{ "type": "Domain", "indicator": "0123656.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/0123656.com", "alexa": "http://www.alexa.com/siteinfo/0123656.com", "indicator": "0123656.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3563859600, "indicator": "0123656.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 12, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c08867316c564ade394c69", "name": "PhishDestroy \u2014 Content Active Threats (Live)", "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json", "modified": "2026-05-21T12:06:19.702000", "created": "2026-03-23T00:25:09.116000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy", "active", "content" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 132502, "hostname": 66217 }, "indicator_count": 198719, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "10 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b02913e1ae74d8a850136d", "name": "Phishing | Mar 11, 2026 | Part 6/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 6/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:22:11.153000", "created": "2026-03-10T14:22:11.153000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1380, "domain": 620 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69113f342655c84967a99cb3", "name": "Twitter Feed - CarlyGriggs13 - 09-11-2025", "description": "", "modified": "2025-11-10T01:26:12.717000", "created": "2025-11-10T01:26:12.717000", "tags": [ "phishing", "scam" ], "references": [ "https://x.com/CarlyGriggs13/status/1987575479935918129", "https://x.com/CarlyGriggs13/status/1987575608637862185", "https://x.com/CarlyGriggs13/status/1987575750053306552", "https://x.com/CarlyGriggs13/status/1987575865501217204", "https://x.com/CarlyGriggs13/status/1987576009537843342", "https://x.com/CarlyGriggs13/status/1987576132657385487", "https://x.com/CarlyGriggs13/status/1987576289130111103", "https://x.com/CarlyGriggs13/status/1987576565203345685", "https://x.com/CarlyGriggs13/status/1987576680211218855", "https://x.com/CarlyGriggs13/status/1987576819152019503", "https://x.com/CarlyGriggs13/status/1987576962169069799", "https://x.com/CarlyGriggs13/status/1987580810803695679", "https://x.com/CarlyGriggs13/status/1987580929720635500", "https://x.com/CarlyGriggs13/status/1987581052567654614", "https://x.com/CarlyGriggs13/status/1987581173833531633", "https://x.com/CarlyGriggs13/status/1987581315168788785", "https://x.com/CarlyGriggs13/status/1987581437902536743", "https://x.com/CarlyGriggs13/status/1987581556504850566", "https://x.com/CarlyGriggs13/status/1987581705973084237", "https://x.com/CarlyGriggs13/status/1987581836751438253", "https://x.com/CarlyGriggs13/status/1987581971979968934", "https://x.com/CarlyGriggs13/status/1987582096987095502", "https://x.com/CarlyGriggs13/status/1987582890507407642", "https://x.com/CarlyGriggs13/status/1987596173142872192", "https://x.com/CarlyGriggs13/status/1987596284912345307", "https://x.com/CarlyGriggs13/status/1987596383663325364", "https://x.com/CarlyGriggs13/status/1987596506526785585", "https://x.com/CarlyGriggs13/status/1987596613037244893", "https://x.com/CarlyGriggs13/status/1987596817597415705", "https://x.com/CarlyGriggs13/status/1987596947855970782", "https://x.com/CarlyGriggs13/status/1987597085890289667", "https://x.com/CarlyGriggs13/status/1987597181138657761", "https://x.com/CarlyGriggs13/status/1987597315365122127", "https://x.com/CarlyGriggs13/status/1987597449498972524", "https://x.com/CarlyGriggs13/status/1987601010190061568", "https://x.com/CarlyGriggs13/status/1987601144953131222", "https://x.com/CarlyGriggs13/status/1987601290537390389", "https://x.com/CarlyGriggs13/status/1987601540056797258", "https://x.com/CarlyGriggs13/status/1987601673163001875", "https://x.com/CarlyGriggs13/status/1987601789756039367", "https://x.com/CarlyGriggs13/status