{"Event":{"uuid":"2115c574-c7d1-5a63-97bb-b7c0f0fad70c","info":"TweetFeed IOCs (year window, refreshed every 15 minutes)","date":"2026-07-15","timestamp":"1784124932","threat_level_id":"4","analysis":"2","distribution":"3","published":true,"Orgc":{"name":"TweetFeed","uuid":"76a67249-f941-5bdb-925a-51045a921c1e"},"Tag":[{"name":"TweetFeed","colour":"#1DA1F2"},{"name":"type:OSINT","colour":"#004646"},{"name":"tlp:clear","colour":"#FFFFFF"}],"Attribute":[{"uuid":"9803daa6-6f01-51ec-80ce-6dad695e842b","type":"domain","category":"Network activity","to_ids":true,"value":"jnvfywgscznzg.web.app","comment":"https://x.com/urldna_bot/status/1945272201730527290","timestamp":"1752624008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0dfd2108-5d10-5251-9424-daa3e67120e6","type":"url","category":"Network activity","to_ids":true,"value":"https://jnvfywgscznzg.web.app","comment":"https://x.com/urldna_bot/status/1945272201730527290","timestamp":"1752624008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4f2c5a72-fa13-5d3c-b649-c319f223ffd3","type":"domain","category":"Network activity","to_ids":true,"value":"vipcaller.xyz","comment":"https://x.com/skocherhan/status/1945273826444509330","timestamp":"1752624396","distribution":"5"},{"uuid":"36abe28c-77b8-5306-b6e8-e85faba66cf4","type":"url","category":"Network activity","to_ids":true,"value":"http://vipcaller.xyz","comment":"https://x.com/skocherhan/status/1945273826444509330","timestamp":"1752624396","distribution":"5"},{"uuid":"4457c90f-d3e9-552f-b24c-aa0b3deb0d75","type":"md5","category":"Payload delivery","to_ids":true,"value":"B02679ECB54344490F87F91DDA88ACE6","comment":"https://x.com/fbgwls245/status/1945273968841383967","timestamp":"1752624430","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"92172dc8-63aa-5c1f-9122-b15131a0b436","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-calypalt.kwsqlp.cn","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9379480c-65f7-5e85-bf18-e4af2e27bd02","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-calypalt.kwsqlp.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d881769-239b-5e09-87c8-a8da35463941","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-sollgl.xixydh.cn","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd02f53d-0d96-5cdb-9ae6-8a69e5d79e71","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-sollgl.xixydh.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"05c090b0-d141-552e-9ec0-c00d4f9b1b7f","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-volutit.pkiqg.cn","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a83c0c38-cb44-53e7-9032-907900a812cb","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-volutit.pkiqg.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1945288954275635480","timestamp":"1752628003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6c20116f-af43-5ace-b8d6-92f5604a64e4","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.147.168","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"47e653a7-416d-5a40-8723-e6d38a2a083e","type":"url","category":"Network activity","to_ids":true,"value":"http://rtaybsg.icu/D0pX.jp","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80afc292-c262-5751-8c5e-a6cec3e14d5a","type":"domain","category":"Network activity","to_ids":true,"value":"rtaybsg.icu","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"078f331e-04c1-57cf-b939-f4c04b31513f","type":"domain","category":"Network activity","to_ids":true,"value":"D0pX.jp","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98507a1b-74dc-5885-bede-81592a677998","type":"url","category":"Network activity","to_ids":true,"value":"http://maifenba.com/D0pX.jp","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0fe75bf6-dc8a-5bd4-8e6b-2816aa5ed932","type":"domain","category":"Network activity","to_ids":true,"value":"maifenba.com","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e16abec6-ea56-5a10-bf2c-bfac45958d60","type":"url","category":"Network activity","to_ids":true,"value":"https://D0pX.jp","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ca2f803c-d7a9-55e6-9d4c-957816dbb90e","type":"url","category":"Network activity","to_ids":true,"value":"http://mikshua.bond","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd600973-8594-5861-bde3-6cd56c4a1d09","type":"domain","category":"Network activity","to_ids":true,"value":"mikshua.bond","comment":"https://x.com/catnap707/status/1945289793748742455","timestamp":"1752628203","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1532f4bd-a606-5e96-a26e-4f8ea53e09ce","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.188.254","comment":"https://x.com/catnap707/status/1945290181705392579","timestamp":"1752628295","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf9631ad-6bdc-5633-8912-b8803e042a6b","type":"domain","category":"Network activity","to_ids":true,"value":"site4-sbisec.sdjil.com","comment":"https://x.com/catnap707/status/1945290181705392579","timestamp":"1752628295","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a5ffd0b-827a-5f0d-914f-cb9a585e2d86","type":"url","category":"Network activity","to_ids":true,"value":"http://site4-sbisec.sdjil.com/ETGate/?sbisec=~","comment":"https://x.com/catnap707/status/1945290181705392579","timestamp":"1752628295","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eba611e3-9948-5b41-a03e-2bffa02aeb62","type":"domain","category":"Network activity","to_ids":true,"value":"ocn.gocmenrandevu.com","comment":"https://x.com/masaomi346/status/1945295078458843218","timestamp":"1752629463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"522e0c58-7b55-586e-bea4-824dcaecd016","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ocn.gocmenrandevu.com","comment":"https://x.com/masaomi346/status/1945295078458843218","timestamp":"1752629463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98d24416-4e59-5f1e-8ff8-c4218d4373a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.128.248","comment":"https://x.com/romonlyht/status/1945296921490251927","timestamp":"1752629902","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53c205df-a619-57bf-a83d-79b96c483d7b","type":"url","category":"Network activity","to_ids":true,"value":"https://myiclouds-apponeco.shop/idloud/support","comment":"https://x.com/romonlyht/status/1945296921490251927","timestamp":"1752629902","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e4cbba2b-4eb1-5e20-8978-95a3eea09b19","type":"url","category":"Network activity","to_ids":true,"value":"https://myiclouds-apponeco.shop/idloud/support/","comment":"https://x.com/romonlyht/status/1945296925713965485","timestamp":"1752629903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f1242c0-f7d3-5ce1-99ef-6361dcde3203","type":"domain","category":"Network activity","to_ids":true,"value":"myiclouds-apponeco.shop","comment":"https://x.com/romonlyht/status/1945296925713965485","timestamp":"1752629903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a89cc2ac-d122-53e1-a654-83923eaaa94a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.182.100.57","comment":"https://x.com/romonlyht/status/1945297197613891720","timestamp":"1752629968","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"59727274-7aa5-5e64-b97e-a79a1e16be48","type":"url","category":"Network activity","to_ids":true,"value":"https://myiclouds-storesco.shop/idloud/support","comment":"https://x.com/romonlyht/status/1945297197613891720","timestamp":"1752629968","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de243712-9c9a-5c19-9db1-8d0c7a9d9f57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.128.211","comment":"https://x.com/romonlyht/status/1945297197613891720","timestamp":"1752629968","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55319b16-317d-5d5d-9da7-d3761152ab4d","type":"domain","category":"Network activity","to_ids":true,"value":"myiclouds-storesco.shop","comment":"https://x.com/romonlyht/status/1945297200549855566","timestamp":"1752629969","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aac4a234-d349-54c4-9f68-eec0735e6062","type":"url","category":"Network activity","to_ids":true,"value":"https://myiclouds-storesco.shop/idloud/support/","comment":"https://x.com/romonlyht/status/1945297200549855566","timestamp":"1752629969","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5d72a159-75d3-515a-9b57-52062c1868e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.5.108.121","comment":"https://x.com/romonlyht/status/1945301482330329374","timestamp":"1752630989","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b2f753ba-8367-559c-abc9-67dc09edc4a2","type":"url","category":"Network activity","to_ids":true,"value":"http://xflhldguj.ghneq.cn/hnecelpki.co.jp","comment":"https://x.com/romonlyht/status/1945301484838515040","timestamp":"1752630990","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b6cc533-18e1-5c7c-8a60-297894891f83","type":"domain","category":"Network activity","to_ids":true,"value":"xflhldguj.ghneq.cn","comment":"https://x.com/romonlyht/status/1945301484838515040","timestamp":"1752630990","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74cb12b8-116c-5d4a-8f46-e0129551408b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.154.231.7","comment":"https://x.com/romonlyht/status/1945301484838515040","timestamp":"1752630990","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08629c07-693f-559c-a3c9-96f848fd63da","type":"domain","category":"Network activity","to_ids":true,"value":"nnnequireddomainsad.mrface.com","comment":"https://x.com/romonlyht/status/1945301484838515040","timestamp":"1752630990","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d8072242-970a-5943-8232-f73e6c575fe7","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsad.mrface.com/wddsoscosmsosmx.jp","comment":"https://x.com/romonlyht/status/1945301484838515040","timestamp":"1752630990","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b268f87-4174-56f0-ad17-9147642509ee","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsad.mrface.com/v1/check","comment":"https://x.com/romonlyht/status/1945301487317606776","timestamp":"1752630991","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab18ed48-4adc-51e8-84fa-855bccab3cea","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsad.mrface.com/wddsoscosmsosmx.jp/","comment":"https://x.com/romonlyht/status/1945301487317606776","timestamp":"1752630991","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dfda12b5-46e2-5433-a62a-0de1317a35f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.231.10.58","comment":"https://x.com/romonlyht/status/1945302119604478196","timestamp":"1752631141","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf237b6f-79bf-5f62-8ced-1670b7d93450","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsad.longmusic.com/wddsoscosmsosmx.jp","comment":"https://x.com/romonlyht/status/1945302121886224872","timestamp":"1752631142","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09ee4b95-60eb-5a12-99cd-f7d1603582be","type":"domain","category":"Network activity","to_ids":true,"value":"azqmqfbmg.ghneq.cn","comment":"https://x.com/romonlyht/status/1945302121886224872","timestamp":"1752631142","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b854e650-5305-5ec1-80a9-b46ad4ed81ce","type":"domain","category":"Network activity","to_ids":true,"value":"nnnequireddomainsad.longmusic.com","comment":"https://x.com/romonlyht/status/1945302121886224872","timestamp":"1752631142","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0cf89830-ec21-5412-9caa-2686ed29e87a","type":"url","category":"Network activity","to_ids":true,"value":"http://azqmqfbmg.ghneq.cn/toukodefub.co.jp","comment":"https://x.com/romonlyht/status/1945302121886224872","timestamp":"1752631142","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30fbc9c8-f88f-5479-aea8-1ee406474b15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.16.169.54","comment":"https://x.com/romonlyht/status/1945302124465639488","timestamp":"1752631143","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce67fd07-b985-5787-bee2-3f431c402818","type":"domain","category":"Network activity","to_ids":true,"value":"ssfdgshf.weebly.com","comment":"https://x.com/urldna_bot/status/1945302390413894110","timestamp":"1752631206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cc779e16-4f84-50f3-823e-6a7fab809221","type":"url","category":"Network activity","to_ids":true,"value":"https://ssfdgshf.weebly.com","comment":"https://x.com/urldna_bot/status/1945302390413894110","timestamp":"1752631206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5c0e7c6d-673b-53cd-b64c-e5a13d0da9ae","type":"domain","category":"Network activity","to_ids":true,"value":"sh1nk1n-bmk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4382356d-52ac-5695-a07f-8658ccde2c86","type":"domain","category":"Network activity","to_ids":true,"value":"sh1nk1n-bnnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2d07ee5-ca06-53de-9b7e-6f5ff5132d90","type":"url","category":"Network activity","to_ids":true,"value":"https://sh1nk1n-dnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b57df48e-e10d-51f6-8f73-d258e61db1bf","type":"domain","category":"Network activity","to_ids":true,"value":"sh1nk1n-dnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03dcda77-9097-525f-99ce-5439a56517a5","type":"domain","category":"Network activity","to_ids":true,"value":"sh1nk1n-dmk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"404787fa-55cc-5ab7-8f4b-2ad6bb195663","type":"url","category":"Network activity","to_ids":true,"value":"https://sh1nk1n-bnnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"793a3cae-f75d-5ae3-9ec4-4810c98571c8","type":"url","category":"Network activity","to_ids":true,"value":"https://sh1nk1n-bnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"594a962a-33e5-5a9c-ab17-893d751e8c90","type":"url","category":"Network activity","to_ids":true,"value":"https://iocdnzx.2373xlx.91ddos.com/)(149.104.32.236","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38766e36-28e0-51d8-a48f-d9dae73513b5","type":"url","category":"Network activity","to_ids":true,"value":"https://sh1nk1n-bmk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af959ccd-227b-592c-a1e1-f270a1a500d8","type":"domain","category":"Network activity","to_ids":true,"value":"sh1nk1n-bnk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab2db658-d3be-5a68-97a2-9287dd08a6bc","type":"url","category":"Network activity","to_ids":true,"value":"https://sh1nk1n-dmk.com","comment":"https://x.com/harugasumi/status/1945304408172192052","timestamp":"1752631687","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f439547-d048-5af5-81ac-79fde265fef4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.110.9.81","comment":"https://x.com/romonlyht/status/1945307731855802569","timestamp":"1752632480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3084f9cb-ff8b-5fe2-8fd2-873faeab80c1","type":"url","category":"Network activity","to_ids":true,"value":"https://v.444super.com/login","comment":"https://x.com/romonlyht/status/1945307731855802569","timestamp":"1752632480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a971e7b-b07e-5435-aaf3-d1a0a8d6fa99","type":"url","category":"Network activity","to_ids":true,"value":"https://v.444super.com/my-visa","comment":"https://x.com/romonlyht/status/1945307731855802569","timestamp":"1752632480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d10a3f6-9cee-54e2-a02a-63e8f0cbc3ca","type":"domain","category":"Network activity","to_ids":true,"value":"v.444super.com","comment":"https://x.com/romonlyht/status/1945307731855802569","timestamp":"1752632480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c37e2b98-a22b-57f7-a26e-b979ac82cba4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.205.136.58","comment":"https://x.com/romonlyht/status/1945307960215003646","timestamp":"1752632534","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ebfaae5-ae76-5f8e-a726-4ef3bfe33c39","type":"domain","category":"Network activity","to_ids":true,"value":"movisa-cardco.shop","comment":"https://x.com/romonlyht/status/1945307960215003646","timestamp":"1752632534","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0719c37-2a5a-5eeb-b42a-c5d0a6097780","type":"url","category":"Network activity","to_ids":true,"value":"http://movisa-cardco.shop/index.html/","comment":"https://x.com/romonlyht/status/1945307960215003646","timestamp":"1752632534","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f3b2d9c-1f7d-5261-9e20-407ed400ad33","type":"url","category":"Network activity","to_ids":true,"value":"https://movisa-cardco.shop/index.html","comment":"https://x.com/romonlyht/status/1945307960215003646","timestamp":"1752632534","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe082344-1b40-5e11-93bf-d48bded1a6e4","type":"url","category":"Network activity","to_ids":true,"value":"https://v.222super.com/my-visa","comment":"https://x.com/romonlyht/status/1945308204604514598","timestamp":"1752632592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ed06a625-789c-5cf3-a827-18f73dedbbea","type":"domain","category":"Network activity","to_ids":true,"value":"v.222super.com","comment":"https://x.com/romonlyht/status/1945308204604514598","timestamp":"1752632592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6da50f8d-7f7d-5543-b596-2e0aff5715d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.187.210.240","comment":"https://x.com/romonlyht/status/1945308204604514598","timestamp":"1752632592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80112ae6-35ac-5c82-b9fd-b645c0d7664b","type":"url","category":"Network activity","to_ids":true,"value":"https://v.222super.com/login","comment":"https://x.com/romonlyht/status/1945308204604514598","timestamp":"1752632592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7577cc96-793d-5908-9018-79471a78d338","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.110.8.78","comment":"https://x.com/romonlyht/status/1945308204604514598","timestamp":"1752632592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74a0af90-588c-596e-a42f-864f8c6af4cb","type":"domain","category":"Network activity","to_ids":true,"value":"coinspaceteam.com","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"d526ede3-88ee-5180-ba79-b999b1af2e35","type":"domain","category":"Network activity","to_ids":true,"value":"tlgrm-redirect.icu","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"3d3e95ad-2821-51dc-b40e-4ca980e6c58d","type":"url","category":"Network activity","to_ids":true,"value":"http://tlgrm-redirect.icu/1.txt","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"87e5e7b6-b971-5db1-9679-bb3577a22539","type":"url","category":"Network activity","to_ids":true,"value":"http://coinspaceteam.com","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"898387e8-1a43-5576-8d6a-e8c30b7bcd34","type":"url","category":"Network activity","to_ids":true,"value":"http://soubtcevent.com","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"00e638c4-1e35-5cff-9a6c-c920100c2bd9","type":"domain","category":"Network activity","to_ids":true,"value":"soubtcevent.com","comment":"https://x.com/skocherhan/status/1945308359877431576","timestamp":"1752632629","distribution":"5"},{"uuid":"3ef98216-20d9-5d03-8b10-b85393409bd2","type":"md5","category":"Payload delivery","to_ids":true,"value":"65e15140f3914db3c7baf90282fad297","comment":"https://x.com/skocherhan/status/1945309783529025818","timestamp":"1752632969","distribution":"5"},{"uuid":"5e8b6f81-8880-5479-9c44-78b706f402e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.90.153.72","comment":"https://x.com/skocherhan/status/1945309783529025818","timestamp":"1752632969","distribution":"5"},{"uuid":"cd0c4f3c-4211-521e-8c6e-fde46c1bcfc2","type":"url","category":"Network activity","to_ids":true,"value":"http://77.90.153.72","comment":"https://x.com/skocherhan/status/1945309783529025818","timestamp":"1752632969","distribution":"5"},{"uuid":"38e1f912-d882-5cfb-be4d-928e1a17970e","type":"domain","category":"Network activity","to_ids":true,"value":"secure-booking.app","comment":"https://x.com/skocherhan/status/1945311064486187159","timestamp":"1752633274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0772c71-abf3-5115-a735-283a81623a11","type":"url","category":"Network activity","to_ids":true,"value":"http://secure-booking.app","comment":"https://x.com/skocherhan/status/1945311064486187159","timestamp":"1752633274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5c16698c-ec73-5897-a04a-462cfed8ff85","type":"url","category":"Network activity","to_ids":true,"value":"https://qf9j44.top/W0lBfYXZ","comment":"https://x.com/romonlyht/status/1945311500144664736","timestamp":"1752633378","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ed572cf-34aa-5b68-8d97-1a9e0a0c260f","type":"url","category":"Network activity","to_ids":true,"value":"https://qf9j44.top/W0lBfYXZ/","comment":"https://x.com/romonlyht/status/1945311500144664736","timestamp":"1752633378","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a16d754-d7dd-5ed1-b26f-a46e82774346","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.233.33.138","comment":"https://x.com/romonlyht/status/1945311500144664736","timestamp":"1752633378","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"deef8336-35e9-5700-9fc9-126860827471","type":"domain","category":"Network activity","to_ids":true,"value":"qf9j44.top","comment":"https://x.com/romonlyht/status/1945311500144664736","timestamp":"1752633378","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2d39cf3-8c97-59e2-84b6-34be0f911e1e","type":"url","category":"Network activity","to_ids":true,"value":"https://c8akvu.top/W0lBfYXZ/","comment":"https://x.com/romonlyht/status/1945311716633665606","timestamp":"1752633430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6615f0f3-a6b7-509a-ae85-422d471f5c0e","type":"url","category":"Network activity","to_ids":true,"value":"https://c8akvu.top/W0lBfYXZ","comment":"https://x.com/romonlyht/status/1945311716633665606","timestamp":"1752633430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a60b08cf-6fde-5a50-8b1b-d303976c9c55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"177.53.137.74","comment":"https://x.com/romonlyht/status/1945311716633665606","timestamp":"1752633430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"814a6e8c-b9a6-584d-b4a6-8e2a486ade42","type":"domain","category":"Network activity","to_ids":true,"value":"c8akvu.top","comment":"https://x.com/romonlyht/status/1945311716633665606","timestamp":"1752633430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6174816-f1da-5d85-9e5b-56f7f5edbf7c","type":"domain","category":"Network activity","to_ids":true,"value":"xalithos.icu","comment":"https://x.com/romonlyht/status/1945314696611160570","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"669575ef-f768-5081-902f-bbe39fc2e709","type":"url","category":"Network activity","to_ids":true,"value":"https://hkic.pw","comment":"https://x.com/romonlyht/status/1945314696611160570","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"59914bd2-4286-5a2e-805e-4a6180806b77","type":"domain","category":"Network activity","to_ids":true,"value":"hkic.pw","comment":"https://x.com/romonlyht/status/1945314696611160570","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f4d671a-4430-5172-a092-1c2f0fd09404","type":"url","category":"Network activity","to_ids":true,"value":"https://xalithos.icu/M0niX8e/","comment":"https://x.com/romonlyht/status/1945314696611160570","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1d85235-6176-5b19-b363-e0dfd03431ea","type":"url","category":"Network activity","to_ids":true,"value":"http://hkic.pw","comment":"https://x.com/romonlyht/status/1945314694488846364","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f11ab3ee-535e-5dff-9870-c8f23d66fa8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.16.9.222","comment":"https://x.com/romonlyht/status/1945314696611160570","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e3b3cc0-9211-55a9-a62b-ec65d2729d06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.217.83.16","comment":"https://x.com/romonlyht/status/1945314694488846364","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1418ac7-4254-5f9a-bf0d-af5b844bf531","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.199.248.11","comment":"https://x.com/romonlyht/status/1945314694488846364","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"663770d4-662b-54c6-96b9-f17777cb3a85","type":"url","category":"Network activity","to_ids":true,"value":"http://bit.ly/451QIey","comment":"https://x.com/romonlyht/status/1945314694488846364","timestamp":"1752634140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d32a1baf-bda6-5b4f-8a0f-1fd3da888570","type":"url","category":"Network activity","to_ids":true,"value":"https://7ool0u.top/5FxCI4","comment":"https://x.com/romonlyht/status/1945316500262543596","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"18ff6bc8-6645-5e22-bf0d-617f4afdb81e","type":"domain","category":"Network activity","to_ids":true,"value":"7ool0u.top","comment":"https://x.com/romonlyht/status/1945316500262543596","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb791457-fb91-5cc7-8938-b6828b546ae8","type":"url","category":"Network activity","to_ids":true,"value":"https://7ool0u.top/5FxCI4/","comment":"https://x.com/romonlyht/status/1945316500262543596","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8fea9e83-07c1-5757-bcd4-0fcc67c81b85","type":"domain","category":"Network activity","to_ids":true,"value":"hgtkam-kger80s.pokejunct.workers.dev","comment":"https://x.com/romonlyht/status/1945316497951482133","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"216137e2-c92d-52c5-9371-85d6cb169d1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.36.163.172","comment":"https://x.com/romonlyht/status/1945316497951482133","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a1a5d23-79dd-5ede-9eaa-3bbff7fedd35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.162.124.209","comment":"https://x.com/romonlyht/status/1945316500262543596","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd00165a-2c22-5ab5-aa77-8fc52b4151e9","type":"url","category":"Network activity","to_ids":true,"value":"https://hgtkam-kger80s.pokejunct.workers.dev/pANCeix6/90fENSXHs/0P-TxxEewq1YoqXd1_ecstreQpvlDYlfazOXDVKEYLk.pdf","comment":"https://x.com/romonlyht/status/1945316497951482133","timestamp":"1752634570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ebcd1346-6255-5cfb-a642-154455c0aa93","type":"domain","category":"Network activity","to_ids":true,"value":"sos-atlanta.com","comment":"https://x.com/skocherhan/status/1945329478873272321","timestamp":"1752637664","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"8bdd89d7-d002-55a5-a5ab-5ab7d7a948f6","type":"url","category":"Network activity","to_ids":true,"value":"http://sos-atlanta.com","comment":"https://x.com/skocherhan/status/1945329478873272321","timestamp":"1752637664","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"c9894442-7a5a-5ed2-af3d-83975f9da1a0","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.87","comment":"https://x.com/skocherhan/status/1945329478873272321","timestamp":"1752637664","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"95a230d8-4a3f-5fc6-b5e1-2a1c57fdd9e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.87","comment":"https://x.com/skocherhan/status/1945329478873272321","timestamp":"1752637664","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/harugasumi/status/1945330419257500155","timestamp":"1752637889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/harugasumi/status/1945330419257500155","timestamp":"1752637889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b41dc8a5-f7e7-563e-bbf0-8b9a78a1aa5e","type":"domain","category":"Network activity","to_ids":true,"value":"coinbaselogindesk.blogspot.lt","comment":"https://x.com/urldna_bot/status/1945332603139088489","timestamp":"1752638409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d8b4ef46-f005-51e8-a802-2b9fe2518080","type":"url","category":"Network activity","to_ids":true,"value":"https://coinbaselogindesk.blogspot.lt","comment":"https://x.com/urldna_bot/status/1945332603139088489","timestamp":"1752638409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a50af45e-cf18-50c3-8148-557a1d65fabc","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.153:7788","comment":"https://x.com/SarlackLab/status/1945332640136970254","timestamp":"1752638418","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"8409a7eb-e209-5d51-ab00-685e406a06ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.153","comment":"https://x.com/SarlackLab/status/1945332640136970254","timestamp":"1752638418","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"8dbbc7a7-8648-5e01-a512-ab1a7a159943","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.61","comment":"https://x.com/skocherhan/status/1945337155301064783","timestamp":"1752639495","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"3fe1598f-9876-56a9-b973-a0175d8f4d65","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.61","comment":"https://x.com/skocherhan/status/1945337155301064783","timestamp":"1752639495","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"b62869ae-ee66-5b09-b419-7a49971cb700","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.41","comment":"https://x.com/skocherhan/status/1945340792609894718","timestamp":"1752640362","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"54ee23b1-0748-5e0c-b114-1c0fb123106f","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.41","comment":"https://x.com/skocherhan/status/1945340792609894718","timestamp":"1752640362","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"50c0161b-3ff8-50f4-8aba-8355359154bf","type":"domain","category":"Network activity","to_ids":true,"value":"vietnam24hvoyage.com","comment":"https://x.com/skocherhan/status/1945340792609894718","timestamp":"1752640362","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"c3827f43-e07a-5931-8ae3-ad4fa9fc6d1f","type":"url","category":"Network activity","to_ids":true,"value":"http://vietnam24hvoyage.com","comment":"https://x.com/skocherhan/status/1945340792609894718","timestamp":"1752640362","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"24958285-63da-579f-b3c4-67f6bbd53b2a","type":"url","category":"Network activity","to_ids":true,"value":"http://94.158.244.165","comment":"https://x.com/skocherhan/status/1945343736239558712","timestamp":"1752641064","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"15924cb4-fd85-51d7-8cc0-db4ac3e53d3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.158.244.165","comment":"https://x.com/skocherhan/status/1945343736239558712","timestamp":"1752641064","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"63641bde-a936-51f5-8404-8ddcb3e809d6","type":"md5","category":"Payload delivery","to_ids":true,"value":"6a4950552fce755212abe5698b3df290","comment":"https://x.com/skocherhan/status/1945343736239558712","timestamp":"1752641064","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"f834d1e3-cb8b-562b-9f84-7bc2caa17371","type":"domain","category":"Network activity","to_ids":true,"value":"kabarbhayangkara.com","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"62ea7ced-b8ae-56c3-bf50-1f7257e95de4","type":"domain","category":"Network activity","to_ids":true,"value":"motelorquideareal.com","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"03170d70-1c13-5022-a1c6-c9e55033e5bf","type":"url","category":"Network activity","to_ids":true,"value":"http://kabarbhayangkara.com","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"feece7e4-4ebe-5e48-b615-67bc492a0b8f","type":"url","category":"Network activity","to_ids":true,"value":"http://146.70.100.114","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"cad55bb6-9cfc-5994-b835-09d76ebbcc81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.70.100.114","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"c3d45819-94a6-510c-8a00-e0c40934e4f6","type":"url","category":"Network activity","to_ids":true,"value":"http://motelorquideareal.com","comment":"https://x.com/skocherhan/status/1945344146950017066","timestamp":"1752641162","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"7c46e9d3-1072-5dc3-83b6-3aee3ab77e29","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.47.72","comment":"https://x.com/skocherhan/status/1945345276266295784","timestamp":"1752641431","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"884a39b3-e245-5d72-ab51-efd9ab0d2357","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.47.72","comment":"https://x.com/skocherhan/status/1945345276266295784","timestamp":"1752641431","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"70762ae3-cb1a-579c-a4ca-35f000e4cc56","type":"url","category":"Network activity","to_ids":true,"value":"http://146.168.34.244:1604","comment":"https://x.com/SarlackLab/status/1945347721839235217","timestamp":"1752642014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"34fc23db-f6df-5746-ba2b-b6c2551e5558","type":"domain","category":"Network activity","to_ids":true,"value":"myhoster123.zapto.org","comment":"https://x.com/SarlackLab/status/1945347721839235217","timestamp":"1752642014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e1a8c579-5a15-5da6-add7-87fddc13dbb7","type":"url","category":"Network activity","to_ids":true,"value":"http://myhoster123.zapto.org","comment":"https://x.com/SarlackLab/status/1945347721839235217","timestamp":"1752642014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"772733f2-1078-586e-a8b0-0ec8b9598aa6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.168.34.244","comment":"https://x.com/SarlackLab/status/1945347721839235217","timestamp":"1752642014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e5f188e8-1125-5a86-9a04-8adfb3578a9a","type":"url","category":"Network activity","to_ids":true,"value":"http://unanet-okta.com","comment":"https://x.com/skocherhan/status/1945351820072673728","timestamp":"1752642991","distribution":"5"},{"uuid":"e89b851f-7a32-514a-a8a6-c003328b12df","type":"domain","category":"Network activity","to_ids":true,"value":"unanet-okta.com","comment":"https://x.com/skocherhan/status/1945351820072673728","timestamp":"1752642991","distribution":"5"},{"uuid":"1f01d5a6-6f3d-5e10-86b8-fb86f3cdb337","type":"sha256","category":"Payload delivery","to_ids":true,"value":"51c93b900c298cf2c6fcaf85df3ce98ce2056bafff617d50bfbde696488da275","comment":"https://x.com/skocherhan/status/1945358064464396783","timestamp":"1752644480","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"8aacf2ab-a023-5ce8-a6dc-9945d22b9939","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.217.62.222","comment":"https://x.com/skocherhan/status/1945358064464396783","timestamp":"1752644480","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"67e8ab0a-41ac-5c4a-ae56-c1a98a4ad576","type":"domain","category":"Network activity","to_ids":true,"value":"myskyverifyaccount.weebly.com","comment":"https://x.com/urldna_bot/status/1945362789188489299","timestamp":"1752645606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b9a78f3a-89a2-52ca-bf59-b0effcd66c43","type":"url","category":"Network activity","to_ids":true,"value":"http://myskyverifyaccount.weebly.com","comment":"https://x.com/urldna_bot/status/1945362789188489299","timestamp":"1752645606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5c4ec3ea-6250-54bc-b1b2-01cfceaf6831","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-pessim.huywo.cn/netservice/login/","comment":"https://x.com/harugasumi/status/1945373247803154537","timestamp":"1752648100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f662e00b-d646-591c-b04d-06b6808ffd53","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-pessim.huywo.cn","comment":"https://x.com/harugasumi/status/1945373247803154537","timestamp":"1752648100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1f73621-d60b-5a0d-976a-2f9b31a95436","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.198.52.217","comment":"https://x.com/drb_ra/status/1945374243794956473","timestamp":"1752648337","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"7b866c44-8692-545c-b83a-7ba172940874","type":"url","category":"Network activity","to_ids":true,"value":"http://94.198.52.217:443","comment":"https://x.com/drb_ra/status/1945374243794956473","timestamp":"1752648337","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"21f1d8fa-07b7-5738-8310-801c39eb7e19","type":"url","category":"Network activity","to_ids":true,"value":"http://142.202.191.184:9999","comment":"https://x.com/drb_ra/status/1945374760856158456","timestamp":"1752648460","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f491160d-597c-5092-968a-2db2033915dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.202.191.184","comment":"https://x.com/drb_ra/status/1945374760856158456","timestamp":"1752648460","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"1c10e4dd-2b1e-527f-9343-f95311f4c56f","type":"url","category":"Network activity","to_ids":true,"value":"http://195.206.234.19:8808","comment":"https://x.com/drb_ra/status/1945374784163926523","timestamp":"1752648466","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"175a29cd-2130-57cf-b6fa-ffa794f1e3ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.206.234.19","comment":"https://x.com/drb_ra/status/1945374784163926523","timestamp":"1752648466","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b0da95c5-8508-5100-9af3-b8701fd0a0fd","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.114:2000","comment":"https://x.com/drb_ra/status/1945374804325892147","timestamp":"1752648471","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"1125a361-ee8c-56e6-931a-fc95bb016130","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.114","comment":"https://x.com/drb_ra/status/1945374804325892147","timestamp":"1752648471","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"db532235-f620-5a2e-b2fb-1d72543b77e1","type":"url","category":"Network activity","to_ids":true,"value":"http://13.41.224.200:8808","comment":"https://x.com/drb_ra/status/1945374827239346408","timestamp":"1752648476","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"051e202e-38df-50a2-9c05-cb1488a0cf9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.41.224.200","comment":"https://x.com/drb_ra/status/1945374827239346408","timestamp":"1752648476","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9a5149ee-3405-5da6-880a-f33b0675aa6e","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.129.217:465","comment":"https://x.com/drb_ra/status/1945374847711789145","timestamp":"1752648481","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c7dcaccc-0083-502c-9a34-898b72a6d6e1","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.129.217:25","comment":"https://x.com/drb_ra/status/1945374870365184284","timestamp":"1752648487","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"268dc7f3-b013-5e47-83e5-7949432cb940","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.129.217:587","comment":"https://x.com/drb_ra/status/1945374885481467948","timestamp":"1752648490","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8f1e705d-8b04-5275-8237-fb0597f16321","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.203.129.217","comment":"https://x.com/drb_ra/status/1945374885481467948","timestamp":"1752648490","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7d3b6e72-e1b3-504f-a5ed-dde57fdcd84e","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.226.98:443","comment":"https://x.com/drb_ra/status/1945374901134581904","timestamp":"1752648494","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8530d370-b739-51ff-96da-d58fe767bfef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.226.98","comment":"https://x.com/drb_ra/status/1945374901134581904","timestamp":"1752648494","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e60133af-b839-5b4a-b83a-35e88ff1f23f","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.14.223:443","comment":"https://x.com/drb_ra/status/1945374921984516442","timestamp":"1752648499","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b42b4259-c457-5ca8-a07f-ac58f215ec4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"71.12.4.11","comment":"https://x.com/drb_ra/status/1945374942872113364","timestamp":"1752648504","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6f574f83-46e0-55d5-9ccd-dd8f03bd8b31","type":"url","category":"Network activity","to_ids":true,"value":"http://71.12.4.11:443","comment":"https://x.com/drb_ra/status/1945374942872113364","timestamp":"1752648504","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"ce4efdf2-42d8-5c9a-abce-de3378587250","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.202.242.77","comment":"https://x.com/drb_ra/status/1945374963608797518","timestamp":"1752648509","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"36fe0a67-8e3b-59eb-92e3-5eca88058cf5","type":"url","category":"Network activity","to_ids":true,"value":"http://18.202.242.77:445","comment":"https://x.com/drb_ra/status/1945374963608797518","timestamp":"1752648509","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"36f22b68-ace2-5fdf-adaa-3e6d68cf3177","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.167.30:443","comment":"https://x.com/drb_ra/status/1945374985129693640","timestamp":"1752648514","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5b8fc769-b021-5683-9ad4-eb2a41092456","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.167.30","comment":"https://x.com/drb_ra/status/1945374985129693640","timestamp":"1752648514","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"430f8e5d-cfde-51fa-85a5-cfded322381c","type":"url","category":"Network activity","to_ids":true,"value":"http://34.99.229.14:443","comment":"https://x.com/drb_ra/status/1945375009108631693","timestamp":"1752648520","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fd4c91c5-7ca2-5f94-82c2-93fa41ed49e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.64.20.31","comment":"https://x.com/drb_ra/status/1945375032990929219","timestamp":"1752648525","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6c668bef-709e-513a-a85b-2f1a75312942","type":"url","category":"Network activity","to_ids":true,"value":"http://16.64.20.31:443","comment":"https://x.com/drb_ra/status/1945375032990929219","timestamp":"1752648525","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"bed08717-7ed5-5c68-966a-c1c1fe92f1db","type":"url","category":"Network activity","to_ids":true,"value":"http://18.253.82.42:443","comment":"https://x.com/drb_ra/status/1945375053593424291","timestamp":"1752648530","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"dbf8f88c-88ae-57a8-aa4d-49abac33096d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.253.82.42","comment":"https://x.com/drb_ra/status/1945375053593424291","timestamp":"1752648530","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"d23602f4-7210-5271-b86a-31ffe399b9ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.75.234.48","comment":"https://x.com/drb_ra/status/1945375071326875967","timestamp":"1752648534","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"db8c86e7-d781-5228-a0b9-d8c05fca067d","type":"url","category":"Network activity","to_ids":true,"value":"http://101.75.234.48:4506","comment":"https://x.com/drb_ra/status/1945375071326875967","timestamp":"1752648534","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c9af26fd-505b-587e-88be-7325eb78152c","type":"url","category":"Network activity","to_ids":true,"value":"http://194.102.175.170:7443","comment":"https://x.com/drb_ra/status/1945375090733949075","timestamp":"1752648539","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"35f5ad1f-e700-5bde-8b5c-882ec0641d5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.102.175.170","comment":"https://x.com/drb_ra/status/1945375090733949075","timestamp":"1752648539","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c58ed5c0-6c13-5b02-8cc7-a0cdcf18705d","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.254.223:7443","comment":"https://x.com/drb_ra/status/1945375106441544055","timestamp":"1752648543","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0cc6387f-b075-52c8-95b9-c3f3df5807f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.254.223","comment":"https://x.com/drb_ra/status/1945375106441544055","timestamp":"1752648543","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"09ee08a3-716c-53e9-b74a-a47d46c1f456","type":"url","category":"Network activity","to_ids":true,"value":"http://152.42.233.8:7443","comment":"https://x.com/drb_ra/status/1945375127907995902","timestamp":"1752648548","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"4fab8560-e6bd-58e9-a75f-5fd92d93f708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.42.233.8","comment":"https://x.com/drb_ra/status/1945375127907995902","timestamp":"1752648548","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0355c908-941c-5859-b73f-68853c23e852","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.129.32.152","comment":"https://x.com/drb_ra/status/1945375644801544371","timestamp":"1752648671","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"136d8c25-b24d-5095-8d5c-453da33b610a","type":"url","category":"Network activity","to_ids":true,"value":"http://139.129.32.152:8443","comment":"https://x.com/drb_ra/status/1945375644801544371","timestamp":"1752648671","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3192a8f8-b55a-5fd4-85e9-79856a1f6f74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.163.156.16","comment":"https://x.com/drb_ra/status/1945375666175619257","timestamp":"1752648676","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"ca72f972-86c6-5b21-b3c9-e2f3d00ff050","type":"url","category":"Network activity","to_ids":true,"value":"http://104.163.156.16:8888","comment":"https://x.com/drb_ra/status/1945375666175619257","timestamp":"1752648676","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"a58f77f5-378c-5bf9-93d4-55f352c4a019","type":"url","category":"Network activity","to_ids":true,"value":"http://24.9.117.208:8080","comment":"https://x.com/drb_ra/status/1945375688694833237","timestamp":"1752648682","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"caa57cbe-392f-550f-810a-3afb85c43e16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.9.117.208","comment":"https://x.com/drb_ra/status/1945375688694833237","timestamp":"1752648682","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"f6e4cdbf-ad5a-54bc-9b73-27be3c1c5f4e","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.66.31:2404","comment":"https://x.com/drb_ra/status/1945375708382990607","timestamp":"1752648686","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d84365a5-93f9-5fce-a16e-268145471892","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.66.31","comment":"https://x.com/drb_ra/status/1945375708382990607","timestamp":"1752648686","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f4971be0-4ff2-5e80-bfa2-856fbd8f5e73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.66.195","comment":"https://x.com/drb_ra/status/1945375723314647538","timestamp":"1752648690","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d3182804-c202-5194-bc96-b63576a0e6e9","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.66.195:2404","comment":"https://x.com/drb_ra/status/1945375723314647538","timestamp":"1752648690","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4a394246-3f9d-59c8-88cc-d981d04a4a77","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.234:2404","comment":"https://x.com/drb_ra/status/1945375748333678742","timestamp":"1752648696","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"dec997fe-0ce6-5be1-92cb-cbfee37d4098","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.234","comment":"https://x.com/drb_ra/status/1945375748333678742","timestamp":"1752648696","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"db6efdc2-f587-5968-80b2-de90b27206ea","type":"url","category":"Network activity","to_ids":true,"value":"http://182.92.159.149:3232","comment":"https://x.com/drb_ra/status/1945375769636512064","timestamp":"1752648701","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"ca0d9fb0-a0dd-5719-ace4-f4c55281314e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.92.159.149","comment":"https://x.com/drb_ra/status/1945375769636512064","timestamp":"1752648701","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"d2acb3c8-9e0f-568d-91c7-3aeb075a98d1","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.54.48:3232","comment":"https://x.com/drb_ra/status/1945375790859694421","timestamp":"1752648706","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"6e09a1aa-6a97-508e-bcf0-b5f48ec8f2b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.54.48","comment":"https://x.com/drb_ra/status/1945375790859694421","timestamp":"1752648706","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"626cb677-7413-5e66-9fb6-78cd0e268a54","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.186.229:20201","comment":"https://x.com/drb_ra/status/1945375812158394837","timestamp":"1752648711","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"57061546-0647-5f87-ab66-f15731396db2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.186.229","comment":"https://x.com/drb_ra/status/1945375812158394837","timestamp":"1752648711","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8d2d268e-fb18-5a56-b4fb-6f4401fb76b0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.215.245.94:4433","comment":"https://x.com/drb_ra/status/1945375833364758578","timestamp":"1752648716","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a6f3bccc-56ab-5710-80f8-600adaba1955","type":"url","category":"Network activity","to_ids":true,"value":"http://54.215.245.94:2083","comment":"https://x.com/drb_ra/status/1945375854533493149","timestamp":"1752648721","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"00be6b91-4d98-52ec-9319-7e1cb1c391d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.215.245.94","comment":"https://x.com/drb_ra/status/1945375854533493149","timestamp":"1752648721","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8c516f69-0f79-57b8-98c9-b83b3086de3f","type":"url","category":"Network activity","to_ids":true,"value":"http://18.61.159.31:2262","comment":"https://x.com/drb_ra/status/1945375876100550712","timestamp":"1752648726","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3bd2c250-cab8-50bc-a2a2-7fab32de4020","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.61.159.31","comment":"https://x.com/drb_ra/status/1945375876100550712","timestamp":"1752648726","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a86c53d1-08d3-5a30-b498-8306abb7d5e5","type":"domain","category":"Network activity","to_ids":true,"value":"777cp09.cc","comment":"https://x.com/romonlyht/status/1945377131854434559","timestamp":"1752649026","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33dccd3b-93bb-5593-a8b3-5e55e528b10e","type":"url","category":"Network activity","to_ids":true,"value":"https://777cp09.cc/sbisec.co.jp","comment":"https://x.com/romonlyht/status/1945377131854434559","timestamp":"1752649026","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"10a5e75b-8b8c-5c3a-945e-85e987067736","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.19.80.139","comment":"https://x.com/romonlyht/status/1945377131854434559","timestamp":"1752649026","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f6844290-ef89-5064-8a43-56fec73fd723","type":"url","category":"Network activity","to_ids":true,"value":"https://cnazuv.webwave.dev","comment":"https://x.com/yvesago/status/1945377632096325922","timestamp":"1752649145","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5a784432-5f50-55e9-ad80-90e92840b5ea","type":"domain","category":"Network activity","to_ids":true,"value":"cnazuv.webwave.dev","comment":"https://x.com/yvesago/status/1945377632096325922","timestamp":"1752649145","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba6516f0-bcbe-5689-a759-85428d495828","type":"url","category":"Network activity","to_ids":true,"value":"https://em3qpg.webwave.dev","comment":"https://x.com/yvesago/status/1945378658207563941","timestamp":"1752649390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddd65d5c-f6bb-59eb-a96b-7c3c3b1d7f96","type":"domain","category":"Network activity","to_ids":true,"value":"em3qpg.webwave.dev","comment":"https://x.com/yvesago/status/1945378658207563941","timestamp":"1752649390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03e52459-3dcf-5793-a46d-94826714f530","type":"url","category":"Network activity","to_ids":true,"value":"https://dmejl8.webwave.dev","comment":"https://x.com/yvesago/status/1945380433933316377","timestamp":"1752649813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54a56ac9-8274-5689-9a8b-88d1d63f0b29","type":"domain","category":"Network activity","to_ids":true,"value":"dmejl8.webwave.dev","comment":"https://x.com/yvesago/status/1945380433933316377","timestamp":"1752649813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cf0f19f-53d1-5a96-a08d-29aac5d3ddc8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.100.157.217","comment":"https://x.com/Fact_Finder03/status/1945384472087773319","timestamp":"1752650776","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"d4bb8f87-4b05-57fe-a3ee-fc0e01c82c61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.83.253.202","comment":"https://x.com/Fact_Finder03/status/1945390504939835790","timestamp":"1752652214","distribution":"5"},{"uuid":"88c2e1d5-15ca-5cfe-aebb-a64de6830d6f","type":"url","category":"Network activity","to_ids":true,"value":"https://64.112.124.86:443","comment":"https://x.com/drb_ra/status/1945403713528475739","timestamp":"1752655363","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"eda94025-cdf5-5160-a837-31472fab02bd","type":"url","category":"Network activity","to_ids":true,"value":"http://64.112.124.86:443","comment":"https://x.com/drb_ra/status/1945403713528475739","timestamp":"1752655363","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"07604eaa-4780-5424-b6fd-76792de29b82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.112.124.86","comment":"https://x.com/drb_ra/status/1945403713528475739","timestamp":"1752655363","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"af92f3f5-f912-5d7d-831c-9aabd2ea761e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.79.53.66","comment":"https://x.com/drb_ra/status/1945403736530063614","timestamp":"1752655369","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"022f1449-f2ca-50dc-9252-a9859b7ce66c","type":"url","category":"Network activity","to_ids":true,"value":"http://151.79.53.66:443","comment":"https://x.com/drb_ra/status/1945403736530063614","timestamp":"1752655369","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fc040966-a7bb-5106-9d76-db633195c54e","type":"url","category":"Network activity","to_ids":true,"value":"https://151.79.53.66:443","comment":"https://x.com/drb_ra/status/1945403736530063614","timestamp":"1752655369","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7d65bd05-c073-5580-9a3e-866731ba62ca","type":"url","category":"Network activity","to_ids":true,"value":"https://www.wgetfiles.com/f/cj.exe","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"ccee031e-0290-5784-ba77-c5f6d577f24e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.207.148.168","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"ca8dfeaf-6bb1-56c7-a9d2-772a3a39b124","type":"md5","category":"Payload delivery","to_ids":true,"value":"77e83f759e3c3eb6cda2279a592cc880","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"b5989535-2d77-56a9-bfc1-39fd66f7fe26","type":"md5","category":"Payload delivery","to_ids":true,"value":"de75733b488852e0c14bf913c71cca01","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"8926adc3-6c10-5710-a9fd-e9aee9e99b89","type":"domain","category":"Network activity","to_ids":true,"value":"retirify.sbs","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"32ceccd7-2da9-5812-83d4-13b256c81d86","type":"url","category":"Network activity","to_ids":true,"value":"https://www.retirify.sbs/quote.html","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"ebfb5b61-4c19-53ef-b64c-898d13774076","type":"domain","category":"Network activity","to_ids":true,"value":"wgetfiles.com","comment":"https://x.com/skocherhan/status/1945419666563739792","timestamp":"1752659167","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"b64cc0b1-73fb-5221-8788-ce7b071d460f","type":"domain","category":"Network activity","to_ids":true,"value":"sbisec-co.qiaorang.com","comment":"https://x.com/harugasumi/status/1945421163414638649","timestamp":"1752659524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25567779-0067-53ef-b818-6fb473740eb0","type":"url","category":"Network activity","to_ids":true,"value":"https://sbisec-co.qiaorang.com/ETGate/?ETGate=M9zpgpjBs8tXfb4k6P9bOVQA","comment":"https://x.com/harugasumi/status/1945421163414638649","timestamp":"1752659524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c788df90-6a70-582c-8ee2-df81149aff84","type":"url","category":"Network activity","to_ids":true,"value":"http://si.team-mks.cc","comment":"https://x.com/urldna_bot/status/1945423188470403384","timestamp":"1752660007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e0416c66-dc4a-58b0-b1c7-30bfbd815570","type":"domain","category":"Network activity","to_ids":true,"value":"si.team-mks.cc","comment":"https://x.com/urldna_bot/status/1945423188470403384","timestamp":"1752660007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a9bd4363-09e9-5b74-beda-dcb5e9dccbf3","type":"domain","category":"Network activity","to_ids":true,"value":"nmxc2z.top","comment":"https://x.com/harugasumi/status/1945425716067422650","timestamp":"1752660609","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc1f9913-50ab-59e5-b8ec-88de0e51c775","type":"url","category":"Network activity","to_ids":true,"value":"https://nmxc2z.top/W0lBfYXZ","comment":"https://x.com/harugasumi/status/1945425716067422650","timestamp":"1752660609","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3add39e9-de6c-5a4b-a4c4-b166e570cf80","type":"domain","category":"Network activity","to_ids":true,"value":"c0bzty.top","comment":"https://x.com/harugasumi/status/1945426447025451253","timestamp":"1752660783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb06962f-5880-548b-b117-64a560ae2b3b","type":"url","category":"Network activity","to_ids":true,"value":"https://zct95l.top/W0lBfYXZ","comment":"https://x.com/harugasumi/status/1945426447025451253","timestamp":"1752660783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"16cdbb87-d9b7-54f1-a189-22c1ca6a519a","type":"domain","category":"Network activity","to_ids":true,"value":"zct95l.top","comment":"https://x.com/harugasumi/status/1945426447025451253","timestamp":"1752660783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb72effb-a6f9-59a5-9a90-5dbf29992746","type":"url","category":"Network activity","to_ids":true,"value":"https://c0bzty.top/W0lBfYXZ","comment":"https://x.com/harugasumi/status/1945426447025451253","timestamp":"1752660783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3379a1c4-32e4-5c4d-836e-d651f1018c75","type":"url","category":"Network activity","to_ids":true,"value":"https://renewalserviceplatform.com/managehosting/pagamento.php?Autorizzazione#42050330","comment":"https://x.com/JAMESWT_WT/status/1945438419577975207","timestamp":"1752663638","distribution":"5"},{"uuid":"de303ddf-11c6-598f-9f39-0a1ae7308b50","type":"domain","category":"Network activity","to_ids":true,"value":"renewalserviceplatform.com","comment":"https://x.com/JAMESWT_WT/status/1945438419577975207","timestamp":"1752663638","distribution":"5"},{"uuid":"aee1cb41-f8c6-5bd0-9c2e-a40caa289a19","type":"domain","category":"Network activity","to_ids":true,"value":"isnimitz.com","comment":"https://x.com/skocherhan/status/1945439445949276394","timestamp":"1752663883","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"e1aa6558-56a4-50cc-9765-1e770d1bfafc","type":"url","category":"Network activity","to_ids":true,"value":"https://isnimitz.com/zxc/app","comment":"https://x.com/skocherhan/status/1945439445949276394","timestamp":"1752663883","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"46611b1c-16b1-563d-bbcf-8cbcaa5f0d0a","type":"domain","category":"Network activity","to_ids":true,"value":"stanprinston.com","comment":"https://x.com/skocherhan/status/1945439445949276394","timestamp":"1752663883","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"85e33df1-e9d1-5d10-940b-172067bb96d1","type":"url","category":"Network activity","to_ids":true,"value":"https://stanprinston.com/zxc/app.zip","comment":"https://x.com/skocherhan/status/1945439445949276394","timestamp":"1752663883","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"a7f489eb-1e40-5ba9-ad87-30d609fb025e","type":"url","category":"Network activity","to_ids":true,"value":"https://isnimitz.com/zxc/app.zip","comment":"https://x.com/skocherhan/status/1945439445949276394","timestamp":"1752663883","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3b114aa7-58d2-5b68-bdd7-9f4e1768437d","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.98.11:8082","comment":"https://x.com/drb_ra/status/1945440672422461823","timestamp":"1752664175","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ecd92c1d-2529-58e0-8356-51bf6cb0cf14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.24.241.109","comment":"https://x.com/drb_ra/status/1945440694278959559","timestamp":"1752664180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"54d92c0f-ef8b-550b-aed1-ff848ef8aedd","type":"url","category":"Network activity","to_ids":true,"value":"http://120.24.241.109:6001","comment":"https://x.com/drb_ra/status/1945440694278959559","timestamp":"1752664180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c599d90b-ecc8-5892-be43-2d9d2baddffe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.26.98.190","comment":"https://x.com/drb_ra/status/1945440694278959559","timestamp":"1752664180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"26d9e0a5-2df1-5e14-8d67-bdd2cb39ffbf","type":"url","category":"Network activity","to_ids":true,"value":"http://82.202.173.167:1025","comment":"https://x.com/drb_ra/status/1945442728927481941","timestamp":"1752664665","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"153d07a0-993d-5f71-ac4b-6e7602f4e149","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.202.173.167","comment":"https://x.com/drb_ra/status/1945442728927481941","timestamp":"1752664665","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f039544-a610-580b-9ec4-deeb96c9ae35","type":"domain","category":"Network activity","to_ids":true,"value":"vhs.vivo.com.cn","comment":"https://x.com/drb_ra/status/1945443246013882724","timestamp":"1752664789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7ab17805-3111-543e-b865-1241d7deaf30","type":"url","category":"Network activity","to_ids":true,"value":"https://vhs.vivo.com.cn/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1945443246013882724","timestamp":"1752664789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fb5304ca-d557-5056-a14c-a8f1572155e8","type":"domain","category":"Network activity","to_ids":true,"value":"jzhcs.lenovo.com.cn","comment":"https://x.com/drb_ra/status/1945443262686171461","timestamp":"1752664793","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2a760c0a-df28-532a-a19e-087317240b5f","type":"url","category":"Network activity","to_ids":true,"value":"https://jzhcs.lenovo.com.cn/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1945443262686171461","timestamp":"1752664793","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a160e4fb-a3bb-5fc1-97b9-811ca17ac8c2","type":"domain","category":"Network activity","to_ids":true,"value":"dji.com","comment":"https://x.com/drb_ra/status/1945443283347325192","timestamp":"1752664797","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"83f27c14-b996-5838-945f-5040d33ed40d","type":"url","category":"Network activity","to_ids":true,"value":"https://www.dji.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1945443283347325192","timestamp":"1752664797","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f043c3b8-6113-53c6-84b8-5d632d6aabdb","type":"url","category":"Network activity","to_ids":true,"value":"https://static.dingtalk.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1945443304834777584","timestamp":"1752664803","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f28cb84a-d9e5-53ee-be3f-14925241ac3a","type":"domain","category":"Network activity","to_ids":true,"value":"static.dingtalk.com","comment":"https://x.com/drb_ra/status/1945443304834777584","timestamp":"1752664803","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"609dfb91-cc89-5142-9ae4-2ba51ff2d45e","type":"url","category":"Network activity","to_ids":true,"value":"http://120.79.64.164:443","comment":"https://x.com/drb_ra/status/1945443324367679657","timestamp":"1752664807","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5e27eef8-aae9-5661-869c-ced5403fabf5","type":"url","category":"Network activity","to_ids":true,"value":"https://www.163.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1945443324367679657","timestamp":"1752664807","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc86a0ef-2638-54a2-b933-1001cf270fc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.79.64.164","comment":"https://x.com/drb_ra/status/1945443324367679657","timestamp":"1752664807","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ddb0d07c-952a-5b41-8f28-aedef4ef12f6","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8080","comment":"https://x.com/drb_ra/status/1945443350015873296","timestamp":"1752664813","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1945443350015873296","timestamp":"1752664813","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b129902-237e-5403-90b7-81dabc9c1243","type":"url","category":"Network activity","to_ids":true,"value":"https://isngzrsa.icu/D0pX.jp","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"27d3acc5-57ce-5179-94f3-b14f9aa2f96f","type":"domain","category":"Network activity","to_ids":true,"value":"isngzrsa.icu","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"831cca71-a769-5ca4-89d3-047eccd75d2d","type":"url","category":"Network activity","to_ids":true,"value":"https://centsbicloud.bond","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a8504f0-4766-5c7e-945b-6db88d869adf","type":"domain","category":"Network activity","to_ids":true,"value":"fjdycdn.com","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a4954d1-a9b3-57a4-bd90-1b3d3928c5a7","type":"url","category":"Network activity","to_ids":true,"value":"https://fjdycdn.com/D0pX.jp","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f36f8fc-72de-50c2-b476-892306ec45d2","type":"domain","category":"Network activity","to_ids":true,"value":"centsbicloud.bond","comment":"https://x.com/harugasumi/status/1945447960705466675","timestamp":"1752665913","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6501ec3d-90af-5f17-8cdc-48d8be7f5c1f","type":"domain","category":"Network activity","to_ids":true,"value":"bafybeibydkf55yygjnvwhw3qjczx3j65byqjp3giw42mqa3e7xbzsncf5y.ipfs.w3s.link","comment":"https://x.com/urldna_bot/status/1945453394409279737","timestamp":"1752667208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d9de2875-86c7-5e8f-9086-b26f74ed77eb","type":"url","category":"Network activity","to_ids":true,"value":"http://bafybeibydkf55yygjnvwhw3qjczx3j65byqjp3giw42mqa3e7xbzsncf5y.ipfs.w3s.link/never3.htm","comment":"https://x.com/urldna_bot/status/1945453394409279737","timestamp":"1752667208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"38d7b883-4c61-5d07-880f-e0502c3f68fe","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.29:63503","comment":"https://x.com/SarlackLab/status/1945453435563679958","timestamp":"1752667218","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c9bf6445-9f05-5e1f-b027-19ebc27ce913","type":"domain","category":"Network activity","to_ids":true,"value":"engineering-affair.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1945453435563679958","timestamp":"1752667218","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"8e6b340a-ac9a-5ffc-8e23-a568a3bfc09e","type":"url","category":"Network activity","to_ids":true,"value":"http://engineering-affair.