{ "type": "Domain", "indicator": "roblox.com.am", "general": { "sections": [ "general", "geo", "url_list", "passive_dns", "malware", "whois", "http_scans" ], "whois": "http://whois.domaintools.com/roblox.com.am", "alexa": "http://www.alexa.com/siteinfo/roblox.com.am", "indicator": "roblox.com.am", "type": "domain", "type_title": "Domain", "validation": [], "base_indicator": { "id": 3575539096, "indicator": "roblox.com.am", "type": "domain", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 21, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca77d6c947de6c080f8", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:55.093000", "created": "2026-05-04T06:28:55.093000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69b03238fff5512568ae1698", "name": "Phishing | Mar 11, 2026 | Part 327/776", "description": "Phishing indicators. Date: Mar 11, 2026. Part 327/776. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-03-10T15:01:12.576000", "created": "2026-03-10T15:01:12.576000", "tags": [ "phishing" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 608, "hostname": 1392 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "81 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6895baa2f44f0d6a1f832067", "name": "destroylist", "description": "A curated snapshot of malicious domains targeting the cryptocurrency ecosystem \u2014 mainly wallet drainers and crypto phishing sites.\nCollected and verified from open threat-hunting operations between July 1, 2025 and the present date.\nAll indicators are cleaned from duplicates and provided as-is for analysts, SOC teams, and automated defenses.\n\nKey Details:\nFocus: Crypto drainers & phishing domains\n\nTimeframe: July 1, 2025 \u2014 August 2025\nVerified, deduplicated, and ready for integration\nSuitable for research, blocking lists, and enrichment", "modified": "2026-03-02T21:00:09.122000", "created": "2025-08-08T08:51:46.066000", "tags": [ "destroylist", "drainer", "crypto scam", "phishdestroy", "Cryptocurrency", "Blockchain" ], "references": [ "" ], "public": 1, "adversary": "Multiple unidentified threat actors targeting cryptocurrency ecosystem", "targeted_countries": [], "malware_families": [ { "id": "drainer", "display_name": "drainer", "target": null } ], "attack_ids": [], "industries": [ "web3", "crypto" ], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 13, "URL": 1361, "domain": 5908, "hostname": 1143 }, "indicator_count": 8425, "is_author": false, "is_subscribing": null, "subscriber_count": 28, "modified_text": "89 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69915bb4f8e587690c8c6005", "name": "Phishing | Feb 15, 2026 | Part 297/749", "description": "Phishing indicators. Date: Feb 15, 2026. Part 297/749. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-15T05:37:56.777000", "created": "2026-02-15T05:37:56.777000", "tags": [ "phishing", "threatfox", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1385, "domain": 615 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "104 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69908d2c247cf8897d27da6d", "name": "Phishing | Feb 15, 2026 | Part 300/754", "description": "Phishing indicators. Date: Feb 15, 2026. Part 300/754. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-14T14:56:44.479000", "created": "2026-02-14T14:56:44.479000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 1408, "domain": 592 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "105 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "698c5fb40c598a07fdac0e9b", "name": "Phishing | Feb 11, 2026 | Part 325/783", "description": "Phishing indicators. Date: Feb 11, 2026. Part 325/783. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-11T10:53:40.228000", "created": "2026-02-11T10:53:40.228000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 664, "hostname": 1336 }, "indicator_count": 2000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "108 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6981aae29fa73af3aabfbc55", "name": "Phishing | 2026-01-31 | Part 80/163", "description": "Phishing indicators. Date: 2026-01-31. Part 80/163. For more threat intelligence visit https://ltna.com.au/cyber", "modified": "2026-02-03T07:59:30.052000", "created": "2026-02-03T07:59:30.052000", "tags": [ "phishing", "phishing-database" ], "references": [ "https://ltna.com.au/cyber" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "LTNA-Australia", "id": "380633", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 6040, "domain": 3960 }, "indicator_count": 10000, "is_author": false, "is_subscribing": null, "subscriber_count": 90, "modified_text": "116 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6785dccb041b628fde283705", "name": "phish.directory", "description": "phish.directory, a community-driven anti-phishing tool. Helping catch, prevent, and catalog phishing links & attempts.