{ "type": "Domain", "indicator": "syntaxtechs.net", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/syntaxtechs.net", "alexa": "http://www.alexa.com/siteinfo/syntaxtechs.net", "indicator": "syntaxtechs.net", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3731669264, "indicator": "syntaxtechs.net", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 34, "pulses": [ { "id": "63eaffa16993c3f21e9ed286", "name": "DHL Phishing Collection", "description": "This page stores DHL phishing page IOCs. Legitimate website for the brand is https://www.dhl.com/\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-05-29T09:38:11.747000", "created": "2023-02-14T03:27:29.077000", "tags": [ "urls", "url", "domains", "domain", "phishing", "scam", "dhl" ], "references": [ "https://www.virustotal.com/gui/collection/9e06470d30593e11c8daad2157e0d4ef1ccce47787e2b5303846704767c26d6a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Transportation" ], "TLP": "green", "cloned_from": null, "export_count": 556, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 34, "domain": 18, "URL": 1 }, "indicator_count": 53, "is_author": false, "is_subscribing": null, "subscriber_count": 429, "modified_text": "2 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b0331bd079a418245cfa5b", "name": "Phishing | Mar 11, 2026 | Part 359/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 359/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:59.161000", "created": "2026-03-10T15:04:59.161000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1262, "domain": 738 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf52452cf9046004e8a9", "name": "Phishing | Mar 10, 2026 | Part 310/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 310/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:55:14.666000", "created": "2026-03-09T14:55:14.666000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 746, "hostname": 1254 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8c1d1dd1a5117ed2bc5e", "name": "Phishing | Mar 9, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:57.263000", "created": "2026-03-08T14:47:57.263000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b39a75ee35436d45002", "name": "Phishing | Mar 8, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:50:33.121000", "created": "2026-03-07T14:50:33.121000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae95f61784881742c926a", "name": "Phishing | Mar 7, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:49:03.440000", "created": "2026-03-06T14:49:03.440000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1025, "domain": 975 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d3f94839e36a7e4f2a5", "name": "Phishing | Mar 6, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:59.492000", "created": "2026-03-05T15:11:59.492000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8467ea85086d420b9ecdf", "name": "Phishing | Mar 5, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:49:34.891000", "created": "2026-03-04T14:49:34.891000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f3c6956e70e79214a4e3", "name": "Phishing | Mar 4, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:44:22.026000", "created": "2026-03-03T14:44:22.026000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b99e571c9bd95c890829", "name": "Phishing | Mar 3, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:23:58.531000", "created": "2026-03-02T16:23:58.531000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517db5769a9ccf56398e8", "name": "Phishing | Mar 2, 2026 | Part 313/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 313/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:53:47.627000", "created": "2026-03-02T04:53:47.627000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 957, "hostname": 1043 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a4447486c345a53102d3af", "name": "Phishing | Mar 2, 2026 | Part 315/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 315/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:51:48.251000", "created": "2026-03-01T13:51:48.251000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1288, "domain": 712 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40a1bb54c4bfc8df5fe38", "name": "Phishing | Mar 1, 2026 | Part 315/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 315/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:42:51.063000", "created": "2026-03-01T09:42:51.063000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1288, "domain": 712 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a388a9cc28998516af5739", "name": "Phishing | Mar 1, 2026 | Part 316/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 316/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:30:33.495000", "created": "2026-03-01T00:30:33.495000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 