{
  "type": "Domain",
  "indicator": "stakefish.org",
  "general": {
    "sections": [
      "general",
      "geo",
      "url_list",
      "passive_dns",
      "malware",
      "whois",
      "http_scans"
    ],
    "whois": "http://whois.domaintools.com/stakefish.org",
    "alexa": "http://www.alexa.com/siteinfo/stakefish.org",
    "indicator": "stakefish.org",
    "type": "domain",
    "type_title": "Domain",
    "validation": [],
    "base_indicator": {
      "id": 3829795304,
      "indicator": "stakefish.org",
      "type": "domain",
      "title": "",
      "description": "",
      "content": "",
      "access_type": "public",
      "access_reason": ""
    },
    "pulse_info": {
      "count": 2,
      "pulses": [
        {
          "id": "691ad06c2973b3307400fa56",
          "name": "DPRK UNC3782",
          "description": "The cyber threat group UNC3782, suspected to be linked to North Korea, has conducted extensive phishing campaigns targeting Naver Corp by creating numerous typosquat domains from 2021 through late 2022. This marks the group's first significant deviation from previous tactics, as they introduced cryptocurrency-themed domains likely aimed at NFT and cryptocurrency holders. In this period, investigators identified 19 unique email addresses associated with these campaigns and uncovered 1,983 unique hostnames, indicating a broad and organized effort to compromise targeted entities. Notably, there are observed connections between the activities of UNC3782 and those of another North Korean threat actor, APT43 (Kimsuky), although a definitive link has not been established.\n\nOperational security oversights have been identified, particularly in WHOIS information. The researchers found multiple email addresses, some of which appear recurrently, suggesting a potential pattern in the group's operational methods.",
          "modified": "2025-12-17T07:03:02.980000",
          "created": "2025-11-17T07:36:12.470000",
          "tags": [
            "hotmail",
            "gmail",
            "and email",
            "done",
            "unc3782",
            "whois",
            "outlook",
            "silent push",
            "naver corp",
            "tony smith",
            "kimsuky",
            "april",
            "first",
            "false",
            "crypto",
            "hostinger",
            "for privacy",
            "smith",
            "steven",
            "kil nyeon",
            "kn kim",
            "william ali",
            "redacted for",
            "privacy pdr"
          ],
          "references": [
            "https://medium.com/@meeswicky1100/dprk-unc3782-d66329e5c071"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [
            {
              "id": "T1036.003",
              "name": "Rename System Utilities",
              "display_name": "T1036.003 - Rename System Utilities"
            },
            {
              "id": "T1056.003",
              "name": "Web Portal Capture",
              "display_name": "T1056.003 - Web Portal Capture"
            },
            {
              "id": "T1566.002",
              "name": "Spearphishing Link",
              "display_name": "T1566.002 - Spearphishing Link"
            },
            {
              "id": "T1583.001",
              "name": "Domains",
              "display_name": "T1583.001 - Domains"
            },
            {
              "id": "T1589.003",
              "name": "Employee Names",
              "display_name": "T1589.003 - Employee Names"
            }
          ],
          "industries": [
            "Government",
            "military"
          ],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "web",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "PetrP.73",
            "id": "154605",
            "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "FileHash-SHA256": 1,
            "domain": 2128,
            "hostname": 493,
            "email": 3
          },
          "indicator_count": 2625,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 544,
          "modified_text": "168 days ago ",
          "is_modified": true,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": true,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        },
        {
          "id": "68003f5f8f0dfdcb6ec718c5",
          "name": "Twitter Feed - Phish_Destroy - 16-04-2025",
          "description": "",
          "modified": "2025-04-16T23:38:07.283000",