\n\nsee our website at https://phish.directory", "modified": "2026-01-25T18:05:17.629000", "created": "2025-01-14T03:40:59.456000", "tags": [ "phishing", "scams", "steam", "discord", "roblox" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 17, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": true, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "jaspermayone", "id": "305022", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 41514, "hostname": 11318 }, "indicator_count": 52832, "is_author": false, "is_subscribing": null, "subscriber_count": 3, "modified_text": "125 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "688afc88c59a808ba42608ed", "name": "Malware Filter - Phishing List - 30-07-2025", "description": "", "modified": "2025-07-31T05:18:00.071000", "created": "2025-07-31T05:18:00.071000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 15, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 17821, "domain": 4278 }, "indicator_count": 22099, "is_author": false, "is_subscribing": null, "subscriber_count": 1626, "modified_text": "303 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68746069c67ba645c293566a", "name": "Twitter Feed - CarlyGriggs13 - 13-07-2025", "description": "", "modified": "2025-07-14T01:42:00.753000", "created": "2025-07-14T01:42:00.753000", "tags": [ "phishing", "ransomware" ], "references": [ "https://x.com/CarlyGriggs13/status/1944203419964547391", "https://x.com/CarlyGriggs13/status/1944203614685139063", "https://x.com/CarlyGriggs13/status/1944203733690135009", "https://x.com/CarlyGriggs13/status/1944225847067414798", "https://x.com/CarlyGriggs13/status/1944225920052867292", "https://x.com/CarlyGriggs13/status/1944226016723161161", "https://x.com/CarlyGriggs13/status/1944226104123810277", "https://x.com/CarlyGriggs13/status/1944229882679931284", "https://x.com/CarlyGriggs13/status/1944229996211343535", "https://x.com/CarlyGriggs13/status/1944230075328516391", "https://x.com/CarlyGriggs13/status/1944230139316859347", "https://x.com/CarlyGriggs13/status/1944230244107620567", "https://x.com/CarlyGriggs13/status/1944230324071792935", "https://x.com/CarlyGriggs13/status/1944230425141944585", "https://x.com/CarlyGriggs13/status/1944230522437153117", "https://x.com/CarlyGriggs13/status/1944230638858514752", "https://x.com/CarlyGriggs13/status/1944230738112463064", "https://x.com/CarlyGriggs13/status/1944230828491346358", "https://x.com/CarlyGriggs13/status/1944230892760682827", "https://x.com/CarlyGriggs13/status/1944230963682189556", "https://x.com/CarlyGriggs13/status/1944231039700021476", "https://x.com/CarlyGriggs13/status/1944231112697688573", "https://x.com/CarlyGriggs13/status/1944231215432663094", "https://x.com/CarlyGriggs13/status/1944234556829139450", "https://x.com/CarlyGriggs13/status/1944234732553691471", "https://x.com/CarlyGriggs13/status/1944234821997203578", "https://x.com/CarlyGriggs13/status/1944234910459605022", "https://x.com/CarlyGriggs13/status/1944235000028860647", "https://x.com/CarlyGriggs13/status/1944235175283433859", "https://x.com/CarlyGriggs13/status/1944235260377477369", "https://x.com/CarlyGriggs13/status/1944235344968179819", "https://x.com/CarlyGriggs13/status/1944235437280964677", "https://x.com/CarlyGriggs13/status/1944235538065571870", "https://x.com/CarlyGriggs13/status/1944235649088819467", "https://x.com/CarlyGriggs13/status/1944235744706412837", "https://x.com/CarlyGriggs13/status/1944236023946351054", "https://x.com/CarlyGriggs13/status/1944236383960281159", "https://x.com/CarlyGriggs13/status/1944240245601398861", "https://x.com/CarlyGriggs13/status/1944240391269539867", "https://x.com/CarlyGriggs13/status/1944240495665827845", "https://x.com/CarlyGriggs13/status/1944240632467161402", "https://x.com/CarlyGriggs13/status/1944240739442979267", "https://x.com/CarlyGriggs13/status/1944240806446989744", "https