{ "type": "Domain", "indicator": "proposal-shadow.net", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/proposal-shadow.net", "alexa": "http://www.alexa.com/siteinfo/proposal-shadow.net", "indicator": "proposal-shadow.net", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 4042646859, "indicator": "proposal-shadow.net", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 12, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c08867316c564ade394c69", "name": "PhishDestroy \u2014 Content Active Threats (Live)", "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json", "modified": "2026-05-21T12:06:19.702000", "created": "2026-03-23T00:25:09.116000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy", "active", "content" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 132502, "hostname": 66217 }, "indicator_count": 198719, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "10 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6895baa2f44f0d6a1f832067", "name": "destroylist", "description": "A curated snapshot of malicious domains targeting the cryptocurrency ecosystem \u2014 mainly wallet drainers and crypto phishing sites.\nCollected and verified from open threat-hunting operations between July 1, 2025 and the present date.\nAll indicators are cleaned from duplicates and provided as-is for analysts, SOC teams, and automated defenses.\n\nKey Details:\nFocus: Crypto drainers & phishing domains\n\nTimeframe: July 1, 2025 \u2014 August 2025\nVerified, deduplicated, and ready for integration\nSuitable for research, blocking lists, and enrichment", "modified": "2026-03-02T21:00:09.122000", "created": "2025-08-08T08:51:46.066000", "tags": [ "destroylist", "drainer", "crypto scam", "phishdestroy", "Cryptocurrency", "Blockchain" ], "references": [ "" ], "public": 1, "adversary": "Multiple unidentified threat actors targeting cryptocurrency ecosystem", "targeted_countries": [], "malware_families": [ { "id": "drainer", "display_name": "drainer", "target": null } ], "attack_ids": [], "industries": [ "web3", "crypto" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 13, "URL": 1361, "domain": 5908, "hostname": 1143 }, "indicator_count": 8425, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "89 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68746069c67ba645c293566a", "name": "Twitter Feed - CarlyGriggs13 - 13-07-2025", "description": "", "modified": "2025-07-14T01:42:00.753000", "created": "2025-07-14T01:42:00.753000", "tags": [ "phishing", "ransomware" ], "references": [ "https://x.com/CarlyGriggs13/status/1944203419964547391", "https://x.com/CarlyGriggs13/status/1944203614685139063", "https://x.com/CarlyGriggs13/status/1944203733690135009", "https://x.com/CarlyGriggs13/status/1944225847067414798", "https://x.com/CarlyGriggs13/status/1944225920052867292", "https://x.com/CarlyGriggs13/status/1944226016723161161", "https://x.com/CarlyGriggs13/status/1944226104123810277", "https://x.com/CarlyGriggs13/status/1944229882679931284", "https://x.com/CarlyGriggs13/status/1944229996211343535", "https://x.com/CarlyGriggs13/status/1944230075328516391", "https://x.com/CarlyGriggs13/status/1944230139316859347", "https://x.com/CarlyGriggs13/status/1944230244107620567", "https://x.com/CarlyGriggs13/status/1944230324071792935", "https://x.com/CarlyGriggs13/status/1944230425141944585", "https://x.com/CarlyGriggs13/status/1944230522437153117", "https://x.com/CarlyGriggs13/status/1944230638858514752", "https://x.com/CarlyGriggs13/status/1944230738112463064", "https://x.com/CarlyGriggs13/status/1944230828491346358", "https://x.com/CarlyGriggs13/status/1944230892760682827", "https://x.com/CarlyGriggs13/status/1944230963682189556", "https://x.com/CarlyGriggs13/status/1944231039700021476", "https://x.com/CarlyGriggs13/status/1944231112697688573", "https://x.com/CarlyGriggs13/status/1944231215432663094", "https://x.com/CarlyGriggs13/status/1944234556829139450", "https://x.com/CarlyGriggs13/status/1944234732553691471", "https://x.com/CarlyGriggs13/status/1944234821997203578", "https://x.com/CarlyGriggs13/status/1944234910459605022", "https://x.com/CarlyGriggs13/status/1944235000028860647", "https://x.com/CarlyGriggs13/status/1944235175283433859", "https://x.com/CarlyGriggs13/status/1944235260377477369", "https://x.com/CarlyGriggs13/status/1944235344968179819", "https://x.com/CarlyGriggs13/status/1944235437280964677", "https://x.com/CarlyGriggs13/status/1944235538065571870", "https://x.com/CarlyGriggs13/status/1944235649088819467", "https://x.com/CarlyGriggs13/status/1944235744706412837", "https://x.com/CarlyGriggs13/status/1944236023946351054", "https://x.com/CarlyGriggs13/status/1944236