{
  "type": "Domain",
  "indicator": "cpcodmobile.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/cpcodmobile.com",
    "alexa": "http://www.alexa.com/siteinfo/cpcodmobile.com",
    "indicator": "cpcodmobile.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 4188925523,
      "indicator": "cpcodmobile.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 11,
      "pulses": [
        {
          "id": "69c081afa2bd54a9599b7c07",
          "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
          "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
          "modified": "2026-05-24T00:00:03.049000",
          "created": "2026-03-22T23:56:29.438000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 33,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 93266,
            "hostname": 57600
          },
          "indicator_count": 150866,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 100,
          "modified_text": "10 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69c08867316c564ade394c69",
          "name": "PhishDestroy \u2014 Content Active Threats (Live)",
          "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
          "modified": "2026-05-21T12:06:19.702000",
          "created": "2026-03-23T00:25:09.116000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy",
            "active",
            "content"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 132502,
            "hostname": 66217
          },
          "indicator_count": 198719,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 44,
          "modified_text": "13 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cb0ce73bef5c452bfb0",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:04.332000",
          "created": "2026-05-04T06:29:04.332000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 73,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83caf1bef3609f0eb79e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:03.120000",
          "created": "2026-05-04T06:29:03.120000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 72,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cac7d6c947de6c080f9",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:00.417000",
          "created": "2026-05-04T06:29:00.417000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab9769e92b3285a2b4",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.770000",
          "created": "2026-05-04T06:28:59.770000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab7e03b19c5f1078e3",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.113000",
          "created": "2026-05-04T06:28:59.113000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 72,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca9411c8ab5d294a7e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:57.479000",
          "created": "2026-05-04T06:28:57.479000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca77d6c947de6c080f8",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:55.093000",
          "created": "2026-05-04T06:28:55.093000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 71,
          "modified_text": "30 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "697ad936709a109a02e44e09",
          "name": "Malware Filter - Phishing List - 28-01-2026 (Part 1)",
          "description": "",
          "modified": "2026-01-29T03:51:18.599000",
          "created": "2026-01-29T03:51:18.599000",
          "tags": [],
          "references": [
            "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 405,
            "domain": 95
          },
          "indicator_count": 500,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1626,
          "modified_text": "125 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "697ad92955e9c66402b7a91c",
          "name": "Twitter Feed - CarlyGriggs13 - 28-01-2026",
          "description": "",
          "modified": "2026-01-29T03:51:05.756000",
          "created": "2026-01-29T03:51:05.756000",
          "tags": [
            "scam"
          ],
          "references": [
            "https://x.com/CarlyGriggs13/status/2016381445573406926",
            "https://x.com/CarlyGriggs13/status/2016381551349473653",
            "https://x.com/CarlyGriggs13/status/2016381653078167571",
            "https://x.com/CarlyGriggs13/status/2016381738017050684",
            "https://x.com/CarlyGriggs13/status/2016381866727588209",
            "https://x.com/CarlyGriggs13/status/2016381960944230535",
            "https://x.com/CarlyGriggs13/status/2016382310111682943",
            "https://x.com/CarlyGriggs13/status/2016382430471463129",
