{
  "type": "Domain",
  "indicator": "coinbasec88.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/coinbasec88.com",
    "alexa": "http://www.alexa.com/siteinfo/coinbasec88.com",
    "indicator": "coinbasec88.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 4146171574,
      "indicator": "coinbasec88.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 14,
      "pulses": [
        {
          "id": "69c081afa2bd54a9599b7c07",
          "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
          "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
          "modified": "2026-05-24T00:00:03.049000",
          "created": "2026-03-22T23:56:29.438000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 33,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 93266,
            "hostname": 57600
          },
          "indicator_count": 150866,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 100,
          "modified_text": "8 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69c08867316c564ade394c69",
          "name": "PhishDestroy \u2014 Content Active Threats (Live)",
          "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
          "modified": "2026-05-21T12:06:19.702000",
          "created": "2026-03-23T00:25:09.116000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy",
            "active",
            "content"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 132502,
            "hostname": 66217
          },
          "indicator_count": 198719,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 44,
          "modified_text": "11 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cb0ce73bef5c452bfb0",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:04.332000",
          "created": "2026-05-04T06:29:04.332000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 70,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83caf1bef3609f0eb79e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:03.120000",
          "created": "2026-05-04T06:29:03.120000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cac7d6c947de6c080f9",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:00.417000",
          "created": "2026-05-04T06:29:00.417000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab9769e92b3285a2b4",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.770000",
          "created": "2026-05-04T06:28:59.770000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab7e03b19c5f1078e3",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.113000",
          "created": "2026-05-04T06:28:59.113000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca9411c8ab5d294a7e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:57.479000",
          "created": "2026-05-04T06:28:57.479000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca77d6c947de6c080f8",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:55.093000",
          "created": "2026-05-04T06:28:55.093000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69b02c1754cab016c4c8ecf6",
          "name": "Phishing | Mar 11, 2026 | Part 111/776",
          "description": "Phishing indicators. Date: Mar 11, 2026. Part 111/776. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-10T14:35:03.596000",
          "created": "2026-03-10T14:35:03.596000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 377,
            "hostname": 1623
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "83 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "698c596c4bf851199120ef0d",
          "name": "Phishing | Feb 11, 2026 | Part 107/783",
          "description": "Phishing indicators. Date: Feb 11, 2026. Part 107/783. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-11T10:26:52.582000",
          "created": "2026-02-11T10:26:52.582000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1469,
            "domain": 531
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "110 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6981a88ec8c8047c5a03b373",
          "name": "Phishing | 2026-01-31 | Part 37/163",
          "description": "Phishing indicators. Date: 2026-01-31. Part 37/163. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-03T07:49:34.434000",
          "created": "2026-02-03T07:49:34.434000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 5261,
            "domain": 4738
          },
          "indicator_count": 9999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "118 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "690bf8ed8f2f5f12dd26b4c1",
