{
  "type": "Domain",
  "indicator": "zyexx.com",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/zyexx.com",
    "alexa": "http://www.alexa.com/siteinfo/zyexx.com",
    "indicator": "zyexx.com",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3777709940,
      "indicator": "zyexx.com",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 36,
      "pulses": [
        {
          "id": "69c081afa2bd54a9599b7c07",
          "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
          "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
          "modified": "2026-05-24T00:00:03.049000",
          "created": "2026-03-22T23:56:29.438000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 33,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 93266,
            "hostname": 57600
          },
          "indicator_count": 150866,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 100,
          "modified_text": "8 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69c08867316c564ade394c69",
          "name": "PhishDestroy \u2014 Content Active Threats (Live)",
          "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
          "modified": "2026-05-21T12:06:19.702000",
          "created": "2026-03-23T00:25:09.116000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy",
            "active",
            "content"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "phishdestroy",
            "id": "348394",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 132502,
            "hostname": 66217
          },
          "indicator_count": 198719,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 44,
          "modified_text": "11 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cb0ce73bef5c452bfb0",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:04.332000",
          "created": "2026-05-04T06:29:04.332000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 70,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83caf1bef3609f0eb79e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:03.120000",
          "created": "2026-05-04T06:29:03.120000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cac7d6c947de6c080f9",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:29:00.417000",
          "created": "2026-05-04T06:29:00.417000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab9769e92b3285a2b4",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.770000",
          "created": "2026-05-04T06:28:59.770000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83cab7e03b19c5f1078e3",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:59.113000",
          "created": "2026-05-04T06:28:59.113000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 69,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca9411c8ab5d294a7e2",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:57.479000",
          "created": "2026-05-04T06:28:57.479000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69f83ca77d6c947de6c080f8",
          "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
          "description": "",
          "modified": "2026-05-04T06:28:55.093000",
          "created": "2026-05-04T06:28:55.093000",
          "tags": [
            "phishing",
            "crypto",
            "scam",
            "drainer",
            "fraud",
            "blocklist",
            "phishdestroy"
          ],
          "references": [],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": "69c081afa2bd54a9599b7c07",
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "msudosos",
            "id": "381696",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 88564,
            "hostname": 54516
          },
          "indicator_count": 143080,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 68,
          "modified_text": "28 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69b0348db1293272200527a1",
          "name": "Phishing | Mar 11, 2026 | Part 410/776",
          "description": "Phishing indicators. Date: Mar 11, 2026. Part 410/776. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-10T15:11:08.993000",
          "created": "2026-03-10T15:11:08.993000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 276,
            "hostname": 825,
            "URL": 898
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "83 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69aee0c4a5cdf35c686bc76b",
          "name": "Phishing | Mar 10, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 10, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-09T15:01:24.854000",
          "created": "2026-03-09T15:01:24.854000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 354,
            "domain": 95,
            "URL": 1550
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "84 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69ad8d7c6486d6b999dc12f4",
          "name": "Phishing | Mar 9, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 9, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-08T14:53:48.631000",
          "created": "2026-03-08T14:53:48.631000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 555,
            "hostname": 1337,
            "URL": 108
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "85 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69ac3c9dd592e576413e70dc",
          "name": "Phishing | Mar 8, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 8, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-07T14:56:29.776000",
          "created": "2026-03-07T14:56:29.776000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 555,
            "hostname": 1337,
            "URL": 108
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "86 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69aaeabeefb4c226e9e04ac4",
          "name": "Phishing | Mar 7, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 7, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-06T14:54:54.770000",
          "created": "2026-03-06T14:54:54.770000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1338,
            "domain": 555,
            "URL": 107
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "87 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a99ea733b81170d4cf086d",
          "name": "Phishing | Mar 6, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 6, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-05T15:17:59.646000",