          "created": "2025-04-16T23:38:07.283000",
          "tags": [
            "malware",
            "phishing",
            "scam"
          ],
          "references": [
            "https://x.com/Phish_Destroy/status/1912460967130116326",
            "https://x.com/Phish_Destroy/status/1912461502918861019",
            "https://x.com/Phish_Destroy/status/1912462193800458241",
            "https://x.com/Phish_Destroy/status/1912462322607570969",
            "https://x.com/Phish_Destroy/status/1912462453423620348",
            "https://x.com/Phish_Destroy/status/1912463329584357593",
            "https://x.com/Phish_Destroy/status/1912463455237423163",
            "https://x.com/Phish_Destroy/status/1912463624573960209",
            "https://x.com/Phish_Destroy/status/1912464000773660877",
            "https://x.com/Phish_Destroy/status/1912464593164632301",
            "https://x.com/Phish_Destroy/status/1912464718159122895",
            "https://x.com/Phish_Destroy/status/1912464924409725150",
            "https://x.com/Phish_Destroy/status/1912466612873028048",
            "https://x.com/Phish_Destroy/status/1912466811024519603",
            "https://x.com/Phish_Destroy/status/1912466933577900445",
            "https://x.com/Phish_Destroy/status/1912467436277735518",
            "https://x.com/Phish_Destroy/status/1912467947030769695",
            "https://x.com/Phish_Destroy/status/1912468190635962875",
            "https://x.com/Phish_Destroy/status/1912468254016077869",
            "https://x.com/Phish_Destroy/status/1912468486414102979",
            "https://x.com/Phish_Destroy/status/1912468569188638971",
            "https://x.com/Phish_Destroy/status/1912468632744911084",
            "https://x.com/Phish_Destroy/status/1912469197981909470",
            "https://x.com/Phish_Destroy/status/1912469912724832715",
            "https://x.com/Phish_Destroy/status/1912470381291565349",
            "https://x.com/Phish_Destroy/status/1912470499487072721",
            "https://x.com/Phish_Destroy/status/1912471948379971681",
            "https://x.com/Phish_Destroy/status/1912472511800897796",
            "https://x.com/Phish_Destroy/status/1912472712301212063",
            "https://x.com/Phish_Destroy/status/1912472922955919467",
            "https://x.com/Phish_Destroy/status/1912473186215620897",
            "https://x.com/Phish_Destroy/status/1912473268327530917",
            "https://x.com/Phish_Destroy/status/1912473527027900618",
            "https://x.com/Phish_Destroy/status/1912473729369600203",
            "https://x.com/Phish_Destroy/status/1912473807471681738",
            "https://x.com/Phish_Destroy/status/1912474240676151774",
            "https://x.com/Phish_Destroy/status/1912474400189726737",
            "https://x.com/Phish_Destroy/status/1912474612358594997",
            "https://x.com/Phish_Destroy/status/1912475795286532123",
            "https://x.com/Phish_Destroy/status/1912475877260091654",
            "https://x.com/Phish_Destroy/status/1912476632230560156",
            "https://x.com/Phish_Destroy/status/1912477140177551859",
            "https://x.com/Phish_Destroy/status/1912477420549964257",
            "https://x.com/Phish_Destroy/status/1912477922666987899",
            "https://x.com/Phish_Destroy/status/1912478095136743704",
            "https://x.com/Phish_Destroy/status/1912478177152114939",
            "https://x.com/Phish_Destroy/status/1912478297444786512",
            "https://x.com/Phish_Destroy/status/1912478381410492926",
            "https://x.com/Phish_Destroy/status/1912478470489178254",
            "https://x.com/Phish_Destroy/status/1912478597119435089",
            "https://x.com/Phish_Destroy/status/1912478751750844875",
            "https://x.com/Phish_Destroy/status/1912481779417575879",
            "https://x.com/Phish_Destroy/status/1912481913807286413",
            "https://x.com/Phish_Destroy/status/1912482002583822705",
            "https://x.com/Phish_Destroy/status/1912482233727803551",
            "https://x.com/Phish_Destroy/status/1912482700696473990",
            "https://x.com/Phish_Destroy/status/1912483158701822173",
            "https://x.com/Phish_Destroy/status/1912483330043375764",
            "https://x.com/Phish_Destroy/status/1912483809460982069",
            "https://x.com/Phish_Destroy/status/1912483886791098376",
            "https://x.com/Phish_Destroy/status/1912484038675136941",