          "name": "Twitter Feed - CarlyGriggs13 - 05-11-2025",
          "description": "",
          "modified": "2025-12-06T01:05:09.974000",
          "created": "2025-11-06T01:25:01.356000",
          "tags": [
            "phishing",
            "scam"
          ],
          "references": [
            "https://x.com/CarlyGriggs13/status/1986073887575023796",
            "https://x.com/CarlyGriggs13/status/1986074010166153291",
            "https://x.com/CarlyGriggs13/status/1986074146736841109",
            "https://x.com/CarlyGriggs13/status/1986074263409877403",
            "https://x.com/CarlyGriggs13/status/1986074398936248738",
            "https://x.com/CarlyGriggs13/status/1986074514044641457",
            "https://x.com/CarlyGriggs13/status/1986074652649697731",
            "https://x.com/CarlyGriggs13/status/1986074765681954892",
            "https://x.com/CarlyGriggs13/status/1986074888935743497",
            "https://x.com/CarlyGriggs13/status/1986075004270772519",
            "https://x.com/CarlyGriggs13/status/1986075133329670423",
            "https://x.com/CarlyGriggs13/status/1986075484375928930",
            "https://x.com/CarlyGriggs13/status/1986080233695441194",
            "https://x.com/CarlyGriggs13/status/1986083411774054518",
            "https://x.com/CarlyGriggs13/status/1986090355293315225",
            "https://x.com/CarlyGriggs13/status/1986092918885732553",
            "https://x.com/CarlyGriggs13/status/1986093289271881848",
            "https://x.com/CarlyGriggs13/status/1986093380808376600",
            "https://x.com/CarlyGriggs13/status/1986093478200360977",
            "https://x.com/CarlyGriggs13/status/1986093679111761934",
            "https://x.com/CarlyGriggs13/status/1986093947869913161",
            "https://x.com/CarlyGriggs13/status/1986094060289880387",
            "https://x.com/CarlyGriggs13/status/1986094184797966484",
            "https://x.com/CarlyGriggs13/status/1986094299952415142",
            "https://x.com/CarlyGriggs13/status/1986094514717516030",
            "https://x.com/CarlyGriggs13/status/1986094619696738776",
            "https://x.com/CarlyGriggs13/status/1986094736306757652",
            "https://x.com/CarlyGriggs13/status/1986094878195949711",
            "https://x.com/CarlyGriggs13/status/1986095014363943423",
            "https://x.com/CarlyGriggs13/status/1986095143573721480",
            "https://x.com/CarlyGriggs13/status/1986095245952483474",
            "https://x.com/CarlyGriggs13/status/1986095379184812167",
            "https://x.com/CarlyGriggs13/status/1986095486185480487",
            "https://x.com/CarlyGriggs13/status/1986095711545364857",
            "https://x.com/CarlyGriggs13/status/1986099968239648994",
            "https://x.com/CarlyGriggs13/status/1986100232304636052",
            "https://x.com/CarlyGriggs13/status/1986104236409491760",
            "https://x.com/CarlyGriggs13/status/1986104689696666067",
            "https://x.com/CarlyGriggs13/status/1986105248927162563",
            "https://x.com/CarlyGriggs13/status/1986105609171739002",
            "https://x.com/CarlyGriggs13/status/1986105727509995749",
            "https://x.com/CarlyGriggs13/status/1986105932183478739",
            "https://x.com/CarlyGriggs13/status/1986107874376819165",
            "https://x.com/CarlyGriggs13/status/1986107971953176953",
            "https://x.com/CarlyGriggs13/status/1986108190417990050",
            "https://x.com/CarlyGriggs13/status/1986108323704529396",
            "https://x.com/CarlyGriggs13/status/1986108680077484253",
            "https://x.com/CarlyGriggs13/status/1986108788756083107",
            "https://x.com/CarlyGriggs13/status/1986108930653819313",
            "https://x.com/CarlyGriggs13/status/1986109043400708467",
            "https://x.com/CarlyGriggs13/status/1986109173000556635",
            "https://x.com/CarlyGriggs13/status/1986109271688323295",
            "https://x.com/CarlyGriggs13/status/1986109409768985033",
            "https://x.com/CarlyGriggs13/status/1986109506745418121",
            "https://x.com/CarlyGriggs13/status/1986109622357196806",
            "https://x.com/CarlyGriggs13/status/1986109747251089500",
            "https://x.com/CarlyGriggs13/status/1986109845196415397",
            "https://x.com/CarlyGriggs13/status/1986109960913363402",
            "https://x.com/CarlyGriggs13/status/1986110388711166376",
            "https://x.com/CarlyGriggs13/status/1986110529518379232",
            "https://x.com/CarlyGriggs13/status/1986110637169070529",