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1945453435563679958","timestamp":"1752667218","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"4af28799-339e-5232-8bf6-fbf24f78734c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.29","comment":"https://x.com/SarlackLab/status/1945453435563679958","timestamp":"1752667218","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"751a9ffc-1242-5006-9324-fba04be788fb","type":"domain","category":"Network activity","to_ids":true,"value":"rtoup-6391356-metaflux-xytrmnwl-246.libreconocimiento.com","comment":"https://x.com/netonightmare/status/1945453674861302156","timestamp":"1752667275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"736b6818-2842-5bca-bbec-692dfbbf761c","type":"url","category":"Network activity","to_ids":true,"value":"http://rtoup-6391356-metaflux-xytrmnwl-246.libreconocimiento.com","comment":"https://x.com/netonightmare/status/1945453674861302156","timestamp":"1752667275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f596757-0996-538e-9395-d9b3648b7a3e","type":"domain","category":"Network activity","to_ids":true,"value":"login-mahsdgtyu-0928376-micro-jkaisurty.cashflowinnercircle.biz","comment":"https://x.com/netonightmare/status/1945453674861302156","timestamp":"1752667275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ef3d874-a365-5a0a-8bda-efd6c6d3fbf7","type":"url","category":"Network activity","to_ids":true,"value":"http://login-mahsdgtyu-0928376-micro-jkaisurty.cashflowinnercircle.biz","comment":"https://x.com/netonightmare/status/1945453674861302156","timestamp":"1752667275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39139030-0427-572e-9df2-a7e5c7ad7ea7","type":"md5","category":"Payload delivery","to_ids":true,"value":"904d94c8674127160a73251e724090fd","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"645c90f3-0e26-5686-8b7f-96f56120d290","type":"md5","category":"Payload delivery","to_ids":true,"value":"d8ef1c141547618c7bedb4de5318f27e","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"65efacd4-5d58-58d7-a293-f887c8eee3ce","type":"md5","category":"Payload delivery","to_ids":true,"value":"f6b7d518610e5e8b63cbb3d7838f9503","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"9893e8a8-2b48-51ff-b107-5a1e92b53989","type":"md5","category":"Payload delivery","to_ids":true,"value":"f5b43a47c4b823399252f6858541967d","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"e628129a-8c79-515a-87d9-9068ba305a94","type":"md5","category":"Payload delivery","to_ids":true,"value":"2f2c4c262fd0f471294d3b3c74c3b756","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"ec24fec0-d7b6-5ce9-b9af-88a3af2c6c12","type":"md5","category":"Payload delivery","to_ids":true,"value":"3a91d43cb884a63a021c7a6a828ba183","comment":"https://x.com/suyog41/status/1945456197605462207","timestamp":"1752667876","distribution":"5"},{"uuid":"da0bb2f1-7418-5d09-bff3-ecf2c0bfb30d","type":"md5","category":"Payload delivery","to_ids":true,"value":"f5b54d853f9dc795313ca5dde0f55f8b","comment":"https://x.com/skocherhan/status/1945459831126503491","timestamp":"1752668743","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"6438f399-b5b7-5be1-9341-0bd1ff8eeedd","type":"url","category":"Network activity","to_ids":true,"value":"https://172.236.108.48","comment":"https://x.com/ShadowOpCode/status/1945465068390396306","timestamp":"1752669991","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0668768c-115e-5eed-9170-faed319f7771","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.236.108.48","comment":"https://x.com/ShadowOpCode/status/1945465068390396306","timestamp":"1752669991","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"c19ec135-517b-587b-914d-02b34b9efe7e","type":"domain","category":"Network activity","to_ids":true,"value":"bba744.com","comment":"https://x.com/harugasumi/status/1945472430409138435","timestamp":"1752671747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c0a5ba0-c51a-5933-8886-b50a0a6ddc5d","type":"url","category":"Network activity","to_ids":true,"value":"https://bba744.com","comment":"https://x.com/harugasumi/status/1945472430409138435","timestamp":"1752671747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff3dfc78-f6fd-5a78-a2f9-6c98d4186634","type":"md5","category":"Payload delivery","to_ids":true,"value":"2a3d999c5c18be2e6b7c3ce1470c4519","comment":"https://x.com/PrakkiSathwik/status/1945481958198534366","timestamp":"1752674018","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"c2892d35-dac2-5dec-ba78-17b85182ddea","type":"md5","category":"Payload delivery","to_ids":true,"value":"9efa3c4f70e1060d4162e46eeae7fd33","comment":"https://x.com/PrakkiSathwik/status/1945481958198534366","timestamp":"1752674018","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"d6c7d978-f53a-5997-b777-663ca0ce43da","type":"md5","category":"Payload delivery","to_ids":true,"value":"ac0c731c2970aa9b6893adbf9806527e","comment":"https://x.com/PrakkiSathwik/status/1945481958198534366","timestamp":"1752674018","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"69e99f8a-3fa6-5ae4-a13d-025a55b8c6d4","type":"domain","category":"Network activity","to_ids":true,"value":"lungrunipit.weebly.com","comment":"https://x.com/urldna_bot/status/1945483588331270496","timestamp":"1752674407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"56343c77-e958-5529-9709-dc1e08a574e7","type":"url","category":"Network activity","to_ids":true,"value":"https://lungrunipit.weebly.com","comment":"https://x.com/urldna_bot/status/1945483588331270496","timestamp":"1752674407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b0cd2cd2-b3be-5aaa-97c7-70dec01b4b27","type":"domain","category":"Network activity","to_ids":true,"value":"uniquecroco.site","comment":"https://x.com/skocherhan/status/1945491644981055947","timestamp":"1752676328","distribution":"5"},{"uuid":"68d2ea18-eeec-5c82-ba22-a60fddd6cd06","type":"url","category":"Network activity","to_ids":true,"value":"http://uniquecroco.site","comment":"https://x.com/skocherhan/status/1945491644981055947","timestamp":"1752676328","distribution":"5"},{"uuid":"6f21e219-570b-5085-9c01-296f59521743","type":"domain","category":"Network activity","to_ids":true,"value":"smackincieracjp.cfd","comment":"https://x.com/harugasumi/status/1945495214979940819","timestamp":"1752677179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"524ae056-6aaf-57bd-8b83-1288ffaf8b72","type":"url","category":"Network activity","to_ids":true,"value":"https://smackincieracjp.cfd/s1VuSF","comment":"https://x.com/harugasumi/status/1945495214979940819","timestamp":"1752677179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"63371dda-0db4-5f15-b843-6c9ed8516f9c","type":"domain","category":"Network activity","to_ids":true,"value":"saisoncard-egyr.nnkrbd.cn","comment":"https://x.com/harugasumi/status/1945496538631012697","timestamp":"1752677495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe50d66f-feac-5031-a60b-a8929b0a9133","type":"url","category":"Network activity","to_ids":true,"value":"https://saisoncard-egyr.nnkrbd.cn/screen/na/authorize/","comment":"https://x.com/harugasumi/status/1945496538631012697","timestamp":"1752677495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a18c420d-0394-5e0e-b758-79aef59d0a95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.148.91","comment":"https://x.com/CatoCTRL/status/1945498084114403527","timestamp":"1752677863","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"b3e96945-0414-571c-a5bc-eb011d6d27bb","type":"domain","category":"Network activity","to_ids":true,"value":"hkllm.weebly.com","comment":"https://x.com/urldna_bot/status/1945513783520096426","timestamp":"1752681606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0642347a-7694-5735-8953-094572812540","type":"url","category":"Network activity","to_ids":true,"value":"https://hkllm.weebly.com","comment":"https://x.com/urldna_bot/status/1945513783520096426","timestamp":"1752681606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8bd4f9ca-feec-5ef6-96dc-38b28936ff54","type":"sha256","category":"Payload delivery","to_ids":true,"value":"effd19ed4589151ca9774129f511f423b03e70af86f5c39fecbe825b8f6eb54c","comment":"https://x.com/cyb3rops/status/1945519671286935764","timestamp":"1752683010","distribution":"5"},{"uuid":"1b3fea6c-900b-54be-bc16-d39ab944a73b","type":"domain","category":"Network activity","to_ids":true,"value":"bdgov.info","comment":"https://x.com/skocherhan/status/1945535576008011971","timestamp":"1752686802","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"a2c92256-4987-5323-8223-bc08119849c0","type":"url","category":"Network activity","to_ids":true,"value":"http://bdgov.info","comment":"https://x.com/skocherhan/status/1945535576008011971","timestamp":"1752686802","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0f50ead3-02c2-5481-85db-d08db2970413","type":"domain","category":"Network activity","to_ids":true,"value":"afdinfo786.bdgov.info","comment":"https://x.com/skocherhan/status/1945535576008011971","timestamp":"1752686802","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0b352e80-63c3-5ffa-83bf-3ab4d8bc5105","type":"url","category":"Network activity","to_ids":true,"value":"http://afdinfo786.bdgov.info","comment":"https://x.com/skocherhan/status/1945535576008011971","timestamp":"1752686802","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"08fa9d52-3060-5360-9c82-cc9f19a4d3c4","type":"domain","category":"Network activity","to_ids":true,"value":"9ghavdyu7agyua.vercel.app","comment":"https://x.com/urldna_bot/status/1945543979660882001","timestamp":"1752688805","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8de2f7df-2709-5bac-ac12-fe645dc64c48","type":"url","category":"Network activity","to_ids":true,"value":"http://9ghavdyu7agyua.vercel.app","comment":"https://x.com/urldna_bot/status/1945543979660882001","timestamp":"1752688805","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e759ce9c-e693-578f-baef-07beb798c7ce","type":"url","category":"Network activity","to_ids":true,"value":"http://103.245.164.128:5552","comment":"https://x.com/SarlackLab/status/1945544028985995513","timestamp":"1752688817","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"b4bb24cc-2db9-51a1-8a7c-75352016fd66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.245.164.128","comment":"https://x.com/SarlackLab/status/1945544028985995513","timestamp":"1752688817","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"8d5c0d67-3465-5ae0-8b90-2be3be1cff90","type":"url","category":"Network activity","to_ids":true,"value":"http://75.2.81.90:443","comment":"https://x.com/drb_ra/status/1945555642061668527","timestamp":"1752691586","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"9e52b9c7-91ec-5011-86a9-8f5a8e7c9911","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.2.81.90","comment":"https://x.com/drb_ra/status/1945555642061668527","timestamp":"1752691586","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1e1ddc8f-8d25-571f-a67e-e665c78088fe","type":"url","category":"Network activity","to_ids":true,"value":"http://84.200.128.150:7443","comment":"https://x.com/drb_ra/status/1945555658985648264","timestamp":"1752691590","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"1c503f35-ca43-5532-bdb8-5386e3d20ea4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.200.128.150","comment":"https://x.com/drb_ra/status/1945555658985648264","timestamp":"1752691590","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"1c76f3ab-985e-5bf2-ba8a-a1081850aeeb","type":"url","category":"Network activity","to_ids":true,"value":"http://118.194.235.107:58443","comment":"https://x.com/drb_ra/status/1945555680162713793","timestamp":"1752691595","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"faed8c19-e58b-51bc-9a4d-1c0169024803","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.194.235.107","comment":"https://x.com/drb_ra/status/1945555680162713793","timestamp":"1752691595","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b34f06cf-2d00-55ba-b42a-0c6dc83c7b1d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.163.197:31337","comment":"https://x.com/drb_ra/status/1945555700744167845","timestamp":"1752691600","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3a45293c-5bb1-5bb4-b908-392688576532","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.163.197","comment":"https://x.com/drb_ra/status/1945555700744167845","timestamp":"1752691600","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8d0bf4a0-b71e-53f9-8eb1-6e4f62ea691f","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.103:2404","comment":"https://x.com/drb_ra/status/1945556218119889288","timestamp":"1752691723","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6f49e7c2-3828-5dea-a756-f82bea21778c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.103","comment":"https://x.com/drb_ra/status/1945556218119889288","timestamp":"1752691723","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ef9b6b09-5c94-5935-bbda-4131b3da2454","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.238:2404","comment":"https://x.com/drb_ra/status/1945556240605544758","timestamp":"1752691729","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dd4b6688-bde9-534c-8abd-78e98ba26fd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.238","comment":"https://x.com/drb_ra/status/1945556240605544758","timestamp":"1752691729","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8c28872c-0186-5522-930a-d0dcdfe68cc3","type":"url","category":"Network activity","to_ids":true,"value":"http://122.51.41.221:3232","comment":"https://x.com/drb_ra/status/1945556261803602083","timestamp":"1752691734","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"bbc01ee0-d838-5789-90c7-292349be9bfb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.51.41.221","comment":"https://x.com/drb_ra/status/1945556261803602083","timestamp":"1752691734","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"2e04074b-edc5-5c18-b650-050a28411994","type":"url","category":"Network activity","to_ids":true,"value":"http://13.38.81.62:11103","comment":"https://x.com/drb_ra/status/1945556282477359415","timestamp":"1752691739","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7fc42ccd-1d57-5d45-ac3b-d4765d92bfcb","type":"url","category":"Network activity","to_ids":true,"value":"http://13.38.81.62:5903","comment":"https://x.com/drb_ra/status/1945556304237314081","timestamp":"1752691744","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b661a29a-e700-5022-9464-529eac606575","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.38.81.62","comment":"https://x.com/drb_ra/status/1945556304237314081","timestamp":"1752691744","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c3edd724-85fc-53f9-989a-5678065bd18a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.6.4.197:443","comment":"https://x.com/drb_ra/status/1945556325301178685","timestamp":"1752691749","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"860d88f9-1427-5e2f-b9c2-049b2077e7e2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.6.4.197:80","comment":"https://x.com/drb_ra/status/1945556346289504711","timestamp":"1752691754","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d13b45ef-c49a-5b2d-8bbf-18e35ce2685a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.6.4.197:25","comment":"https://x.com/drb_ra/status/1945556368003362993","timestamp":"1752691759","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3c238ea7-669b-599f-8042-6600d1f609a9","type":"url","category":"Network activity","to_ids":true,"value":"http://51.15.224.47:80","comment":"https://x.com/drb_ra/status/1945556389603967403","timestamp":"1752691764","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"496b8dd0-2adf-5763-8985-0259c86ac57c","type":"url","category":"Network activity","to_ids":true,"value":"http://51.15.224.47:587","comment":"https://x.com/drb_ra/status/1945556411242455432","timestamp":"1752691769","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4590d05f-9175-5a36-965b-e59a48b8339e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.15.224.47","comment":"https://x.com/drb_ra/status/1945556411242455432","timestamp":"1752691769","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ec579f06-27b7-50be-908b-51898b2223f6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.240.178:443","comment":"https://x.com/drb_ra/status/1945556432872444245","timestamp":"1752691774","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"90f97fb1-2858-5a19-a223-bd9ca1ccb601","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.240.178","comment":"https://x.com/drb_ra/status/1945556432872444245","timestamp":"1752691774","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7fea48ca-363d-59d8-91f1-124a55ba8235","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.86.20:80","comment":"https://x.com/drb_ra/status/1945556454213058717","timestamp":"1752691780","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a90b6c16-9c5f-5a2d-ab18-1d5f06f7fef3","type":"url","category":"Network activity","to_ids":true,"value":"http://13.61.105.64:80","comment":"https://x.com/drb_ra/status/1945556476325446093","timestamp":"1752691785","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"44a457cb-a0aa-5e81-938d-63a626ba7246","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.61.105.64","comment":"https://x.com/drb_ra/status/1945556476325446093","timestamp":"1752691785","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"32e03eb3-196c-5284-a90b-4c951755ea53","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.124.135:443","comment":"https://x.com/drb_ra/status/1945556497791893677","timestamp":"1752691790","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d1129667-5862-5e9c-b3c9-15c873c78965","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.159.46:445","comment":"https://x.com/drb_ra/status/1945556519208014155","timestamp":"1752691795","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f044540a-2a20-55f8-95f9-d6fd78e98666","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.159.46","comment":"https://x.com/drb_ra/status/1945556519208014155","timestamp":"1752691795","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a0c05e15-9453-50e9-8f02-7c9763b1af90","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.48.155:443","comment":"https://x.com/drb_ra/status/1945556540963893521","timestamp":"1752691800","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5ba6ffd0-785a-59ee-8d1a-e6c3f57064aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.48.155","comment":"https://x.com/drb_ra/status/1945556540963893521","timestamp":"1752691800","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"fb4b7926-8cee-5d91-ba8f-ee4c6822a85f","type":"url","category":"Network activity","to_ids":true,"value":"http://13.42.107.253:8080","comment":"https://x.com/drb_ra/status/1945557058452861363","timestamp":"1752691924","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"ffa04d91-8a17-5af1-8dd5-8ddf62fa47e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.42.107.253","comment":"https://x.com/drb_ra/status/1945557058452861363","timestamp":"1752691924","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"85a924af-80ae-5cd6-9e67-11400f57b2e1","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.81.126:6000","comment":"https://x.com/drb_ra/status/1945557079525142600","timestamp":"1752691929","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"98c5b476-e5ec-5385-8517-ed3a4930f2ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.81.126","comment":"https://x.com/drb_ra/status/1945557079525142600","timestamp":"1752691929","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8bceb5d8-cf30-584f-a12c-d164c05c0ddb","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.214.106:443","comment":"https://x.com/drb_ra/status/1945557099649417239","timestamp":"1752691933","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9025a75b-03c1-508c-ab72-28d888cc7e7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.214.106","comment":"https://x.com/drb_ra/status/1945557099649417239","timestamp":"1752691933","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3e9ae764-3d3e-51c2-a7c3-11ed29709a55","type":"url","category":"Network activity","to_ids":true,"value":"http://sites.google.com/view/docusign-uae","comment":"https://x.com/skocherhan/status/1945568248830771459","timestamp":"1752694592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"da5db615-de5a-590e-bf06-0bca76e1a457","type":"domain","category":"Network activity","to_ids":true,"value":"attmail.boxmode.io","comment":"https://x.com/urldna_bot/status/1945574177706025316","timestamp":"1752696005","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"933e2df4-779f-5609-894a-0b30a07a179f","type":"url","category":"Network activity","to_ids":true,"value":"https://attmail.boxmode.io","comment":"https://x.com/urldna_bot/status/1945574177706025316","timestamp":"1752696005","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4140d5b5-8b18-5c80-9c16-dfce142cb81f","type":"url","category":"Network activity","to_ids":true,"value":"http://64.137.9.118","comment":"https://x.com/skocherhan/status/1945581335570973088","timestamp":"1752697712","distribution":"5"},{"uuid":"6d7fe959-0168-5cdb-a8eb-7e6f9c488a12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.137.9.118","comment":"https://x.com/skocherhan/status/1945581335570973088","timestamp":"1752697712","distribution":"5"},{"uuid":"3f3da74d-1e10-54e9-a23a-114051c2a421","type":"url","category":"Network activity","to_ids":true,"value":"http://103.245.164.128","comment":"https://x.com/threatquery/status/1945589269029962046","timestamp":"1752699603","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"},{"name":"malware"}]},{"uuid":"17c51685-87a5-51b4-a44d-02047dd668fe","type":"url","category":"Network activity","to_ids":true,"value":"http://109.172.55.110","comment":"https://x.com/threatquery/status/1945589267339579409","timestamp":"1752699603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4506d142-ca56-5a11-8bc7-5e993c4d5427","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.172.55.110","comment":"https://x.com/threatquery/status/1945589267339579409","timestamp":"1752699603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"e4e0cf69-169e-57f6-8656-a724a08f1ee6","type":"url","category":"Network activity","to_ids":true,"value":"http://120.221.22.94","comment":"https://x.com/threatquery/status/1945589270837633291","timestamp":"1752699604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"17e2872f-46a3-5f9c-8659-8d2846605672","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.221.22.94","comment":"https://x.com/threatquery/status/1945589270837633291","timestamp":"1752699604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"c35ac25d-c270-517b-a2ea-9ecb4807bde1","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.48.100:80","comment":"https://x.com/drb_ra/status/1945589488538865812","timestamp":"1752699656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2611ac21-fe51-5da9-8bc7-816d9fbd4f16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.48.100","comment":"https://x.com/drb_ra/status/1945589488538865812","timestamp":"1752699656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9c04279a-6d82-506b-a4a3-3bdab0a6194f","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.94.35:9180","comment":"https://x.com/drb_ra/status/1945589511720726967","timestamp":"1752699661","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a09433a-259b-5f61-bc08-f508e062911b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.94.35","comment":"https://x.com/drb_ra/status/1945589511720726967","timestamp":"1752699661","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d9a8d1c6-055f-57e0-a184-8ae3ee0fe19d","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.90.197:443","comment":"https://x.com/drb_ra/status/1945590030258356443","timestamp":"1752699785","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bbc67be6-d570-53fd-821c-7a246aa67ad2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.90.197:80","comment":"https://x.com/drb_ra/status/1945590054161621009","timestamp":"1752699790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"23aba6a9-f0fb-5f2f-a8e3-ccdca423eb84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.90.197","comment":"https://x.com/drb_ra/status/1945590054161621009","timestamp":"1752699790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0dab6606-3ba6-5ff1-8930-d998a9b1a593","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/wc/82740874126","comment":"https://x.com/drb_ra/status/1945600186455110024","timestamp":"1752702206","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d48b11d9-5580-578b-a3df-d7ad13eedf3a","type":"url","category":"Network activity","to_ids":true,"value":"http://85.175.101.203:53","comment":"https://x.com/drb_ra/status/1945602726273962198","timestamp":"1752702812","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"548b4b06-9208-545d-a467-0080fba9b6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.175.101.203","comment":"https://x.com/drb_ra/status/1945602726273962198","timestamp":"1752702812","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7dd3a8a4-4d42-56af-8a08-67369169f43f","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f86a221-f592-5607-87aa-dde55ddcc19e","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.nsebseshop.cloud/s/82740874126","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"745f539c-21c5-5a53-9b35-cef5f4812b73","type":"domain","category":"Network activity","to_ids":true,"value":"ns3.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb50943c-5f66-57b7-b2fe-eb53828b57dd","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/s/82740874126","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7113ba01-b17f-54c3-8178-e6c7115fc9e2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.237.86.35:53","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"962626b2-4421-562c-acfe-85f8d5e4065a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.237.86.35","comment":"https://x.com/drb_ra/status/1945602750328238184","timestamp":"1752702817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a70c7285-ec17-56cc-9598-1c68ca5605b2","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.17.142:53","comment":"https://x.com/drb_ra/status/1945603774694765044","timestamp":"1752703062","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"478e2b34-e17e-5b2d-b384-72d1bf777f89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.17.142","comment":"https://x.com/drb_ra/status/1945603774694765044","timestamp":"1752703062","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2157ddcc-9538-5407-aa56-c643a4154b02","type":"domain","category":"Network activity","to_ids":true,"value":"justloginreaganphp.weebly.com","comment":"https://x.com/urldna_bot/status/1945604394357047748","timestamp":"1752703209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3fd9073e-d049-5dfa-b76c-74e9d8aed94c","type":"url","category":"Network activity","to_ids":true,"value":"https://justloginreaganphp.weebly.com","comment":"https://x.com/urldna_bot/status/1945604394357047748","timestamp":"1752703209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"becd7566-0a2c-52d1-8f77-192de478e742","type":"domain","category":"Network activity","to_ids":true,"value":"icloud-putage.jnbkw.cn","comment":"https://x.com/catnap707/status/1945616455745376279","timestamp":"1752706085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d34794ed-17cc-55ce-8ef6-26bf6a9b8441","type":"url","category":"Network activity","to_ids":true,"value":"http://icloud-putage.jnbkw.cn/gvIY2S/","comment":"https://x.com/catnap707/status/1945616455745376279","timestamp":"1752706085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1938c04f-a5b4-56a8-a20e-e0a5a11281f6","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.165.235","comment":"https://x.com/catnap707/status/1945616455745376279","timestamp":"1752706085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"97751247-87b2-56cb-aad2-12577a42cf0f","type":"url","category":"Network activity","to_ids":true,"value":"http://146.70.79.53:80","comment":"https://x.com/drb_ra/status/1945619467662188882","timestamp":"1752706803","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be3f76ac-b92a-52d1-a29b-abf95e6ec08c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.70.79.53","comment":"https://x.com/drb_ra/status/1945619467662188882","timestamp":"1752706803","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d705a2f9-d88c-54b6-bdd7-21748687fd0c","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/mamaamaboy","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"595006e3-51e3-5d5a-abff-0b7e2a9cefdb","type":"domain","category":"Network activity","to_ids":true,"value":"resqtk.top","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6d72970f-302b-5261-9488-0b82dc39b88d","type":"url","category":"Network activity","to_ids":true,"value":"http://resqtk.top/adlp","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a8b7b933-eb07-5d3b-99cd-f41adef7f269","type":"domain","category":"Network activity","to_ids":true,"value":"daruubs.top","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6ab07eed-f3cc-5da1-8aeb-086fce2ff286","type":"url","category":"Network activity","to_ids":true,"value":"http://daruubs.top/griw","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b430ca31-bd28-52e3-86a2-eae3b9c1f2b9","type":"domain","category":"Network activity","to_ids":true,"value":"cidtfhh.shop","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f43dae76-dca1-59ef-9365-a3a30bafca98","type":"url","category":"Network activity","to_ids":true,"value":"http://cidtfhh.shop/zdik","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"17d0c58e-1bd7-5fc8-9570-7a356b3c583a","type":"domain","category":"Network activity","to_ids":true,"value":"greqjfu.xyz","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"84e08a3b-41b6-59ca-a84b-289fed4bdad2","type":"url","category":"Network activity","to_ids":true,"value":"http://greqjfu.xyz/uhbf","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"112046da-3ffa-5ab4-b356-58c703c66dde","type":"domain","category":"Network activity","to_ids":true,"value":"rayrhs.top","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"69963e2e-9bda-508b-bf9f-6e598fef1b6e","type":"url","category":"Network activity","to_ids":true,"value":"http://rayrhs.top/aktr","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ef95136f-406a-59d9-ba1e-71b674f9958e","type":"domain","category":"Network activity","to_ids":true,"value":"furwmsx.shop","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"63cb157e-d78a-5c5f-824f-e043aae6ff8f","type":"url","category":"Network activity","to_ids":true,"value":"http://furwmsx.shop/xowq","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2934e13b-40cb-5e04-8326-0d91435905b9","type":"md5","category":"Payload delivery","to_ids":true,"value":"8d10769c5b9c9077538ed3a6d4938d3d","comment":"https://x.com/skocherhan/status/1945619965727363208","timestamp":"1752706922","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a36e727a-9b43-57ad-bb13-2cfd061addd1","type":"url","category":"Network activity","to_ids":true,"value":"http://49.235.64.155:4444","comment":"https://x.com/drb_ra/status/1945619987386802229","timestamp":"1752706927","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bae34a27-c22d-502c-a046-21a0aa2a882d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.235.64.155","comment":"https://x.com/drb_ra/status/1945619987386802229","timestamp":"1752706927","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03960980-b940-5a42-b03e-df778590ff98","type":"domain","category":"Network activity","to_ids":true,"value":"7fsnaewwwq6r3.cfc-execute.bj.baidubce.com","comment":"https://x.com/drb_ra/status/1945620009318842516","timestamp":"1752706932","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eed756ee-1038-543d-82ef-137a0de8624e","type":"url","category":"Network activity","to_ids":true,"value":"https://7fsnaewwwq6r3.cfc-execute.bj.baidubce.com/api/x","comment":"https://x.com/drb_ra/status/1945620009318842516","timestamp":"1752706932","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"81a333cc-1093-56bd-8d2c-905ed7f3ae8b","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.107.27:443","comment":"https://x.com/drb_ra/status/1945620009318842516","timestamp":"1752706932","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c6006be0-2539-588a-9b10-df2265b9770a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.107.27","comment":"https://x.com/drb_ra/status/1945620009318842516","timestamp":"1752706932","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e8d3f007-0b1d-5616-a3bb-1c223d0522ff","type":"url","category":"Network activity","to_ids":true,"value":"http://38.182.100.106:443","comment":"https://x.com/drb_ra/status/1945620030701351341","timestamp":"1752706937","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"957a49b6-43a8-5993-8914-27d31c8bab2d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.182.100.106","comment":"https://x.com/drb_ra/status/1945620030701351341","timestamp":"1752706937","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"871446c2-491e-5f92-ace5-eb8f0839739e","type":"domain","category":"Network activity","to_ids":true,"value":"24k-markets.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"28d0e973-4735-5548-a2c4-b23aaf2f69d8","type":"url","category":"Network activity","to_ids":true,"value":"http://24k-markets.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"2b3b1f45-cded-5f66-b212-00d062670d56","type":"domain","category":"Network activity","to_ids":true,"value":"axetrade-capital.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"a51280d5-f321-5ebc-9538-fed37442f256","type":"url","category":"Network activity","to_ids":true,"value":"http://axetrade-capital.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"90b23a26-7dc4-5fab-b2d4-09de183f5617","type":"domain","category":"Network activity","to_ids":true,"value":"fizmofx-markets.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"c28adc90-7d8a-5eec-ac67-df9e75a69712","type":"url","category":"Network activity","to_ids":true,"value":"http://fizmofx-markets.com","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"6491e8c4-3a69-5539-b996-e73d9f1b4379","type":"domain","category":"Network activity","to_ids":true,"value":"upwardstrend.net","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"8ba798f3-2306-598d-a751-7e1e3a65e1da","type":"url","category":"Network activity","to_ids":true,"value":"http://upwardstrend.net","comment":"https://x.com/skocherhan/status/1945623038801727750","timestamp":"1752707655","distribution":"5"},{"uuid":"e6e70ac0-da78-56cb-9d0e-bfe9c7a3acbc","type":"domain","category":"Network activity","to_ids":true,"value":"secure-portal.pages.dev","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"6898ae92-a47d-5b09-b6ca-2d9b2d33b7d0","type":"url","category":"Network activity","to_ids":true,"value":"http://secure-portal.pages.dev","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"66baa06c-5c40-57e0-9272-314ca505b7bd","type":"domain","category":"Network activity","to_ids":true,"value":"microsoftcdnlicense.putinswin.es","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"69d00b22-06de-575f-87ee-872959677b85","type":"url","category":"Network activity","to_ids":true,"value":"http://microsoftcdnlicense.putinswin.es","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"7c09a14c-b8fe-59df-9794-d052c70c6f07","type":"url","category":"Network activity","to_ids":true,"value":"http://38.69.15.242","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"405af351-0755-58b1-ad91-8a417616c65a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.69.15.242","comment":"https://x.com/skocherhan/status/1945624507118460947","timestamp":"1752708005","distribution":"5"},{"uuid":"24f5cbca-fe1e-5008-bbae-171588355360","type":"domain","category":"Network activity","to_ids":true,"value":"kucvoinlogine.webflow.io","comment":"https://x.com/urldna_bot/status/1945634580037328971","timestamp":"1752710406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"de294e4a-0fb3-5360-ad86-c418d68ec02e","type":"url","category":"Network activity","to_ids":true,"value":"https://kucvoinlogine.webflow.io","comment":"https://x.com/urldna_bot/status/1945634580037328971","timestamp":"1752710406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"775a14be-b63e-58bf-bc6b-32033d53bb15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.249.46","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"e55444a0-1f7b-53e6-b06a-eaff72fb0418","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.249.46","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"0c923557-a90f-54b1-8926-90a180e5ecb0","type":"url","category":"Network activity","to_ids":true,"value":"http://kimchee.p-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"3b62be2c-9d0c-59ea-a636-d110fb7aa460","type":"url","category":"Network activity","to_ids":true,"value":"http://chosunlibs.r-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"8de34421-0a35-546c-868a-17ad0487aed5","type":"domain","category":"Network activity","to_ids":true,"value":"kimchee.p-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"f7abafe3-e2a9-52ef-8ec5-377af2bdb3e1","type":"url","category":"Network activity","to_ids":true,"value":"http://chosunweb.n-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"3fd80208-49f4-5823-b19f-52fd4025387d","type":"domain","category":"Network activity","to_ids":true,"value":"chosunweb.n-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"c0e5b1b9-a498-5dfe-ba25-cbf072638bbe","type":"url","category":"Network activity","to_ids":true,"value":"http://nidnosr.n-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"b5942fe1-e090-5456-830d-a94df12b0e5f","type":"domain","category":"Network activity","to_ids":true,"value":"nidnosr.n-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"465fc89c-bdd4-59fc-9ab3-73f6072e2b7a","type":"domain","category":"Network activity","to_ids":true,"value":"chosunlibs.r-e.kr","comment":"https://x.com/skocherhan/status/1945639569090576712","timestamp":"1752711596","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"5de91d03-4cc3-52ed-abcc-55a092db48a6","type":"domain","category":"Network activity","to_ids":true,"value":"tanranch2o.com","comment":"https://x.com/masaomi346/status/1945649604806283387","timestamp":"1752713988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b491ac8-f543-5644-82c5-905f1305ea06","type":"url","category":"Network activity","to_ids":true,"value":"https://tanranch2o.com/plala.authentications/Sites/index.html","comment":"https://x.com/masaomi346/status/1945649604806283387","timestamp":"1752713988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44bd2e59-1c44-5d58-8bba-2576bc7d3f35","type":"url","category":"Network activity","to_ids":true,"value":"https://tanranch2o.com/plala.web/Sites/index.html","comment":"https://x.com/masaomi346/status/1945649604806283387","timestamp":"1752713988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c18fba9-9324-52a6-b789-111e49985f5a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.1.227","comment":"https://x.com/Metemcyber/status/1945655179690557548","timestamp":"1752715318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3105e17f-db66-5268-8f9d-9a3616654487","type":"url","category":"Network activity","to_ids":true,"value":"https://asdyfgby.icu/D0pX.jp/","comment":"https://x.com/Metemcyber/status/1945655179690557548","timestamp":"1752715318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54fe1d4c-c0d6-59ae-a004-e81f6f0e1b26","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.152.104","comment":"https://x.com/Metemcyber/status/1945655179690557548","timestamp":"1752715318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e9c48c5-04b0-5054-b9ce-7ebb0e5ea4ee","type":"domain","category":"Network activity","to_ids":true,"value":"asdyfgby.icu","comment":"https://x.com/Metemcyber/status/1945655179690557548","timestamp":"1752715318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"507c2076-b2e8-5240-8f3d-fc62fc416806","type":"domain","category":"Network activity","to_ids":true,"value":"saisoncard-base.sdtcke.cn","comment":"https://x.com/Metemcyber/status/1945657212271227212","timestamp":"1752715802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e544c6b7-1471-5771-8fb3-fa16ecf27eb6","type":"url","category":"Network activity","to_ids":true,"value":"https://saisoncard-base.sdtcke.cn/screen/na/authorize/","comment":"https://x.com/Metemcyber/status/1945657212271227212","timestamp":"1752715802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc8907b7-0037-5bef-840b-ae19638e778d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.176.78","comment":"https://x.com/Metemcyber/status/1945657212271227212","timestamp":"1752715802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fcf078a5-8c23-59e3-956a-8cc22db538c6","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.88.100","comment":"https://x.com/Metemcyber/status/1945657212271227212","timestamp":"1752715802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1235964f-3110-5aca-8c65-0f288a95b392","type":"url","category":"Network activity","to_ids":true,"value":"https://bierfestivus.be","comment":"https://x.com/urldna_bot/status/1945664793500598403","timestamp":"1752717610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"042fa46c-3968-5c45-90d7-3aaa5ce0eac3","type":"domain","category":"Network activity","to_ids":true,"value":"bierfestivus.be","comment":"https://x.com/urldna_bot/status/1945664793500598403","timestamp":"1752717610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"002568c5-9e96-5cf3-8882-ce88d33ad663","type":"domain","category":"Network activity","to_ids":true,"value":"www-apple.eku8ykbj.com","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"612f1f15-593d-5b30-90d4-9130c123cd8c","type":"url","category":"Network activity","to_ids":true,"value":"https://www-apple.eku8ykbj.com/account/","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1945665125631107571","timestamp":"1752717689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fddd805f-5620-519f-9513-4e972ee8b87b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.39.19.164","comment":"https://x.com/ViriBack/status/1945665880840433972","timestamp":"1752717869","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"32791784-8b4c-530f-8752-567ec7fb3bc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.60.149.213","comment":"https://x.com/ViriBack/status/1945665880840433972","timestamp":"1752717869","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"648a5347-436c-50d6-b9eb-4ffb85963262","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.105.134.245","comment":"https://x.com/ViriBack/status/1945665880840433972","timestamp":"1752717869","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ff3dfc78-f6fd-5a78-a2f9-6c98d4186634","type":"md5","category":"Payload delivery","to_ids":true,"value":"2a3d999c5c18be2e6b7c3ce1470c4519","comment":"https://x.com/ShadowChasing1/status/1945683222802944278","timestamp":"1752722004","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"c2892d35-dac2-5dec-ba78-17b85182ddea","type":"md5","category":"Payload delivery","to_ids":true,"value":"9efa3c4f70e1060d4162e46eeae7fd33","comment":"https://x.com/ShadowChasing1/status/1945683222802944278","timestamp":"1752722004","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"d6c7d978-f53a-5997-b777-663ca0ce43da","type":"md5","category":"Payload delivery","to_ids":true,"value":"ac0c731c2970aa9b6893adbf9806527e","comment":"https://x.com/ShadowChasing1/status/1945683222802944278","timestamp":"1752722004","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"1b3fea6c-900b-54be-bc16-d39ab944a73b","type":"domain","category":"Network activity","to_ids":true,"value":"bdgov.info","comment":"https://x.com/ShadowChasing1/status/1945683274308927728","timestamp":"1752722016","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"a2c92256-4987-5323-8223-bc08119849c0","type":"url","category":"Network activity","to_ids":true,"value":"http://bdgov.info","comment":"https://x.com/ShadowChasing1/status/1945683274308927728","timestamp":"1752722016","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0f50ead3-02c2-5481-85db-d08db2970413","type":"domain","category":"Network activity","to_ids":true,"value":"afdinfo786.bdgov.info","comment":"https://x.com/ShadowChasing1/status/1945683274308927728","timestamp":"1752722016","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0b352e80-63c3-5ffa-83bf-3ab4d8bc5105","type":"url","category":"Network activity","to_ids":true,"value":"http://afdinfo786.bdgov.info","comment":"https://x.com/ShadowChasing1/status/1945683274308927728","timestamp":"1752722016","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4cb1f72e-d4c6-5664-bc44-a5b71eb583a8","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a14506c6fb92a5af88a6a44d273edafe10d69ee3d85c8b2a7ac458a22edf68d2","comment":"https://x.com/JAMESWT_WT/status/1945691361946341722","timestamp":"1752723944","distribution":"5"},{"uuid":"ab6dc839-9fdc-59e7-a93c-bb0489b35208","type":"domain","category":"Network activity","to_ids":true,"value":"kuksreooinlogon.webflow.io","comment":"https://x.com/urldna_bot/status/1945694979344498710","timestamp":"1752724806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e4aacdff-0874-53c6-9333-85ddee643066","type":"url","category":"Network activity","to_ids":true,"value":"http://kuksreooinlogon.webflow.io","comment":"https://x.com/urldna_bot/status/1945694979344498710","timestamp":"1752724806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a75a2909-bc50-58ce-9594-dd3751562c6d","type":"url","category":"Network activity","to_ids":true,"value":"https://shik1n-lgoin00.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"083b51c3-10c5-5214-82b8-d3aa05c6ba84","type":"url","category":"Network activity","to_ids":true,"value":"https://shik1n-lgoin01-06.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c51c6d83-ee73-518b-82ef-08d638fa8886","type":"domain","category":"Network activity","to_ids":true,"value":"shik1n-lgoin01-06.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98fd85b7-231f-5686-bb53-112d74432060","type":"domain","category":"Network activity","to_ids":true,"value":"shik1n-lgoin00.com","comment":"https://x.com/harugasumi/status/1945724758106210671","timestamp":"1752731906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4be164e1-f7a9-57ed-b972-a445735fe248","type":"domain","category":"Network activity","to_ids":true,"value":"socialsecurityalerts.news","comment":"https://x.com/urldna_bot/status/1945725193223086104","timestamp":"1752732010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e43f37d9-91f5-5e2b-beee-6334becf102e","type":"url","category":"Network activity","to_ids":true,"value":"https://socialsecurityalerts.news/social-security-error-leaves-citizens-fighting-to-prove-status/","comment":"https://x.com/urldna_bot/status/1945725193223086104","timestamp":"1752732010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"813bca46-e517-55b2-ba9e-d761b268a50e","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.187.60","comment":"https://x.com/Metemcyber/status/1945725349960253568","timestamp":"1752732047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89d73362-94dc-580b-a4a1-7f62fe28db76","type":"url","category":"Network activity","to_ids":true,"value":"https://aeon-amatier.hrzaek.cn/openirt-connect/app/","comment":"https://x.com/Metemcyber/status/1945725349960253568","timestamp":"1752732047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b3231f74-2b30-5faa-94e6-33891879e56b","type":"domain","category":"Network activity","to_ids":true,"value":"aeon-amatier.hrzaek.cn","comment":"https://x.com/Metemcyber/status/1945725349960253568","timestamp":"1752732047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8e59bab-a7a3-58f0-b523-d0e02579cd22","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.4.242","comment":"https://x.com/Metemcyber/status/1945725349960253568","timestamp":"1752732047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6c77b0e6-b53d-51ca-90fe-ead0913bf768","type":"url","category":"Network activity","to_ids":true,"value":"https://124.220.59.81/mall_100_100.html","comment":"https://x.com/drb_ra/status/1945725744774037823","timestamp":"1752732142","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"451dc29f-d88f-58f5-8b60-9354aad88514","type":"url","category":"Network activity","to_ids":true,"value":"http://124.220.59.81:8080","comment":"https://x.com/drb_ra/status/1945725744774037823","timestamp":"1752732142","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c20163d0-216a-5b6d-a3ed-32fea7ad5cf8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.220.59.81","comment":"https://x.com/drb_ra/status/1945725744774037823","timestamp":"1752732142","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dad1e749-d55c-5e50-be88-7819946b741f","type":"url","category":"Network activity","to_ids":true,"value":"http://50.87.222.185","comment":"https://x.com/Metemcyber/status/1945729254387527983","timestamp":"1752732978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c8290aa-22aa-5dca-808e-a268fa4046e9","type":"domain","category":"Network activity","to_ids":true,"value":"buchmaierlaw.com","comment":"https://x.com/Metemcyber/status/1945729254387527983","timestamp":"1752732978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d74956f1-e5e3-5a40-abd0-aa63ee205f3d","type":"url","category":"Network activity","to_ids":true,"value":"https://buchmaierlaw.com/mail-biglobejp//sign-in.php","comment":"https://x.com/Metemcyber/status/1945729254387527983","timestamp":"1752732978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94a09a56-c8cc-5070-8816-1265607835b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.87.222.185","comment":"https://x.com/Metemcyber/status/1945729254387527983","timestamp":"1752732978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc44f9a6-0a28-506b-8310-5fda0f339d60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.185.75.5","comment":"https://x.com/romonlyht/status/1945732739698987405","timestamp":"1752733809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c060429-3997-538b-99a4-1a59114d56f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.225.163","comment":"https://x.com/romonlyht/status/1945732739698987405","timestamp":"1752733809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12c8d568-289a-5c2b-926f-5cf603d6e58d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.244.97.170","comment":"https://x.com/romonlyht/status/1945732737522143672","timestamp":"1752733809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e651f5e2-5bfb-512e-996a-164050d7a3d4","type":"url","category":"Network activity","to_ids":true,"value":"https://khamarsheba.com//pw/jp?uid=aaaa%40example.jp","comment":"https://x.com/romonlyht/status/1945732739698987405","timestamp":"1752733809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3df5553c-11cc-51dc-8f62-ede879bd6c07","type":"domain","category":"Network activity","to_ids":true,"value":"px.cpipxn3.sa.com","comment":"https://x.com/romonlyht/status/1945732739698987405","timestamp":"1752733809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0b6baf4-989b-5b1b-aa29-446140343695","type":"domain","category":"Network activity","to_ids":true,"value":"khamarsheba.com","comment":"https://x.com/romonlyht/status/1945732741410271704","timestamp":"1752733810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81970aaf-e035-5c8f-adc3-c9ffc568c861","type":"url","category":"Network activity","to_ids":true,"value":"https://khamarsheba.com/pw/jp/?uid=aaaa%40example.jp","comment":"https://x.com/romonlyht/status/1945732741410271704","timestamp":"1752733810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9544f400-2e8f-5d7e-8789-b39ca06c9a29","type":"url","category":"Network activity","to_ids":true,"value":"http://35.241.90.34:443","comment":"https://x.com/drb_ra/status/1945736887873773855","timestamp":"1752734798","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7b2b9dba-2436-5165-bdf7-aec38139a928","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.241.90.34","comment":"https://x.com/drb_ra/status/1945736887873773855","timestamp":"1752734798","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f085648b-21b5-574a-9ef5-bde6823101e2","type":"url","category":"Network activity","to_ids":true,"value":"http://52.148.201.81:40056","comment":"https://x.com/drb_ra/status/1945736912880206008","timestamp":"1752734804","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"5001f0fc-e788-59ce-8b2c-054d821e460d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.148.201.81","comment":"https://x.com/drb_ra/status/1945736912880206008","timestamp":"1752734804","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"44696cbb-6f9c-537f-bf22-d664f86455d3","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.69.246:443","comment":"https://x.com/drb_ra/status/1945736937169412133","timestamp":"1752734810","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f6b37940-1b9f-5ccc-bd44-2cf91f95ca25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.69.246","comment":"https://x.com/drb_ra/status/1945736937169412133","timestamp":"1752734810","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f5232552-4132-56ca-989e-4c5d522860d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.91.180.231","comment":"https://x.com/drb_ra/status/1945736959227273224","timestamp":"1752734815","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"62f83a26-de1b-5b64-875b-d31b6c814ecb","type":"url","category":"Network activity","to_ids":true,"value":"http://154.91.180.231:443","comment":"https://x.com/drb_ra/status/1945736959227273224","timestamp":"1752734815","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"e1b0917e-8ddb-55a8-b408-a8fb1d4c2d68","type":"url","category":"Network activity","to_ids":true,"value":"http://3.90.201.175:443","comment":"https://x.com/drb_ra/status/1945736977216688420","timestamp":"1752734820","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"1f5ac7be-fabc-5ee7-956d-47e5ee0e5cc7","type":"url","category":"Network activity","to_ids":true,"value":"http://179.145.47.137:8081","comment":"https://x.com/drb_ra/status/1945737004978671868","timestamp":"1752734826","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ec21e9f3-c884-5810-be17-b8847a5a60d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.145.47.137","comment":"https://x.com/drb_ra/status/1945737004978671868","timestamp":"1752734826","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"63526bc5-a662-5e53-9a33-a8023c3ba230","type":"url","category":"Network activity","to_ids":true,"value":"http://13.58.164.145:443","comment":"https://x.com/drb_ra/status/1945737027770523840","timestamp":"1752734832","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1803bf00-d5b4-52fc-a051-82c8f69527c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.58.164.145","comment":"https://x.com/drb_ra/status/1945737027770523840","timestamp":"1752734832","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fe4f117f-7230-585a-80ae-5b9ea10e4f88","type":"url","category":"Network activity","to_ids":true,"value":"http://54.185.115.89:443","comment":"https://x.com/drb_ra/status/1945737050491179095","timestamp":"1752734837","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"af9f335b-3f46-5106-b2c3-371dbd914f9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.185.115.89","comment":"https://x.com/drb_ra/status/1945737050491179095","timestamp":"1752734837","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"131b051d-74cc-5ee7-961f-0666fd04239d","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.168.232:7443","comment":"https://x.com/drb_ra/status/1945737077888372926","timestamp":"1752734844","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"de492c9a-bd66-53d8-9145-323c78d0a1e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.168.232","comment":"https://x.com/drb_ra/status/1945737077888372926","timestamp":"1752734844","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"ab20382f-1fc2-543f-a764-d52b47dc7bf5","type":"url","category":"Network activity","to_ids":true,"value":"http://45.77.79.169:4444","comment":"https://x.com/drb_ra/status/1945737101988794677","timestamp":"1752734849","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"2b55dfcd-81b8-505c-a8a7-054e754ca380","type":"url","category":"Network activity","to_ids":true,"value":"http://45.77.79.169:443","comment":"https://x.com/drb_ra/status/1945737126852596132","timestamp":"1752734855","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"b84ca41b-ea3b-5783-b6e9-b2415020e164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.77.79.169","comment":"https://x.com/drb_ra/status/1945737126852596132","timestamp":"1752734855","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"ddbe6874-bd98-5f53-9f76-735d66cb5df5","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.11.128:31337","comment":"https://x.com/drb_ra/status/1945737154367275484","timestamp":"1752734862","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8b972a32-794c-5ddf-a6e1-8c6aaa5678ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.11.128","comment":"https://x.com/drb_ra/status/1945737154367275484","timestamp":"1752734862","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ddda066f-dd20-5c4b-ba51-56f22a135552","type":"url","category":"Network activity","to_ids":true,"value":"http://46.8.78.243:8848","comment":"https://x.com/drb_ra/status/1945737180782940257","timestamp":"1752734868","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7436a73a-ca56-5f6a-8a58-3fb7e9576bbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.8.78.243","comment":"https://x.com/drb_ra/status/1945737180782940257","timestamp":"1752734868","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"edabf5db-9fef-5e7c-b62d-e8fb45044bfa","type":"url","category":"Network activity","to_ids":true,"value":"http://166.108.200.194:31337","comment":"https://x.com/drb_ra/status/1945737204040388627","timestamp":"1752734874","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"93cedfcf-5ae2-5b82-b9d6-63db056009ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.108.200.194","comment":"https://x.com/drb_ra/status/1945737204040388627","timestamp":"1752734874","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b54419d1-4aa0-5c85-8789-f0ca0e43f79c","type":"url","category":"Network activity","to_ids":true,"value":"http://77.237.233.73:443","comment":"https://x.com/drb_ra/status/1945737226978984447","timestamp":"1752734879","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3c8075c6-6a8e-589a-a3dc-000c23e25b96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.237.233.73","comment":"https://x.com/drb_ra/status/1945737251876409787","timestamp":"1752734885","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f39779cd-2271-5e12-8ef7-3b96ea7b47ca","type":"url","category":"Network activity","to_ids":true,"value":"http://77.237.233.73:31337","comment":"https://x.com/drb_ra/status/1945737251876409787","timestamp":"1752734885","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dbf240dd-57e0-502e-83f0-43ef1c1d480a","type":"url","category":"Network activity","to_ids":true,"value":"http://188.23.170.137:8000","comment":"https://x.com/drb_ra/status/1945737770560897027","timestamp":"1752735009","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"99d6bb6f-2c83-558f-a5c7-75e346fdbc72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.23.170.137","comment":"https://x.com/drb_ra/status/1945737770560897027","timestamp":"1752735009","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9c8562c9-3d42-590a-b5a3-6538de43f62d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.72.8.65:9531","comment":"https://x.com/drb_ra/status/1945737797450531289","timestamp":"1752735015","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"292c598a-f34e-5d1e-b329-b296b0985418","type":"url","category":"Network activity","to_ids":true,"value":"http://185.72.8.65:443","comment":"https://x.com/drb_ra/status/1945737819550261735","timestamp":"1752735020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"52bd6659-b098-589f-9d2a-9a4fd438ccf2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.72.8.65","comment":"https://x.com/drb_ra/status/1945737819550261735","timestamp":"1752735020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6de267ce-fe6a-56a1-b43c-1dbad7855233","type":"url","category":"Network activity","to_ids":true,"value":"http://173.206.248.90:8888","comment":"https://x.com/drb_ra/status/1945737842577035384","timestamp":"1752735026","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"f9e11f07-19ec-5c5f-9925-653d87ecb00e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.206.248.90","comment":"https://x.com/drb_ra/status/1945737842577035384","timestamp":"1752735026","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"02bd2438-f9ae-5e45-98e0-d8443ecc605c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.168.213.12","comment":"https://x.com/drb_ra/status/1945737865633079524","timestamp":"1752735031","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"16724a01-dde4-5bb8-b7cd-e041c4bb82a6","type":"url","category":"Network activity","to_ids":true,"value":"http://152.168.213.12:8080","comment":"https://x.com/drb_ra/status/1945737865633079524","timestamp":"1752735031","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"927999ab-da00-53a4-b083-bf2bb2da8556","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.130.112.15","comment":"https://x.com/drb_ra/status/1945737887506420047","timestamp":"1752735037","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4fd0a8e8-5816-5535-8ea7-846e0e4772a4","type":"url","category":"Network activity","to_ids":true,"value":"http://102.130.112.15:80","comment":"https://x.com/drb_ra/status/1945737887506420047","timestamp":"1752735037","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"93cc7151-5b9e-5e32-b643-d5811aafcdf5","type":"url","category":"Network activity","to_ids":true,"value":"http://212.162.149.240:45588","comment":"https://x.com/drb_ra/status/1945737909912457556","timestamp":"1752735042","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b377dca2-e20d-5d0d-95f6-62279def5dbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.162.149.240","comment":"https://x.com/drb_ra/status/1945737909912457556","timestamp":"1752735042","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3cde0a6f-393d-5aa2-9e6e-91ddc597b864","type":"url","category":"Network activity","to_ids":true,"value":"http://119.45.176.196:3232","comment":"https://x.com/drb_ra/status/1945737932712628361","timestamp":"1752735047","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"10f369c1-78ae-542d-b0db-1d9294d3eaa2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.45.176.196","comment":"https://x.com/drb_ra/status/1945737932712628361","timestamp":"1752735047","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"3d76e600-2f9a-597f-9a50-ff7d249616df","type":"url","category":"Network activity","to_ids":true,"value":"http://130.162.225.47:8080","comment":"https://x.com/drb_ra/status/1945737955433173039","timestamp":"1752735053","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"55330e3b-8f69-577a-b10c-e71ef2422fda","type":"ip-dst","category":"Network activity","to_ids":true,"value":"130.162.225.47","comment":"https://x.com/drb_ra/status/1945737955433173039","timestamp":"1752735053","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c47d3ee8-98be-59ee-a7a4-b1b76d449ac1","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.66.78:14231","comment":"https://x.com/drb_ra/status/1945737978032087135","timestamp":"1752735058","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cf4d80cd-c862-5f83-9d81-0b0811af1f8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.66.78","comment":"https://x.com/drb_ra/status/1945737978032087135","timestamp":"1752735058","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"92f25915-3c55-55a4-9293-9021d777a118","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.60.200.175","comment":"https://x.com/drb_ra/status/1945738002652598524","timestamp":"1752735064","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"96dcaff9-19e1-5ed3-bbfe-59416a98be63","type":"url","category":"Network activity","to_ids":true,"value":"http://18.60.200.175:50580","comment":"https://x.com/drb_ra/status/1945738002652598524","timestamp":"1752735064","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cb83570b-9c70-54ce-b32b-2a01689f0610","type":"url","category":"Network activity","to_ids":true,"value":"http://171.250.25.244:8808","comment":"https://x.com/drb_ra/status/1945738025826128309","timestamp":"1752735070","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"71438173-097c-5ce3-9946-802d013d7667","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.250.25.244","comment":"https://x.com/drb_ra/status/1945738025826128309","timestamp":"1752735070","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b1cf5550-a02d-5d02-8b17-cd279ff3737d","type":"url","category":"Network activity","to_ids":true,"value":"http://161.35.20.183:25","comment":"https://x.com/drb_ra/status/1945738048131551596","timestamp":"1752735075","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b410470d-1d37-59f7-9e0b-eaf40b052b02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.35.20.183","comment":"https://x.com/drb_ra/status/1945738048131551596","timestamp":"1752735075","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"18630d43-5630-5964-805b-6f2b13aa5f06","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.26.163:465","comment":"https://x.com/drb_ra/status/1945738074387878247","timestamp":"1752735081","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2c6f1614-6c77-5022-90aa-87d3860a11b3","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.26.163:443","comment":"https://x.com/drb_ra/status/1945738097833955559","timestamp":"1752735087","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e1da7c56-70cc-561a-90a3-a35a31769e8f","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.26.163:80","comment":"https://x.com/drb_ra/status/1945738120575451499","timestamp":"1752735092","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b392598f-8d32-5ba1-b099-643cfb8d64b1","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.26.163:25","comment":"https://x.com/drb_ra/status/1945738144243994787","timestamp":"1752735098","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e18f0056-fd05-5709-bcbf-22de4f693bb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.115.26.163","comment":"https://x.com/drb_ra/status/1945738144243994787","timestamp":"1752735098","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2ab96fa3-d147-5940-860e-cf679d6187b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.70.157.170","comment":"https://x.com/drb_ra/status/1945738161843282090","timestamp":"1752735102","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"708b568b-80a9-542e-85af-803dc6a64ef6","type":"url","category":"Network activity","to_ids":true,"value":"http://92.70.157.170:7443","comment":"https://x.com/drb_ra/status/1945738161843282090","timestamp":"1752735102","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c0924ab5-a061-5c92-82f7-fc2644572277","type":"url","category":"Network activity","to_ids":true,"value":"http://63.33.198.6:80","comment":"https://x.com/drb_ra/status/1945738184475762761","timestamp":"1752735107","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b02a73c0-1f10-56b1-a55c-563aa3e04fbf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.33.198.6","comment":"https://x.com/drb_ra/status/1945738184475762761","timestamp":"1752735107","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e42d2c9e-1f0e-5121-9632-edf032f215d5","type":"url","category":"Network activity","to_ids":true,"value":"http://18.163.18.34:8888","comment":"https://x.com/drb_ra/status/1945738208978858201","timestamp":"1752735113","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"a305e642-6903-5f92-8054-c409e9aeb899","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.163.18.34","comment":"https://x.com/drb_ra/status/1945738208978858201","timestamp":"1752735113","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"c3547901-1706-5b7d-b611-89d02474dd6c","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.76.144:8888","comment":"https://x.com/drb_ra/status/1945738234568294723","timestamp":"1752735119","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"b28cc903-2c99-5f52-aed1-8578e4b9df18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.76.144","comment":"https://x.com/drb_ra/status/1945738234568294723","timestamp":"1752735119","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"306c3076-edf7-5a89-8bbb-bb8fdef66808","type":"url","category":"Network activity","to_ids":true,"value":"http://111.229.104.132:8888","comment":"https://x.com/drb_ra/status/1945738264217817543","timestamp":"1752735126","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"eeac5c56-83c3-588f-8b9c-1dc5ee686083","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.229.104.132","comment":"https://x.com/drb_ra/status/1945738264217817543","timestamp":"1752735126","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"fd250399-9013-57ad-b262-f43c5aa9a47c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.26","comment":"https://x.com/drb_ra/status/1945738291099169018","timestamp":"1752735133","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"2a172b5f-3ea1-5618-8f0a-bc90672ec012","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.26:8808","comment":"https://x.com/drb_ra/status/1945738291099169018","timestamp":"1752735133","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"ce62484b-cc09-59ae-9988-78be109f26cb","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.110.77:443","comment":"https://x.com/drb_ra/status/1945738314708885591","timestamp":"1752735138","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"abf08d29-ea91-5b8f-824f-a747f3024f6a","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.35.9:443","comment":"https://x.com/drb_ra/status/1945738341908885965","timestamp":"1752735145","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"5d07c28d-3e32-5f1c-b430-42d1970087bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.35.9","comment":"https://x.com/drb_ra/status/1945738341908885965","timestamp":"1752735145","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"fa0cc458-6107-5533-995c-fd59ab7d7f91","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.152.74:443","comment":"https://x.com/drb_ra/status/1945738371101233654","timestamp":"1752735152","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"5b4c3ad9-69bb-5c28-907d-94f15e1b8977","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.152.74","comment":"https://x.com/drb_ra/status/1945738371101233654","timestamp":"1752735152","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"83714d1b-a743-520b-8bbc-668a5996e56d","type":"url","category":"Network activity","to_ids":true,"value":"http://189.146.162.241:995","comment":"https://x.com/drb_ra/status/1945738394325168283","timestamp":"1752735157","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ed7dcb51-4b1e-5cf1-878e-d0213da0ce52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.146.162.241","comment":"https://x.com/drb_ra/status/1945738394325168283","timestamp":"1752735157","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"92385d9b-91a4-5adf-8115-a5a3c5c57712","type":"domain","category":"Network activity","to_ids":true,"value":"\u307e\u305f\u7dcf\u52d9\u7701\u306fmynakyukyu-demonstration.com","comment":"https://x.com/harugasumi/status/1945738972732481841","timestamp":"1752735295","distribution":"5"},{"uuid":"4a88033d-239f-5b23-a1df-def8b4290cc8","type":"url","category":"Network activity","to_ids":true,"value":"http://\u307e\u305f\u7dcf\u52d9\u7701\u306fmynakyukyu-demonstration.com","comment":"https://x.com/harugasumi/status/1945738972732481841","timestamp":"1752735295","distribution":"5"},{"uuid":"fe1725d9-3969-5a1c-ba04-6df0e7404aad","type":"domain","category":"Network activity","to_ids":true,"value":"e-tax-actuall.nrvcn.cn","comment":"https://x.com/taku888infinity/status/1945742246151893034","timestamp":"1752736076","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04274ef9-29c3-5763-98b0-ac114d4abe0c","type":"url","category":"Network activity","to_ids":true,"value":"https://e-tax-actuall.nrvcn.cn/loginouudividua/","comment":"https://x.com/taku888infinity/status/1945742246151893034","timestamp":"1752736076","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f884711f-cdb6-53ae-b82d-dd788617c70f","type":"url","category":"Network activity","to_ids":true,"value":"https://odd-haze-e366.trevor-e31.workers.dev/bdo-form/9ENC1gPxwiZXxjTfEvMV97GtfsmA3UPlDbMoX22drF","comment":"https://x.com/urldna_bot/status/1945755377804439912","timestamp":"1752739207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fdee3c77-a6b5-5a29-9c4f-7625d34b7d80","type":"domain","category":"Network activity","to_ids":true,"value":"odd-haze-e366.trevor-e31.workers.dev","comment":"https://x.com/urldna_bot/status/1945755377804439912","timestamp":"1752739207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"06c4edef-cd53-5f30-894f-584b8024107d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.221.64.202","comment":"https://x.com/solostalking/status/1945762743090647217","timestamp":"1752740963","distribution":"5"},{"uuid":"7c69182d-eb36-5f29-a218-13d79714b838","type":"domain","category":"Network activity","to_ids":true,"value":"c2.skelet.lol","comment":"https://x.com/askardyuss/status/1945765248444637274","timestamp":"1752741560","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"12e40111-7745-51a3-b3ff-9c57ec79ba49","type":"url","category":"Network activity","to_ids":true,"value":"http://c2.skelet.lol","comment":"https://x.com/askardyuss/status/1945765248444637274","timestamp":"1752741560","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"d633c5cf-6b27-58aa-b964-d00778b4a5d5","type":"url","category":"Network activity","to_ids":true,"value":"http://91.147.113.214","comment":"https://x.com/askardyuss/status/1945765248444637274","timestamp":"1752741560","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"8e83a1fd-8638-5fb5-9dee-78f5e957a7da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.147.113.214","comment":"https://x.com/askardyuss/status/1945765248444637274","timestamp":"1752741560","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"1ff966ba-0369-51b7-a691-cdab260889a7","type":"md5","category":"Payload delivery","to_ids":true,"value":"2e07a4de9e6ba84728fbdf27384ea0b9","comment":"https://x.com/pamircil/status/1945765467584696577","timestamp":"1752741612","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"52652854-d28d-5f71-a3f2-833cc865b154","type":"md5","category":"Payload delivery","to_ids":true,"value":"2bf543faf679a374af5fc4848eea5a98","comment":"https://x.com/pamircil/status/1945765467584696577","timestamp":"1752741612","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"85b8bc2b-b9b0-5c9e-9f5e-fced7684e045","type":"md5","category":"Payload delivery","to_ids":true,"value":"6f28082b018a6da45fea8ff4fa7a4e94","comment":"https://x.com/pamircil/status/1945765467584696577","timestamp":"1752741612","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"658042eb-8c96-535c-bac3-02870d9fc9e9","type":"md5","category":"Payload delivery","to_ids":true,"value":"82afcebc49f49b758de83b3275c91137","comment":"https://x.com/pamircil/status/1945765467584696577","timestamp":"1752741612","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"b103ac00-34b0-5249-a526-1522d1c80d06","type":"domain","category":"Network activity","to_ids":true,"value":"ethwzdan.vip","comment":"https://x.com/louismartinox/status/1945793031891824953","timestamp":"1752748184","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"4f099fb2-d9be-5801-aaff-19f355f08d49","type":"url","category":"Network activity","to_ids":true,"value":"http://ethwzdan.vip","comment":"https://x.com/louismartinox/status/1945793031891824953","timestamp":"1752748184","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"36e18078-64ad-547b-a972-049120848732","type":"domain","category":"Network activity","to_ids":true,"value":"bit-fon4ix.ru.onion","comment":"https://x.com/Mr_Harleyphaz/status/1945796338416816200","timestamp":"1752748972","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5520a90a-9e94-50d0-b64e-17acb0d09fd9","type":"url","category":"Network activity","to_ids":true,"value":"http://bit-fon4ix.ru.onion","comment":"https://x.com/Mr_Harleyphaz/status/1945796338416816200","timestamp":"1752748972","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69a21001-0f2e-507a-95a2-6b54d8688797","type":"url","category":"Network activity","to_ids":true,"value":"http://106.14.8.189:80","comment":"https://x.com/drb_ra/status/1945800625993695346","timestamp":"1752749995","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c1a12c88-aa3c-57d2-ace0-1c0630006f4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.14.8.189","comment":"https://x.com/drb_ra/status/1945800625993695346","timestamp":"1752749995","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"854d11d4-c3ef-5747-9bb3-bbc9100e943b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.98.151.171:2999","comment":"https://x.com/drb_ra/status/1945800649037226261","timestamp":"1752750000","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"083607d3-83c1-52b7-b328-097d34dc96a3","type":"url","category":"Network activity","to_ids":true,"value":"https://47.98.151.171/visit.js","comment":"https://x.com/drb_ra/status/1945800649037226261","timestamp":"1752750000","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c04bf54-cdb2-5e00-9d38-1513686d0a09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.98.151.171","comment":"https://x.com/drb_ra/status/1945800649037226261","timestamp":"1752750000","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a76c6676-b101-58af-8781-4c9d95f2424e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.101.64.124","comment":"https://x.com/drb_ra/status/1945800670298222905","timestamp":"1752750005","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ac9e6dfa-907a-578f-a424-6780eaa78d78","type":"url","category":"Network activity","to_ids":true,"value":"http://39.101.64.124:9999","comment":"https://x.com/drb_ra/status/1945800670298222905","timestamp":"1752750005","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"69d21966-db95-559e-b6e7-ae08a75727d9","type":"url","category":"Network activity","to_ids":true,"value":"http://42.193.4.115:6666","comment":"https://x.com/drb_ra/status/1945800692620268016","timestamp":"1752750011","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8d686210-9a71-5a6d-8de9-b69a7c8f121c","type":"url","category":"Network activity","to_ids":true,"value":"http://118.24.117.221:8080","comment":"https://x.com/drb_ra/status/1945800708936048759","timestamp":"1752750014","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"daf41014-9169-5f45-b8f6-4eba5a2fa6f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.24.117.221","comment":"https://x.com/drb_ra/status/1945800708936048759","timestamp":"1752750014","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a2d3cc68-5f45-5311-968c-cac2b0b17de4","type":"url","category":"Network activity","to_ids":true,"value":"http://1.12.236.84:18080","comment":"https://x.com/drb_ra/status/1945800724551459276","timestamp":"1752750018","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a7d6c01-4093-54ee-861f-ce533007e08a","type":"url","category":"Network activity","to_ids":true,"value":"http://42.193.4.115:6667","comment":"https://x.com/drb_ra/status/1945801242799661192","timestamp":"1752750142","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"67734242-534f-5bcc-9df2-59151b036bd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.193.4.115","comment":"https://x.com/drb_ra/status/1945801242799661192","timestamp":"1752750142","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e96d9254-d400-5716-a2d6-dc4bcc7aa741","type":"url","category":"Network