{ "type": "Domain", "indicator": "epromodeals.com", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/epromodeals.com", "alexa": "http://www.alexa.com/siteinfo/epromodeals.com", "indicator": "epromodeals.com", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 4050323045, "indicator": "epromodeals.com", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 36, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "8 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b02d35cb6473fc18d671f8", "name": "Phishing | Mar 11, 2026 | Part 147/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 147/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:39:49.687000", "created": "2026-03-10T14:39:49.687000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 768, "hostname": 1232 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aed9e2e71226e4989589c1", "name": "Phishing | Mar 10, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:32:02.455000", "created": "2026-03-09T14:32:02.455000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1170, "domain": 830 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ad869288a9d4f0cc3e2c19", "name": "Phishing | Mar 9, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 9, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-08T14:24:18.558000", "created": "2026-03-08T14:24:18.558000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1211, "domain": 789 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "84 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69ac35b0db89ce95fd8c2bc6", "name": "Phishing | Mar 8, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 8, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-07T14:26:56.173000", "created": "2026-03-07T14:26:56.173000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1211, "domain": 789 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "85 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aae30fb17a66e643d9fe8d", "name": "Phishing | Mar 7, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 7, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-06T14:22:07.146000", "created": "2026-03-06T14:22:07.146000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 790, "hostname": 1210 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "86 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a997c0380a99724ebcf1ea", "name": "Phishing | Mar 6, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 6, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-05T14:48:32.549000", "created": "2026-03-05T14:48:32.549000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 790, "hostname": 1210 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "87 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a840f8e9bf7e3805c47a19", "name": "Phishing | Mar 5, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 5, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-04T14:26:00.935000", "created": "2026-03-04T14:26:00.935000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 790, "hostname": 1210 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "88 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a6ee19d99cd4169127e8b7", "name": "Phishing | Mar 4, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 4, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-03T14:20:09.425000", "created": "2026-03-03T14:20:09.425000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1210, "domain": 790 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "89 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a5b40f809625b35d745d33", "name": "Phishing | Mar 3, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 3, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T16:00:15.491000", "created": "2026-03-02T16:00:15.491000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1210, "domain": 790 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "90 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a512403b69209b0491f453", "name": "Phishing | Mar 2, 2026 | Part 118/729", "description": "Phishing indicators. Date: Mar 2, 2026. Part 118/729. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-02T04:29:52.600000", "created": "2026-03-02T04:29:52.600000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1384, "domain": 616 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a43ea5a1c01b1f2872aefa", "name": "Phishing | Mar 2, 2026 | Part 120/732", "description": "Phishing indicators. Date: Mar 2, 2026. Part 120/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T13:27:01.394000", "created": "2026-03-01T13:27:01.394000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1222, "domain": 778 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "91 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a40465a5305e3940bbbdbd", "name": "Phishing | Mar 1, 2026 | Part 120/732", "description": "Phishing indicators. Date: Mar 1, 2026. Part 120/732. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T09:18:29.909000", "created": "2026-03-01T09:18:29.909000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1222, "domain": 778 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69a382b83f3fe8294ed8cf13", "name": "Phishing | Mar 1, 2026 | Part 120/733", "description": "Phishing indicators. Date: Mar 1, 2026. Part 120/733. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-01T00:05:12.792000", "created": "2026-03-01T00:05:12.792000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 649, "hostname": 1351 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "92 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997f983b67049f8cb50aad1", "name": "Phishing | Feb 20, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-20T06:04:51.886000", "created": "2026-02-20T06:04:51.886000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 665, "hostname": 1335 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6997671f2c8da571fe50a93b", "name": "Phishing | Feb 20, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T19:40:15.194000", "created": "2026-02-19T19:40:15.194000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 665, "hostname": 1335 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699727e425434e13040b2868", "name": "Phishing | Feb 20, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 20, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T15:10:28.644000", "created": "2026-02-19T15:10:28.644000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 665, "hostname": 1335 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699708ae660d994ecf949333", "name": "Phishing | Feb 19, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-19T12:57:18.189000", "created": "2026-02-19T12:57:18.189000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 665, "hostname": 1335 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "101 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6996327d1d903c0836cb23fe", "name": "Phishing | Feb 19, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 19, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T21:43:25.958000", "created": "2026-02-18T21:43:25.958000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 665, "hostname": 1335 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "102 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69957382f0fca572492c1bca", "name": "Phishing | Feb 18, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-18T08:08:34.854000", "created": "2026-02-18T08:08:34.854000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 666, "hostname": 1334 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6994ca958f38a5ae337409df", "name": "Phishing | Feb 18, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T20:07:49.202000", "created": "2026-02-17T20:07:49.202000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 666, "hostname": 1334 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699497f23d2cd86e8647f76f", "name": "Phishing | Feb 18, 2026 | Part 121/735", "description": "Phishing indicators. Date: Feb 18, 2026. Part 121/735. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-17T16:31:46.704000", "created": "2026-02-17T16:31:46.704000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 666, "hostname": 1334 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "103 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699295fe3190a28267590102", "name": "Phishing | Feb 16, 2026 | Part 123/741", "description": "Phishing indicators. Date: Feb 16, 2026. Part 123/741. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-16T03:58:54.589000", "created": "2026-02-16T03:58:54.589000", "tags": [ "phishing", "phishing-database", "threatfox" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1298, "domain": 702 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699156aaf79d4ccc6cc0973d", "name": "Phishing | Feb 15, 2026 | Part 125/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 125/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:16:26.160000", "created": "2026-02-15T05:16:26.160000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1280, "domain": 720 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "699088186201aa3553ff60f3", "name": "Phishing | Feb 15, 2026 | Part 126/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 126/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:35:04.753000", "created": "2026-02-14T14:35:04.753000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1340, "domain": 