            "https://x.com/CarlyGriggs13/status/1986113644133031963",
            "https://x.com/CarlyGriggs13/status/1986113781597102178",
            "https://x.com/CarlyGriggs13/status/1986113899519680758",
            "https://x.com/CarlyGriggs13/status/1986114015362175336",
            "https://x.com/CarlyGriggs13/status/1986114242794156379",
            "https://x.com/CarlyGriggs13/status/1986114461984243736",
            "https://x.com/CarlyGriggs13/status/1986114569786495406",
            "https://x.com/CarlyGriggs13/status/1986114668436353063",
            "https://x.com/CarlyGriggs13/status/1986114789341278461",
            "https://x.com/CarlyGriggs13/status/1986114902696603869",
            "https://x.com/CarlyGriggs13/status/1986115020405481483",
            "https://x.com/CarlyGriggs13/status/1986115146645971253",
            "https://x.com/CarlyGriggs13/status/1986115245211783351",
            "https://x.com/CarlyGriggs13/status/1986115371548504419",
            "https://x.com/CarlyGriggs13/status/1986115503627116752",
            "https://x.com/CarlyGriggs13/status/1986115598724555197",
            "https://x.com/CarlyGriggs13/status/1986115716676759723",
            "https://x.com/CarlyGriggs13/status/1986116712085778453",
            "https://x.com/CarlyGriggs13/status/1986117604612690424",
            "https://x.com/CarlyGriggs13/status/1986118252611670399",
            "https://x.com/CarlyGriggs13/status/1986118368626184638",
            "https://x.com/CarlyGriggs13/status/1986118723732906445",
            "https://x.com/CarlyGriggs13/status/1986118833816346992",
            "https://x.com/CarlyGriggs13/status/1986118933099782410",
            "https://x.com/CarlyGriggs13/status/1986119025340858609",
            "https://x.com/CarlyGriggs13/status/1986119408838639748",
            "https://x.com/CarlyGriggs13/status/1986119613982089502",
            "https://x.com/CarlyGriggs13/status/1986119718671892856",
            "https://x.com/CarlyGriggs13/status/1986119860489793706",
            "https://x.com/CarlyGriggs13/status/1986119998767555055",
            "https://x.com/CarlyGriggs13/status/1986120102732046720",
            "https://x.com/CarlyGriggs13/status/1986120207925190976",
            "https://x.com/CarlyGriggs13/status/1986120317589135374",
            "https://x.com/CarlyGriggs13/status/1986120789712904287",
            "https://x.com/CarlyGriggs13/status/1986123445130743952",
            "https://x.com/CarlyGriggs13/status/1986123543009243275",
            "https://x.com/CarlyGriggs13/status/1986123646746960357",
            "https://x.com/CarlyGriggs13/status/1986123892960960521",
            "https://x.com/CarlyGriggs13/status/1986124038423359614",
            "https://x.com/CarlyGriggs13/status/1986124288751997068",
            "https://x.com/CarlyGriggs13/status/1986124414333694387",
            "https://x.com/CarlyGriggs13/status/1986124547507064912",
            "https://x.com/CarlyGriggs13/status/1986124651781636186",
            "https://x.com/CarlyGriggs13/status/1986124754042941606",
            "https://x.com/CarlyGriggs13/status/1986124861962383398",
            "https://x.com/CarlyGriggs13/status/1986124997354455543",
            "https://x.com/CarlyGriggs13/status/1986125119316496605",
            "https://x.com/CarlyGriggs13/status/1986125259288785253",
            "https://x.com/CarlyGriggs13/status/1986125382228078979",
            "https://x.com/CarlyGriggs13/status/1986125489774469403",
            "https://x.com/CarlyGriggs13/status/1986125618698764483",
            "https://x.com/CarlyGriggs13/status/1986128221612486936",
            "https://x.com/CarlyGriggs13/status/1986128350436274257",
            "https://x.com/CarlyGriggs13/status/1986133217297244662",
            "https://x.com/CarlyGriggs13/status/1986133572026077498",
            "https://x.com/CarlyGriggs13/status/1986133818172907702",
            "https://x.com/CarlyGriggs13/status/1986133944186904895",
            "https://x.com/CarlyGriggs13/status/1986134059769123268",
            "https://x.com/CarlyGriggs13/status/1986134182519550336",
            "https://x.com/CarlyGriggs13/status/1986134289424261130",
            "https://x.com/CarlyGriggs13/status/1986134593293128131",
            "https://x.com/CarlyGriggs13/status/1986134745193889953",
            "https://x.com/CarlyGriggs13/status/1986134882897072428",
            "https://x.com/CarlyGriggs13/status/1986135019828478032",
            "https://x.com/CarlyGriggs13/status/1986135117501505901",