activity","to_ids":true,"value":"http://120.27.208.187:38582","comment":"https://x.com/drb_ra/status/1945801266703028483","timestamp":"1752750147","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f917b6b5-95d5-5c95-a716-1387eb97828d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.27.208.187","comment":"https://x.com/drb_ra/status/1945801266703028483","timestamp":"1752750147","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e10fb07f-f9c0-539e-9295-04d517532d96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.140.12","comment":"https://x.com/drb_ra/status/1945801282284904487","timestamp":"1752750151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5d44e665-c5cb-5dfa-8fef-0de75655e634","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.140.12:4432","comment":"https://x.com/drb_ra/status/1945801282284904487","timestamp":"1752750151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bff6b3dd-4be8-5eb0-84fc-72350d058f62","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.64.250:80","comment":"https://x.com/drb_ra/status/1945801309849829816","timestamp":"1752750158","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dc8e043f-97e8-5a7d-b6f6-0fdc97255de6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.64.250","comment":"https://x.com/drb_ra/status/1945801309849829816","timestamp":"1752750158","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38963a44-8b69-5722-9d08-0233c4a7ca19","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.6.250:7777","comment":"https://x.com/drb_ra/status/1945801330913681480","timestamp":"1752750163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1a32d294-7940-554f-893b-dc67bf6fee57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.6.250","comment":"https://x.com/drb_ra/status/1945801330913681480","timestamp":"1752750163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a337ddf5-8d2d-5d53-9e80-ea583401a116","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.61.75","comment":"https://x.com/drb_ra/status/1945801347887972571","timestamp":"1752750167","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3a0596fa-28ab-52c5-bb60-3cfd7dce1397","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.61.75:4444","comment":"https://x.com/drb_ra/status/1945801347887972571","timestamp":"1752750167","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1945801370675667065","timestamp":"1752750172","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fa613b8f-6abf-5eb8-a71d-38e26f232952","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:8080","comment":"https://x.com/drb_ra/status/1945801370675667065","timestamp":"1752750172","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e67e1a80-5115-5e2f-97a5-9f0051d9c665","type":"url","category":"Network activity","to_ids":true,"value":"https://217.154.212.25/c/msdownload/update/others/2016/12/29136388_","comment":"https://x.com/drb_ra/status/1945801370675667065","timestamp":"1752750172","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d14f6160-3767-507a-acea-f5c161091ae4","type":"url","category":"Network activity","to_ids":true,"value":"http://124.70.86.82:443","comment":"https://x.com/drb_ra/status/1945801392402165804","timestamp":"1752750177","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4193f59-7b7d-5155-aab1-fd286976e80e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.70.86.82","comment":"https://x.com/drb_ra/status/1945801392402165804","timestamp":"1752750177","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e6db107-2a63-5c0f-9a6c-b695ceaa0d44","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.89.87:8888","comment":"https://x.com/drb_ra/status/1945801911745016235","timestamp":"1752750301","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d357bf3-5419-5c12-a7b2-398bd95d91fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.89.87","comment":"https://x.com/drb_ra/status/1945801911745016235","timestamp":"1752750301","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1bb267f6-1cc8-5148-a1db-7f9d3e592286","type":"url","category":"Network activity","to_ids":true,"value":"http://81.70.221.86:6001","comment":"https://x.com/drb_ra/status/1945801928513859857","timestamp":"1752750305","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dba5005a-a766-58bc-8a4d-58bf38bbcc8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.70.221.86","comment":"https://x.com/drb_ra/status/1945801928513859857","timestamp":"1752750305","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"69b7095f-e8e5-5351-9f39-8e185f8c3287","type":"url","category":"Network activity","to_ids":true,"value":"http://bit-fon4ix.ru.onion#phishing","comment":"https://x.com/qrjxl/status/1945812357583613991","timestamp":"1752752792","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a987e8d9-f5bc-551c-8e2a-00a4723dd2c5","type":"domain","category":"Network activity","to_ids":true,"value":"satyarthi.uk","comment":"https://x.com/urldna_bot/status/1945815787123466334","timestamp":"1752753609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8fcfe83f-9152-5f54-b615-fee8911e1568","type":"url","category":"Network activity","to_ids":true,"value":"http://satyarthi.uk/MM/htdocsitau/index.html","comment":"https://x.com/urldna_bot/status/1945815787123466334","timestamp":"1752753609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4ea5b4d7-8df2-5a8e-a637-e1df4023a8c4","type":"url","category":"Network activity","to_ids":true,"value":"http://shop-update.com","comment":"https://x.com/sdcyberresearch/status/1945816300539785718","timestamp":"1752753732","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"c0c39eae-dc15-5b1a-92bc-d6fdbbcfbc83","type":"domain","category":"Network activity","to_ids":true,"value":"shop-update.com","comment":"https://x.com/sdcyberresearch/status/1945816300539785718","timestamp":"1752753732","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"5af93649-c6cf-5fb7-b8d9-443499336e1f","type":"domain","category":"Network activity","to_ids":true,"value":"cloudflariz.com","comment":"https://x.com/sdcyberresearch/status/1945816300539785718","timestamp":"1752753732","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"d755b8a9-e858-5aff-9da2-f3c230e98b5f","type":"url","category":"Network activity","to_ids":true,"value":"http://cloudflariz.com/js/macrollantas.com.js","comment":"https://x.com/sdcyberresearch/status/1945816300539785718","timestamp":"1752753732","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"8de32948-be5d-5072-9cbc-f68c9095cd67","type":"domain","category":"Network activity","to_ids":true,"value":"catmore88.com","comment":"https://x.com/skocherhan/status/1945824954433331327","timestamp":"1752755795","distribution":"5"},{"uuid":"797fa88e-664e-581f-aadb-2b407f825ddc","type":"url","category":"Network activity","to_ids":true,"value":"http://catmore88.com","comment":"https://x.com/skocherhan/status/1945824954433331327","timestamp":"1752755795","distribution":"5"},{"uuid":"eddd71dc-b77a-50f2-b0f0-264f575d8108","type":"domain","category":"Network activity","to_ids":true,"value":"ipmoyu.com","comment":"https://x.com/skocherhan/status/1945824954433331327","timestamp":"1752755795","distribution":"5"},{"uuid":"98e9cc65-a5ad-53bd-9ce8-17fa89afd74b","type":"url","category":"Network activity","to_ids":true,"value":"http://ipmoyu.com","comment":"https://x.com/skocherhan/status/1945824954433331327","timestamp":"1752755795","distribution":"5"},{"uuid":"9c1b5227-f77a-53c0-a632-3682e190a9e4","type":"domain","category":"Network activity","to_ids":true,"value":"djksandjkandsa-58893.portmap.io:58893","comment":"https://x.com/skocherhan/status/1945841925346443300","timestamp":"1752759841","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"ec2794b6-b889-5f00-814a-7a7427af758a","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/AnnaliseHackett","comment":"https://x.com/skocherhan/status/1945841925346443300","timestamp":"1752759841","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"fe3933da-4d53-5462-bedc-3203ce47b853","type":"url","category":"Network activity","to_ids":true,"value":"http://djksandjkandsa-58893.portmap.io:58893","comment":"https://x.com/skocherhan/status/1945841925346443300","timestamp":"1752759841","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"8a2500bc-ccf9-5843-87e6-22fbcbfd57ac","type":"md5","category":"Payload delivery","to_ids":true,"value":"44c608d3f8b79c9f7585bd493a04853b","comment":"https://x.com/ReBensk/status/1945844311075205500","timestamp":"1752760410","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"7d8b5a3b-d753-59a1-8140-a77b72ffcdea","type":"domain","category":"Network activity","to_ids":true,"value":"accountclosureverfiicationnotice.weebly.com","comment":"https://x.com/urldna_bot/status/1945845984400957445","timestamp":"1752760809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"17ba1f29-840d-58e5-9655-da9679ade3e2","type":"url","category":"Network activity","to_ids":true,"value":"https://accountclosureverfiicationnotice.weebly.com","comment":"https://x.com/urldna_bot/status/1945845984400957445","timestamp":"1752760809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a8bc56d9-1817-5cae-b288-349ceaeb404c","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/Namit903","comment":"https://x.com/skocherhan/status/1945848999585464687","timestamp":"1752761528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"a1b80b85-675b-5949-a83e-934d214aeaa5","type":"domain","category":"Network activity","to_ids":true,"value":"namit-37666.portmap.io:37666","comment":"https://x.com/skocherhan/status/1945848999585464687","timestamp":"1752761528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"d443efd1-ef8b-5ce7-94ae-d888bb18d602","type":"url","category":"Network activity","to_ids":true,"value":"http://namit-37666.portmap.io:37666","comment":"https://x.com/skocherhan/status/1945848999585464687","timestamp":"1752761528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"701c670d-d18b-5428-a9c1-892bf051fd14","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/nhabado","comment":"https://x.com/skocherhan/status/1945854288556609717","timestamp":"1752762789","distribution":"5","Tag":[{"name":"Njrat"}]},{"uuid":"c99bed63-2ee5-5914-a4be-9cd72c537f70","type":"domain","category":"Network activity","to_ids":true,"value":"ff.membersship.garrena.vn","comment":"https://x.com/urldna_bot/status/1945876172371284058","timestamp":"1752768006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bd612b53-3b57-5071-b400-e908abbf9014","type":"url","category":"Network activity","to_ids":true,"value":"https://ff.membersship.garrena.vn","comment":"https://x.com/urldna_bot/status/1945876172371284058","timestamp":"1752768006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c2c6820c-17ce-50f6-bcb7-822fc53d4e15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.159.98.14","comment":"https://x.com/drb_ra/status/1945879357785813434","timestamp":"1752768766","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"23aba6a9-f0fb-5f2f-a8e3-ccdca423eb84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.90.197","comment":"https://x.com/drb_ra/status/1945879357785813434","timestamp":"1752768766","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"81680bcb-663b-52a5-a46d-10f18b29c4b6","type":"url","category":"Network activity","to_ids":true,"value":"https://43.159.98.14/socialapiVersion=1.1","comment":"https://x.com/drb_ra/status/1945879357785813434","timestamp":"1752768766","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d9a8d1c6-055f-57e0-a184-8ae3ee0fe19d","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.90.197:443","comment":"https://x.com/drb_ra/status/1945879357785813434","timestamp":"1752768766","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7ed721bc-89ca-5c45-ac3d-500ac14ab5f0","type":"domain","category":"Network activity","to_ids":true,"value":"nispgael.biz","comment":"https://x.com/executemalware/status/1945901450141327363","timestamp":"1752774033","distribution":"5"},{"uuid":"a7ee5b6a-adb9-5cb2-aa7f-3a4383b87aef","type":"url","category":"Network activity","to_ids":true,"value":"http://nispgael.biz/7321a45c92764723.php","comment":"https://x.com/executemalware/status/1945901450141327363","timestamp":"1752774033","distribution":"5"},{"uuid":"0539270c-5aac-56d5-8aae-315da92b084a","type":"domain","category":"Network activity","to_ids":true,"value":"xzent024041.weebly.com","comment":"https://x.com/urldna_bot/status/1945906371771122002","timestamp":"1752775206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"17b69427-3347-5e26-8ecc-c2f20226795f","type":"url","category":"Network activity","to_ids":true,"value":"https://xzent024041.weebly.com","comment":"https://x.com/urldna_bot/status/1945906371771122002","timestamp":"1752775206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d0f611f5-1fe4-5f89-a049-24a396fc131a","type":"url","category":"Network activity","to_ids":true,"value":"http://vastkupan.com","comment":"https://x.com/skocherhan/status/1945907718499320110","timestamp":"1752775527","distribution":"5"},{"uuid":"ade7b7c2-daec-5bed-a85f-0176188ecf00","type":"domain","category":"Network activity","to_ids":true,"value":"vastkupan.com","comment":"https://x.com/skocherhan/status/1945907718499320110","timestamp":"1752775527","distribution":"5"},{"uuid":"b942d1a5-92f2-5861-b641-0ef5b16b7c6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.171.185.202","comment":"https://x.com/drb_ra/status/1945917843540767087","timestamp":"1752777941","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"df59c1a1-4da6-5778-a1d4-297ac73dd84b","type":"url","category":"Network activity","to_ids":true,"value":"http://62.171.185.202:31337","comment":"https://x.com/drb_ra/status/1945917843540767087","timestamp":"1752777941","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"040bb8f4-0f22-584f-a52d-5eb0e65db1b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.168.101.27","comment":"https://x.com/drb_ra/status/1945917863929254299","timestamp":"1752777946","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2d5308d5-fa35-5877-9e53-b33aefa2486b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.168.101.27:8443","comment":"https://x.com/drb_ra/status/1945917863929254299","timestamp":"1752777946","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c2dbd202-c698-5ea0-ac40-c8e0a3745c03","type":"url","category":"Network activity","to_ids":true,"value":"http://103.57.248.130:443","comment":"https://x.com/drb_ra/status/1945917878865211555","timestamp":"1752777950","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2164a22d-3776-597c-ab8d-a8ab3ad82cb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.57.248.130","comment":"https://x.com/drb_ra/status/1945917878865211555","timestamp":"1752777950","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"833884d2-97a0-517a-b774-81f09aa4df99","type":"url","category":"Network activity","to_ids":true,"value":"http://5.199.173.205:8888","comment":"https://x.com/drb_ra/status/1945918396995891262","timestamp":"1752778073","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"97fd032f-bf1b-52eb-aef5-66d2360a4f2a","type":"url","category":"Network activity","to_ids":true,"value":"http://47.107.234.40:8888","comment":"https://x.com/drb_ra/status/1945918413206896709","timestamp":"1752778077","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"938c1809-bc59-57f8-ae0a-aa73b7e02a11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.107.234.40","comment":"https://x.com/drb_ra/status/1945918413206896709","timestamp":"1752778077","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"bcfb0778-77a1-5bef-98a8-9788350bf8e5","type":"url","category":"Network activity","to_ids":true,"value":"http://120.78.121.44:8888","comment":"https://x.com/drb_ra/status/1945918440314679502","timestamp":"1752778084","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"3031c0fc-f0cd-51eb-9aab-49e4a6f5a62c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.78.121.44","comment":"https://x.com/drb_ra/status/1945918440314679502","timestamp":"1752778084","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"854c1bc5-aeaf-5083-8751-5db4723cf4d0","type":"url","category":"Network activity","to_ids":true,"value":"http://103.115.50.36:8888","comment":"https://x.com/drb_ra/status/1945918461953061184","timestamp":"1752778089","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9fad1c3f-639e-51f4-a585-a2e32053006a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.115.50.36","comment":"https://x.com/drb_ra/status/1945918461953061184","timestamp":"1752778089","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ccc58bf8-b10b-56de-a46d-931006da0a92","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.18.39:8000","comment":"https://x.com/drb_ra/status/1945918482966565116","timestamp":"1752778094","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"4f733acb-bcc5-5bd1-856e-754896e185f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.18.39","comment":"https://x.com/drb_ra/status/1945918482966565116","timestamp":"1752778094","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"72ad898c-a8bb-52c0-8a12-41166cf794d6","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.97.173:443","comment":"https://x.com/drb_ra/status/1945918504978256295","timestamp":"1752778099","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6dc39eef-9432-5db8-86d7-92be1c545830","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.244.86:995","comment":"https://x.com/drb_ra/status/1945918525828141153","timestamp":"1752778104","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"e13e42b6-02a2-5ec4-9c92-b952f7ea372a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.244.86","comment":"https://x.com/drb_ra/status/1945918525828141153","timestamp":"1752778104","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"8bef2b79-70ff-588c-8aa7-a7b8467a88ad","type":"url","category":"Network activity","to_ids":true,"value":"http://142.181.177.77:2222","comment":"https://x.com/drb_ra/status/1945918546984219001","timestamp":"1752778109","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"bed9a47f-9860-5d39-b2a0-c3916e0aface","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.181.177.77","comment":"https://x.com/drb_ra/status/1945918546984219001","timestamp":"1752778109","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"ac757d18-0ce5-5762-8d79-9704bbfe1223","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.149.95","comment":"https://x.com/drb_ra/status/1945918568047968467","timestamp":"1752778114","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"de6905d3-0caa-5c33-8a29-036b47a3e4ae","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.149.95:443","comment":"https://x.com/drb_ra/status/1945918568047968467","timestamp":"1752778114","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"93ee84ab-b96e-5915-ae68-04d6fbdcb2de","type":"url","category":"Network activity","to_ids":true,"value":"http://45.33.73.196:443","comment":"https://x.com/drb_ra/status/1945918585026613255","timestamp":"1752778118","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"faf84058-33ea-5b4e-9e4f-3c051d98fc7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.33.73.196","comment":"https://x.com/drb_ra/status/1945918585026613255","timestamp":"1752778118","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"3ea75e30-8031-5ace-909a-ebe57e602fa6","type":"url","category":"Network activity","to_ids":true,"value":"http://159.146.116.57:443","comment":"https://x.com/drb_ra/status/1945918601317257353","timestamp":"1752778122","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"db35740c-63ab-59a6-8f39-794ca44e67b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.146.116.57","comment":"https://x.com/drb_ra/status/1945918601317257353","timestamp":"1752778122","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0b6c14ea-0edc-529a-bb2d-c0ef152bc20e","type":"url","category":"Network activity","to_ids":true,"value":"http://34.31.17.91:7443","comment":"https://x.com/drb_ra/status/1945918627137397009","timestamp":"1752778128","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f3d8b110-dc22-5426-9916-a66bcb804d00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.210.96.122","comment":"https://x.com/drb_ra/status/1945918642962510169","timestamp":"1752778132","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d6ad9aee-4f79-505a-a30e-caa56de4e64b","type":"url","category":"Network activity","to_ids":true,"value":"http://51.210.96.122:7443","comment":"https://x.com/drb_ra/status/1945918642962510169","timestamp":"1752778132","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e536e7af-dce8-56e7-925e-f6558937068b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.65.227.196","comment":"https://x.com/drb_ra/status/1945918670477099439","timestamp":"1752778139","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"3f9c45a3-b29f-5461-ad88-5fba1814e97b","type":"url","category":"Network activity","to_ids":true,"value":"http://54.65.227.196:80","comment":"https://x.com/drb_ra/status/1945918670477099439","timestamp":"1752778139","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"bca884d1-2f58-5074-a275-f0b9eeb1b2e5","type":"url","category":"Network activity","to_ids":true,"value":"http://96.9.124.251:443","comment":"https://x.com/drb_ra/status/1945918690869809153","timestamp":"1752778143","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4ab99a00-1b6f-5611-8d4d-060e61d4ee7c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"96.9.124.251","comment":"https://x.com/drb_ra/status/1945918690869809153","timestamp":"1752778143","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2b5746e6-c043-57ae-be98-cbb8ca5683c5","type":"url","category":"Network activity","to_ids":true,"value":"http://178.62.41.137:31337","comment":"https://x.com/drb_ra/status/1945918712705433678","timestamp":"1752778149","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"177f47da-7853-5bc3-b62a-98cd5d5fa792","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.62.41.137","comment":"https://x.com/drb_ra/status/1945918712705433678","timestamp":"1752778149","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5f781974-f638-5461-a58b-a0f6ea56085a","type":"url","category":"Network activity","to_ids":true,"value":"http://92.243.67.245:8088","comment":"https://x.com/drb_ra/status/1945918733702017307","timestamp":"1752778154","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f18ae6f1-65b1-57fc-b232-77222b271ff4","type":"url","category":"Network activity","to_ids":true,"value":"http://92.243.67.245:8080","comment":"https://x.com/drb_ra/status/1945918754249941414","timestamp":"1752778159","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"93f73795-577f-5718-b889-9ef4e5ebdfb8","type":"url","category":"Network activity","to_ids":true,"value":"http://92.243.67.245:25","comment":"https://x.com/drb_ra/status/1945918770062434317","timestamp":"1752778162","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9d2fc7b2-c0a5-5e54-b2a4-ded609436d58","type":"url","category":"Network activity","to_ids":true,"value":"http://92.243.67.245:443","comment":"https://x.com/drb_ra/status/1945918796998352998","timestamp":"1752778169","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"00b767b0-0306-5754-a67b-570ec1533216","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.243.67.245","comment":"https://x.com/drb_ra/status/1945918817399370204","timestamp":"1752778174","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a4857424-4d88-5d15-87ef-68a9e3b2c63f","type":"url","category":"Network activity","to_ids":true,"value":"http://92.243.67.245:8888","comment":"https://x.com/drb_ra/status/1945918817399370204","timestamp":"1752778174","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a6371177-a0a8-5fb0-aa2f-c43f19fde892","type":"url","category":"Network activity","to_ids":true,"value":"http://91.236.116.242:80","comment":"https://x.com/drb_ra/status/1945919333508456678","timestamp":"1752778297","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d4a5b4be-f716-5a70-b845-3255c48865dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.236.116.242","comment":"https://x.com/drb_ra/status/1945919333508456678","timestamp":"1752778297","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2cbf560f-90c8-5a2f-8ffc-6a085b894f5a","type":"url","category":"Network activity","to_ids":true,"value":"http://139.196.160.235:8443","comment":"https://x.com/drb_ra/status/1945919354966520203","timestamp":"1752778302","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6a4c826d-32a6-5479-a864-471d443a70e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.196.160.235","comment":"https://x.com/drb_ra/status/1945919354966520203","timestamp":"1752778302","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1ea4e220-30fa-5700-87fc-88de5d453604","type":"url","category":"Network activity","to_ids":true,"value":"http://3.29.244.163:113","comment":"https://x.com/drb_ra/status/1945919375409565900","timestamp":"1752778307","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a6a0a6f5-61f0-5f57-922c-51259f1a7471","type":"url","category":"Network activity","to_ids":true,"value":"http://3.145.103.35:22199","comment":"https://x.com/drb_ra/status/1945919395768742088","timestamp":"1752778312","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b9c8e51e-7b04-55bc-a99a-0cdbabdc9135","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.93:8808","comment":"https://x.com/drb_ra/status/1945919416836694114","timestamp":"1752778317","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"4b4e25c7-e919-5708-a43a-10568a4f225e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.93","comment":"https://x.com/drb_ra/status/1945919438718460032","timestamp":"1752778322","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"7cc8c51e-38b5-5d3f-9b8f-2092ec84bb68","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.93:2000","comment":"https://x.com/drb_ra/status/1945919438718460032","timestamp":"1752778322","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"95bc6cf5-ff56-56d9-b7b2-8e13ff91ef8b","type":"domain","category":"Network activity","to_ids":true,"value":"loginswebmailstelstrarespaceacquire.weebly.com","comment":"https://x.com/urldna_bot/status/1945936581686092273","timestamp":"1752782409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b0e355e6-ccbd-5478-88e4-a0d5c9c73ad5","type":"url","category":"Network activity","to_ids":true,"value":"https://loginswebmailstelstrarespaceacquire.weebly.com","comment":"https://x.com/urldna_bot/status/1945936581686092273","timestamp":"1752782409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2192c928-dea8-5485-b371-476bab761a4f","type":"url","category":"Network activity","to_ids":true,"value":"http://47.237.120.206:80","comment":"https://x.com/drb_ra/status/1945937155357884572","timestamp":"1752782546","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"27456407-3237-5693-ae4e-56052c914a0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.237.120.206","comment":"https://x.com/drb_ra/status/1945937155357884572","timestamp":"1752782546","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8e4e02d3-199e-5d2a-88a3-49bc6b729c3a","type":"domain","category":"Network activity","to_ids":true,"value":"cleanmymacpro.net","comment":"https://x.com/skocherhan/status/1945937234592452747","timestamp":"1752782565","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"0d47506f-4fa4-5113-a6ec-24a875ea879a","type":"url","category":"Network activity","to_ids":true,"value":"http://cleanmymacpro.net","comment":"https://x.com/skocherhan/status/1945937234592452747","timestamp":"1752782565","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"ffcd6427-b0ee-52e5-947f-fc3ad2952ed3","type":"domain","category":"Network activity","to_ids":true,"value":"almehluz.com","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"ec6f8449-2798-5ae5-882a-822576220996","type":"url","category":"Network activity","to_ids":true,"value":"https://almehluz.com/api.php?call=","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"b8a6d80d-761f-5cff-bbba-70a919396229","type":"url","category":"Network activity","to_ids":true,"value":"https://cmvstation.com/api.php?call=","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"d8cf1487-0f4e-5099-8490-1728343f006f","type":"url","category":"Network activity","to_ids":true,"value":"https://sartaaz.com/api.php?call=","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"e283b428-0543-5adb-9d51-f37e8e11a9cb","type":"domain","category":"Network activity","to_ids":true,"value":"sartaaz.com","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"5f9abd27-4396-5a3a-b24c-345833bf9063","type":"domain","category":"Network activity","to_ids":true,"value":"cmvstation.com","comment":"https://x.com/skocherhan/status/1945937280775888993","timestamp":"1752782576","distribution":"5"},{"uuid":"56269f8a-e525-5a5a-a1b8-37eff9499dd4","type":"url","category":"Network activity","to_ids":true,"value":"http://47.110.32.120:8880","comment":"https://x.com/drb_ra/status/1945937672981074120","timestamp":"1752782669","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"11f9f8fa-e654-5ad7-8caa-dbc12a1742ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.110.32.120","comment":"https://x.com/drb_ra/status/1945937672981074120","timestamp":"1752782669","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cd4ab575-86ef-5519-ae7e-18de3cc5ec7e","type":"url","category":"Network activity","to_ids":true,"value":"http://124.222.54.126:8443","comment":"https://x.com/drb_ra/status/1945937694590157303","timestamp":"1752782674","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"50e4665d-9338-535e-a51b-373b93dc0cc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.222.54.126","comment":"https://x.com/drb_ra/status/1945937694590157303","timestamp":"1752782674","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"838dcbea-9b05-5ae6-8f30-030fff4e5891","type":"url","category":"Network activity","to_ids":true,"value":"http://69.165.74.248:443","comment":"https://x.com/drb_ra/status/1945937710373351647","timestamp":"1752782678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"af9534c3-ea03-5ff2-8f35-454e69abb133","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.165.74.248","comment":"https://x.com/drb_ra/status/1945937710373351647","timestamp":"1752782678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e84806e5-54a9-52d4-a04d-49c8b7dfc744","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.179.86:443","comment":"https://x.com/drb_ra/status/1945937731781120502","timestamp":"1752782683","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fb124797-7c73-5be5-a17d-7fae3b97b941","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.179.86","comment":"https://x.com/drb_ra/status/1945937731781120502","timestamp":"1752782683","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cf7278b6-1303-5db4-a1dc-12f3a27d332b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.24.13:443","comment":"https://x.com/drb_ra/status/1945937753075564559","timestamp":"1752782688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a0f7f61c-22b9-5010-ad26-fd259f572e7a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.24.13","comment":"https://x.com/drb_ra/status/1945937753075564559","timestamp":"1752782688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d296438-41bd-54fa-8836-4e3de9264308","type":"url","category":"Network activity","to_ids":true,"value":"http://39.99.227.179:80","comment":"https://x.com/drb_ra/status/1945937775242465503","timestamp":"1752782694","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1616ca5d-082d-54c4-92a3-ac638341f844","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.99.227.179","comment":"https://x.com/drb_ra/status/1945937775242465503","timestamp":"1752782694","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"daff5d5e-0fa4-514a-be8a-9b6bc0396982","type":"url","category":"Network activity","to_ids":true,"value":"http://189.1.243.105:80","comment":"https://x.com/drb_ra/status/1945937796641820897","timestamp":"1752782699","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"940e3960-6051-51c0-be9c-866384cb9081","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.1.243.105","comment":"https://x.com/drb_ra/status/1945937796641820897","timestamp":"1752782699","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aedae441-fd5a-5421-8b91-999c7a82724a","type":"url","category":"Network activity","to_ids":true,"value":"http://43.159.98.14","comment":"https://x.com/threatquery/status/1945951656811679892","timestamp":"1752786003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"f2ff21bb-01bb-5969-b4c1-68f8635ebbac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.41.138.224","comment":"https://x.com/threatquery/status/1945951660703965251","timestamp":"1752786004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"1378c87c-7a0e-5ee6-ba86-73565e15907a","type":"url","category":"Network activity","to_ids":true,"value":"http://110.41.138.224","comment":"https://x.com/threatquery/status/1945951660703965251","timestamp":"1752786004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"57f94137-9c37-55b6-9bf9-818bcce504f8","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.87","comment":"https://x.com/threatquery/status/1945951658900328563","timestamp":"1752786004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"3a9c58d2-2bc1-5405-9803-571a64ddc41a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.87","comment":"https://x.com/threatquery/status/1945951658900328563","timestamp":"1752786004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"755e4140-3f6a-50ee-9400-c68242d50f48","type":"url","category":"Network activity","to_ids":true,"value":"http://106.14.8.189:443","comment":"https://x.com/drb_ra/status/1945956527149400339","timestamp":"1752787164","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ecf078ab-da1d-547d-8a63-9664ffaec04e","type":"url","category":"Network activity","to_ids":true,"value":"https://106.14.8.189/s/58462514417","comment":"https://x.com/drb_ra/status/1945956527149400339","timestamp":"1752787164","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8ba0f3e7-df99-5bb7-8b98-b483017d358c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.61.75:6666","comment":"https://x.com/drb_ra/status/1945956548485779938","timestamp":"1752787169","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bbc67be6-d570-53fd-821c-7a246aa67ad2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.90.197:80","comment":"https://x.com/drb_ra/status/1945957090905780282","timestamp":"1752787299","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cc3d3e00-fee9-5178-9f28-85e25563a3fe","type":"url","category":"Network activity","to_ids":true,"value":"https://47.245.90.197/socialapiVersion=1.1","comment":"https://x.com/drb_ra/status/1945957090905780282","timestamp":"1752787299","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"33437a48-b174-59a5-ac6b-0f0aa35ff465","type":"domain","category":"Network activity","to_ids":true,"value":"apple-ai.vercel.app","comment":"https://x.com/urldna_bot/status/1945966768545005708","timestamp":"1752789606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"43bc067d-5362-56fe-ac11-3d151a88d084","type":"url","category":"Network activity","to_ids":true,"value":"http://apple-ai.vercel.app","comment":"https://x.com/urldna_bot/status/1945966768545005708","timestamp":"1752789606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3a08f9c8-39ac-5bcd-9a34-a644edcf34fd","type":"url","category":"Network activity","to_ids":true,"value":"https://gtamurz.icu/C5z7ON/","comment":"https://x.com/masaomi346/status/1945984271422009770","timestamp":"1752793779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5fcd94d4-88a1-5855-83b4-86cc8740cc4f","type":"domain","category":"Network activity","to_ids":true,"value":"szcyid.com","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c777079f-32ae-5382-b011-a5b3afb5b6f4","type":"url","category":"Network activity","to_ids":true,"value":"https://szcyid.com/C5z7ON","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"205af749-68a7-5181-aa0e-e7e654e4c737","type":"domain","category":"Network activity","to_ids":true,"value":"husjabsxc.bond","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee95d861-6a8f-55fe-8055-a5a2dac98e4c","type":"url","category":"Network activity","to_ids":true,"value":"https://husjabsxc.bond","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c048bb84-46db-522f-ae00-13092f3ce932","type":"domain","category":"Network activity","to_ids":true,"value":"gtamurz.icu","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4c34c8e-2c22-5d24-a477-d667e92ed06e","type":"url","category":"Network activity","to_ids":true,"value":"https://gtamurz.icu/C5z7ON","comment":"https://x.com/harugasumi/status/1945984520047755354","timestamp":"1752793838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cdf7ef6-87ea-5546-8be3-4a537545ef5a","type":"domain","category":"Network activity","to_ids":true,"value":"schoolviewers9876542567894.weebly.com","comment":"https://x.com/urldna_bot/status/1945996968796254328","timestamp":"1752796806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ede4415a-6f86-5217-855e-693611a19211","type":"url","category":"Network activity","to_ids":true,"value":"https://schoolviewers9876542567894.weebly.com","comment":"https://x.com/urldna_bot/status/1945996968796254328","timestamp":"1752796806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d36cbe1a-cd9e-5c7f-86a4-ccc927500a55","type":"domain","category":"Network activity","to_ids":true,"value":"attwebteam.weebly.com","comment":"https://x.com/urldna_bot/status/1946027163938963709","timestamp":"1752804005","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5f43c366-def1-55ca-9e88-68652ceca1d0","type":"url","category":"Network activity","to_ids":true,"value":"https://attwebteam.weebly.com","comment":"https://x.com/urldna_bot/status/1946027163938963709","timestamp":"1752804005","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"24308d8f-a7b8-53e8-a7cd-73602cef48da","type":"domain","category":"Network activity","to_ids":true,"value":"pensi.me","comment":"https://x.com/drb_ra/status/1946030453879722187","timestamp":"1752804790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"74b57a06-8fc5-5939-bfeb-25d775f755ef","type":"url","category":"Network activity","to_ids":true,"value":"https://pensi.me/c/msdownload/update/others/2016/12/29136388_","comment":"https://x.com/drb_ra/status/1946030453879722187","timestamp":"1752804790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6328f602-b6f3-5e06-b572-ea180393ae50","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:8443","comment":"https://x.com/drb_ra/status/1946030453879722187","timestamp":"1752804790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1946030453879722187","timestamp":"1752804790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da96ac33-e91c-514f-821b-58565f0d4f81","type":"domain","category":"Network activity","to_ids":true,"value":"Mutuum.finance","comment":"https://x.com/Ammah33/status/1946033575272272212","timestamp":"1752805534","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"771fe2c6-2efa-534b-ae1b-d941f71cea49","type":"url","category":"Network activity","to_ids":true,"value":"http://Mutuum.finance","comment":"https://x.com/Ammah33/status/1946033575272272212","timestamp":"1752805534","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"a2efdd49-db8b-56a8-a6c6-ce038c6dc060","type":"url","category":"Network activity","to_ids":true,"value":"http://Dawgz.ai","comment":"https://x.com/woodeexm/status/1946044194943881654","timestamp":"1752808066","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"2e0f769d-b208-5af0-afea-0a7956eac239","type":"domain","category":"Network activity","to_ids":true,"value":"Dawgz.ai","comment":"https://x.com/woodeexm/status/1946044194943881654","timestamp":"1752808066","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"2f858885-6a73-5d7e-b3c2-337a5ff39849","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.221.151.232","comment":"https://x.com/sicehice/status/1946053411822043646","timestamp":"1752810263","distribution":"5"},{"uuid":"6240ea9f-d838-513c-9bac-352b7183b008","type":"url","category":"Network activity","to_ids":true,"value":"http://77.221.151.232:47583/test","comment":"https://x.com/sicehice/status/1946053411822043646","timestamp":"1752810263","distribution":"5"},{"uuid":"e6cda5c2-6953-52e3-9736-7f623a2719d5","type":"domain","category":"Network activity","to_ids":true,"value":"wallet-token-fix.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1946057365784027498","timestamp":"1752811206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4db92d74-f8d0-54db-aa86-060e441b4273","type":"url","category":"Network activity","to_ids":true,"value":"https://wallet-token-fix.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1946057365784027498","timestamp":"1752811206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0d4dc0d2-cd26-5fd8-93de-dcfcd1ad3eaa","type":"md5","category":"Payload delivery","to_ids":true,"value":"5a3627c1147e087ecdd41e54786a7c94","comment":"https://x.com/ReBensk/status/1946063898828038561","timestamp":"1752812764","distribution":"5","Tag":[{"name":"malware"},{"name":"Trojan"},{"name":"Android"}]},{"uuid":"d1587a8d-f7ab-5d48-8e04-7f8753023765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.145.218","comment":"https://x.com/solostalking/status/1946069612090495059","timestamp":"1752814126","distribution":"5"},{"uuid":"42490c4a-2c0a-5d21-bb90-ef4fd7d4793d","type":"domain","category":"Network activity","to_ids":true,"value":"netfllx-myportals.info","comment":"https://x.com/urldna_bot/status/1946087580480467287","timestamp":"1752818410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ca1efae3-f4c4-5f8d-8466-54eae0c5a392","type":"url","category":"Network activity","to_ids":true,"value":"https://netfllx-myportals.info","comment":"https://x.com/urldna_bot/status/1946087580480467287","timestamp":"1752818410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"06ba998f-b87c-502a-9865-90f0d0c2536d","type":"md5","category":"Payload delivery","to_ids":true,"value":"1136bb8b27960a6a56f45581a3fa8363","comment":"https://x.com/ReBensk/status/1946087902179680355","timestamp":"1752818487","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"7d420ff4-649d-5dc3-a7df-f072722ec371","type":"url","category":"Network activity","to_ids":true,"value":"http://skdgh.top/riwq","comment":"https://x.com/K_N1kolenko/status/1946089098810151153","timestamp":"1752818772","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1de6ffa5-602f-545d-ab4b-156ffbe8aed1","type":"domain","category":"Network activity","to_ids":true,"value":"skdgh.top","comment":"https://x.com/K_N1kolenko/status/1946089098810151153","timestamp":"1752818772","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"6d9e59da-93ab-5f5a-a95d-eb368b1e1462","type":"url","category":"Network activity","to_ids":true,"value":"http://gigohe.top/diau","comment":"https://x.com/K_N1kolenko/status/1946089781919723711","timestamp":"1752818935","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"f9f1af76-d8ca-52bc-b281-5c3ef94a5172","type":"domain","category":"Network activity","to_ids":true,"value":"mcaumnb.shop","comment":"https://x.com/K_N1kolenko/status/1946089781919723711","timestamp":"1752818935","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"8f4d022e-f70f-5a96-b4b5-5f5907e27d46","type":"url","category":"Network activity","to_ids":true,"value":"http://mcaumnb.shop","comment":"https://x.com/K_N1kolenko/status/1946089781919723711","timestamp":"1752818935","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"e785f91d-de3f-50e1-9bca-56eb17f8ea06","type":"domain","category":"Network activity","to_ids":true,"value":"gigohe.top","comment":"https://x.com/K_N1kolenko/status/1946089781919723711","timestamp":"1752818935","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"2a8bb6a0-4447-5bd8-ab00-39949fd26f92","type":"url","category":"Network activity","to_ids":true,"value":"http://dogbij.top/tiqo","comment":"https://x.com/K_N1kolenko/status/1946090572654989645","timestamp":"1752819123","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c6b5aaeb-3561-59cc-b8e0-cf1cca72b082","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/zxzxroma","comment":"https://x.com/K_N1kolenko/status/1946090572654989645","timestamp":"1752819123","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"ee418297-3ab5-5bf0-a8df-a2ffa0427da1","type":"domain","category":"Network activity","to_ids":true,"value":"dogbij.top","comment":"https://x.com/K_N1kolenko/status/1946090572654989645","timestamp":"1752819123","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"2a084af9-eea4-584b-bdb9-ca1b043afd27","type":"url","category":"Network activity","to_ids":true,"value":"http://45.38.20.87:443","comment":"https://x.com/drb_ra/status/1946099257817068019","timestamp":"1752821194","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c6a01672-0ef9-5e5b-b77b-14ee02a9ca3c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.38.20.87","comment":"https://x.com/drb_ra/status/1946099257817068019","timestamp":"1752821194","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"507c367b-37ab-5327-b3f4-30d5b946b3ca","type":"url","category":"Network activity","to_ids":true,"value":"http://5.230.34.149:7443","comment":"https://x.com/drb_ra/status/1946099278130077699","timestamp":"1752821199","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a8cfe764-9a02-5259-9c96-9f53453a1c2a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.154.223.30:443","comment":"https://x.com/drb_ra/status/1946099293145719205","timestamp":"1752821202","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"b9ecfbc0-2c53-5fa6-82be-8b28019a2271","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.154.223.30","comment":"https://x.com/drb_ra/status/1946099293145719205","timestamp":"1752821202","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"31926bf6-5842-5fb7-a13d-0a21ab069159","type":"url","category":"Network activity","to_ids":true,"value":"http://52.12.185.192:443","comment":"https://x.com/drb_ra/status/1946099308622741513","timestamp":"1752821206","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"eafd5aba-c23c-55d0-91ef-bd9ba2d7bff4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.12.185.192","comment":"https://x.com/drb_ra/status/1946099308622741513","timestamp":"1752821206","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1ee609d6-b690-5fee-a512-8529a97aa115","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.207.65.19","comment":"https://x.com/drb_ra/status/1946099329019646372","timestamp":"1752821211","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bcb5e3fb-a332-573e-807b-474d0a74dd96","type":"url","category":"Network activity","to_ids":true,"value":"http://185.207.65.19:443","comment":"https://x.com/drb_ra/status/1946099329019646372","timestamp":"1752821211","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"31e0c979-92f8-52dc-8f46-f3f2c0b5e3e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.234.116.46","comment":"https://x.com/drb_ra/status/1946099349122941399","timestamp":"1752821216","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"dcf1d6f8-dd22-54ca-b240-45fd959ea533","type":"url","category":"Network activity","to_ids":true,"value":"http://62.234.116.46:31337","comment":"https://x.com/drb_ra/status/1946099349122941399","timestamp":"1752821216","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"94dfc939-29d0-58e2-9d92-4130e25701a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.111.143.7","comment":"https://x.com/drb_ra/status/1946099369700131047","timestamp":"1752821221","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8afdb23b-636f-59df-9042-9026e032d09a","type":"url","category":"Network activity","to_ids":true,"value":"http://89.111.143.7:31337","comment":"https://x.com/drb_ra/status/1946099369700131047","timestamp":"1752821221","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0dc90a92-2111-5395-a229-df38562e49dc","type":"url","category":"Network activity","to_ids":true,"value":"http://216.45.61.141:31337","comment":"https://x.com/drb_ra/status/1946099390726221936","timestamp":"1752821226","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"df0fb2ce-2008-5dc6-8b35-819b88c8e222","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.45.61.141","comment":"https://x.com/drb_ra/status/1946099390726221936","timestamp":"1752821226","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8ad30ce6-76f0-535f-9d3a-2ae9cb66f9f9","type":"url","category":"Network activity","to_ids":true,"value":"http://95.130.227.189:31337","comment":"https://x.com/drb_ra/status/1946099411664110027","timestamp":"1752821231","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"af61316e-bcc8-569a-9856-70e2593d821f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.130.227.189","comment":"https://x.com/drb_ra/status/1946099411664110027","timestamp":"1752821231","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a23664e1-e662-531c-8d97-27da31906f7d","type":"url","category":"Network activity","to_ids":true,"value":"http://40.177.115.50:104","comment":"https://x.com/drb_ra/status/1946099928364614082","timestamp":"1752821354","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"89b8d9f1-a238-5b04-9d65-771e9658c1bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.177.115.50","comment":"https://x.com/drb_ra/status/1946099928364614082","timestamp":"1752821354","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7cbee9ea-5b90-5df2-93f2-5bf0bfb44824","type":"url","category":"Network activity","to_ids":true,"value":"http://52.194.225.30:3390","comment":"https://x.com/drb_ra/status/1946099951290781733","timestamp":"1752821359","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"72fb73fd-7424-5076-890a-e398266541bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.194.225.30","comment":"https://x.com/drb_ra/status/1946099951290781733","timestamp":"1752821359","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"30f55b94-4275-5dd7-9cac-806a722d2b15","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.172.231:20547","comment":"https://x.com/drb_ra/status/1946099971440230455","timestamp":"1752821364","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"bbfc62e8-154a-5cf2-a983-e8b640f1041a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.172.231","comment":"https://x.com/drb_ra/status/1946099971440230455","timestamp":"1752821364","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2714bff4-2bd5-5ba5-9cd6-7e30e3af0ab8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.108.241","comment":"https://x.com/drb_ra/status/1946099986556506453","timestamp":"1752821368","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"0cebdb26-d435-5790-8343-072430a0bc82","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.108.241:5000","comment":"https://x.com/drb_ra/status/1946099986556506453","timestamp":"1752821368","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"7fd352cf-3ce9-5a10-bd43-cf24d05ed166","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.21.85.133","comment":"https://x.com/drb_ra/status/1946100013802676293","timestamp":"1752821374","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6441f234-a094-5201-9649-bebdfa7818a8","type":"url","category":"Network activity","to_ids":true,"value":"http://65.21.85.133:81","comment":"https://x.com/drb_ra/status/1946100013802676293","timestamp":"1752821374","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8f42b22b-7968-5e23-b09c-39b2e8ae3b1e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.155.126.158:80","comment":"https://x.com/drb_ra/status/1946100034430181871","timestamp":"1752821379","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b37b8833-a1ff-5497-89ba-0786578484f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.155.126.158","comment":"https://x.com/drb_ra/status/1946100034430181871","timestamp":"1752821379","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"784ae2dd-61ef-5304-b1b0-6f9faac030b3","type":"url","category":"Network activity","to_ids":true,"value":"http://77.93.142.238:81","comment":"https://x.com/drb_ra/status/1946100054269345965","timestamp":"1752821384","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8a553c5e-2e09-5793-84ee-1dcd63561078","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.93.142.238","comment":"https://x.com/drb_ra/status/1946100054269345965","timestamp":"1752821384","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b7b6e96f-0641-549b-b635-d01da45b55d8","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.230:8808","comment":"https://x.com/drb_ra/status/1946100075156947221","timestamp":"1752821389","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"fd1018c1-587c-528d-ba42-51eb43db11d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.230","comment":"https://x.com/drb_ra/status/1946100075156947221","timestamp":"1752821389","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"da296d87-a7ff-5867-b5fe-34f48f90b608","type":"url","category":"Network activity","to_ids":true,"value":"http://13.60.92.79:587","comment":"https://x.com/drb_ra/status/1946100095021179010","timestamp":"1752821394","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fc92e536-a545-5b9d-bf3b-87656d511c0d","type":"url","category":"Network activity","to_ids":true,"value":"http://13.60.92.79:443","comment":"https://x.com/drb_ra/status/1946100115275419785","timestamp":"1752821398","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a590be26-813b-521e-8ad5-1b40fca7c2e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.60.92.79","comment":"https://x.com/drb_ra/status/1946100115275419785","timestamp":"1752821398","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9b329fc3-9de5-5904-948b-c841499b828b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.30.120.130","comment":"https://x.com/drb_ra/status/1946100135982772548","timestamp":"1752821403","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d15fc62f-2c91-59c4-92cc-3cf22a6e9446","type":"url","category":"Network activity","to_ids":true,"value":"http://193.30.120.130:9000","comment":"https://x.com/drb_ra/status/1946100135982772548","timestamp":"1752821403","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f2718651-1742-518f-abc3-2e837697e996","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.20:45051","comment":"https://x.com/drb_ra/status/1946100156853580103","timestamp":"1752821408","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"c459e23f-2a08-5a90-b2f3-cf8d44202ee1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.20","comment":"https://x.com/drb_ra/status/1946100156853580103","timestamp":"1752821408","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"01b0067c-687d-5529-8294-f7fa9be3d924","type":"url","category":"Network activity","to_ids":true,"value":"http://47.243.207.46:8888","comment":"https://x.com/drb_ra/status/1946100175375605851","timestamp":"1752821413","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"36004d98-7aec-58bb-908b-65c2fb7a8a84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.243.207.46","comment":"https://x.com/drb_ra/status/1946100175375605851","timestamp":"1752821413","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"92d51d0b-9940-5254-a76c-91618ccdd648","type":"url","category":"Network activity","to_ids":true,"value":"http://106.52.179.150:4433","comment":"https://x.com/drb_ra/status/1946100193696399626","timestamp":"1752821417","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e09912d0-dafc-5418-9719-f11a5c7dad0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.52.179.150","comment":"https://x.com/drb_ra/status/1946100193696399626","timestamp":"1752821417","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"961a31ab-3a49-5ec3-aafd-5218d81abe78","type":"url","category":"Network activity","to_ids":true,"value":"http://64.94.84.22:443","comment":"https://x.com/drb_ra/status/1946100209034866743","timestamp":"1752821421","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"8677ae15-bdbd-5a71-9ef7-7b3ebf7cb3b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.94.84.22","comment":"https://x.com/drb_ra/status/1946100209034866743","timestamp":"1752821421","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c5a971f9-fe9a-5b06-81b5-8e9bcf5255a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.201.9.222","comment":"https://x.com/RakeshKrish12/status/1946100969512865896","timestamp":"1752821602","distribution":"5","Tag":[{"name":"ransomware"},{"name":"malware"}]},{"uuid":"34e79b89-a297-5f10-84a1-966f9fb2ce7d","type":"domain","category":"Network activity","to_ids":true,"value":"coinbasepr04.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946117763925192763","timestamp":"1752825606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8745497b-0585-5e5a-859c-7a20fb5084c5","type":"url","category":"Network activity","to_ids":true,"value":"http://coinbasepr04.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946117763925192763","timestamp":"1752825606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1313c546-b33f-57e7-b120-eeb7a34b1bee","type":"domain","category":"Network activity","to_ids":true,"value":"ompowerterminus.com","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"6b69eaf5-ccd6-5a2a-93a9-5d9f27503f7a","type":"url","category":"Network activity","to_ids":true,"value":"http://backup.intelupates.com","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"b6c7c816-c3f6-5d33-b37c-51719b426fa2","type":"md5","category":"Payload delivery","to_ids":true,"value":"c59efe3739ae3e2814ff48f41b0d0ad8","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"97049911-ff2b-5521-adcd-6b17b3c80f9d","type":"url","category":"Network activity","to_ids":true,"value":"http://ompowerterminus.com","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"1af52e97-33cf-5a28-a146-11535f787c98","type":"domain","category":"Network activity","to_ids":true,"value":"backup.intelupates.com","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"7315241e-8b44-53b8-9c01-4e726af0d6aa","type":"md5","category":"Payload delivery","to_ids":true,"value":"4cc0cc070ec8a51b437ddc393487bb7e","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"182b5762-d72f-50a1-8af5-cdaaa8b32032","type":"md5","category":"Payload delivery","to_ids":true,"value":"f4a82380cc0e246a4f576bc81fa6f879","comment":"https://x.com/PrakkiSathwik/status/1946122493145776131","timestamp":"1752826734","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"5dbb3997-13f3-50d5-8dbb-7c73e476eb07","type":"domain","category":"Network activity","to_ids":true,"value":"extension-browser-nkbihsdfnklwefkwemkwfkmkmslqldqrgr.info.vancltyappllance.com","comment":"https://x.com/urldna_bot/status/1946147960762376651","timestamp":"1752832806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a911cd06-817c-522c-a199-991ba16ef15a","type":"url","category":"Network activity","to_ids":true,"value":"https://extension-browser-nkbihsdfnklwefkwemkwfkmkmslqldqrgr.info.vancltyappllance.com","comment":"https://x.com/urldna_bot/status/1946147960762376651","timestamp":"1752832806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b1807fda-3ff5-55ca-9263-4a4639f42ffa","type":"url","category":"Network activity","to_ids":true,"value":"http://43.163.221.96:8080","comment":"https://x.com/drb_ra/status/1946156401962651651","timestamp":"1752834818","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9e20311b-e777-5117-97b1-2f1e341db896","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.163.221.96","comment":"https://x.com/drb_ra/status/1946156401962651651","timestamp":"1752834818","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"342b26dd-0b0b-5f88-b439-77eb85e9d7b9","type":"url","category":"Network activity","to_ids":true,"value":"http://193.112.84.248:443","comment":"https://x.com/drb_ra/status/1946156425488502826","timestamp":"1752834824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ed38bf56-7057-5b21-9a62-e97585191af6","type":"url","category":"Network activity","to_ids":true,"value":"http://81.71.85.144:443","comment":"https://x.com/drb_ra/status/1946156448695652732","timestamp":"1752834829","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9f956e21-5e51-5a84-b898-7012e61e4969","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.85.144","comment":"https://x.com/drb_ra/status/1946156448695652732","timestamp":"1752834829","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f11d4f3-9386-57c8-ad82-7439abbe4688","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.84.248","comment":"https://x.com/drb_ra/status/1946156448695652732","timestamp":"1752834829","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"25d49d41-042e-5904-aa69-095795c0dcaf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.224.135.193","comment":"https://x.com/drb_ra/status/1946156472280252812","timestamp":"1752834835","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1824dce2-ae05-5ed1-abc2-15dad5d1e139","type":"url","category":"Network activity","to_ids":true,"value":"http://139.224.135.193:80","comment":"https://x.com/drb_ra/status/1946156472280252812","timestamp":"1752834835","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6585c678-3577-5e29-a92c-e09e3e892450","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.178.12","comment":"https://x.com/drb_ra/status/1946156495571210336","timestamp":"1752834841","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dc3c95a4-b5bd-55b3-a1a3-ba505b414f1d","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.178.12:80","comment":"https://x.com/drb_ra/status/1946156495571210336","timestamp":"1752834841","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"406c6288-ef2b-5e6e-bcf0-5c0242e6aa6b","type":"url","category":"Network activity","to_ids":true,"value":"https://47.121.136.191/api/v1/get","comment":"https://x.com/drb_ra/status/1946156519852007850","timestamp":"1752834846","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"28d7e431-f671-507c-8e1e-c6d027e2a152","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.181.81:443","comment":"https://x.com/drb_ra/status/1946156519852007850","timestamp":"1752834846","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"10601197-0e6b-5336-a4d4-af436930be25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.181.81","comment":"https://x.com/drb_ra/status/1946156519852007850","timestamp":"1752834846","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d53e0c40-ee91-5e26-8deb-e05559f1b632","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.136.191","comment":"https://x.com/drb_ra/status/1946156519852007850","timestamp":"1752834846","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d2290a8-fe8f-51e5-9771-a7f660007d9d","type":"domain","category":"Network activity","to_ids":true,"value":"souguo.icu","comment":"https://x.com/drb_ra/status/1946156544489304074","timestamp":"1752834852","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78c8e15c-af19-5613-8bcb-2d646e0db952","type":"url","category":"Network activity","to_ids":true,"value":"https://www.souguo.icu/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1946156544489304074","timestamp":"1752834852","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e62f38de-41c1-5042-a84f-c8b5503fe01f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.224.34.90:443","comment":"https://x.com/drb_ra/status/1946156544489304074","timestamp":"1752834852","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"81b879db-7082-5596-a4ea-fb14cb58afa8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.224.34.90","comment":"https://x.com/drb_ra/status/1946156544489304074","timestamp":"1752834852","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2ae2f2cf-e5f5-552f-b72d-56e9f5fd883e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.223.123.227:1234","comment":"https://x.com/drb_ra/status/1946156567969124664","timestamp":"1752834858","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b03a81aa-0344-506d-9b62-c45bb17ed7b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.223.123.227","comment":"https://x.com/drb_ra/status/1946156567969124664","timestamp":"1752834858","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78d73c0a-9981-51fa-b389-c65b09d228ed","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.211.239:80","comment":"https://x.com/drb_ra/status/1946156592321200523","timestamp":"1752834864","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fe76cade-40d4-5e2b-8a19-ae6e0780b197","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.211.239","comment":"https://x.com/drb_ra/status/1946156592321200523","timestamp":"1752834864","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"548a2e3f-3ee8-5841-8ec8-aaf09c5e39c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.25.85.198","comment":"https://x.com/drb_ra/status/1946156615461220571","timestamp":"1752834869","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc3be882-a7de-593d-b74c-f732d98d142a","type":"url","category":"Network activity","to_ids":true,"value":"http://118.25.85.198:8899","comment":"https://x.com/drb_ra/status/1946156615461220571","timestamp":"1752834869","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc49f01e-1ead-5d53-88e1-ba92749c8dca","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.87.43:8001","comment":"https://x.com/drb_ra/status/1946156639167365415","timestamp":"1752834875","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a0a7dcd5-d08d-59a3-9265-0e1c579ec756","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.87.43","comment":"https://x.com/drb_ra/status/1946156639167365415","timestamp":"1752834875","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2fe0fa56-9e68-5915-9d7e-3d849d117cd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.178.104.252","comment":"https://x.com/drb_ra/status/1946157158283858409","timestamp":"1752834999","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d841a3eb-cf40-5ecb-ac72-a991539fb08d","type":"url","category":"Network activity","to_ids":true,"value":"http://175.178.104.252:443","comment":"https://x.com/drb_ra/status/1946157158283858409","timestamp":"1752834999","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2bb7ec4d-850f-5f25-8df3-d75a29cc5cf0","type":"url","category":"Network activity","to_ids":true,"value":"http://110.40.155.27:80","comment":"https://x.com/drb_ra/status/1946157181411229713","timestamp":"1752835004","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"51a516d5-0000-5e03-8c1f-c63858d0a177","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.40.155.27","comment":"https://x.com/drb_ra/status/1946157181411229713","timestamp":"1752835004","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4457c90f-d3e9-552f-b24c-aa0b3deb0d75","type":"md5","category":"Payload delivery","to_ids":true,"value":"B02679ECB54344490F87F91DDA88ACE6","comment":"https://x.com/fbgwls245/status/1946164143540863355","timestamp":"1752836664","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"19520fb2-0c94-5535-b997-269570c3c9cb","type":"url","category":"Network activity","to_ids":true,"value":"https://59.110.64.250/api/3","comment":"https://x.com/drb_ra/status/1946168326775865566","timestamp":"1752837661","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be555697-a834-5bb8-a9ba-ecaf9ea32ce3","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.64.250:8080","comment":"https://x.com/drb_ra/status/1946168326775865566","timestamp":"1752837661","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dc8e043f-97e8-5a7d-b6f6-0fdc97255de6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.64.250","comment":"https://x.com/drb_ra/status/1946168326775865566","timestamp":"1752837661","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"271d02c4-8b60-58ef-8a5b-96606727c262","type":"url","category":"Network activity","to_ids":true,"value":"http://faq-page-code-166863010078512-s1fj.vercel.app/business.help/facebook.meta.com-business-case-id155038421992698.html","comment":"https://x.com/urldna_bot/status/1946178176813506561","timestamp":"1752840010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c5310fe4-b701-5ee1-85e5-2ebfb56ab7b5","type":"domain","category":"Network activity","to_ids":true,"value":"faq-page-code-166863010078512-s1fj.vercel.app","comment":"https://x.com/urldna_bot/status/1946178176813506561","timestamp":"1752840010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f93d4be1-436d-52eb-94d9-2adc5d4dff2e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.228.72.104","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"caec12fc-688c-5942-89df-c03668464aa4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.227.236.210","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"cff01f7d-736b-5ac3-81d2-798081c99004","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.189.20.81","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"c4e23e43-8672-5154-9db8-99f4c95fe672","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.110.49.104","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"80cf0442-8b34-57ee-9ef0-d00558dc965e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.26.28","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"07979767-3005-5ce0-b827-efcf6daa5bbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.26.199","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"eb3d525e-4f55-5761-bac7-00f8521572f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.118.146.156","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"2e77ef6b-4692-5b7a-8f1d-72f2828c551c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.247","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"f3da67da-6a3d-594f-830f-c5cb672f32e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.38.193","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"097a2144-14ed-5f7e-9deb-242ec243c3e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.130.231.213","comment":"https://x.com/K_N1kolenko/status/1946183383450562596","timestamp":"1752841251","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"a199f1ad-3713-5e68-bf69-72833dfcf5b4","type":"domain","category":"Network activity","to_ids":true,"value":"apexservices.duckdns.org","comment":"https://x.com/ShanHolo/status/1946189988749570323","timestamp":"1752842826","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"ac9e0a28-6670-581b-9d80-7ba84b52936a","type":"url","category":"Network activity","to_ids":true,"value":"http://apexservices.duckdns.org/cbot/","comment":"https://x.com/ShanHolo/status/1946189988749570323","timestamp":"1752842826","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"e0daeeb0-5c95-5fab-8740-a3741f277ece","type":"md5","category":"Payload delivery","to_ids":true,"value":"636D05585C7263469A5E5C37341B3704","comment":"https://x.com/fbgwls245/status/1946200757268787273","timestamp":"1752845393","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"9d2f127c-cdb0-5150-a4be-637564ce83e2","type":"md5","category":"Payload delivery","to_ids":true,"value":"C07DE2813A8D6502D54F18DF57D74B6F","comment":"https://x.com/fbgwls245/status/1946200757268787273","timestamp":"1752845393","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3dc75f46-654e-5fa4-989c-eeb0bac919f4","type":"url","category":"Network activity","to_ids":true,"value":"https://revenue-ie-verify.com","comment":"https://x.com/urldna_bot/status/1946208364750319752","timestamp":"1752847207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"316f71eb-4970-5eb1-af7e-7abce55e2c3d","type":"domain","category":"Network activity","to_ids":true,"value":"revenue-ie-verify.com","comment":"https://x.com/urldna_bot/status/1946208364750319752","timestamp":"1752847207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f7c934b2-26f9-5581-9f55-bf4a85d7a622","type":"domain","category":"Network activity","to_ids":true,"value":"9oqnc9.top","comment":"https://x.com/harugasumi/status/1946228856312176649","timestamp":"1752852093","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"959fe48d-2764-5636-bee3-7c579a182d5f","type":"url","category":"Network activity","to_ids":true,"value":"https://9oqnc9.top/q1hXzJlN7","comment":"https://x.com/harugasumi/status/1946228856312176649","timestamp":"1752852093","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d63a19ce-d548-52cd-b68c-e04f7f8c2234","type":"domain","category":"Network activity","to_ids":true,"value":"btconnect-voicem.weebly.com","comment":"https://x.com/urldna_bot/status/1946238558534062514","timestamp":"1752854406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a15e7e50-6daf-5b53-a05f-624bf3048f56","type":"url","category":"Network activity","to_ids":true,"value":"https://btconnect-voicem.weebly.com","comment":"https://x.com/urldna_bot/status/1946238558534062514","timestamp":"1752854406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dc26a962-b762-5f38-afee-7978f21e1903","type":"domain","category":"Network activity","to_ids":true,"value":"mobilepaydenmarks.online","comment":"https://x.com/TeamDreier/status/1946239897725009995","timestamp":"1752854725","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d678ae85-1548-5a5e-b5a2-cac231c91f27","type":"url","category":"Network activity","to_ids":true,"value":"https://mobilepaydenmarks.online","comment":"https://x.com/TeamDreier/status/1946239897725009995","timestamp":"1752854725","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77535696-9454-56bd-984d-c45c2afbaad8","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.peruadelante.com","comment":"https://x.com/TeamDreier/status/1946239897725009995","timestamp":"1752854725","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"faa1e54f-5b4c-5f7e-9992-a95c9f5f3e62","type":"url","category":"Network activity","to_ids":true,"value":"http://ns2.peruadelante.com","comment":"https://x.com/TeamDreier/status/1946239897725009995","timestamp":"1752854725","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00606efc-6510-5c55-8b13-42cacf854833","type":"url","category":"Network activity","to_ids":true,"value":"http://bit.ly/ipsos_ua","comment":"https://x.com/skocherhan/status/1946250243143508203","timestamp":"1752857192","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f3c446b-fd7d-5f7f-a288-0f712c2c50bf","type":"domain","category":"Network activity","to_ids":true,"value":"eygpn.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32014d1e-e176-590f-8226-3d12e67c8106","type":"url","category":"Network activity","to_ids":true,"value":"https://eygpn.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7cdb9e7a-3702-5d18-b35f-028d074c37ea","type":"url","category":"Network activity","to_ids":true,"value":"https://kjdbx.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efce2d53-7962-525c-b039-bb80b4928de0","type":"domain","category":"Network activity","to_ids":true,"value":"kjdbx.