          "created": "2026-03-05T15:17:59.646000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1337,
            "domain": 554,
            "URL": 109
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "88 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a847f4ceb38823c2b2c9fe",
          "name": "Phishing | Mar 5, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 5, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-04T14:55:48.856000",
          "created": "2026-03-04T14:55:48.856000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1335,
            "domain": 554,
            "URL": 111
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "89 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a6f530c349ad64bbd351a5",
          "name": "Phishing | Mar 4, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 4, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-03T14:50:24.157000",
          "created": "2026-03-03T14:50:24.157000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1332,
            "domain": 554,
            "URL": 114
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "90 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a5bb2e0b08276c0feeec99",
          "name": "Phishing | Mar 3, 2026 | Part 360/726",
          "description": "Phishing indicators. Date: Mar 3, 2026. Part 360/726. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-02T16:30:38.280000",
          "created": "2026-03-02T16:30:38.280000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1333,
            "domain": 554,
            "URL": 113
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "91 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a5193de08863a5139edc30",
          "name": "Phishing | Mar 2, 2026 | Part 362/729",
          "description": "Phishing indicators. Date: Mar 2, 2026. Part 362/729. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-02T04:59:41.815000",
          "created": "2026-03-02T04:59:41.815000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1417,
            "domain": 583
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "91 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a445e853bfe000108300dc",
          "name": "Phishing | Mar 2, 2026 | Part 366/732",
          "description": "Phishing indicators. Date: Mar 2, 2026. Part 366/732. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-01T13:58:00.733000",
          "created": "2026-03-01T13:58:00.733000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 731,
            "domain": 247,
            "URL": 1021
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "92 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a40b9b960bc53b826ab190",
          "name": "Phishing | Mar 1, 2026 | Part 366/732",
          "description": "Phishing indicators. Date: Mar 1, 2026. Part 366/732. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-01T09:49:15.432000",
          "created": "2026-03-01T09:49:15.432000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 731,
            "domain": 247,
            "URL": 1021
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "92 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69a38a1ad6f1f567f653514c",
          "name": "Phishing | Mar 1, 2026 | Part 367/733",
          "description": "Phishing indicators. Date: Mar 1, 2026. Part 367/733. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-03-01T00:36:42.401000",
          "created": "2026-03-01T00:36:42.401000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 934,
            "domain": 386,
            "URL": 679
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "92 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "699800d01f8f9a078d659959",
          "name": "Phishing | Feb 20, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 20, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-20T06:36:00.461000",
          "created": "2026-02-20T06:36:00.461000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1243,
            "domain": 500,
            "URL": 256
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "101 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69976ea57e7f183ba1e0ebf4",
          "name": "Phishing | Feb 20, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 20, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-19T20:12:21.344000",
          "created": "2026-02-19T20:12:21.344000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1243,
            "domain": 500,
            "URL": 256
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "101 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69972fad74322b4d94d192c4",
          "name": "Phishing | Feb 20, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 20, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-19T15:43:41.726000",
          "created": "2026-02-19T15:43:41.726000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1243,
            "domain": 500,
            "URL": 256
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "102 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69971055ec2a8dbd78dee254",
          "name": "Phishing | Feb 19, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 19, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-19T13:29:57.990000",
          "created": "2026-02-19T13:29:57.990000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1244,
            "domain": 500,
            "URL": 255
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "102 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69963a186a0f6f5d0aed02f7",
          "name": "Phishing | Feb 19, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 19, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-18T22:15:52.517000",
          "created": "2026-02-18T22:15:52.517000",
          "tags": [
            "phishing"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1244,
            "domain": 500,
            "URL": 255
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "102 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69957ac898342c406d21fb37",
          "name": "Phishing | Feb 18, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 18, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-18T08:39:36.524000",
          "created": "2026-02-18T08:39:36.524000",
          "tags": [