            "https://x.com/CarlyGriggs13/status/2016382544208372114",
            "https://x.com/CarlyGriggs13/status/2016382649019846844",
            "https://x.com/CarlyGriggs13/status/2016383044857311535",
            "https://x.com/CarlyGriggs13/status/2016383150876725643",
            "https://x.com/CarlyGriggs13/status/2016383256699023531",
            "https://x.com/CarlyGriggs13/status/2016383358939324492",
            "https://x.com/CarlyGriggs13/status/2016383446524755984",
            "https://x.com/CarlyGriggs13/status/2016383552904921468",
            "https://x.com/CarlyGriggs13/status/2016383638699479206",
            "https://x.com/CarlyGriggs13/status/2016384014395769139",
            "https://x.com/CarlyGriggs13/status/2016384121325428810",
            "https://x.com/CarlyGriggs13/status/2016384242058498234",
            "https://x.com/CarlyGriggs13/status/2016384328582783137",
            "https://x.com/CarlyGriggs13/status/2016387365565034823",
            "https://x.com/CarlyGriggs13/status/2016387654170915235",
            "https://x.com/CarlyGriggs13/status/2016388428745642329",
            "https://x.com/CarlyGriggs13/status/2016388540658053318",
            "https://x.com/CarlyGriggs13/status/2016388630114116028",
            "https://x.com/CarlyGriggs13/status/2016388724574027814",
            "https://x.com/CarlyGriggs13/status/2016388805557657810",
            "https://x.com/CarlyGriggs13/status/2016388916190863459",
            "https://x.com/CarlyGriggs13/status/2016389008905953691",
            "https://x.com/CarlyGriggs13/status/2016389124379246934",
            "https://x.com/CarlyGriggs13/status/2016389215618060382",
            "https://x.com/CarlyGriggs13/status/2016389311592124836",
            "https://x.com/CarlyGriggs13/status/2016389402537107711",
            "https://x.com/CarlyGriggs13/status/2016389501573026217",
            "https://x.com/CarlyGriggs13/status/2016389609375121669",
            "https://x.com/CarlyGriggs13/status/2016389701196726592",
            "https://x.com/CarlyGriggs13/status/2016389800517947666",
            "https://x.com/CarlyGriggs13/status/2016390114272743606",
            "https://x.com/CarlyGriggs13/status/2016390204521673072",
            "https://x.com/CarlyGriggs13/status/2016390278370795698",
            "https://x.com/CarlyGriggs13/status/2016390388202844253",
            "https://x.com/CarlyGriggs13/status/2016390469312290898",
            "https://x.com/CarlyGriggs13/status/2016391070209147386",
            "https://x.com/CarlyGriggs13/status/2016392391024906392",
            "https://x.com/CarlyGriggs13/status/2016392821431738504",
            "https://x.com/CarlyGriggs13/status/2016394119606636620",
            "https://x.com/CarlyGriggs13/status/2016394229308637312",
            "https://x.com/CarlyGriggs13/status/2016394332127822297",
            "https://x.com/CarlyGriggs13/status/2016394460880416887",
            "https://x.com/CarlyGriggs13/status/2016394542967124368",
            "https://x.com/CarlyGriggs13/status/2016395477525098915",
            "https://x.com/CarlyGriggs13/status/2016395799572197651",
            "https://x.com/CarlyGriggs13/status/2016395877640761432",
            "https://x.com/CarlyGriggs13/status/2016395959618400312",
            "https://x.com/CarlyGriggs13/status/2016396071614681097",
            "https://x.com/CarlyGriggs13/status/2016396154146103537",
            "https://x.com/CarlyGriggs13/status/2016396248270426583",
            "https://x.com/CarlyGriggs13/status/2016396321268154704",
            "https://x.com/CarlyGriggs13/status/2016396398732693816",
            "https://x.com/CarlyGriggs13/status/2016396491732988145",
            "https://x.com/CarlyGriggs13/status/2016398970575036685",
            "https://x.com/CarlyGriggs13/status/2016399071238398174",
            "https://x.com/CarlyGriggs13/status/2016399158941188422",
            "https://x.com/CarlyGriggs13/status/2016399616535650718",
            "https://x.com/CarlyGriggs13/status/2016399696051232821",
            "https://x.com/CarlyGriggs13/status/2016400735953363410",
            "https://x.com/CarlyGriggs13/status/2016400833915527285",
            "https://x.com/CarlyGriggs13/status/2016400934931206542",
            "https://x.com/CarlyGriggs13/status/2016401371067490460",
            "https://x.com/CarlyGriggs13/status/2016401468257865765",
            "https://x.com/CarlyGriggs13/status/2016401583957762196",
            "https://x.com/CarlyGriggs13/status/2016401703352889769",
            "https://x.com/CarlyGriggs13/status/2016401827776925899",
            "https://x.com/CarlyGriggs13/status/2016401979791003852",
