{ "type": "Domain", "indicator": "willowcreativems.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/willowcreativems.com", "alexa": "http://www.alexa.com/siteinfo/willowcreativems.com", "indicator": "willowcreativems.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3824830611, "indicator": "willowcreativems.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 33, "pulses": [ { "id": "63d10e46581edfe9bba0da3f", "name": "Microsoft Phishing Collection", "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-05-31T01:39:52.036000", "created": "2023-01-25T11:11:02.458000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3160160, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14, "hostname": 49, "domain": 21 }, "indicator_count": 84, "is_author": false, "is_subscribing": null, "subscriber_count": 978, "modified_text": "1 day ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b03437b3d951543f94668b", "name": "Phishing | Mar 11, 2026 | Part 398/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 398/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:09:43.821000", "created": "2026-03-10T15:09:43.821000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 946, "hostname": 1053 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aee06acbe13a76ee2724a1", "name": "Phishing | Mar 10, 2026 | Part 348/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 348/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:59:54.848000", "created": "2026-03-09T14:59:54.848000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1127, "domain": 872 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8d2f3280da5daed0d81c", "name": "Phishing | Mar 9, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:52:31.356000", "created": "2026-03-08T14:52:31.356000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 723, "hostname": 1276 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3c4a23ce092ae7e81f3f", "name": "Phishing | Mar 8, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:55:06.140000", "created": "2026-03-07T14:55:06.140000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 723, "hostname": 1276 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aaea6be949f4d8953071b6", "name": "Phishing | Mar 7, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:53:31.521000", "created": "2026-03-06T14:53:31.521000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 724, "hostname": 1275 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99e549f0ca07eb713c70a", "name": "Phishing | Mar 6, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:16:36.517000", "created": "2026-03-05T15:16:36.517000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 722, "hostname": 1277 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8479c8bac86670df1a2f4", "name": "Phishing | Mar 5, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:54:20.456000", "created": "2026-03-04T14:54:20.456000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 721 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f4e115cac0453440458b", "name": "Phishing | Mar 4, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:49:05.453000", "created": "2026-03-03T14:49:05.453000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 721, "hostname": 1278 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5badd0ec09b4d737f4524", "name": "Phishing | Mar 3, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:29:17.487000", "created": "2026-03-02T16:29:17.487000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 721 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a518ed4e30fb6547e0332b", "name": "Phishing | Mar 2, 2026 | Part 351/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 351/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:58:21.464000", "created": "2026-03-02T04:58:21.464000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1279, "domain": 720 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a4458f7c12037d8590e726", "name": "Phishing | Mar 2, 2026 | Part 354/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 354/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:56:31.806000", "created": "2026-03-01T13:56:31.806000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1108, "domain": 891 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40b39ef068a677917f650", "name": "Phishing | Mar 1, 2026 | Part 354/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 354/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:47:37.250000", "created": "2026-03-01T09:47:37.250000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1108, "domain": 891 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a389c5100946f633085815", "name": "Phishing | Mar 1, 2026 | Part 355/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 355/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:35:17.242000", "created": "2026-03-01T00:35:17.242000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 