            "phishing",
            "threatfox",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1246,
            "domain": 500,
            "URL": 253
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "103 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69949f42251ae544d5fa0041",
          "name": "Phishing | Feb 18, 2026 | Part 369/735",
          "description": "Phishing indicators. Date: Feb 18, 2026. Part 369/735. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-17T17:02:58.595000",
          "created": "2026-02-17T17:02:58.595000",
          "tags": [
            "phishing",
            "phishing-database",
            "threatfox"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1246,
            "domain": 500,
            "URL": 253
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "103 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69929d4cf787cd51a4198e67",
          "name": "Phishing | Feb 16, 2026 | Part 375/741",
          "description": "Phishing indicators. Date: Feb 16, 2026. Part 375/741. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-16T04:30:04.613000",
          "created": "2026-02-16T04:30:04.613000",
          "tags": [
            "phishing",
            "phishing-database",
            "threatfox"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 371,
            "hostname": 912,
            "URL": 716
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "105 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69915e2b1edc5120f252085e",
          "name": "Phishing | Feb 15, 2026 | Part 383/749",
          "description": "Phishing indicators. Date: Feb 15, 2026. Part 383/749. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-15T05:48:27.838000",
          "created": "2026-02-15T05:48:27.838000",
          "tags": [
            "phishing",
            "threatfox",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 589,
            "hostname": 1358,
            "URL": 53
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "106 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "69908fb7b8cd62bda3473591",
          "name": "Phishing | Feb 15, 2026 | Part 388/754",
          "description": "Phishing indicators. Date: Feb 15, 2026. Part 388/754. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-14T15:07:35.300000",
          "created": "2026-02-14T15:07:35.300000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 551,
            "domain": 221,
            "URL": 1227
          },
          "indicator_count": 1999,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 91,
          "modified_text": "107 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "698c6245f730b1c1a9457b98",
          "name": "Phishing | Feb 11, 2026 | Part 416/783",
          "description": "Phishing indicators. Date: Feb 11, 2026. Part 416/783. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-11T11:04:37.167000",
          "created": "2026-02-11T11:04:37.167000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 1359,
            "domain": 641
          },
          "indicator_count": 2000,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "110 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6981abcf34512767003ef137",
          "name": "Phishing | 2026-01-31 | Part 98/163",
          "description": "Phishing indicators. Date: 2026-01-31. Part 98/163. For more threat intelligence visit https://ltna.com.au/cyber",
          "modified": "2026-02-03T08:03:27.942000",
          "created": "2026-02-03T08:03:27.942000",
          "tags": [
            "phishing",
            "phishing-database"
          ],
          "references": [
            "https://ltna.com.au/cyber"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "white",
          "cloned_from": null,
          "export_count": 0,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "LTNA-Australia",
            "id": "380633",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 6366,
            "domain": 3313,
            "URL": 319
          },
          "indicator_count": 9998,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 92,
          "modified_text": "118 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6955dee69e2dce75159d95eb",
          "name": "Twitter Feed - CarlyGriggs13 - 31-12-2025",
          "description": "",
          "modified": "2026-01-01T02:41:42.332000",
          "created": "2026-01-01T02:41:42.332000",
          "tags": [
            "scam"
          ],
          "references": [
            "https://x.com/CarlyGriggs13/status/2006327074836164644",
            "https://x.com/CarlyGriggs13/status/2006327225256386738",
            "https://x.com/CarlyGriggs13/status/2006327378923143366",
            "https://x.com/CarlyGriggs13/status/2006327523840594128",
            "https://x.com/CarlyGriggs13/status/2006327675603066887",
            "https://x.com/CarlyGriggs13/status/2006327847934361728",
            "https://x.com/CarlyGriggs13/status/2006327995339010378",
            "https://x.com/CarlyGriggs13/status/2006328148338905588",
            "https://x.com/CarlyGriggs13/status/2006328298243260557",
            "https://x.com/CarlyGriggs13/status/2006328891259113637",
            "https://x.com/CarlyGriggs13/status/2006330867967574095",
            "https://x.com/CarlyGriggs13/status/2006331022842253322",
            "https://x.com/CarlyGriggs13/status/2006331181189706087",
            "https://x.com/CarlyGriggs13/status/2006331338782343300",
            "https://x.com/CarlyGriggs13/status/2006331503098384756",
            "https://x.com/CarlyGriggs13/status/2006331827745874299",
            "https://x.com/CarlyGriggs13/status/2006331983199400213",
            "https://x.com/CarlyGriggs13/status/2006332173566230870",
            "https://x.com/CarlyGriggs13/status/2006332344349991123",
            "https://x.com/CarlyGriggs13/status/2006332488315269219",
            "https://x.com/CarlyGriggs13/status/2006332643760382124",
            "https://x.com/CarlyGriggs13/status/2006332797401899325",
            "https://x.com/CarlyGriggs13/status/2006332934702399766",
            "https://x.com/CarlyGriggs13/status/2006333100796850495",
            "https://x.com/CarlyGriggs13/status/2006333252592963864",
            "https://x.com/CarlyGriggs13/status/2006333438530666882",
            "https://x.com/CarlyGriggs13/status/2006333592713179342",
