{
  "type": "Domain",
  "indicator": "gonewo.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/gonewo.com",
    "alexa": "http://www.alexa.com/siteinfo/gonewo.com",
    "indicator": "gonewo.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 4068849979,
      "indicator": "gonewo.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 13,
      "pulses": [
        {
          "id": "69c081afa2bd54a9599b7c07",
          "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
          "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
          "modified": "2026-05-24T00:00:03.049000",
          "created": "2026-03-22T23:56:29.438000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 33,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 93266,
            "hostname": 57600
          },
          "indicator_count": 150866,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 99,
          "modified_text": "7 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69c08867316c564ade394c69",
          "name": "PhishDestroy \u2014 Content Active Threats (Live)",
          "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
          "modified": "2026-05-21T12:06:19.702000",
          "created": "2026-03-23T00:25:09.116000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy",
            "active",
            "content"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 132502,
            "hostname": 66217
          },
          "indicator_count": 198719,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 44,
          "modified_text": "9 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cb0ce73bef5c452bfb0",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:04.332000",
          "created": "2026-05-04T06:29:04.332000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83caf1bef3609f0eb79e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:03.120000",
          "created": "2026-05-04T06:29:03.120000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cac7d6c947de6c080f9",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:00.417000",
          "created": "2026-05-04T06:29:00.417000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab9769e92b3285a2b4",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.770000",
          "created": "2026-05-04T06:28:59.770000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab7e03b19c5f1078e3",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.113000",
          "created": "2026-05-04T06:28:59.113000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca9411c8ab5d294a7e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:57.479000",
          "created": "2026-05-04T06:28:57.479000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca77d6c947de6c080f8",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:55.093000",
          "created": "2026-05-04T06:28:55.093000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "27 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69128f2c54663cb997e8c1c7",
          "name": "Twitter Feed - CarlyGriggs13 - 10-11-2025",
          "description": "",
          "modified": "2025-12-11T01:00:08.056000",
          "created": "2025-11-11T01:19:40.387000",
          "tags": [
            "phishing",
            "scam"
          ],
          "references": [
            "https://x.com/CarlyGriggs13/status/1987689079656366497",
            "https://x.com/CarlyGriggs13/status/1987689288687858132",
            "https://x.com/CarlyGriggs13/status/1987689420061827212",
            "https://x.com/CarlyGriggs13/status/1987689525527851079",
            "https://x.com/CarlyGriggs13/status/1987689623640760670",
            "https://x.com/CarlyGriggs13/status/1987689723348099260",
            "https://x.com/CarlyGriggs13/status/1987689864628932818",
            "https://x.com/CarlyGriggs13/status/1987689995902312624",
            "https://x.com/CarlyGriggs13/status/1987690136243687579",
            "https://x.com/CarlyGriggs13/status/1987690252778279077",
            "https://x.com/CarlyGriggs13/status/1987690387054453167",
            "https://x.com/CarlyGriggs13/status/1987691782650437832",
            "https://x.com/CarlyGriggs13/status/1987695591103635690",
            "https://x.com/CarlyGriggs13/status/1987695701632176459",
            "https://x.com/CarlyGriggs13/status/1987695806799859786",
            "https://x.com/CarlyGriggs13/status/1987695924727177545",
            "https://x.com/CarlyGriggs13/status/1987696037956378815",
            "https://x.com/CarlyGriggs13/status/1987696161835147438",
            "https://x.com/CarlyGriggs13/status/1987696276331184427",
            "https://x.com/CarlyGriggs13/status/1987696376549879937",
            "https://x.com/CarlyGriggs13/status/1987696505986367983",
            "https://x.com/CarlyGriggs13/status/1987696607484096938",
            "https://x.com/CarlyGriggs13/status/1987696737562038732",