949, "hostname": 1050 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6998006fdc93fedf78731787", "name": "Phishing | Feb 20, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:34:23.054000", "created": "2026-02-20T06:34:23.054000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1105, "hostname": 894 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69976e4ca004f8524b12e8d3", "name": "Phishing | Feb 20, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T20:10:52.761000", "created": "2026-02-19T20:10:52.761000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1105, "hostname": 894 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69972f4c21af5432bcb5640f", "name": "Phishing | Feb 20, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:42:04.621000", "created": "2026-02-19T15:42:04.621000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1105, "hostname": 894 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69970ff7727d663052ccb773", "name": "Phishing | Feb 19, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T13:28:23.867000", "created": "2026-02-19T13:28:23.867000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1106, "hostname": 893 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699639bdbf62156b26366bec", "name": "Phishing | Feb 19, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T22:14:21.167000", "created": "2026-02-18T22:14:21.167000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1106, "hostname": 893 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69957a6fc4a62bdb660c34e8", "name": "Phishing | Feb 18, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:38:07.255000", "created": "2026-02-18T08:38:07.255000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1107, "hostname": 892 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69949eebb08c1d8a8cef1705", "name": "Phishing | Feb 18, 2026 | Part 357/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 357/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T17:01:31.928000", "created": "2026-02-17T17:01:31.928000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 1107, "hostname": 892 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69929cf7e645fd483bc3fff8", "name": "Phishing | Feb 16, 2026 | Part 363/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 363/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T04:28:39.916000", "created": "2026-02-16T04:28:39.916000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1219, "domain": 780 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915dd58d804ca26db42f35", "name": "Phishing | Feb 15, 2026 | Part 371/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 371/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:47:01.168000", "created": "2026-02-15T05:47:01.168000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1264, "domain": 735 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908f557793934e599c2173", "name": "Phishing | Feb 15, 2026 | Part 375/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 375/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T15:05:57.530000", "created": "2026-02-14T15:05:57.530000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1155, "domain": 844 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "107 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6783308fc0b6e2bd8dfb209c", "name": "TTC-CERT_blocklist_recommended", "description": "", "modified": "2026-02-14T00:03:07.406000", "created": "2025-01-12T03:01:35.075000", "tags": [], "references": [ "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "skocherhan", "id": "249290", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 606, "URL": 4, "domain": 25122, "hostname": 25306 }, "indicator_count": 51038, "is_author": false, "is_subscribing": null, "subscriber_count": 187, "modified_text": "107 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c61e7106625237a8ac0f1", "name": "Phishing | Feb 11, 2026 | Part 403/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 403/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T11:03:03.605000", "created": "2026-02-11T11:03:03.605000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1023, "domain": 976 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "110 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981abb45e279f160479c967", "name": "Phishing | 2026-01-31 | Part 96/163", "description": "Phishing indicators. Date: 2026-01-31. Part 96/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T08:03:00.851000", "created": "2026-02-03T08:03:00.851000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 6185, "domain": 3814 }, "indicator_count": 9999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "118 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "688f1877ae2224ff454d2436", "name": "Microsoft Phishing Collection - Follow: https://twitter.com/noladefense", "description": "", "modified": "2025-08-03T08:06:15.561000", "created": "2025-08-03T08:06:15.561000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Q.Vashti", "id": "337942", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 10, "hostname": 44, "domain": 18 }, "indicator_count": 72, "is_author": false, "is_subscribing": null, "subscriber_count": 141, "modified_text": "302 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "65c1799fd50ef5ec3ed85f71", "name": "Twitter Feed - noladefense - 05-02-2024", "description": "", "modified": "2024-03-07T00:02:47.028000", "created": "2024-02-06T00:13:19.914000", "tags": [ "phishing" ], "references": [ "https://twitter.com/noladefense/status/1754302086102012065", "https://twitter.com/noladefense/status/1754303399732908271", "https://twitter.com/noladefense/status/1754303424835826008", "https://twitter.com/noladefense/status/1754303434738536824", "https://twitter.com/noladefense/status/1754303473657565221", "https://twitter.com/noladefense/status/1754303480959787409", "https://twitter.com/noladefense/status/1754303494310215807", "https://twitter.com/noladefense/status/1754303502539473147", "https://twitter.com/noladefense/status/1754303511947284880", "https://twitter.com/noladefense/status/1754303513008513385", "https://twitter.com/noladefense/status/1754303520499519716", "https://twitter.com/noladefense/status/1754303537402483101", "https://twitter.com/noladefense/status/1754303538744725939", "https://twitter.com/noladefense/status/1754306182620016656", "https://twitter.com/noladefense/status/1754312982828339266", "https://twitter.com/noladefense/status/1754313051807891700", "https://twitter.com/noladefense/status/1754313294926533094", "https://twitter.com/noladefense/status/1754314627062599903", "https://twitter.com/noladefense/status/1754314685602574343", "https://twitter.com/noladefense/status/1754314743983047041", "https://twitter.com/noladefense/status/1754314824152928279", "https://twitter.com/noladefense/status/1754314898832568528", "https://twitter.com/noladefense/status/1754314955673739437", "https://twitter.com/noladefense/status/1754316581977374809", "https://twitter.com/noladefense/status/1754316644552261949", "https://twitter.com/noladefense/status/1754316705344442548", "https://twitter.com/noladefense/status/1754316766090526989", "https://twitter.com/noladefense/status/1754318134075617778", "https://twitter.com/noladefense/status/1754318188454559997", "https://twitter.com/noladefense/status/1754318245702648165", "https://twitter.com/noladefense/status/1754318298810921117", "https://twitter.com/noladefense/status/1754318559667167739", "https://twitter.com/noladefense/status/1754318582102511706", "https://twitter.com/noladefense/status/1754318607503290403", "https://twitter.com/noladefense/status/1754319767488368811", "https://twitter.com/noladefense/status/1754319839508701685", "https://twitter.com/noladefense/status/1754323236106506577", "https://twitter.com/noladefense/status/1754323401529753801", "https://twitter.com/noladefense/status/1754323457859367295", "https://twitter.com/noladefense/status/1754324868898709989", "https://twitter.com/noladefense/status/1754326285994664145", "https://twitter.com/noladefense/status/1754328903269626026", "https://twitter.com/noladefense/status/1754333821917397003", "https://twitter.com/noladefense/status/1754333829135749289", "https://twitter.com/noladefense/status/1754333831417438469", "https://twitter.com/noladefense/status/1754333844415598597", "https://twitter.com/noladefense/status/1754333867685687679", "https://twitter.com/noladefense/status/1754334394800640456", "https://twitter.com/noladefense/status/1754334897307541592", "https://twitter.com/noladefense/status/1754335655163797575", "https://twitter.com/noladefense/status/1754335949545226244", "https://twitter.com/noladefense/status/1754336247579922488", "https://twitter.com/noladefense/status/1754336497312952409", "https://twitter.com/noladefense/status/1754338180935848276", "https://twitter.com/noladefense/status/1754338602002030873", "https://twitter.com/noladefense/status/1754339254660944362", "https://twitter.com/noladefense/status/1754340780213166476", "https://twitter.com/noladefense/status/1754348731808309569", "https://twitter.com/noladefense/status/1754348754218479767", "https://twitter.com/noladefense/status/1754348772937642008", "https://twitter.com/noladefense/status/1754348794508894479", "https://twitter.com/noladefense/status/1754348799806320790", "https://twitter.com/noladefense/status/1754348807389626539", "https://twitter.com/noladefense/status/1754348824976375925", "https://twitter.com/noladefense/status/1754348828898074890", "https://twitter.com/noladefense/status/1754348839182491966", "https://twitter.com/noladefense/status/1754348854567227876", "https://twitter.com/noladefense/status/1754348856798535708", "https://twitter.com/noladefense/status/1754348868018335756", "https://twitter.com/noladefense/status/1754354846130471397