            "https://x.com/Phish_Destroy/status/1912484249606766834",
            "https://x.com/Phish_Destroy/status/1912485102266818661",
            "https://x.com/Phish_Destroy/status/1912485677012300009",
            "https://x.com/Phish_Destroy/status/1912486774087049474",
            "https://x.com/Phish_Destroy/status/1912487569528357036",
            "https://x.com/Phish_Destroy/status/1912487769617629287",
            "https://x.com/Phish_Destroy/status/1912487946273370596",
            "https://x.com/Phish_Destroy/status/1912488024752980109",
            "https://x.com/Phish_Destroy/status/1912489000478122403",
            "https://x.com/Phish_Destroy/status/1912489060456653292",
            "https://x.com/Phish_Destroy/status/1912489157810696414",
            "https://x.com/Phish_Destroy/status/1912489451999092972",
            "https://x.com/Phish_Destroy/status/1912490115273830517",
            "https://x.com/Phish_Destroy/status/1912490678468124934",
            "https://x.com/Phish_Destroy/status/1912490752606712021",
            "https://x.com/Phish_Destroy/status/1912490917837091255",
            "https://x.com/Phish_Destroy/status/1912496175825006878",
            "https://x.com/Phish_Destroy/status/1912573761041363341",
            "https://x.com/Phish_Destroy/status/1912577608354513034",
            "https://x.com/Phish_Destroy/status/1912578567331774688",
            "https://x.com/Phish_Destroy/status/1912579122993176769",
            "https://x.com/Phish_Destroy/status/1912579631452172659",
            "https://x.com/Phish_Destroy/status/1912579801359020094",
            "https://x.com/Phish_Destroy/status/1912580011321675958",
            "https://x.com/Phish_Destroy/status/1912580268612890899",
            "https://x.com/Phish_Destroy/status/1912580425332965452",
            "https://x.com/Phish_Destroy/status/1912580515502100534",
            "https://x.com/Phish_Destroy/status/1912580841039098305",
            "https://x.com/Phish_Destroy/status/1912581134484939097",
            "https://x.com/Phish_Destroy/status/1912581298779992497",
            "https://x.com/Phish_Destroy/status/1912581364815196226",
            "https://x.com/Phish_Destroy/status/1912581426475659513",
            "https://x.com/Phish_Destroy/status/1912581504334463142",
            "https://x.com/Phish_Destroy/status/1912581811898560960",
            "https://x.com/Phish_Destroy/status/1912582133857591463",
            "https://x.com/Phish_Destroy/status/1912582434924667183"
          ],
          "public": 1,
          "adversary": "",
          "targeted_countries": [],
          "malware_families": [],
          "attack_ids": [],
          "industries": [],
          "TLP": "green",
          "cloned_from": null,
          "export_count": 4,
          "upvotes_count": 0,
          "downvotes_count": 0,
          "votes_count": 0,
          "locked": false,
          "pulse_source": "api",
          "validator_count": 0,
          "comment_count": 0,
          "follower_count": 0,
          "vote": 0,
          "author": {
            "username": "CyberHunterAutoFeed",
            "id": "182496",
            "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
            "is_subscribed": false,
            "is_following": false
          },
          "indicator_type_counts": {
            "domain": 57,
            "URL": 97,
            "hostname": 40
          },
          "indicator_count": 194,
          "is_author": false,
          "is_subscribing": null,
          "subscriber_count": 1624,
          "modified_text": "412 days ago ",
          "is_modified": false,
          "groups": [],
          "in_group": false,
          "threat_hunter_scannable": false,
          "threat_hunter_has_agents": 1,
          "related_indicator_type": "domain",
          "related_indicator_is_active": 1
        }
      ],
      "references": [
        "https://x.com/Phish_Destroy/status/1912478297444786512",
        "https://x.com/Phish_Destroy/status/1912478470489178254",
        "https://x.com/Phish_Destroy/status/1912474612358594997",
        "https://x.com/Phish_Destroy/status/1912489157810696414",
        "https://x.com/Phish_Destroy/status/1912577608354513034",
        "https://x.com/Phish_Destroy/status/1912476632230560156",
        "https://x.com/Phish_Destroy/status/1912466612873028048",
        "https://x.com/Phish_Destroy/status/1912468486414102979",
        "https://x.com/Phish_Destroy/status/1912478177152114939",