660 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "106 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c5a7bad4166b632bb4304", "name": "Phishing | Feb 11, 2026 | Part 144/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 144/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:31:23.413000", "created": "2026-02-11T10:31:23.413000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1272, "domain": 728 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "109 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981a8e16bad6cb1df783469", "name": "Phishing | 2026-01-31 | Part 44/163", "description": "Phishing indicators. Date: 2026-01-31. Part 44/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T07:50:57.736000", "created": "2026-02-03T07:50:57.736000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 3696, "hostname": 6303 }, "indicator_count": 9999, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "118 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "695c73ef945f6e4d8dc01406", "name": "Twitter Feed - CarlyGriggs13 - 05-01-2026", "description": "", "modified": "2026-01-06T02:31:11.557000", "created": "2026-01-06T02:31:11.557000", "tags": [ "scam" ], "references": [ "https://x.com/CarlyGriggs13/status/2007969383013085238", "https://x.com/CarlyGriggs13/status/2007970514061733965", "https://x.com/CarlyGriggs13/status/2007971093135626513", "https://x.com/CarlyGriggs13/status/2007971189575266335", "https://x.com/CarlyGriggs13/status/2007971289844355215", "https://x.com/CarlyGriggs13/status/2007971373441061357", "https://x.com/CarlyGriggs13/status/2007971562281197877", "https://x.com/CarlyGriggs13/status/2007971663196102987", "https://x.com/CarlyGriggs13/status/2007971752568344895", "https://x.com/CarlyGriggs13/status/2007971856926801995", "https://x.com/CarlyGriggs13/status/2007971933871378822", "https://x.com/CarlyGriggs13/status/2007972017887388104", "https://x.com/CarlyGriggs13/status/2007972087529632013", "https://x.com/CarlyGriggs13/status/2007972187748364647", "https://x.com/CarlyGriggs13/status/2007972539856040050", "https://x.com/CarlyGriggs13/status/2007977377981440007", "https://x.com/CarlyGriggs13/status/2007977880362590588", "https://x.com/CarlyGriggs13/status/2007977965423092189", "https://x.com/CarlyGriggs13/status/2007978067466346560", "https://x.com/CarlyGriggs13/status/2007978156196786438", "https://x.com/CarlyGriggs13/status/2007983790363460034", "https://x.com/CarlyGriggs13/status/2007993830734549420", "https://x.com/CarlyGriggs13/status/2007995340709126540", "https://x.com/CarlyGriggs13/status/2008020090319749441", "https://x.com/CarlyGriggs13/status/2008024625733906483", "https://x.com/CarlyGriggs13/status/2008047299151143084", "https://x.com/CarlyGriggs13/status/2008047380684501292", "https://x.com/CarlyGriggs13/status/2008071710696968441", "https://x.com/CarlyGriggs13/status/2008071767214973227", "https://x.com/CarlyGriggs13/status/2008071856192987428", "https://x.com/CarlyGriggs13/status/2008071946546639261", "https://x.com/CarlyGriggs13/status/2008072050674381184", "https://x.com/CarlyGriggs13/status/2008072156677025877", "https://x.com/CarlyGriggs13/status/2008072241670771083", "https://x.com/CarlyGriggs13/status/2008072317210181660", "https://x.com/CarlyGriggs13/status/2008072395605889314", "https://x.com/CarlyGriggs13/status/2008072491403825331", "https://x.com/CarlyGriggs13/status/2008072582319481246", "https://x.com/CarlyGriggs13/status/2008072668931924130", "https://x.com/CarlyGriggs13/status/2008072775156846839", "https://x.com/CarlyGriggs13/status/2008075048519659906", "https://x.com/CarlyGriggs13/status/2008075156774588469", "https://x.com/CarlyGriggs13/status/2008075254061572607", "https://x.com/CarlyGriggs13/status/2008075323410378856", "https://x.com/CarlyGriggs13/status/2008075421812969691", "https://x.com/CarlyGriggs13/status/2008075497943810526", "https://x.com/CarlyGriggs13/status/2008079076704100381", "https://x.com/CarlyGriggs13/status/2008088229770088645", "https://x.com/CarlyGriggs13/status/2008151112562643001", "https://x.com/CarlyGriggs13/status/2008152252142456887", "https://x.com/CarlyGriggs13/status/2008152354898825415", "https://x.com/CarlyGriggs13/status/2008152474746794096", "https://x.com/CarlyGriggs13/status/2008152596310303160", "https://x.com/CarlyGriggs13/status/2008152836274839840", "https://x.com/CarlyGriggs13/status/2008152945091834266", "https://x.com/CarlyGriggs13/status/2008153070249906207", "https://x.com/CarlyGriggs13/status/2008153175669547211", "https://x.com/CarlyGriggs13/status/2008153290002088381", "https://x.com/CarlyGriggs13/status/2008153478875496569", "https://x.com/CarlyGriggs13/status/2008153