", "tags": [ "phishing", "scams", "steam", "discord", "roblox" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaspermayone", "id": "305022", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 41514, "hostname": 11318 }, "indicator_count": 52832, "is_author": false, "is_subscribing": null, "subscriber_count": 3, "modified_text": "125 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "676c6a9534b2c6b35936ae5f", "name": "Phishing Army Blocklist Extended", "description": "", "modified": "2024-12-25T20:27:00.473000", "created": "2024-12-25T20:27:00.473000", "tags": [], "references": [ "https://phishing.army/download/phishing_army_blocklist_extended.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 22, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 6491, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 3, "domain": 132719, "hostname": 128543 }, "indicator_count": 267758, "is_author": false, "is_subscribing": null, "subscriber_count": 207, "modified_text": "521 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "655e4ad4441b4cd4352a4cb2", "name": "DGA by Cybsec", "description": "", "modified": "2023-12-22T18:04:37.131000", "created": "2023-11-22T18:39:16.220000", "tags": [ "DGA" ], "references": [ "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Libfy", "id": "14964", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 4359, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 1, "domain": 76669, "hostname": 85783 }, "indicator_count": 166814, "is_author": false, "is_subscribing": null, "subscriber_count": 106, "modified_text": "890 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "655e49bf7fb5ebc444e8db6a", "name": "DGA by Cybsec", "description": "", "modified": "2023-12-22T18:04:37.131000", "created": "2023-11-22T18:34:39.799000", "tags": [ "DGA" ], "references": [ "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 26, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Libfy", "id": "14964", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 4359, "FileHash-SHA1": 1, "FileHash-SHA256": 1, "URL": 1, "domain": 76669, "hostname": 85783 }, "indicator_count": 166814, "is_author": false, "is_subscribing": null, "subscriber_count": 102, "modified_text": "890 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64fb0f5bc0416e89d4db993a", "name": "Malicious phishing domains - jeroengui.be - week 36", "description": "These url and domains are determined to have had or actively host malicious content. The identification happens automatically and use is strictly at your own risk and comes with no guarantees about uptime or accuracy", "modified": "2023-10-08T12:04:31.177000", "created": "2023-09-08T12:11:07.375000", "tags": [ "xls1d", "email", "randommd5 https", "win64", "cbcxtout", "enus", "m https", "urlhttps", "khtml https", "randommd5" ], "references": [ "https://file.jeroengui.be/phishing/last_week.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunter_NL", "id": "171283", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_171283/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 179, "FileHash-SHA1": 29, "FileHash-SHA256": 14, "URL": 10382, "domain": 2798, "email": 5, "hostname": 5158 }, "indicator_count": 18565, "is_author": false, "is_subscribing": null, "subscriber_count": 865, "modified_text": "965 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64dabb0324361b73710f3335", "name": "Malware Filter - Phishing List - 14-08-2023", "description": "", "modified": "2023-08-14T23:38:43.632000", "created": "2023-08-14T23:38:43.632000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 312, "hostname": 296 }, "indicator_count": 608, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "1020 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://urlert.com/domain/c.gle", "https://urlert.com/domain/deepwebnest.com", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/bkng-id2958572165912.com", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://urlert.com/domain/delsrvios.im", "https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt", "https://file.jeroengui.be/phishing/last_week.txt", "https://urlert.com/domain/daelsoilstorage.com", "https://urlert.com/domain/682541.xin", "https://urlert.com/domain/cloudfront.net", "https://phishing.army/download/phishing_army_blocklist_extended.txt", "https://urlert.com/domain/deliverypath.cfd", "https://urlert.com/domain/783je.cn", "https://ltna.com.au/cyber", "https://urlert.com/domain/darino.vip", "https://urlert.com/domain/applepaysupplies.com", "https://urlert.com/domain/co-uk.my.id", "https://urlert.com/domain/apexnova.info", "https://urlert.com/domain/beehiiv.com", "https://urlert.com/domain/afflat3a2.com", "https://urlert.com/domain/472expres.vip", "https://urlert.com/domain/1337x.pro", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/17-f.com" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Energy", "Retail / e-commerce", "Financial services", "Government", "Technology", "Gaming", "Logistics / supply chain", "Media / entertainment", "Hospitality", "Automotive" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 36, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69c5d6b0cd7b83c0a6317b4e", "name": "URLert Daily Threat Intel \u2014 2026-03-27", "description": "URLert Daily Threat Intel \u2014 2026-03-27\n\nAutomated threat intelligence from URLert (https://urlert.com) \u2014 AI-powered URL and domain analysis.\n\nThreats: 87 | Indicators: 156\nConfirmed: 35 | Likely: 49 | Domain intel: 3\nTop threats: Phishing (73), Malware Hosting (6), Unknown (3), Dropper (2), Malvertising (1)\nDomains: 1337x.pro, 17-f.com, 472expres.vip, 682541.xin, 783je.cn, afflat3a2.com, apexnova.info, applepaysupplies.com, beehiiv.com, bkng-id2958572165912.com, c.gle, canadamilksettlement.com, casajo...