383960281159", "https://x.com/CarlyGriggs13/status/1944240245601398861", "https://x.com/CarlyGriggs13/status/1944240391269539867", "https://x.com/CarlyGriggs13/status/1944240495665827845", "https://x.com/CarlyGriggs13/status/1944240632467161402", "https://x.com/CarlyGriggs13/status/1944240739442979267", "https://x.com/CarlyGriggs13/status/1944240806446989744", "https://x.com/CarlyGriggs13/status/1944240899875086472", "https://x.com/CarlyGriggs13/status/1944241008968880443", "https://x.com/CarlyGriggs13/status/1944241107241427134", "https://x.com/CarlyGriggs13/status/1944241209389592884", "https://x.com/CarlyGriggs13/status/1944241315161473415", "https://x.com/CarlyGriggs13/status/1944241395809890741", "https://x.com/CarlyGriggs13/status/1944244876817657954", "https://x.com/CarlyGriggs13/status/1944244973764759553", "https://x.com/CarlyGriggs13/status/1944245080405291116", "https://x.com/CarlyGriggs13/status/1944245152463077884", "https://x.com/CarlyGriggs13/status/1944245250492436866", "https://x.com/CarlyGriggs13/status/1944245352795648292", "https://x.com/CarlyGriggs13/status/1944245456042668104", "https://x.com/CarlyGriggs13/status/1944245523990688231", "https://x.com/CarlyGriggs13/status/1944245913943232811", "https://x.com/CarlyGriggs13/status/1944246325010104742", "https://x.com/CarlyGriggs13/status/1944246420741017876", "https://x.com/CarlyGriggs13/status/1944246487564550511", "https://x.com/CarlyGriggs13/status/1944247502993338445", "https://x.com/CarlyGriggs13/status/1944249486559064414", "https://x.com/CarlyGriggs13/status/1944249547775238431", "https://x.com/CarlyGriggs13/status/1944249741497258487", "https://x.com/CarlyGriggs13/status/1944250627799810060", "https://x.com/CarlyGriggs13/status/1944250700608704785", "https://x.com/CarlyGriggs13/status/1944250768921444465", "https://x.com/CarlyGriggs13/status/1944250852211868120", "https://x.com/CarlyGriggs13/status/1944250952233758857", "https://x.com/CarlyGriggs13/status/1944251036530602240", "https://x.com/CarlyGriggs13/status/1944251141472047129", "https://x.com/CarlyGriggs13/status/1944251245725716866", "https://x.com/CarlyGriggs13/status/1944251322624053249", "https://x.com/CarlyGriggs13/status/1944251421865513405", "https://x.com/CarlyGriggs13/status/1944251524281925778", "https://x.com/CarlyGriggs13/status/1944251702137237914", "https://x.com/CarlyGriggs13/status/1944252408529347013", "https://x.com/CarlyGriggs13/status/1944254780030828554", "https://x.com/CarlyGriggs13/status/1944255349596225563", "https://x.com/CarlyGriggs13/status/1944255433037717533", "https://x.com/CarlyGriggs13/status/1944255518924489062", "https://x.com/CarlyGriggs13/status/1944255692107321531", "https://x.com/CarlyGriggs13/status/1944255774953230830", "https://x.com/CarlyGriggs13/status/1944255840690585760", "https://x.com/CarlyGriggs13/status/1944256576686043571", "https://x.com/CarlyGriggs13/status/1944257054694072739", "https://x.com/CarlyGriggs13/status/1944257563606102180", "https://x.com/CarlyGriggs13/status/1944258773423439889", "https://x.com/CarlyGriggs13/status/1944259538330238984", "https://x.com/CarlyGriggs13/status/1944259612472967644", "https://x.com/CarlyGriggs13/status/1944259715707679137", "https://x.com/CarlyGriggs13/status/1944259829607936218", "https://x.com/CarlyGriggs13/status/1944259899006849214", "https://x.com/CarlyGriggs13/status/1944259979386507619", "https://x.com/CarlyGriggs13/status/1944260160509120749", "https://x.com/CarlyGriggs13/status/1944260230952444038", "https://x.com/CarlyGriggs13/status/1944260303186714933", "https://x.com/CarlyGriggs13/status/1944260417578315973", "https://x.com/CarlyGriggs13/status/1944260492702228635", "https://x.com/CarlyGriggs13/status/1944260565188149286", "https://x.com/CarlyGriggs13/status/1944260647845290422", "https://x.com/CarlyGriggs13/status/1944260756838789208", "https://x.com/CarlyGriggs13/status/1944260832495370614", "https://x.com/CarlyGriggs13/status/1944261227942752280", "https://x.com/CarlyGriggs13/status/1944264713308717119", "https://x.com/CarlyGriggs13/status/1944264826437407091", "https://x.com/CarlyGriggs13/status/1944264933384106444", "https://x.com/CarlyGriggs13/status/1944265034831737135", "https://x.com/CarlyGriggs13/status/1944265128599278049", "https://x.com/CarlyGriggs13/status/1944275071238828405", "https://x.com/CarlyGriggs13/status/1944277715844047049", "https://x.com/CarlyGriggs13/status/1944280315905622226", "https://x.com/CarlyGriggs13/status/1944280387355570278", "https://x.com/CarlyGriggs13/status/1944280469580726658", "https://x.com/CarlyGriggs13/status/1944283896939421815", "https://x.com/CarlyGriggs13/status/1944283968326553957", "https://x.