981198172329", "https://x.com/CarlyGriggs13/status/2008157042318663945", "https://x.com/CarlyGriggs13/status/2008157372217467369", "https://x.com/CarlyGriggs13/status/2008161496405012571", "https://x.com/CarlyGriggs13/status/2008164386092048760", "https://x.com/CarlyGriggs13/status/2008164726145196490", "https://x.com/CarlyGriggs13/status/2008164834332860471", "https://x.com/CarlyGriggs13/status/2008164934878965997", "https://x.com/CarlyGriggs13/status/2008165040591909068", "https://x.com/CarlyGriggs13/status/2008165165384990964", "https://x.com/CarlyGriggs13/status/2008165288253001787", "https://x.com/CarlyGriggs13/status/2008165390304629055", "https://x.com/CarlyGriggs13/status/2008165515349598718", "https://x.com/CarlyGriggs13/status/2008166784176644213", "https://x.com/CarlyGriggs13/status/2008170547683729690", "https://x.com/CarlyGriggs13/status/2008170733932069066", "https://x.com/CarlyGriggs13/status/2008170846754402312", "https://x.com/CarlyGriggs13/status/2008171042968121748", "https://x.com/CarlyGriggs13/status/2008171136400445878", "https://x.com/CarlyGriggs13/status/2008171261063545115", "https://x.com/CarlyGriggs13/status/2008171364469940615", "https://x.com/CarlyGriggs13/status/2008171466991235472", "https://x.com/CarlyGriggs13/status/2008172744622440707", "https://x.com/CarlyGriggs13/status/2008178390365569028", "https://x.com/CarlyGriggs13/status/2008178581080609065", "https://x.com/CarlyGriggs13/status/2008179005518938398", "https://x.com/CarlyGriggs13/status/2008179103267176692", "https://x.com/CarlyGriggs13/status/2008179198243012649", "https://x.com/CarlyGriggs13/status/2008179508072100149", "https://x.com/CarlyGriggs13/status/2008226035436036341", "https://x.com/CarlyGriggs13/status/2008227829616431610", "https://x.com/CarlyGriggs13/status/2008227942967763312", "https://x.com/CarlyGriggs13/status/2008228040019767695", "https://x.com/CarlyGriggs13/status/2008228134638800900", "https://x.com/CarlyGriggs13/status/2008228234094367051", "https://x.com/CarlyGriggs13/status/2008228353145532449", "https://x.com/CarlyGriggs13/status/2008228513757769935", "https://x.com/CarlyGriggs13/status/2008228618128789987", "https://x.com/CarlyGriggs13/status/2008228709149335867", "https://x.com/CarlyGriggs13/status/2008228818490650762", "https://x.com/CarlyGriggs13/status/2008228914297225372", "https://x.com/CarlyGriggs13/status/2008229016503796034", "https://x.com/CarlyGriggs13/status/2008229129489883260", "https://x.com/CarlyGriggs13/status/2008229253570060529", "https://x.com/CarlyGriggs13/status/2008229365096841216", "https://x.com/CarlyGriggs13/status/2008229476853862430", "https://x.com/CarlyGriggs13/status/2008236599276904553", "https://x.com/CarlyGriggs13/status/2008236702142459968", "https://x.com/CarlyGriggs13/status/2008236817393611192", "https://x.com/CarlyGriggs13/status/2008236905901523181", "https://x.com/CarlyGriggs13/status/2008237004417626440", "https://x.com/CarlyGriggs13/status/2008237106175631818", "https://x.com/CarlyGriggs13/status/2008237221350932694", "https://x.com/CarlyGriggs13/status/2008237323583213664", "https://x.com/CarlyGriggs13/status/2008237438108660140", "https://x.com/CarlyGriggs13/status/2008237564474400805", "https://x.com/CarlyGriggs13/status/2008237660955955476", "https://x.com/CarlyGriggs13/status/2008239065888412120", "https://x.com/CarlyGriggs13/status/2008239178056896787", "https://x.com/CarlyGriggs13/status/2008239275339341829", "https://x.com/CarlyGriggs13/status/2008250753408975076", "https://x.com/CarlyGriggs13/status/2008251731449430385", "https://x.com/CarlyGriggs13/status/2008251844624347516", "https://x.com/CarlyGriggs13/status/2008251940883558643", "https://x.com/CarlyGriggs13/status/2008252659703451651", "https://x.com/CarlyGriggs13/status/2008253291072045178", "https://x.com/CarlyGriggs13/status/2008253389113835979", "https://x.com/CarlyGriggs13/status/2008253478188245193", "https://x.com/CarlyGriggs13/status/2008253623118295191", "https://x.com/CarlyGriggs13/status/2008253713295773744", "https://x.com/CarlyGriggs13/status/2008254323239907558", "https://x.com/CarlyGriggs13/status/2008267099546804252", "https://x.com/CarlyGriggs13/status/2008309746667807194" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 114, "URL": 132, "hostname": 18 }, "indicator_count": 264, "is_author": false, "is_subscribing": null, "subscriber_count": 1623, "modified_text": "146 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67dd8fe7cf298fa34843de78", "name": "NSTH-POC", "description": "For POC", "modified": "2025-03-24T06:10:43.345000", "created": "2025-03-21T16:12:23.823000", "tags": [], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 5, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "nsthsharedotx", "id": "274519", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 154, "FileHash-SHA1": 3, "domain": 8339, "hostname": 10122 }, "indicator_count": 18618, "is_author": false, "is_subscribing": null, "subscriber_count": 3, "modified_text": "434 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "https://ltna.com.au/cyber", "https://x.com/CarlyGriggs13/status/2008171466991235472", "https://x.com/CarlyGriggs13/status/2008171364469940615", "https://x.com/CarlyGriggs13/status/2007995340709126540", "https://x.com/CarlyGriggs13/status/2008228040019767695", "https://x.com/CarlyGriggs13/status/2008237221350932694", "https://x.com/CarlyGriggs13/status/2007970514061733965", "https://x.com/CarlyGriggs13/status/2008079076704100381", "https://x.com/CarlyGriggs13/status/2008228709149335867", "https://x.com/CarlyGriggs13/status/2008251940883558643", "https://x.com/CarlyGriggs13/status/2008253389113835979", "https://x.com/CarlyGriggs13/status/2007977880362590588", "https://x.com/CarlyGriggs13/status/2008071710696968441", "https://x.com/CarlyGriggs13/status/2007972187748364647", "https://x.com/CarlyGriggs13/status/2008170846754402312", "https://x.com/CarlyGriggs13/status/2008024625733906483", "https://x.com/CarlyGriggs13/status/2008153175669547211", "https://x.com/CarlyGriggs13/status/2008153478875496569", "https://x.com/CarlyGriggs13/status/2008161496405012571", "https://x.com/CarlyGriggs13/status/2008072582319481246", "https://x.com/CarlyGriggs13/status/2008171261063545115", "https://x.com/CarlyGriggs13/status/2008166784176644213", "https://x.com/CarlyGriggs13/status/2008253623118295191", "https://x.com/CarlyGriggs13/status/2008072317210181660", "https://x.com/CarlyGriggs13/status/2008228234094367051", "https://x.com/CarlyGriggs13/status/2008267099546804252", "https://x.com/CarlyGriggs13/status/2007972539856040050", "https://x.com/CarlyGriggs13/status/2008228618128789987", "https://x.com/CarlyGriggs13/status/2008152836274839840", "https://x.com/CarlyGriggs13/status/2008228353145532449", "https://x.com/CarlyGriggs13/status/2008237438108660140", "https://x.com/CarlyGriggs13/status/2008251844624347516", "https://x.com/CarlyGriggs13/status/2008152596310303160", "https://x.com/CarlyGriggs13/status/2008171042968121748", "https://x.com/CarlyGriggs13/status/2008178581080609065", "https://x.com/CarlyGriggs13/status/2008252659703451651", "https://x.com/CarlyGriggs13/status/2008088229770088645", "https://x.com/CarlyGriggs13/status/2008020090319749441", "https://x.com/CarlyGriggs13/status/2008179198243012649", "https://x.com/CarlyGriggs13/status/2008229129489883260", "https://x.com/CarlyGriggs13/status/2008254323239907558", "https://x.com/CarlyGriggs13/status/2008075048519659906", "https://x.com/CarlyGriggs13/status/2008179005518938398", "https://x.com/CarlyGriggs13/status/2007971562281197877", "https://x.com/CarlyGriggs13/status/2008251731449430385", "https://x.com/CarlyGriggs13/status/2008153070249906207", "https://x.com/CarlyGriggs13/status/2008072156677025877", "https://x.com/CarlyGriggs13/status/2008152354898825415", "https://x.com/CarlyGriggs13/status/2008165288253001787", "https://x.com/CarlyGriggs13/status/2008165390304629055", "https://x.com/CarlyGriggs13/status/2008228134638800900", "https://x.com/CarlyGriggs13/status/2008072050674381184", "https://x.com/CarlyGriggs13/status/2007969383013085238", "https://x.com/CarlyGriggs13/status/2008075156774588469", "https://x.com/CarlyGriggs13/status/2008239275339341829", "https://x.com/CarlyGriggs13/status/2008164934878965997", "https://x.com/CarlyGriggs13/status/2008075497943810526", "https://x.com/CarlyGriggs13/status/2008229476853862430", "https://x.com/CarlyGriggs13/status/2007983790363460034", "https://x.com/CarlyGriggs13/status/2008152474746794096", "https://x.com/CarlyGriggs13/status/2008075323410378856", "https://x.com/CarlyGriggs13/status/2007977965423092189", "https://x.com/CarlyGriggs13/status/2008236702142459968", "https://x.com/CarlyGriggs13/status/2007971093135626513", "https://x.com/CarlyGriggs13/status/2007972087529632013", "https://x.com/CarlyGriggs13/status/2008072775156846839", "https://x.com/CarlyGriggs13/status/2008165040591909068", "https://x.com/CarlyGriggs13/status/2008153981198172329", "https://x.com/CarlyGriggs13/status/2007972017887388104", "https://x.com/CarlyGriggs13/status/2007993830734549420", "https://x.com/CarlyGriggs13/status/2008072395605889314", "https://x.com/CarlyGriggs13/status/2008071946546639261", "https://x.com/CarlyGriggs13/status/2008179508072100149", "https://x.com/CarlyGriggs13/status/2007977377981440007", "https://x.com/CarlyGriggs13/status/2008153290002088381", "https://x.com/CarlyGriggs13/status/2008164726145