", "https://twitter.com/noladefense/status/1754363624519266608", "https://twitter.com/noladefense/status/1754368129805729843", "https://twitter.com/noladefense/status/1754369497694130199", "https://twitter.com/noladefense/status/1754374670915113012", "https://twitter.com/noladefense/status/1754378793794367945", "https://twitter.com/noladefense/status/1754378816300978517", "https://twitter.com/noladefense/status/1754381851118985630", "https://twitter.com/noladefense/status/1754388012832583907", "https://twitter.com/noladefense/status/1754393502266388938", "https://twitter.com/noladefense/status/1754393872484962658", "https://twitter.com/noladefense/status/1754394008028160458", "https://twitter.com/noladefense/status/1754397437559546198", "https://twitter.com/noladefense/status/1754400425506140497", "https://twitter.com/noladefense/status/1754410747105321349", "https://twitter.com/noladefense/status/1754414939131768892", "https://twitter.com/noladefense/status/1754421371809997179", "https://twitter.com/noladefense/status/1754424145046106172", "https://twitter.com/noladefense/status/1754439162332119072", "https://twitter.com/noladefense/status/1754439176785666558", "https://twitter.com/noladefense/status/1754439243143790603", "https://twitter.com/noladefense/status/1754439263733625261", "https://twitter.com/noladefense/status/1754454227227685139", "https://twitter.com/noladefense/status/1754454295385162166", "https://twitter.com/noladefense/status/1754454292994330702", "https://twitter.com/noladefense/status/1754454317728178307", "https://twitter.com/noladefense/status/1754454343657370064", "https://twitter.com/noladefense/status/1754454356420681900", "https://twitter.com/noladefense/status/1754460267487113304", "https://twitter.com/noladefense/status/1754462116939993565", "https://twitter.com/noladefense/status/1754462176138428764", "https://twitter.com/noladefense/status/1754467858480800118", "https://twitter.com/noladefense/status/1754469365678792805", "https://twitter.com/noladefense/status/1754481732319858869" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-SHA256": 100, "URL": 88, "domain": 69, "hostname": 18, "FileHash-MD5": 3 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "816 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65d39a15a654825fc9781462", "name": "Microsoft Phishing Collection", "description": "", "modified": "2024-02-19T18:12:37.807000", "created": "2024-02-19T18:12:37.807000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "63d10e46581edfe9bba0da3f", "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "Enqrypted", "id": "272105", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_272105/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 8, "hostname": 8, "domain": 2 }, "indicator_count": 18, "is_author": false, "is_subscribing": null, "subscriber_count": 57, "modified_text": "832 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "65cc05973f373f804cdfba5e", "name": "Malware Filter - Phishing List - 13-02-2024", "description": "", "modified": "2024-02-14T00:13:11.474000", "created": "2024-02-14T00:13:11.474000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 9, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 17678, "domain": 3650 }, "indicator_count": 21328, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "838 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65b1a7bce9d95d98a8570021", "name": "Malware Filter - Phishing List - 24-01-2024", "description": "", "modified": "2024-01-25T00:13:48.536000", "created": "2024-01-25T00:13:48.536000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 7, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 581, "hostname": 1026 }, "indicator_count": 1607, "is_author": false, "is_subscribing": null, "subscriber_count": 1624, "modified_text": "858 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "65a86c45f9b32b47cafcf282", "name": "Malware Filter - Phishing List - 17-01-2024", "description": "", "modified": "2024-01-18T00:09:41.170000", "created": "2024-01-18T00:09:41.170000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 10, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 154, "domain": 75 }, "indicator_count": 229, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "865 