            "https://x.com/CarlyGriggs13/status/1987696840385704258",
            "https://x.com/CarlyGriggs13/status/1987696958727749860",
            "https://x.com/CarlyGriggs13/status/1987697987103928349",
            "https://x.com/CarlyGriggs13/status/1987698659027243376",
            "https://x.com/CarlyGriggs13/status/1987701525670400065",
            "https://x.com/CarlyGriggs13/status/1987701688128426133",
            "https://x.com/CarlyGriggs13/status/1987701857188208984",
            "https://x.com/CarlyGriggs13/status/1987702088344985884",
            "https://x.com/CarlyGriggs13/status/1987702600792420479",
            "https://x.com/CarlyGriggs13/status/1987702779750605195",
            "https://x.com/CarlyGriggs13/status/1987702919815405664",
            "https://x.com/CarlyGriggs13/status/1987703050769997936",
            "https://x.com/CarlyGriggs13/status/1987703201861079100",
            "https://x.com/CarlyGriggs13/status/1987703359080378750",
            "https://x.com/CarlyGriggs13/status/1987703522347917777",
            "https://x.com/CarlyGriggs13/status/1987703668036993353",
            "https://x.com/CarlyGriggs13/status/1987703837851791795",
            "https://x.com/CarlyGriggs13/status/1987704005770842354",
            "https://x.com/CarlyGriggs13/status/1987704155973230707",
            "https://x.com/CarlyGriggs13/status/1987704288663994693",
            "https://x.com/CarlyGriggs13/status/1987704424660099107",
            "https://x.com/CarlyGriggs13/status/1987704558999802052",
            "https://x.com/CarlyGriggs13/status/1987704710455857279",
            "https://x.com/CarlyGriggs13/status/1987704867645698172",
            "https://x.com/CarlyGriggs13/status/1987705024680427849",
            "https://x.com/CarlyGriggs13/status/1987705192461082768",
            "https://x.com/CarlyGriggs13/status/1987705724072305086",
            "https://x.com/CarlyGriggs13/status/1987707994105073831",
            "https://x.com/CarlyGriggs13/status/1987708168139678003",
            "https://x.com/CarlyGriggs13/status/1987710300401828095",
            "https://x.com/CarlyGriggs13/status/1987710511199183258",
            "https://x.com/CarlyGriggs13/status/1987710722931826991",
            "https://x.com/CarlyGriggs13/status/1987711255440662707",
            "https://x.com/CarlyGriggs13/status/1987711791741497459",
            "https://x.com/CarlyGriggs13/status/1987711995840278600",
            "https://x.com/CarlyGriggs13/status/1987712184881676570",
            "https://x.com/CarlyGriggs13/status/1987712549593207151",
            "https://x.com/CarlyGriggs13/status/1987712909208617142",
            "https://x.com/CarlyGriggs13/status/1987713299421577721",
            "https://x.com/CarlyGriggs13/status/1987713554284229029",
            "https://x.com/CarlyGriggs13/status/1987713799231574035",
            "https://x.com/CarlyGriggs13/status/1987714065733648677",
            "https://x.com/CarlyGriggs13/status/1987716656961917412",
            "https://x.com/CarlyGriggs13/status/1987718536353951836",
            "https://x.com/CarlyGriggs13/status/1987719445335134424",
            "https://x.com/CarlyGriggs13/status/1987719605960560640",
            "https://x.com/CarlyGriggs13/status/1987719761950875911",
            "https://x.com/CarlyGriggs13/status/1987719951675699686",
            "https://x.com/CarlyGriggs13/status/1987720120353902758",
            "https://x.com/CarlyGriggs13/status/1987720277250195912",
            "https://x.com/CarlyGriggs13/status/1987720427037130988",
            "https://x.com/CarlyGriggs13/status/1987720559744938325",
            "https://x.com/CarlyGriggs13/status/1987767631915463133",
            "https://x.com/CarlyGriggs13/status/1987784052976562393",
            "https://x.com/CarlyGriggs13/status/1987784160589586699",
            "https://x.com/CarlyGriggs13/status/1987784279489679813",
            "https://x.com/CarlyGriggs13/status/1987784395839635745",
            "https://x.com/CarlyGriggs13/status/1987784521396171238",
            "https://x.com/CarlyGriggs13/status/1987784651293827096",
            "https://x.com/CarlyGriggs13/status/1987784764275753386",
            "https://x.com/CarlyGriggs13/status/1987784875856843089",
            "https://x.com/CarlyGriggs13/status/1987784977312858336",
            "https://x.com/CarlyGriggs13/status/1987785100877344972",
            "https://x.com/CarlyGriggs13/status/1987785207236202502",
            "https://x.com/CarlyGriggs13/status/1987785319890952262",
            "https://x.com/CarlyGriggs13/status/1987785426094964772",
            "https://x.com/CarlyGriggs13/status/1987785547348160711",
            "https://x.com/CarlyGriggs13/status/1987785673450107353",
            "https://x.com/CarlyGriggs13/status/1987785772808708213",