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b5876619-7405-5e74-9b1d-56fdcd437df1","type":"url","category":"Network activity","to_ids":true,"value":"https://rgpbtf.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c75c2665-a546-5bde-b835-a3fb890a5894","type":"domain","category":"Network activity","to_ids":true,"value":"rgpbtf.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e3b438fd-3ebd-5b6e-b6df-f6ab97bc7735","type":"domain","category":"Network activity","to_ids":true,"value":"vgzqk.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89d1564a-0abf-5a03-9993-729b34fb1c52","type":"url","category":"Network activity","to_ids":true,"value":"https://vxjmn.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e9c9e15a-7d20-5d62-a67c-17cc0602b6c0","type":"url","category":"Network activity","to_ids":true,"value":"https://vgzqk.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"802460e4-a94f-5999-b9de-c7e6d45086f5","type":"url","category":"Network activity","to_ids":true,"value":"https://zangpiao.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7ee4d2d-79d7-51eb-b16d-42489eb0bd9c","type":"domain","category":"Network activity","to_ids":true,"value":"zangpiao.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6444b411-3308-5c80-9261-c50702424816","type":"domain","category":"Network activity","to_ids":true,"value":"vxjmn.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"241e491e-8f4a-5cd4-975a-3cadf3b3463e","type":"url","category":"Network activity","to_ids":true,"value":"https://vnupld.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f497b77-7fe8-5052-bd71-c4d67beb4c8a","type":"domain","category":"Network activity","to_ids":true,"value":"vnupld.cn","comment":"https://x.com/harugasumi/status/1946252391751540958","timestamp":"1752857704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7981d552-654f-579f-b9e6-d9409ed6cc3c","type":"domain","category":"Network activity","to_ids":true,"value":"21cynfq.top","comment":"https://x.com/harugasumi/status/1946256001638015249","timestamp":"1752858565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45c3bf8a-7f39-560e-b1b1-675037391710","type":"url","category":"Network activity","to_ids":true,"value":"https://21cynfq.top/W0lBfYXZ/ITS/login/MemberLogin.jsp?attrLoginMsg=2","comment":"https://x.com/harugasumi/status/1946256001638015249","timestamp":"1752858565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1bf660c-4a6e-59a0-a3c8-9d6421cc434b","type":"domain","category":"Network activity","to_ids":true,"value":"dorothylsasaki-3eb.pages.dev","comment":"https://x.com/urldna_bot/status/1946268761482285080","timestamp":"1752861607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e7c2dc5b-dd61-50a3-bdef-b8caa1176c86","type":"url","category":"Network activity","to_ids":true,"value":"https://dorothylsasaki-3eb.pages.dev/oyke-social-security-stimulus-checks-may-2025-sebbu/","comment":"https://x.com/urldna_bot/status/1946268761482285080","timestamp":"1752861607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a77260ef-1e41-588c-8eb1-da81b59ca094","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.32.185","comment":"https://x.com/skocherhan/status/1946272129407709380","timestamp":"1752862410","distribution":"5"},{"uuid":"a8f0a8da-b584-56df-81b3-4b94c8bb0fb8","type":"md5","category":"Payload delivery","to_ids":true,"value":"545230e24b8f2312123917b73235471a","comment":"https://x.com/skocherhan/status/1946272822214737963","timestamp":"1752862575","distribution":"5"},{"uuid":"0ffa1c88-8f8b-5786-b511-b049801d9f0e","type":"domain","category":"Network activity","to_ids":true,"value":"amnesia333.store","comment":"https://x.com/skocherhan/status/1946273336226714082","timestamp":"1752862698","distribution":"5"},{"uuid":"24d4dfad-a3d5-5410-b4d1-bcf3aabc2dbe","type":"url","category":"Network activity","to_ids":true,"value":"https://amnesia333.store","comment":"https://x.com/skocherhan/status/1946273336226714082","timestamp":"1752862698","distribution":"5"},{"uuid":"82e18681-2819-5005-abde-2c9ffe1aaafb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.215.8.193","comment":"https://x.com/drb_ra/status/1946280154222768639","timestamp":"1752864323","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1c0b77a0-67de-5f37-8332-928599acfc9c","type":"url","category":"Network activity","to_ids":true,"value":"http://162.215.8.193:8443","comment":"https://x.com/drb_ra/status/1946280154222768639","timestamp":"1752864323","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"28a7e55c-70a9-5dfa-a912-6820158f0d83","type":"url","category":"Network activity","to_ids":true,"value":"http://198.7.115.133:80","comment":"https://x.com/drb_ra/status/1946280672806457622","timestamp":"1752864447","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"19a17fb1-1817-5800-9c47-2c25419cbb6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.7.115.133","comment":"https://x.com/drb_ra/status/1946280672806457622","timestamp":"1752864447","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"1cf4f340-ee8a-5808-bb59-d46fd7c5370f","type":"url","category":"Network activity","to_ids":true,"value":"http://85.98.49.5:443","comment":"https://x.com/drb_ra/status/1946280694021329202","timestamp":"1752864452","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"41c70eef-3142-5e55-a7b4-c130db5c05a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.98.49.5","comment":"https://x.com/drb_ra/status/1946280694021329202","timestamp":"1752864452","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"29905cee-5588-5261-95a6-29ea67036640","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.98.69.21","comment":"https://x.com/drb_ra/status/1946280715580010510","timestamp":"1752864457","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"5933352e-a066-52b5-b822-037db5b6c75d","type":"url","category":"Network activity","to_ids":true,"value":"http://94.98.69.21:443","comment":"https://x.com/drb_ra/status/1946280715580010510","timestamp":"1752864457","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"73ceb356-2048-5b32-a904-3f118facda56","type":"url","category":"Network activity","to_ids":true,"value":"http://102.158.123.182:443","comment":"https://x.com/drb_ra/status/1946280737230999909","timestamp":"1752864462","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d102c09f-92eb-50bf-9350-595b7ec1f2d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.158.123.182","comment":"https://x.com/drb_ra/status/1946280737230999909","timestamp":"1752864462","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"4bfdcf8d-1975-5543-a25a-a173f3a6538b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.145.252.38","comment":"https://x.com/drb_ra/status/1946280760698179871","timestamp":"1752864468","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"1ab6d7ce-3807-54e8-9905-605d8fda5e33","type":"url","category":"Network activity","to_ids":true,"value":"http://109.145.252.38:2222","comment":"https://x.com/drb_ra/status/1946280760698179871","timestamp":"1752864468","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2e87e370-5364-52e6-9a00-14d29f0cb3de","type":"url","category":"Network activity","to_ids":true,"value":"http://70.27.138.55:2222","comment":"https://x.com/drb_ra/status/1946280782009381246","timestamp":"1752864473","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2a253aeb-67ea-528e-9944-34f00bef692b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.27.138.55","comment":"https://x.com/drb_ra/status/1946280782009381246","timestamp":"1752864473","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b5e25eb6-30db-5270-8304-2620b2f6f02d","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.96.34:139","comment":"https://x.com/drb_ra/status/1946280803643592817","timestamp":"1752864478","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d6c398d3-deac-50c4-b142-307e496d4f91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.96.34","comment":"https://x.com/drb_ra/status/1946280803643592817","timestamp":"1752864478","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7421f991-2b1c-5245-b8e5-8852df52bd60","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.156.143:445","comment":"https://x.com/drb_ra/status/1946280819510718770","timestamp":"1752864482","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f08c6b61-8c55-5f25-a491-b5dd2f1cf7ba","type":"url","category":"Network activity","to_ids":true,"value":"http://172.104.161.105:443","comment":"https://x.com/drb_ra/status/1946280846903644520","timestamp":"1752864488","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f16b9397-c7e7-5ce8-a486-9dee544627e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.104.161.105","comment":"https://x.com/drb_ra/status/1946280846903644520","timestamp":"1752864488","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"14048e8d-3ced-5bfc-a388-7754d13d5f16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.18.28","comment":"https://x.com/drb_ra/status/1946280869729051081","timestamp":"1752864494","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"5a798b54-9821-5ba3-95ae-366e20ab497c","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.18.28:443","comment":"https://x.com/drb_ra/status/1946280869729051081","timestamp":"1752864494","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a2c4b5c7-ed76-5db2-8a2f-cccb95ad6b23","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.18.30","comment":"https://x.com/drb_ra/status/1946280887290573295","timestamp":"1752864498","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c0fdd4ad-cfda-5d97-9a20-bdc85ecd2386","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.18.30:7443","comment":"https://x.com/drb_ra/status/1946280887290573295","timestamp":"1752864498","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f441a8a1-db14-5da5-8bd9-0f7574f0b915","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.227.148:7443","comment":"https://x.com/drb_ra/status/1946280916218704150","timestamp":"1752864505","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"00abceb0-800b-5d87-a0d6-689d05e15318","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.227.148","comment":"https://x.com/drb_ra/status/1946280916218704150","timestamp":"1752864505","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f92bc7b4-df22-5e77-875f-864c172bc238","type":"url","category":"Network activity","to_ids":true,"value":"http://172.232.151.42:7443","comment":"https://x.com/drb_ra/status/1946280940176650326","timestamp":"1752864510","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"19cdcd8f-f452-575c-ae1c-10d67d881a6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.232.151.42","comment":"https://x.com/drb_ra/status/1946280940176650326","timestamp":"1752864510","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"011bd35c-fe5d-566a-808e-30dc1698fdb3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.109.9.165","comment":"https://x.com/drb_ra/status/1946280961500500044","timestamp":"1752864516","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"baba1aa8-dc41-597b-b99e-c21bfd446105","type":"url","category":"Network activity","to_ids":true,"value":"http://62.109.9.165:31337","comment":"https://x.com/drb_ra/status/1946280961500500044","timestamp":"1752864516","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"531431a2-c94c-5c80-8617-1debe4d42c86","type":"url","category":"Network activity","to_ids":true,"value":"http://181.141.40.93:1906","comment":"https://x.com/drb_ra/status/1946281479425655073","timestamp":"1752864639","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9d816f15-3f41-50e2-b813-46ce39af479b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.141.40.93","comment":"https://x.com/drb_ra/status/1946281479425655073","timestamp":"1752864639","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"2542c11b-8328-518a-85c1-d16228d6e6ce","type":"url","category":"Network activity","to_ids":true,"value":"http://43.208.5.219:7170","comment":"https://x.com/drb_ra/status/1946281502251032599","timestamp":"1752864644","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e2b4c9aa-2f82-5e0b-8f64-4417bd3af93c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.208.5.219","comment":"https://x.com/drb_ra/status/1946281502251032599","timestamp":"1752864644","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"19f7eb58-b4dd-5964-9d09-21712827dd2e","type":"url","category":"Network activity","to_ids":true,"value":"http://100.27.209.121:14265","comment":"https://x.com/drb_ra/status/1946281526242558113","timestamp":"1752864650","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"677c787c-f7ad-591a-89fa-804ab61de283","type":"url","category":"Network activity","to_ids":true,"value":"http://100.27.209.121:615","comment":"https://x.com/drb_ra/status/1946281548191334837","timestamp":"1752864655","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1ba10c03-092c-5d01-a2ce-5b9d874ef3cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"100.27.209.121","comment":"https://x.com/drb_ra/status/1946281548191334837","timestamp":"1752864655","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8cdc07cf-87fa-5d50-9a8d-4a3c88b5b4b9","type":"url","category":"Network activity","to_ids":true,"value":"http://51.16.209.16:20342","comment":"https://x.com/drb_ra/status/1946281569628360975","timestamp":"1752864661","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c5f438f6-15cc-5435-a439-ffb53bcf3937","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.16.209.16","comment":"https://x.com/drb_ra/status/1946281569628360975","timestamp":"1752864661","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"90b260ae-6761-51af-a2a0-8aaab552dd62","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.121.47:179","comment":"https://x.com/drb_ra/status/1946281591765868832","timestamp":"1752864666","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3b8d75ed-f07d-5447-a9c8-8a5b6d0318c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.121.47","comment":"https://x.com/drb_ra/status/1946281591765868832","timestamp":"1752864666","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4c211ada-3f5a-5080-aa98-dcacc6d9ab30","type":"url","category":"Network activity","to_ids":true,"value":"http://64.225.10.180:465","comment":"https://x.com/drb_ra/status/1946281613416968280","timestamp":"1752864671","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"df414f31-5608-55d4-9d0c-0f2057b2e765","type":"url","category":"Network activity","to_ids":true,"value":"http://64.225.10.180:587","comment":"https://x.com/drb_ra/status/1946281635629973650","timestamp":"1752864676","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"574739d4-de6b-5126-a654-faaa380a120f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.225.10.180","comment":"https://x.com/drb_ra/status/1946281635629973650","timestamp":"1752864676","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f9ca8fbc-4674-52a5-abb2-909f85a9fb57","type":"url","category":"Network activity","to_ids":true,"value":"http://87.107.12.208:9999","comment":"https://x.com/drb_ra/status/1946281652189003857","timestamp":"1752864680","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"017df8d1-37ca-55b0-a898-cbd4cf34a6b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.107.12.208","comment":"https://x.com/drb_ra/status/1946281652189003857","timestamp":"1752864680","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0e19e32b-417d-5303-b778-cb3acc010587","type":"url","category":"Network activity","to_ids":true,"value":"http://45.150.34.112:50555","comment":"https://x.com/drb_ra/status/1946281680949444935","timestamp":"1752864687","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"e043472f-3283-525f-a125-ae2cc1a86d54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.150.34.112","comment":"https://x.com/drb_ra/status/1946281680949444935","timestamp":"1752864687","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"e5164f9e-a9b6-529e-a441-4607562c58b5","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.c9y19v0a1-8917421.shop","comment":"https://x.com/urldna_bot/status/1946298971179143446","timestamp":"1752868809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"db1fb9ef-2ce1-5186-a8ac-a53c9117a76e","type":"url","category":"Network activity","to_ids":true,"value":"https://allegrolokalnie.c9y19v0a1-8917421.shop","comment":"https://x.com/urldna_bot/status/1946298971179143446","timestamp":"1752868809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"05187e0c-55a4-5143-9f49-53d9fd6e002e","type":"url","category":"Network activity","to_ids":true,"value":"http://111.217.141.70","comment":"https://x.com/threatquery/status/1946314044454899721","timestamp":"1752872403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"b3972baf-07b0-5142-bdf2-ce6ca74f191e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.217.141.70","comment":"https://x.com/threatquery/status/1946314044454899721","timestamp":"1752872403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"448e80b5-5e2b-5bc3-8a30-d7a55c67fe94","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.38.153","comment":"https://x.com/threatquery/status/1946314048120717368","timestamp":"1752872404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"b01ec532-453c-567a-88ae-6733b02a0478","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.38.153","comment":"https://x.com/threatquery/status/1946314048120717368","timestamp":"1752872404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"d473dcde-d96e-5475-b96a-4ec0554f9e9c","type":"url","category":"Network activity","to_ids":true,"value":"http://94.98.69.21","comment":"https://x.com/threatquery/status/1946314046313017430","timestamp":"1752872404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"97380115-73fd-5cb0-896a-53a8c7583a41","type":"domain","category":"Network activity","to_ids":true,"value":"gtdteleductos.com","comment":"https://x.com/1ZRR4H/status/1946324340603056424","timestamp":"1752874858","distribution":"5"},{"uuid":"2df3344f-2caf-5309-8c0f-83a42eb5ee1d","type":"url","category":"Network activity","to_ids":true,"value":"http://gtdteleductos.com","comment":"https://x.com/1ZRR4H/status/1946324340603056424","timestamp":"1752874858","distribution":"5"},{"uuid":"0b34bc5a-4349-54bf-a855-a7ee029f51a0","type":"domain","category":"Network activity","to_ids":true,"value":"clasoftmedia.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"14161fe4-a5c9-54fc-b880-6e761c2f6f0d","type":"url","category":"Network activity","to_ids":true,"value":"https://clasoftmedia.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"58f56c9b-8655-5191-ad6e-ce18fd3ed3d6","type":"domain","category":"Network activity","to_ids":true,"value":"retcap.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"16f3577e-9048-54b5-8a3b-97fe9df55bb1","type":"url","category":"Network activity","to_ids":true,"value":"https://retcap.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"e4cd768b-6016-5bc0-93c1-de30f9dc49de","type":"domain","category":"Network activity","to_ids":true,"value":"rafelink.life","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"a588ba58-f3fa-5e79-86ea-5ec483f47885","type":"url","category":"Network activity","to_ids":true,"value":"https://rafelink.life","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"d8fa2d56-76a7-5229-b413-4336df65f5bf","type":"domain","category":"Network activity","to_ids":true,"value":"akwatic-hotel.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"2d649054-970f-5edd-80dd-dbb4c4a6640b","type":"url","category":"Network activity","to_ids":true,"value":"https://akwatic-hotel.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"3186ef74-e3d6-5d88-8a5e-a86a6fb4a4e5","type":"domain","category":"Network activity","to_ids":true,"value":"bleulab.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"4b5e7bd0-12a2-58c4-99bd-04174ed494f2","type":"url","category":"Network activity","to_ids":true,"value":"https://bleulab.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"dea0ab1e-9f8e-5f3b-ac58-0e6c2b3d28e8","type":"domain","category":"Network activity","to_ids":true,"value":"gomezmontero.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"55e43aef-3f42-5025-9c58-c6a987c5862a","type":"url","category":"Network activity","to_ids":true,"value":"https://gomezmontero.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"995dd518-9eeb-5cb0-9bc1-cbb4c6961fbd","type":"domain","category":"Network activity","to_ids":true,"value":"gtl.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"b8f91316-5270-5f22-b3a8-82503dd4ec25","type":"url","category":"Network activity","to_ids":true,"value":"https://gtl.ci","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"2976d989-0cb9-5a2e-b319-77f37679bdb3","type":"domain","category":"Network activity","to_ids":true,"value":"javiergomezmontero.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"9d0353c1-2fa2-57be-bc86-353039905508","type":"url","category":"Network activity","to_ids":true,"value":"https://javiergomezmontero.eu","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"3e7d6011-4bc2-59d1-bb93-65dc9a7eb5c5","type":"domain","category":"Network activity","to_ids":true,"value":"ardiellifornasa.ge","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"40873f6d-ae1e-559b-ae2e-1550da2dcd0e","type":"url","category":"Network activity","to_ids":true,"value":"https://ardiellifornasa.ge","comment":"https://x.com/soursecc/status/1946327350574203252","timestamp":"1752875576","distribution":"5"},{"uuid":"427b739f-5881-5c01-8f39-ec478fc59833","type":"domain","category":"Network activity","to_ids":true,"value":"hohimain.github.io","comment":"https://x.com/urldna_bot/status/1946329155462733838","timestamp":"1752876006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1f1c82ba-d649-53f0-a02a-197895ab009a","type":"url","category":"Network activity","to_ids":true,"value":"http://hohimain.github.io/raheel","comment":"https://x.com/urldna_bot/status/1946329155462733838","timestamp":"1752876006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"29a83fe3-1141-5eeb-9541-d1f82a98e173","type":"domain","category":"Network activity","to_ids":true,"value":"inventscience.st","comment":"https://x.com/drb_ra/status/1946344449048494556","timestamp":"1752879652","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5e402cad-a2dc-5450-8121-e900167a8b09","type":"url","category":"Network activity","to_ids":true,"value":"https://inventscience.st/en_US/all.js","comment":"https://x.com/drb_ra/status/1946344449048494556","timestamp":"1752879652","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"07532b11-1606-523d-aed2-4aef70e69652","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.120:443","comment":"https://x.com/drb_ra/status/1946344449048494556","timestamp":"1752879652","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"75d55bb6-1f53-58df-8675-c06e21780e21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.120","comment":"https://x.com/drb_ra/status/1946344449048494556","timestamp":"1752879652","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"82b3d5b6-cbb3-5202-9fd5-c59f74dc97b7","type":"url","category":"Network activity","to_ids":true,"value":"https://93.88.203.171/RELEASE_NOTES.html","comment":"https://x.com/drb_ra/status/1946344968001290323","timestamp":"1752879776","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"48c6d20c-344b-5578-b33b-f9be22751d83","type":"url","category":"Network activity","to_ids":true,"value":"http://213.165.42.15:443","comment":"https://x.com/drb_ra/status/1946344968001290323","timestamp":"1752879776","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"29a940e9-871a-5428-9c38-e7694eee34aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.165.42.15","comment":"https://x.com/drb_ra/status/1946344968001290323","timestamp":"1752879776","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"54fe5f6b-a53f-53d2-93a4-dac6a82b0dad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.88.203.171","comment":"https://x.com/drb_ra/status/1946344968001290323","timestamp":"1752879776","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"51516810-8283-5ec3-bc6d-735264a53c0a","type":"url","category":"Network activity","to_ids":true,"value":"https://118.178.89.112/en_US/all.js","comment":"https://x.com/drb_ra/status/1946344990470189546","timestamp":"1752879781","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b182ae16-46c6-5ead-8164-c3ee5472ff73","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.89.112:80","comment":"https://x.com/drb_ra/status/1946344990470189546","timestamp":"1752879781","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"125ef58e-98f1-5e11-92a1-a95b8fd6b009","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.89.112","comment":"https://x.com/drb_ra/status/1946344990470189546","timestamp":"1752879781","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"825b8970-4b4e-56a3-84b6-2d1e6e1bea32","type":"domain","category":"Network activity","to_ids":true,"value":"telstraawebmaill2.weebly.com","comment":"https://x.com/urldna_bot/status/1946359362110288279","timestamp":"1752883208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"60b37e0a-1fa0-5677-ad7a-85cf816e5987","type":"url","category":"Network activity","to_ids":true,"value":"https://telstraawebmaill2.weebly.com","comment":"https://x.com/urldna_bot/status/1946359362110288279","timestamp":"1752883208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2f9ee9c3-dc9c-5101-a3b4-65d61d14736b","type":"domain","category":"Network activity","to_ids":true,"value":"driect-shimkim01-08.com","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65609026-3b6e-561e-874b-bccdd6b123fa","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-shimkim01-08.com","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6643fac4-5918-5fc0-b7e9-52ee3ab19262","type":"domain","category":"Network activity","to_ids":true,"value":"driect-shimkim0.com","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49f8e795-e14b-5d90-b580-0ec5c7f071c4","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-shimkim0.com/tikubetu/selectState.htm/","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1946368881301622926","timestamp":"1752885477","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"156821ed-8e22-5ed0-b1ba-cb0bd7ba7746","type":"domain","category":"Network activity","to_ids":true,"value":"rga158.webwave.dev","comment":"https://x.com/urldna_bot/status/1946389568132964796","timestamp":"1752890409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1996bcc7-3670-5801-91ec-6218fcbea973","type":"url","category":"Network activity","to_ids":true,"value":"https://rga158.webwave.dev","comment":"https://x.com/urldna_bot/status/1946389568132964796","timestamp":"1752890409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3a33bb7b-d539-5615-a16e-05a6809e67a2","type":"url","category":"Network activity","to_ids":true,"value":"https://mostofadev.github.io/module-11/","comment":"https://x.com/urldna_bot/status/1946419750575239328","timestamp":"1752897605","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6c2d4e8a-0cb0-5dcd-a521-d030334e0038","type":"domain","category":"Network activity","to_ids":true,"value":"mostofadev.github.io","comment":"https://x.com/urldna_bot/status/1946419750575239328","timestamp":"1752897605","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8834151e-d829-5ff8-8439-d69df37d37c8","type":"url","category":"Network activity","to_ids":true,"value":"http://103.230.69.188:6000","comment":"https://x.com/drb_ra/status/1946461830538248333","timestamp":"1752907638","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"c64688d9-de00-59a7-9aea-756bbd35ef86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.230.69.188","comment":"https://x.com/drb_ra/status/1946461830538248333","timestamp":"1752907638","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"69d1d733-5f00-5cef-bf48-82e1fc4af62b","type":"url","category":"Network activity","to_ids":true,"value":"http://76.68.146.89:2222","comment":"https://x.com/drb_ra/status/1946461851501441031","timestamp":"1752907643","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ddbf3949-95e8-5b99-9dd3-d962dce2d627","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.68.146.89","comment":"https://x.com/drb_ra/status/1946461851501441031","timestamp":"1752907643","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"06b06972-bd6b-56c0-a96c-660a69ae3e67","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.112.164:445","comment":"https://x.com/drb_ra/status/1946461872384852250","timestamp":"1752907648","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7dfe11ba-b617-5e32-ba35-3943ee3102eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.112.164","comment":"https://x.com/drb_ra/status/1946461872384852250","timestamp":"1752907648","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"02f90b24-e750-5e4e-8b00-8e5fa6215403","type":"url","category":"Network activity","to_ids":true,"value":"http://45.76.155.161:443","comment":"https://x.com/drb_ra/status/1946461892530098658","timestamp":"1752907653","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"59167ae8-3008-53c7-baff-56ba16e07d4a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.155.161","comment":"https://x.com/drb_ra/status/1946461892530098658","timestamp":"1752907653","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a0889e91-2f94-5a5c-8666-cb88bad85969","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.159.43.123","comment":"https://x.com/drb_ra/status/1946461912851485167","timestamp":"1752907658","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c5bbc7b4-3c77-51ac-b05a-62897078db0f","type":"url","category":"Network activity","to_ids":true,"value":"http://178.159.43.123:443","comment":"https://x.com/drb_ra/status/1946461912851485167","timestamp":"1752907658","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b2f26218-1e84-50d4-8566-427208148d6b","type":"url","category":"Network activity","to_ids":true,"value":"http://188.226.220.215:80","comment":"https://x.com/drb_ra/status/1946461928689176708","timestamp":"1752907661","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d77b370c-07a3-50f7-a1b5-84435fda27a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.226.220.215","comment":"https://x.com/drb_ra/status/1946461928689176708","timestamp":"1752907661","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f3b31ba4-e60d-57c1-b870-3ac09de42435","type":"url","category":"Network activity","to_ids":true,"value":"http://23.92.20.65:443","comment":"https://x.com/drb_ra/status/1946461950008803360","timestamp":"1752907667","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c0a6ffb3-c0bf-5683-90e7-8d8395ccf78e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.92.20.65","comment":"https://x.com/drb_ra/status/1946461950008803360","timestamp":"1752907667","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"12a7438b-22da-5abb-83cf-0dfb320cb5a7","type":"url","category":"Network activity","to_ids":true,"value":"http://67.217.228.190:10443","comment":"https://x.com/drb_ra/status/1946461971475259876","timestamp":"1752907672","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"75b3e822-8f1f-51b0-8c5e-d4fc48ad91ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.217.228.190","comment":"https://x.com/drb_ra/status/1946461971475259876","timestamp":"1752907672","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"f21935bb-9954-5954-8a5b-31f84525fce0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.157.151.187:443","comment":"https://x.com/drb_ra/status/1946461995428958682","timestamp":"1752907677","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c224a687-09f4-5a7e-9e40-7fc457ccbcb9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.157.151.187","comment":"https://x.com/drb_ra/status/1946461995428958682","timestamp":"1752907677","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"589d79b1-10b8-5dfc-8d95-2936b73de9ce","type":"url","category":"Network activity","to_ids":true,"value":"http://172.105.121.80:443","comment":"https://x.com/drb_ra/status/1946462018086584374","timestamp":"1752907683","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9449b08b-8cba-5198-8755-dd9fe35c0225","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.105.121.80","comment":"https://x.com/drb_ra/status/1946462018086584374","timestamp":"1752907683","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fe82cbb7-16ca-5d89-b436-1123fb3bc8df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.241.163.8","comment":"https://x.com/drb_ra/status/1946462033668432296","timestamp":"1752907686","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"5f04b7c4-05dd-5cbd-a40d-b2f1c968a9c2","type":"url","category":"Network activity","to_ids":true,"value":"http://14.241.163.8:7443","comment":"https://x.com/drb_ra/status/1946462033668432296","timestamp":"1752907686","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fd92c0fa-d213-5d7a-b3dc-7a62e3facedd","type":"url","category":"Network activity","to_ids":true,"value":"http://137.220.54.244:7443","comment":"https://x.com/drb_ra/status/1946462054623113630","timestamp":"1752907691","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"683c8d7c-64b8-5439-ac65-9a1d2863e0fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.220.54.244","comment":"https://x.com/drb_ra/status/1946462054623113630","timestamp":"1752907691","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f91ee400-bb0c-558a-bb12-8a511b155170","type":"url","category":"Network activity","to_ids":true,"value":"http://168.110.192.252:31337","comment":"https://x.com/drb_ra/status/1946462075380797466","timestamp":"1752907696","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3f1d3408-e20b-5e6a-ad97-9bbbddff9178","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.110.192.252","comment":"https://x.com/drb_ra/status/1946462075380797466","timestamp":"1752907696","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c1d8c338-c965-5d22-b5c2-da5758fe3ddc","type":"url","category":"Network activity","to_ids":true,"value":"http://176.65.149.160:443","comment":"https://x.com/drb_ra/status/1946462096322925010","timestamp":"1752907701","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1c30f6f1-9958-5f4a-a11f-d0c4c9e0e6b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.149.160","comment":"https://x.com/drb_ra/status/1946462096322925010","timestamp":"1752907701","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a63095db-44af-5342-9336-85f62c053a75","type":"url","category":"Network activity","to_ids":true,"value":"http://89.110.96.140:443","comment":"https://x.com/drb_ra/status/1946462117294436671","timestamp":"1752907706","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f3841104-5c39-561c-9207-5b8a4f91ba69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.110.96.140","comment":"https://x.com/drb_ra/status/1946462117294436671","timestamp":"1752907706","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9d455a77-3c99-56d1-b3e7-6e6bd2f4bd63","type":"url","category":"Network activity","to_ids":true,"value":"http://104.167.16.88:4321","comment":"https://x.com/drb_ra/status/1946462634431139944","timestamp":"1752907830","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5660234b-750a-58aa-8706-04c2870a79ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.167.16.88","comment":"https://x.com/drb_ra/status/1946462634431139944","timestamp":"1752907830","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1897346c-1f7d-5922-a4f1-7af27913fb2b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.57.113.144","comment":"https://x.com/drb_ra/status/1946462657201971567","timestamp":"1752907835","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"91536809-f18e-5f86-a332-24948acc1cb2","type":"url","category":"Network activity","to_ids":true,"value":"http://20.57.113.144:8080","comment":"https://x.com/drb_ra/status/1946462657201971567","timestamp":"1752907835","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"cfe5a32b-bbfc-541b-a5fe-bc3da1336360","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.139.145","comment":"https://x.com/drb_ra/status/1946462675950539029","timestamp":"1752907840","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"59a75a5d-2725-5e67-aaa7-4122aa77d8fe","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.139.145:443","comment":"https://x.com/drb_ra/status/1946462675950539029","timestamp":"1752907840","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9bca02c2-955a-5a86-bd6f-93712f91e919","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.11.142:443","comment":"https://x.com/drb_ra/status/1946462699971371510","timestamp":"1752907845","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"12c5cd17-29a8-5e66-a5e8-ca446766dd80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.11.142","comment":"https://x.com/drb_ra/status/1946462699971371510","timestamp":"1752907845","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6d5d6284-f22c-587f-8dc7-93d56fdab709","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.149.206:443","comment":"https://x.com/drb_ra/status/1946462721198673985","timestamp":"1752907850","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"30dc17e4-b0a0-598c-b194-a5a42ebd0333","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.149.206","comment":"https://x.com/drb_ra/status/1946462721198673985","timestamp":"1752907850","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dd527d48-a0ff-5cf1-9868-aa8696356194","type":"url","category":"Network activity","to_ids":true,"value":"http://139.64.5.15:443","comment":"https://x.com/drb_ra/status/1946462742862332045","timestamp":"1752907856","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1b3eb719-ad9b-5201-9597-f54a629b55ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.64.5.15","comment":"https://x.com/drb_ra/status/1946462742862332045","timestamp":"1752907856","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3aa9d0c2-91fe-53f7-b85d-444b90ac7a48","type":"url","category":"Network activity","to_ids":true,"value":"http://18.100.143.170:5900","comment":"https://x.com/drb_ra/status/1946462764391641571","timestamp":"1752907861","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"cbe8f893-49aa-59db-ac53-6a8e15dfb29d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.100.143.170","comment":"https://x.com/drb_ra/status/1946462764391641571","timestamp":"1752907861","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1159b0b0-bcfa-5e9e-8e29-fc11c286f737","type":"url","category":"Network activity","to_ids":true,"value":"http://87.106.235.201:8808","comment":"https://x.com/drb_ra/status/1946462785640038541","timestamp":"1752907866","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"85bde77d-e525-52ea-acee-5ea37a7ca97f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.106.235.201","comment":"https://x.com/drb_ra/status/1946462785640038541","timestamp":"1752907866","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b8b7d602-8aef-54d1-b2a0-2a31d700101a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.85:8808","comment":"https://x.com/drb_ra/status/1946462806905131047","timestamp":"1752907871","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"a6060798-441a-59be-afdf-d75652188267","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.85","comment":"https://x.com/drb_ra/status/1946462806905131047","timestamp":"1752907871","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b836945b-3274-5e8b-bb14-a7d7e9ccd3b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.171.142","comment":"https://x.com/drb_ra/status/1946462829143363641","timestamp":"1752907876","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"17fdaa37-1c30-554a-8996-bafde322c5bb","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.171.142:8580","comment":"https://x.com/drb_ra/status/1946462829143363641","timestamp":"1752907876","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"06dd6d01-205a-5fc2-9bd9-abc5560961fc","type":"url","category":"Network activity","to_ids":true,"value":"http://95.216.78.61:8808","comment":"https://x.com/drb_ra/status/1946462850211258431","timestamp":"1752907881","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"4f0bc0b3-ba23-592d-baa7-eb273c1da2d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.216.78.61","comment":"https://x.com/drb_ra/status/1946462850211258431","timestamp":"1752907881","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f33ec9b0-62dc-5059-9ad8-9c60052c98a1","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.19.33:80","comment":"https://x.com/drb_ra/status/1946462866648760609","timestamp":"1752907885","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"186e764c-c26f-55c4-a2d3-b98dc022538a","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.19.33:25","comment":"https://x.com/drb_ra/status/1946462892192158113","timestamp":"1752907891","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"784963a6-83d9-59fc-bb2a-7fdda4821536","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.98.19.33","comment":"https://x.com/drb_ra/status/1946462892192158113","timestamp":"1752907891","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a5c9036f-57ec-51ae-8cc7-29882b285ee4","type":"url","category":"Network activity","to_ids":true,"value":"http://47.113.229.193:8080","comment":"https://x.com/drb_ra/status/1946462914312863878","timestamp":"1752907896","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"de29829e-ad6e-5b0f-8978-2e52b192020a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.113.229.193","comment":"https://x.com/drb_ra/status/1946462914312863878","timestamp":"1752907896","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"3ad8cf4a-24ef-5553-b0d3-738f41cad25f","type":"md5","category":"Payload delivery","to_ids":true,"value":"9d092b9d1c02dd72c5a4eac7dae6dda5","comment":"https://x.com/PrakkiSathwik/status/1946472607358017937","timestamp":"1752910207","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"8be3c33f-9e0a-51b9-9cb8-c7526280f4c9","type":"md5","category":"Payload delivery","to_ids":true,"value":"24daa64a1c402e320401436af7fb170f","comment":"https://x.com/PrakkiSathwik/status/1946472607358017937","timestamp":"1752910207","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"9b6e5f6f-58f0-583e-86de-a13d55403ffb","type":"url","category":"Network activity","to_ids":true,"value":"https://metamask.directual.app","comment":"https://x.com/BlinkzSec/status/1946487148820975802","timestamp":"1752913674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"984dff70-75a7-52a4-93a2-fad95dd13470","type":"domain","category":"Network activity","to_ids":true,"value":"metamask.directual.app","comment":"https://x.com/BlinkzSec/status/1946487148820975802","timestamp":"1752913674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c052a781-69e8-5357-8377-736028a6c6a2","type":"url","category":"Network activity","to_ids":true,"value":"https://sites.google.com/bitstamlogi.com/bitkeep-wallet/home/","comment":"https://x.com/BlinkzSec/status/1946487148820975802","timestamp":"1752913674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d42c953a-1a19-5bcc-acc1-3235f5e538e3","type":"url","category":"Network activity","to_ids":true,"value":"https://bitgetwallet.onepage.website","comment":"https://x.com/BlinkzSec/status/1946487148820975802","timestamp":"1752913674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4ca13754-f5b7-5a3a-becd-416cb48973d0","type":"domain","category":"Network activity","to_ids":true,"value":"bitgetwallet.onepage.website","comment":"https://x.com/BlinkzSec/status/1946487148820975802","timestamp":"1752913674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d93ae30f-16f9-5d1d-9183-917d07b9b642","type":"domain","category":"Network activity","to_ids":true,"value":"amlusdt.com","comment":"https://x.com/BlinkzSec/status/1946489338579017940","timestamp":"1752914196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b17b133b-3fc1-54fd-8e12-2c2b6fc0adda","type":"url","category":"Network activity","to_ids":true,"value":"http://amlusdt.com","comment":"https://x.com/BlinkzSec/status/1946489338579017940","timestamp":"1752914196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0218413-85e0-5a4f-9d69-4cb58ba55414","type":"url","category":"Network activity","to_ids":true,"value":"https://185.229.65.81","comment":"https://x.com/BlinkzSec/status/1946489338579017940","timestamp":"1752914196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"430b0592-d2fe-5b9c-a274-516de1c0bcd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.229.65.81","comment":"https://x.com/BlinkzSec/status/1946489338579017940","timestamp":"1752914196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"613f59e0-3bf6-5472-8742-3d38012f009c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","comment":"https://x.com/BlinkzSec/status/1946489338579017940","timestamp":"1752914196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"780255c8-b614-5ae3-b40b-d58277769411","type":"url","category":"Network activity","to_ids":true,"value":"http://1.13.187.97:8089","comment":"https://x.com/drb_ra/status/1946524153340690490","timestamp":"1752922497","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e06a3df5-6b69-54cd-a205-a3675a8dc74e","type":"url","category":"Network activity","to_ids":true,"value":"http://42.194.137.226:45443","comment":"https://x.com/drb_ra/status/1946524170654744634","timestamp":"1752922501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c4e7bb6-4ed2-5b85-b0ad-2c7b788995fc","type":"url","category":"Network activity","to_ids":true,"value":"https://42.194.137.226/pixel","comment":"https://x.com/drb_ra/status/1946524170654744634","timestamp":"1752922501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e18ea409-9830-521a-9df9-400185c96359","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.194.137.226","comment":"https://x.com/drb_ra/status/1946524170654744634","timestamp":"1752922501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aee7a1a9-d206-5ada-881d-883025a0ec7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.190.224.58","comment":"https://x.com/drb_ra/status/1946524196890173460","timestamp":"1752922507","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d8b71f4-2b38-535c-a2e3-20918fb91258","type":"url","category":"Network activity","to_ids":true,"value":"http://38.190.224.58:443","comment":"https://x.com/drb_ra/status/1946524196890173460","timestamp":"1752922507","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db8d9a74-4289-5e07-9c1b-782bf102f54d","type":"domain","category":"Network activity","to_ids":true,"value":"update.microsoftwindows.biz","comment":"https://x.com/drb_ra/status/1946524717701066989","timestamp":"1752922632","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cfff8171-c204-5644-8830-b5fbfc87c8cd","type":"url","category":"Network activity","to_ids":true,"value":"https://update.microsoftwindows.biz/api/3","comment":"https://x.com/drb_ra/status/1946524717701066989","timestamp":"1752922632","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"43eed04e-88bb-513f-855f-3874ca562cd6","type":"url","category":"Network activity","to_ids":true,"value":"http://103.125.248.109:50469","comment":"https://x.com/drb_ra/status/1946524717701066989","timestamp":"1752922632","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22490985-8a5d-57c1-9a6a-912f45ff6128","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.36.127:443","comment":"https://x.com/drb_ra/status/1946524741927346533","timestamp":"1752922637","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e1a476d2-3c68-55ff-a9c4-04cbe0c0fa94","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.86.212:18443","comment":"https://x.com/drb_ra/status/1946524764350165296","timestamp":"1752922643","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"666497d6-99c0-5306-893a-e862800d2a69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.86.212","comment":"https://x.com/drb_ra/status/1946524764350165296","timestamp":"1752922643","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"00411726-ac5e-5aff-a10b-d2ca347410de","type":"domain","category":"Network activity","to_ids":true,"value":"microsoftwindows.biz","comment":"https://x.com/drb_ra/status/1946524787741773972","timestamp":"1752922648","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7a1e6434-cefa-575a-9a18-7feda146752e","type":"url","category":"Network activity","to_ids":true,"value":"https://www.microsoftwindows.biz/__utm.gif","comment":"https://x.com/drb_ra/status/1946524787741773972","timestamp":"1752922648","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b37543b2-034e-5b26-9f4d-e7db0c8a19c5","type":"url","category":"Network activity","to_ids":true,"value":"http://106.14.118.159:7777","comment":"https://x.com/drb_ra/status/1946524810466541787","timestamp":"1752922654","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"33c59450-eb96-50c9-bbdc-909fa89993a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.14.118.159","comment":"https://x.com/drb_ra/status/1946524810466541787","timestamp":"1752922654","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2125f27f-8335-5d7a-a559-31f4a8f76249","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.125.248.109","comment":"https://x.com/drb_ra/status/1946524834034221353","timestamp":"1752922659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fbc836dc-8f92-58e4-be42-1191dcea83d3","type":"url","category":"Network activity","to_ids":true,"value":"http://103.125.248.109:443","comment":"https://x.com/drb_ra/status/1946524834034221353","timestamp":"1752922659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fd8bb56c-61c1-5d88-9286-e6cc05221f52","type":"url","category":"Network activity","to_ids":true,"value":"https://security.microsoftwindows.biz/push","comment":"https://x.com/drb_ra/status/1946524834034221353","timestamp":"1752922659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b0cbf52e-6f5e-5de8-b9c0-cbe567593cd4","type":"domain","category":"Network activity","to_ids":true,"value":"security.microsoftwindows.biz","comment":"https://x.com/drb_ra/status/1946524834034221353","timestamp":"1752922659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7aa8754-2341-5029-997d-ebf9ce49edab","type":"url","category":"Network activity","to_ids":true,"value":"http://137.220.232.142:25364","comment":"https://x.com/drb_ra/status/1946524856352178615","timestamp":"1752922665","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ea518cc7-01a6-5057-bc3b-82d2fc834551","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.220.232.142","comment":"https://x.com/drb_ra/status/1946524856352178615","timestamp":"1752922665","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f63fc7fc-bb6f-5ea9-8dde-f38aa7b69f9c","type":"url","category":"Network activity","to_ids":true,"value":"http://151.241.129.49:8443","comment":"https://x.com/drb_ra/status/1946524878695190674","timestamp":"1752922670","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0b6f216a-98db-5066-8081-36e7323ea628","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.241.129.49","comment":"https://x.com/drb_ra/status/1946524878695190674","timestamp":"1752922670","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3b42718-ec22-5375-8607-ba5c1e91bc58","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.36.127:80","comment":"https://x.com/drb_ra/status/1946524901034049763","timestamp":"1752922675","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ab4461bc-411e-50b7-8c84-8920a31aaf92","type":"url","category":"Network activity","to_ids":true,"value":"http://47.96.224.76:9999","comment":"https://x.com/drb_ra/status/1946524923779805571","timestamp":"1752922681","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f13aa5df-036b-5053-bfa6-098c1e9264e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.96.224.76","comment":"https://x.com/drb_ra/status/1946524923779805571","timestamp":"1752922681","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97f8216b-fbda-52e2-8879-7fd0d1ef6c6a","type":"url","category":"Network activity","to_ids":true,"value":"http://159.75.177.25:443","comment":"https://x.com/drb_ra/status/1946524947188248815","timestamp":"1752922686","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6a780dbc-e749-5739-9090-f5eade98f91f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.75.177.25","comment":"https://x.com/drb_ra/status/1946524947188248815","timestamp":"1752922686","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1771fb8c-1f10-5b6a-bb38-d39ec21874b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.239.170","comment":"https://x.com/drb_ra/status/1946524947188248815","timestamp":"1752922686","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93445744-cf7e-5977-b58c-0b465e356b06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.81.93","comment":"https://x.com/drb_ra/status/1946524969837420643","timestamp":"1752922692","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d8ef99d3-8649-50a1-a494-25cfe6403bc8","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.81.93:9999","comment":"https://x.com/drb_ra/status/1946524969837420643","timestamp":"1752922692","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c033fca1-bd32-5960-8626-94b47ca328c7","type":"url","category":"Network activity","to_ids":true,"value":"http://159.203.30.200:80","comment":"https://x.com/drb_ra/status/1946533073849405646","timestamp":"1752924624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d02745cd-1a47-50d8-a0dc-2c0c38b84dc0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.203.30.200","comment":"https://x.com/drb_ra/status/1946533073849405646","timestamp":"1752924624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fe4afd76-71ac-5480-b874-7c07c8aa69d7","type":"url","category":"Network activity","to_ids":true,"value":"http://103.125.248.109:2053","comment":"https://x.com/drb_ra/status/1946533097433977074","timestamp":"1752924629","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d736175c-8501-55d1-bb23-e8e29fe8b104","type":"url","category":"Network activity","to_ids":true,"value":"http://213.209.150.214:8443","comment":"https://x.com/drb_ra/status/1946533721399574567","timestamp":"1752924778","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e79b5a5-7d38-5869-ad84-dc02270c8b22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.150.214","comment":"https://x.com/drb_ra/status/1946533721399574567","timestamp":"1752924778","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b90db0f1-3d29-5a7e-9cc1-ea9e56426ce8","type":"domain","category":"Network activity","to_ids":true,"value":"ateendra24.github.io","comment":"https://x.com/urldna_bot/status/1946540545976774669","timestamp":"1752926405","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fe092ed3-6e23-507d-98a5-3092989bf1f7","type":"url","category":"Network activity","to_ids":true,"value":"http://ateendra24.github.io/facebook_login_page","comment":"https://x.com/urldna_bot/status/1946540545976774669","timestamp":"1752926405","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"087bcd66-1cfe-5bbb-bb22-61f4d0adecb9","type":"url","category":"Network activity","to_ids":true,"value":"http://194.164.245.9","comment":"https://x.com/skocherhan/status/1946566997057093871","timestamp":"1752932712","distribution":"5"},{"uuid":"4f49790c-ac6a-54ca-b565-c21febd66e84","type":"domain","category":"Network activity","to_ids":true,"value":"deadmonkey.ru","comment":"https://x.com/skocherhan/status/1946566997057093871","timestamp":"1752932712","distribution":"5"},{"uuid":"d499020d-902e-546b-8c98-9c3e2f2534b8","type":"url","category":"Network activity","to_ids":true,"value":"http://deadmonkey.ru","comment":"https://x.com/skocherhan/status/1946566997057093871","timestamp":"1752932712","distribution":"5"},{"uuid":"456665ce-f497-5e67-abf7-b8c627dbdfd0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.164.245.9","comment":"https://x.com/skocherhan/status/1946566997057093871","timestamp":"1752932712","distribution":"5"},{"uuid":"bab96f22-ecf5-573c-b2f3-438bae0ce04f","type":"url","category":"Network activity","to_ids":true,"value":"https://mnmbk-6c118.web.app","comment":"https://x.com/urldna_bot/status/1946570761994379438","timestamp":"1752933609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"310a10f2-94c4-50f9-80da-b9091977af15","type":"domain","category":"Network activity","to_ids":true,"value":"mnmbk-6c118.web.app","comment":"https://x.com/urldna_bot/status/1946570761994379438","timestamp":"1752933609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1313c546-b33f-57e7-b120-eeb7a34b1bee","type":"domain","category":"Network activity","to_ids":true,"value":"ompowerterminus.com","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"97049911-ff2b-5521-adcd-6b17b3c80f9d","type":"url","category":"Network activity","to_ids":true,"value":"http://ompowerterminus.com","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"1af52e97-33cf-5a28-a146-11535f787c98","type":"domain","category":"Network activity","to_ids":true,"value":"backup.intelupates.com","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"6b69eaf5-ccd6-5a2a-93a9-5d9f27503f7a","type":"url","category":"Network activity","to_ids":true,"value":"http://backup.intelupates.com","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"b6c7c816-c3f6-5d33-b37c-51719b426fa2","type":"md5","category":"Payload delivery","to_ids":true,"value":"c59efe3739ae3e2814ff48f41b0d0ad8","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"7315241e-8b44-53b8-9c01-4e726af0d6aa","type":"md5","category":"Payload delivery","to_ids":true,"value":"4cc0cc070ec8a51b437ddc393487bb7e","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"182b5762-d72f-50a1-8af5-cdaaa8b32032","type":"md5","category":"Payload delivery","to_ids":true,"value":"f4a82380cc0e246a4f576bc81fa6f879","comment":"https://x.com/skocherhan/status/1946593598398493033","timestamp":"1752939054","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"7f2fc127-5643-5cbd-bee6-a673b66a32e8","type":"domain","category":"Network activity","to_ids":true,"value":"btboardbandlin.weebly.com","comment":"https://x.com/urldna_bot/status/1946600944453451908","timestamp":"1752940805","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dabf9570-f99f-5017-a8b3-21435a471bc8","type":"url","category":"Network activity","to_ids":true,"value":"https://btboardbandlin.weebly.com","comment":"https://x.com/urldna_bot/status/1946600944453451908","timestamp":"1752940805","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5b56d95d-f159-54da-a71a-f78712ab7d25","type":"sha256","category":"Payload delivery","to_ids":true,"value":"30295311d6289310f234bfff3d5c7c16fd5766ceb49dcb0be8bc33c8426f6dc4","comment":"https://x.com/skocherhan/status/1946601028222157309","timestamp":"1752940825","distribution":"5"},{"uuid":"e0fa8e9e-05de-5b71-a8a2-a60a816a4f0d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"75c0aa897075a7bfa64d8a55be636a6984e2d1a5a05a54f0f01b0eb4653e9c7a","comment":"https://x.com/skocherhan/status/1946601043933941784","timestamp":"1752940829","distribution":"5"},{"uuid":"5888a459-08b2-5520-9c22-cd945e1f89c2","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5bed39728e404838ecd679df65048abcb443f8c7a9484702a2ded60104b8c4a9","comment":"https://x.com/skocherhan/status/1946601043933941784","timestamp":"1752940829","distribution":"5"},{"uuid":"67bd6e00-6805-5f58-9dd4-ba2b7e657370","type":"sha256","category":"Payload delivery","to_ids":true,"value":"90291a2c53970e3d89bacce7b79d5fa540511ae920dd4447fc6182224bbe05c5","comment":"https://x.com/skocherhan/status/1946601080332148802","timestamp":"1752940838","distribution":"5"},{"uuid":"a6a12ec9-00e1-5d3f-9d33-c9da004cde84","type":"domain","category":"Network activity","to_ids":true,"value":"lokilokitwo.de","comment":"https://x.com/godeepweb/status/1946616068237119767","timestamp":"1752944411","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c34b7657-b43d-5a23-b4cd-d964bcd4c610","type":"url","category":"Network activity","to_ids":true,"value":"http://lokilokitwo.de","comment":"https://x.com/godeepweb/status/1946616068237119767","timestamp":"1752944411","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"14706acd-b60b-54a7-a8e4-e6007f0c42bd","type":"domain","category":"Network activity","to_ids":true,"value":"pxcfjv.cn","comment":"https://x.com/harugasumi/status/1946625023869157449","timestamp":"1752946546","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a055ba79-c31b-533f-b777-3b5f5f92a267","type":"url","category":"Network activity","to_ids":true,"value":"https://pxcfjv.cn","comment":"https://x.com/harugasumi/status/1946625023869157449","timestamp":"1752946546","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a53da1f3-8675-5623-bbd4-a4b74d332067","type":"domain","category":"Network activity","to_ids":true,"value":"co001.coinbasewalletrectify.com","comment":"https://x.com/urldna_bot/status/1946631158881534075","timestamp":"1752948009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5bd5fa90-40ca-52c7-8b94-1a53ebd1f04f","type":"url","category":"Network activity","to_ids":true,"value":"https://co001.coinbasewalletrectify.com","comment":"https://x.com/urldna_bot/status/1946631158881534075","timestamp":"1752948009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f63d9ad6-3812-53d1-9a1b-a6ee4964d739","type":"url","category":"Network activity","to_ids":true,"value":"http://213.108.198.227","comment":"https://x.com/skocherhan/status/1946633262517924155","timestamp":"1752948511","distribution":"5"},{"uuid":"f97ca162-d320-5e9e-8bc8-8f36e1c8950f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.108.198.227","comment":"https://x.com/skocherhan/status/1946633262517924155","timestamp":"1752948511","distribution":"5"},{"uuid":"8f400735-22f9-5aaf-b9c0-23d3faf6f69f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.48.38.124:80","comment":"https://x.com/drb_ra/status/1946643006280397064","timestamp":"1752950834","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0bd6b4cf-580c-5d49-be7b-4f179b335534","type":"url","category":"Network activity","to_ids":true,"value":"http://34.48.38.124:25","comment":"https://x.com/drb_ra/status/1946643026501075338","timestamp":"1752950839","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9a738981-771c-59ed-bb0a-70db61ef39f7","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.10.14:80","comment":"https://x.com/drb_ra/status/1946643049947218005","timestamp":"1752950844","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"528f2095-e8cd-569d-af41-abd4084485c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.10.14","comment":"https://x.com/drb_ra/status/1946643049947218005","timestamp":"1752950844","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"0e15a969-e907-536a-8641-e0379a850f2d","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.158.212:8888","comment":"https://x.com/drb_ra/status/1946643071640256758","timestamp":"1752950849","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"5547c910-e81e-5796-b99a-2d1121e8ee34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.158.212","comment":"https://x.com/drb_ra/status/1946643071640256758","timestamp":"1752950849","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"154f300e-3573-5dd5-ab63-ca4e1be5bbea","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.15.192:443","comment":"https://x.com/drb_ra/status/1946643094771744883","timestamp":"1752950855","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"66e880c7-641e-5093-9c57-628d1ffde5ea","type":"url","category":"Network activity","to_ids":true,"value":"http://94.99.6.15:443","comment":"https://x.com/drb_ra/status/1946643115869118865","timestamp":"1752950860","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"925e0db8-69bd-51e7-a22f-885009ad9dd6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.99.6.15","comment":"https://x.com/drb_ra/status/1946643115869118865","timestamp":"1752950860","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6eb5dcae-25c0-589d-ad6b-160601eafd47","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.215.155:445","comment":"https://x.com/drb_ra/status/1946643135683006510","timestamp":"1752950865","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ef153163-604d-5419-b6d3-c1293315d908","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.215.155","comment":"https://x.com/drb_ra/status/1946643135683006510","timestamp":"1752950865","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dd8cf623-0146-55d4-98b0-9a55468e6a1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.251.157.116","comment":"https://x.com/drb_ra/status/1946643157396918521","timestamp":"1752950870","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"23aec3cd-8837-5174-887d-367faf95230a","type":"url","category":"Network activity","to_ids":true,"value":"http://148.251.157.116:443","comment":"https://x.com/drb_ra/status/1946643157396918521","timestamp":"1752950870","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b8ae23b5-b0ce-58bd-84c3-95c6fb26e979","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.141.47.199","comment":"https://x.com/drb_ra/status/1946643178641125650","timestamp":"1752950875","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"d80e88a1-d2bd-5ea8-8b27-420995e5792e","type":"url","category":"Network activity","to_ids":true,"value":"http://209.141.47.199:7443","comment":"https://x.com/drb_ra/status/1946643178641125650","timestamp":"1752950875","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"2684d7e0-4078-5ef9-a629-5db51d420d27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.141.55","comment":"https://x.com/drb_ra/status/1946643201869119594","timestamp":"1752950880","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"94c8ee45-d306-53de-9305-a46192ae54da","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.141.55:8888","comment":"https://x.com/drb_ra/status/1946643201869119594","timestamp":"1752950880","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"90db2f8c-1f8e-58a9-9f1e-8ba1e78c527a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.96.165.237:443","comment":"https://x.com/drb_ra/status/1946643224421908619","timestamp":"1752950886","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9c509392-e61c-5952-a2ca-72323470ea72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.122.219","comment":"https://x.com/drb_ra/status/1946643742133244223","timestamp":"1752951009","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e1c076fd-c444-54ca-9a20-357d3457bf5a","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.122.219:4323","comment":"https://x.com/drb_ra/status/1946643742133244223","timestamp":"1752951009","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"555e4fab-1aab-5e78-b77b-1b21936f2d5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.161.38.57","comment":"https://x.com/drb_ra/status/1946643763952078869","timestamp":"1752951014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"26daadc7-12b0-526d-8a9a-4c9ec2616dd7","type":"url","category":"Network activity","to_ids":true,"value":"http://203.161.38.57:11601","comment":"https://x.com/drb_ra/status/1946643763952078869","timestamp":"1752951014","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"738ecd61-9e75-5a35-8345-284dbc071385","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.233.131","comment":"https://x.com/drb_ra/status/1946643784583795157","timestamp":"1752951019","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"047d24c0-9e78-53bc-8a54-ce916441ea64","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.233.131:5902","comment":"https://x.com/drb_ra/status/1946643784583795157","timestamp":"1752951019","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"dd681c32-8ca7-5f6e-927c-872733608265","type":"url","category":"Network activity","to_ids":true,"value":"http://35.163.114.205:44818","comment":"https://x.com/drb_ra/status/1946643799574213027","timestamp":"1752951023","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9e29f90f-695b-5bb5-9db8-e02505c8eb97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.163.114.205","comment":"https://x.com/drb_ra/status/1946643799574213027","timestamp":"1752951023","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"02de5ada-3a5c-57ed-8c58-cce7f19f3325","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.17.21.189","comment":"https://x.com/drb_ra/status/1946643817869754635","timestamp":"1752951027","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a41fef33-a9ea-5f8d-b5a4-a3e7b07aa095","type":"url","category":"Network activity","to_ids":true,"value":"http://51.17.21.189:3306","comment":"https://x.com/drb_ra/status/1946643817869754635","timestamp":"1752951027","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"75c6d2b3-0266-5743-bce2-c9397982d17c","type":"url","category":"Network activity","to_ids":true,"value":"http://13.245.111.102:831","comment":"https://x.com/drb_ra/status/1946643843685728473","timestamp":"1752951033","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f70879eb-98c9-54a7-bf52-752d43ae0f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.245.111.102","comment":"https://x.com/drb_ra/status/1946643865097630188","timestamp":"1752951038","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7fb8972c-ea44-5b19-a7f6-f8613d288e26","type":"url","category":"Network activity","to_ids":true,"value":"http://13.245.111.102:81","comment":"https://x.com/drb_ra/status/1946643865097630188","timestamp":"1752951038","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"74828c9d-52c5-50f0-affb-147a40ed1017","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.179.1.26","comment":"https://x.com/drb_ra/status/1946643886920647102","timestamp":"1752951044","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"88795e5e-f58b-55df-bc06-c851af2172dd","type":"url","category":"Network activity","to_ids":true,"value":"http://63.179.1.26:789","comment":"https://x.com/drb_ra/status/1946643886920647102","timestamp":"1752951044","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"196b47c2-5644-541e-a530-bc1df302f342","type":"url","category":"Network activity","to_ids":true,"value":"http://157.175.55.36:52057","comment":"https://x.com/drb_ra/status/1946643906214391898","timestamp":"1752951048","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"10936d7d-4f9f-5bf9-830d-8057cf445c65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.175.55.36","comment":"https://x.com/drb_ra/status/1946643906214391898","timestamp":"1752951048","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a5ea6adf-7ff5-5d5e-a038-68312a4194a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.190.233","comment":"https://x.com/drb_ra/status/1946643926422577163","timestamp":"1752951053","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"814a90f4-187f-551d-8fc5-09693d83445b","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.190.233:8013","comment":"https://x.com/drb_ra/status/1946643926422577163","timestamp":"1752951053","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2e32e73b-2417-5d11-8c48-0e1936965aef","type":"url","category":"Network activity","to_ids":true,"value":"http://213.163.202.223:587","comment":"https://x.com/drb_ra/status/1946643940259561560","timestamp":"1752951056","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"49f5b45a-30db-529c-aeeb-80e9b3b09639","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.163.202.223","comment":"https://x.com/drb_ra/status/1946643940259561560","timestamp":"1752951056","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0f2fe7b4-9e62-5089-9e69-0fb446fbd68a","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.15.192","comment":"https://x.com/threatquery/status/1946676437517324565","timestamp":"1752958804","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"malware"},{"name":"C2"}]},{"uuid":"c155fa64-16b7-5196-8bde-ad8833e809ea","type":"url","category":"Network activity","to_ids":true,"value":"http://94.99.6.15","comment":"https://x.com/threatquery/status/1946676435633983876","timestamp":"1752958804","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"malware"},{"name":"C2"}]},{"uuid":"3b8168ae-8f99-5b0d-9982-ddee7f6ba57e","type":"url","category":"Network activity","to_ids":true,"value":"http://35.163.114.205","comment":"https://x.com/threatquery/status/1946676439106908430","timestamp":"1752958805","distribution":"5","Tag":[{"name":"malware"},{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ff98dbee-5f8f-53d2-bdb0-e5ecda1a6328","type":"url","category":"Network activity","to_ids":true,"value":"http://103.125.248.109:8443","comment":"https://x.com/drb_ra/status/1946682404388651055","timestamp":"1752960227","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a9c548bf-00d0-54ea-bf2d-30a61e5162c3","type":"domain","category":"Network activity","to_ids":true,"value":"messagerieorange35.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946691557609869384","timestamp":"1752962409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dd1aba07-bb3e-5b17-bf01-a2937d742290","type":"url","category":"Network activity","to_ids":true,"value":"https://messagerieorange35.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946691557609869384","timestamp":"1752962409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0ef3958a-e0f6-5ea0-92a7-ed9cbbe1a71c","type":"url","category":"Network activity","to_ids":true,"value":"https://101.201.76.1/load","comment":"https://x.com/drb_ra/status/1946699636724445549","timestamp":"1752964335","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0de75421-951e-5535-9df5-b081cdcc68f4","type":"url","category":"Network activity","to_ids":true,"value":"http://101.201.76.1:443","comment":"https://x.com/drb_ra/status/1946699636724445549","timestamp":"1752964335","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f8318661-ca20-5d7b-8911-0ade5c63e506","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.201.76.1","comment":"https://x.com/drb_ra/status/1946699636724445549","timestamp":"1752964335","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"91326894-b78e-572e-a8b7-acf3635410b7","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.140.158/cx","comment":"https://x.com/drb_ra/status/1946699658560000230","timestamp":"1752964341","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aa8ad3e4-fd53-504b-beb4-94c4e45c31e7","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.35:443","comment":"https://x.com/drb_ra/status/1946699658560000230","timestamp":"1752964341","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"caa4085c-559b-5ca5-9719-4dc52e87efbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.35","comment":"https://x.com/drb_ra/status/1946699658560000230","timestamp":"1752964341","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"65cce49c-3615-5f70-b283-8c682c4b71ed","type":"domain","category":"Network activity","to_ids":true,"value":"tip.emailsv.org","comment":"https://x.com/drb_ra/status/1946699681553100947","timestamp":"1752964346","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dbd096dd-70a1-5e73-8f35-8984395b30bb","type":"url","category":"Network activity","to_ids":true,"value":"https://tip.emailsv.org/cm","comment":"https://x.com/drb_ra/status/1946699681553100947","timestamp":"1752964346","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be6f90a4-7d5c-5ece-9a63-5e21062265b9","type":"url","category":"Network activity","to_ids":true,"value":"http://114.116.18.42:2087","comment":"https://x.com/drb_ra/status/1946699681553100947","timestamp":"1752964346","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"295116b7-ed17-591f-a729-63a2422cb9ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.116.18.42","comment":"https://x.com/drb_ra/status/1946699681553100947","timestamp":"1752964346","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dbc35dac-05de-5351-9744-d5f0c6e4d146","type":"domain","category":"Network activity","to_ids":true,"value":"microsotf2564kiiok5.