            "https://x.com/CarlyGriggs13/status/2016402133873017180",
            "https://x.com/CarlyGriggs13/status/2016402314395791710",
            "https://x.com/CarlyGriggs13/status/2016402452623356316",
            "https://x.com/CarlyGriggs13/status/2016402692264919342",
            "https://x.com/CarlyGriggs13/status/2016402830026817937",
            "https://x.com/CarlyGriggs13/status/2016404529042923604",
            "https://x.com/CarlyGriggs13/status/2016404646554730769",
            "https://x.com/CarlyGriggs13/status/2016404729790693481",
            "https://x.com/CarlyGriggs13/status/2016404853623284120",
            "https://x.com/CarlyGriggs13/status/2016405501043450107",
            "https://x.com/CarlyGriggs13/status/2016405613664755798",
            "https://x.com/CarlyGriggs13/status/2016405746829726023",
            "https://x.com/CarlyGriggs13/status/2016405847786582155",
            "https://x.com/CarlyGriggs13/status/2016405947682279804",
            "https://x.com/CarlyGriggs13/status/2016406290981855312",
            "https://x.com/CarlyGriggs13/status/2016483250634396142",
            "https://x.com/CarlyGriggs13/status/2016483379852525801",
            "https://x.com/CarlyGriggs13/status/2016484790799659289",
            "https://x.com/CarlyGriggs13/status/2016485741132501235",
            "https://x.com/CarlyGriggs13/status/2016485845037916291",
            "https://x.com/CarlyGriggs13/status/2016485942056431826",
            "https://x.com/CarlyGriggs13/status/2016486019768472025",
            "https://x.com/CarlyGriggs13/status/2016486106846421250",
            "https://x.com/CarlyGriggs13/status/2016486201855795433",
            "https://x.com/CarlyGriggs13/status/2016486303655735588",
            "https://x.com/CarlyGriggs13/status/2016486387730600354",
            "https://x.com/CarlyGriggs13/status/2016486490113507777",
            "https://x.com/CarlyGriggs13/status/2016486599769370626",
            "https://x.com/CarlyGriggs13/status/2016486695785373789",
            "https://x.com/CarlyGriggs13/status/2016486800231965111",
            "https://x.com/CarlyGriggs13/status/2016486883727991109",
            "https://x.com/CarlyGriggs13/status/2016486985695650223",
            "https://x.com/CarlyGriggs13/status/2016487082038845652",
            "https://x.com/CarlyGriggs13/status/2016487179631911403",
            "https://x.com/CarlyGriggs13/status/2016487256538624209",
            "https://x.com/CarlyGriggs13/status/2016487340424708332",
            "https://x.com/CarlyGriggs13/status/2016487476831875140",
            "https://x.com/CarlyGriggs13/status/2016487569026953237",
            "https://x.com/CarlyGriggs13/status/2016487689080512701",
            "https://x.com/CarlyGriggs13/status/2016487785281015895",
            "https://x.com/CarlyGriggs13/status/2016488234360918136",
            "https://x.com/CarlyGriggs13/status/2016488365151895712",
            "https://x.com/CarlyGriggs13/status/2016488480902205492",
            "https://x.com/CarlyGriggs13/status/2016488562389082349",
            "https://x.com/CarlyGriggs13/status/2016488699991654478",
            "https://x.com/CarlyGriggs13/status/2016488784653684762",
            "https://x.com/CarlyGriggs13/status/2016592968493437234",
            "https://x.com/CarlyGriggs13/status/2016593553036853498",
            "https://x.com/CarlyGriggs13/status/2016594252902596767",
            "https://x.com/CarlyGriggs13/status/2016594362222993772",
            "https://x.com/CarlyGriggs13/status/2016594470511530288",
            "https://x.com/CarlyGriggs13/status/2016594599507349932",
            "https://x.com/CarlyGriggs13/status/2016594746979041301",
            "https://x.com/CarlyGriggs13/status/2016594863043858679",
            "https://x.com/CarlyGriggs13/status/2016594984242446553",
            "https://x.com/CarlyGriggs13/status/2016595463575921127",
            "https://x.com/CarlyGriggs13/status/2016595574192292280",
            "https://x.com/CarlyGriggs13/status/2016595788718322168",
            "https://x.com/CarlyGriggs13/status/2016595908641902764",
            "https://x.com/CarlyGriggs13/status/2016596038321344831",
            "https://x.com/CarlyGriggs13/status/2016596491918582073",
            "https://x.com/CarlyGriggs13/status/2016596617605054764",
            "https://x.com/CarlyGriggs13/status/2016596806432702579",
            "https://x.com/CarlyGriggs13/status/2016597301691895830",
            "https://x.com/CarlyGriggs13/status/2016597422668181825",
            "https://x.com/CarlyGriggs13/status/2016597561210196017",