com/CarlyGriggs13/status/1944284069086306357", "https://x.com/CarlyGriggs13/status/1944284183964110952", "https://x.com/CarlyGriggs13/status/1944284254176780788", "https://x.com/CarlyGriggs13/status/1944284354152165501", "https://x.com/CarlyGriggs13/status/1944284414709531066", "https://x.com/CarlyGriggs13/status/1944284496406204727", "https://x.com/CarlyGriggs13/status/1944284560721613153", "https://x.com/CarlyGriggs13/status/1944286313139597482", "https://x.com/CarlyGriggs13/status/1944286396413276216", "https://x.com/CarlyGriggs13/status/1944286482992079308", "https://x.com/CarlyGriggs13/status/1944286574482477080", "https://x.com/CarlyGriggs13/status/1944286651796045862", "https://x.com/CarlyGriggs13/status/1944286717613420617", "https://x.com/CarlyGriggs13/status/1944286787863539803", "https://x.com/CarlyGriggs13/status/1944286866359914840", "https://x.com/CarlyGriggs13/status/1944286958387085334", "https://x.com/CarlyGriggs13/status/1944287050301128709", "https://x.com/CarlyGriggs13/status/1944290044065267955", "https://x.com/CarlyGriggs13/status/1944290139842150596", "https://x.com/CarlyGriggs13/status/1944290226081608039", "https://x.com/CarlyGriggs13/status/1944290318255280428", "https://x.com/CarlyGriggs13/status/1944290393727652175", "https://x.com/CarlyGriggs13/status/1944290472815734918", "https://x.com/CarlyGriggs13/status/1944290559884988725", "https://x.com/CarlyGriggs13/status/1944290639195083249", "https://x.com/CarlyGriggs13/status/1944290727871017031", "https://x.com/CarlyGriggs13/status/1944290826286141760", "https://x.com/CarlyGriggs13/status/1944290907597008936", "https://x.com/CarlyGriggs13/status/1944290978921161164", "https://x.com/CarlyGriggs13/status/1944291060374810900", "https://x.com/CarlyGriggs13/status/1944291175831417164", "https://x.com/CarlyGriggs13/status/1944291594833739812", "https://x.com/CarlyGriggs13/status/1944291706595119268", "https://x.com/CarlyGriggs13/status/1944291805534539860", "https://x.com/CarlyGriggs13/status/1944291878611853580", "https://x.com/CarlyGriggs13/status/1944291965463371973", "https://x.com/CarlyGriggs13/status/1944292032576430533", "https://x.com/CarlyGriggs13/status/1944292129540370910", "https://x.com/CarlyGriggs13/status/1944292212767932918", "https://x.com/CarlyGriggs13/status/1944292283446440163", "https://x.com/CarlyGriggs13/status/1944292371984003308", "https://x.com/CarlyGriggs13/status/1944292475838910891", "https://x.com/CarlyGriggs13/status/1944371389709816148", "https://x.com/CarlyGriggs13/status/1944371508576424379", "https://x.com/CarlyGriggs13/status/1944371596963004564", "https://x.com/CarlyGriggs13/status/1944371684607193353", "https://x.com/CarlyGriggs13/status/1944371754408821036", "https://x.com/CarlyGriggs13/status/1944371873082474593", "https://x.com/CarlyGriggs13/status/1944371963096420710", "https://x.com/CarlyGriggs13/status/1944372077034680513", "https://x.com/CarlyGriggs13/status/1944372195053940996", "https://x.com/CarlyGriggs13/status/1944372299211129328", "https://x.com/CarlyGriggs13/status/1944372392366579811", "https://x.com/CarlyGriggs13/status/1944372480933494983", "https://x.com/CarlyGriggs13/status/1944372577457041707", "https://x.com/CarlyGriggs13/status/1944372686131540288", "https://x.com/CarlyGriggs13/status/1944372783531614352", "https://x.com/CarlyGriggs13/status/1944372876154400993", "https://x.com/CarlyGriggs13/status/1944372958106890423", "https://x.com/CarlyGriggs13/status/1944373047944700101", "https://x.com/CarlyGriggs13/status/1944373121928089644", "https://x.com/CarlyGriggs13/status/1944373192933478561", "https://x.com/CarlyGriggs13/status/1944373349854986382", "https://x.com/CarlyGriggs13/status/1944379748534063197", "https://x.com/CarlyGriggs13/status/1944379833053560949", "https://x.com/CarlyGriggs13/status/1944379933163163790", "https://x.com/CarlyGriggs13/status/1944380032899518538", "https://x.com/CarlyGriggs13/status/1944380117880394074", "https://x.com/CarlyGriggs13/status/1944380330061758610", "https://x.com/CarlyGriggs13/status/1944380405815120341", "https://x.com/CarlyGriggs13/status/1944380482688332110", "https://x.com/CarlyGriggs13/status/1944380592470040729", "https://x.com/CarlyGriggs13/status/1944406880681406565", "https://x.com/CarlyGriggs13/status/1944408972695364004", "https://x.com/CarlyGriggs13/status/1944427359207121380", "https://x.com/CarlyGriggs13/status/1944443077235507680", "https://x.com/CarlyGriggs13/status/1944458027106795574", "https://x.com/CarlyGriggs13/status/1944458140852080737", "https://x.com/CarlyGriggs13/status/1944458216362188966", "https://x.com/CarlyGriggs13/status/1944458360687907255", "https://x.com/CarlyGriggs13/status/1944463644118671757" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 