            "https://x.com/CarlyGriggs13/status/2006333747105522091",
            "https://x.com/CarlyGriggs13/status/2006333897987236293",
            "https://x.com/CarlyGriggs13/status/2006334676223640017",
            "https://x.com/CarlyGriggs13/status/2006336681134395892",
            "https://x.com/CarlyGriggs13/status/2006336825447899578",
            "https://x.com/CarlyGriggs13/status/2006336991336739010",
            "https://x.com/CarlyGriggs13/status/2006337140968636588",
            "https://x.com/CarlyGriggs13/status/2006337299764879584",
            "https://x.com/CarlyGriggs13/status/2006337461128183983",
            "https://x.com/CarlyGriggs13/status/2006337606846681392",
            "https://x.com/CarlyGriggs13/status/2006337761004179622",
            "https://x.com/CarlyGriggs13/status/2006337889614127161",
            "https://x.com/CarlyGriggs13/status/2006338050591502661",
            "https://x.com/CarlyGriggs13/status/2006338436350025862",
            "https://x.com/CarlyGriggs13/status/2006338587441430542",
            "https://x.com/CarlyGriggs13/status/2006338757532987877",
            "https://x.com/CarlyGriggs13/status/2006338910553813381",
            "https://x.com/CarlyGriggs13/status/2006339054141677949",
            "https://x.com/CarlyGriggs13/status/2006339207544086807",
            "https://x.com/CarlyGriggs13/status/2006339364776001962",
            "https://x.com/CarlyGriggs13/status/2006339515498348963",
            "https://x.com/CarlyGriggs13/status/2006339666895909256",
            "https://x.com/CarlyGriggs13/status/2006339813767794868",
            "https://x.com/CarlyGriggs13/status/2006344314444726410",
            "https://x.com/CarlyGriggs13/status/2006344401069678909",
            "https://x.com/CarlyGriggs13/status/2006344496322359571",
            "https://x.com/CarlyGriggs13/status/2006344603776303174",
            "https://x.com/CarlyGriggs13/status/2006344709774639454",
            "https://x.com/CarlyGriggs13/status/2006344799109181882",
            "https://x.com/CarlyGriggs13/status/2006344904226865522",
            "https://x.com/CarlyGriggs13/status/2006344994756743482",
            "https://x.com/CarlyGriggs13/status/2006345091867349280",
            "https://x.com/CarlyGriggs13/status/2006345188005040552",
            "https://x.com/CarlyGriggs13/status/2006345278950171079",
            "https://x.com/CarlyGriggs13/status/2006345365067587772",
            "https://x.com/CarlyGriggs13/status/2006345740818567624",
            "https://x.com/CarlyGriggs13/status/2006349568989085701",
            "https://x.com/CarlyGriggs13/status/2006349666498298154",
            "https://x.com/CarlyGriggs13/status/2006349756063445274",
            "https://x.com/CarlyGriggs13/status/2006349848912818570",
            "https://x.com/CarlyGriggs13/status/2006349941866946825",
            "https://x.com/CarlyGriggs13/status/2006350110960324799",
            "https://x.com/CarlyGriggs13/status/2006350201561510231",
            "https://x.com/CarlyGriggs13/status/2006350449973264621",
            "https://x.com/CarlyGriggs13/status/2006350564335161352",
            "https://x.com/CarlyGriggs13/status/2006350659990552872",
            "https://x.com/CarlyGriggs13/status/2006350748117074391",
            "https://x.com/CarlyGriggs13/status/2006350831004917767",
            "https://x.com/CarlyGriggs13/status/2006350911782920378",
            "https://x.com/CarlyGriggs13/status/2006355580282347748",
            "https://x.com/CarlyGriggs13/status/2006355691594994104",
            "https://x.com/CarlyGriggs13/status/2006355787472617664",
            "https://x.com/CarlyGriggs13/status/2006355896709079273",
            "https://x.com/CarlyGriggs13/status/2006355979022299532",
            "https://x.com/CarlyGriggs13/status/2006356081182941602",
            "https://x.com/CarlyGriggs13/status/2006356172207698289",
            "https://x.com/CarlyGriggs13/status/2006356259843584003",
            "https://x.com/CarlyGriggs13/status/2006356356975284617",
            "https://x.com/CarlyGriggs13/status/2006356460167684345",
            "https://x.com/CarlyGriggs13/status/2006356565910298896",
            "https://x.com/CarlyGriggs13/status/2006356677495546001",
            "https://x.com/CarlyGriggs13/status/2006360756275810562",
            "https://x.com/CarlyGriggs13/status/2006360868553216087",
            "https://x.com/CarlyGriggs13/status/2006360952766423218",
            "https://x.com/CarlyGriggs13/status/2006361060274831801",
            "https://x.com/CarlyGriggs13/status/2006361160246079606",
            "https://x.com/CarlyGriggs13/status/2006361251472138516",
            "https://x.com/CarlyGriggs13/status/2006361349203607552",
            "https://x.com/CarlyGriggs13/status/2006361432422834490",
            "https://x.com/CarlyGriggs13/status/2006361517487444261",
            "https://x.com/CarlyGriggs13/status/2006361606419357722",
            "https://x.com/CarlyGriggs13/status/2006361691479490894",
            "https://x.com/CarlyGriggs13/status/2006361776732971358",
            "https://x.com/CarlyGriggs13/status/2006361868030410888",
            "https://x.com/CarlyGriggs13/status/2006361971801641259",
            "https://x.com/CarlyGriggs13/status/2006364252697923873",
            "https://x.com/CarlyGriggs13/status/2006367615686680918",
            "https://x.com/CarlyGriggs13/status/2006367722372997505",
            "https://x.com/CarlyGriggs13/status/2006367821161443476",
            "https://x.com/CarlyGriggs13/status/2006367915449463076",
            "https://x.com/CarlyGriggs13/status/2006368005920583899",
            "https://x.com/CarlyGriggs13/status/2006368102955761777",
            "https://x.com/CarlyGriggs13/status/2006368527012233405",
            "https://x.com/CarlyGriggs13/status/2006368634965287161",
            "https://x.com/CarlyGriggs13/status/2006368732466315581",
            "https://x.com/CarlyGriggs13/status/2006368833288696291",
            "https://x.com/CarlyGriggs13/status/2006372866271621452",
            "https://x.com/CarlyGriggs13/status/2006372965961601041",
            "https://x.com/CarlyGriggs13/status/2006373050355196276",
            "https://x.com/CarlyGriggs13/status/2006373155351191798",
            "https://x.com/CarlyGriggs13/status/2006373232996409475",