        "https://x.com/Phish_Destroy/status/1912582434924667183",
        "https://x.com/Phish_Destroy/status/1912487569528357036",
        "https://x.com/Phish_Destroy/status/1912481779417575879",
        "https://x.com/Phish_Destroy/status/1912472712301212063",
        "https://x.com/Phish_Destroy/status/1912478381410492926",
        "https://x.com/Phish_Destroy/status/1912578567331774688",
        "https://x.com/Phish_Destroy/status/1912481913807286413",
        "https://x.com/Phish_Destroy/status/1912490115273830517",
        "https://x.com/Phish_Destroy/status/1912460967130116326",
        "https://x.com/Phish_Destroy/status/1912478095136743704",
        "https://x.com/Phish_Destroy/status/1912490678468124934",
        "https://x.com/Phish_Destroy/status/1912469912724832715",
        "https://x.com/Phish_Destroy/status/1912580011321675958",
        "https://x.com/Phish_Destroy/status/1912489000478122403",
        "https://x.com/Phish_Destroy/status/1912580425332965452",
        "https://x.com/Phish_Destroy/status/1912474400189726737",
        "https://x.com/Phish_Destroy/status/1912579122993176769",
        "https://x.com/Phish_Destroy/status/1912468632744911084",
        "https://x.com/Phish_Destroy/status/1912483330043375764",
        "https://x.com/Phish_Destroy/status/1912468569188638971",
        "https://x.com/Phish_Destroy/status/1912581504334463142",
        "https://x.com/Phish_Destroy/status/1912489060456653292",
        "https://x.com/Phish_Destroy/status/1912468190635962875",
        "https://x.com/Phish_Destroy/status/1912462453423620348",
        "https://x.com/Phish_Destroy/status/1912475795286532123",
        "https://x.com/Phish_Destroy/status/1912580841039098305",
        "https://x.com/Phish_Destroy/status/1912462193800458241",
        "https://x.com/Phish_Destroy/status/1912485102266818661",
        "https://x.com/Phish_Destroy/status/1912580515502100534",
        "https://x.com/Phish_Destroy/status/1912581298779992497",
        "https://x.com/Phish_Destroy/status/1912468254016077869",
        "https://x.com/Phish_Destroy/status/1912464924409725150",
        "https://x.com/Phish_Destroy/status/1912475877260091654",
        "https://x.com/Phish_Destroy/status/1912477140177551859",
        "https://x.com/Phish_Destroy/status/1912473807471681738",
        "https://x.com/Phish_Destroy/status/1912478597119435089",
        "https://x.com/Phish_Destroy/status/1912581426475659513",
        "https://x.com/Phish_Destroy/status/1912466811024519603",
        "https://x.com/Phish_Destroy/status/1912496175825006878",
        "https://x.com/Phish_Destroy/status/1912487946273370596",
        "https://x.com/Phish_Destroy/status/1912467947030769695",
        "https://x.com/Phish_Destroy/status/1912473186215620897",
        "https://x.com/Phish_Destroy/status/1912489451999092972",
        "https://x.com/Phish_Destroy/status/1912470381291565349",
        "https://x.com/Phish_Destroy/status/1912579631452172659",
        "https://x.com/Phish_Destroy/status/1912473527027900618",
        "https://x.com/Phish_Destroy/status/1912472922955919467",
        "https://x.com/Phish_Destroy/status/1912490752606712021",
        "https://x.com/Phish_Destroy/status/1912464718159122895",
        "https://x.com/Phish_Destroy/status/1912582133857591463",
        "https://x.com/Phish_Destroy/status/1912483158701822173",
        "https://medium.com/@meeswicky1100/dprk-unc3782-d66329e5c071",
        "https://x.com/Phish_Destroy/status/1912463455237423163",
        "https://x.com/Phish_Destroy/status/1912464000773660877",
        "https://x.com/Phish_Destroy/status/1912464593164632301",
        "https://x.com/Phish_Destroy/status/1912474240676151774",
        "https://x.com/Phish_Destroy/status/1912483886791098376",
        "https://x.com/Phish_Destroy/status/1912490917837091255",
        "https://x.com/Phish_Destroy/status/1912463624573960209",
        "https://x.com/Phish_Destroy/status/1912470499487072721",
        "https://x.com/Phish_Destroy/status/1912463329584357593",
        "https://x.com/Phish_Destroy/status/1912573761041363341",
        "https://x.com/Phish_Destroy/status/1912477922666987899",
        "https://x.com/Phish_Destroy/status/1912478751750844875",
        "https://x.com/Phish_Destroy/status/1912461502918861019",
        "https://x.com/Phish_Destroy/status/1912579801359020094",
        "https://x.com/Phish_Destroy/status/1912482700696473990",
        "https://x.com/Phish_Destroy/status/1912483809460982069",