            "https://x.com/CarlyGriggs13/status/1987785873895653613",
            "https://x.com/CarlyGriggs13/status/1987785994188321246",
            "https://x.com/CarlyGriggs13/status/1987786125826527633",
            "https://x.com/CarlyGriggs13/status/1987800946282320327",
            "https://x.com/CarlyGriggs13/status/1987804144522961107",
            "https://x.com/CarlyGriggs13/status/1987839597917655481",
            "https://x.com/CarlyGriggs13/status/1987839663080456314",
            "https://x.com/CarlyGriggs13/status/1987839725504545269",
            "https://x.com/CarlyGriggs13/status/1987839818735210523",
            "https://x.com/CarlyGriggs13/status/1987839910875726265",
            "https://x.com/CarlyGriggs13/status/1987839941796307216",
            "https://x.com/CarlyGriggs13/status/1987840042077696162",
            "https://x.com/CarlyGriggs13/status/1987840131152183770",
            "https://x.com/CarlyGriggs13/status/1987841747532107880",
            "https://x.com/CarlyGriggs13/status/1987841861533491277",
            "https://x.com/CarlyGriggs13/status/1987841935596302755",
            "https://x.com/CarlyGriggs13/status/1987841960145514648",
            "https://x.com/CarlyGriggs13/status/1987842058451624224",
            "https://x.com/CarlyGriggs13/status/1987842060838461780",
            "https://x.com/CarlyGriggs13/status/1987842182519124103",
            "https://x.com/CarlyGriggs13/status/1987870112033190371",
            "https://x.com/CarlyGriggs13/status/1987870127258284510",
            "https://x.com/CarlyGriggs13/status/1987870260301623571",
            "https://x.com/CarlyGriggs13/status/1987871068879516151",
            "https://x.com/CarlyGriggs13/status/1987895501316919737",
            "https://x.com/CarlyGriggs13/status/1987895618447057153",
            "https://x.com/CarlyGriggs13/status/1987895626735222910",
            "https://x.com/CarlyGriggs13/status/1987895773883699460",
            "https://x.com/CarlyGriggs13/status/1987895904351797660",
            "https://x.com/CarlyGriggs13/status/1987896007435116993",
            "https://x.com/CarlyGriggs13/status/1987896150024737255",
            "https://x.com/CarlyGriggs13/status/1987896232237298123",
            "https://x.com/CarlyGriggs13/status/1987896289443352969",
            "https://x.com/CarlyGriggs13/status/1987903168471081414",
            "https://x.com/CarlyGriggs13/status/1987923634493473262",
            "https://x.com/CarlyGriggs13/status/1987924302784532753",
            "https://x.com/CarlyGriggs13/status/1987924900921708788",
            "https://x.com/CarlyGriggs13/status/1987925030953496988",
            "https://x.com/CarlyGriggs13/status/1987927664468902142",
            "https://x.com/CarlyGriggs13/status/1987927781850706406",
            "https://x.com/CarlyGriggs13/status/1987927784354689177",
            "https://x.com/CarlyGriggs13/status/1987930075845603484",
            "https://x.com/CarlyGriggs13/status/1987939092034974000",
            "https://x.com/CarlyGriggs13/status/1987939098535891448",
            "https://x.com/CarlyGriggs13/status/1987939199455269283",
            "https://x.com/CarlyGriggs13/status/1987939209454190614",
            "https://x.com/CarlyGriggs13/status/1987943926737608853",
            "https://x.com/CarlyGriggs13/status/1987944039581098116",
            "https://x.com/CarlyGriggs13/status/1987944174126329929"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 114,
            "URL": 141,
            "hostname": 17
          },
          "indicator_count": 272,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1622,
          "modified_text": "171 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "68596260a9ca6c4cc92ca068",
          "name": "Delete service | Affects Threat Research Platforms",
          "description": "Delete service attacking threat researchers platforms. Deletes , blocks, scrambles , attaches to accounts like an overlord monitoring and deletion of Io\u2019s across various platforms. \n\nIDS Rules: PROTOCOL-ICMP PATH MTU denial of service attempt\n\u2022 PROTOCOL-ICMP Destination Unreachable Fragmentation Needed and DF bit was set\n\u2022 Matches rule PROTOCOL-ICMP Echo Reply\nInteresting: TLS: SNI: slscr.update.microsoft.com\nSNI: nexusrules.officeapps.live.com\nSNI: login.live.com\nSNI: client.wns.windows.com",
          "modified": "2025-08-20T04:13:22.641000",
          "created": "2025-06-23T14:19:12.328000",
          "tags": [
            "ta0004 defense",
            "evasion ta0005",
            "command",
            "control ta0011",
            "oc0006",
            "get http",
            "resolved ips",
            "dns resolutions",
            "request",
            "response",
            "windows nt",
            "win64",
            "khtml",
            "gecko",
            "ip address",
            "country name",
            "cname",