            "https://x.com/CarlyGriggs13/status/2006373333789507593",
            "https://x.com/CarlyGriggs13/status/2006373418460123257",
            "https://x.com/CarlyGriggs13/status/2006373499104071730",
            "https://x.com/CarlyGriggs13/status/2006374016282701977",
            "https://x.com/CarlyGriggs13/status/2006374112978227592",
            "https://x.com/CarlyGriggs13/status/2006374199594717413",
            "https://x.com/CarlyGriggs13/status/2006374297909022762",
            "https://x.com/CarlyGriggs13/status/2006374377106096252",
            "https://x.com/CarlyGriggs13/status/2006374468067705140",
            "https://x.com/CarlyGriggs13/status/2006379503338270791",
            "https://x.com/CarlyGriggs13/status/2006380080218644703",
            "https://x.com/CarlyGriggs13/status/2006380171155411308",
            "https://x.com/CarlyGriggs13/status/2006380256052261020",
            "https://x.com/CarlyGriggs13/status/2006380339074085220",
            "https://x.com/CarlyGriggs13/status/2006380438743634095",
            "https://x.com/CarlyGriggs13/status/2006380612656230774",
            "https://x.com/CarlyGriggs13/status/2006380703970402807",
            "https://x.com/CarlyGriggs13/status/2006380807523536966",
            "https://x.com/CarlyGriggs13/status/2006380901207273771",
            "https://x.com/CarlyGriggs13/status/2006381005163426131",
            "https://x.com/CarlyGriggs13/status/2006381091465331055",
            "https://x.com/CarlyGriggs13/status/2006386253575688244",
            "https://x.com/CarlyGriggs13/status/2006386353739841679",
            "https://x.com/CarlyGriggs13/status/2006386464251388186",
            "https://x.com/CarlyGriggs13/status/2006386645797687606",
            "https://x.com/CarlyGriggs13/status/2006386739817177412",
            "https://x.com/CarlyGriggs13/status/2006386831772856434",
            "https://x.com/CarlyGriggs13/status/2006386924261654709",
            "https://x.com/CarlyGriggs13/status/2006387020390883600",
            "https://x.com/CarlyGriggs13/status/2006387119095525526",
            "https://x.com/CarlyGriggs13/status/2006387197209899088",
            "https://x.com/CarlyGriggs13/status/2006387358619537492",
            "https://x.com/CarlyGriggs13/status/2006387451019800809",
            "https://x.com/CarlyGriggs13/status/2006387535426322465",
            "https://x.com/CarlyGriggs13/status/2006391780271325260",
            "https://x.com/CarlyGriggs13/status/2006391871283806287",
            "https://x.com/CarlyGriggs13/status/2006391970378264978",
            "https://x.com/CarlyGriggs13/status/2006392053727404160",
            "https://x.com/CarlyGriggs13/status/2006392141560652112",
            "https://x.com/CarlyGriggs13/status/2006392245922959783",
            "https://x.com/CarlyGriggs13/status/2006392432129155478",
            "https://x.com/CarlyGriggs13/status/2006397492204564491",
            "https://x.com/CarlyGriggs13/status/2006397599281029133",
            "https://x.com/CarlyGriggs13/status/2006397674094834087",
            "https://x.com/CarlyGriggs13/status/2006397766688207005",
            "https://x.com/CarlyGriggs13/status/2006399662786273483",
            "https://x.com/CarlyGriggs13/status/2006400560413471178",
            "https://x.com/CarlyGriggs13/status/2006400959417552924",
            "https://x.com/CarlyGriggs13/status/2006401053449654778",
            "https://x.com/CarlyGriggs13/status/2006401153651618032",
            "https://x.com/CarlyGriggs13/status/2006401234840719747",
            "https://x.com/CarlyGriggs13/status/2006401310946365666",
            "https://x.com/CarlyGriggs13/status/2006401390029967485",
            "https://x.com/CarlyGriggs13/status/2006401467414876627",
            "https://x.com/CarlyGriggs13/status/2006401564324377020",
            "https://x.com/CarlyGriggs13/status/2006401669127344505",
            "https://x.com/CarlyGriggs13/status/2006401753147674639",
            "https://x.com/CarlyGriggs13/status/2006401854264013002",
            "https://x.com/CarlyGriggs13/status/2006401949470527806",
            "https://x.com/CarlyGriggs13/status/2006402716587675851",
            "https://x.com/CarlyGriggs13/status/2006405210915155990",
            "https://x.com/CarlyGriggs13/status/2006405302975905827",
            "https://x.com/CarlyGriggs13/status/2006405399826575586",
            "https://x.com/CarlyGriggs13/status/2006405838726935026",
            "https://x.com/CarlyGriggs13/status/2006405940375863643",
            "https://x.com/CarlyGriggs13/status/2006406398742048791",
            "https://x.com/CarlyGriggs13/status/2006410595499638837",
            "https://x.com/CarlyGriggs13/status/2006410680631455768",
            "https://x.com/CarlyGriggs13/status/2006410780388790735",
            "https://x.com/CarlyGriggs13/status/2006410867903004833",
            "https://x.com/CarlyGriggs13/status/2006417850156613637",
            "https://x.com/CarlyGriggs13/status/2006419771709944070",
            "https://x.com/CarlyGriggs13/status/2006438367278542869",
            "https://x.com/CarlyGriggs13/status/2006438442155302994",
            "https://x.com/CarlyGriggs13/status/2006438523356983472",
            "https://x.com/CarlyGriggs13/status/2006438995442688050",
            "https://x.com/CarlyGriggs13/status/2006439075822309745",
            "https://x.com/CarlyGriggs13/status/2006439176527556983",
            "https://x.com/CarlyGriggs13/status/2006439262384959970",
            "https://x.com/CarlyGriggs13/status/2006439347822932066",
            "https://x.com/CarlyGriggs13/status/2006439426147365153",
            "https://x.com/CarlyGriggs13/status/2006439517868490817",
            "https://x.com/CarlyGriggs13/status/2006439622608593165",
            "https://x.com/CarlyGriggs13/status/2006439716963623201",
            "https://x.com/CarlyGriggs13/status/2006439791060279554",
            "https://x.com/CarlyGriggs13/status/2006439882311479315",
            "https://x.com/CarlyGriggs13/status/2006439967711723795"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 1,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "URL": 205,
            "domain": 121,
            "FileHash-MD5": 1,
            "hostname": 83
          },