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946721744682696961","timestamp":"1752969606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1c98c2c8-665b-5fa4-9882-be42c9d00fad","type":"url","category":"Network activity","to_ids":true,"value":"https://microsotf2564kiiok5.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946721744682696961","timestamp":"1752969606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"deb1afce-b121-52f3-9d86-ccf8bebdd5b6","type":"domain","category":"Network activity","to_ids":true,"value":"temp.demetradesign.it","comment":"https://x.com/skocherhan/status/1946722352953245809","timestamp":"1752969751","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"0b920ef9-c136-521e-b334-c7595d9973ca","type":"url","category":"Network activity","to_ids":true,"value":"http://temp.demetradesign.it/eternalwealth/wp-content/plugins/health-check/pages/interview/d.php?na=battmp","comment":"https://x.com/skocherhan/status/1946722352953245809","timestamp":"1752969751","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"cea50559-616b-5672-ab85-8a8d4f8660b0","type":"domain","category":"Network activity","to_ids":true,"value":"adv.oa.pt","comment":"https://x.com/skocherhan/status/1946722610043080836","timestamp":"1752969813","distribution":"5"},{"uuid":"4dd3d3cc-75ec-5283-aba4-d65503e7167b","type":"url","category":"Network activity","to_ids":true,"value":"http://adv.oa.pt","comment":"https://x.com/skocherhan/status/1946722610043080836","timestamp":"1752969813","distribution":"5"},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"140c2430-48d6-5b0f-9bd4-4d92b5a0da9f","type":"domain","category":"Network activity","to_ids":true,"value":"jiakunyeya.com","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29508217-6296-5a25-bcb8-e3c0944ae6ac","type":"url","category":"Network activity","to_ids":true,"value":"http://jiakunyeya.com/D0pX.jp","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64090690-adf8-51ab-ab89-425136613b44","type":"domain","category":"Network activity","to_ids":true,"value":"tencensbi.bond","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3106bdc9-41f5-57e9-90da-aac8496e9b8d","type":"url","category":"Network activity","to_ids":true,"value":"http://tencensbi.bond","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3515dc56-5756-5c2c-aaa4-c3436625d413","type":"url","category":"Network activity","to_ids":true,"value":"http://slmpie.icu/D0pX.jp","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32889995-40a5-5dbe-bbae-0797cbe29f5a","type":"domain","category":"Network activity","to_ids":true,"value":"slmpie.icu","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f89fc7c8-3eb5-50a2-a3c6-74eab80908fb","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.64.1","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/catnap707/status/1946733921250722184","timestamp":"1752972510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d068c3b7-ed66-52a0-93e9-72db875a7ccc","type":"domain","category":"Network activity","to_ids":true,"value":"cuinbashlugin.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946751936578887940","timestamp":"1752976805","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1d3067ab-dac5-5e36-a086-078aa6f55dcb","type":"url","category":"Network activity","to_ids":true,"value":"https://cuinbashlugin.godaddysites.com","comment":"https://x.com/urldna_bot/status/1946751936578887940","timestamp":"1752976805","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c41ebc2e-24a3-56ce-951f-e34d0c3daa8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.22.2.7","comment":"https://x.com/drb_ra/status/1946758883222880465","timestamp":"1752978461","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d6cc853f-e6d8-5baa-8c30-72aaef658370","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.87.43:8081","comment":"https://x.com/drb_ra/status/1946758883222880465","timestamp":"1752978461","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a0a7dcd5-d08d-59a3-9265-0e1c579ec756","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.87.43","comment":"https://x.com/drb_ra/status/1946758883222880465","timestamp":"1752978461","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bc2b5135-8594-5c53-9df1-a425ce1cfd0a","type":"domain","category":"Network activity","to_ids":true,"value":"tspoultryfarming.co.za","comment":"https://x.com/urldna_bot/status/1946782143587217460","timestamp":"1752984007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"67bf32a1-5988-5922-abd9-73ef4cec3486","type":"url","category":"Network activity","to_ids":true,"value":"https://tspoultryfarming.co.za","comment":"https://x.com/urldna_bot/status/1946782143587217460","timestamp":"1752984007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0091a74-26ce-5f6e-aefd-7e8d82ce3746","type":"domain","category":"Network activity","to_ids":true,"value":"shinyokumlal-0.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2592ea3f-dd87-5e0f-9ceb-7b01b6e80d22","type":"url","category":"Network activity","to_ids":true,"value":"https://shinyokumlal-0.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"643a8f6a-dbc1-5618-9cd1-78f01e91521d","type":"url","category":"Network activity","to_ids":true,"value":"https://shinyokumlal-01-07.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5b7be55a-dd8a-52b3-8cd8-2391b6649757","type":"domain","category":"Network activity","to_ids":true,"value":"shinyokumlal-01-07.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1946788879891337604","timestamp":"1752985613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0aabfe94-b61c-5cbe-aa77-2930a70f7d0e","type":"url","category":"Network activity","to_ids":true,"value":"http://streamyard.net","comment":"https://x.com/alvosec/status/1946791203749642261","timestamp":"1752986167","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8f95fdf9-017a-545a-9a3c-8cf7d50651d1","type":"domain","category":"Network activity","to_ids":true,"value":"streamyard.net","comment":"https://x.com/alvosec/status/1946791203749642261","timestamp":"1752986167","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5c3d72ce-a07d-54dd-8fca-4898fb39563f","type":"domain","category":"Network activity","to_ids":true,"value":"streamyard.app","comment":"https://x.com/alvosec/status/1946791203749642261","timestamp":"1752986167","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0d0212c0-d29c-5fb7-84fa-d86c4ebdf13d","type":"url","category":"Network activity","to_ids":true,"value":"http://streamyard.app","comment":"https://x.com/alvosec/status/1946791203749642261","timestamp":"1752986167","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"548b4b06-9208-545d-a467-0080fba9b6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.175.101.203","comment":"https://x.com/drb_ra/status/1946819592963170467","timestamp":"1752992935","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6dc93e4-9968-5bd2-a474-dfd1df3f7721","type":"url","category":"Network activity","to_ids":true,"value":"https://85.175.101.203/zOMGAPT","comment":"https://x.com/drb_ra/status/1946819592963170467","timestamp":"1752992935","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f6acdf88-10c7-5abb-a778-21749b1f7efa","type":"url","category":"Network activity","to_ids":true,"value":"http://85.175.101.203:443","comment":"https://x.com/drb_ra/status/1946819592963170467","timestamp":"1752992935","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"87d083a5-7db4-59fa-bbfe-77c126f021b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.162.4.4","comment":"https://x.com/drb_ra/status/1946824157422928054","timestamp":"1752994024","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"8f9b6fab-374c-56d5-8898-b68598f25174","type":"url","category":"Network activity","to_ids":true,"value":"http://16.162.4.4:8888","comment":"https://x.com/drb_ra/status/1946824157422928054","timestamp":"1752994024","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"d7939fe4-a18b-58ed-b862-6c7d64d7a007","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.45.1.34","comment":"https://x.com/drb_ra/status/1946824178750923172","timestamp":"1752994029","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"4095efe2-c39f-57f6-b9d9-17ce6f72e46a","type":"url","category":"Network activity","to_ids":true,"value":"http://119.45.1.34:8888","comment":"https://x.com/drb_ra/status/1946824178750923172","timestamp":"1752994029","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"48acc5e7-3c98-574a-88b8-d3cceb1a339a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"71.85.182.105","comment":"https://x.com/drb_ra/status/1946824198753599947","timestamp":"1752994033","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"1567c6f0-8a82-5866-be4c-8569b4a63ee7","type":"url","category":"Network activity","to_ids":true,"value":"http://71.85.182.105:443","comment":"https://x.com/drb_ra/status/1946824198753599947","timestamp":"1752994033","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6673b719-8870-5248-bf02-d6256cb0be16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.98.219.194","comment":"https://x.com/drb_ra/status/1946824222082203882","timestamp":"1752994039","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"af67a5d4-28b3-5587-a340-34c1115abbd4","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.194:443","comment":"https://x.com/drb_ra/status/1946824222082203882","timestamp":"1752994039","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"c43a4fbf-1293-5c68-983f-69795a2302d1","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.110.64:445","comment":"https://x.com/drb_ra/status/1946824243947118896","timestamp":"1752994044","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4590f2a1-e31d-53b0-8818-037e093e949d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.110.64","comment":"https://x.com/drb_ra/status/1946824243947118896","timestamp":"1752994044","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5263c4c1-9412-5fcc-b84d-9e013d8a6930","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.180.213.79","comment":"https://x.com/drb_ra/status/1946824259814269263","timestamp":"1752994048","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b311de40-c9dd-5328-be3f-977549cb344a","type":"url","category":"Network activity","to_ids":true,"value":"http://207.180.213.79:52037","comment":"https://x.com/drb_ra/status/1946824259814269263","timestamp":"1752994048","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"dcb4c876-33f1-5b84-96fd-a07e1320466b","type":"url","category":"Network activity","to_ids":true,"value":"http://35.244.127.70:80","comment":"https://x.com/drb_ra/status/1946824281104548057","timestamp":"1752994053","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"61b95483-82b2-5dd2-8217-3753a3258a3b","type":"url","category":"Network activity","to_ids":true,"value":"http://35.244.127.70:443","comment":"https://x.com/drb_ra/status/1946824301732098086","timestamp":"1752994058","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"24daf57d-805f-5dcd-94de-bf1af19dd303","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.244.127.70","comment":"https://x.com/drb_ra/status/1946824301732098086","timestamp":"1752994058","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1c606f20-6ae4-539a-9ab6-29e851625a46","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.251.213:443","comment":"https://x.com/drb_ra/status/1946824317779443893","timestamp":"1752994062","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"37ce7e49-175d-59a2-9d84-10f741fbfaf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.251.213","comment":"https://x.com/drb_ra/status/1946824317779443893","timestamp":"1752994062","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"14f5183a-597f-5c51-8577-b187da88fb9d","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.216.17:443","comment":"https://x.com/drb_ra/status/1946824343771652378","timestamp":"1752994068","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"619bb301-48bd-52d4-ac60-bc4de7803ee9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.216.17","comment":"https://x.com/drb_ra/status/1946824343771652378","timestamp":"1752994068","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"84e6702b-e12c-5f03-af59-5c17e899461f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.141.84.244:443","comment":"https://x.com/drb_ra/status/1946824364881522876","timestamp":"1752994073","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"56b53885-574a-57b1-bf0c-655812b26e22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.228.12.2","comment":"https://x.com/drb_ra/status/1946824386029248958","timestamp":"1752994078","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9fa0365e-a3c0-5eaf-b1c0-bd0d6e20014b","type":"url","category":"Network activity","to_ids":true,"value":"http://56.228.12.2:7443","comment":"https://x.com/drb_ra/status/1946824386029248958","timestamp":"1752994078","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"24bfe012-c87b-5ac4-993f-fb158b2c37b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.168.191.225","comment":"https://x.com/drb_ra/status/1946824407382392932","timestamp":"1752994083","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"3e265d91-a68e-54c8-a3f6-8616f29baf6a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.168.191.225:80","comment":"https://x.com/drb_ra/status/1946824407382392932","timestamp":"1752994083","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"e7c7f0d4-78f9-5167-9f06-a7bfe3872f92","type":"url","category":"Network activity","to_ids":true,"value":"http://91.236.116.139:80","comment":"https://x.com/drb_ra/status/1946824925215404377","timestamp":"1752994207","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8f605037-c14b-51c1-ac25-7ba613f00ee5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.236.116.139","comment":"https://x.com/drb_ra/status/1946824925215404377","timestamp":"1752994207","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a969b8c4-ab1e-53dc-996c-a21fa6ce58b0","type":"url","category":"Network activity","to_ids":true,"value":"http://206.162.22.75:8080","comment":"https://x.com/drb_ra/status/1946824946715386279","timestamp":"1752994212","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"4be56c64-f838-57b2-b521-f0abf4d0a30e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.162.22.75","comment":"https://x.com/drb_ra/status/1946824946715386279","timestamp":"1752994212","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"5b947dc9-0f0d-5448-987a-362002f610f6","type":"url","category":"Network activity","to_ids":true,"value":"http://5.178.96.115:443","comment":"https://x.com/drb_ra/status/1946824967472964062","timestamp":"1752994217","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8fc76089-977a-500a-ac8e-bcbedb6ba955","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.145.241:443","comment":"https://x.com/drb_ra/status/1946824986292818289","timestamp":"1752994221","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"750ca13f-848e-5e72-b92f-48eddb3802ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.145.241","comment":"https://x.com/drb_ra/status/1946824986292818289","timestamp":"1752994221","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"30a1a4e8-a75e-5bf9-aba9-21445a5a50e4","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.190.166:5555","comment":"https://x.com/drb_ra/status/1946825006245187722","timestamp":"1752994226","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f2b31579-2667-5620-8e35-916b5af5ddb9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.190.166","comment":"https://x.com/drb_ra/status/1946825006245187722","timestamp":"1752994226","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8edbbe45-82d7-54ae-85e3-51979af092d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.253.10","comment":"https://x.com/drb_ra/status/1946825032170078359","timestamp":"1752994232","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"98023959-2419-5f15-9bfd-4c95e3a16953","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.253.10:3232","comment":"https://x.com/drb_ra/status/1946825032170078359","timestamp":"1752994232","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"0a3fef5b-7bf7-51f4-bb39-6f6fcdf0b2d1","type":"url","category":"Network activity","to_ids":true,"value":"http://16.62.240.47:4839","comment":"https://x.com/drb_ra/status/1946825053942747582","timestamp":"1752994237","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"559466be-e6b2-5dc5-a6d1-7fa159b2223f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.62.240.47","comment":"https://x.com/drb_ra/status/1946825053942747582","timestamp":"1752994237","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c1bb3147-e042-55eb-b9c0-6e7fe7ecfd3b","type":"url","category":"Network activity","to_ids":true,"value":"http://51.112.47.23:27034","comment":"https://x.com/drb_ra/status/1946825078752092634","timestamp":"1752994243","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f95ed653-7327-5e9d-998f-f96fe6bbe045","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.112.47.23","comment":"https://x.com/drb_ra/status/1946825078752092634","timestamp":"1752994243","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8bb20dd7-1334-5ae1-844f-bcfacfe44db2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.96.126.19:3306","comment":"https://x.com/drb_ra/status/1946825100902137973","timestamp":"1752994248","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1bc9bb59-62f5-5904-baaa-90a492171077","type":"url","category":"Network activity","to_ids":true,"value":"http://93.198.188.234:82","comment":"https://x.com/drb_ra/status/1946825123010412888","timestamp":"1752994254","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c0fb20db-dc09-5754-80c2-4abb14d4533a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.198.188.234","comment":"https://x.com/drb_ra/status/1946825123010412888","timestamp":"1752994254","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"13a125c1-06c2-5151-95bf-9119deedaaf7","type":"url","category":"Network activity","to_ids":true,"value":"http://18.175.149.170:9200","comment":"https://x.com/drb_ra/status/1946825145592545488","timestamp":"1752994259","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"61a5a2ed-027c-573c-b035-35d526c61a98","type":"url","category":"Network activity","to_ids":true,"value":"http://18.175.149.170:8000","comment":"https://x.com/drb_ra/status/1946825167973278071","timestamp":"1752994264","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2a5611fb-a6fa-5d53-b172-2d6025308484","type":"url","category":"Network activity","to_ids":true,"value":"http://18.175.149.170:13000","comment":"https://x.com/drb_ra/status/1946825190119219526","timestamp":"1752994270","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6961790e-2f63-59a9-9a73-bb0b24fff635","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.175.149.170","comment":"https://x.com/drb_ra/status/1946825190119219526","timestamp":"1752994270","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ab9fd69c-e911-5146-81f8-03a2646bca5a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.78.57.178:10260","comment":"https://x.com/drb_ra/status/1946825212407722314","timestamp":"1752994275","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f158c8a6-d131-5b19-8f02-1415926f581d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.78.57.178","comment":"https://x.com/drb_ra/status/1946825229050810408","timestamp":"1752994279","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"905ef4b1-3b3b-536a-a4d4-b38d81a205a9","type":"url","category":"Network activity","to_ids":true,"value":"http://54.78.57.178:10810","comment":"https://x.com/drb_ra/status/1946825229050810408","timestamp":"1752994279","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"10483f29-6543-586f-a270-f2d3e1f90804","type":"url","category":"Network activity","to_ids":true,"value":"http://43.208.192.188:48641","comment":"https://x.com/drb_ra/status/1946825254917030267","timestamp":"1752994285","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"16387211-41dd-584d-860f-0547003b9256","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.208.192.188","comment":"https://x.com/drb_ra/status/1946825254917030267","timestamp":"1752994285","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8e2b56d4-0b01-5ca3-9f0f-07f77ec3087d","type":"url","category":"Network activity","to_ids":true,"value":"http://35.156.214.186:102","comment":"https://x.com/drb_ra/status/1946825276844839323","timestamp":"1752994290","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"191ce4ec-f920-5c2c-899b-dc6c7d0d0178","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.156.214.186","comment":"https://x.com/drb_ra/status/1946825276844839323","timestamp":"1752994290","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"78647df9-15d0-58c6-b07f-b53e606584b1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.222.124.155:11112","comment":"https://x.com/drb_ra/status/1946825298881692125","timestamp":"1752994296","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e06e6ee7-9253-59cf-922d-e61915660675","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.222.124.155","comment":"https://x.com/drb_ra/status/1946825298881692125","timestamp":"1752994296","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0ad52d8f-e88c-542d-8180-f0c19dee0c29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.248.130","comment":"https://x.com/drb_ra/status/1946825318439747780","timestamp":"1752994300","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d5120124-5ae6-53f7-adbd-b7430a174b2d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.248.130:8808","comment":"https://x.com/drb_ra/status/1946825318439747780","timestamp":"1752994300","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"798d2686-7540-5e9e-96f7-bcde57ec1873","type":"url","category":"Network activity","to_ids":true,"value":"http://207.231.111.84:80","comment":"https://x.com/drb_ra/status/1946825343450407259","timestamp":"1752994306","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"e1956e24-6833-5b05-b8a9-8d58ce43f33b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.231.111.84","comment":"https://x.com/drb_ra/status/1946825343450407259","timestamp":"1752994306","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c6cf817c-f375-5dba-a5a9-25e04827c84f","type":"url","category":"Network activity","to_ids":true,"value":"http://157.254.165.199:888","comment":"https://x.com/drb_ra/status/1946825365663408486","timestamp":"1752994312","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"697d6e78-9503-5714-97bc-3de75562dd94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.254.165.199","comment":"https://x.com/drb_ra/status/1946825365663408486","timestamp":"1752994312","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ea135a6d-b8be-5275-97a9-fe0eb63a0ac9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.32.92.170:443","comment":"https://x.com/drb_ra/status/1946825387327009225","timestamp":"1752994317","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b50e93ad-995d-5f5c-8eeb-df428030e9f5","type":"url","category":"Network activity","to_ids":true,"value":"http://45.32.92.170:25","comment":"https://x.com/drb_ra/status/1946825409879740782","timestamp":"1752994322","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5d094212-8fed-5b49-bae1-25cf38f011bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.32.92.170","comment":"https://x.com/drb_ra/status/1946825409879740782","timestamp":"1752994322","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e3a635d1-dc7e-5b1b-b5ef-0a78b404df29","type":"domain","category":"Network activity","to_ids":true,"value":"dncvjdshddd.weebly.com","comment":"https://x.com/urldna_bot/status/1946842538385527294","timestamp":"1752998406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"81b3db57-1cb9-5a3e-93ec-e5e1f237ad8e","type":"url","category":"Network activity","to_ids":true,"value":"https://dncvjdshddd.weebly.com","comment":"https://x.com/urldna_bot/status/1946842538385527294","timestamp":"1752998406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f768bb44-d95d-5a0e-8353-5500a6ad22d0","type":"url","category":"Network activity","to_ids":true,"value":"https://astbm-168.xyz/desktop/game/arcade/cq9","comment":"https://x.com/urldna_bot/status/1946872739245023304","timestamp":"1753005606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"68bb766e-dc3c-5c67-ba66-c078b7a470e3","type":"domain","category":"Network activity","to_ids":true,"value":"astbm-168.xyz","comment":"https://x.com/urldna_bot/status/1946872739245023304","timestamp":"1753005606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0c99cf47-feec-5574-9343-fdfd7a4af14d","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.116.169:80","comment":"https://x.com/drb_ra/status/1946872997182128607","timestamp":"1753005668","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1ff631c-bc93-5656-8cbc-6a9d2b9d3638","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.116.169","comment":"https://x.com/drb_ra/status/1946872997182128607","timestamp":"1753005668","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a982fa92-b410-5347-b834-ddbf0ea0afce","type":"url","category":"Network activity","to_ids":true,"value":"http://139.155.104.147:443","comment":"https://x.com/drb_ra/status/1946873019030229076","timestamp":"1753005673","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"17917e63-68ab-5202-8b0a-7453d396b3eb","type":"url","category":"Network activity","to_ids":true,"value":"https://139.155.104.147/ptj","comment":"https://x.com/drb_ra/status/1946873019030229076","timestamp":"1753005673","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f5a90add-e402-56bc-b8dd-0923f48e8cf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.155.104.147","comment":"https://x.com/drb_ra/status/1946873019030229076","timestamp":"1753005673","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8ba0f3e7-df99-5bb7-8b98-b483017d358c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.61.75:6666","comment":"https://x.com/drb_ra/status/1946873040425353307","timestamp":"1753005678","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a337ddf5-8d2d-5d53-9e80-ea583401a116","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.61.75","comment":"https://x.com/drb_ra/status/1946873040425353307","timestamp":"1753005678","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aa0cae99-212b-572f-8147-7757eee94390","type":"url","category":"Network activity","to_ids":true,"value":"https://154.216.157.235/ptj","comment":"https://x.com/drb_ra/status/1946873062504173623","timestamp":"1753005683","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ea439be-d20a-554a-85da-c699b9386507","type":"url","category":"Network activity","to_ids":true,"value":"http://154.216.157.235:80","comment":"https://x.com/drb_ra/status/1946873062504173623","timestamp":"1753005683","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4166002f-63e0-54fc-b1bc-5c4cd2f52b87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.216.157.235","comment":"https://x.com/drb_ra/status/1946873062504173623","timestamp":"1753005683","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a8b0fa2d-223c-5413-91fb-6fcba9af0770","type":"url","category":"Network activity","to_ids":true,"value":"http://101.42.187.157:80","comment":"https://x.com/drb_ra/status/1946873580609745088","timestamp":"1753005807","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fb761ffc-2d36-5676-ae8c-8a15424d364d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.42.187.157","comment":"https://x.com/drb_ra/status/1946873580609745088","timestamp":"1753005807","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c730d242-9baf-519f-90dd-92f6eb69b872","type":"url","category":"Network activity","to_ids":true,"value":"http://104.168.64.199:80","comment":"https://x.com/drb_ra/status/1946873602386678194","timestamp":"1753005812","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"02f6f631-09a6-5326-8d25-730c1c6aa73e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.168.64.199","comment":"https://x.com/drb_ra/status/1946873602386678194","timestamp":"1753005812","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f8318661-ca20-5d7b-8911-0ade5c63e506","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.201.76.1","comment":"https://x.com/drb_ra/status/1946873602386678194","timestamp":"1753005812","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8b266be6-6c3e-5488-91ab-be3a72b92556","type":"url","category":"Network activity","to_ids":true,"value":"http://42.192.212.68:443","comment":"https://x.com/drb_ra/status/1946873624511574076","timestamp":"1753005817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f2ae4887-4bf1-5385-8532-cf69b56f8197","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.192.212.68","comment":"https://x.com/drb_ra/status/1946873624511574076","timestamp":"1753005817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a209e0eb-65b5-5fe3-8416-5e1b959ee286","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.137.198:9989","comment":"https://x.com/drb_ra/status/1946894673483551058","timestamp":"1753010836","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"41abe061-0c24-5f25-a23f-0aba370d9e19","type":"url","category":"Network activity","to_ids":true,"value":"http://210.36.97.72:81","comment":"https://x.com/drb_ra/status/1946895191811531126","timestamp":"1753010959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"95a7dfb3-3917-5c62-8942-f89de422d678","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.36.97.72","comment":"https://x.com/drb_ra/status/1946895191811531126","timestamp":"1753010959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6ef4f15d-3427-592e-a2eb-55e2f530125e","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.134.161:80","comment":"https://x.com/drb_ra/status/1946895209096192018","timestamp":"1753010964","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"95f29c1c-4a1a-5500-b18b-ec39349fb73c","type":"domain","category":"Network activity","to_ids":true,"value":"grifogranchimu.com","comment":"https://x.com/urldna_bot/status/1946902934958035401","timestamp":"1753012806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"213441e8-cc13-5076-a534-bb4f46e8e82d","type":"url","category":"Network activity","to_ids":true,"value":"https://grifogranchimu.com/web-update/","comment":"https://x.com/urldna_bot/status/1946902934958035401","timestamp":"1753012806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1ba17b25-0189-57ce-b3e1-c4ca9dc575d3","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/ComputerDestroyer","comment":"https://x.com/skocherhan/status/1946905873604866314","timestamp":"1753013506","distribution":"5","Tag":[{"name":"Njrat"}]},{"uuid":"cbd3d361-f948-5238-9030-7a89f15bf307","type":"url","category":"Network activity","to_ids":true,"value":"http://176.65.148.203/machinist","comment":"https://x.com/sicehice/status/1946931458272014442","timestamp":"1753019606","distribution":"5"},{"uuid":"93d467e4-038a-58c7-afe4-76a7b4a6ebd2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.135.193.2","comment":"https://x.com/sicehice/status/1946931458272014442","timestamp":"1753019606","distribution":"5"},{"uuid":"5e7fda66-d2c3-5cff-95c5-bf6e582bb776","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.148.203","comment":"https://x.com/sicehice/status/1946931458272014442","timestamp":"1753019606","distribution":"5"},{"uuid":"457a25dc-a9c5-557d-acc8-bf3085c75b54","type":"url","category":"Network activity","to_ids":true,"value":"http://46.8.231.224/scripts/4thepool_miner.sh","comment":"https://x.com/sicehice/status/1946932627287527790","timestamp":"1753019885","distribution":"5","Tag":[{"name":"log4j"}]},{"uuid":"d7eb467c-3d42-5e54-ad9e-c7f4f386f021","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.75.212.83","comment":"https://x.com/sicehice/status/1946932627287527790","timestamp":"1753019885","distribution":"5","Tag":[{"name":"log4j"}]},{"uuid":"49ae7495-7208-5aa2-8374-395697dc5e67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.8.231.224","comment":"https://x.com/sicehice/status/1946932627287527790","timestamp":"1753019885","distribution":"5","Tag":[{"name":"log4j"}]},{"uuid":"6af450f6-51e8-5636-978d-05d2908012ef","type":"md5","category":"Payload delivery","to_ids":true,"value":"7948170e68c90a5272a72c4df6292487","comment":"https://x.com/sicehice/status/1946932627287527790","timestamp":"1753019885","distribution":"5","Tag":[{"name":"log4j"}]},{"uuid":"9e1299c1-c89b-5c8e-b55c-da6b4684cb48","type":"domain","category":"Network activity","to_ids":true,"value":"jdke.weebly.com","comment":"https://x.com/urldna_bot/status/1946933133175071087","timestamp":"1753020005","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"89f82639-ebc3-594d-90c6-9666ff76360e","type":"url","category":"Network activity","to_ids":true,"value":"https://jdke.weebly.com","comment":"https://x.com/urldna_bot/status/1946933133175071087","timestamp":"1753020005","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ad867bc7-ad98-5d75-b322-01377ee5b727","type":"domain","category":"Network activity","to_ids":true,"value":"avc.pabokh.cfd","comment":"https://x.com/harugasumi/status/1946934442087624723","timestamp":"1753020317","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e32d21c-8c09-5d1e-9d93-8d11146de3d3","type":"url","category":"Network activity","to_ids":true,"value":"https://avc.pabokh.cfd/auth/screen","comment":"https://x.com/harugasumi/status/1946934442087624723","timestamp":"1753020317","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aade0d12-3b24-5da7-8fb3-ca03a5f90df2","type":"domain","category":"Network activity","to_ids":true,"value":"ulqqf.cn","comment":"https://x.com/harugasumi/status/1946942358710575219","timestamp":"1753022205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee1a7337-d073-547a-b0e6-008f6245a3cd","type":"url","category":"Network activity","to_ids":true,"value":"https://ulqqf.cn/Login","comment":"https://x.com/harugasumi/status/1946942358710575219","timestamp":"1753022205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cd44da1-928a-54ba-b13e-ed0bc80bb5a7","type":"md5","category":"Payload delivery","to_ids":true,"value":"DF013AA8420C0AA4BDF8FC5042C592F4","comment":"https://x.com/fbgwls245/status/1946945746693169443","timestamp":"1753023013","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"98f88be6-dc85-5957-ac5f-c8d5f705548d","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.162.135:7443","comment":"https://x.com/drb_ra/status/1947005156458934338","timestamp":"1753037177","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"98bba95a-35d6-5ac6-8863-a891b90ae65f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.162.135","comment":"https://x.com/drb_ra/status/1947005156458934338","timestamp":"1753037177","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b223b128-83ed-5669-b267-0c3cf9a9bccd","type":"url","category":"Network activity","to_ids":true,"value":"http://172.236.108.193:443","comment":"https://x.com/drb_ra/status/1947005178273468594","timestamp":"1753037182","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"52b772fc-e0a5-5749-86a6-ba14bd4d313f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.236.108.193","comment":"https://x.com/drb_ra/status/1947005178273468594","timestamp":"1753037182","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"000c0e91-91dc-5eb3-908b-6f177e1b7373","type":"url","category":"Network activity","to_ids":true,"value":"http://43.143.97.240:31337","comment":"https://x.com/drb_ra/status/1947005193750479357","timestamp":"1753037186","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"19025539-68db-533f-976d-44a554b73ab7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.143.97.240","comment":"https://x.com/drb_ra/status/1947005193750479357","timestamp":"1753037186","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"754986c8-eb28-513e-9ff2-c3180efe3fc9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.215.14:31337","comment":"https://x.com/drb_ra/status/1947005215036633122","timestamp":"1753037191","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3eb3060b-8980-5968-86ee-54be243f2784","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.215.14","comment":"https://x.com/drb_ra/status/1947005215036633122","timestamp":"1753037191","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fd31b4f9-9b17-5c9b-8f9d-cd76f3d6d499","type":"url","category":"Network activity","to_ids":true,"value":"http://45.137.99.133:31337","comment":"https://x.com/drb_ra/status/1947005236805083574","timestamp":"1753037196","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a7082ffc-f66f-5291-b4dc-6e5a34fb210c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.137.99.133","comment":"https://x.com/drb_ra/status/1947005236805083574","timestamp":"1753037196","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"667421d9-c1e0-5687-8ec0-734744b2c688","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.73:5432","comment":"https://x.com/drb_ra/status/1947005258401477084","timestamp":"1753037201","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"91333d83-c43c-52ef-b1fb-625c0ad95ec6","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.73:14829","comment":"https://x.com/drb_ra/status/1947005280581042623","timestamp":"1753037207","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f02b8609-06de-56a0-8cbc-a2da3705b661","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.54.42.73","comment":"https://x.com/drb_ra/status/1947005280581042623","timestamp":"1753037207","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"11df3fd4-69ef-58e2-8263-95b64b0c04ef","type":"url","category":"Network activity","to_ids":true,"value":"http://3.67.64.87:41795","comment":"https://x.com/drb_ra/status/1947005797713482196","timestamp":"1753037330","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9469525d-9d56-5ad2-b6aa-5d08576378f9","type":"url","category":"Network activity","to_ids":true,"value":"http://46.183.223.75:6709","comment":"https://x.com/drb_ra/status/1947005819297435929","timestamp":"1753037335","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8654b243-93da-582f-90b6-8a7aed73f593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.183.223.75","comment":"https://x.com/drb_ra/status/1947005819297435929","timestamp":"1753037335","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ef6cbf8d-70af-5be2-bee4-24980329c2f0","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.126.28:82","comment":"https://x.com/drb_ra/status/1947005842819104845","timestamp":"1753037341","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"3202475c-1b9c-5d89-98c0-1759408454aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.126.28","comment":"https://x.com/drb_ra/status/1947005842819104845","timestamp":"1753037341","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"c29a65cc-a975-5d2a-9222-96839588d794","type":"url","category":"Network activity","to_ids":true,"value":"http://31.97.59.58:587","comment":"https://x.com/drb_ra/status/1947005863861924206","timestamp":"1753037346","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"04acc07a-5b10-5285-b9db-1cb1dcf8e47c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.97.59.58","comment":"https://x.com/drb_ra/status/1947005863861924206","timestamp":"1753037346","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e6411059-029e-5895-9693-178e991eb976","type":"url","category":"Network activity","to_ids":true,"value":"http://43.160.252.15:8888","comment":"https://x.com/drb_ra/status/1947005885601005713","timestamp":"1753037351","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"d81b0070-f022-54f9-af22-1ec730c18312","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.252.15","comment":"https://x.com/drb_ra/status/1947005885601005713","timestamp":"1753037351","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"9cbf35b6-babd-5915-90d8-44d6637f3e3c","type":"url","category":"Network activity","to_ids":true,"value":"http://118.161.1.151:443","comment":"https://x.com/drb_ra/status/1947005907025420390","timestamp":"1753037356","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2d2ff837-9aeb-513d-9bfb-ab726491da0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.161.1.151","comment":"https://x.com/drb_ra/status/1947005907025420390","timestamp":"1753037356","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"65b8c77c-b522-58db-bf5c-ac17d7c7f54a","type":"url","category":"Network activity","to_ids":true,"value":"http://80.78.25.217:7443","comment":"https://x.com/drb_ra/status/1947005928596726011","timestamp":"1753037361","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"e743945d-0b07-588f-9b58-928b3526848c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.78.25.217","comment":"https://x.com/drb_ra/status/1947005928596726011","timestamp":"1753037361","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"42c5f616-5187-536d-8ffb-5d9e2dbf28c8","type":"url","category":"Network activity","to_ids":true,"value":"http://93.82.28.127:8000","comment":"https://x.com/drb_ra/status/1947006445913780518","timestamp":"1753037484","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"02d4ac7a-2438-5e13-abdf-dfb2cb8160bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.82.28.127","comment":"https://x.com/drb_ra/status/1947006445913780518","timestamp":"1753037484","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0831e930-936d-5636-8461-8c719431cfd9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.105.6.232:8080","comment":"https://x.com/drb_ra/status/1947006467082441096","timestamp":"1753037490","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"284f602f-a5ff-5ace-8d1c-99240c12e118","type":"domain","category":"Network activity","to_ids":true,"value":"chibutzorjokuy2k.weebly.com","comment":"https://x.com/urldna_bot/status/1947023735887647206","timestamp":"1753041607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"93efa2ca-df78-555f-9af0-e9d4da5965c1","type":"url","category":"Network activity","to_ids":true,"value":"https://chibutzorjokuy2k.weebly.com","comment":"https://x.com/urldna_bot/status/1947023735887647206","timestamp":"1753041607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fb6ca092-6e00-503d-99bf-89671a7f641e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"27c45b8ed7b8a7e5fff473b50c24028bd028a9fe8e25e5cea2bf5e676e531014","comment":"https://x.com/cyb3rops/status/1947032951486574672","timestamp":"1753043804","distribution":"5"},{"uuid":"b8afbfcc-8d12-5c56-99fb-91389a771157","type":"url","category":"Network activity","to_ids":true,"value":"http://93.82.28.127","comment":"https://x.com/threatquery/status/1947038821234708516","timestamp":"1753045203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"640fed26-3d31-5fe0-9f9d-8221a4da58b7","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.83.12","comment":"https://x.com/threatquery/status/1947038825353474198","timestamp":"1753045204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"035f41d5-e4b1-51e2-a7df-c9c14f624750","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.207.83.12","comment":"https://x.com/threatquery/status/1947038825353474198","timestamp":"1753045204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c4c28bc3-4240-5870-9cda-b2245df5d7d7","type":"url","category":"Network activity","to_ids":true,"value":"http://118.161.1.151","comment":"https://x.com/threatquery/status/1947038823692517415","timestamp":"1753045204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ff3f20b3-a8c7-5195-b497-acf435e3253d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"30955794792a7ce045660bb1e1917eef36f1d5865891b8110bf982382b305b27","comment":"https://x.com/cyb3rops/status/1947048283504849137","timestamp":"1753047459","distribution":"5"},{"uuid":"9e5bf101-8ca6-5fc2-afc2-8ddffb316ec0","type":"domain","category":"Network activity","to_ids":true,"value":"postnbgf.weebly.com","comment":"https://x.com/urldna_bot/status/1947053944573731034","timestamp":"1753048809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"caed4fd6-0764-577e-9e8e-42f4fba22a0b","type":"url","category":"Network activity","to_ids":true,"value":"https://postnbgf.weebly.com","comment":"https://x.com/urldna_bot/status/1947053944573731034","timestamp":"1753048809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"078f331e-04c1-57cf-b939-f4c04b31513f","type":"domain","category":"Network activity","to_ids":true,"value":"D0pX.jp","comment":"https://x.com/catnap707/status/1947065391643328965","timestamp":"1753051538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e16abec6-ea56-5a10-bf2c-bfac45958d60","type":"url","category":"Network activity","to_ids":true,"value":"https://D0pX.jp","comment":"https://x.com/catnap707/status/1947065391643328965","timestamp":"1753051538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"629db5b3-593f-5050-afad-d12ba2bc151b","type":"domain","category":"Network activity","to_ids":true,"value":"sineng.icu","comment":"https://x.com/catnap707/status/1947065391643328965","timestamp":"1753051538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9da95dcc-fb12-5254-b97a-3ccee12cde55","type":"url","category":"Network activity","to_ids":true,"value":"http://sineng.icu/verify","comment":"https://x.com/catnap707/status/1947065391643328965","timestamp":"1753051538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1534545e-778e-535b-bf3a-d6c2e6e26ee1","type":"domain","category":"Network activity","to_ids":true,"value":"1vpyoum-t8e6g.gavegmans.workers.dev","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c93fe53c-bb8c-5b4d-900e-75cbb08ff2d9","type":"url","category":"Network activity","to_ids":true,"value":"http://1vpyoum-t8e6g.gavegmans.workers.dev/~","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43d79949-e175-5f31-b817-1cdf88d30b90","type":"domain","category":"Network activity","to_ids":true,"value":"ewxcl2.top","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d108f42e-6352-54e6-b70c-7290488cdc62","type":"url","category":"Network activity","to_ids":true,"value":"http://ewxcl2.top/DjXmH9sime","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a72eefa-48a3-5125-a247-eabdadff9b35","type":"url","category":"Network activity","to_ids":true,"value":"http://47.85.82.194","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3e9ea5d-ac21-5a13-b3ff-ef936b782a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.85.82.194","comment":"https://x.com/catnap707/status/1947070839222125012","timestamp":"1753052837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bd32f44-a196-55b3-8305-e60af13276b7","type":"domain","category":"Network activity","to_ids":true,"value":"2xmh7sx7.top","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4155b8d5-443a-5f61-a1b2-e631eec57682","type":"url","category":"Network activity","to_ids":true,"value":"https://2xmh7sx7.top/W0lBfYXZ/","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2365fa24-cc15-5563-aeb6-04733b01ced3","type":"domain","category":"Network activity","to_ids":true,"value":"8vab6go0.top","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f23399d-a87a-5f1d-b196-0cbe4a43867a","type":"url","category":"Network activity","to_ids":true,"value":"https://8vab6go0.top/W0lBfYXZ/","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d64288c-877b-5b87-a570-7413005671a6","type":"domain","category":"Network activity","to_ids":true,"value":"bgyov3.top","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5fa158f-71a5-5937-ba3d-ba6800b28116","type":"url","category":"Network activity","to_ids":true,"value":"https://bgyov3.top/W0lBfYXZ/","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e9a1cc5-33c5-5fc0-a3c4-08313783cb0d","type":"domain","category":"Network activity","to_ids":true,"value":"jc6vbs.top","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9137ff09-ac53-55f9-b7f3-45133b22e960","type":"url","category":"Network activity","to_ids":true,"value":"https://jc6vbs.top/W0lBfYXZ/","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31ec32d6-fe77-51a3-b7af-7fc1b015400d","type":"domain","category":"Network activity","to_ids":true,"value":"u3d79t.top","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f7ebcba2-8827-57da-9f30-1a710284541e","type":"url","category":"Network activity","to_ids":true,"value":"https://u3d79t.top/W0lBfYXZ/","comment":"https://x.com/masaomi346/status/1947076126507241948","timestamp":"1753054098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2d3ddc7-bb70-5e4f-ad97-784c7e76bf91","type":"domain","category":"Network activity","to_ids":true,"value":"sp401527.sitebeat.crazydomains.com","comment":"https://x.com/urldna_bot/status/1947084150164308216","timestamp":"1753056011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"84dad488-852b-59d4-968a-ccba5e9bfbe1","type":"url","category":"Network activity","to_ids":true,"value":"https://sp401527.sitebeat.crazydomains.com","comment":"https://x.com/urldna_bot/status/1947084150164308216","timestamp":"1753056011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c8f9f6bc-2591-5b9a-aae1-18b75528b3d9","type":"domain","category":"Network activity","to_ids":true,"value":"schoolviewuniversity09876523.weebly.com","comment":"https://x.com/urldna_bot/status/1947114327778930966","timestamp":"1753063206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6303d8f1-88db-577f-bad5-5c6e4e351f3d","type":"url","category":"Network activity","to_ids":true,"value":"https://schoolviewuniversity09876523.weebly.com","comment":"https://x.com/urldna_bot/status/1947114327778930966","timestamp":"1753063206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d43ffce9-7abd-5f38-8225-743ee0c9eada","type":"domain","category":"Network activity","to_ids":true,"value":"ja-logina00.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3e68e399-fb28-5065-9a2a-ba4f846b7d55","type":"domain","category":"Network activity","to_ids":true,"value":"ja-logina01-07.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad00bbda-317b-5dc4-9151-66f9fbb1288a","type":"url","category":"Network activity","to_ids":true,"value":"https://ja-logina01-07.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9364c4c6-86a9-5a9b-930c-3399d07596ee","type":"url","category":"Network activity","to_ids":true,"value":"https://ja-logina00.com","comment":"https://x.com/harugasumi/status/1947126959458451662","timestamp":"1753066217","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d2b6b89-5207-550e-a833-43a9726bfc29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.8.118","comment":"https://x.com/solostalking/status/1947143367336534254","timestamp":"1753070129","distribution":"5"},{"uuid":"846c465d-3b30-5a79-ac6e-1f5f50be5e3d","type":"domain","category":"Network activity","to_ids":true,"value":"btmail121212.weebly.com","comment":"https://x.com/urldna_bot/status/1947144541116485941","timestamp":"1753070409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"15484372-7126-5a0d-9429-73ce4c30f4bc","type":"url","category":"Network activity","to_ids":true,"value":"https://btmail121212.weebly.com","comment":"https://x.com/urldna_bot/status/1947144541116485941","timestamp":"1753070409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ce2cfd45-bc5f-5fcb-930a-411bd6075258","type":"domain","category":"Network activity","to_ids":true,"value":"vrfycntidty.weebly.com","comment":"https://x.com/urldna_bot/status/1947174725697827156","timestamp":"1753077606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fab882c5-3a49-57ad-99a6-1f29f7fe44ee","type":"url","category":"Network activity","to_ids":true,"value":"https://vrfycntidty.weebly.com","comment":"https://x.com/urldna_bot/status/1947174725697827156","timestamp":"1753077606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b8df27a1-9a8d-5d3e-9c10-a30f5b40bb4c","type":"domain","category":"Network activity","to_ids":true,"value":"permwgp.xyz","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1dc6d801-2837-5f90-bcf1-ba5e23e7c11d","type":"url","category":"Network activity","to_ids":true,"value":"http://permwgp.xyz","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"e7e1bf61-be3b-55eb-8774-8e1e0f97d9fb","type":"domain","category":"Network activity","to_ids":true,"value":"cichau.lat","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"d8a5f930-fdc2-5747-8d84-99eb5d67d41b","type":"url","category":"Network activity","to_ids":true,"value":"http://thoqp.lat","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"68abda4e-fd09-5964-90d1-22256cf7d979","type":"domain","category":"Network activity","to_ids":true,"value":"thoqp.lat","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7c87f646-4857-574f-a408-c4ba8245a591","type":"url","category":"Network activity","to_ids":true,"value":"http://cichau.lat","comment":"https://x.com/K_N1kolenko/status/1947182234877759935","timestamp":"1753079396","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"404a37ba-d537-5e6e-a414-1850191fa4aa","type":"domain","category":"Network activity","to_ids":true,"value":"lxdv.in","comment":"https://x.com/suyog41/status/1947184981761273893","timestamp":"1753080051","distribution":"5"},{"uuid":"af91ac4e-6168-5120-bfc4-69493526864c","type":"md5","category":"Payload delivery","to_ids":true,"value":"b9d70afc1b19a61a1557ab88c691c524","comment":"https://x.com/suyog41/status/1947184981761273893","timestamp":"1753080051","distribution":"5"},{"uuid":"df297f06-52fd-55e0-b13a-ebb5a443bc97","type":"url","category":"Network activity","to_ids":true,"value":"http://lxdv.in","comment":"https://x.com/suyog41/status/1947184981761273893","timestamp":"1753080051","distribution":"5"},{"uuid":"7a283c66-859d-5c7b-8228-506fefda90e5","type":"domain","category":"Network activity","to_ids":true,"value":"2.zip","comment":"https://x.com/suyog41/status/1947185560122167745","timestamp":"1753080189","distribution":"5"},{"uuid":"e962df97-a93c-54f2-b931-304f599a2224","type":"url","category":"Network activity","to_ids":true,"value":"http://2.zip","comment":"https://x.com/suyog41/status/1947185560122167745","timestamp":"1753080189","distribution":"5"},{"uuid":"ea96e619-5101-5921-85a7-90ea6dfb6f44","type":"domain","category":"Network activity","to_ids":true,"value":"digitechsoft.shop","comment":"https://x.com/suyog41/status/1947185560122167745","timestamp":"1753080189","distribution":"5"},{"uuid":"c4cf58c0-5a66-5362-a79d-b9616b6515c7","type":"url","category":"Network activity","to_ids":true,"value":"http://digitechsoft.shop","comment":"https://x.com/suyog41/status/1947185560122167745","timestamp":"1753080189","distribution":"5"},{"uuid":"33307051-8461-5eda-9ea3-b5ff5f271761","type":"md5","category":"Payload delivery","to_ids":true,"value":"84b1a223014d30705bcecd3a77067adb","comment":"https://x.com/suyog41/status/1947185560122167745","timestamp":"1753080189","distribution":"5"},{"uuid":"34b9734e-95e5-59ed-896a-58800c5f8034","type":"url","category":"Network activity","to_ids":true,"value":"http://venmo-pay.com","comment":"https://x.com/c9lab_soc/status/1947187136647635240","timestamp":"1753080565","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b34c3f18-8285-55cd-9600-ac018e801575","type":"domain","category":"Network activity","to_ids":true,"value":"venmo-pay.com","comment":"https://x.com/c9lab_soc/status/1947187136647635240","timestamp":"1753080565","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4dcaecf0-a353-5f75-a8ef-03216acd990a","type":"domain","category":"Network activity","to_ids":true,"value":"blot-instagram.com","comment":"https://x.com/c9lab_soc/status/1947187136647635240","timestamp":"1753080565","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"63d8c115-0874-55d1-b86a-90137e3d0c1c","type":"url","category":"Network activity","to_ids":true,"value":"http://blot-instagram.com","comment":"https://x.com/c9lab_soc/status/1947187136647635240","timestamp":"1753080565","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b0eaf891-4a78-513d-be78-0d1e39cccae0","type":"md5","category":"Payload delivery","to_ids":true,"value":"02b4571470d83163d103112f07f1c434","comment":"https://x.com/ShanHolo/status/1947187266968789165","timestamp":"1753080596","distribution":"5"},{"uuid":"34b05d34-6028-58e8-b932-542408a60f94","type":"md5","category":"Payload delivery","to_ids":true,"value":"A29A8D4E687229FA181FDAE43338DA14","comment":"https://x.com/siri_urz/status/1947187414310523194","timestamp":"1753080631","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"0533d58d-27dd-51ab-a2b2-82c99227a916","type":"url","category":"Network activity","to_ids":true,"value":"http://5.252.153.100","comment":"https://x.com/galkofahi/status/1947197288842924221","timestamp":"1753082985","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5036376a-b166-56d5-81a3-b5fa3a7543a2","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/ZolManStaff/BOFAMET_STEALER","comment":"https://x.com/suyog41/status/1947203084700295478","timestamp":"1753084367","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"93699bc3-2cc8-5a42-b372-60db282b4324","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.155.150","comment":"https://x.com/suyog41/status/1947203084700295478","timestamp":"1753084367","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"28938733-3116-55cd-8d1b-fb0b14cad9e0","type":"md5","category":"Payload delivery","to_ids":true,"value":"34b63bbc89b1841b864d8f783068294b","comment":"https://x.com/suyog41/status/1947203084700295478","timestamp":"1753084367","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"158803a6-8340-569d-ae16-33a59a55685a","type":"url","category":"Network activity","to_ids":true,"value":"https://edminaretviceduau.weebly.com","comment":"https://x.com/urldna_bot/status/1947204925915627776","timestamp":"1753084806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"faa44001-4a4c-5c16-ab13-50bc3c640ae6","type":"domain","category":"Network activity","to_ids":true,"value":"edminaretviceduau.weebly.com","comment":"https://x.com/urldna_bot/status/1947204925915627776","timestamp":"1753084806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ff3f20b3-a8c7-5195-b497-acf435e3253d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"30955794792a7ce045660bb1e1917eef36f1d5865891b8110bf982382b305b27","comment":"https://x.com/skocherhan/status/1947209938339549604","timestamp":"1753086001","distribution":"5"},{"uuid":"80dfabde-8548-5e6c-9222-a50108ec16f9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9f73e39ca5afd64bb1bd3ed2da84c1fec67143af23ab59fe9d66387fc61b1395","comment":"https://x.com/skocherhan/status/1947210903297896756","timestamp":"1753086231","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"}]},{"uuid":"9b08cfa3-c224-5bf7-85ce-12d8186f3b38","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ccb6ca4cb385db50dad2e3b7c68a90ddee62398edb0fd41afdb793287cfbe8e6","comment":"https://x.com/ShadowChasing1/status/1947210955282407847","timestamp":"1753086243","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"f3ddc5d5-61db-50b7-aa4e-6b033313c9f7","type":"url","category":"Network activity","to_ids":true,"value":"https://smbintuaviperacjp.top/s1VuSF","comment":"https://x.com/harugasumi/status/1947218984434315369","timestamp":"1753088158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"782cf1d1-9285-57de-98fa-eb45d334a296","type":"domain","category":"Network activity","to_ids":true,"value":"smbintuaviperacjp.top","comment":"https://x.com/harugasumi/status/1947218984434315369","timestamp":"1753088158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53cb6993-6284-5d6e-bb1f-68f26a1ac8b3","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c41d7b6b2b785e7b03fa3547693caa2","comment":"https://x.com/skocherhan/status/1947227665208860979","timestamp":"1753090227","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"2183bfec-84dd-5ed0-92b9-d85c4e4064b0","type":"domain","category":"Network activity","to_ids":true,"value":"universidadedelisboa.weebly.com","comment":"https://x.com/urldna_bot/status/1947235127085486401","timestamp":"1753092006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"29513eca-9710-59a4-8d6a-4b45cdd9dacf","type":"url","category":"Network activity","to_ids":true,"value":"https://universidadedelisboa.weebly.com","comment":"https://x.com/urldna_bot/status/1947235127085486401","timestamp":"1753092006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0ed172c2-bfe3-5e3b-9d97-0f47ca8a235d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.217.209.205","comment":"https://x.com/Fact_Finder03/status/1947249133514874935","timestamp":"1753095346","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"b747e70b-c284-56be-bc31-a0525899ea97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.244.50.145","comment":"https://x.com/Fact_Finder03/status/1947249133514874935","timestamp":"1753095346","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"309e76b0-a43a-5e90-ab53-6081a2714649","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.144.189.8","comment":"https://x.com/Fact_Finder03/status/1947249133514874935","timestamp":"1753095346","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"0c6f197f-cd7c-5743-9cd9-bb9ff70f8fa2","type":"url","category":"Network activity","to_ids":true,"value":"http://www.testupdate.info/updates/ya/wrtzr_ytab_a_1/win/update_e.jpg","comment":"https://x.com/skocherhan/status/1947258136806494685","timestamp":"1753097492","distribution":"5"},{"uuid":"10c318a8-3596-56be-9196-cfbeb1d5431f","type":"md5","category":"Payload delivery","to_ids":true,"value":"42f563749f253d5bb4cac66609cb5f82","comment":"https://x.com/skocherhan/status/1947258136806494685","timestamp":"1753097492","distribution":"5"},{"uuid":"a6d8cf69-189f-5171-8e10-de844f9992d1","type":"domain","category":"Network activity","to_ids":true,"value":"testupdate.info","comment":"https://x.com/skocherhan/status/1947258136806494685","timestamp":"1753097492","distribution":"5"},{"uuid":"851e1fca-8d46-53a9-bfc0-1ac246bb6b76","type":"domain","category":"Network activity","to_ids":true,"value":"egypptair.weebly.com","comment":"https://x.com/urldna_bot/status/1947265321817014402","timestamp":"1753099205","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"395affcf-83ef-5c84-b758-804d276278ac","type":"url","category":"Network activity","to_ids":true,"value":"https://egypptair.weebly.com","comment":"https://x.com/urldna_bot/status/1947265321817014402","timestamp":"1753099205","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0b8b636e-26e6-50ac-91f4-9e8f89fdd255","type":"url","category":"Network activity","to_ids":true,"value":"https://secondtrend.com.au/pzz/Sites/index.html","comment":"https://x.com/masaomi346/status/1947265439484072114","timestamp":"1753099233","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7afdd0c8-2666-53fd-ae8a-c1aca511864e","type":"domain","category":"Network activity","to_ids":true,"value":"secondtrend.com.au","comment":"https://x.com/masaomi346/status/1947265439484072114","timestamp":"1753099233","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13ce19c0-1ac3-58ac-928f-b1e0320276e0","type":"url","category":"Network activity","to_ids":true,"value":"https://secondtrend.com.au/ppp/Sites/index.html","comment":"https://x.com/masaomi346/status/1947265439484072114","timestamp":"1753099233","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ea32404-2313-5da5-8505-4ed98448b145","type":"url","category":"Network activity","to_ids":true,"value":"http://148.72.159.0","comment":"https://x.com/1LupeLaaw/status/1947275370819948643","timestamp":"1753101601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80b807d3-f80f-5037-be2a-aa69c1e9c1b7","type":"url","category":"Network activity","to_ids":true,"value":"http://heartrecruit76unitz.in","comment":"https://x.com/1LupeLaaw/status/1947275370819948643","timestamp":"1753101601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"798d2281-db5b-57db-987e-dc94d70ea9fc","type":"url","category":"Network activity","to_ids":true,"value":"https://148.72.159.0","comment":"https://x.com/1LupeLaaw/status/1947275370819948643","timestamp":"1753101601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89bbb4c9-1099-5fcd-9043-6a81fbaae39d","type":"domain","category":"Network activity","to_ids":true,"value":"heartrecruit76unitz.in","comment":"https://x.com/1LupeLaaw/status/1947275370819948643","timestamp":"1753101601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"867c38f5-af48-5a9a-8527-6e69b894a281","type":"sha256","category":"Payload delivery","to_ids":true,"value":"716a87bcb87a4180d00904072a2c6e8c0e495b66cad88d5002f57b93ac214235","comment":"https://x.com/skocherhan/status/1947277072541286711","timestamp":"1753102007","distribution":"5"},{"uuid":"fb6ca092-6e00-503d-99bf-89671a7f641e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"27c45b8ed7b8a7e5fff473b50c24028bd028a9fe8e25e5cea2bf5e676e531014","comment":"https://x.com/skocherhan/status/1947277144960250031","timestamp":"1753102024","distribution":"5"},{"uuid":"10d66c7a-d3a1-5503-afe8-10f1434a1ba3","type":"url","category":"Network activity","to_ids":true,"value":"http://getcredentialingdone.com","comment":"https://x.com/skocherhan/status/1947282841487688071","timestamp":"1753103382","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"364c4e5b-086f-5507-8e25-cda3eb06a25b","type":"domain","category":"Network activity","to_ids":true,"value":"getcredentialingdone.com","comment":"https://x.com/skocherhan/status/1947282841487688071","timestamp":"1753103382","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"6bcad2af-01f4-5951-80dc-741f782d7f85","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.97","comment":"https://x.com/skocherhan/status/1947282841487688071","timestamp":"1753103382","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"419ac85a-43d6-5d3d-8776-09727c35d790","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.97","comment":"https://x.com/skocherhan/status/1947282841487688071","timestamp":"1753103382","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"b63d15b5-50c8-5d3b-ac0f-c1f6a1938bcc","type":"url","category":"Network activity","to_ids":true,"value":"http://5.181.157.34","comment":"https://x.com/skocherhan/status/1947285813542187148","timestamp":"1753104091","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"86c0cf80-1193-5d2c-9fb8-d4ad89b1dd2f","type":"md5","category":"Payload delivery","to_ids":true,"value":"d8808209574a15e245929fcd33de8037","comment":"https://x.com/Fact_Finder03/status/1947286904891637889","timestamp":"1753104351","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f430aec6-35c1-52b4-9f64-a679a1056c51","type":"domain","category":"Network activity","to_ids":true,"value":"yoshimotoko.com","comment":"https://x.com/harugasumi/status/1947288090285899825","timestamp":"1753104634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7915d0c0-f56e-5ded-bacc-628354d7e821","type":"url","category":"Network activity","to_ids":true,"value":"https://www.yoshimotoko.com","comment":"https://x.com/harugasumi/status/1947288090285899825","timestamp":"1753104634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c888be9-e264-5fae-a32e-2c273faed7df","type":"domain","category":"Network activity","to_ids":true,"value":"defence-nic.3utilities.com","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2658d892-82d1-5115-abc9-a9919297301a","type":"domain","category":"Network activity","to_ids":true,"value":"modgovin.onthewifi.com:11520","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8f632ecd-a4bb-5b7b-8fb3-9e105457c12f","type":"url","category":"Network activity","to_ids":true,"value":"http://modgovin.onthewifi.com:11520","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ed8c0b83-dbf2-53ca-9b94-1c6effad14a1","type":"url","category":"Network activity","to_ids":true,"value":"http://101.99.92.182:9080","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8b86c8af-a122-538b-88f7-b2628e304915","type":"url","category":"Network activity","to_ids":true,"value":"http://defence-nic.3utilities.com","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7a3960ca-6959-535d-82b9-1c770af73527","type":"domain","category":"Network activity","to_ids":true,"value":"drdo-mss.serveirc.com","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"164f12a9-0d1e-5c17-b947-dea799ce77f6","type":"url","category":"Network activity","to_ids":true,"value":"http://drdo-mss.serveirc.com","comment":"https://x.com/skocherhan/status/1947288686816645371","timestamp":"1753104776","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"486e85a2-7ace-58ca-bb0f-aca4b2066b39","type":"md5","category":"Payload delivery","to_ids":true,"value":"18cf1e3be0e95be666c11d1dbde4588e","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1cd0dbaa-9928-55a9-a3e8-f55d735b9edd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.59.44","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cbf9c533-9a47-5e06-9685-8a0b4d0d6ca5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.99.92.182","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e5bdc397-087a-59eb-a8e5-58da0b38ddb4","type":"md5","category":"Payload delivery","to_ids":true,"value":"12c7e30db0c3eb636d11702baf254c0a","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8f13017f-08cb-5522-9f73-52c3d43a9d00","type":"md5","category":"Payload delivery","to_ids":true,"value":"652febb171684b0d0a9cfe4c1e8598d7","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e3b9fdd9-8860-580e-86d4-c693189837f7","type":"md5","category":"Payload delivery","to_ids":true,"value":"33e1da22fb1068c73c033e3bc6bd3f1e","comment":"https://x.com/skocherhan/status/1947288694299267223","timestamp":"1753104778","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"25170b2e-fcb2-5c3e-bbd4-7accd21a29d3","type":"domain","category":"Network activity","to_ids":true,"value":"sjp-e8c-38bf-40b2-baa5-97b297fa7d33.weebly.com","comment":"https://x.com/urldna_bot/status/1947295535397732366","timestamp":"1753106409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0f5b61de-99ae-56ce-b1ba-fc6c32735481","type":"url","category":"Network activity","to_ids":true,"value":"https://sjp-e8c-38bf-40b2-baa5-97b297fa7d33.weebly.com","comment":"https://x.com/urldna_bot/status/1947295535397732366","timestamp":"1753106409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b8dcab38-3557-5e53-85b4-1ba52ecfa5fd","type":"url","category":"Network activity","to_ids":true,"value":"https://111.230.161.5/hrmregister/corpTrial/get_permission","comment":"https://x.com/drb_ra/status/1947317991827231011","timestamp":"1753111763","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3083cc02-134f-5129-a022-f2a86e93ae8b","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.236.125:8080","comment":"https://x.com/drb_ra/status/1947317991827231011","timestamp":"1753111763","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db8cd625-d882-5342-82d1-3cecf00bbdbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.236.125","comment":"https://x.com/drb_ra/status/1947317991827231011","timestamp":"1753111763","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3575e0b0-1271-56a9-85ce-2bf84d3d6556","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.230.161.5","comment":"https://x.com/drb_ra/status/1947317991827231011","timestamp":"1753111763","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3f11d4f3-9386-57c8-ad82-7439abbe4688","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.84.248","comment":"https://x.com/drb_ra/status/1947318015386693834","timestamp":"1753111768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3f332511-6f36-5d85-abb8-7901bed6e7cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.194.154.53","comment":"https://x.com/drb_ra/status/1947318015386693834","timestamp":"1753111768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1037488a-05a5-50b7-98b2-86cf07dc8307","type":"url","category":"Network activity","to_ids":true,"value":"https://193.112.84.248/hrmregister/corpTrial/get_permission","comment":"https://x.com/drb_ra/status/1947318015386693834","timestamp":"1753111768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"15b06a6e-419e-595d-aa05-18b21aa40928","type":"url","category":"Network activity","to_ids":true,"value":"http://42.194.154.53:443","comment":"https://x.com/drb_ra/status/1947318015386693834","timestamp":"1753111768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"98be02ee-080a-58b3-8a84-e858aad843e5","type":"url","category":"Network activity","to_ids":true,"value":"http://124.223.79.218:18443","comment":"https://x.com/drb_ra/status/1947318036291109164","timestamp":"1753111773","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c849ffbf-1aad-5885-ac8b-947bfeff9b4a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.223.79.218","comment":"https://x.com/drb_ra/status/1947318036291109164","timestamp":"1753111773","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"62d5a334-f9be-57a6-a034-ad75026829f6","type":"url","category":"Network activity","to_ids":true,"value":"https://47.117.179.86/activity","comment":"https://x.com/drb_ra/status/1947318052766290210","timestamp":"1753111777","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bce8ab75-fdf8-51a4-8a86-ba5ff003d366","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.179.86:80","comment":"https://x.com/drb_ra/status/1947318052766290210","timestamp":"1753111777","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fb124797-7c73-5be5-a17d-7fae3b97b941","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.179.86","comment":"https://x.com/drb_ra/status/1947318052766290210","timestamp":"1753111777","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"158aab85-22be-5efc-994f-744584956226","type":"url","category":"Network