{ "type": "Domain", "indicator": "tokenukraine.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/tokenukraine.com", "alexa": "http://www.alexa.com/siteinfo/tokenukraine.com", "indicator": "tokenukraine.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3385548603, "indicator": "tokenukraine.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 35, "pulses": [ { "id": "69d2777cef89e0f388d3074e", "name": "Phishing | Apr 6, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 6, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-05T14:53:48.694000", "created": "2026-04-05T14:53:48.694000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "56 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69d11801c9579e2254ef7512", "name": "Phishing | Apr 5, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 5, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-04T13:54:09.468000", "created": "2026-04-04T13:54:09.468000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "57 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cfc6af9865d66bb8d29b14", "name": "Phishing | Apr 4, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 4, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-03T13:54:54.992000", "created": "2026-04-03T13:54:54.992000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "58 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ce75c305b66bafa980585a", "name": "Phishing | Apr 3, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 3, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-02T13:57:23.372000", "created": "2026-04-02T13:57:23.372000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "59 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cd258c9222bcc7cb2081dd", "name": "Phishing | Apr 2, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 2, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-01T14:02:52.048000", "created": "2026-04-01T14:02:52.048000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "60 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cbd310aa92b9b88a11501f", "name": "Phishing | Apr 1, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 1, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-31T13:58:40.163000", "created": "2026-03-31T13:58:40.163000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "61 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ca87f95286889b56cc7b3f", "name": "Phishing | Mar 31, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 31, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-30T14:26:01.440000", "created": "2026-03-30T14:26:01.440000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "62 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ca10886914e2d3119673d4", "name": "Phishing | Mar 30, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 30, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-30T05:56:24.270000", "created": "2026-03-30T05:56:24.270000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "62 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c93b9cb0d26cf131b90673", "name": "Phishing | Mar 30, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 30, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-29T14:47:56.946000", "created": "2026-03-29T14:47:56.946000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "63 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c69617bd9cc3bc6ad49c53", "name": "Phishing | Mar 28, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 28, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-27T14:37:11.717000", "created": "2026-03-27T14:37:11.717000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "65 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c2bd1b982aa5d781397b95", "name": "Phishing | Mar 25, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 25, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-24T16:34:35.281000", "created": "2026-03-24T16:34:35.281000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "68 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c14eb3e8d79c4e48fdae56", "name": "Phishing | Mar 24, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 24, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-23T14:31:15.938000", "created": "2026-03-23T14:31:15.938000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "69 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bffa2cfdec4f0332c8b496", "name": "Phishing | Mar 23, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 23, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-22T14:18:20.090000", "created": "2026-03-22T14:18:20.090000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "70 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bea9933d6b861b40b6c5f9", "name": "Phishing | Mar 22, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 22, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-21T14:22:11.427000", "created": "2026-03-21T14:22:11.427000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "71 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bd58a33bd6648e17cbe1e5", "name": "Phishing | Mar 21, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 21, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-20T14:24:35.579000", "created": "2026-03-20T14:24:35.579000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "72 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bc07660aa042dcadca4fdd", "name": "Phishing | Mar 20, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 20, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-19T14:25:42.943000", "created": "2026-03-19T14:25:42.943000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "73 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69bab56a7648bb7d94beec86", "name": "Phishing | Mar 19, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 19, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T14:23:38.680000", "created": "2026-03-18T14:23:38.680000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "74 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b9fd3bbc081eb1268df3ae", "name": "Phishing | Mar 18, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 18, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T01:17:47.713000", "created": "2026-03-18T01:17:47.713000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b9f8293441b98971b8ff86", "name": "Phishing | Mar 18, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 18, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-18T00:56:09.458000", "created": "2026-03-18T00:56:09.458000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b962da92e47516c0c45c52", "name": "Phishing | Mar 18, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 18, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-17T14:19:06.238000", "created": "2026-03-17T14:19:06.238000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "75 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b80b6464ff37c2b0f600f3", "name": "Phishing | Mar 17, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 17, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-16T13:53:40.964000", "created": "2026-03-16T13:53:40.964000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "76 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b6beda7fa8aa6a58463643", "name": "Phishing | Mar 16, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 16, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-15T14:14:50.943000", "created": "2026-03-15T14:14:50.943000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "77 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b56da4c665321cb2421596", "name": "Phishing | Mar 15, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 15, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-14T14:16:04.605000", "created": "2026-03-14T14:16:04.605000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "78 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b43eac60186e982161ec28", "name": "Phishing | Mar 14, 2026 | Part 79/445", "description": "Phishing indicators. Date: Mar 14, 2026. Part 79/445. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-13T16:43:24.605000", "created": "2026-03-13T16:43:24.605000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1623, "hostname": 233, "URL": 144 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "79 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b2d33945122bfb943aa76f", "name": "Phishing | Mar 13, 2026 | Part 64/430", "description": "Phishing indicators. Date: Mar 13, 2026. Part 64/430. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-12T14:52:41.867000", "created": "2026-03-12T14:52:41.867000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 980, "hostname": 498, "URL": 521 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "80 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b03360b8af4d953f171d21", "name": "Phishing | Mar 11, 2026 | Part 369/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 369/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:06:08.256000", "created": "2026-03-10T15:06:08.256000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 811, "domain": 1189 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915cf0bf91256ba262454e", "name": "Phishing | Feb 15, 2026 | Part 340/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 340/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:43:12.810000", "created": "2026-02-15T05:43:12.810000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 746, "domain": 1254 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908e75d4467d8b000801da", "name": "Phishing | Feb 15, 2026 | Part 344/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 344/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T15:02:13.578000", "created": "2026-02-14T15:02:13.578000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1318, "hostname": 682 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c6101a3f19501055713d1", "name": "Phishing | Feb 11, 2026 | Part 371/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 371/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:59:13.121000", "created": "2026-02-11T10:59:13.121000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1163, "hostname": 837 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981ab4c09f1455982da4992", "name": "Phishing | 2026-01-31 | Part 89/163", "description": "Phishing indicators. Date: 2026-01-31. Part 89/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:01:16.902000", "created": "2026-02-03T08:01:16.902000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 4251, "domain": 5749 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "117 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6272d0a114f1a4bc310cd136", "name": "Fake Ukraine Donation Sites", "description": "Fake Ukraine Donation Sites", "modified": "2022-05-04T19:14:41.959000", "created": "2022-05-04T19:14:41.959000", "tags": [ "ioc domain" ], "references": [ "IOCs for 03.02.2022 DTINS - Fake Ukraine Donation Sites.csv" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "oslo_fox", "id": "189057", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 5 }, "indicator_count": 5, "is_author": false, "is_subscribing": null, "subscriber_count": 40, "modified_text": "1488 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "623d62a88bcfdad21237257b", "name": "IsaacWiper Continues Trend of Wiper Attacks Against Ukraine", "description": "Recorded Future\u2019s report on the IsaacWiper malware, published on 1 March 2022, is published by the Insikt Group, a Russian-based cybersecurity group.. and is based in Ukraine.", "modified": "2022-03-25T06:35:20.756000", "created": "2022-03-25T06:35:20.756000", "tags": [ "wiper", "isaacwiper", "insikt", "remcom", "future", "push", "figure", "eset", "hermeticwiper", "ioctl call", "mtp20220324", "insikt group", "ukraine", "whispergate", "february", "suspicious", "twitter" ], "references": [ "https://go.recordedfuture.com/hubfs/reports/mtp-2022-0324.pdf", "https://www.recordedfuture.com/isaacwiper-continues-trend-wiper-attacks-against-ukraine/" ], "public": 1, "adversary": "", "targeted_countries": [ "Ukraine" ], "malware_families": [ { "id": "wiper", "display_name": "wiper", "target": null }, { "id": "IsaacWiper", "display_name": "IsaacWiper", "target": null }, { "id": "RemCom", "display_name": "RemCom", "target": null }, { "id": "Insikt", "display_name": "Insikt", "target": null } ], "attack_ids": [ { "id": "T1561", "name": "Disk Wipe", "display_name": "T1561 - Disk Wipe" }, { "id": "T1082", "name": "System Information Discovery", "display_name": "T1082 - System Information Discovery" }, { "id": "T1083", "name": "File and Directory Discovery", "display_name": "T1083 - File and Directory Discovery" } ], "industries": [ "Government" ], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohdrennis", "id": "138092", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 3, "FileHash-SHA1": 2, "FileHash-SHA256": 3, "YARA": 1, "domain": 6 }, "indicator_count": 15, "is_author": false, "is_subscribing": null, "subscriber_count": 358, "modified_text": "1528 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6221e8b99ce04bd1e8663ee1", "name": "DomainTools: Threat Monitoring Newly Created Ukraine-Related Domain Names", "description": "In order to help organizations monitor these threats, DomainTools is releasing a new, free feed of newly observed or registered Ukraine-related domain names. This feed will be updated daily, and will contain domains observed either through the DomainTools domain name discovery process or Farsight\u2019s passive DNS data feeds which match on a limited number of Ukraine-related terms. The specific terms we are filtering on are:\n\n \u2018ukraine\u2019\n \u2018ukrainian\u2019", "modified": "2022-03-04T10:24:16.071000", "created": "2022-03-04T10:23:53.310000", "tags": [ "domaintools", "attribution", "ccby" ], "references": [ "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-25.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-26.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-27.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-28.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-01.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-02.