            "https://x.com/CarlyGriggs13/status/1986135240146870281",
            "https://x.com/CarlyGriggs13/status/1986135369814057402",
            "https://x.com/CarlyGriggs13/status/1986135504384106766",
            "https://x.com/CarlyGriggs13/status/1986135641030041681",
            "https://x.com/CarlyGriggs13/status/1986135781644378364",
            "https://x.com/CarlyGriggs13/status/1986135914494542212",
            "https://x.com/CarlyGriggs13/status/1986136033969185100",
            "https://x.com/CarlyGriggs13/status/1986136163283874203",
            "https://x.com/CarlyGriggs13/status/1986136279117902322",
            "https://x.com/CarlyGriggs13/status/1986136413742780907",
            "https://x.com/CarlyGriggs13/status/1986136525411684568",
            "https://x.com/CarlyGriggs13/status/1986136625521258739",
            "https://x.com/CarlyGriggs13/status/1986136751526543861",
            "https://x.com/CarlyGriggs13/status/1986136848989663259",
            "https://x.com/CarlyGriggs13/status/1986136947782308322",
            "https://x.com/CarlyGriggs13/status/1986137057568149542",
            "https://x.com/CarlyGriggs13/status/1986195809512399186",
            "https://x.com/CarlyGriggs13/status/1986195937841332311",
            "https://x.com/CarlyGriggs13/status/1986196073715748923",
            "https://x.com/CarlyGriggs13/status/1986196195698684169",
            "https://x.com/CarlyGriggs13/status/1986196325139124625",
            "https://x.com/CarlyGriggs13/status/1986196454009139285",
            "https://x.com/CarlyGriggs13/status/1986196551543497121",
            "https://x.com/CarlyGriggs13/status/1986196658359837079",
            "https://x.com/CarlyGriggs13/status/1986196759690027490",
            "https://x.com/CarlyGriggs13/status/1986196881836548276",
            "https://x.com/CarlyGriggs13/status/1986196986056655243",
            "https://x.com/CarlyGriggs13/status/1986197094999466046",
            "https://x.com/CarlyGriggs13/status/1986200785835991458",
            "https://x.com/CarlyGriggs13/status/1986200895605072061",
            "https://x.com/CarlyGriggs13/status/1986201003797139642",
            "https://x.com/CarlyGriggs13/status/1986201111196540953",
            "https://x.com/CarlyGriggs13/status/1986201218415509675",
            "https://x.com/CarlyGriggs13/status/1986201330462171575",
            "https://x.com/CarlyGriggs13/status/1986201452877127968",
            "https://x.com/CarlyGriggs13/status/1986201585417134402",
            "https://x.com/CarlyGriggs13/status/1986201700206801386",
            "https://x.com/CarlyGriggs13/status/1986201826912575959",
            "https://x.com/CarlyGriggs13/status/1986201936434270302",
            "https://x.com/CarlyGriggs13/status/1986202072354857350"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 166,
            "domain": 74,
            "hostname": 91
          },
          "indicator_count": 331,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1624,
          "modified_text": "177 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "690bf8f08ed850d42df9cc25",
          "name": "Malware Filter - Phishing List - 05-11-2025",
          "description": "",
          "modified": "2025-11-06T01:25:04.773000",
          "created": "2025-11-06T01:25:04.773000",
          "tags": [],
          "references": [
            "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 7,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 563,
            "domain": 266
          },
          "indicator_count": 829,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1626,
          "modified_text": "207 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://x.com/CarlyGriggs13/status/1986196551543497121",
        "https://x.com/CarlyGriggs13/status/1986093289271881848",
        "https://x.com/CarlyGriggs13/status/1986080233695441194",
        "https://x.com/CarlyGriggs13/status/1986104236409491760",
        "https://x.com/CarlyGriggs13/status/1986109506745418121",
        "https://x.com/CarlyGriggs13/status/1986083411774054518",
        "https://x.com/CarlyGriggs13/status/1986074010166153291",
        "https://x.com/CarlyGriggs13/status/1986095379184812167",
        "https://x.com/CarlyGriggs13/status/1986134745193889953",
        "https://x.com/CarlyGriggs13/status/1986107971953176953",
        "https://x.com/CarlyGriggs13/status/1986094514717516030",
        "https://x.com/CarlyGriggs13/status/1986134182519550336",
        "https://x.com/CarlyGriggs13/status/1986201700206801386",