          "indicator_count": 410,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "151 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "6940b5f2c0e42f9bcadfd3b2",
          "name": "Malware Filter - Phishing List - 15-12-2025",
          "description": "",
          "modified": "2025-12-16T01:29:22.594000",
          "created": "2025-12-16T01:29:22.594000",
          "tags": [],
          "references": [
            "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 2,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "hostname": 305,
            "domain": 112
          },
          "indicator_count": 417,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1623,
          "modified_text": "167 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://x.com/CarlyGriggs13/status/2006439882311479315",
        "https://x.com/CarlyGriggs13/status/2006338436350025862",
        "https://x.com/CarlyGriggs13/status/2006356460167684345",
        "https://x.com/CarlyGriggs13/status/2006331338782343300",
        "https://x.com/CarlyGriggs13/status/2006338587441430542",
        "https://x.com/CarlyGriggs13/status/2006367722372997505",
        "https://x.com/CarlyGriggs13/status/2006355787472617664",
        "https://x.com/CarlyGriggs13/status/2006368833288696291",
        "https://x.com/CarlyGriggs13/status/2006339515498348963",
        "https://x.com/CarlyGriggs13/status/2006439176527556983",
        "https://x.com/CarlyGriggs13/status/2006386464251388186",
        "https://x.com/CarlyGriggs13/status/2006399662786273483",
        "https://x.com/CarlyGriggs13/status/2006439517868490817",
        "https://x.com/CarlyGriggs13/status/2006368732466315581",
        "https://x.com/CarlyGriggs13/status/2006327995339010378",
        "https://x.com/CarlyGriggs13/status/2006333252592963864",
        "https://x.com/CarlyGriggs13/status/2006338910553813381",
        "https://x.com/CarlyGriggs13/status/2006349756063445274",
        "https://x.com/CarlyGriggs13/status/2006372866271621452",
        "https://x.com/CarlyGriggs13/status/2006356259843584003",
        "https://x.com/CarlyGriggs13/status/2006438995442688050",
        "https://x.com/CarlyGriggs13/status/2006350911782920378",
        "https://x.com/CarlyGriggs13/status/2006360756275810562",
        "https://x.com/CarlyGriggs13/status/2006333747105522091",
        "https://x.com/CarlyGriggs13/status/2006345188005040552",
        "https://x.com/CarlyGriggs13/status/2006400959417552924",
        "https://x.com/CarlyGriggs13/status/2006368102955761777",
        "https://x.com/CarlyGriggs13/status/2006360868553216087",
        "https://x.com/CarlyGriggs13/status/2006361349203607552",
        "https://x.com/CarlyGriggs13/status/2006405399826575586",
        "https://x.com/CarlyGriggs13/status/2006391871283806287",
        "https://x.com/CarlyGriggs13/status/2006331983199400213",
        "https://x.com/CarlyGriggs13/status/2006387197209899088",
        "https://x.com/CarlyGriggs13/status/2006361691479490894",
        "https://x.com/CarlyGriggs13/status/2006380612656230774",
        "https://x.com/CarlyGriggs13/status/2006336991336739010",
        "https://x.com/CarlyGriggs13/status/2006372965961601041",
        "https://x.com/CarlyGriggs13/status/2006401669127344505",
        "https://x.com/CarlyGriggs13/status/2006355896709079273",
        "https://x.com/CarlyGriggs13/status/2006392053727404160",
        "https://x.com/CarlyGriggs13/status/2006374468067705140",
        "https://x.com/CarlyGriggs13/status/2006350110960324799",
        "https://x.com/CarlyGriggs13/status/2006405838726935026",
        "https://x.com/CarlyGriggs13/status/2006356172207698289",
        "https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt",
        "https://x.com/CarlyGriggs13/status/2006339813767794868",
        "https://x.com/CarlyGriggs13/status/2006361868030410888",
        "https://x.com/CarlyGriggs13/status/2006350201561510231",
        "https://x.com/CarlyGriggs13/status/2006380901207273771",
        "https://x.com/CarlyGriggs13/status/2006332173566230870",
        "https://x.com/CarlyGriggs13/status/2006373232996409475",
        "https://x.com/CarlyGriggs13/status/2006345278950171079",
        "https://x.com/CarlyGriggs13/status/2006402716587675851",
        "https://x.com/CarlyGriggs13/status/2006334676223640017",
        "https://x.com/CarlyGriggs13/status/2006356356975284617",
        "https://x.com/CarlyGriggs13/status/2006331022842253322",
        "https://x.com/CarlyGriggs13/status/2006419771709944070",
        "https://x.com/CarlyGriggs13/status/2006336825447899578",
        "https://x.com/CarlyGriggs13/status/2006381091465331055",
        "https://x.com/CarlyGriggs13/status/2006338757532987877",
        "https://x.com/CarlyGriggs13/status/2006410867903004833",
        "https://x.com/CarlyGriggs13/status/2006438367278542869",
        "https://x.com/CarlyGriggs13/status/2006333897987236293",
        "https://x.com/CarlyGriggs13/status/2006380807523536966",
        "https://x.com/CarlyGriggs13/status/2006397599281029133",
        "https://x.com/CarlyGriggs13/status/2006356081182941602",
        "https://x.com/CarlyGriggs13/status/2006392141560652112",
        "https://x.com/CarlyGriggs13/status/2006350449973264621",
        "https://x.com/CarlyGriggs13/status/2006380339074085220",
        "https://x.com/CarlyGriggs13/status/2006439262384959970",
        "https://x.com/CarlyGriggs13/status/2006410780388790735",
        "https://x.com/CarlyGriggs13/status/2006439075822309745",
        "https://x.com/CarlyGriggs13/status/2006368005920583899",
        "https://x.com/CarlyGriggs13/status/2006380703970402807",
        "https://x.com/CarlyGriggs13/status/2006350748117074391",
        "https://x.com/CarlyGriggs13/status/2006344904226865522",
        "https://x.com/CarlyGriggs13/status/2006392245922959783",
        "https://x.com/CarlyGriggs13/status/2006327074836164644",
        "https://x.com/CarlyGriggs13/status/2006349941866946825",
        "https://x.com/CarlyGriggs13/status/2006344799109181882",
        "https://x.com/CarlyGriggs13/status/2006332344349991123",
        "https://x.com/CarlyGriggs13/status/2006330867967574095",
        "https://x.com/CarlyGriggs13/status/2006349666498298154",
        "https://x.com/CarlyGriggs13/status/2006328298243260557",
        "https://x.com/CarlyGriggs13/status/2006339054141677949",
        "https://x.com/CarlyGriggs13/status/2006344709774639454",