        "https://x.com/Phish_Destroy/status/1912467436277735518",
        "https://x.com/Phish_Destroy/status/1912486774087049474",
        "https://x.com/Phish_Destroy/status/1912581811898560960",
        "https://x.com/Phish_Destroy/status/1912471948379971681",
        "https://x.com/Phish_Destroy/status/1912473729369600203",
        "https://x.com/Phish_Destroy/status/1912482002583822705",
        "https://x.com/Phish_Destroy/status/1912466933577900445",
        "https://x.com/Phish_Destroy/status/1912472511800897796",
        "https://x.com/Phish_Destroy/status/1912487769617629287",
        "https://x.com/Phish_Destroy/status/1912482233727803551",
        "https://x.com/Phish_Destroy/status/1912462322607570969",
        "https://x.com/Phish_Destroy/status/1912484249606766834",
        "https://x.com/Phish_Destroy/status/1912484038675136941",
        "https://x.com/Phish_Destroy/status/1912469197981909470",
        "https://x.com/Phish_Destroy/status/1912488024752980109",
        "https://x.com/Phish_Destroy/status/1912473268327530917",
        "https://x.com/Phish_Destroy/status/1912581364815196226",
        "https://x.com/Phish_Destroy/status/1912580268612890899",
        "https://x.com/Phish_Destroy/status/1912477420549964257",
        "https://x.com/Phish_Destroy/status/1912485677012300009",
        "https://x.com/Phish_Destroy/status/1912581134484939097"
      ],
      "related": {
        "alienvault": {
          "adversary": [],
          "malware_families": [],
          "industries": []
        },
        "other": {
          "adversary": [],
          "malware_families": [],
          "industries": [
            "Government",
            "Military"
          ]
        }
      }
    },
    "false_positive": []
  },
  "geo": {},
  "geo_ipapicom": {},
  "pulse_count": 2,
  "pulses": [
    {
      "id": "691ad06c2973b3307400fa56",
      "name": "DPRK UNC3782",
      "description": "The cyber threat group UNC3782, suspected to be linked to North Korea, has conducted extensive phishing campaigns targeting Naver Corp by creating numerous typosquat domains from 2021 through late 2022. This marks the group's first significant deviation from previous tactics, as they introduced cryptocurrency-themed domains likely aimed at NFT and cryptocurrency holders. In this period, investigators identified 19 unique email addresses associated with these campaigns and uncovered 1,983 unique hostnames, indicating a broad and organized effort to compromise targeted entities. Notably, there are observed connections between the activities of UNC3782 and those of another North Korean threat actor, APT43 (Kimsuky), although a definitive link has not been established.\n\nOperational security oversights have been identified, particularly in WHOIS information. The researchers found multiple email addresses, some of which appear recurrently, suggesting a potential pattern in the group's operational methods.",
      "modified": "2025-12-17T07:03:02.980000",
      "created": "2025-11-17T07:36:12.470000",
      "tags": [
        "hotmail",
        "gmail",
        "and email",
        "done",
        "unc3782",
        "whois",
        "outlook",
        "silent push",
        "naver corp",
        "tony smith",
        "kimsuky",
        "april",
        "first",
        "false",
        "crypto",
        "hostinger",
        "for privacy",
        "smith",
        "steven",
        "kil nyeon",
        "kn kim",
        "william ali",
        "redacted for",
        "privacy pdr"
      ],
      "references": [
        "https://medium.com/@meeswicky1100/dprk-unc3782-d66329e5c071"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [
        {
          "id": "T1036.003",
          "name": "Rename System Utilities",
          "display_name": "T1036.003 - Rename System Utilities"
        },
        {
          "id": "T1056.003",
          "name": "Web Portal Capture",
          "display_name": "T1056.003 - Web Portal Capture"
        },
        {
          "id": "T1566.002",
          "name": "Spearphishing Link",
          "display_name": "T1566.002 - Spearphishing Link"
        },
        {
          "id": "T1583.001",
          "name": "Domains",
          "display_name": "T1583.001 - Domains"
        },
        {
          "id": "T1589.003",
          "name": "Employee Names",
          "display_name": "T1589.003 - Employee Names"
        }
      ],
      "industries": [
        "Government",