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-03.txt", "https://ukraine-domains.domaintools.com/", "https://www.domaintools.com/resources/blog/threat-monitoring-newly-created-ukraine-related-domain-names#" ], "public": 1, "adversary": "", "targeted_countries": [ "Ukraine" ], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 6, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "schrodinger", "id": "13179", "avatar_url": "/otxapi/users/avatar_image/media/avatars/schrodinger/resized/80/avatar_d6367d6cb9.jpg", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 3584, "hostname": 6 }, "indicator_count": 3590, "is_author": false, "is_subscribing": null, "subscriber_count": 96, "modified_text": "1549 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "621c663537e696ce607b9817", "name": "Beware of charity scams exploiting war in Ukraine | WeLiveSecurity", "description": "As the war in Ukraine intensifies, ESET security experts are reminding the public to be wary of scams exploiting the crisis and offer advice on how to help the people of the country in a time of crisis.", "modified": "2022-02-28T06:05:41.865000", "created": "2022-02-28T06:05:41.865000", "tags": [ "ukraine", "donate", "reddit user", "bitcoin", "twitter", "check", "avoid", "red cross", "save", "children", "valentine" ], "references": [ "https://www.welivesecurity.com/2022/02/27/beware-charity-scams-exploiting-war-ukraine/" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [ { "id": "T1566", "name": "Phishing", "display_name": "T1566 - Phishing" } ], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 12, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "mohdrennis", "id": "138092", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 7 }, "indicator_count": 7, "is_author": false, "is_subscribing": null, "subscriber_count": 356, "modified_text": "1553 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "62196b4fb787fc19ba12ac2d", "name": "Twitter Feed - ESETresearch - 26-02-2022", "description": "", "modified": "2022-02-25T23:50:38.872000", "created": "2022-02-25T23:50:38.872000", "tags": [], "references": [ "https://twitter.com/ESETresearch/status/1497194165561659394" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 2 }, "indicator_count": 2, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "1556 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://ltna.com.au/cyber", "https://www.recordedfuture.com/isaacwiper-continues-trend-wiper-attacks-against-ukraine/", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-26.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-28.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-01.txt", "https://www.domaintools.com/resources/blog/threat-monitoring-newly-created-ukraine-related-domain-names#", "IOCs for 03.02.2022 DTINS - Fake Ukraine Donation Sites.csv", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-03.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-25.txt", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-03-02.txt", "https://ukraine-domains.domaintools.com/", "https://ukraine-domains.domaintools.com/ukraine-domains-2022-02-27.txt", "https://www.welivesecurity.com/2022/02/27/beware-charity-scams-exploiting-war-ukraine/", "https://go.recordedfuture.com/hubfs/reports/mtp-2022-0324.pdf", "https://twitter.com/ESETresearch/status/1497194165561659394" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [ "Remcom", "Wiper", "Insikt", "Isaacwiper" ], "industries": [ "Government" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 35, "pulses": [ { "id": "69d2777cef89e0f388d3074e", "name": "Phishing | Apr 6, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 6, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-05T14:53:48.694000", "created": "2026-04-05T14:53:48.694000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "56 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69d11801c9579e2254ef7512", "name": "Phishing | Apr 5, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 5, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-04T13:54:09.468000", "created": "2026-04-04T13:54:09.468000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "57 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cfc6af9865d66bb8d29b14", "name": "Phishing | Apr 4, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 4, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-03T13:54:54.992000", "created": "2026-04-03T13:54:54.992000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "58 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ce75c305b66bafa980585a", "name": "Phishing | Apr 3, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 3, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-02T13:57:23.372000", "created": "2026-04-02T13:57:23.372000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "59 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cd258c9222bcc7cb2081dd", "name": "Phishing | Apr 2, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 2, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-04-01T14:02:52.048000", "created": "2026-04-01T14:02:52.048000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "60 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69cbd310aa92b9b88a11501f", "name": "Phishing | Apr 1, 2026 | Part 84/450", "description": "Phishing indicators. Date: Apr 1, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-31T13:58:40.163000", "created": "2026-03-31T13:58:40.163000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "61 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ca87f95286889b56cc7b3f", "name": "Phishing | Mar 31, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 31, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-30T14:26:01.440000", "created": "2026-03-30T14:26:01.440000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 93, "modified_text": "62 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ca10886914e2d3119673d4", "name": "Phishing | Mar 30, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 30, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-30T05:56:24.270000", "created": "2026-03-30T05:56:24.270000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "62 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c93b9cb0d26cf131b90673", "name": "Phishing | Mar 30, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 30, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-29T14:47:56.946000", "created": "2026-03-29T14:47:56.946000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "63 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c69617bd9cc3bc6ad49c53", "name": "Phishing | Mar 28, 2026 | Part 84/450", "description": "Phishing indicators. Date: Mar 28, 2026. Part 84/450. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-27T14:37:11.717000", "created": "2026-03-27T14:37:11.717000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1544, "hostname": 210, "URL": 245 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "65 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "tokenukraine.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "tokenukraine.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780280096.4258244 }