{ "type": "Domain", "indicator": "team-form.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/team-form.com", "alexa": "http://www.alexa.com/siteinfo/team-form.com", "indicator": "team-form.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3415711125, "indicator": "team-form.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 31, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b03328958a006b838c69dd", "name": "Phishing | Mar 11, 2026 | Part 361/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 361/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:05:12.760000", "created": "2026-03-10T15:05:12.760000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1081, "hostname": 919 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf61385a8ad596c87774", "name": "Phishing | Mar 10, 2026 | Part 312/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 312/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:55:29.584000", "created": "2026-03-09T14:55:29.584000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 948, "domain": 1052 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8c2d947bd5ed88cc00e9", "name": "Phishing | Mar 9, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:48:13.327000", "created": "2026-03-08T14:48:13.327000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b46bf99b81c4860b6bc", "name": "Phishing | Mar 8, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:50:46.172000", "created": "2026-03-07T14:50:46.172000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae96cfc601e23b7b919e2", "name": "Phishing | Mar 7, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:49:16.749000", "created": "2026-03-06T14:49:16.749000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d4d4cb812f15c79c874", "name": "Phishing | Mar 6, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:12:13.438000", "created": "2026-03-05T15:12:13.438000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8468c77984c838e4a14bb", "name": "Phishing | Mar 5, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:49:48.505000", "created": "2026-03-04T14:49:48.505000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f3d3b08fcc06d74848f8", "name": "Phishing | Mar 4, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:44:35.564000", "created": "2026-03-03T14:44:35.564000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b9ab19767117cb37c16e", "name": "Phishing | Mar 3, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:24:11.923000", "created": "2026-03-02T16:24:11.923000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a517edca433429ba9967a0", "name": "Phishing | Mar 2, 2026 | Part 315/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 315/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:54:05.529000", "created": "2026-03-02T04:54:05.529000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1586, "hostname": 414 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a444841d95f57a7e516615", "name": "Phishing | Mar 2, 2026 | Part 317/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 317/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:52:04.491000", "created": "2026-03-01T13:52:04.491000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1170, "hostname": 830 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40a297f2442022bd3845c", "name": "Phishing | Mar 1, 2026 | Part 317/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 317/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:43:05.814000", "created": "2026-03-01T09:43:05.814000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1170, "hostname": 830 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a388b7168c8d355abc6083", "name": "Phishing | Mar 1, 2026 | Part 318/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 318/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:30:47.126000", "created": "2026-03-01T00:30:47.126000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1111, "hostname": 889 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997ff5322827ecd9da3d578", "name": "Phishing | Feb 20, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:29:39.274000", "created": "2026-02-20T06:29:39.274000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976d386515326c907f411c", "name": "Phishing | Feb 20, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:06:16.801000", "created": "2026-02-19T20:06:16.801000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972e2008ed23d6bce373f2", "name": "Phishing | Feb 20, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:37:04.159000", "created": "2026-02-19T15:37:04.159000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970ed576d7ff5244dd89ef", "name": "Phishing | Feb 19, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:23:33.380000", "created": "2026-02-19T13:23:33.380000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699638a1eda9d4d9948b9977", "name": "Phishing | Feb 19, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:09:37.628000", "created": "2026-02-18T22:09:37.628000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6995794aba364b97da044e26", "name": "Phishing | Feb 18, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:33:14.012000", "created": "2026-02-18T08:33:14.012000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949dd69e7e33d8bc28507e", "name": "Phishing | Feb 18, 2026 | Part 320/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 320/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:56:54.443000", "created": "2026-02-17T16:56:54.443000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1146, "hostname": 854 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929be1582ab3c6deb0f98f", "name": "Phishing | Feb 16, 2026 | Part 325/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 325/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:24:01.220000", "created": "2026-02-16T04:24:01.220000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1021, "hostname": 979 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915cb6503e713a4d8bdf82", "name": "Phishing | Feb 15, 2026 | Part 332/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 332/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:42:14.678000", "created": "2026-02-15T05:42:14.678000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 824, "domain": 1176 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908e33870e9a0f51a2f210", "name": "Phishing | Feb 15, 2026 | Part 335/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 335/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T15:01:07.630000", "created": "2026-02-14T15:01:07.630000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1162, "hostname": 838 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c60c332859e2b8e359ec2", "name": "Phishing | Feb 11, 2026 | Part 362/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 362/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:58:11.205000", "created": "2026-02-11T10:58:11.205000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1227, "hostname": 773 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981ab410e8472046210a114", "name": "Phishing | 2026-01-31 | Part 88/163", "description": "Phishing indicators. Date: 2026-01-31. Part 88/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:01:05.213000", "created": "2026-02-03T08:01:05.213000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 4162, "domain": 5838 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "118 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6785dccb041b628fde283705", "name": "phish.directory", "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory", "modified": "2026-01-25T18:05:17.629000", "created": "2025-01-14T03:40:59.456000", "tags": [ "phishing", "scams", "steam", "discord", "roblox" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaspermayone", "id": "305022", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 41514, "hostname": 11318 }, "indicator_count": 52832, "is_author": false, "is_subscribing": null, "subscriber_count": 3, "modified_text": "126 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67f855ace4ed20ac6df9bfbb", "name": "Twitter Feed - Phish_Destroy - 10-04-2025", "description": "", "modified": "2025-05-10T23:02:11.501000", "created": "2025-04-10T23:35:08.730000", "tags": [ "phishing", "malware", "scam" ], "references": [ "https://x.com/Phish_Destroy/status/1910333768591646790", "https://x.com/Phish_Destroy/status/1910334093461516631", "https://x.com/Phish_Destroy/status/1910334260977746022", "https://x.com/Phish_Destroy/status/1910334724591042918", "https://x.com/Phish_Destroy/status/1910335092049994132", "https://x.com/Phish_Destroy/status/1910336395752714242", "https://x.com/Phish_Destroy/status/1910336517551116434", "https://x.com/Phish_Destroy/status/1910336678142636213", "https://x.com/Phish_Destroy/status/1910337105227633151", "https://x.com/Phish_Destroy/status/1910337878468538639", "https://x.com/Phish_Destroy/status/1910338836468539658", "https://x.com/Phish_Destroy/status/1910339099673698610", "https://x.com/Phish_Destroy/status/1910339563861553429", "https://x.com/Phish_Destroy/status/1910339651639914848", "https://x.com/Phish_Destroy/status/1910339958495228197", "https://x.com/Phish_Destroy/status/1910340248376049971", "https://x.com/Phish_Destroy/status/1910341266065305631", "https://x.com/Phish_Destroy/status/1910341545720488056", "https://x.com/Phish_Destroy/status/1910341643158368573", "https://x.com/Phish_Destroy/status/1910342125989883954", "https://x.com/Phish_Destroy/status/1910342555826282851", "https://x.com/Phish_Destroy/status/1910344985565602066", "https://x.com/Phish_Destroy/status/1910345277858267644", "https://x.com/Phish_Destroy/status/1910345421710320058", "https://x.com/Phish_Destroy/status/1910345510034059707", "https://x.com/Phish_Destroy/status/1910345735704359001", "https://x.com/Phish_Destroy/status/1910345953590002086", "https://x.com/Phish_Destroy/status/1910347037838631363", "https://x.com/Phish_Destroy/status/1910347296191004907", "https://x.com/Phish_Destroy/status/1910347499455324308", "https://x.com/Phish_Destroy/status/1910347783757799647", "https://x.com/Phish_Destroy/status/1910348672128123244", "https://x.com/Phish_Destroy/status/1910348764725866605", "https://x.com/Phish_Destroy/status/1910349153898582118", "https://x.com/Phish_Destroy/status/1910349236329120019", "https://x.com/Phish_Destroy/status/1910349337848140141", "https://x.com/Phish_Destroy/status/1910349613791379967", "https://x.com/Phish_Destroy/status/1910359257666515057", "https://x.com/Phish_Destroy/status/1910359459936755969", "https://x.com/Phish_Destroy/status/1910360494466085355", "https://x.com/Phish_Destroy/status/1910360675932594350", "https://x.com/Phish_Destroy/status/1910360876453863657", "https://x.com/Phish_Destroy/status/1910361501451370852", "https://x.com/Phish_Destroy/status/1910366490898895065", "https://x.com/Phish_Destroy/status/1910366638521667673", "https://x.com/Phish_Destroy/status/1910367383711084779", "https://x.com/Phish_Destroy/status/1910370856477618349", "https://x.com/Phish_Destroy/status/1910371035771294138", "https://x.com/Phish_Destroy/status/1910372013178257682", "https://x.com/Phish_Destroy/status/1910372781654417416", "https://x.com/Phish_Destroy/status/1910374299954983354", "https://x.com/Phish_Destroy/status/1910374377381601721", "https://x.com/Phish_Destroy/status/1910374874645770362", "https://x.com/Phish_Destroy/status/1910375596573483289", "https://x.com/Phish_Destroy/status/1910375898433401194", "https://x.com/Phish_Destroy/status/1910376549125079410", "https://x.com/Phish_Destroy/status/1910377152123371899", "https://x.com/Phish_Destroy/status/1910377406881292654", "https://x.com/Phish_Destroy/status/1910377650998083813", "https://x.com/Phish_Destroy/status/1910379427394974129", "https://x.com/Phish_Destroy/status/1910381430212898849", "https://x.com/Phish_Destroy/status/1910381974293766621", "https://x.com/Phish_Destroy/status/1910382183694414239", "https://x.com/Phish_Destroy/status/1910382394344874468", "https://x.com/Phish_Destroy/status/1910383153849512057", "https://x.com/Phish_Destroy/status/1910383289631731762", "https://x.com/Phish_Destroy/status/1910383831640674514", "https://x.com/Phish_Destroy/status/1910384059659763766", "https://x.com/Phish_Destroy/status/1910385043266216076", "https://x.com/Phish_Destroy/status/1910385126237691970", "https://x.com/Phish_Destroy/status/1910386245168988444", "https://x.com/Phish_Destroy/status/1910386377201512855", "https://x.com/Phish_Destroy/status/1910386679082369162", "https://x.com/Phish_Destroy/status/1910386811286831256", "https://x.com/Phish_Destroy/status/1910386876181065773", "https://x.com/Phish_Destroy/status/1910387967572447446", "https://x.com/Phish_Destroy/status/1910388275019198475", "https://x.com/Phish_Destroy/status/1910388473267380573", "https://x.com/Phish_Destroy/status/1910388602254876717", "https://x.com/Phish_Destroy/status/1910393105943048668", "https://x.com/Phish_Destroy/status/1910393224625361084", "https://x.com/Phish_Destroy/status/1910393523167179113", "https://x.com/Phish_Destroy/status/1910393734317183109", "https://x.com/Phish_Destroy/status/1910393927779098900", "https://x.com/Phish_Destroy/status/1910395110929453196", "https://x.com/Phish_Destroy/status/1910395365926351193", "https://x.com/Phish_Destroy/status/1910398098020409552", "https://x.com/Phish_Destroy/status/1910398544197956083", "https://x.com/Phish_Destroy/status/1910399298778386500", "https://x.com/Phish_Destroy/status/1910411354718040106", "https://x.com/Phish_Destroy/status/1910412839463846304", "https://x.com/Phish_Destroy/status/1910414914524492175", "https://x.com/Phish_Destroy/status/1910416550596608500" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 