130, "URL": 198, "hostname": 68, "FileHash-MD5": 1 }, "indicator_count": 397, "is_author": false, "is_subscribing": null, "subscriber_count": 1622, "modified_text": "321 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "67c64496ddb71f197835e117", "name": "Twitter Feed - Phish_Destroy - 03-03-2025", "description": "", "modified": "2025-03-04T00:08:54.180000", "created": "2025-03-04T00:08:54.180000", "tags": [ "phishing", "malware", "scam" ], "references": [ "https://x.com/Phish_Destroy/status/1896357757122720229", "https://x.com/Phish_Destroy/status/1896357888568033700", "https://x.com/Phish_Destroy/status/1896358324104466785", "https://x.com/Phish_Destroy/status/1896359476976140581", "https://x.com/Phish_Destroy/status/1896359813019484555", "https://x.com/Phish_Destroy/status/1896389903728144509", "https://x.com/Phish_Destroy/status/1896416482986459137", "https://x.com/Phish_Destroy/status/1896416916916650396", "https://x.com/Phish_Destroy/status/1896418587444965790", "https://x.com/Phish_Destroy/status/1896494799521489175", "https://x.com/Phish_Destroy/status/1896495683328454943", "https://x.com/Phish_Destroy/status/1896496000493351107", "https://x.com/Phish_Destroy/status/1896496098019340567", "https://x.com/Phish_Destroy/status/1896496623985037608", "https://x.com/Phish_Destroy/status/1896496710089912349", "https://x.com/Phish_Destroy/status/1896496970350629227", "https://x.com/Phish_Destroy/status/1896499864177177077", "https://x.com/Phish_Destroy/status/1896500313739403680", "https://x.com/Phish_Destroy/status/1896501668709318660", "https://x.com/Phish_Destroy/status/1896501844962361707", "https://x.com/Phish_Destroy/status/1896503309898490327", "https://x.com/Phish_Destroy/status/1896505119019278752", "https://x.com/Phish_Destroy/status/1896506377914536348", "https://x.com/Phish_Destroy/status/1896506630851969345", "https://x.com/Phish_Destroy/status/1896507464163742013", "https://x.com/Phish_Destroy/status/1896508766113407430", "https://x.com/Phish_Destroy/status/1896509457749987659", "https://x.com/Phish_Destroy/status/1896509950446522854", "https://x.com/Phish_Destroy/status/1896510599477309688", "https://x.com/Phish_Destroy/status/1896511641484980519", "https://x.com/Phish_Destroy/status/1896511767033111018", "https://x.com/Phish_Destroy/status/1896511853565792379", "https://x.com/Phish_Destroy/status/1896512668691038573", "https://x.com/Phish_Destroy/status/1896513120350441587", "https://x.com/Phish_Destroy/status/1896514399000801685", "https://x.com/Phish_Destroy/status/1896514491149635821", "https://x.com/Phish_Destroy/status/1896515858681442687", "https://x.com/Phish_Destroy/status/1896516048645689367", "https://x.com/Phish_Destroy/status/1896516351998783887", "https://x.com/Phish_Destroy/status/1896516501521498114", "https://x.com/Phish_Destroy/status/1896517427237900662", "https://x.com/Phish_Destroy/status/1896518120971612301", "https://x.com/Phish_Destroy/status/1896518611650678946", "https://x.com/Phish_Destroy/status/1896519155211436476", "https://x.com/Phish_Destroy/status/1896519320043438221", "https://x.com/Phish_Destroy/status/1896520876587454611", "https://x.com/Phish_Destroy/status/1896521260575887859", "https://x.com/Phish_Destroy/status/1896521378578510071", "https://x.com/Phish_Destroy/status/1896522747725115638", "https://x.com/Phish_Destroy/status/1896522970312643065", "https://x.com/Phish_Destroy/status/1896523268129247241", "https://x.com/Phish_Destroy/status/1896526432421244929", "https://x.com/Phish_Destroy/status/1896526885011755421", "https://x.com/Phish_Destroy/status/1896527670282006790", "https://x.com/Phish_Destroy/status/1896557702303871450", "https://x.com/Phish_Destroy/status/1896567293980856797", "https://x.com/Phish_Destroy/status/1896567407461982659", "https://x.com/Phish_Destroy/status/1896567506292363396", "https://x.com/Phish_Destroy/status/1896567613586821209", "https://x.com/Phish_Destroy/status/1896569910136049825", "https://x.com/Phish_Destroy/status/1896570201006907729", "https://x.com/Phish_Destroy/status/1896570463511617754", "https://x.com/Phish_Destroy/status/1896572437485207960", "https://x.com/Phish_Destroy/status/1896572722005885394", "https://x.com/Phish_Destroy/status/1896573683235430781", "https://x.com/Phish_Destroy/status/1896574746378358851", "https://x.com/Phish_Destroy/status/1896608120845304185", "https://x.com/Phish_Destroy/status/1896613513990435112", "https://x.com/Phish_Destroy/status/1896613639626609026", "https://x.com/Phish_Destroy/status/1896617428328804714", "https://x.com/Phish_Destroy/status/1896617719195459647", "https://x.com/Phish_Destroy/status/1896617812900372638", "https://x.com/Phish_Destroy/status/1896618026616954978", "https://x.com/Phish_Destroy/status/1896618785274298874", "https://x.com/Phish_Destroy/status/1896668794011185173" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "hostname": 