            "port",
            "accept",
            "gmt ifnonematch",
            "url data",
            "icmp",
            "mutexes nothing",
            "data",
            "datacrashpad",
            "edge",
            "created",
            "nothing",
            "html internet",
            "html document",
            "ascii text",
            "gtmkvjvztk dl"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1027",
              "name": "Obfuscated Files or Information",
              "display_name": "T1027 - Obfuscated Files or Information"
            }
          ],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 17,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "Q.Vashti",
            "id": "337942",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 2401,
            "URL": 5856,
            "FileHash-SHA256": 3473,
            "domain": 2188,
            "FileHash-MD5": 123,
            "FileHash-SHA1": 120,
            "CVE": 2
          },
          "indicator_count": 14163,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 145,
          "modified_text": "284 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6827a62737bbadf1c07ae626",
          "name": "AS56971 Cgi Global Limited",
          "description": "",
          "modified": "2025-06-10T19:22:43.900000",
          "created": "2025-05-16T20:55:03.861000",
          "tags": [
            "phishing"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "skocherhan",
            "id": "249290",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 1633,
            "hostname": 39
          },
          "indicator_count": 1672,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 182,
          "modified_text": "354 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6827e980378e6cc98330c289",
          "name": "1club phish",
          "description": "",
          "modified": "2025-05-30T22:31:24.406000",
          "created": "2025-05-17T01:42:24.334000",
          "tags": [
            "phishing"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "skocherhan",
            "id": "249290",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_249290/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 356,
            "hostname": 101
          },
          "indicator_count": 457,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 182,
          "modified_text": "365 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://x.com/CarlyGriggs13/status/1987703837851791795",
        "https://x.com/CarlyGriggs13/status/1987689525527851079",
        "https://x.com/CarlyGriggs13/status/1987840042077696162",
        "https://x.com/CarlyGriggs13/status/1987710511199183258",
        "https://x.com/CarlyGriggs13/status/1987697987103928349",
        "https://x.com/CarlyGriggs13/status/1987839910875726265",
        "https://x.com/CarlyGriggs13/status/1987944039581098116",
        "https://x.com/CarlyGriggs13/status/1987895904351797660",
        "https://x.com/CarlyGriggs13/status/1987689864628932818",
        "https://x.com/CarlyGriggs13/status/1987800946282320327",
        "https://x.com/CarlyGriggs13/status/1987689723348099260",
        "https://x.com/CarlyGriggs13/status/1987704155973230707",
        "https://x.com/CarlyGriggs13/status/1987839941796307216",
        "https://x.com/CarlyGriggs13/status/1987785772808708213",
        "https://x.com/CarlyGriggs13/status/1987703359080378750",
        "https://x.com/CarlyGriggs13/status/1987784395839635745",
        "https://x.com/CarlyGriggs13/status/1987870127258284510",
        "https://x.com/CarlyGriggs13/status/1987784279489679813",
        "https://x.com/CarlyGriggs13/status/1987710722931826991",
        "https://x.com/CarlyGriggs13/status/1987718536353951836",
        "https://x.com/CarlyGriggs13/status/1987689288687858132",
        "https://x.com/CarlyGriggs13/status/1987840131152183770",
        "https://x.com/CarlyGriggs13/status/1987927664468902142",
        "https://x.com/CarlyGriggs13/status/1987690252778279077",
        "https://x.com/CarlyGriggs13/status/1987703668036993353",
        "https://x.com/CarlyGriggs13/status/1987924302784532753",
        "https://x.com/CarlyGriggs13/status/1987712549593207151",
        "https://x.com/CarlyGriggs13/status/1987895626735222910",
        "https://x.com/CarlyGriggs13/status/1987703201861079100",
        "https://x.com/CarlyGriggs13/status/1987696376549879937",
        "https://x.com/CarlyGriggs13/status/1987719445335134424",
        "https://x.com/CarlyGriggs13/status/1987785426094964772",
        "https://x.com/CarlyGriggs13/status/1987689420061827212",
        "https://x.com/CarlyGriggs13/status/1987895773883699460",
        "https://x.com/CarlyGriggs13/status/1987784651293827096",
        "https://x.com/CarlyGriggs13/status/1987703522347917777",
        "https://x.com/CarlyGriggs13/status/1987939209454190614",