\n\n87 unique threats producing 156 actionable indicators. Generated by URLert automated threat intelligence.", "modified": "2026-04-26T00:05:54.045000", "created": "2026-03-27T01:00:32.734000", "tags": [ "abuse-of-legitimate-service", "advance-fee-scam", "african-development-bank", "aggressive-advertising", "apple", "apple-impersonation", "automated-scan", "automotive-sector", "bbva", "booking-com-impersonation", "brand-impersonation", "brazil", "browser-locking", "camera-access", "canadian-milk-settlement", "cloaking", "cloud-storage", "cn-domain", "colombia", "combosquatting", "command-and-control", "counterfeit-goods", "credential-harvesting", "cryptocurrency", "cryptocurrency-phishing", "cryptocurrency-scam", "daily-threat-intel", "dana-impersonation", "data-collection", "data-exfiltration", "data-harvesting", "data-theft", "deception", "deceptive-buttons", "deceptive-design", "deceptive-offers", "deceptive-url", "delivery-fee-scam", "delivery-scam", "delivery-service-scam", "deposit-solicitation", "dhl-impersonation", "digital-piracy", "domain-classification", "dpd-impersonation", "ewallet-scam", "fake-app-store", "fake-gift-card", "fake-id", "fake-login-page", "fake-security-check", "fake-voting-platform", "fifa", "financial-fraud", "financial-scam", "financial-service-impersonation", "fraud", "fraudulent-documents", "fraudulent-infrastructure", "fraudulent-platform", "fraudulent-shopping-site", "fraudulent-site", "free-hosting", "game-exploit", "gibberish-domain", "gibberish-subdomain", "google-impersonation", "government-impersonation", "grayware", "high-risk-tld", "illegal-goods", "impersonation", "impersonation-facilitation", "impersonation-site", "information-gathering", "instagram-impersonation", "intelcom-impersonation", "investment-scam", "invite-code-scam", "lightshot-impersonation", "logistics-sector", "logistics-supply-chain", "lookalike-domain", "malaysia", "malicious-advertising", "malicious-commands", "malicious-redirect", "malicious-redirects", "malvertising", "malware-as-a-service", "malware-delivery", "malware-distribution", "mcdonalds", "microsoft-impersonation", "mobile-malware", "monetized-url-shortener", "myntra", "new-domain", "newly-registered-domain", "payload-delivery", "payment-information-theft", "persistent-malware", "personal-information-collection", "personal-information-harvesting", "phishing", "phishing-campaign", "phishing-site", "pirated-content", "pirated-games", "privacy-violation", "qr-code", "rbx.social", "recent-domain", "recent-registration", "redirector", "remote-access-scam", "retail-e-commerce", "retail-sector", "reward-scam", "roblox", "sars", "saudi-aramco-impersonation", "scam", "scam-domain", "security-bypass", "shein-impersonation", "shopping-scam", "social-engineering", "social-media-login", "south-africa", "sri-lanka", "survey-scam", "suspicious-domain", "task-scam", "tech-support-scam", "technical-support-scam", "threat-vector", "ticket-scam", "torrent-site", "twitter-impersonation", "typosquatting", "unauthorized-software-installation", "unauthorized-tracking", "unknown-application", "unknown-domain", "unregulated-gambling", "unverified-executables", "unwanted-software", "url-shortener", "urlert", "user-deception", "venomrat", "video-lure", "vipersoftx", "walmart", "webcam-capture", "webcam-streaming", "webcam360", "windows-logo" ], "references": [ "https://urlert.com/domain/1337x.pro", "https://urlert.com/domain/17-f.com", "https://urlert.com/domain/472expres.vip", "https://urlert.com/domain/682541.xin", "https://urlert.com/domain/783je.cn", "https://urlert.com/domain/afflat3a2.com", "https://urlert.com/domain/apexnova.info", "https://urlert.com/domain/applepaysupplies.com", "https://urlert.com/domain/beehiiv.com", "https://urlert.com/domain/bkng-id2958572165912.com", "https://urlert.com/domain/c.gle", "https://urlert.com/domain/canadamilksettlement.com", "https://urlert.com/domain/casajoys.com", "https://urlert.com/domain/cloudfront.net", "https://urlert.com/domain/co-uk.my.id", "https://urlert.com/domain/daelsoilstorage.com", "https://urlert.com/domain/darino.vip", "https://urlert.com/domain/deepwebnest.com", "https://urlert.com/domain/deliverypath.cfd", "https://urlert.com/domain/delsrvios.im" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Automotive", "Energy", "Financial Services", "Government", "Hospitality", "Logistics / Supply Chain", "Media / Entertainment", "Retail / E-Commerce", "Technology" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "urlert_intel", "id": "386175", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_386175/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 49, "URL": 51, "hostname": 20 }, "indicator_count": 120, "is_author": false, "is_subscribing": null, "subscriber_count": 30, "modified_text": "35 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b03238fff5512568ae1698", "name": "Phishing | Mar 11, 2026 | Part 327/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 327/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:01:12.576000", "created": "2026-03-10T15:01:12.576000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 608, "hostname": 1392 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "81 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aede7b3c2e7f7b2481cf88", "name": "Phishing | Mar 10, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:51:39.041000", "created": "2026-03-09T14:51:39.041000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1186, "domain": 814 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8b40070f99c760fc3e29", "name": "Phishing | Mar 9, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:44:16.919000", "created": "2026-03-08T14:44:16.919000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3a577eb6fc25ed93c56a", "name": "Phishing | Mar 8, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:46:47.990000", "created": "2026-03-07T14:46:47.990000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae8826f72abf4237ab70d", "name": "Phishing | Mar 7, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:45:22.687000", "created": "2026-03-06T14:45:22.687000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99c5c0eb13253ba40b606", "name": "Phishing | Mar 6, 2026 | Part 280/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 280/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:08:12.485000", "created": "2026-03-05T15:08:12.485000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1394, "domain": 606 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "roblox.com.et", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "roblox.com.et", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780192715.9243627 }