://x.com/CarlyGriggs13/status/1944240899875086472", "https://x.com/CarlyGriggs13/status/1944241008968880443", "https://x.com/CarlyGriggs13/status/1944241107241427134", "https://x.com/CarlyGriggs13/status/1944241209389592884", "https://x.com/CarlyGriggs13/status/1944241315161473415", "https://x.com/CarlyGriggs13/status/1944241395809890741", "https://x.com/CarlyGriggs13/status/1944244876817657954", "https://x.com/CarlyGriggs13/status/1944244973764759553", "https://x.com/CarlyGriggs13/status/1944245080405291116", "https://x.com/CarlyGriggs13/status/1944245152463077884", "https://x.com/CarlyGriggs13/status/1944245250492436866", "https://x.com/CarlyGriggs13/status/1944245352795648292", "https://x.com/CarlyGriggs13/status/1944245456042668104", "https://x.com/CarlyGriggs13/status/1944245523990688231", "https://x.com/CarlyGriggs13/status/1944245913943232811", "https://x.com/CarlyGriggs13/status/1944246325010104742", "https://x.com/CarlyGriggs13/status/1944246420741017876", "https://x.com/CarlyGriggs13/status/1944246487564550511", "https://x.com/CarlyGriggs13/status/1944247502993338445", "https://x.com/CarlyGriggs13/status/1944249486559064414", "https://x.com/CarlyGriggs13/status/1944249547775238431", "https://x.com/CarlyGriggs13/status/1944249741497258487", "https://x.com/CarlyGriggs13/status/1944250627799810060", "https://x.com/CarlyGriggs13/status/1944250700608704785", "https://x.com/CarlyGriggs13/status/1944250768921444465", "https://x.com/CarlyGriggs13/status/1944250852211868120", "https://x.com/CarlyGriggs13/status/1944250952233758857", "https://x.com/CarlyGriggs13/status/1944251036530602240", "https://x.com/CarlyGriggs13/status/1944251141472047129", "https://x.com/CarlyGriggs13/status/1944251245725716866", "https://x.com/CarlyGriggs13/status/1944251322624053249", "https://x.com/CarlyGriggs13/status/1944251421865513405", "https://x.com/CarlyGriggs13/status/1944251524281925778", "https://x.com/CarlyGriggs13/status/1944251702137237914", "https://x.com/CarlyGriggs13/status/1944252408529347013", "https://x.com/CarlyGriggs13/status/1944254780030828554", "https://x.com/CarlyGriggs13/status/1944255349596225563", "https://x.com/CarlyGriggs13/status/1944255433037717533", "https://x.com/CarlyGriggs13/status/1944255518924489062", "https://x.com/CarlyGriggs13/status/1944255692107321531", "https://x.com/CarlyGriggs13/status/1944255774953230830", "https://x.com/CarlyGriggs13/status/1944255840690585760", "https://x.com/CarlyGriggs13/status/1944256576686043571", "https://x.com/CarlyGriggs13/status/1944257054694072739", "https://x.com/CarlyGriggs13/status/1944257563606102180", "https://x.com/CarlyGriggs13/status/1944258773423439889", "https://x.com/CarlyGriggs13/status/1944259538330238984", "https://x.com/CarlyGriggs13/status/1944259612472967644", "https://x.com/CarlyGriggs13/status/1944259715707679137", "https://x.com/CarlyGriggs13/status/1944259829607936218", "https://x.com/CarlyGriggs13/status/1944259899006849214", "https://x.com/CarlyGriggs13/status/1944259979386507619", "https://x.com/CarlyGriggs13/status/1944260160509120749", "https://x.com/CarlyGriggs13/status/1944260230952444038", "https://x.com/CarlyGriggs13/status/1944260303186714933", "https://x.com/CarlyGriggs13/status/1944260417578315973", "https://x.com/CarlyGriggs13/status/1944260492702228635", "https://x.com/CarlyGriggs13/status/1944260565188149286", "https://x.com/CarlyGriggs13/status/1944260647845290422", "https://x.com/CarlyGriggs13/status/1944260756838789208", "https://x.com/CarlyGriggs13/status/1944260832495370614", "https://x.com/CarlyGriggs13/status/1944261227942752280", "https://x.com/CarlyGriggs13/status/1944264713308717119", "https://x.com/CarlyGriggs13/status/1944264826437407091", "https://x.com/CarlyGriggs13/status/1944264933384106444", "https://x.com/CarlyGriggs13/status/1944265034831737135", "https://x.com/CarlyGriggs13/status/1944265128599278049", "https://x.com/CarlyGriggs13/status/1944275071238828405", "https://x.com/CarlyGriggs13/status/1944277715844047049", "https://x.com/CarlyGriggs13/status/1944280315905622226", "https://x.com/CarlyGriggs13/status/1944280387355570278", "https://x.com/CarlyGriggs13/status/1944280469580726658", "https://x.com/CarlyGriggs13/status/1944283896939421815", "https://x.com/CarlyGriggs13/status/1944283968326553957", "https://x.com/CarlyGriggs13/status/1944284069086306357", "https://x.com/CarlyGriggs13