            "https://x.com/CarlyGriggs13/status/2016597692038938951",
            "https://x.com/CarlyGriggs13/status/2016597809404006555",
            "https://x.com/CarlyGriggs13/status/2016598519789080997",
            "https://x.com/CarlyGriggs13/status/2016617561765662980",
            "https://x.com/CarlyGriggs13/status/2016623500556194280"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 117,
            "URL": 146,
            "hostname": 29
          },
          "indicator_count": 292,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1626,
          "modified_text": "125 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://x.com/CarlyGriggs13/status/2016389008905953691",
        "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt",
        "https://x.com/CarlyGriggs13/status/2016487179631911403",
        "https://x.com/CarlyGriggs13/status/2016597301691895830",
        "https://x.com/CarlyGriggs13/status/2016594863043858679",
        "https://x.com/CarlyGriggs13/status/2016487569026953237",
        "https://x.com/CarlyGriggs13/status/2016383358939324492",
        "https://x.com/CarlyGriggs13/status/2016486695785373789",
        "https://x.com/CarlyGriggs13/status/2016597692038938951",
        "https://x.com/CarlyGriggs13/status/2016399071238398174",
        "https://x.com/CarlyGriggs13/status/2016401583957762196",
        "https://x.com/CarlyGriggs13/status/2016394119606636620",
        "https://x.com/CarlyGriggs13/status/2016404646554730769",
        "https://x.com/CarlyGriggs13/status/2016402830026817937",
        "https://x.com/CarlyGriggs13/status/2016396321268154704",
        "https://x.com/CarlyGriggs13/status/2016399616535650718",
        "https://x.com/CarlyGriggs13/status/2016486800231965111",
        "https://x.com/CarlyGriggs13/status/2016596617605054764",
        "https://x.com/CarlyGriggs13/status/2016384242058498234",
        "https://x.com/CarlyGriggs13/status/2016401371067490460",
        "https://x.com/CarlyGriggs13/status/2016596806432702579",
        "https://x.com/CarlyGriggs13/status/2016597561210196017",
        "https://x.com/CarlyGriggs13/status/2016595788718322168",
        "https://x.com/CarlyGriggs13/status/2016488699991654478",
        "https://x.com/CarlyGriggs13/status/2016593553036853498",
        "https://x.com/CarlyGriggs13/status/2016394229308637312",
        "https://x.com/CarlyGriggs13/status/2016396154146103537",
        "https://x.com/CarlyGriggs13/status/2016486599769370626",
        "https://x.com/CarlyGriggs13/status/2016486883727991109",
        "https://x.com/CarlyGriggs13/status/2016383150876725643",
        "https://x.com/CarlyGriggs13/status/2016390388202844253",
        "https://x.com/CarlyGriggs13/status/2016401827776925899",
        "https://x.com/CarlyGriggs13/status/2016383552904921468",
        "https://x.com/CarlyGriggs13/status/2016381738017050684",
        "https://x.com/CarlyGriggs13/status/2016594362222993772",
        "https://x.com/CarlyGriggs13/status/2016396248270426583",
        "https://x.com/CarlyGriggs13/status/2016389501573026217",
        "https://x.com/CarlyGriggs13/status/2016395877640761432",
        "https://x.com/CarlyGriggs13/status/2016486201855795433",
        "https://x.com/CarlyGriggs13/status/2016396398732693816",
        "https://x.com/CarlyGriggs13/status/2016404529042923604",
        "https://x.com/CarlyGriggs13/status/2016485942056431826",
        "https://x.com/CarlyGriggs13/status/2016488562389082349",
        "https://x.com/CarlyGriggs13/status/2016389311592124836",
        "https://x.com/CarlyGriggs13/status/2016390469312290898",
        "https://x.com/CarlyGriggs13/status/2016594746979041301",
        "https://x.com/CarlyGriggs13/status/2016382544208372114",
        "https://x.com/CarlyGriggs13/status/2016488234360918136",
        "https://x.com/CarlyGriggs13/status/2016486303655735588",
        "https://x.com/CarlyGriggs13/status/2016388540658053318",
        "https://x.com/CarlyGriggs13/status/2016487689080512701",
        "https://x.com/CarlyGriggs13/status/2016486019768472025",
        "https://x.com/CarlyGriggs13/status/2016487340424708332",
        "https://x.com/CarlyGriggs13/status/2016488784653684762",
        "https://x.com/CarlyGriggs13/status/2016394542967124368",
        "https://x.com/CarlyGriggs13/status/2016594252902596767",
        "https://x.com/CarlyGriggs13/status/2016387365565034823",
        "https://x.com/CarlyGriggs13/status/2016399158941188422",
        "https://x.com/CarlyGriggs13/status/2016394332127822297",
        "https://x.com/CarlyGriggs13/status/2016388630114116028",
        "https://x.com/CarlyGriggs13/status/2016402692264919342",