74, "URL": 93, "hostname": 19 }, "indicator_count": 186, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "386 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "624d38bef231bdea72ac18e6", "name": "NewDom-4-20220406", "description": "ICANN-Dom", "modified": "2022-05-21T00:03:44.725000", "created": "2022-04-06T06:52:46.809000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "ZENDataGELowC", "id": "152785", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": {}, "indicator_count": 0, "is_author": false, "is_subscribing": null, "subscriber_count": 202, "modified_text": "1472 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 } ], "references": [ "https://x.com/Phish_Destroy/status/1910360494466085355", "https://x.com/Phish_Destroy/status/1910335092049994132", "https://x.com/Phish_Destroy/status/1910381430212898849", "https://x.com/Phish_Destroy/status/1910333768591646790", "https://x.com/Phish_Destroy/status/1910345510034059707", "https://x.com/Phish_Destroy/status/1910386811286831256", "https://x.com/Phish_Destroy/status/1910348672128123244", "https://x.com/Phish_Destroy/status/1910334260977746022", "https://x.com/Phish_Destroy/status/1910377406881292654", "https://x.com/Phish_Destroy/status/1910393224625361084", "https://x.com/Phish_Destroy/status/1910361501451370852", "https://x.com/Phish_Destroy/status/1910385043266216076", "https://x.com/Phish_Destroy/status/1910347499455324308", "https://x.com/Phish_Destroy/status/1910393734317183109", "https://x.com/Phish_Destroy/status/1910375898433401194", "https://x.com/Phish_Destroy/status/1910349153898582118", "https://x.com/Phish_Destroy/status/1910339958495228197", "https://x.com/Phish_Destroy/status/1910416550596608500", "https://x.com/Phish_Destroy/status/1910345735704359001", "https://x.com/Phish_Destroy/status/1910411354718040106", "https://x.com/Phish_Destroy/status/1910337878468538639", "https://x.com/Phish_Destroy/status/1910395365926351193", "https://x.com/Phish_Destroy/status/1910348764725866605", "https://x.com/Phish_Destroy/status/1910342125989883954", "https://x.com/Phish_Destroy/status/1910349613791379967", "https://x.com/Phish_Destroy/status/1910341643158368573", "https://x.com/Phish_Destroy/status/1910374874645770362", "https://x.com/Phish_Destroy/status/1910347296191004907", "https://x.com/Phish_Destroy/status/1910395110929453196", "https://x.com/Phish_Destroy/status/1910334093461516631", "https://x.com/Phish_Destroy/status/1910382183694414239", "https://x.com/Phish_Destroy/status/1910385126237691970", "https://x.com/Phish_Destroy/status/1910359257666515057", "https://x.com/Phish_Destroy/status/1910336395752714242", "https://x.com/Phish_Destroy/status/1910398544197956083", "https://x.com/Phish_Destroy/status/1910336678142636213", "https://x.com/Phish_Destroy/status/1910360675932594350", "https://x.com/Phish_Destroy/status/1910340248376049971", "https://x.com/Phish_Destroy/status/1910383153849512057", "https://x.com/Phish_Destroy/status/1910386679082369162", "https://x.com/Phish_Destroy/status/1910366638521667673", "https://x.com/Phish_Destroy/status/1910360876453863657", "https://x.com/Phish_Destroy/status/1910341545720488056", "https://x.com/Phish_Destroy/status/1910379427394974129", "https://x.com/Phish_Destroy/status/1910381974293766621", "https://x.com/Phish_Destroy/status/1910372013178257682", "https://x.com/Phish_Destroy/status/1910372781654417416", "https://x.com/Phish_Destroy/status/1910383289631731762", "https://x.com/Phish_Destroy/status/1910393927779098900", "https://x.com/Phish_Destroy/status/1910388602254876717", "https://x.com/Phish_Destroy/status/1910387967572447446", "https://x.com/Phish_Destroy/status/1910339563861553429", "https://x.com/Phish_Destroy/status/1910388473267380573", "https://x.com/Phish_Destroy/status/1910349337848140141", "https://x.com/Phish_Destroy/status/1910366490898895065", "https://x.com/Phish_Destroy/status/1910399298778386500", "https://x.com/Phish_Destroy/status/1910383