/status/1944284183964110952", "https://x.com/CarlyGriggs13/status/1944284254176780788", "https://x.com/CarlyGriggs13/status/1944284354152165501", "https://x.com/CarlyGriggs13/status/1944284414709531066", "https://x.com/CarlyGriggs13/status/1944284496406204727", "https://x.com/CarlyGriggs13/status/1944284560721613153", "https://x.com/CarlyGriggs13/status/1944286313139597482", "https://x.com/CarlyGriggs13/status/1944286396413276216", "https://x.com/CarlyGriggs13/status/1944286482992079308", "https://x.com/CarlyGriggs13/status/1944286574482477080", "https://x.com/CarlyGriggs13/status/1944286651796045862", "https://x.com/CarlyGriggs13/status/1944286717613420617", "https://x.com/CarlyGriggs13/status/1944286787863539803", "https://x.com/CarlyGriggs13/status/1944286866359914840", "https://x.com/CarlyGriggs13/status/1944286958387085334", "https://x.com/CarlyGriggs13/status/1944287050301128709", "https://x.com/CarlyGriggs13/status/1944290044065267955", "https://x.com/CarlyGriggs13/status/1944290139842150596", "https://x.com/CarlyGriggs13/status/1944290226081608039", "https://x.com/CarlyGriggs13/status/1944290318255280428", "https://x.com/CarlyGriggs13/status/1944290393727652175", "https://x.com/CarlyGriggs13/status/1944290472815734918", "https://x.com/CarlyGriggs13/status/1944290559884988725", "https://x.com/CarlyGriggs13/status/1944290639195083249", "https://x.com/CarlyGriggs13/status/1944290727871017031", "https://x.com/CarlyGriggs13/status/1944290826286141760", "https://x.com/CarlyGriggs13/status/1944290907597008936", "https://x.com/CarlyGriggs13/status/1944290978921161164", "https://x.com/CarlyGriggs13/status/1944291060374810900", "https://x.com/CarlyGriggs13/status/1944291175831417164", "https://x.com/CarlyGriggs13/status/1944291594833739812", "https://x.com/CarlyGriggs13/status/1944291706595119268", "https://x.com/CarlyGriggs13/status/1944291805534539860", "https://x.com/CarlyGriggs13/status/1944291878611853580", "https://x.com/CarlyGriggs13/status/1944291965463371973", "https://x.com/CarlyGriggs13/status/1944292032576430533", "https://x.com/CarlyGriggs13/status/1944292129540370910", "https://x.com/CarlyGriggs13/status/1944292212767932918", "https://x.com/CarlyGriggs13/status/1944292283446440163", "https://x.com/CarlyGriggs13/status/1944292371984003308", "https://x.com/CarlyGriggs13/status/1944292475838910891", "https://x.com/CarlyGriggs13/status/1944371389709816148", "https://x.com/CarlyGriggs13/status/1944371508576424379", "https://x.com/CarlyGriggs13/status/1944371596963004564", "https://x.com/CarlyGriggs13/status/1944371684607193353", "https://x.com/CarlyGriggs13/status/1944371754408821036", "https://x.com/CarlyGriggs13/status/1944371873082474593", "https://x.com/CarlyGriggs13/status/1944371963096420710", "https://x.com/CarlyGriggs13/status/1944372077034680513", "https://x.com/CarlyGriggs13/status/1944372195053940996", "https://x.com/CarlyGriggs13/status/1944372299211129328", "https://x.com/CarlyGriggs13/status/1944372392366579811", "https://x.com/CarlyGriggs13/status/1944372480933494983", "https://x.com/CarlyGriggs13/status/1944372577457041707", "https://x.com/CarlyGriggs13/status/1944372686131540288", "https://x.com/CarlyGriggs13/status/1944372783531614352", "https://x.com/CarlyGriggs13/status/1944372876154400993", "https://x.com/CarlyGriggs13/status/1944372958106890423", "https://x.com/CarlyGriggs13/status/1944373047944700101", "https://x.com/CarlyGriggs13/status/1944373121928089644", "https://x.com/CarlyGriggs13/status/1944373192933478561", "https://x.com/CarlyGriggs13/status/1944373349854986382", "https://x.com/CarlyGriggs13/status/1944379748534063197", "https://x.com/CarlyGriggs13/status/1944379833053560949", "https://x.com/CarlyGriggs13/status/1944379933163163790", "https://x.com/CarlyGriggs13/status/1944380032899518538", "https://x.com/CarlyGriggs13/status/1944380117880394074", "https://x.com/CarlyGriggs13/status/1944380330061758610", "https://x.com/CarlyGriggs13/status/1944380405815120341", "https://x.com/CarlyGriggs13/status/1944380482688332110", "https://x.com/CarlyGriggs13/status/1944380592470040729", "https://x.com/CarlyGriggs13/status/1944406880681406565", "https://x.com/CarlyGriggs13/status/1944408972695364004", "https://x.com/CarlyGriggs13/status/1944427359207121380", "https://x.com/CarlyGriggs13/status/1944443077235507680", "https://x.com/CarlyGriggs13/status/1944458027106795574", "https://x.com/CarlyGriggs13/status/1944458140852080737", "https://x.com/CarlyGriggs13/status/1944458216362188966", "https://x.com/CarlyGriggs13/status/1944458360687907255", "https://x.com/CarlyGriggs13/status/1944463644118671757" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 