        "https://x.com/CarlyGriggs13/status/2016400833915527285",
        "https://x.com/CarlyGriggs13/status/2016390278370795698",
        "https://x.com/CarlyGriggs13/status/2016594470511530288",
        "https://x.com/CarlyGriggs13/status/2016389402537107711",
        "https://x.com/CarlyGriggs13/status/2016487476831875140",
        "https://x.com/CarlyGriggs13/status/2016486490113507777",
        "https://x.com/CarlyGriggs13/status/2016389609375121669",
        "https://x.com/CarlyGriggs13/status/2016390204521673072",
        "https://x.com/CarlyGriggs13/status/2016392821431738504",
        "https://x.com/CarlyGriggs13/status/2016383256699023531",
        "https://x.com/CarlyGriggs13/status/2016383446524755984",
        "https://x.com/CarlyGriggs13/status/2016483250634396142",
        "https://x.com/CarlyGriggs13/status/2016487082038845652",
        "https://x.com/CarlyGriggs13/status/2016381866727588209",
        "https://x.com/CarlyGriggs13/status/2016623500556194280",
        "https://x.com/CarlyGriggs13/status/2016387654170915235",
        "https://x.com/CarlyGriggs13/status/2016390114272743606",
        "https://x.com/CarlyGriggs13/status/2016391070209147386",
        "https://x.com/CarlyGriggs13/status/2016402314395791710",
        "https://x.com/CarlyGriggs13/status/2016381960944230535",
        "https://x.com/CarlyGriggs13/status/2016395959618400312",
        "https://x.com/CarlyGriggs13/status/2016392391024906392",
        "https://x.com/CarlyGriggs13/status/2016389800517947666",
        "https://x.com/CarlyGriggs13/status/2016395799572197651",
        "https://x.com/CarlyGriggs13/status/2016598519789080997",
        "https://x.com/CarlyGriggs13/status/2016384014395769139",
        "https://x.com/CarlyGriggs13/status/2016388724574027814",
        "https://x.com/CarlyGriggs13/status/2016488365151895712",
        "https://x.com/CarlyGriggs13/status/2016405613664755798",
        "https://x.com/CarlyGriggs13/status/2016488480902205492",
        "https://x.com/CarlyGriggs13/status/2016382649019846844",
        "https://x.com/CarlyGriggs13/status/2016592968493437234",
        "https://x.com/CarlyGriggs13/status/2016485845037916291",
        "https://x.com/CarlyGriggs13/status/2016487785281015895",
        "https://x.com/CarlyGriggs13/status/2016486387730600354",
        "https://x.com/CarlyGriggs13/status/2016402133873017180",
        "https://x.com/CarlyGriggs13/status/2016595908641902764",
        "https://x.com/CarlyGriggs13/status/2016394460880416887",
        "https://x.com/CarlyGriggs13/status/2016405746829726023",
        "https://x.com/CarlyGriggs13/status/2016486985695650223",
        "https://x.com/CarlyGriggs13/status/2016597809404006555",
        "https://x.com/CarlyGriggs13/status/2016401979791003852",
        "https://x.com/CarlyGriggs13/status/2016396071614681097",
        "https://x.com/CarlyGriggs13/status/2016596038321344831",
        "https://x.com/CarlyGriggs13/status/2016381445573406926",
        "https://x.com/CarlyGriggs13/status/2016597422668181825",
        "https://x.com/CarlyGriggs13/status/2016389124379246934",
        "https://x.com/CarlyGriggs13/status/2016384328582783137",
        "https://x.com/CarlyGriggs13/status/2016484790799659289",
        "https://x.com/CarlyGriggs13/status/2016381653078167571",
        "https://x.com/CarlyGriggs13/status/2016402452623356316",
        "https://x.com/CarlyGriggs13/status/2016395477525098915",
        "https://x.com/CarlyGriggs13/status/2016381551349473653",
        "https://x.com/CarlyGriggs13/status/2016388805557657810",
        "https://x.com/CarlyGriggs13/status/2016400735953363410",
        "https://x.com/CarlyGriggs13/status/2016382310111682943",
        "https://x.com/CarlyGriggs13/status/2016405501043450107",
        "https://x.com/CarlyGriggs13/status/2016404853623284120",
        "https://x.com/CarlyGriggs13/status/2016486106846421250",
        "https://x.com/CarlyGriggs13/status/2016594599507349932",
        "https://x.com/CarlyGriggs13/status/2016396491732988145",
        "https://x.com/CarlyGriggs13/status/2016383638699479206",
        "https://x.com/CarlyGriggs13/status/2016389701196726592",
        "https://x.com/CarlyGriggs13/status/2016389215618060382",
        "https://x.com/CarlyGriggs13/status/2016388428745642329",
        "https://x.com/CarlyGriggs13/status/2016405947682279804",
        "https://x.com/CarlyGriggs13/status/2016485741132501235",
        "https://x.com/CarlyGriggs13/status/2016384121325428810",
        "https://x.com/CarlyGriggs13/status/2016398970575036685",
        "https://x.com/CarlyGriggs13/status/2016594984242446553",
        "https://x.com/CarlyGriggs13/status/2016399696051232821",