        "military"
      ],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "web",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "PetrP.73",
        "id": "154605",
        "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "FileHash-SHA256": 1,
        "domain": 2128,
        "hostname": 493,
        "email": 3
      },
      "indicator_count": 2625,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 544,
      "modified_text": "168 days ago ",
      "is_modified": true,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": true,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    },
    {
      "id": "68003f5f8f0dfdcb6ec718c5",
      "name": "Twitter Feed - Phish_Destroy - 16-04-2025",
      "description": "",
      "modified": "2025-04-16T23:38:07.283000",
      "created": "2025-04-16T23:38:07.283000",
      "tags": [
        "malware",
        "phishing",
        "scam"
      ],
      "references": [
        "https://x.com/Phish_Destroy/status/1912460967130116326",
        "https://x.com/Phish_Destroy/status/1912461502918861019",
        "https://x.com/Phish_Destroy/status/1912462193800458241",
        "https://x.com/Phish_Destroy/status/1912462322607570969",
        "https://x.com/Phish_Destroy/status/1912462453423620348",
        "https://x.com/Phish_Destroy/status/1912463329584357593",
        "https://x.com/Phish_Destroy/status/1912463455237423163",
        "https://x.com/Phish_Destroy/status/1912463624573960209",
        "https://x.com/Phish_Destroy/status/1912464000773660877",
        "https://x.com/Phish_Destroy/status/1912464593164632301",
        "https://x.com/Phish_Destroy/status/1912464718159122895",
        "https://x.com/Phish_Destroy/status/1912464924409725150",
        "https://x.com/Phish_Destroy/status/1912466612873028048",
        "https://x.com/Phish_Destroy/status/1912466811024519603",
        "https://x.com/Phish_Destroy/status/1912466933577900445",
        "https://x.com/Phish_Destroy/status/1912467436277735518",
        "https://x.com/Phish_Destroy/status/1912467947030769695",
        "https://x.com/Phish_Destroy/status/1912468190635962875",
        "https://x.com/Phish_Destroy/status/1912468254016077869",
        "https://x.com/Phish_Destroy/status/1912468486414102979",
        "https://x.com/Phish_Destroy/status/1912468569188638971",
        "https://x.com/Phish_Destroy/status/1912468632744911084",
        "https://x.com/Phish_Destroy/status/1912469197981909470",
        "https://x.com/Phish_Destroy/status/1912469912724832715",
        "https://x.com/Phish_Destroy/status/1912470381291565349",
        "https://x.com/Phish_Destroy/status/1912470499487072721",
        "https://x.com/Phish_Destroy/status/1912471948379971681",
        "https://x.com/Phish_Destroy/status/1912472511800897796",
        "https://x.com/Phish_Destroy/status/1912472712301212063",
        "https://x.com/Phish_Destroy/status/1912472922955919467",
        "https://x.com/Phish_Destroy/status/1912473186215620897",
        "https://x.com/Phish_Destroy/status/1912473268327530917",
        "https://x.com/Phish_Destroy/status/1912473527027900618",
        "https://x.com/Phish_Destroy/status/1912473729369600203",
        "https://x.com/Phish_Destroy/status/1912473807471681738",
        "https://x.com/Phish_Destroy/status/1912474240676151774",
        "https://x.com/Phish_Destroy/status/1912474400189726737",
        "https://x.com/Phish_Destroy/status/1912474612358594997",
        "https://x.com/Phish_Destroy/status/1912475795286532123",
        "https://x.com/Phish_Destroy/status/1912475877260091654",
        "https://x.com/Phish_Destroy/status/1912476632230560156",
        "https://x.com/Phish_Destroy/status/1912477140177551859",
        "https://x.com/Phish_Destroy/status/1912477420549964257",
        "https://x.com/Phish_Destroy/status/1912477922666987899",
        "https://x.com/Phish_Destroy/status/1912478095136743704",
        "https://x.com/Phish_Destroy/status/1912478177152114939",
        "https://x.com/Phish_Destroy/status/1912478297444786512",
        "https://x.com/Phish_Destroy/status/1912478381410492926",
        "https://x.com/Phish_Destroy/status/1912478470489178254",
        "https://x.com/Phish_Destroy/status/1912478597119435089",
        "https://x.com/Phish_Destroy/status/1912478751750844875",
        "https://x.com/Phish_Destroy/status/1912481779417575879",
        "https://x.com/Phish_Destroy/status/1912481913807286413",