        "https://x.com/CarlyGriggs13/status/1986118723732906445",
        "https://x.com/CarlyGriggs13/status/1986113644133031963",
        "https://x.com/CarlyGriggs13/status/1986120102732046720",
        "https://x.com/CarlyGriggs13/status/1986123543009243275",
        "https://x.com/CarlyGriggs13/status/1986196325139124625",
        "https://x.com/CarlyGriggs13/status/1986135019828478032",
        "https://x.com/CarlyGriggs13/status/1986133944186904895",
        "https://x.com/CarlyGriggs13/status/1986201452877127968",
        "https://x.com/CarlyGriggs13/status/1986109845196415397",
        "https://x.com/CarlyGriggs13/status/1986133572026077498",
        "https://x.com/CarlyGriggs13/status/1986093679111761934",
        "https://x.com/CarlyGriggs13/status/1986115245211783351",
        "https://x.com/CarlyGriggs13/status/1986108190417990050",
        "https://x.com/CarlyGriggs13/status/1986115598724555197",
        "https://x.com/CarlyGriggs13/status/1986093478200360977",
        "https://x.com/CarlyGriggs13/status/1986124288751997068",
        "https://x.com/CarlyGriggs13/status/1986118833816346992",
        "https://x.com/CarlyGriggs13/status/1986201218415509675",
        "https://x.com/CarlyGriggs13/status/1986201585417134402",
        "https://x.com/CarlyGriggs13/status/1986105248927162563",
        "https://x.com/CarlyGriggs13/status/1986105932183478739",
        "https://x.com/CarlyGriggs13/status/1986201003797139642",
        "https://x.com/CarlyGriggs13/status/1986136279117902322",
        "https://x.com/CarlyGriggs13/status/1986109747251089500",
        "https://x.com/CarlyGriggs13/status/1986114569786495406",
        "https://x.com/CarlyGriggs13/status/1986125382228078979",
        "https://x.com/CarlyGriggs13/status/1986119860489793706",
        "https://x.com/CarlyGriggs13/status/1986196986056655243",
        "https://x.com/CarlyGriggs13/status/1986090355293315225",
        "https://x.com/CarlyGriggs13/status/1986197094999466046",
        "https://x.com/CarlyGriggs13/status/1986136033969185100",
        "https://x.com/CarlyGriggs13/status/1986196195698684169",
        "https://x.com/CarlyGriggs13/status/1986116712085778453",
        "https://x.com/CarlyGriggs13/status/1986124547507064912",
        "https://x.com/CarlyGriggs13/status/1986201936434270302",
        "https://x.com/CarlyGriggs13/status/1986124861962383398",
        "https://x.com/CarlyGriggs13/status/1986134059769123268",
        "https://x.com/CarlyGriggs13/status/1986202072354857350",
        "https://x.com/CarlyGriggs13/status/1986109960913363402",
        "https://x.com/CarlyGriggs13/status/1986095245952483474",
        "https://x.com/CarlyGriggs13/status/1986123892960960521",
        "https://x.com/CarlyGriggs13/status/1986196454009139285",
        "https://x.com/CarlyGriggs13/status/1986136413742780907",
        "https://x.com/CarlyGriggs13/status/1986136625521258739",
        "https://x.com/CarlyGriggs13/status/1986113781597102178",
        "https://x.com/CarlyGriggs13/status/1986075484375928930",
        "https://x.com/CarlyGriggs13/status/1986115371548504419",
        "https://x.com/CarlyGriggs13/status/1986118252611670399",
        "https://x.com/CarlyGriggs13/status/1986196658359837079",
        "https://x.com/CarlyGriggs13/status/1986200785835991458",
        "https://x.com/CarlyGriggs13/status/1986095014363943423",
        "https://x.com/CarlyGriggs13/status/1986108680077484253",
        "https://x.com/CarlyGriggs13/status/1986124038423359614",
        "https://x.com/CarlyGriggs13/status/1986074263409877403",
        "https://x.com/CarlyGriggs13/status/1986095486185480487",
        "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt",
        "https://x.com/CarlyGriggs13/status/1986100232304636052",
        "https://x.com/CarlyGriggs13/status/1986136848989663259",
        "https://x.com/CarlyGriggs13/status/1986105727509995749",
        "https://x.com/CarlyGriggs13/status/1986114015362175336",
        "https://x.com/CarlyGriggs13/status/1986135369814057402",
        "https://x.com/CarlyGriggs13/status/1986094878195949711",
        "https://x.com/CarlyGriggs13/status/1986115716676759723",
        "https://x.com/CarlyGriggs13/status/1986093380808376600",
        "https://x.com/CarlyGriggs13/status/1986136947782308322",
        "https://x.com/CarlyGriggs13/status/1986118933099782410",
        "https://x.com/CarlyGriggs13/status/1986094060289880387",
        "https://x.com/CarlyGriggs13/status/1986095143573721480",
        "https://x.com/CarlyGriggs13/status/1986136525411684568",
        "https://x.com/CarlyGriggs13/status/1986115146645971253",
