{ "type": "Domain", "indicator": "sso-microsoft.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/sso-microsoft.com", "alexa": "http://www.alexa.com/siteinfo/sso-microsoft.com", "indicator": "sso-microsoft.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3688041438, "indicator": "sso-microsoft.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 28, "pulses": [ { "id": "69b032e4a3013e9df564e166", "name": "Phishing | Mar 11, 2026 | Part 351/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 351/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:04.836000", "created": "2026-03-10T15:04:04.836000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1930, "domain": 70 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf1652e2f4ff9411997b", "name": "Phishing | Mar 10, 2026 | Part 302/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 302/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:54:14.313000", "created": "2026-03-09T14:54:14.313000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1913, "domain": 87 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8be4377c2cd9f1ea8d72", "name": "Phishing | Mar 9, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:00.786000", "created": "2026-03-08T14:47:00.786000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b01b48dfa832342b7c7", "name": "Phishing | Mar 8, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:49:37.310000", "created": "2026-03-07T14:49:37.310000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae92693c7822090a49964", "name": "Phishing | Mar 7, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:48:06.706000", "created": "2026-03-06T14:48:06.706000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1744, "domain": 256 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d0514e3ba512cf9be5a", "name": "Phishing | Mar 6, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:01.013000", "created": "2026-03-05T15:11:01.013000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8464670baaef4c597d308", "name": "Phishing | Mar 5, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:48:38.191000", "created": "2026-03-04T14:48:38.191000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1741, "domain": 259 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f389f522a8360cf16c81", "name": "Phishing | Mar 4, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:43:20.934000", "created": "2026-03-03T14:43:20.934000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1741, "domain": 259 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b967e96b8b1359220c79", "name": "Phishing | Mar 3, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:23:03.130000", "created": "2026-03-02T16:23:03.130000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1742, "domain": 258 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517a4493e2e50f3e87fab", "name": "Phishing | Mar 2, 2026 | Part 305/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 305/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:52:52.748000", "created": "2026-03-02T04:52:52.748000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1477, "domain": 523 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a44438cf07d6e700361f37", "name": "Phishing | Mar 2, 2026 | Part 307/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 307/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:50:48.438000", "created": "2026-03-01T13:50:48.438000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1818, "domain": 182 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a409e249c30e37f4a75569", "name": "Phishing | Mar 1, 2026 | Part 307/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 307/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:41:54.784000", "created": "2026-03-01T09:41:54.784000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1818, "domain": 182 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a3886f70d044dc366281a6", "name": "Phishing | Mar 1, 2026 | Part 308/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 308/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:29:35.636000", "created": "2026-03-01T00:29:35.636000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1876, "domain": 124 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997ff095bac517233b1161b", "name": "Phishing | Feb 20, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:28:25.027000", "created": "2026-02-20T06:28:25.027000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976ce314fd30c4ca3e91ce", "name": "Phishing | Feb 20, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:04:51.712000", "created": "2026-02-19T20:04:51.712000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972dc70a107b58fe935c71", "name": "Phishing | Feb 20, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:35:35.457000", "created": "2026-02-19T15:35:35.457000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970e7dd0b6a22d5e1076fc", "name": "Phishing | Feb 19, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:22:05.742000", "created": "2026-02-19T13:22:05.742000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69963850d946d86fba9e2df2", "name": "Phishing | Feb 19, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:08:16.354000", "created": "2026-02-18T22:08:16.354000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69957900bb70c11636c2711f", "name": "Phishing | Feb 18, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:32:00.231000", "created": "2026-02-18T08:32:00.231000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949d8b43df6fa7b76cde98", "name": "Phishing | Feb 18, 2026 | Part 310/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 