196490", "https://x.com/CarlyGriggs13/status/2008227942967763312", "https://x.com/CarlyGriggs13/status/2007978156196786438", "https://x.com/CarlyGriggs13/status/2008152945091834266", "https://x.com/CarlyGriggs13/status/2008236599276904553", "https://x.com/CarlyGriggs13/status/2008071856192987428", "https://x.com/CarlyGriggs13/status/2008072491403825331", "https://x.com/CarlyGriggs13/status/2008229365096841216", "https://x.com/CarlyGriggs13/status/2008165515349598718", "https://x.com/CarlyGriggs13/status/2008250753408975076", "https://x.com/CarlyGriggs13/status/2008170733932069066", "https://x.com/CarlyGriggs13/status/2008239178056896787", "https://x.com/CarlyGriggs13/status/2008072241670771083", "https://x.com/CarlyGriggs13/status/2008229016503796034", "https://x.com/CarlyGriggs13/status/2007971289844355215", "https://x.com/CarlyGriggs13/status/2008179103267176692", "https://x.com/CarlyGriggs13/status/2008071767214973227", "https://x.com/CarlyGriggs13/status/2008164834332860471", "https://x.com/CarlyGriggs13/status/2008253291072045178", "https://x.com/CarlyGriggs13/status/2008075421812969691", "https://x.com/CarlyGriggs13/status/2007971373441061357", "https://x.com/CarlyGriggs13/status/2008151112562643001", "https://x.com/CarlyGriggs13/status/2008237564474400805", "https://x.com/CarlyGriggs13/status/2008228818490650762", "https://x.com/CarlyGriggs13/status/2008165165384990964", "https://x.com/CarlyGriggs13/status/2008237660955955476", "https://x.com/CarlyGriggs13/status/2007971663196102987", "https://x.com/CarlyGriggs13/status/2008309746667807194", "https://x.com/CarlyGriggs13/status/2008226035436036341", "https://x.com/CarlyGriggs13/status/2008229253570060529", "https://x.com/CarlyGriggs13/status/2007971189575266335", "https://x.com/CarlyGriggs13/status/2008164386092048760", "https://x.com/CarlyGriggs13/status/2007978067466346560", "https://x.com/CarlyGriggs13/status/2008047299151143084", "https://x.com/CarlyGriggs13/status/2007971933871378822", "https://x.com/CarlyGriggs13/status/2007971856926801995", "https://x.com/CarlyGriggs13/status/2008170547683729690", "https://x.com/CarlyGriggs13/status/2008237106175631818", "https://x.com/CarlyGriggs13/status/2008152252142456887", "https://x.com/CarlyGriggs13/status/2008075254061572607", "https://x.com/CarlyGriggs13/status/2008171136400445878", "https://x.com/CarlyGriggs13/status/2008228513757769935", "https://x.com/CarlyGriggs13/status/2008178390365569028", "https://x.com/CarlyGriggs13/status/2008253478188245193", "https://x.com/CarlyGriggs13/status/2008157042318663945", "https://x.com/CarlyGriggs13/status/2008239065888412120", "https://x.com/CarlyGriggs13/status/2008072668931924130", "https://x.com/CarlyGriggs13/status/2007971752568344895", "https://x.com/CarlyGriggs13/status/2008227829616431610", "https://x.com/CarlyGriggs13/status/2008157372217467369", "https://x.com/CarlyGriggs13/status/2008236905901523181", "https://x.com/CarlyGriggs13/status/2008253713295773744", "https://x.com/CarlyGriggs13/status/2008236817393611192", "https://x.com/CarlyGriggs13/status/2008172744622440707", "https://x.com/CarlyGriggs13/status/2008237323583213664", "https://x.com/CarlyGriggs13/status/2008228914297225372", "https://x.com/CarlyGriggs13/status/2008237004417626440", "https://x.com/CarlyGriggs13/status/2008047380684501292" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [], "malware_families": [], "industries": [] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 36, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "8 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "28 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b02d35cb6473fc18d671f8", "name": "Phishing | Mar 11, 2026 | Part 147/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 147/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T14:39:49.687000", "created": "2026-03-10T14:39:49.687000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 768, "hostname": 1232 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 91, "modified_text": "82 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69aed9e2e71226e4989589c1", "name": "Phishing | Mar 10, 2026 | Part 118/726", "description": "Phishing indicators. Date: Mar 10, 2026. Part 118/726. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-09T14:32:02.455000", "created": "2026-03-09T14:32:02.455000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1170, "domain": 830 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 92, "modified_text": "83 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "epromodeals.com", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "epromodeals.com", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780306809.7222905 }