/1987601903954588139", "https://x.com/CarlyGriggs13/status/1987601999613882396", "https://x.com/CarlyGriggs13/status/1987602136352293331", "https://x.com/CarlyGriggs13/status/1987602247010668612", "https://x.com/CarlyGriggs13/status/1987602358520389925", "https://x.com/CarlyGriggs13/status/1987602494982156555", "https://x.com/CarlyGriggs13/status/1987606129514328466", "https://x.com/CarlyGriggs13/status/1987606239178543443", "https://x.com/CarlyGriggs13/status/1987606458611982519", "https://x.com/CarlyGriggs13/status/1987606573753987311", "https://x.com/CarlyGriggs13/status/1987606703639015777", "https://x.com/CarlyGriggs13/status/1987606821998150054", "https://x.com/CarlyGriggs13/status/1987606947139359150", "https://x.com/CarlyGriggs13/status/1987607065531920879", "https://x.com/CarlyGriggs13/status/1987607186537845061", "https://x.com/CarlyGriggs13/status/1987607314938122710", "https://x.com/CarlyGriggs13/status/1987607455958712598", "https://x.com/CarlyGriggs13/status/1987609253851353101", "https://x.com/CarlyGriggs13/status/1987611218232651917", "https://x.com/CarlyGriggs13/status/1987611323530957131", "https://x.com/CarlyGriggs13/status/1987611905654186048", "https://x.com/CarlyGriggs13/status/1987612022947946771", "https://x.com/CarlyGriggs13/status/1987612141788987677", "https://x.com/CarlyGriggs13/status/1987612270936072332", "https://x.com/CarlyGriggs13/status/1987612653074747748", "https://x.com/CarlyGriggs13/status/1987616033478193380", "https://x.com/CarlyGriggs13/status/1987616141104013640", "https://x.com/CarlyGriggs13/status/1987616640331297141", "https://x.com/CarlyGriggs13/status/1987616764247851331", "https://x.com/CarlyGriggs13/status/1987617114572591432", "https://x.com/CarlyGriggs13/status/1987617256864649550", "https://x.com/CarlyGriggs13/status/1987617522816860492", "https://x.com/CarlyGriggs13/status/1987617651779121222", "https://x.com/CarlyGriggs13/status/1987621309153419655", "https://x.com/CarlyGriggs13/status/1987621417047699898", "https://x.com/CarlyGriggs13/status/1987621549067690369", "https://x.com/CarlyGriggs13/status/1987621893193466032", "https://x.com/CarlyGriggs13/status/1987622578350121055", "https://x.com/CarlyGriggs13/status/1987622813851644188", "https://x.com/CarlyGriggs13/status/1987623586043969559", "https://x.com/CarlyGriggs13/status/1987624991354212533", "https://x.com/CarlyGriggs13/status/1987625090809295033", "https://x.com/CarlyGriggs13/status/1987625214902153664", "https://x.com/CarlyGriggs13/status/1987625415264043126", "https://x.com/CarlyGriggs13/status/1987625509686009948", "https://x.com/CarlyGriggs13/status/1987629975768613285", "https://x.com/CarlyGriggs13/status/1987634549090668819", "https://x.com/CarlyGriggs13/status/1987635934490190074", "https://x.com/CarlyGriggs13/status/1987636477971300530", "https://x.com/CarlyGriggs13/status/1987637641618096495", "https://x.com/CarlyGriggs13/status/1987656612153106747", "https://x.com/CarlyGriggs13/status/1987656746429456636", "https://x.com/CarlyGriggs13/status/1987656860539785479", "https://x.com/CarlyGriggs13/status/1987656988256313492", "https://x.com/CarlyGriggs13/status/1987657114009915473", "https://x.com/CarlyGriggs13/status/1987657229173162200", "https://x.com/CarlyGriggs13/status/1987657328129175770", "https://x.com/CarlyGriggs13/status/1987657437231419472", "https://x.com/CarlyGriggs13/status/1987657575916032412", "https://x.com/CarlyGriggs13/status/1987657692337611229", "https://x.com/CarlyGriggs13/status/1987657787313127462", "https://x.com/CarlyGriggs13/status/1987657900303487175", "https://x.com/CarlyGriggs13/status/1987658005756981270", "https://x.com/CarlyGriggs13/status/1987658127458910261" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 104, "domain": 36, "hostname": 68 }, "indicator_count": 208, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "202 