310/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:55:39.557000", "created": "2026-02-17T16:55:39.557000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1873, "domain": 127 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929b955fb7f156307cda6e", "name": "Phishing | Feb 16, 2026 | Part 315/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 315/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:22:45.278000", "created": "2026-02-16T04:22:45.278000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1955, "domain": 45 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915c66af25d1259158ec4b", "name": "Phishing | Feb 15, 2026 | Part 321/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 321/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:40:54.671000", "created": "2026-02-15T05:40:54.671000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 153, "hostname": 1847 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908de6d2f366999f02491d", "name": "Phishing | Feb 15, 2026 | Part 325/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 325/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:59:50.791000", "created": "2026-02-14T14:59:50.791000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1713, "domain": 287 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "107 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c60798c2009167e1e304b", "name": "Phishing | Feb 11, 2026 | Part 351/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 351/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:56:57.214000", "created": "2026-02-11T10:56:57.214000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1592, "domain": 408 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "110 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981ab1e4325191728e0667f", "name": "Phishing | 2026-01-31 | Part 85/163", "description": "Phishing indicators. Date: 2026-01-31. Part 85/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:00:30.148000", "created": "2026-02-03T08:00:30.148000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 3396, "hostname": 6604 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "118 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68a956460f257cf96c454071", "name": "Piracy \u2022 Cloudfront \u2022 Ransom \u2022 Code Overlaps \u2022 Unrelenting attacks.", "description": "Indie songwriter , publisher, promoter, producer & her artists affected by years long copyright infringement , hacking & reputation damage. Website now downed.\n\nBrashears had been involved in music under pseudonyms for decades as a was songwriter , ghostwriter, sold catalogs , charting singles, chops was sponsored. In this instance music was grossly pirated. Initially asked for hook rights then told hook would be used without her permission. Believed dispute resolved verbally + copyright.\n\nTsara learned from an insider/s her hook was pirated & used by artists listed. Modifications make songs pirated samples.\nBrashears song written in 2010 later vaulted in a private catalog later released by her artist. YouTube audio quality tampering on pirated song. \n\nBrashears loved music, not the industry as an artist; preferring business. Always held her privacy to remain unknown. Tsara lived 10 lives at once.\n\nLikely involves male who contacted her @ by email as mentioned in earlier pulse.\n#trulymissed", "modified": "2025-09-21T21:03:28.771000", "created": "2025-08-23T05:48:54.534000", "tags": [ "domains", "hashes", "passive dns", "urls", "url add", "http", "hostname", "files domain", "files related", "related tags", "a domains", "entries", "next associated", "files show", "date hash", "avast avg", "trojanspy", "entries http", "scans show", "search", "body", "body doctype", "dynamicloader", "medium", "reg add", "regsz d", "high", "windows", "audio drivers", "write c", "virtool", "copy", "write", "june", "united", "unknown ns", "samsara", "new york", "city ny", "ip address", "record value", "meta", "date", "music", "encrypt", "win32", "dangeroussig", "lowfi", "msie", "chrome", "precondition", "trojan", "title", "canada unknown", "unknown cname", "domain add", "files", "location united", "hostname add", "verdict", "domain", "files ip", "address", "asn as13335", "hash avast", "avg clamav", "msdefender feb", "learn", "ck id", "name tactics", "suspicious", "informative", "command", "adversaries", "spawns", "mitre att", "ck techniques", "file", "size", "ascii text", "pattern match", "august", "hybrid", "general", "path", "click", "strings", "roboto", "mozilla", "contact", "t1179 hooking", "installs", "t1035 service", "crlf line", "runtime process", "malicious", "unknown", "ssl certificate", "defense evasion", "amazon02", "americachicago", "windows nt", "win64", "khtml", "gecko", "veryhigh", "found", "geo menifee", "california", "as30148", "us note", "route", "ptr record", "information", "t1053", "taskjob", "t1055", "injection", "t1082", "t1112", "modify registry", "t1119", "t1129", "service", "capture", "url http", "url https", "type indicator", "role title", "added active", "related pulses", "showing", "ipv6", "ipv4", "dicator role", "title added", "active related", "sweden", "netherlands", "scan", "iocs", "learn more", "types of", "kingdom", "united kingdom", "denmark", "icator role", "malware attacks", "find encrypted", "t1021", "remote", "t1068", "ta0043", "t1016", "discovery", "t1221", "nobody love", "tori", "kelley", "dj khaled", "justin bieber", "sophos video", "x rack", "x frame", "october", "songculture", "song culture", "tsara brashears", "jess 4", "queryfoundry", "beyond sampling", "pirated", "youtube", "spotify", "twitter", "spy", "tracking" ], "references": [ "https://songculture.com/tsara-brashears-music | Cloudfront below was