722 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997ff441975f838536f88f1", "name": "Phishing | Feb 20, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:29:24.551000", "created": "2026-02-20T06:29:24.551000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 724, "hostname": 1276 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "100 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976d29ad43d6e2bcf4335f", "name": "Phishing | Feb 20, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:06:01.048000", "created": "2026-02-19T20:06:01.048000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 724, "hostname": 1276 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972e1055b40803ac4b0737", "name": "Phishing | Feb 20, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:36:48.216000", "created": "2026-02-19T15:36:48.216000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 724, "hostname": 1276 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970ec65214e6d9817efbd9", "name": "Phishing | Feb 19, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:23:17.402000", "created": "2026-02-19T13:23:17.402000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1277, "domain": 723 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6996389308f008bce4681bf1", "name": "Phishing | Feb 19, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:09:23.247000", "created": "2026-02-18T22:09:23.247000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1277, "domain": 723 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6995793bd36038d624b61272", "name": "Phishing | Feb 18, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:32:59.979000", "created": "2026-02-18T08:32:59.979000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 722 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949dc5b41972115e1570f6", "name": "Phishing | Feb 18, 2026 | Part 318/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 318/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:56:37.484000", "created": "2026-02-17T16:56:37.484000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 722 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929bd33fe6c2b368e1025e", "name": "Phishing | Feb 16, 2026 | Part 323/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 323/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:23:47.570000", "created": "2026-02-16T04:23:47.570000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1235, "domain": 765 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915ca88dc22fa1991c9c5f", "name": "Phishing | Feb 15, 2026 | Part 330/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 330/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:42:00.239000", "created": "2026-02-15T05:42:00.239000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1038, "domain": 962 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908e252137bd952847a015", "name": "Phishing | Feb 15, 2026 | Part 333/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 333/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T15:00:53.075000", "created": "2026-02-14T15:00:53.075000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 753, "hostname": 1247 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6783308fc0b6e2bd8dfb209c", "name": "TTC-CERT_blocklist_recommended", "description": "", "modified": "2026-02-14T00:03:07.406000", "created": "2025-01-12T03:01:35.075000", "tags": [], "references": [ "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 606, "URL": 4, "domain": 25122, "hostname": 25306 }, "indicator_count": 51038, "is_author": false, "is_subscribing": null, "subscriber_count": 185, "modified_text": "106 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c60b500f2f121d3894b86", "name": "Phishing | Feb 11, 2026 | Part 360/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 360/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:57:57.913000", "created": "2026-02-11T10:57:57.913000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 973, "domain": 1027 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981ab352deef9e88fc954a7", "name": "Phishing | 2026-01-31 | Part 87/163", "description": "Phishing indicators. Date: 2026-01-31. Part 87/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:00:53.862000", "created": "2026-02-03T08:00:53.862000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 4145, "hostname": 5855 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "117 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "669c42e669ad7c30b6651db5", "name": "Malware Filter - Phishing List - 20-07-2024", "description": "", "modified": "2024-07-20T23:06:13.579000", "created": "2024-07-20T23:06:13.579000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 