        "https://x.com/Phish_Destroy/status/1912482002583822705",
        "https://x.com/Phish_Destroy/status/1912482233727803551",
        "https://x.com/Phish_Destroy/status/1912482700696473990",
        "https://x.com/Phish_Destroy/status/1912483158701822173",
        "https://x.com/Phish_Destroy/status/1912483330043375764",
        "https://x.com/Phish_Destroy/status/1912483809460982069",
        "https://x.com/Phish_Destroy/status/1912483886791098376",
        "https://x.com/Phish_Destroy/status/1912484038675136941",
        "https://x.com/Phish_Destroy/status/1912484249606766834",
        "https://x.com/Phish_Destroy/status/1912485102266818661",
        "https://x.com/Phish_Destroy/status/1912485677012300009",
        "https://x.com/Phish_Destroy/status/1912486774087049474",
        "https://x.com/Phish_Destroy/status/1912487569528357036",
        "https://x.com/Phish_Destroy/status/1912487769617629287",
        "https://x.com/Phish_Destroy/status/1912487946273370596",
        "https://x.com/Phish_Destroy/status/1912488024752980109",
        "https://x.com/Phish_Destroy/status/1912489000478122403",
        "https://x.com/Phish_Destroy/status/1912489060456653292",
        "https://x.com/Phish_Destroy/status/1912489157810696414",
        "https://x.com/Phish_Destroy/status/1912489451999092972",
        "https://x.com/Phish_Destroy/status/1912490115273830517",
        "https://x.com/Phish_Destroy/status/1912490678468124934",
        "https://x.com/Phish_Destroy/status/1912490752606712021",
        "https://x.com/Phish_Destroy/status/1912490917837091255",
        "https://x.com/Phish_Destroy/status/1912496175825006878",
        "https://x.com/Phish_Destroy/status/1912573761041363341",
        "https://x.com/Phish_Destroy/status/1912577608354513034",
        "https://x.com/Phish_Destroy/status/1912578567331774688",
        "https://x.com/Phish_Destroy/status/1912579122993176769",
        "https://x.com/Phish_Destroy/status/1912579631452172659",
        "https://x.com/Phish_Destroy/status/1912579801359020094",
        "https://x.com/Phish_Destroy/status/1912580011321675958",
        "https://x.com/Phish_Destroy/status/1912580268612890899",
        "https://x.com/Phish_Destroy/status/1912580425332965452",
        "https://x.com/Phish_Destroy/status/1912580515502100534",
        "https://x.com/Phish_Destroy/status/1912580841039098305",
        "https://x.com/Phish_Destroy/status/1912581134484939097",
        "https://x.com/Phish_Destroy/status/1912581298779992497",
        "https://x.com/Phish_Destroy/status/1912581364815196226",
        "https://x.com/Phish_Destroy/status/1912581426475659513",
        "https://x.com/Phish_Destroy/status/1912581504334463142",
        "https://x.com/Phish_Destroy/status/1912581811898560960",
        "https://x.com/Phish_Destroy/status/1912582133857591463",
        "https://x.com/Phish_Destroy/status/1912582434924667183"
      ],
      "public": 1,
      "adversary": "",
      "targeted_countries": [],
      "malware_families": [],
      "attack_ids": [],
      "industries": [],
      "TLP": "green",
      "cloned_from": null,
      "export_count": 4,
      "upvotes_count": 0,
      "downvotes_count": 0,
      "votes_count": 0,
      "locked": false,
      "pulse_source": "api",
      "validator_count": 0,
      "comment_count": 0,
      "follower_count": 0,
      "vote": 0,
      "author": {
        "username": "CyberHunterAutoFeed",
        "id": "182496",
        "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_182496/resized/80/avatar_3b9c358f36.png",
        "is_subscribed": false,
        "is_following": false
      },
      "indicator_type_counts": {
        "domain": 57,
        "URL": 97,
        "hostname": 40
      },
      "indicator_count": 194,
      "is_author": false,
      "is_subscribing": null,
      "subscriber_count": 1624,
      "modified_text": "412 days ago ",
      "is_modified": false,
      "groups": [],
      "in_group": false,
      "threat_hunter_scannable": false,
      "threat_hunter_has_agents": 1,
      "related_indicator_type": "domain",
      "related_indicator_is_active": 1
    }
  ],
  "error": null,
  "vt": {
    "error": "VirusTotal rate limit reached. Try again shortly.",
    "indicator": "stakefish.org",
    "type": "Domain"
  },
  "abuseipdb": null,
  "urlhaus": {
    "indicator": "stakefish.org",
    "found": false,
    "verdict": "clean",
    "urls": [],
    "error": null
  },
  "from_cache": true,
  "_cached_at": 1780486811.3245296
}