        "https://x.com/CarlyGriggs13/status/2006373499104071730",
        "https://x.com/CarlyGriggs13/status/2006381005163426131",
        "https://x.com/CarlyGriggs13/status/2006344994756743482",
        "https://x.com/CarlyGriggs13/status/2006328891259113637",
        "https://x.com/CarlyGriggs13/status/2006337461128183983",
        "https://x.com/CarlyGriggs13/status/2006344314444726410",
        "https://x.com/CarlyGriggs13/status/2006367915449463076",
        "https://x.com/CarlyGriggs13/status/2006373050355196276",
        "https://x.com/CarlyGriggs13/status/2006386253575688244",
        "https://x.com/CarlyGriggs13/status/2006401153651618032",
        "https://x.com/CarlyGriggs13/status/2006344496322359571",
        "https://x.com/CarlyGriggs13/status/2006410595499638837",
        "https://x.com/CarlyGriggs13/status/2006331181189706087",
        "https://x.com/CarlyGriggs13/status/2006337761004179622",
        "https://x.com/CarlyGriggs13/status/2006344603776303174",
        "https://x.com/CarlyGriggs13/status/2006361971801641259",
        "https://x.com/CarlyGriggs13/status/2006337299764879584",
        "https://x.com/CarlyGriggs13/status/2006397492204564491",
        "https://x.com/CarlyGriggs13/status/2006338050591502661",
        "https://x.com/CarlyGriggs13/status/2006328148338905588",
        "https://x.com/CarlyGriggs13/status/2006355580282347748",
        "https://x.com/CarlyGriggs13/status/2006355979022299532",
        "https://x.com/CarlyGriggs13/status/2006367821161443476",
        "https://x.com/CarlyGriggs13/status/2006405210915155990",
        "https://x.com/CarlyGriggs13/status/2006368527012233405",
        "https://x.com/CarlyGriggs13/status/2006387535426322465",
        "https://x.com/CarlyGriggs13/status/2006439791060279554",
        "https://x.com/CarlyGriggs13/status/2006386831772856434",
        "https://x.com/CarlyGriggs13/status/2006439347822932066",
        "https://x.com/CarlyGriggs13/status/2006349848912818570",
        "https://x.com/CarlyGriggs13/status/2006361060274831801",
        "https://x.com/CarlyGriggs13/status/2006374112978227592",
        "https://x.com/CarlyGriggs13/status/2006368634965287161",
        "https://x.com/CarlyGriggs13/status/2006380256052261020",
        "https://x.com/CarlyGriggs13/status/2006332488315269219",
        "https://x.com/CarlyGriggs13/status/2006439716963623201",
        "https://x.com/CarlyGriggs13/status/2006386924261654709",
        "https://x.com/CarlyGriggs13/status/2006336681134395892",
        "https://x.com/CarlyGriggs13/status/2006438442155302994",
        "https://x.com/CarlyGriggs13/status/2006439426147365153",
        "https://x.com/CarlyGriggs13/status/2006327523840594128",
        "https://x.com/CarlyGriggs13/status/2006361606419357722",
        "https://x.com/CarlyGriggs13/status/2006374016282701977",
        "https://x.com/CarlyGriggs13/status/2006387119095525526",
        "https://x.com/CarlyGriggs13/status/2006401310946365666",
        "https://x.com/CarlyGriggs13/status/2006386739817177412",
        "https://x.com/CarlyGriggs13/status/2006417850156613637",
        "https://x.com/CarlyGriggs13/status/2006327847934361728",
        "https://x.com/CarlyGriggs13/status/2006331503098384756",
        "https://x.com/CarlyGriggs13/status/2006387451019800809",
        "https://x.com/CarlyGriggs13/status/2006332797401899325",
        "https://x.com/CarlyGriggs13/status/2006380438743634095",
        "https://x.com/CarlyGriggs13/status/2006361251472138516",
        "https://x.com/CarlyGriggs13/status/2006373333789507593",
        "https://x.com/CarlyGriggs13/status/2006364252697923873",
        "https://x.com/CarlyGriggs13/status/2006387020390883600",
        "https://x.com/CarlyGriggs13/status/2006397766688207005",
        "https://x.com/CarlyGriggs13/status/2006439622608593165",
        "https://x.com/CarlyGriggs13/status/2006374297909022762",
        "https://x.com/CarlyGriggs13/status/2006400560413471178",
        "https://x.com/CarlyGriggs13/status/2006401949470527806",
        "https://x.com/CarlyGriggs13/status/2006405940375863643",
        "https://x.com/CarlyGriggs13/status/2006345091867349280",
        "https://x.com/CarlyGriggs13/status/2006401753147674639",
        "https://ltna.com.au/cyber",
        "https://x.com/CarlyGriggs13/status/2006373155351191798",
        "https://x.com/CarlyGriggs13/status/2006332934702399766",
        "https://x.com/CarlyGriggs13/status/2006374377106096252",
        "https://x.com/CarlyGriggs13/status/2006373418460123257",
        "https://x.com/CarlyGriggs13/status/2006361517487444261",
        "https://x.com/CarlyGriggs13/status/2006387358619537492",
        "https://x.com/CarlyGriggs13/status/2006356565910298896",
        "https://x.com/CarlyGriggs13/status/2006438523356983472",
        "https://x.com/CarlyGriggs13/status/2006386645797687606",
        "https://x.com/CarlyGriggs13/status/2006355691594994104",
        "https://x.com/CarlyGriggs13/status/2006331827745874299",
        "https://x.com/CarlyGriggs13/status/2006391970378264978",
        "https://x.com/CarlyGriggs13/status/2006401854264013002",
        "https://x.com/CarlyGriggs13/status/2006345740818567624",
        "https://x.com/CarlyGriggs13/status/2006401234840719747",
        "https://x.com/CarlyGriggs13/status/2006339207544086807",
        "https://x.com/CarlyGriggs13/status/2006392432129155478",
        "https://x.com/CarlyGriggs13/status/2006339666895909256",
        "https://x.com/CarlyGriggs13/status/2006333438530666882",
        "https://x.com/CarlyGriggs13/status/2006410680631455768",
        "https://x.com/CarlyGriggs13/status/2006361432422834490",
        "https://x.com/CarlyGriggs13/status/2006391780271325260",
        "https://x.com/CarlyGriggs13/status/2006333592713179342",
        "https://x.com/CarlyGriggs13/status/2006439967711723795",
        "https://x.com/CarlyGriggs13/status/2006356677495546001",
        "https://x.com/CarlyGriggs13/status/2006374199594717413",
        "https://x.com/CarlyGriggs13/status/2006339364776001962",
        "https://x.com/CarlyGriggs13/status/2006401053449654778",
        "https://x.com/CarlyGriggs13/status/2006397674094834087",
        "https://x.com/CarlyGriggs13/status/2006361160246079606",
        "https://x.com/CarlyGriggs13/status/2006337889614127161",
        "https://x.com/CarlyGriggs13/status/2006327225256386738",
