{ "type": "Domain", "indicator": "steamcomiunity.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/steamcomiunity.com", "alexa": "http://www.alexa.com/siteinfo/steamcomiunity.com", "indicator": "steamcomiunity.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3227263597, "indicator": "steamcomiunity.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 32, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b032f33d5314316449e740", "name": "Phishing | Mar 11, 2026 | Part 353/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 353/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:19.731000", "created": "2026-03-10T15:04:19.731000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 603, "domain": 1397 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "81 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf2434d859ab023ff96c", "name": "Phishing | Mar 10, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:54:28.910000", "created": "2026-03-09T14:54:28.910000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 630, "domain": 1370 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8beb2dd2d9251814fcd3", "name": "Phishing | Mar 9, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:07.339000", "created": "2026-03-08T14:47:07.339000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b07a75ee35436d45001", "name": "Phishing | Mar 8, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:49:43.912000", "created": "2026-03-07T14:49:43.912000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae92ebbe618507d925f1e", "name": "Phishing | Mar 7, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:48:14.575000", "created": "2026-03-06T14:48:14.575000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d0c2ddb6bb001b58c55", "name": "Phishing | Mar 6, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:08.052000", "created": "2026-03-05T15:11:08.052000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8464df79156dc400fa591", "name": "Phishing | Mar 5, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:48:45.417000", "created": "2026-03-04T14:48:45.417000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f3958233e7019bd32158", "name": "Phishing | Mar 4, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:43:33.360000", "created": "2026-03-03T14:43:33.360000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b96d836af98bf7d8ad91", "name": "Phishing | Mar 3, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:23:09.848000", "created": "2026-03-02T16:23:09.848000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517abb611c9f9a4c4f09a", "name": "Phishing | Mar 2, 2026 | Part 306/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 306/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:52:59.566000", "created": "2026-03-02T04:52:59.566000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1182, "domain": 818 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a44446d5c4d4ed5a36d0ed", "name": "Phishing | Mar 2, 2026 | Part 309/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 309/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:51:02.776000", "created": "2026-03-01T13:51:02.776000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1023, "domain": 977 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a409f0faa85a30cbfa11b2", "name": "Phishing | Mar 1, 2026 | Part 309/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 309/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:42:08.254000", "created": "2026-03-01T09:42:08.254000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1023, "domain": 977 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a3887fccf597c875fa433e", "name": "Phishing | Mar 1, 2026 | Part 310/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 310/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:29:51.203000", "created": "2026-03-01T00:29:51.203000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 771, "domain": 1229 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997ff178269acba3520c992", "name": "Phishing | Feb 20, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:28:39.289000", "created": "2026-02-20T06:28:39.289000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 800, "domain": 1200 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976cf2d12d8d15d45a0c78", "name": "Phishing | Feb 20, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:05:06.840000", "created": "2026-02-19T20:05:06.840000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 800, "domain": 1200 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972ddef638b2b392d57f76", "name": "Phishing | Feb 20, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:35:58.984000", "created": "2026-02-19T15:35:58.984000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 800, "domain": 1200 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970e8c727d663052ccb771", "name": "Phishing | Feb 19, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:22:20.925000", "created": "2026-02-19T13:22:20.925000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 800, "domain": 1200 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699638600cb7438f53e23cba", "name": "Phishing | Feb 19, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:08:32.467000", "created": "2026-02-18T22:08:32.467000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 