130, "URL": 198, "hostname": 68, "FileHash-MD5": 1 }, "indicator_count": 397, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "321 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "68461c7118c01f81864f8922", "name": "Malware Filter - Phishing List - 08-06-2025", "description": "", "modified": "2025-06-08T23:27:45.223000", "created": "2025-06-08T23:27:45.223000", "tags": [], "references": [ "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 13, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "CyberHunterAutoFeed", "id": "182496", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 308, "domain": 108 }, "indicator_count": 416, "is_author": false, "is_subscribing": null, "subscriber_count": 1621, "modified_text": "356 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "references": [ "", "https://x.com/CarlyGriggs13/status/1944245250492436866", "https://x.com/CarlyGriggs13/status/1944290044065267955", "https://x.com/CarlyGriggs13/status/1944241209389592884", "https://x.com/CarlyGriggs13/status/1944373349854986382", "https://x.com/CarlyGriggs13/status/1944284183964110952", "https://x.com/CarlyGriggs13/status/1944371963096420710", "https://x.com/CarlyGriggs13/status/1944463644118671757", "https://x.com/CarlyGriggs13/status/1944252408529347013", "https://x.com/CarlyGriggs13/status/1944458216362188966", "https://x.com/CarlyGriggs13/status/1944372392366579811", "https://x.com/CarlyGriggs13/status/1944240806446989744", "https://x.com/CarlyGriggs13/status/1944231215432663094", "https://x.com/CarlyGriggs13/status/1944261227942752280", "https://x.com/CarlyGriggs13/status/1944255349596225563", "https://x.com/CarlyGriggs13/status/1944280315905622226", "https://x.com/CarlyGriggs13/status/1944291060374810900", "https://x.com/CarlyGriggs13/status/1944258773423439889", "https://x.com/CarlyGriggs13/status/1944230638858514752", "https://x.com/CarlyGriggs13/status/1944240245601398861", "https://x.com/CarlyGriggs13/status/1944235649088819467", "https://x.com/CarlyGriggs13/status/1944275071238828405", "https://x.com/CarlyGriggs13/status/1944230075328516391", "https://x.com/CarlyGriggs13/status/1944286574482477080", "https://x.com/CarlyGriggs13/status/1944372783531614352", "https://x.com/CarlyGriggs13/status/1944230244107620567", "https://x.com/CarlyGriggs13/status/1944235175283433859", "https://x.com/CarlyGriggs13/status/1944286866359914840", "https://x.com/CarlyGriggs13/status/1944245523990688231", "https://x.com/CarlyGriggs13/status/1944458360687907255", "https://x.com/CarlyGriggs13/status/1944241008968880443", "https://x.com/CarlyGriggs13/status/1944230963682189556", "https://x.com/CarlyGriggs13/status/1944241107241427134", "https://x.com/CarlyGriggs13/status/1944286651796045862", "https://x.com/CarlyGriggs13/status/1944249547775238431", "https://x.com/CarlyGriggs13/status/1944250700608704785", "https://x.com/CarlyGriggs13/status/1944235744706412837", "https://x.com/CarlyGriggs13/status/1944251036530602240", "https://x.com/CarlyGriggs13/status/1944290559884988725", "https://x.com/CarlyGriggs13/status/1944290226081608039", "https://x.com/CarlyGriggs13/status/1944250627799810060", "https://x.com/CarlyGriggs13/status/1944260647845290422", "https://x.com/CarlyGriggs13/status/1944260492702228635", "https://x.com/CarlyGriggs13/status/1944292371984003308", "https://x.com/CarlyGriggs13/status/1944427359207121380", "https://x.com/CarlyGriggs13/status/1944380330061758610", "https://x.com/CarlyGriggs13/status/1944260303186714933", "https://x.com/CarlyGriggs13/status/1944249486559064414", "https://x.com/CarlyGriggs13/status/1944241395809890741", "https://x.com/CarlyGriggs13/status/1944246420741017876", "https://x.com/CarlyGriggs13/status/1944291805534539860", "https://x.com/CarlyGriggs13/status/1944371596963004564", "https://x.com/CarlyGriggs13/status/1944230738112463064", "https://x.com/CarlyGriggs13/status/1944234821997203578", "https://x.com/CarlyGriggs13/status/1944290978921161164", "https://x.com/CarlyGriggs13/status/1944203614685139063", "https://x.com/CarlyGriggs13/status/1944203733690135009", "https://x.com/CarlyGriggs13/status/1944230139316859347", "https://x.com/CarlyGriggs13/status/1944371684607193353", "https://x.com/CarlyGriggs13/status/1944286313139597482", "https://x.com/CarlyGriggs13/status/1944290472815734918", "https://ltna.com.au/cyber", "https://x.com/CarlyGriggs13/status/1944372480933494983", "https://x.com/CarlyGriggs13/status/1944244973764759553", "https://x.com/CarlyGriggs13/status/1944458027106795574", "https://x.com/CarlyGriggs13/status/1944245352795648292", "https://x.com/CarlyGriggs13/status/1944264933384106444", "https://x.com/CarlyGriggs13/status/1944284496406204727", "https://x.com/CarlyGriggs13/status/1944234556829139450", "https://x.com/CarlyGriggs13/status/1944240739442979267", "https://x.com/CarlyGriggs13/status/1944234732553691471", "https://x.com/CarlyGriggs13/status/1944229882679931284", "https://x.com/CarlyGriggs13/status/1944247502993338445", "https://x.com/CarlyGriggs13/status/1944260832495370614", "https://x.com/CarlyGriggs13/status/1944259612472967644", "https://x.com/CarlyGriggs13/status/1944240495665827845", "https://x.com/CarlyGriggs13/status/1944264713308717119", "https://x.com/CarlyGriggs13/status/1944379748534063197", "https://x.com/CarlyGriggs13/status/1944251421865513405", "https://x.com/CarlyGriggs13/status/1944259979386507619", "https://x.com/CarlyGriggs13/status/1944257563606102180", "https://x.com/CarlyGriggs13/status/1944291175831417164", "https://x.com/CarlyGriggs13/status/1944235000028860647", "https://x.com/CarlyGriggs13/status/1944290393727652175", "https://x.com/CarlyGriggs13/status/1944246487564550511", "https://x.com/CarlyGriggs13/status/1944286482992079308", "https://x.com/CarlyGriggs13/status/1944235260377477369", "https://x.com/CarlyGriggs13/status/1944255518924489062", "https://x.com/CarlyGriggs13/status/1944372577457041707", "https://x.com/CarlyGriggs13/status/1944371389709816148", "https://x.com/CarlyGriggs13/status/1944290139842150596", "https://x.com/CarlyGriggs13/status/1944251702137237914", "https://x.com/CarlyGriggs13/status/1944259715707679137", "https://x.com/CarlyGriggs13/status/1944284069086306357", "https://x.com/CarlyGriggs13/status/1944371754408821036", "https://x.com/CarlyGriggs13/status/1944379933163163790", "https://x.com/CarlyGriggs13/status/1944226016723161161", "https://x.com/CarlyGriggs13/status/1944265034831737135", "https://x.com/CarlyGriggs13/status/1944371508576424379", "https://x.com/CarlyGriggs13/status/1944251245725716866", "https://x.com/CarlyGriggs13/status/1944203419964547391", "https://x.com/CarlyGriggs13/status/1944292475838910891", "https://x.com/CarlyGriggs13/status/1944249741497258487", "https://x.com/CarlyGriggs13/status/1944286958387085334", "https://x.com/CarlyGriggs13/status/1944290727871017031", "https://x.com/CarlyGriggs13/status/1944292032576430533", "https://x.com/CarlyGriggs13/status/1944231112697688573", "https://x.com/CarlyGriggs13/status/1944280387355570278", "https://x.com/CarlyGriggs13/status/1944235437280964677", "https://x.com/CarlyGriggs13/status/1944372299211129328", "https://x.com/CarlyGriggs13/status/1944372686131540288", "https://x.com/CarlyGriggs13/status/1944236023946351054", "https://x.com/CarlyGriggs13/status/1944246325010104742", "https://x.com/CarlyGriggs13/status/1944260417578315973", "https://x.com/CarlyGriggs13/status/1944245152463077884", "https://x.com/CarlyGriggs13/status/1944406880681406565", "https://x.com/CarlyGriggs13/status/1944240899875086472", "https://x.com/CarlyGriggs13/status/1944290318255280428", "https://x.com/CarlyGriggs13/status/1944250768921444465", "https://x.com/CarlyGriggs13/status/1944292212767932918", "https://x.com/CarlyGriggs13/status/1944287050301128709", "https://x.com/CarlyGriggs13/status/1944251524281925778", "https://x.com/CarlyGriggs13/status/1944259538330238984", "https://x.com/CarlyGriggs13/status/1944458140852080737", "https://x.com/CarlyGriggs13/status/1944255840690585760", "https://x.com/CarlyGriggs13/status/1944255692107321531", "https://x.com/CarlyGriggs13/status/1944284560721613153", "https://x.com/CarlyGriggs13/status/1944372077034680513", "https://x.com/CarlyGriggs13/status/1944286717613420617", "https://x.com/CarlyGriggs13/status/1944254780030828554", "https://x.com/CarlyGriggs13/status/1944235538065571870", "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt", "https://x.com/CarlyGriggs13/status/1944225920052867292", "https://x.