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6462be48489bc5a8f45949bc", "name": "Malware Filter - Phishing List - 15-05-2023", "description": "", "modified": "2023-05-15T23:20:40.584000", "created": "2023-05-15T23:20:40.584000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 150, "hostname": 263 }, "indicator_count": 413, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "1111 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://x.com/CarlyGriggs13/status/1987581052567654614", "https://x.com/CarlyGriggs13/status/1987612270936072332", "https://x.com/CarlyGriggs13/status/1987582890507407642", "https://x.com/CarlyGriggs13/status/1987617114572591432", "https://x.com/CarlyGriggs13/status/1987581437902536743", "https://x.com/CarlyGriggs13/status/1987656860539785479", "https://x.com/CarlyGriggs13/status/1987576132657385487", "https://x.com/CarlyGriggs13/status/1987576009537843342", "https://x.com/CarlyGriggs13/status/1987596173142872192", "https://x.com/CarlyGriggs13/status/1987611905654186048", "https://x.com/CarlyGriggs13/status/1987616640331297141", "https://x.com/CarlyGriggs13/status/1987581705973084237", "https://x.com/CarlyGriggs13/status/1987596284912345307", "https://x.com/CarlyGriggs13/status/1987601540056797258", "https://x.com/CarlyGriggs13/status/1987581173833531633", "https://x.com/CarlyGriggs13/status/1987622813851644188", "https://x.com/CarlyGriggs13/status/1987657575916032412", "https://x.com/CarlyGriggs13/status/1987596506526785585", "https://x.com/CarlyGriggs13/status/1987634549090668819", "https://x.com/CarlyGriggs13/status/1987657328129175770", "https://x.com/CarlyGriggs13/status/1987575865501217204", "https://x.com/CarlyGriggs13/status/1987576819152019503", "https://x.com/CarlyGriggs13/status/1987637641618096495", "https://x.com/CarlyGriggs13/status/1987575479935918129", "https://x.com/CarlyGriggs13/status/1987625415264043126", "https://x.com/CarlyGriggs13/status/1987621417047699898", "https://x.com/CarlyGriggs13/status/1987612141788987677", "https://x.com/CarlyGriggs13/status/1987616033478193380", "https://x.com/CarlyGriggs13/status/1987596613037244893", "https://x.com/CarlyGriggs13/status/1987607065531920879", "https://x.com/CarlyGriggs13/status/1987625214902153664", "https://x.com/CarlyGriggs13/status/1987606239178543443", "https://x.com/CarlyGriggs13/status/1987612653074747748", "https://x.com/CarlyGriggs13/status/1987616764247851331", "https://x.com/CarlyGriggs13/status/1987581315168788785", "https://x.com/CarlyGriggs13/status/1987657229173162200", "https://x.com/CarlyGriggs13/status/1987602247010668612", "https://x.com/CarlyGriggs13/status/1987656988256313492", "https://x.com/CarlyGriggs13/status/1987606129514328466", "https://x.com/CarlyGriggs13/status/1987601903954588139", "https://x.com/CarlyGriggs13/status/1987596817597415705", "https://x.com/CarlyGriggs13/status/1987582096987095502", "https://x.com/CarlyGriggs13/status/1987601144953131222", "https://x.com/CarlyGriggs13/status/1987656612153106747", "https://x.com/CarlyGriggs13/status/1987656746429456636", "https://x.com/CarlyGriggs13/status/1987580929720635500", "https://x.com/CarlyGriggs13/status/1987597181138657761", "https://x.com/CarlyGriggs13/status/1987601673163001875", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://x.com/CarlyGriggs13/status/1987601789756039367", "https://x.com/CarlyGriggs13/status/1987609253851353101", "https://x.com/CarlyGriggs13/status/1987621549067690369", "https://x.com/CarlyGriggs13/status/1987625090809295033", "https://x.com/CarlyGriggs13/status/1987602494982156555", "https://x.com/CarlyGriggs13/status/1987576565203345685", "https://x.com/CarlyGriggs13/status/1987596947855970782", "https://x.com/CarlyGriggs13/status/1987581556504850566", "https://x.com/CarlyGriggs13/status/1987580810803695679", "https://x.com/CarlyGriggs13/status/1987658