activity","to_ids":true,"value":"http://39.104.81.39:443","comment":"https://x.com/drb_ra/status/1947318078628311409","timestamp":"1753111784","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9875fd11-7254-5ebd-97ad-02b122671f07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.104.81.39","comment":"https://x.com/drb_ra/status/1947318078628311409","timestamp":"1753111784","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"794bb605-7015-5d96-a430-c56099fb171d","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.74.144:7443","comment":"https://x.com/drb_ra/status/1947318100908536015","timestamp":"1753111789","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d33724c3-468e-54c7-96a3-06e8e4094af6","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.17.8:8888","comment":"https://x.com/drb_ra/status/1947318121951375807","timestamp":"1753111794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9deb78cc-cc06-5cd9-ad01-46b6bade8c6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.17.8","comment":"https://x.com/drb_ra/status/1947318121951375807","timestamp":"1753111794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b4b6bea1-4730-5549-8401-b5eaf64f7005","type":"url","category":"Network activity","to_ids":true,"value":"http://42.51.34.56:8009","comment":"https://x.com/drb_ra/status/1947318143036150014","timestamp":"1753111799","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a4922f3a-c039-5150-a51b-795629fa8ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.51.34.56","comment":"https://x.com/drb_ra/status/1947318143036150014","timestamp":"1753111799","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9b3bdbec-9726-5dbe-a76f-3023bda99040","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.137.60:8457","comment":"https://x.com/drb_ra/status/1947318164699680804","timestamp":"1753111804","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a16fcab5-0f7b-5d51-a0ef-5cfe1636d5ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.137.60","comment":"https://x.com/drb_ra/status/1947318164699680804","timestamp":"1753111804","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ed3578c-b620-5dd8-90b6-032f7329f404","type":"url","category":"Network activity","to_ids":true,"value":"http://141.164.49.253:443","comment":"https://x.com/drb_ra/status/1947318186233213156","timestamp":"1753111809","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5a5d12da-6b7b-50be-9731-39a8b445fc6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.164.49.253","comment":"https://x.com/drb_ra/status/1947318186233213156","timestamp":"1753111809","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"75594558-d2fa-59da-8eba-00e61573719d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.254","comment":"https://x.com/drb_ra/status/1947318202041516431","timestamp":"1753111813","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f5753b4d-aa6b-5d0b-914f-88aed4df2c4b","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.254:99","comment":"https://x.com/drb_ra/status/1947318202041516431","timestamp":"1753111813","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"dbf615bb-8ae8-591f-826d-f0df3bc99227","type":"url","category":"Network activity","to_ids":true,"value":"http://185.8.104.8:2404","comment":"https://x.com/drb_ra/status/1947318222413324348","timestamp":"1753111818","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"2648f1ce-538d-5938-a2f8-4c0e275f315c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.8.104.8","comment":"https://x.com/drb_ra/status/1947318222413324348","timestamp":"1753111818","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e5d93d32-aad1-57d5-8e30-ba7687955134","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.83.12:1224","comment":"https://x.com/drb_ra/status/1947318243145777324","timestamp":"1753111823","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"035f41d5-e4b1-51e2-a7df-c9c14f624750","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.207.83.12","comment":"https://x.com/drb_ra/status/1947318243145777324","timestamp":"1753111823","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"299c0175-9c62-5625-b951-3894019a3cfd","type":"url","category":"Network activity","to_ids":true,"value":"http://43.199.163.222:18245","comment":"https://x.com/drb_ra/status/1947318263362228409","timestamp":"1753111828","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"39e05c90-79c3-547a-812b-d821ad751879","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.199.163.222","comment":"https://x.com/drb_ra/status/1947318263362228409","timestamp":"1753111828","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"85e815d2-7769-5c53-9d97-a4a5d9d0dacf","type":"url","category":"Network activity","to_ids":true,"value":"http://15.185.176.62:6009","comment":"https://x.com/drb_ra/status/1947318284581327257","timestamp":"1753111833","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"36020a8a-df28-5fc5-b0f7-2b861b44c474","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.185.176.62","comment":"https://x.com/drb_ra/status/1947318284581327257","timestamp":"1753111833","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0d45c5e5-6629-517d-8738-1da65d0816e5","type":"url","category":"Network activity","to_ids":true,"value":"http://46.4.162.13:443","comment":"https://x.com/drb_ra/status/1947318305376641120","timestamp":"1753111838","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"04c1629a-ee0f-570d-b76f-9fd908b65245","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.4.162.13","comment":"https://x.com/drb_ra/status/1947318305376641120","timestamp":"1753111838","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b711eeca-9558-5f22-879d-67bcc04de523","type":"url","category":"Network activity","to_ids":true,"value":"http://186.190.211.108:8808","comment":"https://x.com/drb_ra/status/1947318325895213373","timestamp":"1753111842","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"50fb3bbd-404f-5a46-a855-205916ba50eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.190.211.108","comment":"https://x.com/drb_ra/status/1947318325895213373","timestamp":"1753111842","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ee7a1f67-22d8-5e1f-8ec8-edac154db32c","type":"url","category":"Network activity","to_ids":true,"value":"http://38.102.87.235:465","comment":"https://x.com/drb_ra/status/1947318346254372934","timestamp":"1753111847","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f59a9512-2696-50a6-8c3c-b2d3c4cdcd9f","type":"url","category":"Network activity","to_ids":true,"value":"http://38.102.87.235:80","comment":"https://x.com/drb_ra/status/1947318366659650040","timestamp":"1753111852","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7d0e9eeb-4ef8-573c-b37d-3031d79945e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.102.87.235","comment":"https://x.com/drb_ra/status/1947318366659650040","timestamp":"1753111852","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d0f01e17-03bb-58f2-be0a-3d7be30410ad","type":"url","category":"Network activity","to_ids":true,"value":"http://45.145.228.142:8888","comment":"https://x.com/drb_ra/status/1947318388553826680","timestamp":"1753111857","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"04f18651-6fcc-5450-b42c-e202efd04f98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.145.228.142","comment":"https://x.com/drb_ra/status/1947318388553826680","timestamp":"1753111857","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"5d4b52a2-64ad-5644-a128-9abb80a1e770","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.157.204:8888","comment":"https://x.com/drb_ra/status/1947318410611757499","timestamp":"1753111863","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7b5555ab-4f90-56c9-8a35-65b7e6c74869","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.157.204","comment":"https://x.com/drb_ra/status/1947318410611757499","timestamp":"1753111863","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"f7959a99-71a9-5301-9cba-3e51ce07c5fe","type":"url","category":"Network activity","to_ids":true,"value":"http://35.181.43.130:443","comment":"https://x.com/drb_ra/status/1947318431268602154","timestamp":"1753111868","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6d9fa87b-0c90-568a-91a6-c54192c8478b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.181.43.130","comment":"https://x.com/drb_ra/status/1947318431268602154","timestamp":"1753111868","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b53366f6-0319-5dd8-a82c-5c52058e110f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.91.201.244:443","comment":"https://x.com/drb_ra/status/1947318451137024357","timestamp":"1753111872","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7d916535-27a8-5afc-bcf6-a4984235c0b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.91.201.244","comment":"https://x.com/drb_ra/status/1947318451137024357","timestamp":"1753111872","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"0a6c7334-b03e-5efa-9b5d-f7f522c1dd0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.6.26.222","comment":"https://x.com/drb_ra/status/1947318471617888442","timestamp":"1753111877","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"96cd3efc-b019-52b2-ba4e-c76701cbacb0","type":"url","category":"Network activity","to_ids":true,"value":"http://76.6.26.222:8080","comment":"https://x.com/drb_ra/status/1947318471617888442","timestamp":"1753111877","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"9ab6a393-ed24-5adc-93c6-1c94b587a52a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.61.193.219:7443","comment":"https://x.com/drb_ra/status/1947318494552363205","timestamp":"1753111883","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"519a42ef-7d59-5438-b6b1-8f3da6ea0011","type":"url","category":"Network activity","to_ids":true,"value":"http://140.84.160.190:7443","comment":"https://x.com/drb_ra/status/1947318515536441596","timestamp":"1753111888","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f424485c-964b-541b-9b8c-9b617fc3cd6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.84.160.190","comment":"https://x.com/drb_ra/status/1947318515536441596","timestamp":"1753111888","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bdf3cb4c-06b5-5beb-8dcc-c23b112e3e5d","type":"url","category":"Network activity","to_ids":true,"value":"http://64.176.61.71:31337","comment":"https://x.com/drb_ra/status/1947318536667316242","timestamp":"1753111893","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"807abfff-12bf-5dcb-b0f6-09fea4c1b9c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.176.61.71","comment":"https://x.com/drb_ra/status/1947318536667316242","timestamp":"1753111893","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9b5d69b0-7643-52bb-a374-402b35e503d0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.155.6.13:443","comment":"https://x.com/drb_ra/status/1947318557609443616","timestamp":"1753111898","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"82d5fa6b-76bd-5c5f-a2be-6ecd8093e292","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.155.6.13","comment":"https://x.com/drb_ra/status/1947318557609443616","timestamp":"1753111898","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a337ddf5-8d2d-5d53-9e80-ea583401a116","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.61.75","comment":"https://x.com/drb_ra/status/1947318579570909617","timestamp":"1753111903","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a81011b-1710-55e0-bbd5-a909648b9eab","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.61.75:443","comment":"https://x.com/drb_ra/status/1947318579570909617","timestamp":"1753111903","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b0709c1e-55b2-5af6-a152-2e7c004b741c","type":"domain","category":"Network activity","to_ids":true,"value":"tianqi.com","comment":"https://x.com/drb_ra/status/1947318579570909617","timestamp":"1753111903","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d669840d-cfb3-5725-b9b1-b91aac922fb9","type":"url","category":"Network activity","to_ids":true,"value":"https://www.tianqi.com/s/58462514417","comment":"https://x.com/drb_ra/status/1947318579570909617","timestamp":"1753111903","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8b07722b-4f27-5b2a-8bf8-421bae059f91","type":"url","category":"Network activity","to_ids":true,"value":"http://175.178.104.252:80","comment":"https://x.com/drb_ra/status/1947318601033113608","timestamp":"1753111908","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2fe0fa56-9e68-5915-9d7e-3d849d117cd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.178.104.252","comment":"https://x.com/drb_ra/status/1947318601033113608","timestamp":"1753111908","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3892cb5e-4cd4-53e9-9536-439242954257","type":"url","category":"Network activity","to_ids":true,"value":"http://106.12.215.229:8099","comment":"https://x.com/drb_ra/status/1947318622344372460","timestamp":"1753111913","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ec12889-29ab-5898-9472-05794ed9c92e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.12.215.229","comment":"https://x.com/drb_ra/status/1947318622344372460","timestamp":"1753111913","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fdc48962-7082-5094-9d45-cf9a58c37c18","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.74.144:8443","comment":"https://x.com/drb_ra/status/1947318644507021792","timestamp":"1753111918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c8596487-c9c0-5321-a174-cd71bdf5c2f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.74.144","comment":"https://x.com/drb_ra/status/1947318644507021792","timestamp":"1753111918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f8ef1071-6be9-525f-84b2-507b922f5325","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.45.11.145","comment":"https://x.com/drb_ra/status/1947318665910567207","timestamp":"1753111924","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1568bda7-6828-5a71-b9b2-d8100f1d6f49","type":"url","category":"Network activity","to_ids":true,"value":"http://119.45.11.145:443","comment":"https://x.com/drb_ra/status/1947318665910567207","timestamp":"1753111924","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a881d226-97be-5c79-8178-4760ace96cc3","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.179.59:443","comment":"https://x.com/drb_ra/status/1947318686873776585","timestamp":"1753111929","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"841bf1d9-eda1-5961-9e82-9af8d05bca45","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.179.59","comment":"https://x.com/drb_ra/status/1947318686873776585","timestamp":"1753111929","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"48b5d5a1-d768-5f42-8681-5344cd3b3408","type":"url","category":"Network activity","to_ids":true,"value":"https://1.13.187.97/cm","comment":"https://x.com/drb_ra/status/1947318707828424753","timestamp":"1753111934","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7e18a422-4bf6-539e-a8a5-5d3c124a7a5f","type":"url","category":"Network activity","to_ids":true,"value":"http://1.13.187.97:4433","comment":"https://x.com/drb_ra/status/1947318707828424753","timestamp":"1753111934","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17760a68-47b4-5983-bdf0-a0e859c0ebab","type":"domain","category":"Network activity","to_ids":true,"value":"jkdds.weebly.com","comment":"https://x.com/urldna_bot/status/1947325736823451731","timestamp":"1753113609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3dc21bc1-7461-5b38-9859-c53a14ce6ef9","type":"url","category":"Network activity","to_ids":true,"value":"https://jkdds.weebly.com","comment":"https://x.com/urldna_bot/status/1947325736823451731","timestamp":"1753113609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"02d4ac7a-2438-5e13-abdf-dfb2cb8160bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.82.28.127","comment":"https://x.com/skocherhan/status/1947326819264540929","timestamp":"1753113867","distribution":"5"},{"uuid":"b8afbfcc-8d12-5c56-99fb-91389a771157","type":"url","category":"Network activity","to_ids":true,"value":"http://93.82.28.127","comment":"https://x.com/skocherhan/status/1947326819264540929","timestamp":"1753113867","distribution":"5"},{"uuid":"640fed26-3d31-5fe0-9f9d-8221a4da58b7","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.83.12","comment":"https://x.com/skocherhan/status/1947338646169747621","timestamp":"1753116687","distribution":"5"},{"uuid":"f4e58dc5-7530-5b58-8951-868967bb9bc0","type":"domain","category":"Network activity","to_ids":true,"value":"unpac.me","comment":"https://x.com/skocherhan/status/1947338926227599456","timestamp":"1753116754","distribution":"5"},{"uuid":"6a51c1b6-8af0-55f8-9097-8b3552ad65c4","type":"url","category":"Network activity","to_ids":true,"value":"https://www.unpac.me/results/04024e2b-afc8-43cf-bdfa-0abf709f48da","comment":"https://x.com/skocherhan/status/1947338926227599456","timestamp":"1753116754","distribution":"5"},{"uuid":"60523d06-ceeb-5d9c-9410-386c17997ddb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"12.101.0.45","comment":"https://x.com/skocherhan/status/1947339496879513898","timestamp":"1753116890","distribution":"5"},{"uuid":"8c3892c7-8ca7-53fa-b1bf-dda7c927dda4","type":"url","category":"Network activity","to_ids":true,"value":"http://39.40.146.191:995","comment":"https://x.com/drb_ra/status/1947367785438335114","timestamp":"1753123635","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"76786d85-a114-5c41-a9cc-a23887b7ad03","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.40.146.191","comment":"https://x.com/drb_ra/status/1947367785438335114","timestamp":"1753123635","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"dea1da46-4db4-574b-b400-0ae1d5eeb8d3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.233.49:445","comment":"https://x.com/drb_ra/status/1947367806250451309","timestamp":"1753123640","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8fe8fbec-ba07-5eff-abec-e60722df5aa4","type":"url","category":"Network activity","to_ids":true,"value":"http://5.166.42.9:443","comment":"https://x.com/drb_ra/status/1947367825695289843","timestamp":"1753123644","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ad6fd24e-5874-5e77-8edb-b92f19418ca8","type":"url","category":"Network activity","to_ids":true,"value":"http://216.238.83.34:8081","comment":"https://x.com/drb_ra/status/1947367846155071894","timestamp":"1753123649","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"2f32f12a-cd02-537a-8536-653c6364cc1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.238.83.34","comment":"https://x.com/drb_ra/status/1947367846155071894","timestamp":"1753123649","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"d986cb26-af77-59de-910d-4ae894ab11b5","type":"url","category":"Network activity","to_ids":true,"value":"http://3.221.146.143:443","comment":"https://x.com/drb_ra/status/1947367864043762034","timestamp":"1753123653","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7d75d774-d0ca-5c82-ab5e-e3438544a6a9","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.6.48:443","comment":"https://x.com/drb_ra/status/1947367891130573258","timestamp":"1753123660","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4adac288-774d-5b8c-b219-9dc47f7082c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.223.6.48","comment":"https://x.com/drb_ra/status/1947367891130573258","timestamp":"1753123660","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"cbb13d89-2fd0-5382-a047-36bd144b2032","type":"url","category":"Network activity","to_ids":true,"value":"http://194.58.68.191:443","comment":"https://x.com/drb_ra/status/1947367911305117980","timestamp":"1753123665","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"1ac593b0-e433-5297-ab04-8f435515ebe8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.58.68.191","comment":"https://x.com/drb_ra/status/1947367911305117980","timestamp":"1753123665","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3773a790-3d80-514f-b5f9-2f6dfda2dc36","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.2.163:31337","comment":"https://x.com/drb_ra/status/1947367930053710242","timestamp":"1753123669","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b5d47bf6-e079-57f5-a586-100b67c31724","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.2.163","comment":"https://x.com/drb_ra/status/1947367930053710242","timestamp":"1753123669","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8de5c241-34f7-5213-847d-d46939d04afb","type":"url","category":"Network activity","to_ids":true,"value":"http://18.188.97.119:443","comment":"https://x.com/drb_ra/status/1947367945589477470","timestamp":"1753123673","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"62aa6225-c0b7-5dd3-990e-83f5d853b1d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.188.97.119","comment":"https://x.com/drb_ra/status/1947367945589477470","timestamp":"1753123673","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"47b07547-ded1-527e-ab98-72c0cc487e2a","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.215.2:5577","comment":"https://x.com/drb_ra/status/1947368469281771963","timestamp":"1753123798","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d59bffca-2d96-5087-aade-72eaee1ad293","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.215.2","comment":"https://x.com/drb_ra/status/1947368469281771963","timestamp":"1753123798","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"52934c11-d83c-5798-bac6-d7da630f53d1","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.245:2404","comment":"https://x.com/drb_ra/status/1947368490509156462","timestamp":"1753123803","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"bc4019e6-5707-5c0c-b283-ea49b9a09ec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.245","comment":"https://x.com/drb_ra/status/1947368490509156462","timestamp":"1753123803","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6b3b2483-e1d9-5f90-95fc-66abc6f974f3","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.39:2404","comment":"https://x.com/drb_ra/status/1947368510239182998","timestamp":"1753123807","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c09b83ed-aa6d-5a02-9142-ab176742254e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.39","comment":"https://x.com/drb_ra/status/1947368510239182998","timestamp":"1753123807","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9b377da2-b4ef-52ab-84ec-1cea16bf6e09","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.175.45:4900","comment":"https://x.com/drb_ra/status/1947368530376069449","timestamp":"1753123812","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0f111200-8312-5527-a626-2d69b707aeaf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.23.175.45","comment":"https://x.com/drb_ra/status/1947368530376069449","timestamp":"1753123812","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e9ac68d7-9a89-5e23-bb1f-afcc2cd0fe66","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.16.91:1024","comment":"https://x.com/drb_ra/status/1947368551376937034","timestamp":"1753123817","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"aea5d37e-2c10-5aa1-8425-04ccd9bb6af4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.16.91","comment":"https://x.com/drb_ra/status/1947368551376937034","timestamp":"1753123817","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2cd6dcbc-2966-5c2a-8d51-cee92ab5073f","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.86.186:37848","comment":"https://x.com/drb_ra/status/1947368572369383528","timestamp":"1753123822","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"166e49dd-7534-53ab-afce-a4ec057accfb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.86.186","comment":"https://x.com/drb_ra/status/1947368572369383528","timestamp":"1753123822","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5fcda429-59d4-529e-892a-5a65a801c2c5","type":"url","category":"Network activity","to_ids":true,"value":"http://51.44.83.45:39320","comment":"https://x.com/drb_ra/status/1947368593663946813","timestamp":"1753123827","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ec7ecfac-d226-5e56-8d20-1575aa60b335","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.44.83.45","comment":"https://x.com/drb_ra/status/1947368593663946813","timestamp":"1753123827","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"460c38a1-5a58-584c-bc94-550b46cd552c","type":"url","category":"Network activity","to_ids":true,"value":"http://182.52.120.78:7443","comment":"https://x.com/drb_ra/status/1947368615415529722","timestamp":"1753123832","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"07e569f1-648d-5a34-90b1-dcc4e86e10c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.52.120.78","comment":"https://x.com/drb_ra/status/1947368615415529722","timestamp":"1753123832","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8606f34c-6569-57f0-a925-110e52a34ccf","type":"url","category":"Network activity","to_ids":true,"value":"http://93.232.100.194:82","comment":"https://x.com/drb_ra/status/1947368637578268794","timestamp":"1753123838","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c7844c60-e10f-50af-83b8-d6f0fc73e34c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.232.100.194","comment":"https://x.com/drb_ra/status/1947368637578268794","timestamp":"1753123838","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"46667d8c-f18e-5074-8e20-c76dfda42260","type":"url","category":"Network activity","to_ids":true,"value":"http://185.73.114.229:443","comment":"https://x.com/drb_ra/status/1947368658763751895","timestamp":"1753123843","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"48930be7-f945-548a-98a3-46e7e74aff4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.73.114.229","comment":"https://x.com/drb_ra/status/1947368658763751895","timestamp":"1753123843","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ddd78ed3-1301-5ebe-b568-63b0f685c5f6","type":"url","category":"Network activity","to_ids":true,"value":"http://115.77.9.121:8808","comment":"https://x.com/drb_ra/status/1947368680817303990","timestamp":"1753123848","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"01291174-704b-524b-bbc3-6cff52a359e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.77.9.121","comment":"https://x.com/drb_ra/status/1947368680817303990","timestamp":"1753123848","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"acd6bf34-c2d0-5aa1-87f7-246f5fb375d1","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/CheatZone4U","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"fe9efd45-0edf-51c7-8018-efc664a0e58a","type":"domain","category":"Network activity","to_ids":true,"value":"pandhnyk.top","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"05695b4a-134b-52c2-adf8-6d2872536e81","type":"url","category":"Network activity","to_ids":true,"value":"http://pandhnyk.top/zids","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8ac288ca-6107-5095-85ea-54333771a546","type":"domain","category":"Network activity","to_ids":true,"value":"tunenrnc.top","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"652b8ff1-716d-596e-b3d2-99668846a057","type":"url","category":"Network activity","to_ids":true,"value":"http://tunenrnc.top/xodz","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3614704b-e3af-5b2c-a96d-8000b9bba6b6","type":"url","category":"Network activity","to_ids":true,"value":"http://permwgp.xyz/xlak","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"108daca7-eb35-52fb-b112-9cde605e5caa","type":"domain","category":"Network activity","to_ids":true,"value":"recopcwr.top","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"894b8698-643a-55c9-86a7-25778bf5f6ea","type":"url","category":"Network activity","to_ids":true,"value":"http://recopcwr.top/atki","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"873e1958-a2e1-5e9a-942e-345a7597e9bc","type":"domain","category":"Network activity","to_ids":true,"value":"ultracpj.xyz","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"61e56e78-06ef-5917-98c7-a91731e6a314","type":"url","category":"Network activity","to_ids":true,"value":"http://ultracpj.xyz/apgk","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"16de1bb6-d0c0-540b-bd92-ecaafd557d31","type":"domain","category":"Network activity","to_ids":true,"value":"vegemuoe.top","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"023d6fce-e309-56c3-98a8-1417b3cf7c66","type":"url","category":"Network activity","to_ids":true,"value":"http://vegemuoe.top/xauy","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e361a137-5709-54f4-8876-6b3fcccb4b43","type":"domain","category":"Network activity","to_ids":true,"value":"seruneqy.live","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9165f74f-a712-5dfb-9caf-0347e84755dd","type":"url","category":"Network activity","to_ids":true,"value":"http://seruneqy.live/akiz","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"782d107b-fa6e-501c-9e5a-d66b5efa7b0a","type":"domain","category":"Network activity","to_ids":true,"value":"siniavzv.life","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e2bea118-5d8b-5688-a496-b68a45d88aa5","type":"url","category":"Network activity","to_ids":true,"value":"http://siniavzv.life/xajz","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"56de6080-3c99-5c98-adb0-2769bf92ca15","type":"domain","category":"Network activity","to_ids":true,"value":"strujqwn.xyz","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5550a1d8-2295-5490-a350-c13a7e80cfcc","type":"url","category":"Network activity","to_ids":true,"value":"http://strujqwn.xyz/xkkd","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9258b8c5-673f-532d-a351-7f19f4dda14d","type":"md5","category":"Payload delivery","to_ids":true,"value":"06800a0ad773925d485e7a539997ad57","comment":"https://x.com/skocherhan/status/1947380676229304476","timestamp":"1753126708","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7c842512-ba84-5abd-9a9b-9bba541eeb81","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/partisanclan","comment":"https://x.com/skocherhan/status/1947382128519352730","timestamp":"1753127054","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f16d8ba1-83e8-5965-aa71-3b5fbee944f7","type":"domain","category":"Network activity","to_ids":true,"value":"swalocf.lat","comment":"https://x.com/skocherhan/status/1947382128519352730","timestamp":"1753127054","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"402b6069-7bc6-5a4f-9ebb-f0baec73acf5","type":"url","category":"Network activity","to_ids":true,"value":"http://swalocf.lat/atxi","comment":"https://x.com/skocherhan/status/1947382128519352730","timestamp":"1753127054","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"07c9218a-0609-5b17-9512-4e6aba1231fb","type":"md5","category":"Payload delivery","to_ids":true,"value":"4c0a8a568317573f312728542ef577c2","comment":"https://x.com/skocherhan/status/1947382128519352730","timestamp":"1753127054","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3cbea631-a2b6-510c-8649-9bffab13109a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.191.66.77","comment":"https://x.com/skocherhan/status/1947390688288772266","timestamp":"1753129095","distribution":"5"},{"uuid":"5c537740-e7ff-5542-8933-9f5d7226c527","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.6.48","comment":"https://x.com/threatquery/status/1947401261663281251","timestamp":"1753131616","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"be6be9a8-8eac-5158-af51-f1e7e3225753","type":"url","category":"Network activity","to_ids":true,"value":"http://5.166.42.9","comment":"https://x.com/threatquery/status/1947401272073626072","timestamp":"1753131618","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"},{"name":"malware"}]},{"uuid":"19e26258-cf70-5baa-86f0-c8b9a0d44cb4","type":"url","category":"Network activity","to_ids":true,"value":"http://39.40.146.191","comment":"https://x.com/threatquery/status/1947401273650622669","timestamp":"1753131619","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"7403b158-25df-50a0-8ae1-f8363d211cf3","type":"domain","category":"Network activity","to_ids":true,"value":"sbiasddassa.top","comment":"https://x.com/catnap707/status/1947416794614141429","timestamp":"1753135319","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d60bf16-3603-5610-9bf3-86a6441bf0cf","type":"url","category":"Network activity","to_ids":true,"value":"http://sbiasddassa.top/etgate","comment":"https://x.com/catnap707/status/1947416794614141429","timestamp":"1753135319","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d864585-d5f1-5203-a77a-9ef2d8bfde16","type":"url","category":"Network activity","to_ids":true,"value":"http://104.255.154.40","comment":"https://x.com/catnap707/status/1947416794614141429","timestamp":"1753135319","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"948e010d-b6e5-550d-935e-0086177656cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.255.154.40","comment":"https://x.com/catnap707/status/1947416794614141429","timestamp":"1753135319","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"037510fe-e830-546f-ac67-1603f0516757","type":"domain","category":"Network activity","to_ids":true,"value":"sxcp0j.top","comment":"https://x.com/catnap707/status/1947421589928358221","timestamp":"1753136463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8818b30-46bf-5024-84dc-ca2cd7ac9556","type":"url","category":"Network activity","to_ids":true,"value":"http://sxcp0j.top/apemgu/","comment":"https://x.com/catnap707/status/1947421589928358221","timestamp":"1753136463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d930650e-6ca1-571d-a88b-4f6b50e9e111","type":"url","category":"Network activity","to_ids":true,"value":"http://47.76.208.57","comment":"https://x.com/catnap707/status/1947421589928358221","timestamp":"1753136463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cbbd9c0-d2b3-509c-ac53-770ca8021a57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.208.57","comment":"https://x.com/catnap707/status/1947421589928358221","timestamp":"1753136463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f29232d-7fc4-551c-9a03-495290449015","type":"domain","category":"Network activity","to_ids":true,"value":"am3ohs.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33a81fc7-48bf-520b-8a9c-eb49de3c0693","type":"url","category":"Network activity","to_ids":true,"value":"http://am3ohs.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"377a45ae-3e7a-5557-9cdc-b4d09b674180","type":"domain","category":"Network activity","to_ids":true,"value":"chunai520.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0f8cc32-959b-5715-90da-6878c6f9f00c","type":"url","category":"Network activity","to_ids":true,"value":"http://chunai520.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"532f819e-a591-5990-a05e-9ce24a5f2808","type":"domain","category":"Network activity","to_ids":true,"value":"eo8hna.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3026e439-069d-54e9-9bb7-14fa942a2730","type":"url","category":"Network activity","to_ids":true,"value":"http://eo8hna.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b95a4cb-8169-5b1f-8b95-4d14ee94176f","type":"domain","category":"Network activity","to_ids":true,"value":"g58kap.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31b60ea3-546d-5fa6-a536-396af2efd6b1","type":"url","category":"Network activity","to_ids":true,"value":"http://g58kap.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6665bbc-8a8b-5fdc-a094-dd3029a697ba","type":"domain","category":"Network activity","to_ids":true,"value":"hu9hbq.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"395b79cf-2191-599c-adf8-8f7d77c46012","type":"url","category":"Network activity","to_ids":true,"value":"http://hu9hbq.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e5dcef4-25ea-50a0-afa4-9f9b6b52f4d0","type":"domain","category":"Network activity","to_ids":true,"value":"la7tzd.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87011220-cf92-5010-a1bc-693e403d9b37","type":"url","category":"Network activity","to_ids":true,"value":"http://la7tzd.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3bea7b0d-135d-5d80-a81f-920ddae6a577","type":"domain","category":"Network activity","to_ids":true,"value":"ms1jbs.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d0b1fa9-d5ce-5d50-bd3d-c4542cac4b12","type":"url","category":"Network activity","to_ids":true,"value":"http://ms1jbs.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee1b41fe-78f7-5480-826b-81e0df7d6fe4","type":"domain","category":"Network activity","to_ids":true,"value":"ng8ryb.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68e3c423-a384-54dc-8d03-6634ab64e369","type":"url","category":"Network activity","to_ids":true,"value":"http://ng8ryb.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb5ee3de-55e9-5c39-873c-472cb6bb9697","type":"domain","category":"Network activity","to_ids":true,"value":"ol7zoe.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06f3b953-67fe-5293-9c4f-d06ad0b03a80","type":"url","category":"Network activity","to_ids":true,"value":"http://ol7zoe.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cd5b1d5c-3e45-5e33-8ac9-cecece84b45c","type":"domain","category":"Network activity","to_ids":true,"value":"rs4wgu.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7db30e11-f069-59d1-8469-01da94619f21","type":"url","category":"Network activity","to_ids":true,"value":"http://rs4wgu.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"573f2949-d517-5737-a84a-617dce2cfda8","type":"url","category":"Network activity","to_ids":true,"value":"http://sxcp0j.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e377b7bb-d8c7-5666-8a9c-8ce50b71ebfe","type":"domain","category":"Network activity","to_ids":true,"value":"tw4qyt.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eee1e4a6-3578-50c9-a635-72eaa711b30c","type":"url","category":"Network activity","to_ids":true,"value":"http://tw4qyt.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"971f7486-3e55-595c-94d2-b846e57fc9e0","type":"domain","category":"Network activity","to_ids":true,"value":"un0cyx.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1669e930-9b3f-52ad-bf56-ffd735364840","type":"url","category":"Network activity","to_ids":true,"value":"http://un0cyx.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c4c5afd-d563-57b5-b6d1-0f4c1f3567aa","type":"domain","category":"Network activity","to_ids":true,"value":"yg9ysl.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eef03643-9869-55d2-b90e-9bfd5d52c3e3","type":"url","category":"Network activity","to_ids":true,"value":"http://yg9ysl.top","comment":"https://x.com/catnap707/status/1947422627368472702","timestamp":"1753136710","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6ee1a85-32be-52eb-9dba-08028488bd38","type":"domain","category":"Network activity","to_ids":true,"value":"duniafajar.online","comment":"https://x.com/skocherhan/status/1947428731389415819","timestamp":"1753138165","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"91ff3b62-b27f-59a5-91fb-18d5592ede80","type":"url","category":"Network activity","to_ids":true,"value":"http://duniafajar.online/patches","comment":"https://x.com/skocherhan/status/1947428731389415819","timestamp":"1753138165","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"092d1551-5993-5e41-a9a3-1e34da294ce0","type":"url","category":"Network activity","to_ids":true,"value":"http://oms6tfwl3.com/jp","comment":"https://x.com/catnap707/status/1947428782601867698","timestamp":"1753138177","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40f3fbdb-cf30-51d0-aee7-3fa2ed7b610e","type":"url","category":"Network activity","to_ids":true,"value":"http://185.23.182.216","comment":"https://x.com/catnap707/status/1947428782601867698","timestamp":"1753138177","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a3cc05d-fee7-55e2-b39e-3968d3281c84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.23.182.216","comment":"https://x.com/catnap707/status/1947428782601867698","timestamp":"1753138177","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ecc8d41-b237-5f33-bf44-08e8ecc3cce4","type":"domain","category":"Network activity","to_ids":true,"value":"oms6tfwl3.com","comment":"https://x.com/catnap707/status/1947429186794324180","timestamp":"1753138274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65502d37-2250-5a6a-9a9b-ca80374d3819","type":"url","category":"Network activity","to_ids":true,"value":"http://oms6tfwl3.com","comment":"https://x.com/catnap707/status/1947429186794324180","timestamp":"1753138274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"132019b3-c951-5652-a968-94c5037e8036","type":"domain","category":"Network activity","to_ids":true,"value":"onza1.com","comment":"https://x.com/catnap707/status/1947429186794324180","timestamp":"1753138274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9f9addc-59a0-5e5f-8314-078f19914753","type":"url","category":"Network activity","to_ids":true,"value":"http://onza1.com","comment":"https://x.com/catnap707/status/1947429186794324180","timestamp":"1753138274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"833c2dfe-5ec2-5f5b-9936-19f9a857c5bf","type":"url","category":"Network activity","to_ids":true,"value":"http://139.155.104.147:80","comment":"https://x.com/drb_ra/status/1947430925471539681","timestamp":"1753138688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f5a90add-e402-56bc-b8dd-0923f48e8cf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.155.104.147","comment":"https://x.com/drb_ra/status/1947430925471539681","timestamp":"1753138688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a65b6320-5bb4-5454-9894-621bc79192af","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.139.80:443","comment":"https://x.com/drb_ra/status/1947430942504817084","timestamp":"1753138692","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"08f5c5d1-7f4a-5627-8c27-2e33d5460f00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.139.80","comment":"https://x.com/drb_ra/status/1947430942504817084","timestamp":"1753138692","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e09c61a2-8e2e-54e1-a0b3-46d4d2d14636","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/heppioollkhgf","comment":"https://x.com/skocherhan/status/1947432711913693405","timestamp":"1753139114","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"591ee5c6-7132-516a-8751-40d32601e467","type":"domain","category":"Network activity","to_ids":true,"value":"libdm.top","comment":"https://x.com/skocherhan/status/1947432711913693405","timestamp":"1753139114","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"76b093a3-ed0d-5f56-b764-410612f72de6","type":"url","category":"Network activity","to_ids":true,"value":"http://libdm.top/skal","comment":"https://x.com/skocherhan/status/1947432711913693405","timestamp":"1753139114","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e7b0cb84-2272-5df6-8a48-dd6e05d9707d","type":"md5","category":"Payload delivery","to_ids":true,"value":"23cf4d91712edc9101f5ae307538bb89","comment":"https://x.com/skocherhan/status/1947432711913693405","timestamp":"1753139114","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"871baccf-6c15-59be-b21f-8fa4126bd3f3","type":"domain","category":"Network activity","to_ids":true,"value":"bojmuh.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef345722-041a-565f-91c3-e81a479f4519","type":"url","category":"Network activity","to_ids":true,"value":"https://bojmuh.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"442a7eef-b4f6-5b47-b1bd-e513d35dc56c","type":"domain","category":"Network activity","to_ids":true,"value":"bpgdxg.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25944168-fb49-5009-8f7c-607bc655d48a","type":"url","category":"Network activity","to_ids":true,"value":"https://bpgdxg.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3072a46-7314-582b-8caa-04127dea68fb","type":"domain","category":"Network activity","to_ids":true,"value":"ellqpv.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ee9346b-f7bf-5150-bff7-d6761f701bee","type":"url","category":"Network activity","to_ids":true,"value":"https://ellqpv.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"146c50cc-0a17-51a9-a2b1-9e17fc3a8291","type":"domain","category":"Network activity","to_ids":true,"value":"fiugpz.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b63754f-d402-5781-8073-8c14706e0ef5","type":"url","category":"Network activity","to_ids":true,"value":"https://fiugpz.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85c58327-c79c-552c-b0b0-f1eef5eb4aa9","type":"domain","category":"Network activity","to_ids":true,"value":"fjktbt.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a759028f-a88c-595f-93d7-bf8768c40509","type":"url","category":"Network activity","to_ids":true,"value":"https://fjktbt.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d729b8d0-b0ed-5920-a07c-3e21824e6e91","type":"domain","category":"Network activity","to_ids":true,"value":"gdqdvt.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51deb805-f382-533b-933d-ef44809dd463","type":"url","category":"Network activity","to_ids":true,"value":"https://gdqdvt.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14706acd-b60b-54a7-a8e4-e6007f0c42bd","type":"domain","category":"Network activity","to_ids":true,"value":"pxcfjv.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a055ba79-c31b-533f-b777-3b5f5f92a267","type":"url","category":"Network activity","to_ids":true,"value":"https://pxcfjv.cn","comment":"https://x.com/masaomi346/status/1947434488558194914","timestamp":"1753139538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f38c2b51-a563-5764-bdb3-a1e4762c8e0f","type":"domain","category":"Network activity","to_ids":true,"value":"qxmcsd.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a01481eb-19dc-5da9-b906-2eb9c7118e0d","type":"url","category":"Network activity","to_ids":true,"value":"https://qxmcsd.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d754c10-e697-5dc0-ae9a-b28ef560ad94","type":"domain","category":"Network activity","to_ids":true,"value":"rjuqib.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"923cc352-95a7-582b-8cf0-3ed145e61ec2","type":"url","category":"Network activity","to_ids":true,"value":"https://rjuqib.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f1e1df2-8b1d-5e15-88dd-7e9316ecc755","type":"domain","category":"Network activity","to_ids":true,"value":"sgqxmj.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6f82c99-ef33-5c15-bbd8-02b86d38b224","type":"url","category":"Network activity","to_ids":true,"value":"https://sgqxmj.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f497b77-7fe8-5052-bd71-c4d67beb4c8a","type":"domain","category":"Network activity","to_ids":true,"value":"vnupld.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"241e491e-8f4a-5cd4-975a-3cadf3b3463e","type":"url","category":"Network activity","to_ids":true,"value":"https://vnupld.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cef7348c-6394-5be5-aa0e-e8ea91440860","type":"domain","category":"Network activity","to_ids":true,"value":"wqbigo.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcee862d-e857-5fe6-80e1-1ec4d814b4dc","type":"url","category":"Network activity","to_ids":true,"value":"https://wqbigo.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5f66ffd-823b-505c-9739-fc4c8f64d55b","type":"domain","category":"Network activity","to_ids":true,"value":"xojnbd.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ecb0915e-7a6b-5944-a317-1e0a69a560ea","type":"url","category":"Network activity","to_ids":true,"value":"https://xojnbd.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"469bf927-1670-51ea-8168-4946bf28fccd","type":"domain","category":"Network activity","to_ids":true,"value":"yctibb.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"009977ea-438c-5a37-bfae-291e9f70a27b","type":"url","category":"Network activity","to_ids":true,"value":"https://yctibb.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1bd1e3b-b69f-5a02-b468-2c1774ed62de","type":"domain","category":"Network activity","to_ids":true,"value":"yykmmx.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff5438e4-a7d3-5c6c-a9aa-42216d1bf68b","type":"url","category":"Network activity","to_ids":true,"value":"https://yykmmx.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7ee4d2d-79d7-51eb-b16d-42489eb0bd9c","type":"domain","category":"Network activity","to_ids":true,"value":"zangpiao.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"802460e4-a94f-5999-b9de-c7e6d45086f5","type":"url","category":"Network activity","to_ids":true,"value":"https://zangpiao.cn","comment":"https://x.com/masaomi346/status/1947434614320206263","timestamp":"1753139568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f510b8d-559e-589b-afe1-f2a265055d6a","type":"domain","category":"Network activity","to_ids":true,"value":"stealer.cy","comment":"https://x.com/soursecc/status/1947437684219130055","timestamp":"1753140300","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"af657bb7-8c22-51b8-9d54-da04065551ad","type":"url","category":"Network activity","to_ids":true,"value":"http://stealer.cy","comment":"https://x.com/soursecc/status/1947437684219130055","timestamp":"1753140300","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"218c2664-219e-5236-97fe-5783bd61fe68","type":"domain","category":"Network activity","to_ids":true,"value":"pentagon.cy","comment":"https://x.com/soursecc/status/1947437684219130055","timestamp":"1753140300","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"974c5183-c9ae-52e0-875b-eddd56ca601e","type":"url","category":"Network activity","to_ids":true,"value":"http://pentagon.cy","comment":"https://x.com/soursecc/status/1947437684219130055","timestamp":"1753140300","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"811b6829-d797-5017-b1c6-22239298e88f","type":"domain","category":"Network activity","to_ids":true,"value":"attnewverrsion.weebly.com","comment":"https://x.com/urldna_bot/status/1947446524469805315","timestamp":"1753142407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"973e0b2d-2015-5d95-9f49-ac1de3e3b6b5","type":"url","category":"Network activity","to_ids":true,"value":"https://attnewverrsion.weebly.com","comment":"https://x.com/urldna_bot/status/1947446524469805315","timestamp":"1753142407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ef8d2964-ac1b-5aad-a73a-527d0881e352","type":"domain","category":"Network activity","to_ids":true,"value":"musician.kugou.com","comment":"https://x.com/drb_ra/status/1947449177711276185","timestamp":"1753143040","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2b99ecd2-a22f-5d45-857c-ec5decdc581f","type":"url","category":"Network activity","to_ids":true,"value":"https://musician.kugou.com/dist/css/bootstrap.min.css","comment":"https://x.com/drb_ra/status/1947449177711276185","timestamp":"1753143040","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"87726d2a-9f9e-57e4-846d-a9fd82da6c71","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.203.56:443","comment":"https://x.com/drb_ra/status/1947449177711276185","timestamp":"1753143040","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8adcc2c2-e17b-5148-9c9e-440583978b1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.203.56","comment":"https://x.com/drb_ra/status/1947449177711276185","timestamp":"1753143040","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"473e756a-e15d-5e52-883f-62c89d49f54e","type":"url","category":"Network activity","to_ids":true,"value":"http://70.153.73.172:443","comment":"https://x.com/drb_ra/status/1947449199240335540","timestamp":"1753143045","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d07ce1d1-c0ad-5074-b03f-b85cdd503f14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.153.73.172","comment":"https://x.com/drb_ra/status/1947449199240335540","timestamp":"1753143045","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03b38bf1-372d-5933-93c7-1deba1ae7b1c","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.55.45:443","comment":"https://x.com/drb_ra/status/1947449220430237785","timestamp":"1753143050","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"339dc7b5-6d4e-5c15-b276-6d01f5cacc6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.55.45","comment":"https://x.com/drb_ra/status/1947449220430237785","timestamp":"1753143050","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"42b032aa-93f4-5202-94ab-d1fdd7fd78a2","type":"domain","category":"Network activity","to_ids":true,"value":"itechht.com","comment":"https://x.com/masaomi346/status/1947457206326263816","timestamp":"1753144954","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf450189-d716-5f8e-b7d1-ddd8172384c0","type":"url","category":"Network activity","to_ids":true,"value":"https://www.itechht.com","comment":"https://x.com/masaomi346/status/1947457206326263816","timestamp":"1753144954","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a83bc8be-a263-563a-84fc-1384b97d929a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.174.82.132","comment":"https://x.com/harugasumi/status/1947470270840860891","timestamp":"1753148069","distribution":"5"},{"uuid":"0d048c75-df2f-580d-a6af-3258a3404f04","type":"url","category":"Network activity","to_ids":true,"value":"http://172.174.82.132","comment":"https://x.com/harugasumi/status/1947470270840860891","timestamp":"1753148069","distribution":"5"},{"uuid":"1ba7e37a-c7eb-5155-873d-364859b4454e","type":"domain","category":"Network activity","to_ids":true,"value":"mail.hhipune.com","comment":"https://x.com/skocherhan/status/1947470400981499999","timestamp":"1753148100","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"ee870e98-07ef-56ed-8f8f-c30a1088370c","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.hhipune.com","comment":"https://x.com/skocherhan/status/1947470400981499999","timestamp":"1753148100","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"3385a348-8f52-526a-96c5-ba6c91ab31d5","type":"domain","category":"Network activity","to_ids":true,"value":"hhipune.com","comment":"https://x.com/skocherhan/status/1947470400981499999","timestamp":"1753148100","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"6ad45174-0fe9-5d3b-9585-6e191ee6ec35","type":"url","category":"Network activity","to_ids":true,"value":"http://hhipune.com","comment":"https://x.com/skocherhan/status/1947470400981499999","timestamp":"1753148100","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"043ee820-2150-5723-9b09-d532fd47ac62","type":"domain","category":"Network activity","to_ids":true,"value":"volunteerfederallsavings.weebly.com","comment":"https://x.com/urldna_bot/status/1947476716256903641","timestamp":"1753149606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bcdaa86d-30c9-5848-b13a-70ff082dd393","type":"url","category":"Network activity","to_ids":true,"value":"https://volunteerfederallsavings.weebly.com","comment":"https://x.com/urldna_bot/status/1947476716256903641","timestamp":"1753149606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"802ab22a-ca4b-5639-a941-4c13a3166847","type":"domain","category":"Network activity","to_ids":true,"value":"schwabel.top","comment":"https://x.com/sicehice/status/1947481642551153106","timestamp":"1753150780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c87e2b2-2267-5f8d-82c9-736ae1a885bf","type":"url","category":"Network activity","to_ids":true,"value":"https://schwabel.top/?qr=bsemor","comment":"https://x.com/sicehice/status/1947481642551153106","timestamp":"1753150780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"738f91dc-d207-57e1-8429-03cae38ac328","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.166.138.217","comment":"https://x.com/sicehice/status/1947481642551153106","timestamp":"1753150780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1872684-4550-5e80-a524-11f7bb6814da","type":"url","category":"Network activity","to_ids":true,"value":"http://schwabel.top","comment":"https://x.com/sicehice/status/1947481642551153106","timestamp":"1753150780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dd68bf22-45af-5b1f-ac2d-91f0a6682020","type":"url","category":"Network activity","to_ids":true,"value":"https://ja-logins00.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89935121-dd8c-52de-b695-e4b116e450ab","type":"url","category":"Network activity","to_ids":true,"value":"https://ja-logins01-05.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"965effb3-4d54-5f0f-a79c-952cb690c7c0","type":"domain","category":"Network activity","to_ids":true,"value":"ja-logins00.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"266d7f7f-8463-555d-b43c-b9ac8224746d","type":"domain","category":"Network activity","to_ids":true,"value":"ja-logins01-05.com","comment":"https://x.com/harugasumi/status/1947494206228074575","timestamp":"1753153776","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b388fec-3245-5a2d-8ea9-750bccf48e2f","type":"domain","category":"Network activity","to_ids":true,"value":"securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion","comment":"https://x.com/fbgwls245/status/1947500939268763994","timestamp":"1753155381","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"fa798a3f-f168-514f-bbf8-1240c0ef9ffe","type":"url","category":"Network activity","to_ids":true,"value":"http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion","comment":"https://x.com/fbgwls245/status/1947500939268763994","timestamp":"1753155381","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"bd89a6a3-fe03-584f-a678-04633ba4b0be","type":"domain","category":"Network activity","to_ids":true,"value":"fantasy-formerly-waves-consolidated.trycloudflare.com","comment":"https://x.com/momomopas/status/1947503115672129565","timestamp":"1753155900","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"126b4a5e-bc3d-52f4-a534-b2941887fed7","type":"url","category":"Network activity","to_ids":true,"value":"https://fantasy-formerly-waves-consolidated.trycloudflare.com","comment":"https://x.com/momomopas/status/1947503115672129565","timestamp":"1753155900","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"d316d952-fbb7-50fa-8a18-2415a60b6348","type":"domain","category":"Network activity","to_ids":true,"value":"athens-dash-alaska-syria.trycloudflare.com","comment":"https://x.com/momomopas/status/1947503115672129565","timestamp":"1753155900","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"bab4b3db-9806-53d4-ac37-0ffb51fe65ac","type":"url","category":"Network activity","to_ids":true,"value":"https://athens-dash-alaska-syria.trycloudflare.com","comment":"https://x.com/momomopas/status/1947503115672129565","timestamp":"1753155900","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"8f772901-a7c2-568b-98bf-f6756b0e5229","type":"url","category":"Network activity","to_ids":true,"value":"https://zimbfree.weebly.com","comment":"https://x.com/urldna_bot/status/1947506915308618123","timestamp":"1753156806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"27fa11af-64dd-5bb5-aec6-2ee042df7202","type":"domain","category":"Network activity","to_ids":true,"value":"zimbfree.weebly.com","comment":"https://x.com/urldna_bot/status/1947506915308618123","timestamp":"1753156806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0e4a8be7-7c9c-5086-801e-18deb2422004","type":"url","category":"Network activity","to_ids":true,"value":"https://smbintuavipcemrjp.top/s1VuSF","comment":"https://x.com/harugasumi/status/1947517929291190702","timestamp":"1753159432","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"22a8c883-39bb-542f-817f-c4be9e886d94","type":"domain","category":"Network activity","to_ids":true,"value":"smbintuavipcemrjp.top","comment":"https://x.com/harugasumi/status/1947517929291190702","timestamp":"1753159432","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f69b0fac-752c-5541-8aaf-bf3c70e5d791","type":"url","category":"Network activity","to_ids":true,"value":"https://amex.kochiseit.com","comment":"https://x.com/harugasumi/status/1947522141286764629","timestamp":"1753160436","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3eb707c-06a3-51ec-aa72-9b5997001c08","type":"domain","category":"Network activity","to_ids":true,"value":"amex.kochiseit.com","comment":"https://x.com/harugasumi/status/1947522141286764629","timestamp":"1753160436","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e51565b-2e2d-55f1-9e41-9263ed851867","type":"domain","category":"Network activity","to_ids":true,"value":"kingyouneverloss.com","comment":"https://x.com/suyog41/status/1947534918139187413","timestamp":"1753163482","distribution":"5"},{"uuid":"b61d295d-e93a-586b-87f0-2b8cf8108516","type":"url","category":"Network activity","to_ids":true,"value":"http://kingyouneverloss.com","comment":"https://x.com/suyog41/status/1947534918139187413","timestamp":"1753163482","distribution":"5"},{"uuid":"5fe0e57d-6ebe-5325-8acf-8b97d1465bce","type":"md5","category":"Payload delivery","to_ids":true,"value":"c55775a6d1539aa91577bcb1bcd464f9","comment":"https://x.com/suyog41/status/1947534918139187413","timestamp":"1753163482","distribution":"5"},{"uuid":"b33210c9-ebaf-55a5-9f02-d1dd416c2e9f","type":"url","category":"Network activity","to_ids":true,"value":"https://orange-grass-2866.darcey922.workers.dev/bdo-form/sso/auth/realms/retail/custom-login-actions/forgot-username","comment":"https://x.com/urldna_bot/status/1947537123881427246","timestamp":"1753164008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e47da4b9-22a5-539f-9a2a-4a76b3361a79","type":"domain","category":"Network activity","to_ids":true,"value":"orange-grass-2866.darcey922.workers.dev","comment":"https://x.com/urldna_bot/status/1947537123881427246","timestamp":"1753164008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4db3b3e9-a532-5c9a-865a-2f94ea040d9d","type":"md5","category":"Payload delivery","to_ids":true,"value":"eb80bb9ab64858217c368fc75da491a5","comment":"https://x.com/suyog41/status/1947538054006378881","timestamp":"1753164230","distribution":"5"},{"uuid":"240e5762-ca81-56aa-a448-f4db74de1eb4","type":"md5","category":"Payload delivery","to_ids":true,"value":"1db49990c0fe0c679dbba9a384a2b49f","comment":"https://x.com/suyog41/status/1947538054006378881","timestamp":"1753164230","distribution":"5"},{"uuid":"dfef864c-7dec-59e7-b031-719151db0330","type":"md5","category":"Payload delivery","to_ids":true,"value":"8663315b7daa8e62245fa5af97681526","comment":"https://x.com/suyog41/status/1947538054006378881","timestamp":"1753164230","distribution":"5"},{"uuid":"c44aaa47-cd38-5557-b1ee-a1a00e7fca01","type":"md5","category":"Payload delivery","to_ids":true,"value":"872d3b6dc1aab5d4e4ba74e4998fa774","comment":"https://x.com/suyog41/status/1947538054006378881","timestamp":"1753164230","distribution":"5"},{"uuid":"9d339442-2613-565f-85b8-dfde2405ebf8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.99.244.83","comment":"https://x.com/drb_ra/status/1947548887364899069","timestamp":"1753166813","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"50aeda04-c99c-583c-aa98-6bb07fe28446","type":"url","category":"Network activity","to_ids":true,"value":"http://39.99.244.83:443","comment":"https://x.com/drb_ra/status/1947548887364899069","timestamp":"1753166813","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"e8f0e6dd-5481-5fc1-98a6-7f58729ebc0a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.254.255.99:443","comment":"https://x.com/drb_ra/status/1947548908743283185","timestamp":"1753166818","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"0f1c415f-eceb-52e0-8c6d-12ceec3ab7fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.254.255.99","comment":"https://x.com/drb_ra/status/1947548908743283185","timestamp":"1753166818","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a2fbd7e8-14f0-5dd5-bf66-a3ec3d5778d3","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.1.101:7443","comment":"https://x.com/drb_ra/status/1947548929320779952","timestamp":"1753166823","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"cad771fd-d7b9-5a9b-8233-355c6c7518ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.1.101","comment":"https://x.com/drb_ra/status/1947548929320779952","timestamp":"1753166823","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d59c9549-cdbd-51cd-b8b6-a54179ed585d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.150.108.175","comment":"https://x.com/drb_ra/status/1947548944046731654","timestamp":"1753166826","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"015c584b-23d4-5fe4-9de7-7250e45d1301","type":"url","category":"Network activity","to_ids":true,"value":"http://45.150.108.175:7443","comment":"https://x.com/drb_ra/status/1947548944046731654","timestamp":"1753166826","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d50ffeff-a260-530c-b76f-dc727e4664c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.91.248.230","comment":"https://x.com/drb_ra/status/1947548968470114504","timestamp":"1753166832","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3fca2616-800d-542f-b503-b937e3118128","type":"url","category":"Network activity","to_ids":true,"value":"http://51.91.248.230:7443","comment":"https://x.com/drb_ra/status/1947548968470114504","timestamp":"1753166832","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d742e213-d418-52a5-a052-28d125251e14","type":"url","category":"Network activity","to_ids":true,"value":"http://65.109.169.219:7443","comment":"https://x.com/drb_ra/status/1947548988846055839","timestamp":"1753166837","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3d4b2234-f141-5b2e-b767-fbb7704ca4d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.109.169.219","comment":"https://x.com/drb_ra/status/1947548988846055839","timestamp":"1753166837","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ead58fc4-bf04-5136-8ce8-956e7af72fce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.252.249.223","comment":"https://x.com/drb_ra/status/1947549010975236551","timestamp":"1753166842","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c2d8e60e-454e-503e-b013-41d7db11fb1b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.252.249.223:31337","comment":"https://x.com/drb_ra/status/1947549010975236551","timestamp":"1753166842","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6f919d25-1dbb-5172-b382-9a5323e6a0fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.66.248.184","comment":"https://x.com/drb_ra/status/1947549031875444994","timestamp":"1753166847","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3470d394-59d5-51f7-8aa9-1201a7f7b4ea","type":"url","category":"Network activity","to_ids":true,"value":"http://45.66.248.184:443","comment":"https://x.com/drb_ra/status/1947549031875444994","timestamp":"1753166847","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d3c55332-fa4a-5586-aa2f-8e520e485784","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.233.90","comment":"https://x.com/drb_ra/status/1947549053094350980","timestamp":"1753166852","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"6bd211ad-1a30-5878-8187-2fe3e9f67a03","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.233.90:31337","comment":"https://x.com/drb_ra/status/1947549053094350980","timestamp":"1753166852","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b05e678b-3d36-52e8-b7c6-81357bf16ad9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.108.232.68","comment":"https://x.com/drb_ra/status/1947549074544054682","timestamp":"1753166857","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4a259b59-bc7b-5653-9e9f-27c186f3700b","type":"url","category":"Network activity","to_ids":true,"value":"http://166.108.232.68:43335","comment":"https://x.com/drb_ra/status/1947549074544054682","timestamp":"1753166857","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"17bdeaeb-4e13-5f4e-9bd1-577804e6cdf2","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.188.68:443","comment":"https://x.com/drb_ra/status/1947549090289492407","timestamp":"1753166861","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"45cdec2e-0fe9-5d1e-bc06-a87f3073a095","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.188.68","comment":"https://x.com/drb_ra/status/1947549090289492407","timestamp":"1753166861","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b893f632-6f5b-5908-83fc-e076aea36b7d","type":"url","category":"Network activity","to_ids":true,"value":"http://213.111.148.83:31337","comment":"https://x.com/drb_ra/status/1947549111273853210","timestamp":"1753166866","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0482d493-e70f-5348-b8e0-ab38da8274e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.111.148.83","comment":"https://x.com/drb_ra/status/1947549132316377275","timestamp":"1753166871","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0c871361-5553-531a-8a5b-425c844b2e91","type":"url","category":"Network activity","to_ids":true,"value":"http://213.111.148.83:8888","comment":"https://x.com/drb_ra/status/1947549132316377275","timestamp":"1753166871","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"555b07db-e41f-5512-b297-0fb5cc1f0044","type":"url","category":"Network activity","to_ids":true,"value":"http://185.183.84.191:8443","comment":"https://x.com/drb_ra/status/1947549649545347199","timestamp":"1753166994","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"09c3d3b2-3636-54b2-841f-84a9bd50190e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.183.84.191","comment":"https://x.com/drb_ra/status/1947549649545347199","timestamp":"1753166994","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"30c36c5f-d417-5337-8b87-62f214624146","type":"url","category":"Network activity","to_ids":true,"value":"http://45.84.227.95:8080","comment":"https://x.com/drb_ra/status/1947549663759941831","timestamp":"1753166998","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3b940130-1b30-5f51-af3d-720039473536","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.84.227.95","comment":"https://x.com/drb_ra/status/1947549663759941831","timestamp":"1753166998","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9476103d-1445-5f61-82dc-cd2a815264a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.208.32.85","comment":"https://x.com/drb_ra/status/1947549679786262650","timestamp":"1753167002","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a965ca18-3435-563b-9396-31ce7bd79ebe","type":"url","category":"Network activity","to_ids":true,"value":"http://13.208.32.85:19518","comment":"https://x.com/drb_ra/status/1947549679786262650","timestamp":"1753167002","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f599ab84-a29e-52c8-97db-9df4fd22410f","type":"url","category":"Network activity","to_ids":true,"value":"http://13.51.176.77:5903","comment":"https://x.com/drb_ra/status/1947549700774654362","timestamp":"1753167007","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5a3f25e2-44d6-562c-9fb7-fe83e1d6927e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.51.176.77","comment":"https://x.com/drb_ra/status/1947549700774654362","timestamp":"1753167007","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"46ae21cd-702f-5304-b381-105e93f2b84c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.49.126.83:9999","comment":"https://x.com/drb_ra/status/1947549721540891028","timestamp":"1753167011","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"236677b1-2e4e-5474-b394-a466e007b351","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.49.126.83","comment":"https://x.com/drb_ra/status/1947549721540891028","timestamp":"1753167011","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"754ec423-a945-5972-96fb-537b5fbb1e11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.203.254","comment":"https://x.com/drb_ra/status/1947549742218555725","timestamp":"1753167016","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"973be922-4d8c-5dac-9cb8-655be91c7274","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.203.254:587","comment":"https://x.com/drb_ra/status/1947549742218555725","timestamp":"1753167016","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"65a655c8-fcfe-52ca-a191-fb4ee29e9258","type":"url","category":"Network activity","to_ids":true,"value":"http://139.159.238.207:8888","comment":"https://x.com/drb_ra/status/1947549762741563512","timestamp":"1753167021","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"50ff172f-fbf5-5fed-87a6-f08a17a41754","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.159.238.207","comment":"https://x.com/drb_ra/status/1947549762741563512","timestamp":"1753167021","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"be4b6f5b-f982-5529-96ea-6134d6c0301c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.242.5.90:4040","comment":"https://x.com/drb_ra/status/1947549782962278899","timestamp":"1753167026","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"48d463fe-c27d-5236-b522-cf3038a76a0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.242.5.90","comment":"https://x.com/drb_ra/status/1947549782962278899","timestamp":"1753167026","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b77fd9b3-bebf-5927-92b3-2f53057799a0","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.54.1:443","comment":"https://x.com/drb_ra/status/1947549803954507871","timestamp":"1753167031","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"f1650716-dbfb-5395-aedd-ed6e464b829e","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.212.103:995","comment":"https://x.com/drb_ra/status/1947549824359833630","timestamp":"1753167036","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d0024613-867c-5d04-b3de-d2c93a263b75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.212.103","comment":"https://x.com/drb_ra/status/1947549824359833630","timestamp":"1753167036","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7367508f-243d-5e12-b99d-d898dd035824","type":"url","category":"Network