        "https://x.com/CarlyGriggs13/status/1986125618698764483",
        "https://x.com/CarlyGriggs13/status/1986133818172907702",
        "https://x.com/CarlyGriggs13/status/1986104689696666067",
        "https://x.com/CarlyGriggs13/status/1986123646746960357",
        "https://x.com/CarlyGriggs13/status/1986114461984243736",
        "https://x.com/CarlyGriggs13/status/1986115503627116752",
        "https://x.com/CarlyGriggs13/status/1986124651781636186",
        "https://x.com/CarlyGriggs13/status/1986125119316496605",
        "https://x.com/CarlyGriggs13/status/1986201111196540953",
        "https://x.com/CarlyGriggs13/status/1986135240146870281",
        "https://x.com/CarlyGriggs13/status/1986136163283874203",
        "https://x.com/CarlyGriggs13/status/1986074652649697731",
        "https://x.com/CarlyGriggs13/status/1986110388711166376",
        "https://ltna.com.au/cyber",
        "https://x.com/CarlyGriggs13/status/1986073887575023796",
        "https://x.com/CarlyGriggs13/status/1986137057568149542",
        "https://x.com/CarlyGriggs13/status/1986105609171739002",
        "https://x.com/CarlyGriggs13/status/1986108930653819313",
        "https://x.com/CarlyGriggs13/status/1986196881836548276",
        "https://x.com/CarlyGriggs13/status/1986136751526543861",
        "https://x.com/CarlyGriggs13/status/1986120317589135374",
        "https://x.com/CarlyGriggs13/status/1986118368626184638",
        "https://x.com/CarlyGriggs13/status/1986123445130743952",
        "https://x.com/CarlyGriggs13/status/1986114902696603869",
        "https://x.com/CarlyGriggs13/status/1986134289424261130",
        "https://x.com/CarlyGriggs13/status/1986108788756083107",
        "https://x.com/CarlyGriggs13/status/1986074765681954892",
        "https://x.com/CarlyGriggs13/status/1986107874376819165",
        "https://x.com/CarlyGriggs13/status/1986074514044641457",
        "https://x.com/CarlyGriggs13/status/1986093947869913161",
        "https://x.com/CarlyGriggs13/status/1986135641030041681",
        "https://x.com/CarlyGriggs13/status/1986094619696738776",
        "https://x.com/CarlyGriggs13/status/1986094184797966484",
        "https://x.com/CarlyGriggs13/status/1986134593293128131",
        "https://x.com/CarlyGriggs13/status/1986074888935743497",
        "https://x.com/CarlyGriggs13/status/1986134882897072428",
        "https://x.com/CarlyGriggs13/status/1986119025340858609",
        "https://x.com/CarlyGriggs13/status/1986110637169070529",
        "https://x.com/CarlyGriggs13/status/1986109043400708467",
        "https://x.com/CarlyGriggs13/status/1986119718671892856",
        "https://x.com/CarlyGriggs13/status/1986128350436274257",
        "https://x.com/CarlyGriggs13/status/1986074146736841109",
        "https://x.com/CarlyGriggs13/status/1986124754042941606",
        "https://x.com/CarlyGriggs13/status/1986125489774469403",
        "https://x.com/CarlyGriggs13/status/1986196759690027490",
        "https://x.com/CarlyGriggs13/status/1986124997354455543",
        "https://x.com/CarlyGriggs13/status/1986135504384106766",
        "https://x.com/CarlyGriggs13/status/1986095711545364857",
        "https://x.com/CarlyGriggs13/status/1986114668436353063",
        "https://x.com/CarlyGriggs13/status/1986092918885732553",
        "https://x.com/CarlyGriggs13/status/1986117604612690424",
        "https://x.com/CarlyGriggs13/status/1986110529518379232",
        "https://x.com/CarlyGriggs13/status/1986135914494542212",
        "https://x.com/CarlyGriggs13/status/1986114789341278461",
        "https://x.com/CarlyGriggs13/status/1986109409768985033",
        "https://x.com/CarlyGriggs13/status/1986135117501505901",
        "https://x.com/CarlyGriggs13/status/1986075004270772519",
        "https://x.com/CarlyGriggs13/status/1986128221612486936",
        "https://x.com/CarlyGriggs13/status/1986109173000556635",
        "https://x.com/CarlyGriggs13/status/1986135781644378364",
        "https://x.com/CarlyGriggs13/status/1986108323704529396",
        "https://x.com/CarlyGriggs13/status/1986201330462171575",
        "https://x.com/CarlyGriggs13/status/1986133217297244662",
        "https://x.com/CarlyGriggs13/status/1986109271688323295",
        "https://x.com/CarlyGriggs13/status/1986109622357196806",
        "https://x.com/CarlyGriggs13/status/1986196073715748923",
        "https://x.com/CarlyGriggs13/status/1986120207925190976",
        "https://x.com/CarlyGriggs13/status/1986195809512399186",
        "https://x.com/CarlyGriggs13/status/1986094736306757652",