attached to body of work", "https://d3jjg4nf4bbybe.cloudfront.net/u/210425/397f80d871fe6dla1704cela4b712e387ed8a48a/large/kedence-out-of-my-sight", "\"Nobody Love\" Tori Kelley \"'m the One\" DJ Khaled ft Justin Bieber (Pirated Hook)", "8-25-220-162-static.reverse.queryfoundry.net", "http://117-114-251-162-static.reverse.queryfoundry.net/ - queryfoundry.net", "https://www.youtube.com/watch?v=bJWJbOqg9cM - Falsely flagged to demonetize and not rank", "Dr.Web violence/adult content (False) ThreatSeeker social web - youtube", "music.apple.com \u2022 linktr.ee \u2022 sentient.industries? samsara has been showing up often.", "There is money in the industry for well established , \u2018souled\u2019 out artists. It\u2019s a racket! T signed & exited early", "Worked at some studios attacked by Lazarus Group who allegedly attacked Sony Music", "I apologize if you don\u2019t like my background stories", "\u2018Passin\u2019 I deleted the pulses you asked me to. Your links were malicious. I haven\u2019t weaponize anything I\u2019ve learned... yet" ], "public": 1, "adversary": "", "targeted_countries": [ "United States of America" ], "malware_families": [ { "id": "Nivdort", "display_name": "Nivdort", "target": null }, { "id": "Virtool", "display_name": "Virtool", "target": null }, { "id": "Evo", "display_name": "Evo", "target": null }, { "id": "Trojanspy", "display_name": "Trojanspy", "target": null }, { "id": "Malware", "display_name": "Malware", "target": null }, { "id": "Emotet", "display_name": "Emotet", "target": null }, { "id": "TrojanSpy:Win32/Nivdort", "display_name": "TrojanSpy:Win32/Nivdort", "target": "/malware/TrojanSpy:Win32/Nivdort" }, { "id": "Ransom", "display_name": "Ransom", "target": null }, { "id": "Malware Gen", "display_name": "Malware Gen", "target": null } ], "attack_ids": [ { "id": "T1055", "name": "Process Injection", "display_name": "T1055 - Process Injection" }, { "id": "T1060", "name": "Registry Run Keys / Startup Folder", "display_name": "T1060 - Registry Run Keys / Startup Folder" }, { "id": "T1027", "name": "Obfuscated Files or Information", "display_name": "T1027 - Obfuscated Files or Information" }, { "id": "T1057", "name": "Process Discovery", "display_name": "T1057 - Process Discovery" }, { "id": "T1071", "name": "Application Layer Protocol", "display_name": "T1071 - Application Layer Protocol" }, { "id": "T1105", "name": "Ingress Tool Transfer", "display_name": "T1105 - Ingress Tool Transfer" }, { "id": "T1480", "name": "Execution Guardrails", "display_name": "T1480 - Execution Guardrails" }, { "id": "T1553", "name": "Subvert Trust Controls", "display_name": "T1553 - Subvert Trust Controls" }, { "id": "T1568", "name": "Dynamic Resolution", "display_name": "T1568 - Dynamic Resolution" }, { "id": "T1583", "name": "Acquire Infrastructure", "display_name": "T1583 - Acquire Infrastructure" }, { "id": "T1590", "name": "Gather Victim Network Information", "display_name": "T1590 - Gather Victim Network Information" }, { "id": "T1113", "name": "Screen Capture", "display_name": "T1113 - Screen Capture" }, { "id": "T1035", "name": "Service Execution", "display_name": "T1035 - Service Execution" }, { "id": "T1179", "name": "Hooking", "display_name": "T1179 - Hooking" }, { "id": "T1031", "name": "Modify Existing Service", "display_name": "T1031 - Modify Existing Service" }, { "id": "T1045", "name": "Software Packing", "display_name": "T1045 - Software Packing" }, { "id": "T1053", "name": "Scheduled Task/Job", "display_name": "T1053 - Scheduled Task/Job" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1112", "name": "Modify Registry", "display_name": "T1112 - Modify Registry" }, { "id": "T1119", "name": "Automated Collection", "display_name": "T1119 - Automated Collection" }, { "id": "T1129", "name": "Shared Modules", "display_name": "T1129 - Shared Modules" }, { "id": "T1140", "name": "Deobfuscate/Decode Files or Information", "display_name": "T1140 - Deobfuscate/Decode Files or Information" }, { "id": "T1143", "name": "Hidden Window", "display_name": "T1143 - Hidden Window" }, { "id": "T1158", "name": "Hidden Files and Directories", "display_name": "T1158 - Hidden Files and Directories" }, { "id": "T1016", "name": "System Network Configuration Discovery", "display_name": "T1016 - System Network Configuration Discovery" }, { "id": "T1021", "name": "Remote Services", "display_name": "T1021 - Remote Services" }, { "id": "T1022", "name": "Data Encrypted", "display_name": "T1022 - Data Encrypted" }, { "id": "T1068", "name": "Exploitation for Privilege Escalation", "display_name": "T1068 - Exploitation for Privilege Escalation" }, { "id": "T1132", "name": "Data Encoding", "display_name": "T1132 - Data Encoding" }, { "id": "T1221", "name": "Template Injection", "display_name": "T1221 - Template Injection" }, { "id": "T1222", "name": "File and Directory Permissions Modification", "display_name": "T1222 - File and Directory Permissions Modification" }, { "id": "T1573", "name": "Encrypted Channel", "display_name": "T1573 - Encrypted Channel" }, { "id": "T1593.001", "name": "Social Media", "display_name": "T1593.001 - Social Media" }, { "id": "T1449", "name": "Exploit SS7 to Redirect Phone Calls/SMS", "display_name": "T1449 - Exploit SS7 to Redirect Phone Calls/SMS" }, { "id": "T1210", "name": "Exploitation of Remote Services", "display_name": "T1210 - Exploitation of Remote Services" }, { "id": "T1486", "name": "Data Encrypted for Impact", "display_name": "T1486 - Data Encrypted for Impact" }, { "id": "T1155", "name": "AppleScript", "display_name": "T1155 - AppleScript" } ], "industries": [ "Media", "Technology", "Telecommunications" ], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 1833, "hostname": 