26, "domain": 49 }, "indicator_count": 150, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "453 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "", "https://x.com/CarlyGriggs13/status/1944230892760682827", "https://x.com/Phish_Destroy/status/1896523268129247241", "https://x.com/CarlyGriggs13/status/1944372077034680513", "https://x.com/Phish_Destroy/status/1896514399000801685", "https://x.com/CarlyGriggs13/status/1944251421865513405", "https://x.com/Phish_Destroy/status/1896520876587454611", "https://x.com/CarlyGriggs13/status/1944245250492436866", "https://x.com/Phish_Destroy/status/1896569910136049825", "https://x.com/CarlyGriggs13/status/1944290639195083249", "https://x.com/CarlyGriggs13/status/1944250768921444465", "https://x.com/Phish_Destroy/status/1896507464163742013", "https://x.com/CarlyGriggs13/status/1944251245725716866", "https://x.com/CarlyGriggs13/status/1944234556829139450", "https://x.com/CarlyGriggs13/status/1944379833053560949", "https://x.com/Phish_Destroy/status/1896418587444965790", "https://x.com/CarlyGriggs13/status/1944259899006849214", "https://x.com/Phish_Destroy/status/1896509950446522854", "https://x.com/Phish_Destroy/status/1896567506292363396", "https://x.com/Phish_Destroy/status/1896516351998783887", "https://x.com/CarlyGriggs13/status/1944255774953230830", "https://x.com/CarlyGriggs13/status/1944291878611853580", "https://x.com/CarlyGriggs13/status/1944373047944700101", "https://x.com/CarlyGriggs13/status/1944226016723161161", "https://x.com/CarlyGriggs13/status/1944261227942752280", "https://x.com/CarlyGriggs13/status/1944290393727652175", "https://x.com/Phish_Destroy/status/1896557702303871450", "https://x.com/Phish_Destroy/status/1896506377914536348", "https://x.com/CarlyGriggs13/status/1944259979386507619", "https://x.com/CarlyGriggs13/status/1944260230952444038", "https://x.com/CarlyGriggs13/status/1944230075328516391", "https://x.com/CarlyGriggs13/status/1944230638858514752", "https://x.com/CarlyGriggs13/status/1944230828491346358", "https://x.com/CarlyGriggs13/status/1944225847067414798", "https://x.com/CarlyGriggs13/status/1944245913943232811", "https://x.com/CarlyGriggs13/status/1944254780030828554", "https://x.com/CarlyGriggs13/status/1944259612472967644", "https://x.com/CarlyGriggs13/status/1944260565188149286", "https://x.com/CarlyGriggs13/status/1944284254176780788", "https://x.com/CarlyGriggs13/status/1944373192933478561", "https://x.com/CarlyGriggs13/status/1944372686131540288", "https://x.com/CarlyGriggs13/status/1944251322624053249", "https://x.com/Phish_Destroy/status/1896389903728144509", "https://x.com/CarlyGriggs13/status/1944240806446989744", "https://x.com/CarlyGriggs13/status/1944259829607936218", "https://x.com/Phish_Destroy/status/1896358324104466785", "https://x.com/CarlyGriggs13/status/1944255840690585760", "https://x.com/CarlyGriggs13/status/1944245523990688231", "https://x.com/CarlyGriggs13/status/1944240245601398861", "https://x.com/CarlyGriggs13/status/1944286717613420617", "https://x.com/CarlyGriggs13/status/1944371596963004564", "https://x.com/CarlyGriggs13/status/1944234910459605022", "https://x.com/CarlyGriggs13/status/1944240899875086472", "https://x.com/CarlyGriggs13/status/1944290559884988725", "https://x.com/Phish_Destroy/status/1896613639626609026", "https://x.com/CarlyGriggs13/status/1944260417578315973", "https://x.com/CarlyGriggs13/status/1944280315905622226", "https://x.com/Phish_Destroy/status/1896506630851969345", "https://x.com/CarlyGriggs13/status/1944259715707679137", "https://x.com/Phish_Destroy/status/1896515858681442687", "https://x.com/Phish_Destroy/status/1896416482986459137", "https://x.com/Phish_Destroy/status/1896618026616954978", "https://x.com/Phish_Destroy/status/1896521260575887859", "https://x.com/CarlyGriggs13/status/1944284496406204727", "https://x.com/CarlyGriggs13/status/1944251141472047129", "https://x.com/CarlyGriggs13/status/1944229996211343535", "https://x.com/CarlyGriggs13/status/1944372195053940996", "https://x.com/Phish_Destroy/status/1896567613586821209", "https://x.com/CarlyGriggs13/status/1944225920052867292", "https://x.com/CarlyGriggs13/status/1944240391269539867", "https://x.com/CarlyGriggs13/status/1944290826286141760", "https://x.com/Phish_Destroy/status/1896567407461982659", "https://x.com/Phish_Destroy/status/1896503309898490327", "https://x.com/CarlyGriggs13/status/1944372392366579