005756981270", "https://x.com/CarlyGriggs13/status/1987607186537845061", "https://x.com/CarlyGriggs13/status/1987617256864649550", "https://x.com/CarlyGriggs13/status/1987607314938122710", "https://x.com/CarlyGriggs13/status/1987611218232651917", "https://x.com/CarlyGriggs13/status/1987657900303487175", "https://x.com/CarlyGriggs13/status/1987657437231419472", "https://x.com/CarlyGriggs13/status/1987606458611982519", "https://x.com/CarlyGriggs13/status/1987597449498972524", "https://x.com/CarlyGriggs13/status/1987629975768613285", "https://x.com/CarlyGriggs13/status/1987601999613882396", "https://x.com/CarlyGriggs13/status/1987622578350121055", "https://x.com/CarlyGriggs13/status/1987576289130111103", "https://x.com/CarlyGriggs13/status/1987601010190061568", "https://x.com/CarlyGriggs13/status/1987581971979968934", "https://x.com/CarlyGriggs13/status/1987658127458910261", "https://x.com/CarlyGriggs13/status/1987635934490190074", "https://x.com/CarlyGriggs13/status/1987657692337611229", "https://x.com/CarlyGriggs13/status/1987657114009915473", "https://ltna.com.au/cyber", "https://x.com/CarlyGriggs13/status/1987625509686009948", "https://x.com/CarlyGriggs13/status/1987576680211218855", "https://x.com/CarlyGriggs13/status/1987602136352293331", "https://x.com/CarlyGriggs13/status/1987624991354212533", "https://x.com/CarlyGriggs13/status/1987657787313127462", "https://x.com/CarlyGriggs13/status/1987597085890289667", "https://x.com/CarlyGriggs13/status/1987612022947946771", "https://x.com/CarlyGriggs13/status/1987621309153419655", "https://x.com/CarlyGriggs13/status/1987602358520389925", "https://x.com/CarlyGriggs13/status/1987636477971300530", "https://x.com/CarlyGriggs13/status/1987575750053306552", "https://x.com/CarlyGriggs13/status/1987576962169069799", "https://x.com/CarlyGriggs13/status/1987597315365122127", "https://x.com/CarlyGriggs13/status/1987606821998150054", "https://x.com/CarlyGriggs13/status/1987611323530957131", "https://x.com/CarlyGriggs13/status/1987607455958712598", "https://x.com/CarlyGriggs13/status/1987606947139359150", "https://x.com/CarlyGriggs13/status/1987617651779121222", "https://x.com/CarlyGriggs13/status/1987581836751438253", "https://x.com/CarlyGriggs13/status/1987575608637862185", "https://x.com/CarlyGriggs13/status/1987606703639015777", "https://x.com/CarlyGriggs13/status/1987601290537390389", "https://x.com/CarlyGriggs13/status/1987616141104013640", "https://x.com/CarlyGriggs13/status/1987596383663325364", "https://x.com/CarlyGriggs13/status/1987621893193466032", "https://x.com/CarlyGriggs13/status/1987623586043969559", "https://x.com/CarlyGriggs13/status/1987617522816860492", "https://x.com/CarlyGriggs13/status/1987606573753987311" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 12, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c08867316c564ade394c69", "name": "PhishDestroy \u2014 Content Active Threats (Live)", "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json", "modified": "2026-05-21T12:06:19.702000", "created": "2026-03-23T00:25:09.116000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy", "active", "content" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 132502, "hostname": 66217 }, "indicator_count": 198719, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "10 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b02913e1ae74d8a850136d", "name": "Phishing | Mar 11, 2026 | Part 6/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 6/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:22:11.153000", "created": "2026-03-10T14:22:11.153000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1380, "domain": 620 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "0123656.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "0123656.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780246753.2495134 }