902, "domain": 386, "FileHash-MD5": 406, "FileHash-SHA1": 402, "FileHash-SHA256": 1437, "email": 2, "SSLCertFingerprint": 5, "CIDR": 2 }, "indicator_count": 5375, "is_author": false, "is_subscribing": null, "subscriber_count": 148, "modified_text": "252 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66eb5eec6531e196c9b1d767", "name": "Malware Filter - Phishing List - 18-09-2024", "description": "", "modified": "2024-09-18T23:14:52.264000", "created": "2024-09-18T23:14:52.264000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 36, "hostname": 257 }, "indicator_count": 293, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "620 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "66c91641aafe098b6573b36a", "name": "Malware Filter - Phishing List - 23-08-2024", "description": "", "modified": "2024-08-23T23:07:45.548000", "created": "2024-08-23T23:07:45.548000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 366, "domain": 47 }, "indicator_count": 413, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "646 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "music.apple.com \u2022 linktr.ee \u2022 sentient.industries? samsara has been showing up often.", "I apologize if you don\u2019t like my background stories", "\"Nobody Love\" Tori Kelley \"'m the One\" DJ Khaled ft Justin Bieber (Pirated Hook)", "https://ltna.com.au/cyber", "Worked at some studios attacked by Lazarus Group who allegedly attacked Sony Music", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://www.youtube.com/watch?v=bJWJbOqg9cM - Falsely flagged to demonetize and not rank", "https://d3jjg4nf4bbybe.cloudfront.net/u/210425/397f80d871fe6dla1704cela4b712e387ed8a48a/large/kedence-out-of-my-sight", "http://117-114-251-162-static.reverse.queryfoundry.net/ - queryfoundry.net", "There is money in the industry for well established , \u2018souled\u2019 out artists. It\u2019s a racket! T signed & exited early", "https://songculture.com/tsara-brashears-music | Cloudfront below was attached to body of work", "\u2018Passin\u2019 I deleted the pulses you asked me to. Your links were malicious. I haven\u2019t weaponize anything I\u2019ve learned... yet", "8-25-220-162-static.reverse.queryfoundry.net", "Dr.Web violence/adult content (False) ThreatSeeker social web - youtube" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [ "Trojanspy", "Malware gen", "Malware", "Emotet", "Ransom", "Trojanspy:win32/nivdort", "Evo", "Nivdort", "Virtool" ], "industries": [ "Technology", "Telecommunications", "Media" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 28, "pulses": [ { "id": "69b032e4a3013e9df564e166", "name": "Phishing | Mar 11, 2026 | Part 351/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 351/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:04.836000", "created": "2026-03-10T15:04:04.836000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1930, "domain": 70 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf1652e2f4ff9411997b", "name": "Phishing | Mar 10, 2026 | Part 302/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 302/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:54:14.313000", "created": "2026-03-09T14:54:14.313000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1913, "domain": 87 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8be4377c2cd9f1ea8d72", "name": "Phishing | Mar 9, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:00.786000", "created": "2026-03-08T14:47:00.786000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b01b48dfa832342b7c7", "name": "Phishing | Mar 8, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:49:37.310000", "created": "2026-03-07T14:49:37.310000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae92693c7822090a49964", "name": "Phishing | Mar 7, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:48:06.706000", "created": "2026-03-06T14:48:06.706000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1744, "domain": 256 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d0514e3ba512cf9be5a", "name": "Phishing | Mar 6, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:01.013000", "created": "2026-03-05T15:11:01.013000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1743, "domain": 257 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8464670baaef4c597d308", "name": "Phishing | Mar 5, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:48:38.191000", "created": "2026-03-04T14:48:38.191000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1741, "domain": 259 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f389f522a8360cf16c81", "name": "Phishing | Mar 4, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:43:20.934000", "created": "2026-03-03T14:43:20.934000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1741, "domain": 259 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b967e96b8b1359220c79", "name": "Phishing | Mar 3, 2026 | Part 303/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 303/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:23:03.130000", "created": "2026-03-02T16:23:03.130000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1742, "domain": 258 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517a4493e2e50f3e87fab", "name": "Phishing | Mar 2, 2026 | Part 305/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 305/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:52:52.748000", "created": "2026-03-02T04:52:52.748000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1477, "domain": 523 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "sso-microsoft.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "sso-microsoft.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780327591.6456714 }