        "https://x.com/CarlyGriggs13/status/1987896232237298123",
        "https://x.com/CarlyGriggs13/status/1987701688128426133",
        "https://x.com/CarlyGriggs13/status/1987719605960560640",
        "https://x.com/CarlyGriggs13/status/1987696958727749860",
        "https://x.com/CarlyGriggs13/status/1987785873895653613",
        "https://x.com/CarlyGriggs13/status/1987704005770842354",
        "https://x.com/CarlyGriggs13/status/1987696037956378815",
        "https://x.com/CarlyGriggs13/status/1987701857188208984",
        "https://x.com/CarlyGriggs13/status/1987703050769997936",
        "https://x.com/CarlyGriggs13/status/1987786125826527633",
        "https://x.com/CarlyGriggs13/status/1987701525670400065",
        "https://x.com/CarlyGriggs13/status/1987702600792420479",
        "https://x.com/CarlyGriggs13/status/1987927781850706406",
        "https://x.com/CarlyGriggs13/status/1987708168139678003",
        "https://x.com/CarlyGriggs13/status/1987943926737608853",
        "https://x.com/CarlyGriggs13/status/1987784160589586699",
        "https://x.com/CarlyGriggs13/status/1987896007435116993",
        "https://x.com/CarlyGriggs13/status/1987702779750605195",
        "https://x.com/CarlyGriggs13/status/1987925030953496988",
        "https://x.com/CarlyGriggs13/status/1987939199455269283",
        "https://x.com/CarlyGriggs13/status/1987871068879516151",
        "https://x.com/CarlyGriggs13/status/1987696840385704258",
        "https://x.com/CarlyGriggs13/status/1987705724072305086",
        "https://x.com/CarlyGriggs13/status/1987713799231574035",
        "https://x.com/CarlyGriggs13/status/1987896289443352969",
        "https://x.com/CarlyGriggs13/status/1987785207236202502",
        "https://x.com/CarlyGriggs13/status/1987695701632176459",
        "https://x.com/CarlyGriggs13/status/1987785100877344972",
        "https://x.com/CarlyGriggs13/status/1987841861533491277",
        "https://x.com/CarlyGriggs13/status/1987784521396171238",
        "https://x.com/CarlyGriggs13/status/1987842182519124103",
        "https://x.com/CarlyGriggs13/status/1987702088344985884",
        "https://x.com/CarlyGriggs13/status/1987784977312858336",
        "https://x.com/CarlyGriggs13/status/1987712909208617142",
        "https://x.com/CarlyGriggs13/status/1987896150024737255",
        "https://x.com/CarlyGriggs13/status/1987924900921708788",
        "https://x.com/CarlyGriggs13/status/1987720120353902758",
        "https://x.com/CarlyGriggs13/status/1987705192461082768",
        "https://x.com/CarlyGriggs13/status/1987785673450107353",
        "https://x.com/CarlyGriggs13/status/1987927784354689177",
        "https://x.com/CarlyGriggs13/status/1987784875856843089",
        "https://x.com/CarlyGriggs13/status/1987695924727177545",
        "https://x.com/CarlyGriggs13/status/1987903168471081414",
        "https://x.com/CarlyGriggs13/status/1987696276331184427",
        "https://x.com/CarlyGriggs13/status/1987698659027243376",
        "https://x.com/CarlyGriggs13/status/1987895501316919737",
        "https://x.com/CarlyGriggs13/status/1987720559744938325",
        "https://x.com/CarlyGriggs13/status/1987702919815405664",
        "https://x.com/CarlyGriggs13/status/1987711255440662707",
        "https://x.com/CarlyGriggs13/status/1987689623640760670",
        "https://x.com/CarlyGriggs13/status/1987842060838461780",
        "https://x.com/CarlyGriggs13/status/1987711791741497459",
        "https://x.com/CarlyGriggs13/status/1987704424660099107",
        "https://x.com/CarlyGriggs13/status/1987720277250195912",
        "https://x.com/CarlyGriggs13/status/1987710300401828095",
        "https://x.com/CarlyGriggs13/status/1987714065733648677",
        "https://x.com/CarlyGriggs13/status/1987895618447057153",
        "https://x.com/CarlyGriggs13/status/1987689995902312624",
        "https://x.com/CarlyGriggs13/status/1987704288663994693",
        "https://x.com/CarlyGriggs13/status/1987842058451624224",
        "https://x.com/CarlyGriggs13/status/1987704558999802052",
        "https://x.com/CarlyGriggs13/status/1987690136243687579",
        "https://x.com/CarlyGriggs13/status/1987696607484096938",
        "https://x.com/CarlyGriggs13/status/1987696161835147438",
        "https://x.com/CarlyGriggs13/status/1987839597917655481",
        "https://x.com/CarlyGriggs13/status/1987695591103635690",
        "https://x.com/CarlyGriggs13/status/1987841935596302755",
        "https://x.com/CarlyGriggs13/status/1987696737562038732",
        "https://x.com/CarlyGriggs13/status/1987713299421577721",
        "https://x.com/CarlyGriggs13/status/1987704710455857279",
        "https://x.com/CarlyGriggs13/status/1987785319890952262",
        "https://x.com/CarlyGriggs13/status/1987841960145514648",
        "https://x.com/CarlyGriggs13/status/1987784764275753386",
        "https://x.com/CarlyGriggs13/status/1987870112033190371",