activity","to_ids":true,"value":"http://107.173.9.50:443","comment":"https://x.com/drb_ra/status/1947549844975063076","timestamp":"1753167041","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c724abd6-e85d-501d-9829-979a33879c7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.9.50","comment":"https://x.com/drb_ra/status/1947549844975063076","timestamp":"1753167041","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"17ec907c-c91d-593e-849d-5e85e97f7f29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.149.60.140","comment":"https://x.com/drb_ra/status/1947549864671236437","timestamp":"1753167046","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"2e66c52d-95a0-5a6c-ad12-e84c10ec9538","type":"url","category":"Network activity","to_ids":true,"value":"http://80.149.60.140:443","comment":"https://x.com/drb_ra/status/1947549864671236437","timestamp":"1753167046","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"0ad8765a-26f5-5ea6-8b8e-459784525452","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.205.3.34","comment":"https://x.com/drb_ra/status/1947550382202429872","timestamp":"1753167169","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3c17c0f8-b2ba-5fe4-ac1f-2ca9a0538087","type":"url","category":"Network activity","to_ids":true,"value":"http://60.205.3.34:8443","comment":"https://x.com/drb_ra/status/1947550382202429872","timestamp":"1753167169","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d10eed78-d075-5d5d-b393-f3eb01fbb18e","type":"url","category":"Network activity","to_ids":true,"value":"http://t.login.gov.il","comment":"https://x.com/FalconFeedsio/status/1947555179919974690","timestamp":"1753168313","distribution":"5"},{"uuid":"fa0ff706-26fc-57b0-bc8e-a60586629c0a","type":"domain","category":"Network activity","to_ids":true,"value":"t.login.gov.il","comment":"https://x.com/FalconFeedsio/status/1947555179919974690","timestamp":"1753168313","distribution":"5"},{"uuid":"a2510700-a601-58ab-a54f-f34fa4a906ff","type":"url","category":"Network activity","to_ids":true,"value":"http://netanya.net.il","comment":"https://x.com/FalconFeedsio/status/1947555179919974690","timestamp":"1753168313","distribution":"5"},{"uuid":"a3b2ccd0-6628-58bc-b957-e5bf3d0d6dd8","type":"domain","category":"Network activity","to_ids":true,"value":"netanya.net.il","comment":"https://x.com/FalconFeedsio/status/1947555179919974690","timestamp":"1753168313","distribution":"5"},{"uuid":"1f7908fc-2ced-53fa-bf2a-6c21d039134d","type":"domain","category":"Network activity","to_ids":true,"value":"macrochipsperu.com","comment":"https://x.com/urldna_bot/status/1947567329144971529","timestamp":"1753171209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0cab5fa2-57a9-59b7-9454-f1d97e5d3c51","type":"url","category":"Network activity","to_ids":true,"value":"http://macrochipsperu.com/spotify/auth/login.php","comment":"https://x.com/urldna_bot/status/1947567329144971529","timestamp":"1753171209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e8653699-f60d-57b1-aee9-26e7ecfaf0b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.84.137","comment":"https://x.com/skocherhan/status/1947577320555889023","timestamp":"1753173592","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"0f17e77b-0479-57c5-9954-cabe0fdeff8c","type":"md5","category":"Payload delivery","to_ids":true,"value":"56d0e1e06598562c8fa70c657464cf77","comment":"https://x.com/skocherhan/status/1947577320555889023","timestamp":"1753173592","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"0c31a513-121f-5819-afcd-4a0bcc8ad71a","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.84.137:1337/RunShell.exe","comment":"https://x.com/skocherhan/status/1947577320555889023","timestamp":"1753173592","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"6f80763a-04ab-5e53-a9de-d7332af8563d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.143.112.163","comment":"https://x.com/skocherhan/status/1947580299518304271","timestamp":"1753174302","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"edc9ce00-2b31-58ea-9a2e-264238d2a450","type":"url","category":"Network activity","to_ids":true,"value":"http://83.143.112.163:1337/RunShell.exe","comment":"https://x.com/skocherhan/status/1947580299518304271","timestamp":"1753174302","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"7d99951c-f7b6-5cf6-beb8-56edf7aa8d02","type":"domain","category":"Network activity","to_ids":true,"value":"npnjs.com","comment":"https://x.com/MeridianEU/status/1947582927648276628","timestamp":"1753174928","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c521ab1-8ea3-5b55-a874-2efea5e096ef","type":"url","category":"Network activity","to_ids":true,"value":"http://npnjs.com","comment":"https://x.com/MeridianEU/status/1947582927648276628","timestamp":"1753174928","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28bd6afa-24b3-5489-b72d-1b14c937a4ca","type":"domain","category":"Network activity","to_ids":true,"value":"108653.xyz","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8b5fcfa8-28fb-598c-8a9a-76747070c565","type":"url","category":"Network activity","to_ids":true,"value":"http://www.kl3u2l.top/l3zk/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ab5f52a2-7269-5b41-aab5-667e98e95964","type":"domain","category":"Network activity","to_ids":true,"value":"aksow.xyz","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c33d11de-935d-508f-b10c-784cedfc7838","type":"url","category":"Network activity","to_ids":true,"value":"http://www.aksow.xyz/0oon/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6b593c6d-d234-57d7-9c46-ea799061c943","type":"domain","category":"Network activity","to_ids":true,"value":"voguevanguard.xyz","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"47bed85b-cfc0-5fa1-a774-971b4c0b905f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.voguevanguard.xyz/z54p/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5e6ad4fa-c84e-5af7-b33d-e713ce116673","type":"domain","category":"Network activity","to_ids":true,"value":"kl3u2l.top","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"0112a13f-0f25-5bef-ab91-c70ef039d56d","type":"url","category":"Network activity","to_ids":true,"value":"http://www.gedankenlaut.xyz/wy7k/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3487d2ce-f426-5c8a-b2fa-7d597e1b5961","type":"domain","category":"Network activity","to_ids":true,"value":"areyouhappy.net","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d6ddf520-6359-5ff5-b447-ae20edf6083b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.areyouhappy.net/thgi/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1ca3fb02-343f-58ea-a714-0f7ad4dd71f2","type":"md5","category":"Payload delivery","to_ids":true,"value":"d04c67f7e374d01561e41846eb11ac92","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ad14336e-f23b-504b-a2ef-7b0d2a73897e","type":"url","category":"Network activity","to_ids":true,"value":"http://www.108653.xyz/968a/","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"e4f020a0-ebb3-5b36-933d-b97d6dd243f2","type":"domain","category":"Network activity","to_ids":true,"value":"gedankenlaut.xyz","comment":"https://x.com/skocherhan/status/1947586671651742103","timestamp":"1753175821","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1909abd4-f007-5f8e-958e-35027f6c7358","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/MockaPro/PS1/","comment":"https://x.com/smica83/status/1947587344200253809","timestamp":"1753175981","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"609c0335-7f6e-5637-8edb-df405d49580d","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/babaproqrqqw","comment":"https://x.com/skocherhan/status/1947589739617615932","timestamp":"1753176553","distribution":"5"},{"uuid":"1208e50e-a3e2-50d4-bd80-e1ff1d29b1fb","type":"url","category":"Network activity","to_ids":true,"value":"https://epeccom.weebly.com","comment":"https://x.com/urldna_bot/status/1947597519879328003","timestamp":"1753178408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"36a9d0d1-1379-5182-b00d-fbf540c66895","type":"domain","category":"Network activity","to_ids":true,"value":"epeccom.weebly.com","comment":"https://x.com/urldna_bot/status/1947597519879328003","timestamp":"1753178408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ae9b6f41-2fbd-5d9c-a417-669e6d5a386f","type":"domain","category":"Network activity","to_ids":true,"value":"com-google.com","comment":"https://x.com/c9lab_soc/status/1947599224629322154","timestamp":"1753178814","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b2dfd289-b698-5965-bd4e-24a7cb3793ee","type":"url","category":"Network activity","to_ids":true,"value":"http://com-google.com","comment":"https://x.com/c9lab_soc/status/1947599224629322154","timestamp":"1753178814","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9ed87db7-e177-5081-aa20-7526da198eca","type":"url","category":"Network activity","to_ids":true,"value":"http://www.kasegitai.tokyo/fo8o/","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"edab80de-b05d-5b77-82e0-718bbc30f888","type":"domain","category":"Network activity","to_ids":true,"value":"df56e.top","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"fb4deb1f-f432-59b0-bd6c-5c59b64e12a6","type":"url","category":"Network activity","to_ids":true,"value":"http://www.3xfootball.com/fo8o/","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"2d8e1c18-225d-56e4-bb6b-40ba9d0d5cd3","type":"url","category":"Network activity","to_ids":true,"value":"http://www.lp9l3a.top/4lbw/","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"bcedba0e-9216-5840-8a7a-4c8d146f6b19","type":"domain","category":"Network activity","to_ids":true,"value":"lp9l3a.top","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"f2ea671b-8e35-5843-ad23-de85f133fc06","type":"domain","category":"Network activity","to_ids":true,"value":"3xfootball.com","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4d79f178-fb6d-586e-b0ab-8e2afa8742f7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.df56e.top/qx92/","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"62d4e0f8-4bba-50ad-a394-a0ec3d27a698","type":"domain","category":"Network activity","to_ids":true,"value":"magmadokum.com","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"12a81db7-d198-5ba6-90af-f8b97d9720d4","type":"md5","category":"Payload delivery","to_ids":true,"value":"7851343b15eecb12ffc2b9755f8f6df6","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"433deb34-f562-5f73-a4a7-cbcb6ac7ea1e","type":"md5","category":"Payload delivery","to_ids":true,"value":"a32e770c62bab92fb9f5413a70a62836","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b9a4c457-fefc-5618-8117-1c47a2492d53","type":"url","category":"Network activity","to_ids":true,"value":"http://www.magmadokum.com/fo8o/","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"403dc5e3-ef92-51f0-833d-16fe9a94ea54","type":"domain","category":"Network activity","to_ids":true,"value":"kasegitai.tokyo","comment":"https://x.com/skocherhan/status/1947601175244595435","timestamp":"1753179279","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6658a80d-0b66-599c-a72d-7ce768d14c1f","type":"domain","category":"Network activity","to_ids":true,"value":"golden-founded-liz-openings.trycloudflare.com","comment":"https://x.com/ShanHolo/status/1947609920452362564","timestamp":"1753181364","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"0ae208cf-f9f3-591f-b10d-11ccff7d211a","type":"url","category":"Network activity","to_ids":true,"value":"https://golden-founded-liz-openings.trycloudflare.com","comment":"https://x.com/ShanHolo/status/1947609920452362564","timestamp":"1753181364","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"376f7948-f716-5897-96be-37fb8d377564","type":"md5","category":"Payload delivery","to_ids":true,"value":"e0792d366edf7ef08b1f38583b205e9c","comment":"https://x.com/skocherhan/status/1947609936814608655","timestamp":"1753181368","distribution":"5"},{"uuid":"fbc836dc-8f92-58e4-be42-1191dcea83d3","type":"url","category":"Network activity","to_ids":true,"value":"http://103.125.248.109:443","comment":"https://x.com/drb_ra/status/1947614143143428440","timestamp":"1753182371","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2125f27f-8335-5d7a-a559-31f4a8f76249","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.125.248.109","comment":"https://x.com/drb_ra/status/1947614143143428440","timestamp":"1753182371","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9528be7a-c44b-57a5-bca2-e0e204d58276","type":"domain","category":"Network activity","to_ids":true,"value":"download.microsoftwindows.biz","comment":"https://x.com/drb_ra/status/1947614143143428440","timestamp":"1753182371","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e7031871-9a4c-58e2-9cf9-b6d66fafe134","type":"url","category":"Network activity","to_ids":true,"value":"https://download.microsoftwindows.biz/load","comment":"https://x.com/drb_ra/status/1947614143143428440","timestamp":"1753182371","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cb4229a1-e532-5b2a-941d-904c866b5797","type":"domain","category":"Network activity","to_ids":true,"value":"metamaskloginorsignin1.godaddysites.com","comment":"https://x.com/urldna_bot/status/1947627711779807687","timestamp":"1753185606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3bf06cb8-6716-53fa-9633-4646016b4f35","type":"url","category":"Network activity","to_ids":true,"value":"https://metamaskloginorsignin1.godaddysites.com","comment":"https://x.com/urldna_bot/status/1947627711779807687","timestamp":"1753185606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b21ac8ba-1558-5513-8408-d46c035601c6","type":"md5","category":"Payload delivery","to_ids":true,"value":"928f726ccb2b1011faa20f672a5f3168","comment":"https://x.com/skocherhan/status/1947631717755330758","timestamp":"1753186561","distribution":"5"},{"uuid":"22cb6816-8dc0-503b-9841-685e8e3bab3e","type":"url","category":"Network activity","to_ids":true,"value":"http://pk-instruments-shoes-yield.trycloudflare.com/ana.zip","comment":"https://x.com/skocherhan/status/1947631717755330758","timestamp":"1753186561","distribution":"5"},{"uuid":"899059b2-12b5-527e-8bd2-387678845929","type":"domain","category":"Network activity","to_ids":true,"value":"pk-instruments-shoes-yield.trycloudflare.com","comment":"https://x.com/skocherhan/status/1947631717755330758","timestamp":"1753186561","distribution":"5"},{"uuid":"530b7c9a-d9a0-5c07-901a-effba8b0a126","type":"url","category":"Network activity","to_ids":true,"value":"http://pk-instruments-shoes-yield.trycloudflare.com/7w.bat","comment":"https://x.com/skocherhan/status/1947631717755330758","timestamp":"1753186561","distribution":"5"},{"uuid":"442a7eef-b4f6-5b47-b1bd-e513d35dc56c","type":"domain","category":"Network activity","to_ids":true,"value":"bpgdxg.cn","comment":"https://x.com/harugasumi/status/1947639742469693761","timestamp":"1753188474","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25944168-fb49-5009-8f7c-607bc655d48a","type":"url","category":"Network activity","to_ids":true,"value":"https://bpgdxg.cn","comment":"https://x.com/harugasumi/status/1947639742469693761","timestamp":"1753188474","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85cd8840-fb16-53bf-a638-a8bc530c6f02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.208.79.7","comment":"https://x.com/James_inthe_box/status/1947652379291357684","timestamp":"1753191487","distribution":"5"},{"uuid":"22c0db25-ec79-54f6-ac24-a66b7a08e2ac","type":"domain","category":"Network activity","to_ids":true,"value":"allmagicmailserve.weebly.com","comment":"https://x.com/urldna_bot/status/1947657925939413063","timestamp":"1753192809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f9b4e495-9aff-58c7-8e10-28f152defda7","type":"url","category":"Network activity","to_ids":true,"value":"https://allmagicmailserve.weebly.com","comment":"https://x.com/urldna_bot/status/1947657925939413063","timestamp":"1753192809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"86399b31-e614-5038-ba2e-53d25fed5964","type":"url","category":"Network activity","to_ids":true,"value":"http://2.56.10.90","comment":"https://x.com/ValidinLLC/status/1947659731792740815","timestamp":"1753193240","distribution":"5"},{"uuid":"c01eca8b-b3e6-5cbd-a510-d704b4a5cfa7","type":"domain","category":"Network activity","to_ids":true,"value":"en.stocksitem.org","comment":"https://x.com/ValidinLLC/status/1947659731792740815","timestamp":"1753193240","distribution":"5"},{"uuid":"47b383aa-1d4e-5c33-84c4-251153c25c72","type":"url","category":"Network activity","to_ids":true,"value":"http://en.stocksitem.org","comment":"https://x.com/ValidinLLC/status/1947659731792740815","timestamp":"1753193240","distribution":"5"},{"uuid":"8fc3a2b3-2f6c-5be7-a3b4-892dac8c0196","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-health.bezmrh.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1947668817204904111","timestamp":"1753195406","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9ac52db-3c27-5e15-8cbd-bc54f47649d6","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-health.bezmrh.cn","comment":"https://x.com/masaomi346/status/1947668817204904111","timestamp":"1753195406","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd0a47f6-cc47-5704-a414-a94261f256a5","type":"url","category":"Network activity","to_ids":true,"value":"https://dn720702.ca.archive.org/0/items/universe-1733359315202-8750_20250716/universe-1733359315202-8750.jpg","comment":"https://x.com/1ZRR4H/status/1947669831299334177","timestamp":"1753195648","distribution":"5"},{"uuid":"7ee2942c-6d3c-5f77-8593-5fe090250491","type":"domain","category":"Network activity","to_ids":true,"value":"dn720702.ca.archive.org","comment":"https://x.com/1ZRR4H/status/1947669831299334177","timestamp":"1753195648","distribution":"5"},{"uuid":"63805ae5-0390-59b1-9f7f-5e7af8dd447c","type":"url","category":"Network activity","to_ids":true,"value":"https://dn721205.ca.archive.org/0/items/wp4096799-lost-in-space-wallpapers_202507/wp4096799-lost-in-space-wallpapers.jpg","comment":"https://x.com/1ZRR4H/status/1947669831299334177","timestamp":"1753195648","distribution":"5"},{"uuid":"eb0d6447-e19e-509f-971d-605eceb7f722","type":"domain","category":"Network activity","to_ids":true,"value":"dn721205.ca.archive.org","comment":"https://x.com/1ZRR4H/status/1947669831299334177","timestamp":"1753195648","distribution":"5"},{"uuid":"4f63292d-cc50-5118-8c38-f3c8df06eaee","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-vestig.fphhvu.cn","comment":"https://x.com/harugasumi/status/1947678914765275479","timestamp":"1753197814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2ff6a3b-fbf6-5e88-91ab-369d318b6713","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-vestig.fphhvu.cn/RSV_P/smart_index.htm/","comment":"https://x.com/harugasumi/status/1947678914765275479","timestamp":"1753197814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60ae9ec2-f140-525c-9f1d-0ad2fe38b2dc","type":"domain","category":"Network activity","to_ids":true,"value":"dbklgovmygoodupdateforall.weebly.com","comment":"https://x.com/urldna_bot/status/1947688108176155074","timestamp":"1753200005","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"848e25d5-a682-5e66-b916-226858fded43","type":"url","category":"Network activity","to_ids":true,"value":"https://dbklgovmygoodupdateforall.weebly.com","comment":"https://x.com/urldna_bot/status/1947688108176155074","timestamp":"1753200005","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9fafdd24-807c-5cef-ae15-7c144aad91dd","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.vmupdate.org","comment":"https://x.com/drb_ra/status/1947697634585551049","timestamp":"1753202277","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a6a9b141-0c5f-5873-9d3b-03ebc78d3e81","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.vmupdate.org/_/scs/mail-static/_/js/","comment":"https://x.com/drb_ra/status/1947697634585551049","timestamp":"1753202277","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ce83e039-a7bf-50c5-a253-fd19c423466e","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.61.136:53","comment":"https://x.com/drb_ra/status/1947697634585551049","timestamp":"1753202277","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"908ee5f3-8ebb-57c8-935c-da50349e5109","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.61.136","comment":"https://x.com/drb_ra/status/1947697634585551049","timestamp":"1753202277","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7dd3a8a4-4d42-56af-8a08-67369169f43f","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f86a221-f592-5607-87aa-dde55ddcc19e","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.nsebseshop.cloud/s/82740874126","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"745f539c-21c5-5a53-9b35-cef5f4812b73","type":"domain","category":"Network activity","to_ids":true,"value":"ns3.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0dab6606-3ba6-5ff1-8930-d998a9b1a593","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/wc/82740874126","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7113ba01-b17f-54c3-8178-e6c7115fc9e2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.237.86.35:53","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"962626b2-4421-562c-acfe-85f8d5e4065a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.237.86.35","comment":"https://x.com/drb_ra/status/1947697659214762483","timestamp":"1753202283","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f0042f5b-c52d-5242-9d33-7f710bb47d76","type":"md5","category":"Payload delivery","to_ids":true,"value":"e87316f30002cda166f95e763166073f","comment":"https://x.com/ReBensk/status/1947701888209519092","timestamp":"1753203291","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"ad5a61ac-2ad4-5b99-8494-da69eb1fdb2a","type":"domain","category":"Network activity","to_ids":true,"value":"xn--gencatadministradordegesti-qtc.weebly.com","comment":"https://x.com/urldna_bot/status/1947718308926505130","timestamp":"1753207206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fe871784-260a-58df-bce7-d7b3fca3a106","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--gencatadministradordegesti-qtc.weebly.com","comment":"https://x.com/urldna_bot/status/1947718308926505130","timestamp":"1753207206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f419c978-6090-5b8e-a674-11c1a37d1077","type":"url","category":"Network activity","to_ids":true,"value":"http://46.101.246.74:7443","comment":"https://x.com/drb_ra/status/1947730047617384721","timestamp":"1753210005","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6699fdb3-13ac-5282-9ab1-02f6fdff6eca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.246.74","comment":"https://x.com/drb_ra/status/1947730047617384721","timestamp":"1753210005","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"7a37d72c-a5fd-536e-bc55-aa3503ded5e2","type":"url","category":"Network activity","to_ids":true,"value":"http://34.1.135.57:7443","comment":"https://x.com/drb_ra/status/1947730067532222911","timestamp":"1753210009","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b66ddf22-6b2a-53b6-a416-b24b3b774a7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.190.174","comment":"https://x.com/drb_ra/status/1947730087408791975","timestamp":"1753210014","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"141cff77-415d-5b4c-bc34-84874e1363e4","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.190.174:7443","comment":"https://x.com/drb_ra/status/1947730087408791975","timestamp":"1753210014","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"17729924-7b9a-5873-8ebb-3602af6d3439","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.182.86.110","comment":"https://x.com/drb_ra/status/1947730109047210489","timestamp":"1753210019","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"208f0615-4b83-5521-a802-7e1a002a8c91","type":"url","category":"Network activity","to_ids":true,"value":"http://194.182.86.110:7443","comment":"https://x.com/drb_ra/status/1947730109047210489","timestamp":"1753210019","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ab160916-346b-50ef-9a9b-022a6ebf7a00","type":"url","category":"Network activity","to_ids":true,"value":"http://165.227.143.23:7443","comment":"https://x.com/drb_ra/status/1947730130480337278","timestamp":"1753210024","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"dd6e0fe5-e145-57ef-9130-6617955f1865","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.227.143.23","comment":"https://x.com/drb_ra/status/1947730130480337278","timestamp":"1753210024","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ed835ec9-9fcc-53c8-9d64-f6e3f3102ba4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.183.113.240","comment":"https://x.com/drb_ra/status/1947730151292449175","timestamp":"1753210029","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ac739388-2da6-578c-86ee-ecb988af53ae","type":"url","category":"Network activity","to_ids":true,"value":"http://68.183.113.240:443","comment":"https://x.com/drb_ra/status/1947730151292449175","timestamp":"1753210029","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cdeb82ba-55a3-53f7-b919-ffd730bbe0b4","type":"url","category":"Network activity","to_ids":true,"value":"http://144.126.198.202:31337","comment":"https://x.com/drb_ra/status/1947730172977025080","timestamp":"1753210034","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"687e074d-ef40-524d-8ae1-57dde889c3c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.126.198.202","comment":"https://x.com/drb_ra/status/1947730172977025080","timestamp":"1753210034","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"51bfbfec-8c63-5efb-a9c8-e092f2c84403","type":"url","category":"Network activity","to_ids":true,"value":"http://35.199.30.104:31337","comment":"https://x.com/drb_ra/status/1947730194229326006","timestamp":"1753210040","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"995ddbcc-bee6-5bf6-962d-2b15fd0cf765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.199.30.104","comment":"https://x.com/drb_ra/status/1947730194229326006","timestamp":"1753210040","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9af25ef0-8f32-52b2-bcb4-f5143dff8846","type":"url","category":"Network activity","to_ids":true,"value":"http://191.17.238.190:31337","comment":"https://x.com/drb_ra/status/1947730210322890792","timestamp":"1753210043","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"315511b0-8737-5ae3-aada-b424347d9fe5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.17.238.190","comment":"https://x.com/drb_ra/status/1947730210322890792","timestamp":"1753210043","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9a00e7ef-0159-5e31-bf23-c469cef4810d","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.232.216:443","comment":"https://x.com/drb_ra/status/1947730230661075011","timestamp":"1753210048","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"08dfdb07-3a38-5b13-bb9d-ccd964b7098f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.232.216","comment":"https://x.com/drb_ra/status/1947730230661075011","timestamp":"1753210048","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8bbaf5c2-6d51-52ff-8b1b-e7cd4472919d","type":"url","category":"Network activity","to_ids":true,"value":"http://169.239.130.96:31337","comment":"https://x.com/drb_ra/status/1947730250739122558","timestamp":"1753210053","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"68bf657b-f1ff-500f-82ba-0fbe108c0c0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"169.239.130.96","comment":"https://x.com/drb_ra/status/1947730250739122558","timestamp":"1753210053","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"77cc39ec-5b72-5511-9140-cac30cc1f81a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.215.222.185","comment":"https://x.com/drb_ra/status/1947730271740256603","timestamp":"1753210058","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bb3d1f8e-9cdf-5c7f-b40b-482f62485dd2","type":"url","category":"Network activity","to_ids":true,"value":"http://162.215.222.185:31337","comment":"https://x.com/drb_ra/status/1947730271740256603","timestamp":"1753210058","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c021fd74-575b-57fb-930d-756d4b77197c","type":"url","category":"Network activity","to_ids":true,"value":"http://34.254.158.94:4730","comment":"https://x.com/drb_ra/status/1947730789942059382","timestamp":"1753210182","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a5087b56-aa05-53d9-bc96-cee14dffcf04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.254.158.94","comment":"https://x.com/drb_ra/status/1947730789942059382","timestamp":"1753210182","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"36d1c8fe-df45-596b-abe4-105b615516a9","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.137.205:20000","comment":"https://x.com/drb_ra/status/1947730811446268104","timestamp":"1753210187","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"464d875e-08da-57ab-9c88-26a55d291618","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.137.205:3550","comment":"https://x.com/drb_ra/status/1947730831365063106","timestamp":"1753210191","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6211f0c9-9ddb-5472-ac9d-46989ce005e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.63.137.205","comment":"https://x.com/drb_ra/status/1947730831365063106","timestamp":"1753210191","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e7ddaca7-2c34-56d3-bb98-1d7ddce2b6eb","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.151.204:1080","comment":"https://x.com/drb_ra/status/1947730852835717311","timestamp":"1753210197","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7e92d88d-3b5b-5196-95b0-3b527ccdc4d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.151.204","comment":"https://x.com/drb_ra/status/1947730852835717311","timestamp":"1753210197","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c5513b79-36df-50e1-8d5a-13d378c9d346","type":"url","category":"Network activity","to_ids":true,"value":"http://139.180.219.116:587","comment":"https://x.com/drb_ra/status/1947730874394386856","timestamp":"1753210202","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7ef65b78-2ff2-5537-9d47-93df3a4187ef","type":"url","category":"Network activity","to_ids":true,"value":"http://139.180.219.116:465","comment":"https://x.com/drb_ra/status/1947730895885996346","timestamp":"1753210207","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"abd65e92-881c-5d05-a0f3-56d7dbf49b54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.180.219.116","comment":"https://x.com/drb_ra/status/1947730918153851092","timestamp":"1753210212","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"80ee0c11-7196-527b-aaa7-d6ad36a94e55","type":"url","category":"Network activity","to_ids":true,"value":"http://139.180.219.116:25","comment":"https://x.com/drb_ra/status/1947730918153851092","timestamp":"1753210212","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a9795fa6-5828-5f53-8178-efd406cfc538","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.156.125:443","comment":"https://x.com/drb_ra/status/1947730940337201246","timestamp":"1753210217","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"828b0225-7237-5f43-ae62-c2c3c5a2f1e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.156.125","comment":"https://x.com/drb_ra/status/1947730940337201246","timestamp":"1753210217","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cc82ee67-31df-5acc-806e-5066a4856b2e","type":"url","category":"Network activity","to_ids":true,"value":"http://52.30.120.127:443","comment":"https://x.com/drb_ra/status/1947730962583846991","timestamp":"1753210223","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7f189303-7463-54af-afdd-3b5ea318086c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.30.120.127","comment":"https://x.com/drb_ra/status/1947730962583846991","timestamp":"1753210223","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2e206f81-cf80-5e0a-8d6e-457f2bb2afd4","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.3.117:443","comment":"https://x.com/drb_ra/status/1947730985308602740","timestamp":"1753210228","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2c188264-e47b-51a6-b119-97705ea4c897","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.3.117","comment":"https://x.com/drb_ra/status/1947730985308602740","timestamp":"1753210228","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5b050f04-02de-54ae-9a68-27858225a7fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.163.16","comment":"https://x.com/drb_ra/status/1947731008247218664","timestamp":"1753210234","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5ec3d72f-433c-5402-b33b-05502cf335a3","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.163.16:443","comment":"https://x.com/drb_ra/status/1947731008247218664","timestamp":"1753210234","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"50c3e83a-391a-5b09-8060-f6f6db1e0296","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.253.111.23","comment":"https://x.com/drb_ra/status/1947731032016355405","timestamp":"1753210239","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"bc207441-f0f8-58ab-a655-11ff5896de6f","type":"url","category":"Network activity","to_ids":true,"value":"http://123.253.111.23:8888","comment":"https://x.com/drb_ra/status/1947731032016355405","timestamp":"1753210239","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"f03b8581-508c-5aaf-b315-7ebf58a00783","type":"url","category":"Network activity","to_ids":true,"value":"http://103.141.50.146:995","comment":"https://x.com/drb_ra/status/1947731055328256407","timestamp":"1753210245","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d854ece0-0163-5443-ba30-1e6a4e0c9406","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.141.50.146","comment":"https://x.com/drb_ra/status/1947731055328256407","timestamp":"1753210245","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d5ab2584-e521-5729-85b7-f5961dbdda0b","type":"url","category":"Network activity","to_ids":true,"value":"http://86.126.224.214:443","comment":"https://x.com/drb_ra/status/1947731078665449955","timestamp":"1753210250","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"52ca3979-598c-51d7-bec8-b6ae43845208","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.126.224.214","comment":"https://x.com/drb_ra/status/1947731078665449955","timestamp":"1753210250","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"5cf6097e-8fdc-50ae-ad0f-f9576ed99ca6","type":"url","category":"Network activity","to_ids":true,"value":"http://65.20.82.213:443","comment":"https://x.com/drb_ra/status/1947731100022788109","timestamp":"1753210255","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ee8ee0d3-0525-5d4c-9d6f-64e7a029c386","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.20.82.213","comment":"https://x.com/drb_ra/status/1947731100022788109","timestamp":"1753210255","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"238b3020-16fc-51d4-81d5-e3b8a6d78225","type":"url","category":"Network activity","to_ids":true,"value":"http://185.250.207.163:443","comment":"https://x.com/drb_ra/status/1947731123900936276","timestamp":"1753210261","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0a5052bf-1d27-5bf3-b51d-c745a1b88ddf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.250.207.163","comment":"https://x.com/drb_ra/status/1947731123900936276","timestamp":"1753210261","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ab40beb2-d709-5c1a-98f9-590092902f1e","type":"url","category":"Network activity","to_ids":true,"value":"http://4.213.161.104:80","comment":"https://x.com/drb_ra/status/1947731145879089473","timestamp":"1753210266","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"2c10311c-b48b-5f5b-96b5-aea3481f7837","type":"url","category":"Network activity","to_ids":true,"value":"http://93.95.231.28:443","comment":"https://x.com/drb_ra/status/1947731167370707415","timestamp":"1753210272","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"284c81ef-0fd9-558d-8500-47ca6723c587","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.95.231.28","comment":"https://x.com/drb_ra/status/1947731167370707415","timestamp":"1753210272","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e384561c-c398-5794-b33e-4b2ae81e79d9","type":"url","category":"Network activity","to_ids":true,"value":"http://145.223.69.2:80","comment":"https://x.com/drb_ra/status/1947731187536908551","timestamp":"1753210276","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5408ae52-7292-5967-9f8b-d957318fa9d9","type":"url","category":"Network activity","to_ids":true,"value":"http://145.223.69.2:443","comment":"https://x.com/drb_ra/status/1947731208445571078","timestamp":"1753210281","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0149ec01-428d-57ee-851d-b8edd2bde6e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"145.223.69.2","comment":"https://x.com/drb_ra/status/1947731208445571078","timestamp":"1753210281","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"818e7ff4-408a-5ff5-8442-54d8ad680ddc","type":"url","category":"Network activity","to_ids":true,"value":"http://158.255.213.22:443","comment":"https://x.com/drb_ra/status/1947731726874136813","timestamp":"1753210405","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b68f3612-9f70-5400-9cb3-6d515fbf4809","type":"url","category":"Network activity","to_ids":true,"value":"http://158.255.213.22:63421","comment":"https://x.com/drb_ra/status/1947731747908497533","timestamp":"1753210410","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f32d53a9-4107-5324-8b13-a6f4cdc4a515","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.255.213.22","comment":"https://x.com/drb_ra/status/1947731747908497533","timestamp":"1753210410","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b00d0bd5-9853-5d06-be70-5743c0f9270b","type":"url","category":"Network activity","to_ids":true,"value":"http://217.156.123.93:2404","comment":"https://x.com/drb_ra/status/1947731767592452496","timestamp":"1753210415","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"016836e5-dc9e-5671-a947-13887b7bef23","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.156.123.93","comment":"https://x.com/drb_ra/status/1947731767592452496","timestamp":"1753210415","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9937fbf0-f8f0-57e9-95cf-9492329a4fd2","type":"url","category":"Network activity","to_ids":true,"value":"http://15.188.146.16:833","comment":"https://x.com/drb_ra/status/1947731788287381511","timestamp":"1753210420","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"47b507e2-558e-54d9-9d2e-7c2bacba45e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.188.146.16","comment":"https://x.com/drb_ra/status/1947731788287381511","timestamp":"1753210420","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2169d24e-05cf-58db-a50c-a7a92f928256","type":"url","category":"Network activity","to_ids":true,"value":"http://consmofagov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"338f68e5-cf0d-5dd1-be54-f6b170be0df7","type":"domain","category":"Network activity","to_ids":true,"value":"hec-gov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4365e4c7-1239-5be8-ae88-b661ed1110d2","type":"url","category":"Network activity","to_ids":true,"value":"http://hec-gov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4894e508-b20d-573b-910f-df13bb1e0741","type":"domain","category":"Network activity","to_ids":true,"value":"dlimsindhgov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"76c9f0e2-faad-5d57-b5de-8d83eab2a0b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.202.186.194","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9344b174-d073-5793-8716-4dc3189e7a43","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimsitp-gov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"f6e6aab9-8ab9-5cbf-8ac1-d734b504f40f","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimpunjabgov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7863545b-f0fb-5835-8b40-e01ca8e1e582","type":"domain","category":"Network activity","to_ids":true,"value":"dlimsitp-gov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1bd0109f-9e21-55a2-ba74-965d19fab846","type":"domain","category":"Network activity","to_ids":true,"value":"consmofagov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"752cb64e-9cbc-579a-8126-4c32e6e7b8a7","type":"url","category":"Network activity","to_ids":true,"value":"http://46.202.186.194","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bea67a9e-d7b5-54ef-8724-d175a5c59b50","type":"domain","category":"Network activity","to_ids":true,"value":"dlimpunjabgov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"252a5603-bd15-54f1-b925-ad222ca0d32e","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimsindhgov.com","comment":"https://x.com/skocherhan/status/1947741183654171106","timestamp":"1753212660","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ea6696d5-b709-5f14-830e-077165eb4642","type":"url","category":"Network activity","to_ids":true,"value":"http://dlims-sindh.com","comment":"https://x.com/skocherhan/status/1947741251328974972","timestamp":"1753212676","distribution":"5"},{"uuid":"650286ac-6357-5f40-91db-7f50580de14d","type":"domain","category":"Network activity","to_ids":true,"value":"dlims-sindh.com","comment":"https://x.com/skocherhan/status/1947741251328974972","timestamp":"1753212676","distribution":"5"},{"uuid":"abd262d9-50d2-519c-8943-169cd52a4fb2","type":"domain","category":"Network activity","to_ids":true,"value":"dlims-ctp.com","comment":"https://x.com/skocherhan/status/1947741251328974972","timestamp":"1753212676","distribution":"5"},{"uuid":"7b2c5ce2-2e15-51a4-a48f-fe6cdb94d278","type":"url","category":"Network activity","to_ids":true,"value":"http://dlims-ctp.com","comment":"https://x.com/skocherhan/status/1947741251328974972","timestamp":"1753212676","distribution":"5"},{"uuid":"81b879db-7082-5596-a4ea-fb14cb58afa8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.224.34.90","comment":"https://x.com/drb_ra/status/1947741915522187272","timestamp":"1753212834","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e62f38de-41c1-5042-a84f-c8b5503fe01f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.224.34.90:443","comment":"https://x.com/drb_ra/status/1947741915522187272","timestamp":"1753212834","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"acbd2826-4c41-51b9-a33d-dea01adf0255","type":"url","category":"Network activity","to_ids":true,"value":"https://www.goodle.cyou/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1947741915522187272","timestamp":"1753212834","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c163b777-a611-5d4b-a4b9-85d63e0942a2","type":"domain","category":"Network activity","to_ids":true,"value":"goodle.cyou","comment":"https://x.com/drb_ra/status/1947741915522187272","timestamp":"1753212834","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4ee9d7bb-8964-563b-a798-947bb4a0f4da","type":"domain","category":"Network activity","to_ids":true,"value":"harish-1-bit.github.io","comment":"https://x.com/urldna_bot/status/1947748510167663010","timestamp":"1753214406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"eb36e2ba-bab0-5286-84d2-9338f310e20c","type":"url","category":"Network activity","to_ids":true,"value":"https://harish-1-bit.github.io/Insta-Login/","comment":"https://x.com/urldna_bot/status/1947748510167663010","timestamp":"1753214406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"87df26d7-4b69-5d4a-84fa-706405c71e8c","type":"url","category":"Network activity","to_ids":true,"value":"http://161.97.149.235:587","comment":"https://x.com/drb_ra/status/1947753565654581628","timestamp":"1753215612","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"158b02df-31c0-5a53-bbca-ee37e34e9c01","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.97.149.235","comment":"https://x.com/drb_ra/status/1947753565654581628","timestamp":"1753215612","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e99eb16a-4a4e-53c9-bcff-b50ae19db71a","type":"url","category":"Network activity","to_ids":true,"value":"https://161.97.149.235:587","comment":"https://x.com/drb_ra/status/1947753565654581628","timestamp":"1753215612","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2611ac21-fe51-5da9-8bc7-816d9fbd4f16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.48.100","comment":"https://x.com/drb_ra/status/1947753587045446024","timestamp":"1753215617","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"961e8ad6-ee2a-5bef-974f-ccb757b43196","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.48.100:8443","comment":"https://x.com/drb_ra/status/1947753587045446024","timestamp":"1753215617","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d672e018-bea1-5786-83ba-9185c5564ba0","type":"url","category":"Network activity","to_ids":true,"value":"https://47.120.48.100:8443","comment":"https://x.com/drb_ra/status/1947753587045446024","timestamp":"1753215617","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f6c451d1-5639-5f74-b097-7c429c269a70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"199.59.243.160","comment":"https://x.com/1ZRR4H/status/1947753827848872301","timestamp":"1753215674","distribution":"5"},{"uuid":"109eccc5-8ce7-5a88-8be9-40161f30f266","type":"url","category":"Network activity","to_ids":true,"value":"http://199.59.243.160","comment":"https://x.com/1ZRR4H/status/1947753827848872301","timestamp":"1753215674","distribution":"5"},{"uuid":"c9773551-6f21-50af-8965-2fa027c31bbe","type":"url","category":"Network activity","to_ids":true,"value":"http://106.14.1.192","comment":"https://x.com/threatquery/status/1947763594680062020","timestamp":"1753218003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"ca385ea7-52f3-5290-b84b-87b6889b5d55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.14.1.192","comment":"https://x.com/threatquery/status/1947763594680062020","timestamp":"1753218003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"894cd41f-5396-5a2b-8614-77ab857daeb2","type":"url","category":"Network activity","to_ids":true,"value":"http://103.59.160.219","comment":"https://x.com/threatquery/status/1947763598375149993","timestamp":"1753218004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4060b699-adec-54bc-9825-0150b47079a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.59.160.219","comment":"https://x.com/threatquery/status/1947763598375149993","timestamp":"1753218004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4aa9b3f1-98c4-5513-8601-28117a9dc49b","type":"domain","category":"Network activity","to_ids":true,"value":"boylmc.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b4d8f91e-bb06-54c0-b73e-a3d82b757d1e","type":"url","category":"Network activity","to_ids":true,"value":"http://boylmc.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3f1ad7cd-3540-5616-9b3a-24c84e7a41a4","type":"domain","category":"Network activity","to_ids":true,"value":"brotsjom.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6acc6d12-1e6e-5096-91e2-b1708bfdad89","type":"url","category":"Network activity","to_ids":true,"value":"http://brotsjom.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e189a4f0-21be-5799-8489-67a6db48266f","type":"domain","category":"Network activity","to_ids":true,"value":"bumpegq.lol","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"28daccb1-26b2-589f-883b-127a781db165","type":"domain","category":"Network activity","to_ids":true,"value":"calioons.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"742ff16b-2136-5010-810a-9c4441812cef","type":"domain","category":"Network activity","to_ids":true,"value":"callxgcs.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"79b2a2d5-4a4d-5929-9202-337782fe1edc","type":"url","category":"Network activity","to_ids":true,"value":"http://callxgcs.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3b79686d-066f-52bc-a963-0a98e20058ea","type":"domain","category":"Network activity","to_ids":true,"value":"carptrvo.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"26de3f02-50aa-50f4-b552-6d26250353b5","type":"url","category":"Network activity","to_ids":true,"value":"http://carptrvo.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"95e857dd-0370-5ad8-bffd-ac4b111f2f82","type":"domain","category":"Network activity","to_ids":true,"value":"castdyt.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9505e88e-4e8c-5896-8867-0e96bae85c87","type":"url","category":"Network activity","to_ids":true,"value":"http://castdyt.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"baa88518-7d2b-5780-8596-d28610fbcadb","type":"url","category":"Network activity","to_ids":true,"value":"http://bornim.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8b18e8eb-6e63-5330-bdf7-afd8411d71a2","type":"url","category":"Network activity","to_ids":true,"value":"http://calioons.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ed5a868f-0689-5a92-bab9-fbc1b07bb8ef","type":"domain","category":"Network activity","to_ids":true,"value":"bornim.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"41a51832-6ecb-55d0-a5c9-dbbda2bd467f","type":"url","category":"Network activity","to_ids":true,"value":"http://bumpegq.lol","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e69aca95-1b09-5570-8e25-ef7bea257546","type":"domain","category":"Network activity","to_ids":true,"value":"blastodx.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8a37fc21-8bb8-5bcc-9de0-85cb72dffc07","type":"domain","category":"Network activity","to_ids":true,"value":"acetjjxl.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"93fd2433-e895-5a01-9f1b-20794268a67d","type":"url","category":"Network activity","to_ids":true,"value":"http://blastodx.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c77c97b2-89ec-52e8-8356-bcbe5046e2ff","type":"url","category":"Network activity","to_ids":true,"value":"http://agrevpud.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4605f03c-0c32-5d13-9d75-02b10d68b0de","type":"domain","category":"Network activity","to_ids":true,"value":"allosno.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d1a32c1b-a6b6-50cd-90ae-ef5026ce8d38","type":"url","category":"Network activity","to_ids":true,"value":"http://acetjjxl.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c18a95ca-b729-5ea7-bdce-61483f533a4a","type":"domain","category":"Network activity","to_ids":true,"value":"angucccg.lat","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"193f4cf8-a2de-5189-9ab8-ba3605264b43","type":"url","category":"Network activity","to_ids":true,"value":"http://angucccg.lat","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"57d56473-230d-5f8c-a529-752264fac5e5","type":"domain","category":"Network activity","to_ids":true,"value":"antibigi.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0f5d8fd9-4a51-5d82-9f0d-98ae8678cb7b","type":"url","category":"Network activity","to_ids":true,"value":"http://allosno.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ce11ee66-1e02-580e-9957-1c264f7bb4c7","type":"domain","category":"Network activity","to_ids":true,"value":"arraeyg.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"610849d5-1436-5d12-a6d1-43d4d2a1b07d","type":"url","category":"Network activity","to_ids":true,"value":"http://autotnyx.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"32fc2adf-6436-58bb-8760-e0860476ab15","type":"domain","category":"Network activity","to_ids":true,"value":"autotnyx.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6fc1c966-effc-56cf-a7d1-396e11f0fdc9","type":"url","category":"Network activity","to_ids":true,"value":"http://antibigi.pics","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"14084e46-26ce-5460-a2f6-c50779ae63c4","type":"url","category":"Network activity","to_ids":true,"value":"http://assalafuz.lat","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"acb06873-6bed-5324-8345-98537b2e272b","type":"domain","category":"Network activity","to_ids":true,"value":"agrevpud.shop","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2c020417-51ff-5450-8f57-dd75118707be","type":"url","category":"Network activity","to_ids":true,"value":"http://artifizz.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"46448aa7-5127-5f3c-bfb3-6339299df161","type":"domain","category":"Network activity","to_ids":true,"value":"artifizz.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"58d9c170-cbaf-5893-8c39-08e5344f3544","type":"url","category":"Network activity","to_ids":true,"value":"http://arraeyg.top","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"479a785e-cdae-5d48-a5d4-554690632e0d","type":"domain","category":"Network activity","to_ids":true,"value":"assalafuz.lat","comment":"https://x.com/skocherhan/status/1947767961051136252","timestamp":"1753219044","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9552f15b-576b-5c62-863f-c84de4d8c024","type":"url","category":"Network activity","to_ids":true,"value":"https://60.205.165.173/g.pixel","comment":"https://x.com/drb_ra/status/1947775350945063052","timestamp":"1753220806","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b855835d-1508-5836-a1ee-1ed46b393a46","type":"url","category":"Network activity","to_ids":true,"value":"http://60.205.165.173:443","comment":"https://x.com/drb_ra/status/1947775350945063052","timestamp":"1753220806","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0779b783-b1e5-59e3-a5d7-f7b5583047ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.205.165.173","comment":"https://x.com/drb_ra/status/1947775350945063052","timestamp":"1753220806","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2539031a-41a5-556b-bf11-3192a3fee59d","type":"url","category":"Network activity","to_ids":true,"value":"https://107.149.192.54/siie=utf-8&f=8&rsv_bp=1&rsv_idx=1&ch=&tn=baidu&bar=&wd=","comment":"https://x.com/drb_ra/status/1947775373522977254","timestamp":"1753220811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"653e8d7f-cac5-5b24-8311-f75570927bff","type":"url","category":"Network activity","to_ids":true,"value":"http://107.149.192.54:8080","comment":"https://x.com/drb_ra/status/1947775373522977254","timestamp":"1753220811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6db829fc-6933-5b8b-b447-9e1c63f2d357","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.149.192.54","comment":"https://x.com/drb_ra/status/1947775373522977254","timestamp":"1753220811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d9ee0fcf-9a40-586a-a700-8344d32342b3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.93.28.105:8080","comment":"https://x.com/drb_ra/status/1947775395715031481","timestamp":"1753220816","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"68e8b1c8-c0e7-51f7-a7cc-f91cd3558038","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.93.28.105","comment":"https://x.com/drb_ra/status/1947775395715031481","timestamp":"1753220816","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"704f6457-158e-5d55-a431-e290258c002e","type":"url","category":"Network activity","to_ids":true,"value":"http://8.133.251.169:7878","comment":"https://x.com/drb_ra/status/1947775417034936358","timestamp":"1753220821","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ac773704-5347-51fd-8f6f-3b681519c967","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.87.213.227","comment":"https://x.com/skocherhan/status/1947776965139906956","timestamp":"1753221191","distribution":"5"},{"uuid":"40bf2169-a079-56eb-b4c9-156b598f969e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.2.79.164","comment":"https://x.com/skocherhan/status/1947776965139906956","timestamp":"1753221191","distribution":"5"},{"uuid":"6b1e6f04-fe64-51b4-b94f-44ea1e9710ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.56.114","comment":"https://x.com/skocherhan/status/1947776965139906956","timestamp":"1753221191","distribution":"5"},{"uuid":"257657c2-f0c4-598e-ba15-e5a6c40ebb2c","type":"url","category":"Network activity","to_ids":true,"value":"https://ipfs.io/ipfs/bafybeiefmweopcohbweuohh3qm2qatgwng5ndw5iatjlpuguakrzy2db6m/finallybacknone.html","comment":"https://x.com/urldna_bot/status/1947778705415115023","timestamp":"1753221606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"35de01cf-244f-5fff-8117-6383af77d495","type":"url","category":"Network activity","to_ids":true,"value":"http://download.microsoftwindows.biz","comment":"https://x.com/skocherhan/status/1947783068301070510","timestamp":"1753222646","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6fdf3e80-25d7-555c-a7fb-70be928ebe2c","type":"domain","category":"Network activity","to_ids":true,"value":"download.microsoftwindows.biz.","comment":"https://x.com/skocherhan/status/1947783068301070510","timestamp":"1753222646","distribution":"5"},{"uuid":"cf888bd6-d783-59b2-b7d1-c3dc6fe8cf61","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-ensify.cnyvxb.cn","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"888a8aa0-d011-5491-8e4d-d065ef6cd196","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-ensify.cnyvxb.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"434cb4d4-ad6b-5607-9410-dbfb563ee999","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-calofy.ddiqlu.cn","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31b9a011-3a75-5a28-9a79-9556265d2d8d","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-butety.mnmtip.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"523afb08-bd05-51bd-8776-cdd4af8a0132","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-butety.mnmtip.cn","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99c8b8bf-6a6f-5aa5-9734-3ca387d33884","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-calofy.ddiqlu.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1947784026313658439","timestamp":"1753222874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"665af83a-71f7-5261-a2f9-6cd23c8bc8ca","type":"domain","category":"Network activity","to_ids":true,"value":"kefel.tech","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"00abe6fd-79d9-51ec-99ea-53fa1fdf7175","type":"url","category":"Network activity","to_ids":true,"value":"http://kefel.tech","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"1f7efce1-648a-5159-b523-c28a3e8274c7","type":"url","category":"Network activity","to_ids":true,"value":"http://185.234.247.20","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"6095ba6f-2813-5998-a863-fb6278be8319","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.133.216.15","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"0b3bef25-bc65-54a4-bf41-71f664510777","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.234.247.20","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"fcf05664-52b1-57d5-9d8f-bf18bc21f01f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.133.216.15","comment":"https://x.com/skocherhan/status/1947784227724136559","timestamp":"1753222922","distribution":"5"},{"uuid":"456a80ad-6d73-5ae0-9a63-17f12745b791","type":"url","category":"Network activity","to_ids":true,"value":"http://43.250.173.179","comment":"https://x.com/skocherhan/status/1947785471381197081","timestamp":"1753223219","distribution":"5"},{"uuid":"1ad4a550-a1a8-558b-8fba-32c0c856747c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.250.173.179","comment":"https://x.com/skocherhan/status/1947785471381197081","timestamp":"1753223219","distribution":"5"},{"uuid":"efe92344-0cc1-5c7f-9c4e-05632cff310c","type":"domain","category":"Network activity","to_ids":true,"value":"somosvirutex.cl","comment":"https://x.com/1ZRR4H/status/1947793019668754810","timestamp":"1753225018","distribution":"5"},{"uuid":"cd20dfc9-23ca-5ac3-a1b5-d4b280f65ada","type":"url","category":"Network activity","to_ids":true,"value":"http://somosvirutex.cl","comment":"https://x.com/1ZRR4H/status/1947793019668754810","timestamp":"1753225018","distribution":"5"},{"uuid":"abb58814-0ba0-572a-8148-285421d4d617","type":"domain","category":"Network activity","to_ids":true,"value":"welcometouhcglobal.com","comment":"https://x.com/urldna_bot/status/1947808922829562065","timestamp":"1753228810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cdd7fb53-38e6-52f1-9766-0baea77921ea","type":"url","category":"Network activity","to_ids":true,"value":"https://welcometouhcglobal.com","comment":"https://x.com/urldna_bot/status/1947808922829562065","timestamp":"1753228810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7c049961-0a9e-50ba-b544-489ef941f73d","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.164:8595","comment":"https://x.com/SarlackLab/status/1947815235546386625","timestamp":"1753230315","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ba6badd7-fe21-529c-9333-306fa8636dba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.164","comment":"https://x.com/SarlackLab/status/1947815235546386625","timestamp":"1753230315","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4bea6c74-ddea-5a09-bd41-195a5aadb205","type":"url","category":"Network activity","to_ids":true,"value":"http://103.59.160.219:1912","comment":"https://x.com/SarlackLab/status/1947815377112596976","timestamp":"1753230349","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"4060b699-adec-54bc-9825-0150b47079a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.59.160.219","comment":"https://x.com/SarlackLab/status/1947815377112596976","timestamp":"1753230349","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"d9e0bcbf-d052-5a8f-bd0a-4df1acbb0ff3","type":"url","category":"Network activity","to_ids":true,"value":"http://209.54.102.152:1912","comment":"https://x.com/SarlackLab/status/1947815514291491165","timestamp":"1753230381","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"fc08df7b-08a6-51ce-bde7-a01f2de3a3a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.54.102.152","comment":"https://x.com/SarlackLab/status/1947815514291491165","timestamp":"1753230381","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"55e8f799-aae0-5aad-bb1f-0cb27c3f1b0b","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.222.249:1912","comment":"https://x.com/SarlackLab/status/1947815587251376308","timestamp":"1753230399","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"ec30d236-105a-54f4-a414-9f68be00b015","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.222.249","comment":"https://x.com/SarlackLab/status/1947815587251376308","timestamp":"1753230399","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"9cd4fc8d-5083-5875-92b1-aaf96fe82c20","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.250.188.181","comment":"https://x.com/SarlackLab/status/1947816063099416631","timestamp":"1753230512","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"54a9d6cf-2b6c-50ff-93f4-a2e651b839af","type":"url","category":"Network activity","to_ids":true,"value":"http://178.250.188.181:1912","comment":"https://x.com/SarlackLab/status/1947816063099416631","timestamp":"1753230512","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"4abce769-6a22-5780-96fa-1fee8dfc4b94","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.210.199","comment":"https://x.com/catnap707/status/1947824615151309087","timestamp":"1753232551","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a2f37606-a36a-5659-bdda-3349816339cf","type":"url","category":"Network activity","to_ids":true,"value":"http://shinkansen2-health.bezmrh.cn/RSV_P/smart_index.htm/","comment":"https://x.com/catnap707/status/1947824615151309087","timestamp":"1753232551","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9ac52db-3c27-5e15-8cbd-bc54f47649d6","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-health.bezmrh.cn","comment":"https://x.com/catnap707/status/1947824615151309087","timestamp":"1753232551","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5af83d92-8d44-55dc-b1f5-7ac8d5ba8cd7","type":"domain","category":"Network activity","to_ids":true,"value":"e.bitly.com%E2%88%95DdWVwsL%E2%88%95cNPQE%E2%88%95cttYHJk@xiazhou.me","comment":"https://x.com/romonlyht/status/1947830878455079052","timestamp":"1753234045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6539e01-ed15-5def-8a92-0270987b5dd6","type":"url","category":"Network activity","to_ids":true,"value":"https://e.bitly.com%E2%88%95DdWVwsL%E2%88%95cNPQE%E2%88%95cttYHJk@xiazhou.me/taqcago?dxr","comment":"https://x.com/romonlyht/status/1947830878455079052","timestamp":"1753234045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d426eb8-d815-5bdd-bef3-72165b803df1","type":"domain","category":"Network activity","to_ids":true,"value":"xiazhou.me","comment":"https://x.com/romonlyht/status/1947830878455079052","timestamp":"1753234045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3905dae-8374-5724-9c8b-b2cebdde448b","type":"url","category":"Network activity","to_ids":true,"value":"http://xiazhou.me/taqcago?dxr","comment":"https://x.com/romonlyht/status/1947830878455079052","timestamp":"1753234045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db112749-3d7e-5630-a525-1424cced966a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.237.75.255","comment":"https://x.com/romonlyht/status/1947830878455079052","timestamp":"1753234045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d1eaa00-604e-5993-a729-c5c6ab6d42fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.245.136.90","comment":"https://x.com/romonlyht/status/1947832739216167172","timestamp":"1753234488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6cd3149a-3263-5dc6-ac8c-85cf3b5acb91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.122.120.21","comment":"https://x.com/romonlyht/status/1947832739216167172","timestamp":"1753234488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3c719f1-b38b-5eb6-a003-ed31c5189e2d","type":"url","category":"Network activity","to_ids":true,"value":"https://sekyuri.kurikotb.sbs/net/vwc/","comment":"https://x.com/romonlyht/status/1947832739216167172","timestamp":"1753234488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03f21087-f4a2-5e03-bfa3-d9ba5b3c7063","type":"url","category":"Network activity","to_ids":true,"value":"https://sekyuri.kurikotb.sbs/net/vwc","comment":"https://x.com/romonlyht/status/1947832739216167172","timestamp":"1753234488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9b31085-d1a8-57ca-94fd-3a81b4850509","type":"domain","category":"Network activity","to_ids":true,"value":"sekyuri.kurikotb.sbs","comment":"https://x.com/romonlyht/status/1947832739216167172","timestamp":"1753234488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c00099f-73bb-5ca6-9acd-c08d5ef92051","type":"url","category":"Network activity","to_ids":true,"value":"http://mjtt.me/unwqma?gjttv=wwtbwylp","comment":"https://x.com/romonlyht/status/1947834652712169981","timestamp":"1753234944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eee60726-f44e-5428-82d4-8c81dd9cca0c","type":"domain","category":"Network activity","to_ids":true,"value":"mjtt.me","comment":"https://x.com/romonlyht/status/1947834652712169981","timestamp":"1753234944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a016144c-cf26-57de-a37b-6190a790bc58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.245.140.13","comment":"https://x.com/romonlyht/status/1947834652712169981","timestamp":"1753234944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"144d8474-88b6-54a3-ba55-c5514fe3aea3","type":"domain","category":"Network activity","to_ids":true,"value":"uccard.co.jp%E2%88%95IwuSUhi%E2%88%95koGytqfBv%E2%88%95fMFoscBM@mjtt.me","comment":"https://x.com/romonlyht/status/1947834652712169981","timestamp":"1753234944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a43f1bf-1521-50fa-b1b9-66117a17c6ec","type":"url","category":"Network activity","to_ids":true,"value":"https://uccard.co.jp%E2%88%95IwuSUhi%E2%88%95koGytqfBv%E2%88%95fMFoscBM@mjtt.me/unwqma?gjttv=wwtbwylp","comment":"https://x.com/romonlyht/status/1947834652712169981","timestamp":"1753234944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b37b5d7c-9119-5c80-ae46-846b645322f1","type":"domain","category":"Network activity","to_ids":true,"value":"asopndasj.icu","comment":"https://x.com/romonlyht/status/1947834654649946624","timestamp":"1753234945","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06103805-94cf-56a3-83f7-245d1f4685f6","type":"url","category":"Network activity","to_ids":true,"value":"https://asopndasj.icu/9sAA897an/","comment":"https://x.com/romonlyht/status/1947834654649946624","timestamp":"1753234945","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b97c6fea-28c6-57d8-a949-70887ddac3a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.16.54.74","comment":"https://x.com/romonlyht/status/1947834654649946624","timestamp":"1753234945","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7a00b95-a62f-5b8a-85ac-a6b5a936ef83","type":"url","category":"Network activity","to_ids":true,"value":"https://bg9pxa.top/W0lBfYXZ/","comment":"https://x.com/romonlyht/status/1947837369115414599","timestamp":"1753235592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6a7027f-3415-562d-bc87-6487b37f6dc3","type":"url","category":"Network activity","to_ids":true,"value":"https://bg9pxa.top/W0lBfYXZ","comment":"https://x.com/romonlyht/status/1947837369115414599","timestamp":"1753235592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31f84d61-2933-52aa-9972-f75ea54e09bd","type":"domain","category":"Network activity","to_ids":true,"value":"bg9pxa.top","comment":"https://x.com/romonlyht/status/1947837369115414599","timestamp":"1753235592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"372a5056-d404-52bf-a327-4290ffcb8160","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.26.249.89","comment":"https://x.com/romonlyht/status/1947837369115414599","timestamp":"1753235592","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f241c5d9-b06c-52f7-910b-980d55f35e26","type":"domain","category":"Network activity","to_ids":true,"value":"2tjakk.top","comment":"https://x.com/romonlyht/status/1947837583570178280","timestamp":"1753235643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2a69071-47ba-575d-b00f-b69a7d796ab5","type":"url","category":"Network activity","to_ids":true,"value":"https://2tjakk.top/W0lBfYXZ","comment":"https://x.com/romonlyht/status/1947837583570178280","timestamp":"1753235643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"abbe6efb-d2e0-5d13-a6c4-bb8e7d429c34","type":"url","category":"Network activity","to_ids":true,"value":"https://2tjakk.top/W0lBfYXZ/","comment":"https://x.com/romonlyht/status/1947837583570178280","timestamp":"1753235643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c0333a8c-324a-5eb1-9124-0ffc03a0f591","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.4.122.252","comment":"https://x.com/romonlyht/status/1947837583570178280","timestamp":"1753235643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d56a0d00-9cba-5758-a20f-4231675c7d94","type":"url","category":"Network activity","to_ids":true,"value":"https://zuwmbztn.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1947839109151568182","timestamp":"1753236007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"40a4de57-04cd-5dae-9a35-313820976c7e","type":"domain","category":"Network activity","to_ids":true,"value":"zuwmbztn.