259, "domain": 63 }, "indicator_count": 322, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "679 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65c1799fd50ef5ec3ed85f71", "name": "Twitter Feed - noladefense - 05-02-2024", "description": "", "modified": "2024-03-07T00:02:47.028000", "created": "2024-02-06T00:13:19.914000", "tags": [ "phishing" ], "references": [ "https://twitter.com/noladefense/status/1754302086102012065", "https://twitter.com/noladefense/status/1754303399732908271", "https://twitter.com/noladefense/status/1754303424835826008", "https://twitter.com/noladefense/status/1754303434738536824", "https://twitter.com/noladefense/status/1754303473657565221", "https://twitter.com/noladefense/status/1754303480959787409", "https://twitter.com/noladefense/status/1754303494310215807", "https://twitter.com/noladefense/status/1754303502539473147", "https://twitter.com/noladefense/status/1754303511947284880", "https://twitter.com/noladefense/status/1754303513008513385", "https://twitter.com/noladefense/status/1754303520499519716", "https://twitter.com/noladefense/status/1754303537402483101", "https://twitter.com/noladefense/status/1754303538744725939", "https://twitter.com/noladefense/status/1754306182620016656", "https://twitter.com/noladefense/status/1754312982828339266", "https://twitter.com/noladefense/status/1754313051807891700", "https://twitter.com/noladefense/status/1754313294926533094", "https://twitter.com/noladefense/status/1754314627062599903", "https://twitter.com/noladefense/status/1754314685602574343", "https://twitter.com/noladefense/status/1754314743983047041", "https://twitter.com/noladefense/status/1754314824152928279", "https://twitter.com/noladefense/status/1754314898832568528", "https://twitter.com/noladefense/status/1754314955673739437", "https://twitter.com/noladefense/status/1754316581977374809", "https://twitter.com/noladefense/status/1754316644552261949", "https://twitter.com/noladefense/status/1754316705344442548", "https://twitter.com/noladefense/status/1754316766090526989", "https://twitter.com/noladefense/status/1754318134075617778", "https://twitter.com/noladefense/status/1754318188454559997", "https://twitter.com/noladefense/status/1754318245702648165", "https://twitter.com/noladefense/status/1754318298810921117", "https://twitter.com/noladefense/status/1754318559667167739", "https://twitter.com/noladefense/status/1754318582102511706", "https://twitter.com/noladefense/status/1754318607503290403", "https://twitter.com/noladefense/status/1754319767488368811", "https://twitter.com/noladefense/status/1754319839508701685", "https://twitter.com/noladefense/status/1754323236106506577", "https://twitter.com/noladefense/status/1754323401529753801", "https://twitter.com/noladefense/status/1754323457859367295", "https://twitter.com/noladefense/status/1754324868898709989", "https://twitter.com/noladefense/status/1754326285994664145", "https://twitter.com/noladefense/status/1754328903269626026", "https://twitter.com/noladefense/status/1754333821917397003", "https://twitter.com/noladefense/status/1754333829135749289", "https://twitter.com/noladefense/status/1754333831417438469", "https://twitter.com/noladefense/status/1754333844415598597", "https://twitter.com/noladefense/status/1754333867685687679", "https://twitter.com/noladefense/status/1754334394800640456", "https://twitter.com/noladefense/status/1754334897307541592", "https://twitter.com/noladefense/status/1754335655163797575", "https://twitter.com/noladefense/status/1754335949545226244", "https://twitter.com/noladefense/status/1754336247579922488", "https://twitter.com/noladefense/status/1754336497312952409", "https://twitter.com/noladefense/status/1754338180935848276", "https://twitter.com/noladefense/status/1754338602002030873", "https://twitter.com/noladefense/status/1754339254660944362", "https://twitter.com/noladefense/status/1754340780213166476", "https://twitter.com/noladefense/status/1754348731808309569", "https://twitter.com/noladefense/status/1754348754218479767", "https://twitter.com/noladefense/status/1754348772937642008", "https://twitter.com/noladefense/status/1754348794508894479", "https://twitter.com/noladefense/status/1754348799806320790", "https://twitter.com/noladefense/status/1754348807389626539", "https://twitter.com/noladefense/status/1754348824976375925", "https://twitter.com/noladefense/status/1754348828898074890", "https://twitter.com/noladefense/status/1754348839182491966", "https://twitter.com/noladefense/status/1754348854567227876", "https://twitter.com/noladefense/status/1754348856798535708", "https://twitter.com/noladefense/status/1754348868018335756", "https://twitter.com/noladefense/status/1754354846130471397", "https://twitter.com/noladefense/status/1754363624519266608", "https://twitter