        "https://x.com/CarlyGriggs13/status/1987713554284229029",
        "https://x.com/CarlyGriggs13/status/1987804144522961107",
        "https://x.com/CarlyGriggs13/status/1987870260301623571",
        "https://x.com/CarlyGriggs13/status/1987690387054453167",
        "https://x.com/CarlyGriggs13/status/1987689079656366497",
        "https://x.com/CarlyGriggs13/status/1987716656961917412",
        "https://x.com/CarlyGriggs13/status/1987695806799859786",
        "https://x.com/CarlyGriggs13/status/1987839818735210523",
        "https://x.com/CarlyGriggs13/status/1987784052976562393",
        "https://x.com/CarlyGriggs13/status/1987691782650437832",
        "https://x.com/CarlyGriggs13/status/1987696505986367983",
        "https://x.com/CarlyGriggs13/status/1987707994105073831",
        "https://x.com/CarlyGriggs13/status/1987720427037130988",
        "https://x.com/CarlyGriggs13/status/1987785994188321246",
        "https://x.com/CarlyGriggs13/status/1987939092034974000",
        "https://x.com/CarlyGriggs13/status/1987785547348160711",
        "https://x.com/CarlyGriggs13/status/1987944174126329929",
        "https://x.com/CarlyGriggs13/status/1987839725504545269",
        "https://x.com/CarlyGriggs13/status/1987839663080456314",
        "https://x.com/CarlyGriggs13/status/1987704867645698172",
        "https://x.com/CarlyGriggs13/status/1987923634493473262",
        "https://x.com/CarlyGriggs13/status/1987939098535891448",
        "https://x.com/CarlyGriggs13/status/1987711995840278600",
        "https://x.com/CarlyGriggs13/status/1987705024680427849",
        "https://x.com/CarlyGriggs13/status/1987712184881676570",
        "https://x.com/CarlyGriggs13/status/1987841747532107880",
        "https://x.com/CarlyGriggs13/status/1987930075845603484",
        "https://x.com/CarlyGriggs13/status/1987767631915463133",
        "https://x.com/CarlyGriggs13/status/1987719951675699686",
        "https://x.com/CarlyGriggs13/status/1987719761950875911"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 13,
  "pulses": [
    {
      "id": "69c081afa2bd54a9599b7c07",
      "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
      "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
      "modified": "2026-05-24T00:00:03.049000",
      "created": "2026-03-22T23:56:29.438000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 33,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 93266,
        "hostname": 57600
      },
      "indicator_count": 150866,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 99,
      "modified_text": "7 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69c08867316c564ade394c69",
      "name": "PhishDestroy \u2014 Content Active Threats (Live)",
      "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
      "modified": "2026-05-21T12:06:19.702000",
      "created": "2026-03-23T00:25:09.116000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy",
        "active",
        "content"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 132502,
        "hostname": 66217
      },
      "indicator_count": 198719,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 44,
      "modified_text": "9 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cb0ce73bef5c452bfb0",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:04.332000",
      "created": "2026-05-04T06:29:04.332000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83caf1bef3609f0eb79e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:03.120000",
      "created": "2026-05-04T06:29:03.120000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cac7d6c947de6c080f9",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:00.417000",
      "created": "2026-05-04T06:29:00.417000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab9769e92b3285a2b4",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.770000",
      "created": "2026-05-04T06:28:59.770000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab7e03b19c5f1078e3",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.113000",
      "created": "2026-05-04T06:28:59.113000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca9411c8ab5d294a7e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:57.479000",
      "created": "2026-05-04T06:28:57.479000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca77d6c947de6c080f8",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:55.093000",
      "created": "2026-05-04T06:28:55.093000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "27 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69128f2c54663cb997e8c1c7",
      "name": "Twitter Feed - CarlyGriggs13 - 10-11-2025",
      "description": "",
      "modified": "2025-12-11T01:00:08.056000",
      "created": "2025-11-11T01:19:40.387000",
      "tags": [
        "phishing",
        "scam"
      ],
      "references": [
        "https://x.com/CarlyGriggs13/status/1987689079656366497",