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://twitter.com/noladefense/status/1754316644552261949", "https://twitter.com/noladefense/status/1754319839508701685", "https://twitter.com/noladefense/status/1754469365678792805", "https://twitter.com/noladefense/status/1754318607503290403", "https://twitter.com/noladefense/status/1754348824976375925", "https://twitter.com/noladefense/status/1754335949545226244", "https://twitter.com/noladefense/status/1754369497694130199", "https://twitter.com/noladefense/status/1754454356420681900", "https://twitter.com/noladefense/status/1754314898832568528", "https://twitter.com/noladefense/status/1754454343657370064", "https://twitter.com/noladefense/status/1754318298810921117", "https://twitter.com/noladefense/status/1754348807389626539", "https://twitter.com/noladefense/status/1754454295385162166", "https://twitter.com/noladefense/status/1754410747105321349", "https://twitter.com/noladefense/status/1754303473657565221", "https://twitter.com/noladefense/status/1754303520499519716", "https://twitter.com/noladefense/status/1754378816300978517", "https://twitter.com/noladefense/status/1754338602002030873", "https://twitter.com/noladefense/status/1754318582102511706", "https://twitter.com/noladefense/status/1754421371809997179", "https://twitter.com/noladefense/status/1754348856798535708", "https://twitter.com/noladefense/status/1754303502539473147", "https://twitter.com/noladefense/status/1754303537402483101", "https://twitter.com/noladefense/status/1754400425506140497", "https://twitter.com/noladefense/status/1754316705344442548", "https://twitter.com/noladefense/status/1754336497312952409", "https://twitter.com/noladefense/status/1754333844415598597", "https://twitter.com/noladefense/status/1754394008028160458", "https://twitter.com/noladefense/status/1754439176785666558", "https://twitter.com/noladefense/status/1754348731808309569", "https://twitter.com/noladefense/status/1754378793794367945", "https://twitter.com/noladefense/status/1754333831417438469", "https://twitter.com/noladefense/status/1754363624519266608", "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70", "https://twitter.com/noladefense/status/1754348839182491966", "https://twitter.com/noladefense/status/1754314743983047041", "https://twitter.com/noladefense/status/1754348754218479767", "https://twitter.com/noladefense/status/1754381851118985630", "https://twitter.com/noladefense/status/1754462116939993565", "https://twitter.com/noladefense/status/1754306182620016656", "https://twitter.com/noladefense/status/1754303494310215807", "https://twitter.com/noladefense/status/1754313051807891700", "https://twitter.com/noladefense/status/1754348854567227876", "https://twitter.com/noladefense/status/1754313294926533094", "https://twitter.com/noladefense/status/1754302086102012065", "https://twitter.com/noladefense/status/1754340780213166476", "https://twitter.com/noladefense/status/1754388012832583907", "https://twitter.com/noladefense/status/1754439263733625261", "https://twitter.com/noladefense/status/1754303513008513385", "https://twitter.com/noladefense/status/1754326285994664145", "https://twitter.com/noladefense/status/1754338180935848276", "https://twitter.com/noladefense/status/1754462176138428764", "https://twitter.com/noladefense/status/1754328903269626026", "https://github.com/ttc-cert/TTC-CERT_blocklist_recommended/blob/master/domain_blocklist_recommended.txt", "https://twitter.com/noladefense/status/1754333867685687679", "https://twitter.com/noladefense/status/1754348828898074890", "https://twitter.com/noladefense/status/1754393502266388938", "https://twitter.com/noladefense/status/1754333821917397003", "https://twitter.com/noladefense/status/1754414939131768892", "https://twitter.com/noladefense/status/1754316766090526989", "https://twitter.com/noladefense/status/1754335655163797575", "https://twitter.com/noladefense/status/1754318559667167739", "https://twitter.com/noladefense/status/1754323401529753801", "https://twitter.com/noladefense/status/1754454292994330702", "https://twitter.com/noladefense/status/1754314955673739437", "https://twitter.com/noladefense/status/1754439243143790603", "https://twitter.com/noladefense/status/1754318245702648165", "https://twitter.com/noladefense/status/1754303424835826008", "https://ltna.com.au/cyber", "https://twitter.com/noladefense/status/1754318134075617778", "https://twitter.com/noladefense/status/1754393872484962658", "https://twitter.com/noladefense/status/1754303399732908271", "https://twitter.com/noladefense/status/1754319767488368811", "https://twitter.com/noladefense/status/1754323457859367295", "https://twitter.com/noladefense/status/1754348799806320790", "https://twitter.com/noladefense/status/1754368129805729843", "https://twitter.com/noladefense/status/1754334897307541592", "https://twitter.com/noladefense/status/1754397437559546198", "https://twitter.com/noladefense/status/1754303511947284880", "https://twitter.com/noladefense/status/1754348868018335756", "https://twitter.com/noladefense/status/1754348794508894479", "https://twitter.com/noladefense/status/1754454227227685139", "https://twitter.com/noladefense/status/1754467858480800118", "https://twitter.com/noladefense/status/1754334394800640456", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://twitter.com/noladefense/status/1754312982828339266", "https://twitter.com/noladefense/status/1754481732319858869", "https://twitter.com/noladefense/status/1754303538744725939", "https://twitter.com/noladefense/status/1754314627062599903", "https://twitter.com/noladefense/status/1754374670915113012