.com/noladefense/status/1754368129805729843", "https://twitter.com/noladefense/status/1754369497694130199", "https://twitter.com/noladefense/status/1754374670915113012", "https://twitter.com/noladefense/status/1754378793794367945", "https://twitter.com/noladefense/status/1754378816300978517", "https://twitter.com/noladefense/status/1754381851118985630", "https://twitter.com/noladefense/status/1754388012832583907", "https://twitter.com/noladefense/status/1754393502266388938", "https://twitter.com/noladefense/status/1754393872484962658", "https://twitter.com/noladefense/status/1754394008028160458", "https://twitter.com/noladefense/status/1754397437559546198", "https://twitter.com/noladefense/status/1754400425506140497", "https://twitter.com/noladefense/status/1754410747105321349", "https://twitter.com/noladefense/status/1754414939131768892", "https://twitter.com/noladefense/status/1754421371809997179", "https://twitter.com/noladefense/status/1754424145046106172", "https://twitter.com/noladefense/status/1754439162332119072", "https://twitter.com/noladefense/status/1754439176785666558", "https://twitter.com/noladefense/status/1754439243143790603", "https://twitter.com/noladefense/status/1754439263733625261", "https://twitter.com/noladefense/status/1754454227227685139", "https://twitter.com/noladefense/status/1754454295385162166", "https://twitter.com/noladefense/status/1754454292994330702", "https://twitter.com/noladefense/status/1754454317728178307", "https://twitter.com/noladefense/status/1754454343657370064", "https://twitter.com/noladefense/status/1754454356420681900", "https://twitter.com/noladefense/status/1754460267487113304", "https://twitter.com/noladefense/status/1754462116939993565", "https://twitter.com/noladefense/status/1754462176138428764", "https://twitter.com/noladefense/status/1754467858480800118", "https://twitter.com/noladefense/status/1754469365678792805", "https://twitter.com/noladefense/status/1754481732319858869" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 100, "URL": 88, "domain": 69, "hostname": 18, "FileHash-MD5": 3 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "815 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65bd858df24d2f4434083c7e", "name": "Malware Filter - Phishing List - 02-02-2024", "description": "", "modified": "2024-02-03T00:15:09.910000", "created": "2024-02-03T00:15:09.910000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 489, "domain": 139 }, "indicator_count": 628, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "848 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "657a4a41f0a23366f2b01d2b", "name": "Malware Filter - Phishing List - 13-12-2023", "description": "", "modified": "2023-12-14T00:20:17.694000", "created": "2023-12-14T00:20:17.694000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 292, "domain": 167 }, "indicator_count": 459, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "899 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64e54b7d4e02275d08c14879", "name": "Malware Filter - Phishing List - 22-08-2023", "description": "", "modified": "2023-08-22T23:57:49.146000", "created": "2023-08-22T23:57:49.146000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 19892, "domain": 7331 }, "indicator_count": 27223, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "1012 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64d81788ef19eeb6b632df18", "name": "Malware Filter - Phishing List - 12-08-2023", "description": "", "modified": "2023-08-12T23:36:40.958000", "created": "2023-08-12T23:36:40.958000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 17259, "domain": 6210 }, "indicator_count": 23469, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "1022 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "64caeaa810b264b950b6925a", "name": "Malware Filter - Phishing List - 02-08-2023", "description": "", "modified": "2023-08-02T23:45:44.943000", "created": "2023-08-02T23:45:44.943000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 14, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 862, "domain": 410 }, "indicator_count": 1272, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1032 