        "https://x.com/CarlyGriggs13/status/1987689288687858132",
        "https://x.com/CarlyGriggs13/status/1987689420061827212",
        "https://x.com/CarlyGriggs13/status/1987689525527851079",
        "https://x.com/CarlyGriggs13/status/1987689623640760670",
        "https://x.com/CarlyGriggs13/status/1987689723348099260",
        "https://x.com/CarlyGriggs13/status/1987689864628932818",
        "https://x.com/CarlyGriggs13/status/1987689995902312624",
        "https://x.com/CarlyGriggs13/status/1987690136243687579",
        "https://x.com/CarlyGriggs13/status/1987690252778279077",
        "https://x.com/CarlyGriggs13/status/1987690387054453167",
        "https://x.com/CarlyGriggs13/status/1987691782650437832",
        "https://x.com/CarlyGriggs13/status/1987695591103635690",
        "https://x.com/CarlyGriggs13/status/1987695701632176459",
        "https://x.com/CarlyGriggs13/status/1987695806799859786",
        "https://x.com/CarlyGriggs13/status/1987695924727177545",
        "https://x.com/CarlyGriggs13/status/1987696037956378815",
        "https://x.com/CarlyGriggs13/status/1987696161835147438",
        "https://x.com/CarlyGriggs13/status/1987696276331184427",
        "https://x.com/CarlyGriggs13/status/1987696376549879937",
        "https://x.com/CarlyGriggs13/status/1987696505986367983",
        "https://x.com/CarlyGriggs13/status/1987696607484096938",
        "https://x.com/CarlyGriggs13/status/1987696737562038732",
        "https://x.com/CarlyGriggs13/status/1987696840385704258",
        "https://x.com/CarlyGriggs13/status/1987696958727749860",
        "https://x.com/CarlyGriggs13/status/1987697987103928349",
        "https://x.com/CarlyGriggs13/status/1987698659027243376",
        "https://x.com/CarlyGriggs13/status/1987701525670400065",
        "https://x.com/CarlyGriggs13/status/1987701688128426133",
        "https://x.com/CarlyGriggs13/status/1987701857188208984",
        "https://x.com/CarlyGriggs13/status/1987702088344985884",
        "https://x.com/CarlyGriggs13/status/1987702600792420479",
        "https://x.com/CarlyGriggs13/status/1987702779750605195",
        "https://x.com/CarlyGriggs13/status/1987702919815405664",
        "https://x.com/CarlyGriggs13/status/1987703050769997936",
        "https://x.com/CarlyGriggs13/status/1987703201861079100",
        "https://x.com/CarlyGriggs13/status/1987703359080378750",
        "https://x.com/CarlyGriggs13/status/1987703522347917777",
        "https://x.com/CarlyGriggs13/status/1987703668036993353",
        "https://x.com/CarlyGriggs13/status/1987703837851791795",
        "https://x.com/CarlyGriggs13/status/1987704005770842354",
        "https://x.com/CarlyGriggs13/status/1987704155973230707",
        "https://x.com/CarlyGriggs13/status/1987704288663994693",
        "https://x.com/CarlyGriggs13/status/1987704424660099107",
        "https://x.com/CarlyGriggs13/status/1987704558999802052",
        "https://x.com/CarlyGriggs13/status/1987704710455857279",
        "https://x.com/CarlyGriggs13/status/1987704867645698172",
        "https://x.com/CarlyGriggs13/status/1987705024680427849",
        "https://x.com/CarlyGriggs13/status/1987705192461082768",
        "https://x.com/CarlyGriggs13/status/1987705724072305086",
        "https://x.com/CarlyGriggs13/status/1987707994105073831",
        "https://x.com/CarlyGriggs13/status/1987708168139678003",
        "https://x.com/CarlyGriggs13/status/1987710300401828095",
        "https://x.com/CarlyGriggs13/status/1987710511199183258",
        "https://x.com/CarlyGriggs13/status/1987710722931826991",
        "https://x.com/CarlyGriggs13/status/1987711255440662707",
        "https://x.com/CarlyGriggs13/status/1987711791741497459",
        "https://x.com/CarlyGriggs13/status/1987711995840278600",
        "https://x.com/CarlyGriggs13/status/1987712184881676570",
        "https://x.com/CarlyGriggs13/status/1987712549593207151",
        "https://x.com/CarlyGriggs13/status/1987712909208617142",
        "https://x.com/CarlyGriggs13/status/1987713299421577721",
        "https://x.com/CarlyGriggs13/status/1987713554284229029",
        "https://x.com/CarlyGriggs13/status/1987713799231574035",
        "https://x.com/CarlyGriggs13/status/1987714065733648677",
        "https://x.com/CarlyGriggs13/status/1987716656961917412",
        "https://x.com/CarlyGriggs13/status/1987718536353951836",
        "https://x.com/CarlyGriggs13/status/1987719445335134424",
        "https://x.com/CarlyGriggs13/status/1987719605960560640",
        "https://x.com/CarlyGriggs13/status/1987719761950875911",
        "https://x.com/CarlyGriggs13/status/1987719951675699686",
        "https://x.com/CarlyGriggs13/status/1987720120353902758",
        "https://x.com/CarlyGriggs13/status/1987720277250195912",
        "https://x.com/CarlyGriggs13/status/1987720427037130988",
        "https://x.com/CarlyGriggs13/status/1987720559744938325",