        "https://x.com/CarlyGriggs13/status/1986119613982089502",
        "https://x.com/CarlyGriggs13/status/1986115020405481483",
        "https://x.com/CarlyGriggs13/status/1986119408838639748",
        "https://x.com/CarlyGriggs13/status/1986125259288785253",
        "https://x.com/CarlyGriggs13/status/1986201826912575959",
        "https://x.com/CarlyGriggs13/status/1986195937841332311",
        "https://x.com/CarlyGriggs13/status/1986114242794156379",
        "https://x.com/CarlyGriggs13/status/1986124414333694387",
        "https://x.com/CarlyGriggs13/status/1986094299952415142",
        "https://x.com/CarlyGriggs13/status/1986074398936248738",
        "https://x.com/CarlyGriggs13/status/1986200895605072061",
        "https://x.com/CarlyGriggs13/status/1986120789712904287",
        "https://x.com/CarlyGriggs13/status/1986119998767555055",
        "https://x.com/CarlyGriggs13/status/1986075133329670423",
        "https://x.com/CarlyGriggs13/status/1986099968239648994",
        "https://x.com/CarlyGriggs13/status/1986113899519680758"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 14,
  "pulses": [
    {
      "id": "69c081afa2bd54a9599b7c07",
      "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
      "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
      "modified": "2026-05-24T00:00:03.049000",
      "created": "2026-03-22T23:56:29.438000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 33,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 93266,
        "hostname": 57600
      },
      "indicator_count": 150866,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 100,
      "modified_text": "8 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69c08867316c564ade394c69",
      "name": "PhishDestroy \u2014 Content Active Threats (Live)",
      "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
      "modified": "2026-05-21T12:06:19.702000",
      "created": "2026-03-23T00:25:09.116000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy",
        "active",
        "content"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 132502,
        "hostname": 66217
      },
      "indicator_count": 198719,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 44,
      "modified_text": "11 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cb0ce73bef5c452bfb0",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:04.332000",
      "created": "2026-05-04T06:29:04.332000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 70,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83caf1bef3609f0eb79e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:03.120000",
      "created": "2026-05-04T06:29:03.120000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cac7d6c947de6c080f9",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:00.417000",
      "created": "2026-05-04T06:29:00.417000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab9769e92b3285a2b4",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.770000",
      "created": "2026-05-04T06:28:59.770000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab7e03b19c5f1078e3",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.113000",
      "created": "2026-05-04T06:28:59.113000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca9411c8ab5d294a7e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:57.479000",
      "created": "2026-05-04T06:28:57.479000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca77d6c947de6c080f8",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:55.093000",
      "created": "2026-05-04T06:28:55.093000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69b02c1754cab016c4c8ecf6",
      "name": "Phishing | Mar 11, 2026 | Part 111/776",
      "description": "Phishing indicators. Date: Mar 11, 2026. Part 111/776. For more threat intelligence visit https://ltna.com.au/cyber",
      "modified": "2026-03-10T14:35:03.596000",
      "created": "2026-03-10T14:35:03.596000",
      "tags": [
        "phishing"
      ],
      "references": [
        "https://ltna.com.au/cyber"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "LTNA-Australia",
        "id": "380633",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 377,
        "hostname": 1623
      },
      "indicator_count": 2000,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 92,
      "modified_text": "83 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "coinbasec88.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "coinbasec88.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780355457.1357448
}