800, "domain": 1200 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6995790fb1a6edcd12b47666", "name": "Phishing | Feb 18, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:32:15.002000", "created": "2026-02-18T08:32:15.002000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 802, "domain": 1198 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949d9a9bc077ef30212ec7", "name": "Phishing | Feb 18, 2026 | Part 312/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 312/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:55:54.860000", "created": "2026-02-17T16:55:54.860000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 802, "domain": 1198 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929ba4ba96401dc008789d", "name": "Phishing | Feb 16, 2026 | Part 317/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 317/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:23:00.122000", "created": "2026-02-16T04:23:00.122000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 442, "domain": 1558 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915c7466dcc9c707ed1ac3", "name": "Phishing | Feb 15, 2026 | Part 323/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 323/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:41:08.399000", "created": "2026-02-15T05:41:08.399000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 990, "domain": 1010 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908df26951048048c6215a", "name": "Phishing | Feb 15, 2026 | Part 326/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 326/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T15:00:02.888000", "created": "2026-02-14T15:00:02.888000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 624, "hostname": 1376 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c60802271b8be077dbd85", "name": "Phishing | Feb 11, 2026 | Part 352/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 352/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:57:04.461000", "created": "2026-02-11T10:57:04.461000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 739, "hostname": 1261 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981ab2a6f4d25d71def6452", "name": "Phishing | 2026-01-31 | Part 86/163", "description": "Phishing indicators. Date: 2026-01-31. Part 86/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:00:42.312000", "created": "2026-02-03T08:00:42.312000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 4999, "domain": 5001 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "117 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6785dccb041b628fde283705", "name": "phish.directory", "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory", "modified": "2026-01-25T18:05:17.629000", "created": "2025-01-14T03:40:59.456000", "tags": [ "phishing", "scams", "steam", "discord", "roblox" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaspermayone", "id": "305022", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 41514, "hostname": 11318 }, "indicator_count": 52832, "is_author": false, "is_subscribing": null, "subscriber_count": 3, "modified_text": "125 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67c795e5e970db1b68830d89", "name": "Malware Filter - Phishing List - 04-03-2025", "description": "", "modified": "2025-03-05T00:08:05.767000", "created": "2025-03-05T00:08:05.767000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 316, "domain": 92 }, "indicator_count": 408, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "452 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67c64496ddb71f197835e117", "name": "Twitter Feed - Phish_Destroy - 03-03-2025", "description": "", "modified": "2025-03-04T00:08:54.180000", "created": "2025-03-04T00:08:54.180000", "tags": [ "phishing", "malware", "scam" ], "references": [ "https://x.com/Phish_Destroy/status/1896357757122720229", "https://x.com/Phish_Destroy/status/1896357888568033700", "https://x.com/Phish_Destroy/status/1896358324104466785", "https://x.com/Phish_Destroy/status/1896359476976140581", "https://x.com/Phish_Destroy/status/1896359813019484555", "https://x.com/Phish_Destroy/status/1896389903728144509", "https://x.com/Phish_Destroy/status/1896416482986459137", "https://x.com/Phish_Destroy/status/1896416916916650396", "https://x.com/Phish_Destroy/status/1896418587444965790", "https://x.com/Phish_Destroy/status/1896494799521489175", "https://x.com/Phish_Destroy/status/1896495683328454943", "https://x.com/Phish_Destroy/status/1896496000493351107", "https://x.com/Phish_Destroy/status/1896496098019340567", "https://x.com/Phish_Destroy/status/1896496623985037608", "https://x.com/Phish_Destroy/status/1896496710089912349", "https://x.com/Phish_Destroy/status/1896496970350629227", "https://x.com/Phish_Destroy/status/1896499864177177077", "https://x.com/Phish_Destroy/status/1896500313739403680", "https://x.com/Phish_Destroy/status/1896501668709318660", "https://x.com/Phish_Destroy/status/1896501844962361707", "https://x.com/Phish_Destroy/status/1896503309898490327", "https://x.com/Phish_Destroy/status/1896505119019278752", "https://x.com/Phish_Destroy/status/1896506377914536348", "https://x.com/Phish_Destroy/status/1896506630851969345", "https://x.com/Phish_Destroy/status/1896507464163742013