811", "https://x.com/CarlyGriggs13/status/1944427359207121380", "https://x.com/CarlyGriggs13/status/1944290472815734918", "https://x.com/Phish_Destroy/status/1896359476976140581", "https://x.com/Phish_Destroy/status/1896512668691038573", "https://x.com/CarlyGriggs13/status/1944458027106795574", "https://x.com/CarlyGriggs13/status/1944283968326553957", "https://x.com/Phish_Destroy/status/1896509457749987659", "https://x.com/Phish_Destroy/status/1896572722005885394", "https://x.com/CarlyGriggs13/status/1944280469580726658", "https://x.com/CarlyGriggs13/status/1944240739442979267", "https://x.com/CarlyGriggs13/status/1944292475838910891", "https://x.com/Phish_Destroy/status/1896572437485207960", "https://x.com/Phish_Destroy/status/1896501668709318660", "https://x.com/CarlyGriggs13/status/1944290978921161164", "https://x.com/Phish_Destroy/status/1896511853565792379", "https://x.com/CarlyGriggs13/status/1944260160509120749", "https://x.com/CarlyGriggs13/status/1944260647845290422", "https://x.com/Phish_Destroy/status/1896505119019278752", "https://x.com/CarlyGriggs13/status/1944371508576424379", "https://x.com/CarlyGriggs13/status/1944234732553691471", "https://x.com/CarlyGriggs13/status/1944406880681406565", "https://x.com/Phish_Destroy/status/1896519320043438221", "https://x.com/Phish_Destroy/status/1896527670282006790", "https://x.com/Phish_Destroy/status/1896511767033111018", "https://x.com/CarlyGriggs13/status/1944255518924489062", "https://x.com/CarlyGriggs13/status/1944372480933494983", "https://x.com/CarlyGriggs13/status/1944230324071792935", "https://x.com/CarlyGriggs13/status/1944371873082474593", "https://x.com/CarlyGriggs13/status/1944380482688332110", "https://x.com/CarlyGriggs13/status/1944250700608704785", "https://x.com/CarlyGriggs13/status/1944290226081608039", "https://x.com/CarlyGriggs13/status/1944231112697688573", "https://x.com/Phish_Destroy/status/1896496098019340567", "https://x.com/Phish_Destroy/status/1896608120845304185", "https://x.com/CarlyGriggs13/status/1944284560721613153", "https://x.com/CarlyGriggs13/status/1944259538330238984", "https://x.com/Phish_Destroy/status/1896518120971612301", "https://x.com/CarlyGriggs13/status/1944245352795648292", "https://x.com/CarlyGriggs13/status/1944373349854986382", "https://x.com/Phish_Destroy/status/1896496970350629227", "https://x.com/CarlyGriggs13/status/1944235437280964677", "https://x.com/CarlyGriggs13/status/1944251702137237914", "https://x.com/Phish_Destroy/status/1896617719195459647", "https://x.com/CarlyGriggs13/status/1944284183964110952", "https://x.com/CarlyGriggs13/status/1944230244107620567", "https://x.com/CarlyGriggs13/status/1944241008968880443", "https://x.com/Phish_Destroy/status/1896496710089912349", "https://x.com/Phish_Destroy/status/1896668794011185173", "https://x.com/CarlyGriggs13/status/1944203733690135009", "https://x.com/CarlyGriggs13/status/1944372299211129328", "https://x.com/CarlyGriggs13/status/1944240495665827845", "https://x.com/CarlyGriggs13/status/1944246487564550511", "https://x.com/CarlyGriggs13/status/1944443077235507680", "https://x.com/CarlyGriggs13/status/1944380405815120341", "https://x.com/CarlyGriggs13/status/1944235649088819467", "https://x.com/CarlyGriggs13/status/1944234821997203578", "https://x.com/CarlyGriggs13/status/1944244876817657954", "https://x.com/CarlyGriggs13/status/1944280387355570278", "https://x.com/CarlyGriggs13/status/1944246420741017876", "https://x.com/CarlyGriggs13/status/1944292032576430533", "https://x.com/Phish_Destroy/status/1896574746378358851", "https://x.com/CarlyGriggs13/status/1944245152463077884", "https://x.com/CarlyGriggs13/status/1944241395809890741", "https://x.com/CarlyGriggs13/status/1944371389709816148", "https://x.com/CarlyGriggs13/status/1944257563606102180", "https://x.com/CarlyGriggs13/status/1944290727871017031", "https://x.com/Phish_Destroy/status/1896511641484980519", "https://x.com/CarlyGriggs13/status/1944290318255280428", "https://x.com/CarlyGriggs13/status/1944372577457041707", "https://x.com/CarlyGriggs13/status/1944256576686043571", "https://x.com/CarlyGriggs13/status/1944371754408821036", "https://x.com/Phish_Destroy/status/1896416916916650396", "https://x.com/CarlyGriggs13/status/1944250852211868120", "https://x.com/CarlyGriggs13/status/1944458216362188966", "https://x.com/CarlyGriggs13/status/1944291175831417164", "https://x.com/CarlyGriggs13/status/1944260492702228635", "https://x.com/CarlyGriggs13/status/1944230963682189556", "https://x.com/CarlyGriggs13/status/1944286866359914840", "https://x.com/Phish_Destroy/status/1896567293980856797", "https://x.com/Phish_Destroy/status/1896513120350441587", "https://x.com/CarlyGriggs13/status/1944284354152165501", "https://x.com/Phish_Destroy/status/1896617812900372638", "https://x.com/CarlyGriggs13/status/1944264933384106444", "https://x.com/CarlyGriggs13/status/1944286787863539803", "https://x.com/CarlyGriggs13/status/1944235260377477369", "https://x.com/CarlyGriggs13/status/1944203614685139063", "https://x.com/CarlyGriggs13/status/1944290139842150596", "https://x.com/CarlyGriggs13/status/1944373121928089644", "https://x.com/Phish_Destroy/status/1896516048645689367", "https://x.com/Phish_Destroy/status/1896521378578510071", "https://x.com/CarlyGriggs13/status/1944257054694072739", "https://x.com/CarlyGriggs13/status/1944230522437153117", "https://x.com/CarlyGriggs13/status/1944249486559064414", "https://x.com/CarlyGriggs13/status/1944286651796045862", "https://x.com/Phish_Destroy/status/1896508766113407430", "https://x.com/CarlyGriggs13/status/1944235344968179819", "https://x.com/CarlyGriggs13/status/1944291965463371973", "https://x.com/CarlyGriggs13/status/1944230139316859347", "https://x.com/CarlyGriggs13/status/1944235000028860647", "https://x.com/CarlyGriggs13/status/1944380592470040729", "https://x.com/Phish_Destroy/status/1896357757122720229", "https://x.com/Phish_Destroy/status/1896500313739403680", "https://x.com/CarlyGriggs13/status/1944231039700021476", "https://x.com/CarlyGriggs13/status/1944241209389592884", "https://x.com/CarlyGriggs13/status/1944379933163163790", "https://x.com/Phish_Destroy/status/1896570463511617754", "https://x.com/CarlyGriggs13/status/1944250627799810060", "https://x.com/CarlyGriggs13/status/1944284069086306357", "https://x.com/Phish_Destroy/status/1896617428328804714", "https://x.com/CarlyGriggs13/status/1944463644118671757", "https://x.com/CarlyGriggs13/status/1944260832495370614", "https://x.com/CarlyGriggs13/status/1944371963096420710", "https://x.com/CarlyGriggs13/status/1944292371984003308", "https://x.com/CarlyGriggs13/status/1944292283446440163", "https://x.com/CarlyGriggs13/status/1944230425141944585", "https://x.com/Phish_Destroy/status/1896518611650678946", "https://x.com/CarlyGriggs13/status/1944265128599278049", "https://x.com/CarlyGriggs13/status/1944283896939421815", "https://x.com/Phish_Destroy/status/1896496623985037608", "https://x.com/CarlyGriggs13/status/1944244973764759553", "https://x.com/CarlyGriggs13/status/1944252408529347013", "https://x.com/CarlyGriggs13/status/1944408972695364004", "https://x.com/CarlyGriggs13/status/1944379748534063197", "https://x.com/CarlyGriggs13/status/1944235744706412837", "https://x.com/CarlyGriggs13/status/1944226104123810277", "https://x.com/CarlyGriggs13/status/1944286482992079308", "https://x.com/CarlyGriggs13/status/1944372958106890423", "https://x.com/CarlyGriggs13/status/1944291060374810900", "https://x.com/CarlyGriggs13/status/1944240632467161402", "https://x.com/Phish_Destroy/status/1896494799521489175", "https://x.com/Phish_Destroy/status/1896613513990435112", "https://x.com/CarlyGriggs13/status/1944255349596225563", "https://x.com/Phish_Destroy/status/1896522747725115638", "https://x.com/CarlyGriggs13/status/1944275071238828405", "https://x.com/CarlyGriggs13/status/1944230738112463064", "https://x.com/Phish_Destroy/status/1896573683235430781", "https://x.com/CarlyGriggs13/status/1944255433037717533", "https://x.com/CarlyGriggs13/status/1944458360687907255", "https://x.com/Phish_Destroy/status/1896522970312643065", "https://x.com/CarlyGriggs13/status/1944265034831737135", "https://x.com/CarlyGriggs13/status/1944249741497258487", "https://x.com/CarlyGriggs13/status/1944251524281925778", "https://x.com/CarlyGriggs13/status/1944286313139597482", "https://x.com/Phish_Destroy/status/1896526885011755421", "https://x.com/CarlyGriggs13/status/1944229882679931284", "https://x.com/CarlyGriggs13/status/1944286574482477080", "https://x.com/Phish_Destroy/status/1896499864177177077", "https://x.com/CarlyGriggs13/status/1944236023946351054", "https://x.com/CarlyGriggs13/status/1944235538065571870", "https://x.com/Phish_Destroy/status/1896357888568033700", "https://x.com/CarlyGriggs13/status/1944241107241427134", "https://x.com/CarlyGriggs13/status/1944251036530602240", "https://x.com/CarlyGriggs13/status/1944277715844047049", "https://x.com/CarlyGriggs13/status/1944291805534539860", "https://x.com/Phish_Destroy/status/1896517427237900662", "https://x.com/Phish_Destroy/status/1896519155211436476", "https://x.com/CarlyGriggs13/status/1944458140852080737", "https://x.com/CarlyGriggs13/status/1944264713308717119", "https://x.com/CarlyGriggs13/status/1944290907597008936", "https://x.com/Phish_Destroy/status/1896501844962361707", "https://x.com/CarlyGriggs13/status/1944236383960