", "https://twitter.com/noladefense/status/1754316581977374809", "https://twitter.com/noladefense/status/1754314685602574343", "https://twitter.com/noladefense/status/1754439162332119072", "https://twitter.com/noladefense/status/1754454317728178307", "https://twitter.com/noladefense/status/1754354846130471397", "https://twitter.com/noladefense/status/1754348772937642008", "https://twitter.com/noladefense/status/1754460267487113304", "https://twitter.com/noladefense/status/1754303480959787409", "https://twitter.com/noladefense/status/1754303434738536824", "https://twitter.com/noladefense/status/1754333829135749289", "https://twitter.com/noladefense/status/1754339254660944362", "https://twitter.com/noladefense/status/1754424145046106172", "https://twitter.com/noladefense/status/1754314824152928279", "https://twitter.com/noladefense/status/1754318188454559997", "https://twitter.com/noladefense/status/1754324868898709989", "https://twitter.com/noladefense/status/1754323236106506577", "https://twitter.com/noladefense/status/1754336247579922488" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 33, "pulses": [ { "id": "63d10e46581edfe9bba0da3f", "name": "Microsoft Phishing Collection", "description": "This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com\nNOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense", "modified": "2026-05-31T01:39:52.036000", "created": "2023-01-25T11:11:02.458000", "tags": [ "urls", "phishing", "scam", "microsoft" ], "references": [ "https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3160160, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "noladefense", "id": "222814", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_222814/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 14, "hostname": 49, "domain": 21 }, "indicator_count": 84, "is_author": false, "is_subscribing": null, "subscriber_count": 978, "modified_text": "1 day ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69b03437b3d951543f94668b", "name": "Phishing | Mar 11, 2026 | Part 398/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 398/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:09:43.821000", "created": "2026-03-10T15:09:43.821000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 946, "hostname": 1053 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aee06acbe13a76ee2724a1", "name": "Phishing | Mar 10, 2026 | Part 348/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 348/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:59:54.848000", "created": "2026-03-09T14:59:54.848000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1127, "domain": 872 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad8d2f3280da5daed0d81c", "name": "Phishing | Mar 9, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:52:31.356000", "created": "2026-03-08T14:52:31.356000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 723, "hostname": 1276 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac3c4a23ce092ae7e81f3f", "name": "Phishing | Mar 8, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:55:06.140000", "created": "2026-03-07T14:55:06.140000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 723, "hostname": 1276 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aaea6be949f4d8953071b6", "name": "Phishing | Mar 7, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:53:31.521000", "created": "2026-03-06T14:53:31.521000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 724, "hostname": 1275 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a99e549f0ca07eb713c70a", "name": "Phishing | Mar 6, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T15:16:36.517000", "created": "2026-03-05T15:16:36.517000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 722, "hostname": 1277 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a8479c8bac86670df1a2f4", "name": "Phishing | Mar 5, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:54:20.456000", "created": "2026-03-04T14:54:20.456000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 721 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6f4e115cac0453440458b", "name": "Phishing | Mar 4, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:49:05.453000", "created": "2026-03-03T14:49:05.453000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 721, "hostname": 1278 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5badd0ec09b4d737f4524", "name": "Phishing | Mar 3, 2026 | Part 349/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 349/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:29:17.487000", "created": "2026-03-02T16:29:17.487000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1278, "domain": 721 }, "indicator_count": 1999, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "willowcreativems.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "willowcreativems.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780336504.449681 }