831640674514", "https://x.com/Phish_Destroy/status/1910386876181065773", "https://ltna.com.au/cyber", "https://x.com/Phish_Destroy/status/1910398098020409552", "https://x.com/Phish_Destroy/status/1910359459936755969", "https://x.com/Phish_Destroy/status/1910338836468539658", "https://x.com/Phish_Destroy/status/1910339651639914848", "https://x.com/Phish_Destroy/status/1910349236329120019", "https://x.com/Phish_Destroy/status/1910393523167179113", "https://x.com/Phish_Destroy/status/1910347037838631363", "https://x.com/Phish_Destroy/status/1910345421710320058", "https://x.com/Phish_Destroy/status/1910336517551116434", "https://x.com/Phish_Destroy/status/1910344985565602066", "https://x.com/Phish_Destroy/status/1910345277858267644", "https://x.com/Phish_Destroy/status/1910386245168988444", "https://x.com/Phish_Destroy/status/1910345953590002086", "https://x.com/Phish_Destroy/status/1910386377201512855", "https://x.com/Phish_Destroy/status/1910384059659763766", "https://x.com/Phish_Destroy/status/1910382394344874468", "https://x.com/Phish_Destroy/status/1910388275019198475", "https://x.com/Phish_Destroy/status/1910375596573483289", "https://x.com/Phish_Destroy/status/1910393105943048668", "https://x.com/Phish_Destroy/status/1910334724591042918", "https://x.com/Phish_Destroy/status/1910347783757799647", "https://x.com/Phish_Destroy/status/1910371035771294138", "https://x.com/Phish_Destroy/status/1910367383711084779", "https://x.com/Phish_Destroy/status/1910339099673698610", "https://x.com/Phish_Destroy/status/1910374377381601721", "https://x.com/Phish_Destroy/status/1910412839463846304", "https://x.com/Phish_Destroy/status/1910377152123371899", "https://x.com/Phish_Destroy/status/1910337105227633151", "https://x.com/Phish_Destroy/status/1910414914524492175", "https://x.com/Phish_Destroy/status/1910374299954983354", "https://x.com/Phish_Destroy/status/1910370856477618349", "https://x.com/Phish_Destroy/status/1910377650998083813", "https://x.com/Phish_Destroy/status/1910376549125079410", "https://x.com/Phish_Destroy/status/1910341266065305631", "https://x.com/Phish_Destroy/status/1910342555826282851" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [ "Gaming" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 31, "pulses": [ { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "17 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b03328958a006b838c69dd", "name": "Phishing | Mar 11, 2026 | Part 361/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 361/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:05:12.760000", "created": "2026-03-10T15:05:12.760000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1081, "hostname": 919 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aedf61385a8ad596c87774", "name": "Phishing | Mar 10, 2026 | Part 312/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 312/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:55:29.584000", "created": "2026-03-09T14:55:29.584000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 948, "domain": 1052 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8c2d947bd5ed88cc00e9", "name": "Phishing | Mar 9, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:48:13.327000", "created": "2026-03-08T14:48:13.327000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3b46bf99b81c4860b6bc", "name": "Phishing | Mar 8, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:50:46.172000", "created": "2026-03-07T14:50:46.172000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae96cfc601e23b7b919e2", "name": "Phishing | Mar 7, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:49:16.749000", "created": "2026-03-06T14:49:16.749000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99d4d4cb812f15c79c874", "name": "Phishing | Mar 6, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:12:13.438000", "created": "2026-03-05T15:12:13.438000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8468c77984c838e4a14bb", "name": "Phishing | Mar 5, 2026 | Part 313/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 313/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:49:48.505000", "created": "2026-03-04T14:49:48.505000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1322, "hostname": 678 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "team-form.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "team-form.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780308524.9696734 }