281159", "https://x.com/CarlyGriggs13/status/1944284414709531066", "https://x.com/CarlyGriggs13/status/1944286396413276216", "https://x.com/CarlyGriggs13/status/1944203419964547391", "https://x.com/Phish_Destroy/status/1896516501521498114", "https://x.com/CarlyGriggs13/status/1944292129540370910", "https://x.com/Phish_Destroy/status/1896496000493351107", "https://x.com/CarlyGriggs13/status/1944380032899518538", "https://x.com/Phish_Destroy/status/1896526432421244929", "https://x.com/Phish_Destroy/status/1896495683328454943", "https://x.com/CarlyGriggs13/status/1944255692107321531", "https://x.com/CarlyGriggs13/status/1944245456042668104", "https://x.com/CarlyGriggs13/status/1944290044065267955", "https://x.com/CarlyGriggs13/status/1944249547775238431", "https://x.com/CarlyGriggs13/status/1944258773423439889", "https://x.com/CarlyGriggs13/status/1944372783531614352", "https://x.com/CarlyGriggs13/status/1944235175283433859", "https://x.com/CarlyGriggs13/status/1944286958387085334", "https://x.com/Phish_Destroy/status/1896514491149635821", "https://x.com/CarlyGriggs13/status/1944380117880394074", "https://x.com/CarlyGriggs13/status/1944246325010104742", "https://x.com/CarlyGriggs13/status/1944247502993338445", "https://x.com/CarlyGriggs13/status/1944245080405291116", "https://x.com/CarlyGriggs13/status/1944264826437407091", "https://x.com/CarlyGriggs13/status/1944292212767932918", "https://x.com/Phish_Destroy/status/1896570201006907729", "https://x.com/CarlyGriggs13/status/1944231215432663094", "https://x.com/CarlyGriggs13/status/1944372876154400993", "https://x.com/CarlyGriggs13/status/1944371684607193353", "https://x.com/CarlyGriggs13/status/1944241315161473415", "https://x.com/CarlyGriggs13/status/1944260756838789208", "https://x.com/Phish_Destroy/status/1896618785274298874", "https://x.com/Phish_Destroy/status/1896510599477309688", "https://x.com/CarlyGriggs13/status/1944291594833739812", "https://x.com/CarlyGriggs13/status/1944380330061758610", "https://x.com/CarlyGriggs13/status/1944291706595119268", "https://x.com/CarlyGriggs13/status/1944287050301128709", "https://x.com/CarlyGriggs13/status/1944250952233758857", "https://x.com/Phish_Destroy/status/1896359813019484555", "https://x.com/CarlyGriggs13/status/1944260303186714933" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "Multiple unidentified threat actors targeting cryptocurrency ecosystem" ], "malware_families": [ "Drainer" ], "industries": [ "Web3", "Crypto" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 12, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69c08867316c564ade394c69", "name": "PhishDestroy \u2014 Content Active Threats (Live)", "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json", "modified": "2026-05-21T12:06:19.702000", "created": "2026-03-23T00:25:09.116000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy", "active", "content" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 132502, "hostname": 66217 }, "indicator_count": 198719, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "10 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "27 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6895baa2f44f0d6a1f832067", "name": "destroylist", "description": "A curated snapshot of malicious domains targeting the cryptocurrency ecosystem \u2014 mainly wallet drainers and crypto phishing sites.\nCollected and verified from open threat-hunting operations between July 1, 2025 and the present date.\nAll indicators are cleaned from duplicates and provided as-is for analysts, SOC teams, and automated defenses.\n\nKey Details:\nFocus: Crypto drainers & phishing domains\n\nTimeframe: July 1, 2025 \u2014 August 2025\nVerified, deduplicated, and ready for integration\nSuitable for research, blocking lists, and enrichment", "modified": "2026-03-02T21:00:09.122000", "created": "2025-08-08T08:51:46.066000", "tags": [ "destroylist", "drainer", "crypto scam", "phishdestroy", "Cryptocurrency", "Blockchain" ], "references": [ "" ], "public": 1, "adversary": "Multiple unidentified threat actors targeting cryptocurrency ecosystem", "targeted_countries": [], "malware_families": [ { "id": "drainer", "display_name": "drainer", "target": null } ], "attack_ids": [], "industries": [ "web3", "crypto" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 13, "URL": 1361, "domain": 5908, "hostname": 1143 }, "indicator_count": 8425, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "89 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "proposal-shadow.net", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "proposal-shadow.net", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780241693.4435627 }