", "https://x.com/Phish_Destroy/status/1896508766113407430", "https://x.com/Phish_Destroy/status/1896509457749987659", "https://x.com/Phish_Destroy/status/1896509950446522854", "https://x.com/Phish_Destroy/status/1896510599477309688", "https://x.com/Phish_Destroy/status/1896511641484980519", "https://x.com/Phish_Destroy/status/1896511767033111018", "https://x.com/Phish_Destroy/status/1896511853565792379", "https://x.com/Phish_Destroy/status/1896512668691038573", "https://x.com/Phish_Destroy/status/1896513120350441587", "https://x.com/Phish_Destroy/status/1896514399000801685", "https://x.com/Phish_Destroy/status/1896514491149635821", "https://x.com/Phish_Destroy/status/1896515858681442687", "https://x.com/Phish_Destroy/status/1896516048645689367", "https://x.com/Phish_Destroy/status/1896516351998783887", "https://x.com/Phish_Destroy/status/1896516501521498114", "https://x.com/Phish_Destroy/status/1896517427237900662", "https://x.com/Phish_Destroy/status/1896518120971612301", "https://x.com/Phish_Destroy/status/1896518611650678946", "https://x.com/Phish_Destroy/status/1896519155211436476", "https://x.com/Phish_Destroy/status/1896519320043438221", "https://x.com/Phish_Destroy/status/1896520876587454611", "https://x.com/Phish_Destroy/status/1896521260575887859", "https://x.com/Phish_Destroy/status/1896521378578510071", "https://x.com/Phish_Destroy/status/1896522747725115638", "https://x.com/Phish_Destroy/status/1896522970312643065", "https://x.com/Phish_Destroy/status/1896523268129247241", "https://x.com/Phish_Destroy/status/1896526432421244929", "https://x.com/Phish_Destroy/status/1896526885011755421", "https://x.com/Phish_Destroy/status/1896527670282006790", "https://x.com/Phish_Destroy/status/1896557702303871450", "https://x.com/Phish_Destroy/status/1896567293980856797", "https://x.com/Phish_Destroy/status/1896567407461982659", "https://x.com/Phish_Destroy/status/1896567506292363396", "https://x.com/Phish_Destroy/status/1896567613586821209", "https://x.com/Phish_Destroy/status/1896569910136049825", "https://x.com/Phish_Destroy/status/1896570201006907729", "https://x.com/Phish_Destroy/status/1896570463511617754", "https://x.com/Phish_Destroy/status/1896572437485207960", "https://x.com/Phish_Destroy/status/1896572722005885394", "https://x.com/Phish_Destroy/status/1896573683235430781", "https://x.com/Phish_Destroy/status/1896574746378358851", "https://x.com/Phish_Destroy/status/1896608120845304185", "https://x.com/Phish_Destroy/status/1896613513990435112", "https://x.com/Phish_Destroy/status/1896613639626609026", "https://x.com/Phish_Destroy/status/1896617428328804714", "https://x.com/Phish_Destroy/status/1896617719195459647", "https://x.com/Phish_Destroy/status/1896617812900372638", "https://x.com/Phish_Destroy/status/1896618026616954978", "https://x.com/Phish_Destroy/status/1896618785274298874", "https://x.com/Phish_Destroy/status/1896668794011185173" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "hostname": 26, "domain": 49 }, "indicator_count": 150, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "453 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "63927aa227d99ede1b67f816", "name": "Twitter Feed - dnstwist - 08-12-2022", "description": "", "modified": "2022-12-09T00:00:34.858000", "created": "2022-12-09T00:00:34.858000", "tags": [ "phishing" ], "references": [ "https://twitter.com/dnstwist/status/1600663966925180929", "https://twitter.com/dnstwist/status/1600663967885664257", "https://twitter.com/dnstwist/status/1600663968762286085", "https://twitter.com/dnstwist/status/1600908071227760640" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 8 }, "indicator_count": 8, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "1269 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://x.com/Phish_Destroy/status/1896522970312643065", "https://x.com/Phish_Destroy/status/1896495683328454943", "https://x.com/Phish_Destroy/status/1896526885011755421", "https://x.com/Phish_Destroy/status/1896499864177177077", "https://x.com/Phish_Destroy/status/1896516351998783887", "https://twitter.com/dnstwist/status/1600908071227760640", "https://x.com/Phish_Destroy/status/1896516048645689367", "https://x.com/Phish_Destroy/status/1896569910136049825", "https://x.com/Phish_Destroy/status/1896613639626609026", "https://x.com/Phish_Destroy/status/1896359813019484555", "https://x.com/Phish_Destroy/status/1896521260575887859", "https://x.com/Phish_Destroy/status/1896508766113407430", "https://x.com/Phish_Destroy/status/1896523268129247241", "https://x.com/Phish_Destroy/status/1896567506292363396", "https://x.com/Phish_Destroy/status/1896496970350629227", "https://x.com/Phish_Destroy/status/1896668794011185173", "https://x.com/Phish_Destroy/status/1896567293980856797", "https://x.com/Phish_Destroy/status/1896506377914536348", "https://twitter.com/dnstwist/status/1600663966925180929", "https://x.com/Phish_Destroy/status/1896570201006907729", "https://x.com/Phish_Destroy/status/1896608120845304185", "https://x.com/Phish_Destroy/status/1896359476976140581", "https://ltna.com.au/cyber", "https://x.com/Phish_Destroy/status/1896511853565792379", "https://x.com/Phish_Destroy/status/1896521378578510071", "https://x.com/Phish_Destroy/status/1896503309898490327", "https://x.com/Phish_Destroy/status/1896618026616954978", "https://x.com/Phish