        "https://x.com/CarlyGriggs13/status/2016401703352889769",
        "https://x.com/CarlyGriggs13/status/2016617561765662980",
        "https://x.com/CarlyGriggs13/status/2016596491918582073",
        "https://x.com/CarlyGriggs13/status/2016405847786582155",
        "https://x.com/CarlyGriggs13/status/2016483379852525801",
        "https://x.com/CarlyGriggs13/status/2016595463575921127",
        "https://x.com/CarlyGriggs13/status/2016388916190863459",
        "https://x.com/CarlyGriggs13/status/2016406290981855312",
        "https://x.com/CarlyGriggs13/status/2016487256538624209",
        "https://x.com/CarlyGriggs13/status/2016382430471463129",
        "https://x.com/CarlyGriggs13/status/2016383044857311535",
        "https://x.com/CarlyGriggs13/status/2016595574192292280",
        "https://x.com/CarlyGriggs13/status/2016401468257865765",
        "https://x.com/CarlyGriggs13/status/2016404729790693481",
        "https://x.com/CarlyGriggs13/status/2016400934931206542"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 11,
  "pulses": [
    {
      "id": "69c081afa2bd54a9599b7c07",
      "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
      "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
      "modified": "2026-05-24T00:00:03.049000",
      "created": "2026-03-22T23:56:29.438000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 33,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 93266,
        "hostname": 57600
      },
      "indicator_count": 150866,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 100,
      "modified_text": "10 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69c08867316c564ade394c69",
      "name": "PhishDestroy \u2014 Content Active Threats (Live)",
      "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
      "modified": "2026-05-21T12:06:19.702000",
      "created": "2026-03-23T00:25:09.116000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy",
        "active",
        "content"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 132502,
        "hostname": 66217
      },
      "indicator_count": 198719,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 44,
      "modified_text": "13 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cb0ce73bef5c452bfb0",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:04.332000",
      "created": "2026-05-04T06:29:04.332000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 73,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83caf1bef3609f0eb79e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:03.120000",
      "created": "2026-05-04T06:29:03.120000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 72,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cac7d6c947de6c080f9",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:00.417000",
      "created": "2026-05-04T06:29:00.417000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab9769e92b3285a2b4",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.770000",
      "created": "2026-05-04T06:28:59.770000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab7e03b19c5f1078e3",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.113000",
      "created": "2026-05-04T06:28:59.113000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 72,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca9411c8ab5d294a7e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:57.479000",
      "created": "2026-05-04T06:28:57.479000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca77d6c947de6c080f8",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:55.093000",
      "created": "2026-05-04T06:28:55.093000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 71,
      "modified_text": "30 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "697ad936709a109a02e44e09",
      "name": "Malware Filter - Phishing List - 28-01-2026 (Part 1)",
      "description": "",
      "modified": "2026-01-29T03:51:18.599000",
      "created": "2026-01-29T03:51:18.599000",
      "tags": [],
      "references": [
        "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 1,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "CyberHunterAutoFeed",
        "id": "182496",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "hostname": 405,
        "domain": 95
      },
      "indicator_count": 500,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 1626,
      "modified_text": "125 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "cpcodmobile.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "cpcodmobile.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780505254.1484191
}