        "https://x.com/CarlyGriggs13/status/2006350659990552872",
        "https://x.com/CarlyGriggs13/status/2006401467414876627",
        "https://x.com/CarlyGriggs13/status/2006327378923143366",
        "https://x.com/CarlyGriggs13/status/2006345365067587772",
        "https://x.com/CarlyGriggs13/status/2006327675603066887",
        "https://x.com/CarlyGriggs13/status/2006380171155411308",
        "https://x.com/CarlyGriggs13/status/2006386353739841679",
        "https://x.com/CarlyGriggs13/status/2006405302975905827",
        "https://x.com/CarlyGriggs13/status/2006367615686680918",
        "https://x.com/CarlyGriggs13/status/2006361776732971358",
        "https://x.com/CarlyGriggs13/status/2006337606846681392",
        "https://x.com/CarlyGriggs13/status/2006350564335161352",
        "https://x.com/CarlyGriggs13/status/2006350831004917767",
        "https://x.com/CarlyGriggs13/status/2006337140968636588",
        "https://x.com/CarlyGriggs13/status/2006401390029967485",
        "https://x.com/CarlyGriggs13/status/2006406398742048791",
        "https://x.com/CarlyGriggs13/status/2006344401069678909",
        "https://x.com/CarlyGriggs13/status/2006401564324377020",
        "https://x.com/CarlyGriggs13/status/2006360952766423218",
        "https://x.com/CarlyGriggs13/status/2006379503338270791",
        "https://x.com/CarlyGriggs13/status/2006332643760382124",
        "https://x.com/CarlyGriggs13/status/2006349568989085701",
        "https://x.com/CarlyGriggs13/status/2006380080218644703",
        "https://x.com/CarlyGriggs13/status/2006333100796850495"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 36,
  "pulses": [
    {
      "id": "69c081afa2bd54a9599b7c07",
      "name": "PhishDestroy \u2014 Active Phishing & Crypto Scam Domains",
      "description": "Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist",
      "modified": "2026-05-24T00:00:03.049000",
      "created": "2026-03-22T23:56:29.438000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 33,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 93266,
        "hostname": 57600
      },
      "indicator_count": 150866,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 100,
      "modified_text": "8 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69c08867316c564ade394c69",
      "name": "PhishDestroy \u2014 Content Active Threats (Live)",
      "description": "Live feed of phishing and crypto scam domains with ACTIVE malicious content from PhishDestroy. These domains are verified to have live phishing/scam pages. Updated hourly. Source: github.com/phishdestroy/destroylist/dns/content_active.json",
      "modified": "2026-05-21T12:06:19.702000",
      "created": "2026-03-23T00:25:09.116000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy",
        "active",
        "content"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "phishdestroy",
        "id": "348394",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 132502,
        "hostname": 66217
      },
      "indicator_count": 198719,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 44,
      "modified_text": "11 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cb0ce73bef5c452bfb0",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:04.332000",
      "created": "2026-05-04T06:29:04.332000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 70,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83caf1bef3609f0eb79e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:03.120000",
      "created": "2026-05-04T06:29:03.120000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cac7d6c947de6c080f9",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:29:00.417000",
      "created": "2026-05-04T06:29:00.417000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab9769e92b3285a2b4",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.770000",
      "created": "2026-05-04T06:28:59.770000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83cab7e03b19c5f1078e3",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:59.113000",
      "created": "2026-05-04T06:28:59.113000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 69,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca9411c8ab5d294a7e2",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:57.479000",
      "created": "2026-05-04T06:28:57.479000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69f83ca77d6c947de6c080f8",
      "name": "Credit: PhishDestroy Clone [\"phish detroy- open domains\"]",
      "description": "",
      "modified": "2026-05-04T06:28:55.093000",
      "created": "2026-05-04T06:28:55.093000",
      "tags": [
        "phishing",
        "crypto",
        "scam",
        "drainer",
        "fraud",
        "blocklist",
        "phishdestroy"
      ],
      "references": [],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": "69c081afa2bd54a9599b7c07",
      "export_count": 0,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "msudosos",
        "id": "381696",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 88564,
        "hostname": 54516
      },
      "indicator_count": 143080,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 68,
      "modified_text": "28 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "69b0348db1293272200527a1",
      "name": "Phishing | Mar 11, 2026 | Part 410/776",
      "description": "Phishing indicators. Date: Mar 11, 2026. Part 410/776. For more threat intelligence visit https://ltna.com.au/cyber",
      "modified": "2026-03-10T15:11:08.993000",
      "created": "2026-03-10T15:11:08.993000",
      "tags": [
        "phishing"
      ],
      "references": [
        "https://ltna.com.au/cyber"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "white",
      "cloned_from": null,
      "export_count": 2,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "LTNA-Australia",
        "id": "380633",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_380633/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 276,
        "hostname": 825,
        "URL": 898
      },
      "indicator_count": 1999,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 91,
      "modified_text": "83 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "zyexx.com",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "zyexx.com",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780332882.255757
}