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/noladefense/status/1754348794508894479", "https://www.virustotal.com/gui/collection/9e06470d30593e11c8daad2157e0d4ef1ccce47787e2b5303846704767c26d6a", "https://twitter.com/noladefense/status/1754439162332119072", "https://twitter.com/noladefense/status/1754454227227685139", "https://twitter.com/noladefense/status/1754394008028160458", "https://twitter.com/noladefense/status/1754469365678792805", "https://twitter.com/noladefense/status/1754393502266388938", "https://twitter.com/noladefense/status/1754333867685687679", "https://twitter.com/noladefense/status/1754318134075617778", "https://twitter.com/noladefense/status/1754439176785666558", "https://twitter.com/noladefense/status/1754313051807891700", "https://twitter.com/noladefense/status/1754348731808309569", "https://twitter.com/noladefense/status/1754348839182491966", "https://twitter.com/noladefense/status/1754303511947284880", "https://twitter.com/noladefense/status/1754348828898074890", "https://twitter.com/noladefense/status/1754439263733625261", "https://twitter.com/noladefense/status/1754400425506140497", "https://twitter.com/noladefense/status/1754335655163797575", "https://twitter.com/noladefense/status/1754454292994330702", "https://twitter.com/noladefense/status/1754335949545226244", "https://twitter.com/noladefense/status/1754303513008513385", "https://twitter.com/noladefense/status/1754303399732908271", "https://twitter.com/noladefense/status/1754363624519266608", "https://twitter.com/noladefense/status/1754303480959787409", "https://twitter.com/noladefense/status/1754333831417438469", "https://twitter.com/noladefense/status/1754467858480800118", "https://twitter.com/noladefense/status/1754303424835826008", "https://twitter.com/noladefense/status/1754336497312952409", "https://twitter.com/noladefense/status/1754348754218479767", "https://twitter.com/noladefense/status/1754348824976375925", "https://twitter.com/noladefense/status/1754319839508701685", "https://twitter.com/noladefense/status/1754454356420681900", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://twitter.com/noladefense/status/1754421371809997179", "https://twitter.com/noladefense/status/1754439243143790603", "https://twitter.com/noladefense/status/1754381851118985630", "https://twitter.com/noladefense/status/1754303502539473147", "https://twitter.com/noladefense/status/1754454295385162166", "https://twitter.com/noladefense/status/1754369497694130199", "https://twitter.com/noladefense/status/1754333844415598597", "https://twitter.com/noladefense/status/1754340780213166476", "https://twitter.com/noladefense/status/1754481732319858869", "https://twitter.com/noladefense/status/1754303494310215807", "https://twitter.com/noladefense/status/1754318559667167739", "https://twitter.com/noladefense/status/1754338180935848276", "https://twitter.com/noladefense/status/1754323457859367295", "https://twitter.com/noladefense/status/1754316581977374809", "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt", "https://twitter.com/noladefense/status/1754318582102511706", "https://twitter.com/noladefense/status/1754324868898709989", "https://twitter.com/noladefense/status/1754410747105321349", "https://twitter.com/noladefense/status/1754312982828339266", "https://twitter.com/noladefense/status/1754378816300978517", "https://twitter.com/noladefense/status/1754348856798535708", "https://twitter.com/noladefense/status/1754303434738536824", "https://twitter.com/noladefense/status/1754397437559546198", "https://twitter.com/noladefense/status/1754462176138428764", "https://twitter.com/noladefense/status/1754314743983047041", "https://twitter.com/noladefense/status/1754303520499519716", "https://twitter.com/noladefense/status/1754348868018335756", "https://twitter.com/noladefense/status/1754378793794367945", "https://twitter.com/noladefense/status/1754318607503290403", "https://twitter.com/noladefense/status/1754314685602574343", "https://twitter.com/noladefense/status/1754316644552261949", "https://twitter.com/noladefense/status/1754323236106506577", "https://twitter.com/noladefense/status/1754334897307541592", "https://twitter.com/noladefense/status/1754319767488368811", "https://twitter.com/noladefense/status/1754302086102012065", "https://twitter.com/noladefense/status/1754454343657370064", "https://twitter.com/noladefense/status/1754306182620016656", "https://twitter.com/noladefense/status/1754314898832568528", "https://twitter.com/noladefense/status/1754348772937642008", "https://twitter.com/noladefense/status/1754318298810921117", "https://twitter.com/noladefense/status/1754316705344442548", "https://twitter.com/noladefense/status/1754388012832583907", "https://twitter.com/noladefense/status/1754336247579922488", "https://twitter.com/noladefense/status/1754334394800640456", "https://twitter.com/noladefense/status/1754338602002030873", "https://twitter.com/noladefense/status/1754318188454559997", "https://twitter.com/noladefense/status/1754303538744725939", "https://twitter.com/noladefense/status/1754339254660944362", "https://twitter.com/noladefense/status/1754316766090526989", "https://ltna.com.au/cyber", "https://twitter.com/noladefense/status/1754313294926533094", "https://twitter.com/noladefense/status/1754354846130471397", "https://twitter.com/noladefense/status/1754424145046106172", "https://twitter.com/noladefense/status/1754462116939993565", "https://twitter.com