_Destroy/status/1896512668691038573", "https://x.com/Phish_Destroy/status/1896416482986459137", "https://x.com/Phish_Destroy/status/1896357888568033700", "https://x.com/Phish_Destroy/status/1896617719195459647", "https://x.com/Phish_Destroy/status/1896496623985037608", "https://x.com/Phish_Destroy/status/1896496000493351107", "https://x.com/Phish_Destroy/status/1896389903728144509", "https://x.com/Phish_Destroy/status/1896358324104466785", "https://twitter.com/dnstwist/status/1600663968762286085", "https://x.com/Phish_Destroy/status/1896527670282006790", "https://x.com/Phish_Destroy/status/1896526432421244929", "https://x.com/Phish_Destroy/status/1896613513990435112", "https://x.com/Phish_Destroy/status/1896505119019278752", "https://x.com/Phish_Destroy/status/1896515858681442687", "https://x.com/Phish_Destroy/status/1896511767033111018", "https://x.com/Phish_Destroy/status/1896557702303871450", "https://x.com/Phish_Destroy/status/1896518611650678946", "https://x.com/Phish_Destroy/status/1896514491149635821", "https://x.com/Phish_Destroy/status/1896570463511617754", "https://x.com/Phish_Destroy/status/1896510599477309688", "https://x.com/Phish_Destroy/status/1896618785274298874", "https://twitter.com/dnstwist/status/1600663967885664257", "https://x.com/Phish_Destroy/status/1896567613586821209", "https://x.com/Phish_Destroy/status/1896572722005885394", "https://x.com/Phish_Destroy/status/1896567407461982659", "https://x.com/Phish_Destroy/status/1896501844962361707", "https://x.com/Phish_Destroy/status/1896500313739403680", "https://x.com/Phish_Destroy/status/1896573683235430781", "https://x.com/Phish_Destroy/status/1896509950446522854", "https://x.com/Phish_Destroy/status/1896496098019340567", "https://x.com/Phish_Destroy/status/1896416916916650396", "https://x.com/Phish_Destroy/status/1896520876587454611", "https://x.com/Phish_Destroy/status/1896418587444965790", "https://x.com/Phish_Destroy/status/1896494799521489175", "https://x.com/Phish_Destroy/status/1896617428328804714", "https://x.com/Phish_Destroy/status/1896519155211436476", "https://x.com/Phish_Destroy/status/1896496710089912349", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://x.com/Phish_Destroy/status/1896574746378358851", "https://x.com/Phish_Destroy/status/1896519320043438221", "https://x.com/Phish_Destroy/status/1896518120971612301", "https://x.com/Phish_Destroy/status/1896501668709318660", "https://x.com/Phish_Destroy/status/1896357757122720229", "https://x.com/Phish_Destroy/status/1896514399000801685", "https://x.com/Phish_Destroy/status/1896509457749987659", "https://x.com/Phish_Destroy/status/1896511641484980519", "https://x.com/Phish_Destroy/status/1896506630851969345", "https://x.com/Phish_Destroy/status/1896617812900372638", "https://x.com/Phish_Destroy/status/1896513120350441587", "https://x.com/Phish_Destroy/status/1896522747725115638", "https://x.com/Phish_Destroy/status/1896517427237900662", "https://x.com/Phish_Destroy/status/1896507464163742013", "https://x.com/Phish_Destroy/status/1896516501521498114", "https://x.com/Phish_Destroy/status/1896572437485207960" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Gaming" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 32, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b032f33d5314316449e740", "name": "Phishing | Mar 11, 2026 | Part 353/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 353/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:19.731000", "created": "2026-03-10T15:04:19.731000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 603, "domain": 1397 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "81 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf2434d859ab023ff96c", "name": "Phishing | Mar 10, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:54:28.910000", "created": "2026-03-09T14:54:28.910000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 630, "domain": 1370 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8beb2dd2d9251814fcd3", "name": "Phishing | Mar 9, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:07.339000", "created": "2026-03-08T14:47:07.339000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b07a75ee35436d45001", "name": "Phishing | Mar 8, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:49:43.912000", "created": "2026-03-07T14:49:43.912000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae92ebbe618507d925f1e", "name": "Phishing | Mar 7, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:48:14.575000", "created": "2026-03-06T14:48:14.575000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d0c2ddb6bb001b58c55", "name": "Phishing | Mar 6, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:08.052000", "created": "2026-03-05T15:11:08.052000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8464df79156dc400fa591", "name": "Phishing | Mar 5, 2026 | Part 304/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 304/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:48:45.417000", "created": "2026-03-04T14:48:45.417000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 674, "hostname": 1326 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "steamcomiunity.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "steamcomiunity.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780236467.3308692 }