com/CarlyGriggs13/status/1944291706595119268", "https://x.com/CarlyGriggs13/status/1944240391269539867", "https://x.com/CarlyGriggs13/status/1944257054694072739", "https://x.com/CarlyGriggs13/status/1944373192933478561", "https://x.com/CarlyGriggs13/status/1944260230952444038", "https://x.com/CarlyGriggs13/status/1944379833053560949", "https://x.com/CarlyGriggs13/status/1944241315161473415", "https://x.com/CarlyGriggs13/status/1944372195053940996", "https://x.com/CarlyGriggs13/status/1944291594833739812", "https://x.com/CarlyGriggs13/status/1944260565188149286", "https://x.com/CarlyGriggs13/status/1944235344968179819", "https://x.com/CarlyGriggs13/status/1944291878611853580", "https://x.com/CarlyGriggs13/status/1944292283446440163", "https://x.com/CarlyGriggs13/status/1944230324071792935", "https://x.com/CarlyGriggs13/status/1944244876817657954", "https://x.com/CarlyGriggs13/status/1944372876154400993", "https://x.com/CarlyGriggs13/status/1944443077235507680", "https://x.com/CarlyGriggs13/status/1944286396413276216", "https://x.com/CarlyGriggs13/status/1944229996211343535", "https://x.com/CarlyGriggs13/status/1944256576686043571", "https://x.com/CarlyGriggs13/status/1944236383960281159", "https://x.com/CarlyGriggs13/status/1944292129540370910", "https://x.com/CarlyGriggs13/status/1944255433037717533", "https://x.com/CarlyGriggs13/status/1944230425141944585", "https://x.com/CarlyGriggs13/status/1944380032899518538", "https://x.com/CarlyGriggs13/status/1944231039700021476", "https://x.com/CarlyGriggs13/status/1944251141472047129", "https://x.com/CarlyGriggs13/status/1944373121928089644", "https://x.com/CarlyGriggs13/status/1944283968326553957", "https://x.com/CarlyGriggs13/status/1944380405815120341", "https://x.com/CarlyGriggs13/status/1944290907597008936", "https://x.com/CarlyGriggs13/status/1944245080405291116", "https://x.com/CarlyGriggs13/status/1944380117880394074", "https://x.com/CarlyGriggs13/status/1944240632467161402", "https://x.com/CarlyGriggs13/status/1944250952233758857", "https://x.com/CarlyGriggs13/status/1944373047944700101", "https://x.com/CarlyGriggs13/status/1944260160509120749", "https://x.com/CarlyGriggs13/status/1944259829607936218", "https://x.com/CarlyGriggs13/status/1944284414709531066", "https://x.com/CarlyGriggs13/status/1944286787863539803", "https://x.com/CarlyGriggs13/status/1944277715844047049", "https://x.com/CarlyGriggs13/status/1944230892760682827", "https://x.com/CarlyGriggs13/status/1944284254176780788", "https://x.com/CarlyGriggs13/status/1944290826286141760", "https://x.com/CarlyGriggs13/status/1944380592470040729", "https://x.com/CarlyGriggs13/status/1944280469580726658", "https://x.com/CarlyGriggs13/status/1944245913943232811", "https://x.com/CarlyGriggs13/status/1944290639195083249", "https://x.com/CarlyGriggs13/status/1944283896939421815", "https://x.com/CarlyGriggs13/status/1944250852211868120", "https://x.com/CarlyGriggs13/status/1944380482688332110", "https://x.com/CarlyGriggs13/status/1944234910459605022", "https://x.com/CarlyGriggs13/status/1944230828491346358", "https://x.com/CarlyGriggs13/status/1944226104123810277", "https://x.com/CarlyGriggs13/status/1944260756838789208", "https://x.com/CarlyGriggs13/status/1944372958106890423", "https://x.com/CarlyGriggs13/status/1944264826437407091", "https://x.com/CarlyGriggs13/status/1944408972695364004", "https://x.com/CarlyGriggs13/status/1944251322624053249", "https://x.com/CarlyGriggs13/status/1944225847067414798", "https://x.com/CarlyGriggs13/status/1944371873082474593", "https://x.com/CarlyGriggs13/status/1944265128599278049", "https://x.com/CarlyGriggs13/status/1944259899006849214", "https://x.com/CarlyGriggs13/status/1944284354152165501", "https://x.com/CarlyGriggs13/status/1944255774953230830", "https://x.com/CarlyGriggs13/status/1944230522437153117", "https://x.com/CarlyGriggs13/status/1944291965463371973", "https://x.com/CarlyGriggs13/status/1944245456042668104" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [] }, "other": { "adversary": [ "Multiple unidentified threat actors targeting cryptocurrency ecosystem" ], "malware_families": [ "Drainer" ], "industries": [ "Gaming", "Crypto", "Web3" ] } } }, "false_positive": [] }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 21, "pulses": [ { "id": "69c081afa2bd54a9599b7c07", "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains", "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist", "modified": "2026-05-24T00:00:03.049000", "created": "2026-03-22T23:56:29.438000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 33, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "phishdestroy", "id": "348394", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 93266, "hostname": 57600 }, "indicator_count": 150866, "is_author": false, "is_subscribing": null, "subscriber_count": 99, "modified_text": "7 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "6341d1aa0a02a3f6251ab540", "name": "Sinking Yachts Phishing Domains", "description": "Sinking Yachts is a Discord based anti-phishing project founded by @nwunder. This project focuses on collecting and flagging domains that are running phishing scams against Discord or Steam, which are often spread with scam messages from compromised accounts. This collection mirrors the entire database and is updated in real time. Website: https://sinking.yachts API: https://phish.sinking.yachts Discord: https://discord.gg/cT6eQjWW8H (temporarily closed) Need to get in touch? Please email admin@fishfish.gg.", "modified": "2026-05-14T18:21:18.798000", "created": "2022-10-08T19:38:18.341000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": null, "export_count": 75566, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 1, "follower_count": 0, "vote": 0, "author": { "username": "__akac__", "id": "175104", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_175104/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 521, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc810c78c89c7f6bb87", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:56.488000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 647 }, "indicator_count": 1189, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69aefcc5d258300fb3e319e4", "name": "sinking yachts clone __akac__ ....", "description": "", "modified": "2026-05-14T18:21:18.798000", "created": "2026-03-09T17:00:53.305000", "tags": [ "discord", "roblox", "steam", "phishing" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [ "gaming" ], "TLP": "white", "cloned_from": "6341d1aa0a02a3f6251ab540", "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 542, "hostname": 646 }, "indicator_count": 1188, "is_author": false, "is_subscribing": null, "subscriber_count": 71, "modified_text": "16 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 0 }, { "id": "69f83cb0ce73bef5c452bfb0", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:04.332000", "created": "2026-05-04T06:29:04.332000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83caf1bef3609f0eb79e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:03.120000", "created": "2026-05-04T06:29:03.120000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cac7d6c947de6c080f9", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:29:00.417000", "created": "2026-05-04T06:29:00.417000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab9769e92b3285a2b4", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.770000", "created": "2026-05-04T06:28:59.770000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83cab7e03b19c5f1078e3", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:59.113000", "created": "2026-05-04T06:28:59.113000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 69, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 }, { "id": "69f83ca9411c8ab5d294a7e2", "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]", "description": "", "modified": "2026-05-04T06:28:57.479000", "created": "2026-05-04T06:28:57.479000", "tags": [ "phishing", "crypto", "scam", "drainer", "fraud", "blocklist", "phishdestroy" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": "69c081afa2bd54a9599b7c07", "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "msudosos", "id": "381696", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 88564, "hostname": 54516 }, "indicator_count": 143080, "is_author": false, "is_subscribing": null, "subscriber_count": 68, "modified_text": "26 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "domain", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "roblox.com.am", "type": "Domain" }, "abuseipdb": null, "urlhaus": { "indicator": "roblox.com.am", "found": false, "verdict": "clean", "urls": [], "error": null }, "from_cache": true, "_cached_at": 1780203628.5906334 }