/noladefense/status/1754333821917397003", "https://twitter.com/noladefense/status/1754303473657565221", "https://twitter.com/noladefense/status/1754393872484962658", "https://twitter.com/noladefense/status/1754348854567227876", "https://twitter.com/noladefense/status/1754314627062599903", "https://twitter.com/noladefense/status/1754314824152928279", "https://twitter.com/noladefense/status/1754333829135749289", "https://twitter.com/noladefense/status/1754318245702648165", "https://twitter.com/noladefense/status/1754368129805729843", "https://twitter.com/noladefense/status/1754314955673739437", "https://twitter.com/noladefense/status/1754303537402483101", "https://twitter.com/noladefense/status/1754454317728178307", "https://twitter.com/noladefense/status/1754326285994664145", "https://twitter.com/noladefense/status/1754348799806320790", "https://twitter.com/noladefense/status/1754414939131768892", "https://twitter.com/noladefense/status/1754460267487113304", "https://twitter.com/noladefense/status/1754323401529753801", "https://twitter.com/noladefense/status/1754348807389626539", "https://twitter.com/noladefense/status/1754374670915113012", "https://twitter.com/noladefense/status/1754328903269626026" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Transportation" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 34, "pulses": [ { "id": "63eaffa16993c3f21e9ed286", "name": "DHL Phishing Collection", "description": "This page stores DHL phishing page IOCs. Legitimate website for the brand is https://www.dhl.com/\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-05-29T09:38:11.747000", "created": "2023-02-14T03:27:29.077000", "tags": [ "urls", "url", "domains", "domain", "phishing", "scam", "dhl" ], "references": [ "https://www.virustotal.com/gui/collection/9e06470d30593e11c8daad2157e0d4ef1ccce47787e2b5303846704767c26d6a" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "Transportation" ], "TLP": "green", "cloned_from": null, "export_count": 556, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 34, "domain": 18, "URL": 1 }, "indicator_count": 53, "is_author": false, "is_subscribing": null, "subscriber_count": 429, "modified_text": "2 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b0331bd079a418245cfa5b", "name": "Phishing | Mar 11, 2026 | Part 359/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 359/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:04:59.161000", "created": "2026-03-10T15:04:59.161000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1262, "domain": 738 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf52452cf9046004e8a9", "name": "Phishing | Mar 10, 2026 | Part 310/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 310/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:55:14.666000", "created": "2026-03-09T14:55:14.666000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 746, "hostname": 1254 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8c1d1dd1a5117ed2bc5e", "name": "Phishing | Mar 9, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:47:57.263000", "created": "2026-03-08T14:47:57.263000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b39a75ee35436d45002", "name": "Phishing | Mar 8, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:50:33.121000", "created": "2026-03-07T14:50:33.121000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae95f61784881742c926a", "name": "Phishing | Mar 7, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:49:03.440000", "created": "2026-03-06T14:49:03.440000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1025, "domain": 975 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d3f94839e36a7e4f2a5", "name": "Phishing | Mar 6, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:11:59.492000", "created": "2026-03-05T15:11:59.492000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8467ea85086d420b9ecdf", "name": "Phishing | Mar 5, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:49:34.891000", "created": "2026-03-04T14:49:34.891000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f3c6956e70e79214a4e3", "name": "Phishing | Mar 4, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:44:22.026000", "created": "2026-03-03T14:44:22.026000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b99e571c9bd95c890829", "name": "Phishing | Mar 3, 2026 | Part 311/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 311/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:23:58.531000", "created": "2026-03-02T16:23:58.531000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 976, "hostname": 1024 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "syntaxtechs.net", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "syntaxtechs.net", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780261777.9137108 }