        "https://x.com/CarlyGriggs13/status/1987767631915463133",
        "https://x.com/CarlyGriggs13/status/1987784052976562393",
        "https://x.com/CarlyGriggs13/status/1987784160589586699",
        "https://x.com/CarlyGriggs13/status/1987784279489679813",
        "https://x.com/CarlyGriggs13/status/1987784395839635745",
        "https://x.com/CarlyGriggs13/status/1987784521396171238",
        "https://x.com/CarlyGriggs13/status/1987784651293827096",
        "https://x.com/CarlyGriggs13/status/1987784764275753386",
        "https://x.com/CarlyGriggs13/status/1987784875856843089",
        "https://x.com/CarlyGriggs13/status/1987784977312858336",
        "https://x.com/CarlyGriggs13/status/1987785100877344972",
        "https://x.com/CarlyGriggs13/status/1987785207236202502",
        "https://x.com/CarlyGriggs13/status/1987785319890952262",
        "https://x.com/CarlyGriggs13/status/1987785426094964772",
        "https://x.com/CarlyGriggs13/status/1987785547348160711",
        "https://x.com/CarlyGriggs13/status/1987785673450107353",
        "https://x.com/CarlyGriggs13/status/1987785772808708213",
        "https://x.com/CarlyGriggs13/status/1987785873895653613",
        "https://x.com/CarlyGriggs13/status/1987785994188321246",
        "https://x.com/CarlyGriggs13/status/1987786125826527633",
        "https://x.com/CarlyGriggs13/status/1987800946282320327",
        "https://x.com/CarlyGriggs13/status/1987804144522961107",
        "https://x.com/CarlyGriggs13/status/1987839597917655481",
        "https://x.com/CarlyGriggs13/status/1987839663080456314",
        "https://x.com/CarlyGriggs13/status/1987839725504545269",
        "https://x.com/CarlyGriggs13/status/1987839818735210523",
        "https://x.com/CarlyGriggs13/status/1987839910875726265",
        "https://x.com/CarlyGriggs13/status/1987839941796307216",
        "https://x.com/CarlyGriggs13/status/1987840042077696162",
        "https://x.com/CarlyGriggs13/status/1987840131152183770",
        "https://x.com/CarlyGriggs13/status/1987841747532107880",
        "https://x.com/CarlyGriggs13/status/1987841861533491277",
        "https://x.com/CarlyGriggs13/status/1987841935596302755",
        "https://x.com/CarlyGriggs13/status/1987841960145514648",
        "https://x.com/CarlyGriggs13/status/1987842058451624224",
        "https://x.com/CarlyGriggs13/status/1987842060838461780",
        "https://x.com/CarlyGriggs13/status/1987842182519124103",
        "https://x.com/CarlyGriggs13/status/1987870112033190371",
        "https://x.com/CarlyGriggs13/status/1987870127258284510",
        "https://x.com/CarlyGriggs13/status/1987870260301623571",
        "https://x.com/CarlyGriggs13/status/1987871068879516151",
        "https://x.com/CarlyGriggs13/status/1987895501316919737",
        "https://x.com/CarlyGriggs13/status/1987895618447057153",
        "https://x.com/CarlyGriggs13/status/1987895626735222910",
        "https://x.com/CarlyGriggs13/status/1987895773883699460",
        "https://x.com/CarlyGriggs13/status/1987895904351797660",
        "https://x.com/CarlyGriggs13/status/1987896007435116993",
        "https://x.com/CarlyGriggs13/status/1987896150024737255",
        "https://x.com/CarlyGriggs13/status/1987896232237298123",
        "https://x.com/CarlyGriggs13/status/1987896289443352969",
        "https://x.com/CarlyGriggs13/status/1987903168471081414",
        "https://x.com/CarlyGriggs13/status/1987923634493473262",
        "https://x.com/CarlyGriggs13/status/1987924302784532753",
        "https://x.com/CarlyGriggs13/status/1987924900921708788",
        "https://x.com/CarlyGriggs13/status/1987925030953496988",
        "https://x.com/CarlyGriggs13/status/1987927664468902142",
        "https://x.com/CarlyGriggs13/status/1987927781850706406",
        "https://x.com/CarlyGriggs13/status/1987927784354689177",
        "https://x.com/CarlyGriggs13/status/1987930075845603484",
        "https://x.com/CarlyGriggs13/status/1987939092034974000",
        "https://x.com/CarlyGriggs13/status/1987939098535891448",
        "https://x.com/CarlyGriggs13/status/1987939199455269283",
        "https://x.com/CarlyGriggs13/status/1987939209454190614",
        "https://x.com/CarlyGriggs13/status/1987943926737608853",
        "https://x.com/CarlyGriggs13/status/1987944039581098116",
        "https://x.com/CarlyGriggs13/status/1987944174126329929"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "CyberHunterAutoFeed",
        "id": "182496",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 114,
        "URL": 141,
        "hostname": 17
      },
      "indicator_count": 272,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 1622,
      "modified_text": "171 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "gonewo.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "gonewo.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780214909.9555595
}