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1947839109151568182","timestamp":"1753236007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"10e10366-f376-5eb2-aa44-650c116d7494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.22.94.114","comment":"https://x.com/romonlyht/status/1947839247337328933","timestamp":"1753236040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55821046-f8e3-5ff1-8449-1e06572e2944","type":"url","category":"Network activity","to_ids":true,"value":"http://sunexpress.cc/cofwtlofrr?itudky=wjdxuhvibn","comment":"https://x.com/romonlyht/status/1947839247337328933","timestamp":"1753236040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2740dc07-2f25-5f52-b6dc-a22e99def025","type":"url","category":"Network activity","to_ids":true,"value":"https://amaisuika.com%E2%88%95yfpjP%E2%88%95qDJWG%E2%88%95sXoKi@sunexpress.cc/cofwtlofrr?itudky=wjdxuhvibn","comment":"https://x.com/romonlyht/status/1947839247337328933","timestamp":"1753236040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cffefe90-3dde-541a-abdc-7d5fc5e8c66a","type":"domain","category":"Network activity","to_ids":true,"value":"sunexpress.cc","comment":"https://x.com/romonlyht/status/1947839247337328933","timestamp":"1753236040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88f21eed-546e-5994-9520-dc8dc85cd7d8","type":"domain","category":"Network activity","to_ids":true,"value":"amaisuika.com%E2%88%95yfpjP%E2%88%95qDJWG%E2%88%95sXoKi@sunexpress.cc","comment":"https://x.com/romonlyht/status/1947839247337328933","timestamp":"1753236040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f948f441-368e-584e-8079-232279d13190","type":"domain","category":"Network activity","to_ids":true,"value":"co-sblsec-jp.bcxve.com","comment":"https://x.com/romonlyht/status/1947841023306305969","timestamp":"1753236463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"893769c4-8c6a-5f6f-acfa-43456fdfe42f","type":"url","category":"Network activity","to_ids":true,"value":"https://co-sblsec-jp.bcxve.com/yfNRdb/","comment":"https://x.com/romonlyht/status/1947841023306305969","timestamp":"1753236463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"accd935c-083d-5260-9953-0a3209a497af","type":"url","category":"Network activity","to_ids":true,"value":"https://co-sblsec-jp.bcxve.com/yfNRdb","comment":"https://x.com/romonlyht/status/1947841020403880410","timestamp":"1753236463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67d9e99c-6828-5d10-9e6b-e1e2d762c965","type":"url","category":"Network activity","to_ids":true,"value":"https://co-sblsec-jp.bcxve.com/v1/check","comment":"https://x.com/romonlyht/status/1947841020403880410","timestamp":"1753236463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00b9640d-64cb-5518-9bfb-40f53b3f2de3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.248.30.245","comment":"https://x.com/romonlyht/status/1947841020403880410","timestamp":"1753236463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64702d66-2e2b-522d-94a1-42714e4e88d4","type":"url","category":"Network activity","to_ids":true,"value":"http://ndvue-m58x.pokejunct.workers.dev/H20uYhXyW/HMdt9g/3JxNJyviBF/MLgIz4DsF8PwiZ2z351mAX3jWGj1h78lJ904OdRc","comment":"https://x.com/romonlyht/status/1947844446181331441","timestamp":"1753237279","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f090790-7044-5fbb-9e75-61cd6e783719","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.29.212.208","comment":"https://x.com/romonlyht/status/1947844446181331441","timestamp":"1753237279","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a6fa982-538d-586a-917a-c37d54aecd50","type":"domain","category":"Network activity","to_ids":true,"value":"ndvue-m58x.pokejunct.workers.dev","comment":"https://x.com/romonlyht/status/1947844446181331441","timestamp":"1753237279","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cbe808f6-4a60-5e79-ae40-23c2b26d4cea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.201.31","comment":"https://x.com/romonlyht/status/1947844450790871113","timestamp":"1753237280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3044b941-1189-5aae-9241-41e37a4c271c","type":"url","category":"Network activity","to_ids":true,"value":"https://l5tps6.top/sbeni3s/","comment":"https://x.com/romonlyht/status/1947844450790871113","timestamp":"1753237280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0519400-98f3-5ba6-a699-c856d35fdbd0","type":"url","category":"Network activity","to_ids":true,"value":"https://l5tps6.top/sbeni3s","comment":"https://x.com/romonlyht/status/1947844450790871113","timestamp":"1753237280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5574cbf-c95d-5bc8-9a31-691a762fcbf4","type":"domain","category":"Network activity","to_ids":true,"value":"l5tps6.top","comment":"https://x.com/romonlyht/status/1947844450790871113","timestamp":"1753237280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ef01ad3-8cc2-5e7e-882a-c1eb3d4f7f61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.60.38.112","comment":"https://x.com/romonlyht/status/1947852164233334801","timestamp":"1753239119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9fa4bda9-c856-5e8f-9aa3-569548d83ccc","type":"domain","category":"Network activity","to_ids":true,"value":"myidloud-storeco.shop","comment":"https://x.com/romonlyht/status/1947852164233334801","timestamp":"1753239119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0db2dec-7c91-5bce-ad32-692be5f12404","type":"url","category":"Network activity","to_ids":true,"value":"https://myidloud-storeco.shop/aplog","comment":"https://x.com/romonlyht/status/1947852164233334801","timestamp":"1753239119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e8dce53-5a21-5336-a49f-3c3b286cf7cc","type":"url","category":"Network activity","to_ids":true,"value":"https://myidloud-storeco.shop/aplog/","comment":"https://x.com/romonlyht/status/1947852164233334801","timestamp":"1753239119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af2868a5-3f9b-53a9-b20d-7d282708eec1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.134","comment":"https://x.com/romonlyht/status/1947852164233334801","timestamp":"1753239119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38de4dfb-b1f7-5be3-8397-cb0ad6827798","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.211.41.36","comment":"https://x.com/romonlyht/status/1947852413689598402","timestamp":"1753239179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"653d0e3c-1398-5207-9ac5-86904e1ce35f","type":"url","category":"Network activity","to_ids":true,"value":"https://frpls.cn/iCloud/","comment":"https://x.com/romonlyht/status/1947852413689598402","timestamp":"1753239179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4083eca2-cf7c-5f87-ae62-d51739db2062","type":"domain","category":"Network activity","to_ids":true,"value":"frpls.cn","comment":"https://x.com/romonlyht/status/1947852413689598402","timestamp":"1753239179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"258d7cc1-5c8f-5e2d-84bf-f59e97ba4758","type":"url","category":"Network activity","to_ids":true,"value":"https://frpls.cn/iCloud","comment":"https://x.com/romonlyht/status/1947852413689598402","timestamp":"1753239179","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8525a2d-fb33-5641-9e3e-146b1c1aecdd","type":"domain","category":"Network activity","to_ids":true,"value":"sdww5631.shop","comment":"https://x.com/romonlyht/status/1947852597446250954","timestamp":"1753239223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1bca12a-4859-5371-9388-4f484c33e467","type":"url","category":"Network activity","to_ids":true,"value":"https://sdww5631.shop/aplog","comment":"https://x.com/romonlyht/status/1947852597446250954","timestamp":"1753239223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5b7f15e8-466c-5ea0-ab8c-6625ee9f2f18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.129.190","comment":"https://x.com/romonlyht/status/1947852597446250954","timestamp":"1753239223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93de16cc-6496-5ef3-b885-d8136c3f7b4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.179.179","comment":"https://x.com/romonlyht/status/1947852858701058204","timestamp":"1753239285","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"10cc0a7a-1c49-5f6a-9d0e-047224184f73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.235.95.241","comment":"https://x.com/romonlyht/status/1947852858701058204","timestamp":"1753239285","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15d63ad3-cc4e-513a-a412-0fc1412aeb52","type":"url","category":"Network activity","to_ids":true,"value":"https://orkem.cn/iCloud","comment":"https://x.com/romonlyht/status/1947852858701058204","timestamp":"1753239285","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f5cdb4e-c33d-53ba-b146-e5cb8d5187bd","type":"domain","category":"Network activity","to_ids":true,"value":"orkem.cn","comment":"https://x.com/romonlyht/status/1947852858701058204","timestamp":"1753239285","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84888875-29e4-5112-8ca9-c0d780b7689a","type":"url","category":"Network activity","to_ids":true,"value":"https://orkem.cn/iCloud/","comment":"https://x.com/romonlyht/status/1947852858701058204","timestamp":"1753239285","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ded02e1a-3555-5700-8fed-f7901a9bbd0f","type":"url","category":"Network activity","to_ids":true,"value":"https://dfdr325.shop/aplog","comment":"https://x.com/romonlyht/status/1947853036178616497","timestamp":"1753239327","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb0b6d29-2d85-506f-8bfc-b76173a48391","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.129.161","comment":"https://x.com/romonlyht/status/1947853036178616497","timestamp":"1753239327","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb7d6026-e661-5194-a49b-7867dd6b967f","type":"domain","category":"Network activity","to_ids":true,"value":"dfdr325.shop","comment":"https://x.com/romonlyht/status/1947853036178616497","timestamp":"1753239327","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b804215-3612-5b95-aa05-e3420aaf8c54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.247.166.195","comment":"https://x.com/romonlyht/status/1947853433438147010","timestamp":"1753239422","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44cc0dc4-3ae0-5587-8feb-b15e6d675c58","type":"domain","category":"Network activity","to_ids":true,"value":"i74lj.shop","comment":"https://x.com/romonlyht/status/1947853436046970890","timestamp":"1753239423","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"540f2870-00da-529e-92e1-4ef5b3bc5d4f","type":"url","category":"Network activity","to_ids":true,"value":"http://i74lj.shop/ms6.megaegg.ne.jp","comment":"https://x.com/romonlyht/status/1947853436046970890","timestamp":"1753239423","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d594262a-9cc7-5ef4-b60c-f9316f79c2f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.233.201.42","comment":"https://x.com/romonlyht/status/1947853869276664264","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b3b81e8-7a85-5574-af03-fb708d084aad","type":"url","category":"Network activity","to_ids":true,"value":"https://id-ltunes-com.odljwjdsjnasdcs.today/?asvefadfqwq","comment":"https://x.com/romonlyht/status/1947853871138935118","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f35e712-ceda-5f7f-8967-ab3c006d4899","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.60.163.199","comment":"https://x.com/romonlyht/status/1947853871138935118","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b5c08aa3-b121-5801-9040-1f40beade652","type":"domain","category":"Network activity","to_ids":true,"value":"ecoplantworld.com","comment":"https://x.com/romonlyht/status/1947853869276664264","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"beb98b46-9bdc-546e-af0f-fe361d844e74","type":"url","category":"Network activity","to_ids":true,"value":"https://ecoplantworld.com/penawaran-spesial?key=aaaa@example.jp?userid=O2wyNBnq","comment":"https://x.com/romonlyht/status/1947853869276664264","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"61f52759-3c7d-564c-a187-655747c0837a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"96.62.214.32","comment":"https://x.com/romonlyht/status/1947853869276664264","timestamp":"1753239526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ed4be45-3b35-5948-8a89-7bbfbdba9a46","type":"url","category":"Network activity","to_ids":true,"value":"https://id-ltunes-com.odljwjdsjnasdcs.today/sign-in/mb/index.php?0&openid.return_to=cyiIhjzyKS0vIva1o3RQcmMbPeJ9lxClWdrwxXAwp7A2DFbdiyq4TD1X9d96QASmM62n5Y","comment":"https://x.com/romonlyht/status/1947853873068335329","timestamp":"1753239527","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f902c751-6d08-5aee-be19-0796c3d1bb63","type":"domain","category":"Network activity","to_ids":true,"value":"id-ltunes-com.odljwjdsjnasdcs.today","comment":"https://x.com/romonlyht/status/1947853873068335329","timestamp":"1753239527","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2332764d-c749-5ebd-9a63-2655d582b9fd","type":"url","category":"Network activity","to_ids":true,"value":"http://erwawa.me/mylstxty?fajiy","comment":"https://x.com/romonlyht/status/1947855086010699858","timestamp":"1753239816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a45c6a1-287c-566c-9d62-198e836cbd67","type":"domain","category":"Network activity","to_ids":true,"value":"erwawa.me","comment":"https://x.com/romonlyht/status/1947855086010699858","timestamp":"1753239816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d1ce3be-8a35-5fee-99ba-a8dd964d2923","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.245.140.81","comment":"https://x.com/romonlyht/status/1947855086010699858","timestamp":"1753239816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d40c4424-614f-5ffe-adde-46f88cb9a48d","type":"domain","category":"Network activity","to_ids":true,"value":"icntv.ne.jp%E2%88%95KcaheQEaRF%E2%88%95BenYe%E2%88%95bubWDQc@erwawa.me","comment":"https://x.com/romonlyht/status/1947855086010699858","timestamp":"1753239816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33f8f3d7-4b2f-5358-842e-8abb6244d906","type":"url","category":"Network activity","to_ids":true,"value":"https://icntv.ne.jp%E2%88%95KcaheQEaRF%E2%88%95BenYe%E2%88%95bubWDQc@erwawa.me/mylstxty?fajiy","comment":"https://x.com/romonlyht/status/1947855086010699858","timestamp":"1753239816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4502fb95-7db6-58a2-bbe2-6d5ec39e5d7d","type":"domain","category":"Network activity","to_ids":true,"value":"docu-share-direct-lnk-5378edjksjhdb.vercel.app","comment":"https://x.com/romonlyht/status/1947865756747894869","timestamp":"1753242360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f55f045-2ed8-5159-9a7e-2364cb56b8eb","type":"url","category":"Network activity","to_ids":true,"value":"https://docu-share-direct-lnk-5378edjksjhdb.vercel.app/docu-share-download98yhjkfdyidy8idyi.html#aaaa@example.jp","comment":"https://x.com/romonlyht/status/1947865756747894869","timestamp":"1753242360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c31ba596-94a0-5a91-939c-e29b6dc961ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.4.102.189","comment":"https://x.com/romonlyht/status/1947865756747894869","timestamp":"1753242360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cc5d396-5831-5620-aecd-c1603e483a24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.29.17.131","comment":"https://x.com/romonlyht/status/1947865758555689004","timestamp":"1753242361","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4bc1750-3d67-5ed7-bc6a-cfad338c2c52","type":"domain","category":"Network activity","to_ids":true,"value":"mooskkkioy.weebly.com","comment":"https://x.com/urldna_bot/status/1947869310711390681","timestamp":"1753243207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f252ab76-c39f-54be-866b-b8aa4dae5a77","type":"url","category":"Network activity","to_ids":true,"value":"https://mooskkkioy.weebly.com","comment":"https://x.com/urldna_bot/status/1947869310711390681","timestamp":"1753243207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"88fd2409-9943-5245-a74a-5eaf0a400ed6","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:6048","comment":"https://x.com/SarlackLab/status/1947869372971659493","timestamp":"1753243222","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"94cf1d24-2e28-5a1d-a1c0-2c0e9a06260c","type":"domain","category":"Network activity","to_ids":true,"value":"medical-principles.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1947869372971659493","timestamp":"1753243222","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1947869372971659493","timestamp":"1753243222","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"9937e08d-28b5-52fe-ac4e-34c71d664a54","type":"url","category":"Network activity","to_ids":true,"value":"http://medical-principles.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1947869372971659493","timestamp":"1753243222","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"fa798a3f-f168-514f-bbf8-1240c0ef9ffe","type":"url","category":"Network activity","to_ids":true,"value":"http://securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion","comment":"https://x.com/fbgwls245/status/1947880779113288102","timestamp":"1753245942","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"0b388fec-3245-5a2d-8ea9-750bccf48e2f","type":"domain","category":"Network activity","to_ids":true,"value":"securo45z554mw7rgrt7wcgv5eenj2xmxyrsdj3fcjsvindu63s4bsid.onion","comment":"https://x.com/fbgwls245/status/1947880779113288102","timestamp":"1753245942","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b9d6798-fd28-5070-bd1b-6ac18503ed65","type":"url","category":"Network activity","to_ids":true,"value":"http://iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13d538c0-85b5-5888-afb7-2e4e74b66c11","type":"domain","category":"Network activity","to_ids":true,"value":"driect-jobnnk01-06.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"76814d91-07f6-5da2-bb2f-97be70ba9889","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-jobnnk00.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56ebed2d-60c5-5b19-8ca1-3d2732217721","type":"domain","category":"Network activity","to_ids":true,"value":"driect-jobnnk00.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75e53ad7-4417-56e4-8280-3d06a22a6bc4","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-jobnnk01-06.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2375eb93-631c-5219-b7c8-49b27ed8831d","type":"domain","category":"Network activity","to_ids":true,"value":"iocdnzx.2373xlx.91ddos.com","comment":"https://x.com/harugasumi/status/1947882474702573763","timestamp":"1753246346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1121edf5-5901-5b01-857e-869a7477163d","type":"md5","category":"Payload delivery","to_ids":true,"value":"11dd6e8ab9759d1ac91ffe0d0e4949cb","comment":"https://x.com/Cyberteam008/status/1947884358272008309","timestamp":"1753246795","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"8507bad5-9faa-5182-8843-55ec355ba7b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.2.7","comment":"https://x.com/Cyberteam008/status/1947884358272008309","timestamp":"1753246795","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"f3cb17f0-3e45-5bfa-92d5-7c4a2d8281af","type":"md5","category":"Payload delivery","to_ids":true,"value":"abe098329cacc452714a6e8e632dcfdb","comment":"https://x.com/Cyberteam008/status/1947884358272008309","timestamp":"1753246795","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"45f67831-3d0b-504d-b30c-b478259416ff","type":"md5","category":"Payload delivery","to_ids":true,"value":"02613d0cfa2863efeda0508b5118ebf9","comment":"https://x.com/Cyberteam008/status/1947884358272008309","timestamp":"1753246795","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"35d2422f-9cce-565a-8f73-a5b7b1a62f5d","type":"url","category":"Network activity","to_ids":true,"value":"http://149.104.2.7:443","comment":"https://x.com/Cyberteam008/status/1947884358272008309","timestamp":"1753246795","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"eedcae5e-3ca8-54fb-a068-f117081ccfc9","type":"url","category":"Network activity","to_ids":true,"value":"http://genkidama.site","comment":"https://x.com/suyog41/status/1947888336947056725","timestamp":"1753247744","distribution":"5"},{"uuid":"3babc6e0-35e9-5fd5-9f58-fb7b092522ae","type":"domain","category":"Network activity","to_ids":true,"value":"genkidama.site","comment":"https://x.com/suyog41/status/1947888336947056725","timestamp":"1753247744","distribution":"5"},{"uuid":"ec3badce-bc4e-5913-ab2d-770857a62475","type":"md5","category":"Payload delivery","to_ids":true,"value":"91067aef4819b66a68eb3f45e928e2c7","comment":"https://x.com/suyog41/status/1947888336947056725","timestamp":"1753247744","distribution":"5"},{"uuid":"35bf7123-2cff-5332-8db6-f9bcc5b86e53","type":"domain","category":"Network activity","to_ids":true,"value":"mea-gov-in.com","comment":"https://x.com/TIntel2255/status/1947897000156140017","timestamp":"1753249809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31c79f56-3a69-53af-a72d-a4626014a8f6","type":"url","category":"Network activity","to_ids":true,"value":"http://mea-gov-in.com","comment":"https://x.com/TIntel2255/status/1947897000156140017","timestamp":"1753249809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e76538b9-74ce-51b3-804a-5fe851ff3ad6","type":"domain","category":"Network activity","to_ids":true,"value":"2026-bianance.com","comment":"https://x.com/urldna_bot/status/1947899507913478366","timestamp":"1753250407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f05adefc-b605-5138-aa75-55d97c11af61","type":"url","category":"Network activity","to_ids":true,"value":"https://2026-bianance.com/?p=2","comment":"https://x.com/urldna_bot/status/1947899507913478366","timestamp":"1753250407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2d73802b-0231-5928-b28d-7a63b713db8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.170","comment":"https://x.com/drb_ra/status/1947910986272227387","timestamp":"1753253144","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"278810f8-d22b-5ae8-a7f4-5ba2f46bb52a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.170:31337","comment":"https://x.com/drb_ra/status/1947910986272227387","timestamp":"1753253144","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"abea74da-3535-52cb-ab80-c9219ba6aa77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.131.2.26","comment":"https://x.com/drb_ra/status/1947911006228791464","timestamp":"1753253148","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c5089c8a-6628-54f8-97ee-1343e941f221","type":"url","category":"Network activity","to_ids":true,"value":"http://104.131.2.26:31337","comment":"https://x.com/drb_ra/status/1947911006228791464","timestamp":"1753253148","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"518b50c8-5656-5daf-98a3-51d24a34b80e","type":"url","category":"Network activity","to_ids":true,"value":"http://142.93.62.88:31337","comment":"https://x.com/drb_ra/status/1947911025505767704","timestamp":"1753253153","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7762001e-bec3-5430-9bd0-9063f5b8c348","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.93.62.88","comment":"https://x.com/drb_ra/status/1947911025505767704","timestamp":"1753253153","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"41e6c3c9-4c4d-51b3-a3b9-434062686824","type":"url","category":"Network activity","to_ids":true,"value":"http://109.172.87.64:443","comment":"https://x.com/drb_ra/status/1947911044589838554","timestamp":"1753253158","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"18db2fac-cbd0-52c9-87de-7874f1d0bd58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.172.87.64","comment":"https://x.com/drb_ra/status/1947911044589838554","timestamp":"1753253158","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d5e2e079-0731-5e66-b309-545e460ffa0f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.197.191:80","comment":"https://x.com/drb_ra/status/1947911562229953004","timestamp":"1753253281","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d3fbd794-d1c5-590b-8cea-2685c2824a58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.235.61.90","comment":"https://x.com/drb_ra/status/1947911582211518911","timestamp":"1753253286","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f9842e77-575a-54cc-949f-b4febd454852","type":"url","category":"Network activity","to_ids":true,"value":"http://15.235.61.90:80","comment":"https://x.com/drb_ra/status/1947911582211518911","timestamp":"1753253286","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7e51ff0e-1df7-5a80-86ca-d48188f2c3fa","type":"url","category":"Network activity","to_ids":true,"value":"http://146.19.215.141:9090","comment":"https://x.com/drb_ra/status/1947911601018782203","timestamp":"1753253290","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"605766ff-377b-5f18-a1a0-ec1df936c3d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.19.215.141","comment":"https://x.com/drb_ra/status/1947911601018782203","timestamp":"1753253290","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"857e420d-2656-5b64-86d5-eacff2f40516","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.109.82.74","comment":"https://x.com/drb_ra/status/1947911620564226312","timestamp":"1753253295","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ea195f0c-8bbe-525a-bc1c-55084fcb3cf1","type":"url","category":"Network activity","to_ids":true,"value":"http://149.109.82.74:443","comment":"https://x.com/drb_ra/status/1947911620564226312","timestamp":"1753253295","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"32a30c5d-dca9-527c-8b50-8d28589e2c98","type":"url","category":"Network activity","to_ids":true,"value":"http://139.180.136.101:53","comment":"https://x.com/drb_ra/status/1947911640109686956","timestamp":"1753253300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"71e6d750-d2fe-5396-bda3-7a39621087a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.180.136.101","comment":"https://x.com/drb_ra/status/1947911640109686956","timestamp":"1753253300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"061e24b8-87f9-5e3b-bb34-438c3382272d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.100.150.65:80","comment":"https://x.com/drb_ra/status/1947911659076346026","timestamp":"1753253304","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b8861be4-58b5-5dc5-aac0-b4fd0213131c","type":"url","category":"Network activity","to_ids":true,"value":"http://51.89.229.188:5007","comment":"https://x.com/drb_ra/status/1947911679334912469","timestamp":"1753253309","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8c2da2b8-0ee2-50c1-ad82-cd1009342770","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.89.229.188","comment":"https://x.com/drb_ra/status/1947911679334912469","timestamp":"1753253309","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"12c77fd0-8cc5-5b90-ab37-6d63a52cad47","type":"url","category":"Network activity","to_ids":true,"value":"http://54.36.163.184:8384","comment":"https://x.com/drb_ra/status/1947911699870454056","timestamp":"1753253314","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c42c2b0d-b627-50e0-bcf1-370afd7870c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.36.163.184","comment":"https://x.com/drb_ra/status/1947911699870454056","timestamp":"1753253314","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"d8f32532-3a44-5c7b-81bd-2f97eee88b97","type":"url","category":"Network activity","to_ids":true,"value":"http://182.30.92.214:443","comment":"https://x.com/drb_ra/status/1947911719918964856","timestamp":"1753253319","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"99133b28-cf9c-5532-b59b-fb2e942f6f8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.30.92.214","comment":"https://x.com/drb_ra/status/1947911719918964856","timestamp":"1753253319","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"167671b6-43ef-5484-bb02-6cce611d834b","type":"url","category":"Network activity","to_ids":true,"value":"http://182.30.92.201:443","comment":"https://x.com/drb_ra/status/1947911738990448782","timestamp":"1753253323","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c9ac6fcf-d4ba-5e22-979f-a70e872d29c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.30.92.201","comment":"https://x.com/drb_ra/status/1947911738990448782","timestamp":"1753253323","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a5026ef9-44b0-52ba-87fa-a373b6a6f60e","type":"url","category":"Network activity","to_ids":true,"value":"http://34.198.206.81:443","comment":"https://x.com/drb_ra/status/1947911759177912425","timestamp":"1753253328","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7935e766-786e-5f7f-bc80-c7a981b909e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.198.206.81","comment":"https://x.com/drb_ra/status/1947911759177912425","timestamp":"1753253328","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f3a0806f-087e-5db9-b91a-521ad0a171d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.167.7","comment":"https://x.com/drb_ra/status/1947911778236526614","timestamp":"1753253333","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"4135d8e1-e16d-534e-bb4c-af3a0a6a58d4","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.167.7:7443","comment":"https://x.com/drb_ra/status/1947911778236526614","timestamp":"1753253333","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"33484900-7616-5f48-ab25-f5810a663200","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.158.51","comment":"https://x.com/drb_ra/status/1947911797933015055","timestamp":"1753253337","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"09e28a2d-008b-5e61-95f2-27fc79b719c1","type":"url","category":"Network activity","to_ids":true,"value":"http://46.101.158.51:7443","comment":"https://x.com/drb_ra/status/1947911797933015055","timestamp":"1753253337","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f2b02ee0-aee0-50e9-b6b1-5786663f748a","type":"url","category":"Network activity","to_ids":true,"value":"http://184.83.83.47:7443","comment":"https://x.com/drb_ra/status/1947911818074026151","timestamp":"1753253342","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"740cb556-cbd5-50e0-938f-b156ae333287","type":"ip-dst","category":"Network activity","to_ids":true,"value":"184.83.83.47","comment":"https://x.com/drb_ra/status/1947911818074026151","timestamp":"1753253342","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"34a18e11-b094-5de7-9955-fc93d5da677f","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.224.52:443","comment":"https://x.com/drb_ra/status/1947912335751848416","timestamp":"1753253465","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0d8956ba-582d-53d4-8e8e-d327e008637b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.224.52","comment":"https://x.com/drb_ra/status/1947912335751848416","timestamp":"1753253465","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"be23f777-b8f0-5865-9437-77ace4bdd552","type":"url","category":"Network activity","to_ids":true,"value":"http://185.96.166.113:2404","comment":"https://x.com/drb_ra/status/1947912356396204446","timestamp":"1753253470","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f81eb36f-9f39-5150-ba5a-461c4a804d89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.96.166.113","comment":"https://x.com/drb_ra/status/1947912356396204446","timestamp":"1753253470","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7e0f081d-7d82-54f2-8bdc-189a4972d190","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.198:99","comment":"https://x.com/drb_ra/status/1947912376969531851","timestamp":"1753253475","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4e3828cc-aaed-5cfa-9dfb-59a833192a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.198","comment":"https://x.com/drb_ra/status/1947912376969531851","timestamp":"1753253475","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"da87e948-fb37-52d3-987f-8953659b09bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.59.94","comment":"https://x.com/drb_ra/status/1947912397286498374","timestamp":"1753253480","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"2e137c00-e439-5ba3-8443-0e5021328615","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.59.94:3232","comment":"https://x.com/drb_ra/status/1947912397286498374","timestamp":"1753253480","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"7ab89bdf-096a-5bf2-8c14-e3d72fdb4c97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.12.248.204","comment":"https://x.com/drb_ra/status/1947912417893105875","timestamp":"1753253485","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"73a171dd-4945-5793-88ae-0788d3070407","type":"url","category":"Network activity","to_ids":true,"value":"http://181.12.248.204:5610","comment":"https://x.com/drb_ra/status/1947912417893105875","timestamp":"1753253485","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"91f702ee-b65a-5c92-a742-2277fb0f38a2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.61.119.224:445","comment":"https://x.com/drb_ra/status/1947912437916688820","timestamp":"1753253490","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"45355dfc-11d3-585b-97d0-961adc03ad0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.61.119.224","comment":"https://x.com/drb_ra/status/1947912437916688820","timestamp":"1753253490","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e2164692-787c-5c2a-951d-afc384f6f442","type":"url","category":"Network activity","to_ids":true,"value":"http://13.114.15.139:49501","comment":"https://x.com/drb_ra/status/1947912459509170407","timestamp":"1753253495","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8cc1954c-b323-5eeb-993d-5dcfa3947b46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.114.15.139","comment":"https://x.com/drb_ra/status/1947912459509170407","timestamp":"1753253495","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fb2ef1ba-97ca-5902-9105-d7614d0106ac","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.170.230:443","comment":"https://x.com/drb_ra/status/1947912479700631596","timestamp":"1753253500","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a749b5af-2816-5e8e-b95e-9eff0f56b6e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.170.230","comment":"https://x.com/drb_ra/status/1947912479700631596","timestamp":"1753253500","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7d4ea401-3380-5e71-b6f4-2dee1ea6666f","type":"url","category":"Network activity","to_ids":true,"value":"http://93.232.99.226:81","comment":"https://x.com/drb_ra/status/1947912499916927253","timestamp":"1753253505","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ffa95b3e-5f98-5fc6-a204-8ff60b349969","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.232.99.226","comment":"https://x.com/drb_ra/status/1947912499916927253","timestamp":"1753253505","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3691006e-47a3-5b03-9138-e61feb38a8c4","type":"url","category":"Network activity","to_ids":true,"value":"http://18.153.210.162:1963","comment":"https://x.com/drb_ra/status/1947912519953092966","timestamp":"1753253509","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f257f676-5191-5041-9c27-229aa0c8b368","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.153.210.162","comment":"https://x.com/drb_ra/status/1947912519953092966","timestamp":"1753253509","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"50f5fd09-c655-5156-a7ac-52d079bd23bc","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.8.89:83","comment":"https://x.com/drb_ra/status/1947912539628577197","timestamp":"1753253514","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"405ccdc8-e7fa-50e0-8922-6708970606f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.8.89","comment":"https://x.com/drb_ra/status/1947912539628577197","timestamp":"1753253514","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"bbaf6738-5398-5254-8657-ed9bd3bb39d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.250","comment":"https://x.com/drb_ra/status/1947912560440717734","timestamp":"1753253519","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"d4e9c8bd-0976-551d-b5b8-b71e3097597a","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.250:8808","comment":"https://x.com/drb_ra/status/1947912560440717734","timestamp":"1753253519","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"94337b08-489b-5e53-a112-c39b54e8d017","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.16.89:8808","comment":"https://x.com/drb_ra/status/1947912580111991070","timestamp":"1753253524","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"48830d1d-eedd-586f-849b-07471577de3c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.16.89","comment":"https://x.com/drb_ra/status/1947912580111991070","timestamp":"1753253524","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"766d712c-3dfe-5010-9db6-e3ca59934470","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.248.132:8808","comment":"https://x.com/drb_ra/status/1947912600345260315","timestamp":"1753253529","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9dc74c96-1edf-54e5-896b-aeaae8b52659","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.248.132","comment":"https://x.com/drb_ra/status/1947912600345260315","timestamp":"1753253529","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1d62cdef-8985-599a-9f3d-3e94ba29eb6f","type":"url","category":"Network activity","to_ids":true,"value":"http://18.201.249.69:80","comment":"https://x.com/drb_ra/status/1947912620411117612","timestamp":"1753253533","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a033ee26-7f00-5b52-a14c-b3d6491736d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.201.249.69","comment":"https://x.com/drb_ra/status/1947912620411117612","timestamp":"1753253533","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3dfb4c2e-e5c4-5ac7-b89e-b62fab3f758f","type":"domain","category":"Network activity","to_ids":true,"value":"sonyliv.online","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c0ae218f-df90-5ea2-b50f-07ee6892efd5","type":"url","category":"Network activity","to_ids":true,"value":"http://sonyliv.online","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"df407789-338b-550f-8286-d821c9e2165d","type":"domain","category":"Network activity","to_ids":true,"value":"fb-video.com","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"261b96b3-50ec-5120-88b8-5500e3072512","type":"url","category":"Network activity","to_ids":true,"value":"http://fb-video.com","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7cdf4be7-ac95-55ee-97e6-0c95c91f255e","type":"domain","category":"Network activity","to_ids":true,"value":"reddit-stalker.com","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e2324976-f1bd-5729-b341-66a97f4effcf","type":"url","category":"Network activity","to_ids":true,"value":"http://reddit-stalker.com","comment":"https://x.com/c9lab_soc/status/1947913166517899739","timestamp":"1753253664","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d34e98ba-8fe1-5629-92d4-1eda15c4be79","type":"domain","category":"Network activity","to_ids":true,"value":"spotifyclone-weld.vercel.app","comment":"https://x.com/urldna_bot/status/1947929702401712384","timestamp":"1753257606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3644448c-4ac6-5924-aa67-c2c79b212872","type":"url","category":"Network activity","to_ids":true,"value":"http://spotifyclone-weld.vercel.app","comment":"https://x.com/urldna_bot/status/1947929702401712384","timestamp":"1753257606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8a8395a3-248d-5fd3-83d7-5642f3ac9175","type":"domain","category":"Network activity","to_ids":true,"value":"sciencemagazine.me","comment":"https://x.com/drb_ra/status/1947930343547326671","timestamp":"1753257759","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"86d4f839-dec9-56d5-846b-c09f3e4b1298","type":"url","category":"Network activity","to_ids":true,"value":"https://sciencemagazine.me/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1947930343547326671","timestamp":"1753257759","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8f9325dd-1c37-538e-a0db-45394093e9d2","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.212.39:443","comment":"https://x.com/drb_ra/status/1947930343547326671","timestamp":"1753257759","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a9fe336c-7bec-5ba2-832e-a36135492a06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.212.39","comment":"https://x.com/drb_ra/status/1947930343547326671","timestamp":"1753257759","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1bd0109f-9e21-55a2-ba74-965d19fab846","type":"domain","category":"Network activity","to_ids":true,"value":"consmofagov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"2169d24e-05cf-58db-a50c-a7a92f928256","type":"url","category":"Network activity","to_ids":true,"value":"http://consmofagov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"338f68e5-cf0d-5dd1-be54-f6b170be0df7","type":"domain","category":"Network activity","to_ids":true,"value":"hec-gov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4365e4c7-1239-5be8-ae88-b661ed1110d2","type":"url","category":"Network activity","to_ids":true,"value":"http://hec-gov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4894e508-b20d-573b-910f-df13bb1e0741","type":"domain","category":"Network activity","to_ids":true,"value":"dlimsindhgov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"252a5603-bd15-54f1-b925-ad222ca0d32e","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimsindhgov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bea67a9e-d7b5-54ef-8724-d175a5c59b50","type":"domain","category":"Network activity","to_ids":true,"value":"dlimpunjabgov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"f6e6aab9-8ab9-5cbf-8ac1-d734b504f40f","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimpunjabgov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7863545b-f0fb-5835-8b40-e01ca8e1e582","type":"domain","category":"Network activity","to_ids":true,"value":"dlimsitp-gov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9344b174-d073-5793-8716-4dc3189e7a43","type":"url","category":"Network activity","to_ids":true,"value":"http://dlimsitp-gov.com","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"752cb64e-9cbc-579a-8126-4c32e6e7b8a7","type":"url","category":"Network activity","to_ids":true,"value":"http://46.202.186.194","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"76c9f0e2-faad-5d57-b5de-8d83eab2a0b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.202.186.194","comment":"https://x.com/ShadowChasing1/status/1947951408806089186","timestamp":"1753262781","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"550830c1-09e0-5584-96ba-22c85ab4f85a","type":"domain","category":"Network activity","to_ids":true,"value":"avilaleo.github.io","comment":"https://x.com/urldna_bot/status/1947959917115027566","timestamp":"1753264810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5f7d2c0e-00e8-57c5-9f3b-e363dcd9914a","type":"url","category":"Network activity","to_ids":true,"value":"http://avilaleo.github.io/spotify-auth-interface/","comment":"https://x.com/urldna_bot/status/1947959917115027566","timestamp":"1753264810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"150bda00-cc5b-5cfa-a1d9-8e2ca9d9f255","type":"url","category":"Network activity","to_ids":true,"value":"http://185.117.0.206","comment":"https://x.com/ShanHolo/status/1947969418912563200","timestamp":"1753267075","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"a5f51805-c585-57a9-ad4e-9cce845d024a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.117.0.206","comment":"https://x.com/ShanHolo/status/1947969418912563200","timestamp":"1753267075","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"20c1e4c6-13a2-5867-86d5-0609e9db3d16","type":"url","category":"Network activity","to_ids":true,"value":"http://72.10.160.162:443","comment":"https://x.com/skocherhan/status/1947977109583897013","timestamp":"1753268909","distribution":"5"},{"uuid":"a6a0cdaf-549f-5ff6-8582-3470285f51c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.10.160.162","comment":"https://x.com/skocherhan/status/1947977109583897013","timestamp":"1753268909","distribution":"5"},{"uuid":"17c5a8fc-2f4f-5b0c-a358-5ec60f846434","type":"url","category":"Network activity","to_ids":true,"value":"http://94.242.61.116:443","comment":"https://x.com/ShadowChasing1/status/1947977479261700376","timestamp":"1753268997","distribution":"5"},{"uuid":"53f730ec-b501-5c16-97af-c0b8b176b7ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.242.61.116","comment":"https://x.com/ShadowChasing1/status/1947977479261700376","timestamp":"1753268997","distribution":"5"},{"uuid":"121bfa5d-ec7d-5b77-9ebc-fe42296e053e","type":"domain","category":"Network activity","to_ids":true,"value":"redmionlinealimyeri.cfd","comment":"https://x.com/urldna_bot/status/1947990104523305444","timestamp":"1753272007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2e604465-0e06-5dd0-9ed2-b2351d606787","type":"url","category":"Network activity","to_ids":true,"value":"http://redmionlinealimyeri.cfd/sadece-online-ozel/urun.php?r=35","comment":"https://x.com/urldna_bot/status/1947990104523305444","timestamp":"1753272007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ff96bf14-a17e-5fe2-986e-19ee5b9fab8b","type":"domain","category":"Network activity","to_ids":true,"value":"hoteljuly8.blogspot.com","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"ea673c94-d74f-54cd-9756-024497805afd","type":"url","category":"Network activity","to_ids":true,"value":"https://hoteljuly8.blogspot.com/lmm.pdf","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"2a3295c0-e90f-507c-a2c6-f3a63bf9de1c","type":"url","category":"Network activity","to_ids":true,"value":"http://220.158.233.40:8080","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"40289c1a-3c71-54ef-8569-14d572c8453a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.8.26","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"325f97af-9de7-53ea-9d95-7964c25e6e36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"220.158.233.40","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"e1fd323d-bb2a-5ba0-a01e-54db447b24c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.8.26","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"41c7ad00-66d2-5e78-9533-5691ab4d22ad","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d0cecd8f7352cfffe4428d472a00572f9a455c5161e66708d62592de75c21b89","comment":"https://x.com/galkofahi/status/1947990492760637844","timestamp":"1753272100","distribution":"5","Tag":[{"name":"Rhadamanthys"},{"name":"opendir"},{"name":"Xworm"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"0e316450-6030-5333-997d-30a0d2134612","type":"domain","category":"Network activity","to_ids":true,"value":"staticpaycloud.com","comment":"https://x.com/sdcyberresearch/status/1947994404901265579","timestamp":"1753273032","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"36f33ffe-8c37-5053-a765-fb509fe24f5f","type":"url","category":"Network activity","to_ids":true,"value":"http://staticpaycloud.com","comment":"https://x.com/sdcyberresearch/status/1947994404901265579","timestamp":"1753273032","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"8190c910-09c8-5aed-ac3f-68478597af64","type":"domain","category":"Network activity","to_ids":true,"value":"backupper.pro","comment":"https://x.com/sdcyberresearch/status/1947994404901265579","timestamp":"1753273032","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"415704e2-b11b-544a-a2eb-e973e37fc91d","type":"url","category":"Network activity","to_ids":true,"value":"http://backupper.pro","comment":"https://x.com/sdcyberresearch/status/1947994404901265579","timestamp":"1753273032","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"f057d6ca-f5dd-5a6c-bc07-fccd859a3932","type":"domain","category":"Network activity","to_ids":true,"value":"quiver-snagglefoot-0861.typedream.app","comment":"https://x.com/urldna_bot/status/1948020300420984917","timestamp":"1753279206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"97acce9c-4bff-5387-b1ad-434bd42cee6f","type":"url","category":"Network activity","to_ids":true,"value":"https://quiver-snagglefoot-0861.typedream.app","comment":"https://x.com/urldna_bot/status/1948020300420984917","timestamp":"1753279206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4c5599e8-f1bc-52dc-9474-4598e7ff8e75","type":"domain","category":"Network activity","to_ids":true,"value":"mrl.entreposage-pbrs.com","comment":"https://x.com/yvesago/status/1948022870002815082","timestamp":"1753279819","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0b1a9bd-529a-5b77-8c78-cddb3b461dc4","type":"url","category":"Network activity","to_ids":true,"value":"https://mrl.entreposage-pbrs.com","comment":"https://x.com/yvesago/status/1948022870002815082","timestamp":"1753279819","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ccdc48fa-81b1-5201-a636-6bd787c98cc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.127.145","comment":"https://x.com/yvesago/status/1948022870002815082","timestamp":"1753279819","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e9e92ed-3dad-55e4-ad3b-2bc8a62f065f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"3461da3a2ddcced4a00f87dcd7650af48f97998a3ac9ca649d7ef3b7332bd997","comment":"https://x.com/Gi7w0rm/status/1948027800591466773","timestamp":"1753280994","distribution":"5"},{"uuid":"ee95e8cc-9f45-5d4d-9a5e-7251b19747e0","type":"domain","category":"Network activity","to_ids":true,"value":"wetrans-ficher.com","comment":"https://x.com/yvesago/status/1948035441497924025","timestamp":"1753282816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"003d0026-da45-59b6-a189-ee947fe43e35","type":"url","category":"Network activity","to_ids":true,"value":"https://wetrans-ficher.com/hotmail-master/","comment":"https://x.com/yvesago/status/1948035441497924025","timestamp":"1753282816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a80d9ad-a9bb-5ef4-b0e6-7d78379e0532","type":"ip-dst","category":"Network activity","to_ids":true,"value":"169.239.182.184","comment":"https://x.com/yvesago/status/1948035441497924025","timestamp":"1753282816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"302be265-fd82-5152-abab-43e192eec517","type":"domain","category":"Network activity","to_ids":true,"value":"chrome-update.pro","comment":"https://x.com/skocherhan/status/1948049138412642742","timestamp":"1753286082","distribution":"5"},{"uuid":"b3ddde5d-a3a3-54f6-b560-f26841788f29","type":"url","category":"Network activity","to_ids":true,"value":"http://chrome-update.pro","comment":"https://x.com/skocherhan/status/1948049138412642742","timestamp":"1753286082","distribution":"5"},{"uuid":"a7a8c0cc-b6f9-56ca-aa99-3e0923989fd7","type":"md5","category":"Payload delivery","to_ids":true,"value":"3e452e00cd7001d3328447710c3ab363","comment":"https://x.com/skocherhan/status/1948049138412642742","timestamp":"1753286082","distribution":"5"},{"uuid":"6b33e8bf-539f-55ff-9e39-04150fc8490a","type":"domain","category":"Network activity","to_ids":true,"value":"hanmmaidf.weebly.com","comment":"https://x.com/urldna_bot/status/1948050492799570048","timestamp":"1753286405","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0d61c9ef-f4a5-506b-8aac-f6dfe6b0db4d","type":"url","category":"Network activity","to_ids":true,"value":"https://hanmmaidf.weebly.com","comment":"https://x.com/urldna_bot/status/1948050492799570048","timestamp":"1753286405","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ac92bb5a-f3f7-59da-9ec4-956a0e874376","type":"url","category":"Network activity","to_ids":true,"value":"https://107.174.147.15/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1948063929885655345","timestamp":"1753289608","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"575d1d7d-8cb5-5704-8289-c3e9ab890e16","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.147.15:53","comment":"https://x.com/drb_ra/status/1948063929885655345","timestamp":"1753289608","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"993807a8-b603-58db-9c2e-774f1dc32733","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.147.15","comment":"https://x.com/drb_ra/status/1948063929885655345","timestamp":"1753289608","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1cc1f492-12c2-55b9-8f29-f00752b7a525","type":"domain","category":"Network activity","to_ids":true,"value":"t.ptib.su","comment":"https://x.com/drb_ra/status/1948063953768071428","timestamp":"1753289614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"027fdd43-02ed-5dc7-8206-0a673bed016d","type":"url","category":"Network activity","to_ids":true,"value":"https://t.ptib.su/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1948063953768071428","timestamp":"1753289614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d587ea97-44ff-58a3-b058-c8639a26f673","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.92.81:53","comment":"https://x.com/drb_ra/status/1948063953768071428","timestamp":"1753289614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"50f68ac7-68cb-5733-ae02-d5aa26361533","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.143.92.81","comment":"https://x.com/drb_ra/status/1948063953768071428","timestamp":"1753289614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c440a0a1-3615-589d-b1dd-e82f65ee971e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.61.75:53","comment":"https://x.com/drb_ra/status/1948063979516915729","timestamp":"1753289620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a337ddf5-8d2d-5d53-9e80-ea583401a116","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.61.75","comment":"https://x.com/drb_ra/status/1948063979516915729","timestamp":"1753289620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b8f05a34-d8c4-5d28-839a-fa0d2fa7e5bd","type":"domain","category":"Network activity","to_ids":true,"value":"elta.courier-ls.sale","comment":"https://x.com/v4ensics/status/1948075139645550660","timestamp":"1753292281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e5e6bd0-37fb-58a9-91ea-21cb4a2dc8f0","type":"url","category":"Network activity","to_ids":true,"value":"http://elta.courier-ls.sale/gr","comment":"https://x.com/v4ensics/status/1948075139645550660","timestamp":"1753292281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6168abe6-146f-5399-bc9b-364c634e2571","type":"domain","category":"Network activity","to_ids":true,"value":"server53564.weebly.com","comment":"https://x.com/urldna_bot/status/1948080710469726566","timestamp":"1753293609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"715f5446-469b-50c1-a0ee-a519cb20db9e","type":"url","category":"Network activity","to_ids":true,"value":"https://server53564.weebly.com","comment":"https://x.com/urldna_bot/status/1948080710469726566","timestamp":"1753293609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"380bd689-d21d-50ed-918c-c88c531866f9","type":"domain","category":"Network activity","to_ids":true,"value":"2fm7tpwmpc2gd.cfc-execute.bj.baidubce.com","comment":"https://x.com/drb_ra/status/1948084247467896984","timestamp":"1753294452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"68dcc76e-8a19-5cb3-908b-09c04db38925","type":"url","category":"Network activity","to_ids":true,"value":"https://2fm7tpwmpc2gd.cfc-execute.bj.baidubce.com/api/x","comment":"https://x.com/drb_ra/status/1948084247467896984","timestamp":"1753294452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f0744a78-3930-549a-bc3c-1d151e4c0e73","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.55.45:80","comment":"https://x.com/drb_ra/status/1948084247467896984","timestamp":"1753294452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"339dc7b5-6d4e-5c15-b276-6d01f5cacc6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.55.45","comment":"https://x.com/drb_ra/status/1948084247467896984","timestamp":"1753294452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6874fe38-c50a-5368-9779-2b4f6d7cbf1b","type":"url","category":"Network activity","to_ids":true,"value":"http://16.64.41.204:443","comment":"https://x.com/drb_ra/status/1948092355036258666","timestamp":"1753296385","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5948442d-aaad-5782-8ee8-30759f439b98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.64.41.204","comment":"https://x.com/drb_ra/status/1948092355036258666","timestamp":"1753296385","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3f98478d-0bee-5619-bb8c-cc977fdf0be1","type":"url","category":"Network activity","to_ids":true,"value":"http://18.253.92.151:443","comment":"https://x.com/drb_ra/status/1948092375437619695","timestamp":"1753296390","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a0d770cc-6efa-5463-9cf0-bc2bb0c5daa4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.253.92.151","comment":"https://x.com/drb_ra/status/1948092375437619695","timestamp":"1753296390","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"42ee2f58-adab-5ff2-8974-d3675b79b4c1","type":"url","category":"Network activity","to_ids":true,"value":"http://13.248.147.218:6443","comment":"https://x.com/drb_ra/status/1948092395742195818","timestamp":"1753296395","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"28ff92b5-0a1a-531c-ac44-7c3e882237f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.248.147.218","comment":"https://x.com/drb_ra/status/1948092395742195818","timestamp":"1753296395","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"afe769f9-a1a3-54f5-a47d-a61fe646011b","type":"url","category":"Network activity","to_ids":true,"value":"http://16.64.38.46:443","comment":"https://x.com/drb_ra/status/1948092416667337189","timestamp":"1753296400","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4891d5b5-328f-5511-a3b4-964d3a757057","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.64.38.46","comment":"https://x.com/drb_ra/status/1948092416667337189","timestamp":"1753296400","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"55eb369e-0c8d-5f22-ba1d-f6073c7527e6","type":"url","category":"Network activity","to_ids":true,"value":"http://163.172.234.31:7443","comment":"https://x.com/drb_ra/status/1948092437563380011","timestamp":"1753296405","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"341e91f4-e8ca-5c12-9103-c3ed5242ec15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.172.234.31","comment":"https://x.com/drb_ra/status/1948092437563380011","timestamp":"1753296405","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6c6a92a4-4e55-5476-90fe-ac475da7a265","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.165.12:7443","comment":"https://x.com/drb_ra/status/1948092459336016061","timestamp":"1753296410","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"45dd0fc5-c990-55bd-a3bb-e7efeded251c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.165.12","comment":"https://x.com/drb_ra/status/1948092459336016061","timestamp":"1753296410","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b7ef0cac-7d08-5477-9230-725d4ed04b37","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.101.181:7443","comment":"https://x.com/drb_ra/status/1948092479791677508","timestamp":"1753296415","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6eda102c-53b9-57b5-bbe7-6f6d52b3d660","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.101.181","comment":"https://x.com/drb_ra/status/1948092479791677508","timestamp":"1753296415","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6431d5c2-ea68-58a8-9391-26653e61a1fe","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.238.177:7443","comment":"https://x.com/drb_ra/status/1948092502956970455","timestamp":"1753296421","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"7219ca71-4eef-5dc1-9a15-180fe6d732e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.238.177","comment":"https://x.com/drb_ra/status/1948092502956970455","timestamp":"1753296421","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0f131778-c0cc-5836-8266-dec1411319ad","type":"url","category":"Network activity","to_ids":true,"value":"http://43.205.82.171:443","comment":"https://x.com/drb_ra/status/1948092523169362098","timestamp":"1753296425","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e20d4c58-e66b-59f5-bd08-a91a32dc5318","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.205.82.171","comment":"https://x.com/drb_ra/status/1948092523169362098","timestamp":"1753296425","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"84cbcea4-3d88-5516-b3a9-f8a8e6328edb","type":"url","category":"Network activity","to_ids":true,"value":"http://46.101.206.226:31337","comment":"https://x.com/drb_ra/status/1948092542542565516","timestamp":"1753296430","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"7a5b74d2-e19a-582e-b4e7-2bc499a3aaf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.206.226","comment":"https://x.com/drb_ra/status/1948092542542565516","timestamp":"1753296430","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5a3d2c9b-2466-5a12-a313-8b20ea1fa349","type":"url","category":"Network activity","to_ids":true,"value":"http://34.40.62.12:31337","comment":"https://x.com/drb_ra/status/1948092563480596988","timestamp":"1753296435","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e8abf844-b818-5a0a-ad47-f1d0ee17a1f9","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.51.107:6751","comment":"https://x.com/drb_ra/status/1948093081422618747","timestamp":"1753296559","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"68849caf-47e3-52e3-be5d-a5995cc8d51b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.51.107","comment":"https://x.com/drb_ra/status/1948093081422618747","timestamp":"1753296559","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"53e1a50c-002b-5832-88d8-2c5436dc55ce","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.149.194:2404","comment":"https://x.com/drb_ra/status/1948093103446888825","timestamp":"1753296564","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9b09b908-d85b-5636-9ea2-04a580531be9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.149.194","comment":"https://x.com/drb_ra/status/1948093103446888825","timestamp":"1753296564","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b2e454be-d0ff-5d2a-8e4a-1203dd1e4063","type":"url","category":"Network activity","to_ids":true,"value":"http://109.230.231.31:2404","comment":"https://x.com/drb_ra/status/1948093127438327811","timestamp":"1753296570","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"5bea8557-0690-5e21-a7ce-08cc414d9a10","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.230.231.31","comment":"https://x.com/drb_ra/status/1948093127438327811","timestamp":"1753296570","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3a012b8c-44eb-5140-96ea-1dc14362699b","type":"url","category":"Network activity","to_ids":true,"value":"http://173.249.28.102:2565","comment":"https://x.com/drb_ra/status/1948093147122126879","timestamp":"1753296574","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b7f2da0f-41ec-5a3b-88da-8464a8e90c8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.249.28.102","comment":"https://x.com/drb_ra/status/1948093147122126879","timestamp":"1753296574","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6025da77-286d-5a94-af87-4fb6b3c20aff","type":"url","category":"Network activity","to_ids":true,"value":"http://31.40.212.38:8458","comment":"https://x.com/drb_ra/status/1948093169142321591","timestamp":"1753296580","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a056cb8d-31f2-55bd-832c-7b9cddc69037","type":"url","category":"Network activity","to_ids":true,"value":"http://31.40.212.38:433","comment":"https://x.com/drb_ra/status/1948093190944501880","timestamp":"1753296585","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"941fd609-6ece-5db7-bab5-22ce30d7546b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.40.212.38","comment":"https://x.com/drb_ra/status/1948093190944501880","timestamp":"1753296585","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8464606b-2531-5e34-a635-3ccebcc66b71","type":"url","category":"Network activity","to_ids":true,"value":"http://207.180.246.14:8080","comment":"https://x.com/drb_ra/status/1948093214344528258","timestamp":"1753296590","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1a300017-622d-583a-aef0-726b3fc9e0d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.180.246.14","comment":"https://x.com/drb_ra/status/1948093214344528258","timestamp":"1753296590","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6cb91a47-d8b5-564b-b898-1676010d9913","type":"url","category":"Network activity","to_ids":true,"value":"http://51.84.68.56:1099","comment":"https://x.com/drb_ra/status/1948093236406579316","timestamp":"1753296596","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4292670d-6d3c-51fb-977f-2d3b29e78023","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.84.68.56","comment":"https://x.com/drb_ra/status/1948093236406579316","timestamp":"1753296596","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7692b736-0635-5d49-ad96-81e992828da4","type":"url","category":"Network activity","to_ids":true,"value":"http://13.127.250.197:1963","comment":"https://x.com/drb_ra/status/1948093257520439303","timestamp":"1753296601","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"087cef93-39a2-5440-aae0-4419e76565ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.127.250.197","comment":"https://x.com/drb_ra/status/1948093257520439303","timestamp":"1753296601","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f2f521e2-52c4-5eed-a2a7-5cf45f45d2aa","type":"url","category":"Network activity","to_ids":true,"value":"http://18.61.48.54:17270","comment":"https://x.com/drb_ra/status/1948093278785503322","timestamp":"1753296606","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"358dfd01-5461-5885-9457-131b0ef97066","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.61.48.54","comment":"https://x.com/drb_ra/status/1948093278785503322","timestamp":"1753296606","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dd139d92-2da9-53fb-aacd-57794437d310","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.1.232:81","comment":"https://x.com/drb_ra/status/1948093299870622022","timestamp":"1753296611","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"331d5be1-8c8c-515c-821e-2a9b7afdf129","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.1.232","comment":"https://x.com/drb_ra/status/1948093299870622022","timestamp":"1753296611","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c295e971-a2bc-592e-a6c8-428e4351fe04","type":"url","category":"Network activity","to_ids":true,"value":"http://92.249.61.30:8808","comment":"https://x.com/drb_ra/status/1948093320540062000","timestamp":"1753296616","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8c5ba426-2536-5033-aea1-39d5a5997b0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.249.61.30","comment":"https://x.com/drb_ra/status/1948093320540062000","timestamp":"1753296616","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ce9fe3e9-7928-5ae7-85ae-ee616f5511d2","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.29:8808","comment":"https://x.com/drb_ra/status/1948093341352280253","timestamp":"1753296621","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d56b5099-f84f-5bd4-91f4-045e325316a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.29","comment":"https://x.com/drb_ra/status/1948093341352280253","timestamp":"1753296621","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3f01912e-331a-5e0f-a707-a70a8e686521","type":"url","category":"Network activity","to_ids":true,"value":"http://54.77.30.65:80","comment":"https://x.com/drb_ra/status/1948093363019759673","timestamp":"1753296626","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"caf2276f-a067-5181-bfcc-e1adea9b7b5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.77.30.65","comment":"https://x.com/drb_ra/status/1948093363019759673","timestamp":"1753296626","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e40140a3-c755-5407-beae-0cbe776ae9bd","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.136.226:587","comment":"https://x.com/drb_ra/status/1948093388181389555","timestamp":"1753296632","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"50ad038b-e343-5867-8b81-8d4fb5260244","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.136.226:25","comment":"https://x.com/drb_ra/status/1948093412558671945","timestamp":"1753296638","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d073a6b5-c739-5c7c-94ca-6d6ee9099247","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.136.226","comment":"https://x.com/drb_ra/status/1948093412558671945","timestamp":"1753296638","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7715274b-e31a-5b9f-8e98-5bedb2cb4432","type":"url","category":"Network activity","to_ids":true,"value":"http://35.228.18.60:3333","comment":"https://x.com/drb_ra/status/1948093435346383041","timestamp":"1753296643","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"c0cb5164-a93e-5bfd-b590-c3462072a27b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.228.18.60","comment":"https://x.com/drb_ra/status/1948093435346383041","timestamp":"1753296643","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"527bf622-508a-5e1e-9b99-7aeb3fde9a96","type":"url","category":"Network activity","to_ids":true,"value":"http://1.13.164.149:8888","comment":"https://x.com/drb_ra/status/1948093456674382260","timestamp":"1753296648","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"25c34359-6ce4-5cc3-b84f-6a8796840408","type":"url","category":"Network activity","to_ids":true,"value":"http://188.4.60.216:995","comment":"https://x.com/drb_ra/status/1948093477272846587","timestamp":"1753296653","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"ed8a64da-8a1f-5b27-bf9a-e1a43c0f9b34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.4.60.216","comment":"https://x.com/drb_ra/status/1948093477272846587","timestamp":"1753296653","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"cd0c7192-84d7-5d8c-8095-3fc74819f123","type":"url","category":"Network activity","to_ids":true,"value":"http://44.245.0.39:10080","comment":"https://x.com/drb_ra/status/1948093497770172453","timestamp":"1753296658","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e5215e73-002e-5b4b-9b72-e8235159b941","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.245.0.39","comment":"https://x.com/drb_ra/status/1948093497770172453","timestamp":"1753296658","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"746d29bf-e36c-54e6-8ba9-3bcf6a4fa3c6","type":"url","category":"Network activity","to_ids":true,"value":"http://5.79.96.117:8081","comment":"https://x.com/drb_ra/status/1948093518959857825","timestamp":"1753296663","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"5a968952-240e-5bbb-9e8f-16c59f5dac05","type":"url","category":"Network activity","to_ids":true,"value":"http://45.9.2.12:443","comment":"https://x.com/drb_ra/status/1948093539310825512","timestamp":"1753296668","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"d8199932-7ac4-5b07-9dd5-82739533b727","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.9.2.12","comment":"https://x.com/drb_ra/status/1948093539310825512","timestamp":"1753296668","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"630fa50c-7276-57ec-af74-0e8bbc573114","type":"url","category":"Network activity","to_ids":true,"value":"http://173.81.180.59:8080","comment":"https://x.com/drb_ra/status/1948094057387094253","timestamp":"1753296791","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"80e847e2-a72f-5a56-b03f-19b83d9a25e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.81.180.59","comment":"https://x.com/drb_ra/status/1948094057387094253","timestamp":"1753296791","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"3a2137c7-e033-5ace-b91d-bcbf6b4c4576","type":"url","category":"Network activity","to_ids":true,"value":"http://51.195.148.62:8080","comment":"https://x.com/drb_ra/status/1948094080186990813","timestamp":"1753296797","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"08e02e06-6a41-51e4-b020-226551678afa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.195.148.62","comment":"https://x.com/drb_ra/status/1948094080186990813","timestamp":"1753296797","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"c1eb0e63-40be-57e9-b268-2e977b787e30","type":"url","category":"Network activity","to_ids":true,"value":"http://34.147.156.134:80","comment":"https://x.com/drb_ra/status/1948094102592979289","timestamp":"1753296802","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"218bce0f-542d-5ad7-85de-24f9324bf6e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.147.156.134","comment":"https://x.com/drb_ra/status/1948094102592979289","timestamp":"1753296802","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bb62aeb6-5bab-556d-aead-350dc6a51a62","type":"domain","category":"Network activity","to_ids":true,"value":"acrstealer.top","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"2ab7f68d-7de3-511a-a063-612dd097f113","type":"url","category":"Network activity","to_ids":true,"value":"http://acrstealer.top","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"dd812205-b49f-53d3-823e-f8161cf4ef52","type":"domain","category":"Network activity","to_ids":true,"value":"justlittleluxuriedrs.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"38b05c1d-0cef-5fb0-88d0-defd1e20775a","type":"url","category":"Network activity","to_ids":true,"value":"http://justlittleluxuriedrs.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"3e6e8331-b9d8-5926-b426-7a2e37227bf8","type":"domain","category":"Network activity","to_ids":true,"value":"longstoryshortdesigndes.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"c263cd0d-cc06-52c6-81b7-62db7f255cb0","type":"url","category":"Network activity","to_ids":true,"value":"http://longstoryshortdesigndes.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"87afbd34-98c7-58c1-b9e9-e6fc9881e051","type":"domain","category":"Network activity","to_ids":true,"value":"magneticcitizen.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"be37fce9-a2c1-50a0-a5fe-e10529adfbd8","type":"url","category":"Network activity","to_ids":true,"value":"http://magneticcitizen.shop","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"03dfd3d9-a745-5f5e-93a4-a110bba0c55b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.202.44.220","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"6a1b667e-6f8c-598d-945c-cb9686511696","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.147.255.219","comment":"https://x.com/setThreatTitle/status/1948110870820577464","timestamp":"1753300800","distribution":"5"},{"uuid":"24b525eb-2d68-59ce-ba2b-70c11e7a2cec","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.165.217","comment":"https://x.com/threatquery/status/1948125983866749126","timestamp":"1753304403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"3e485d07-a4dd-5dca-9b18-510357d91e0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.203.165.217","comment":"https://x.com/threatquery/status/1948125983866749126","timestamp":"1753304403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"a8aa7e57-b9f3-5f87-b7ac-900bb9941694","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.147.15","comment":"https://x.com/threatquery/status/1948125987444510782","timestamp":"1753304404","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"8c22c5c9-9bba-5a44-82e8-c60b7e57bb74","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.92.81","comment":"https://x.com/threatquery/status/1948125985552875911","timestamp":"1753304404","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"031ee6c3-2d19-511c-b07a-c315b2bd1684","type":"domain","category":"Network activity","to_ids":true,"value":"kefel.io","comment":"https://x.com/skocherhan/status/1948129698837360688","timestamp":"1753305289","distribution":"5"},{"uuid":"85822237-5b5a-5497-a057-5faf9360f171","type":"url","category":"Network activity","to_ids":true,"value":"http://kefel.io","comment":"https://x.com/skocherhan/status/1948129698837360688","timestamp":"1753305289","distribution":"5"},{"uuid":"5f29cd4f-7d7f-5ffb-aadb-63e2a87f50af","type":"domain","category":"Network activity","to_ids":true,"value":"syvite.com","comment":"https://x.com/ir0n_fe/status/1948137333896945847","timestamp":"1753307109","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1283c29-fb6c-5a98-a38a-3c9d29e4a666","type":"url","category":"Network activity","to_ids":true,"value":"https://syvite.com/login/","comment":"https://x.com/ir0n_fe/status/1948137333896945847","timestamp":"1753307109","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70f250a5-0751-5786-9484-0b52b9612119","type":"domain","category":"Network activity","to_ids":true,"value":"personas-virtualbqcolombia.vercel.app","comment":"https://x.com/urldna_bot/status/1948141101388349601","timestamp":"1753308007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6c86864d-2858-5766-a9c2-eb007b756105","type":"url","category":"Network activity","to_ids":true,"value":"http://personas-virtualbqcolombia.vercel.app/sites/bc/manager/71","comment":"https://x.com/urldna_bot/status/1948141101388349601","timestamp":"1753308007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8b0c0ad7-aaff-5355-9272-3a716415dba7","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.166.14:61235","comment":"https://x.com/drb_ra/status/1948156372304232606","timestamp":"1753311648","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83ec595e-3c3a-5551-950a-a2dd159c6761","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8089","comment":"https://x.com/drb_ra/status/1948156394626064516","timestamp":"1753311654","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38fa70d3-b948-50e1-80ec-51d6bca1fe44","type":"url","category":"Network activity","to_ids":true,"value":"http://101.34.66.77:443","comment":"https://x.com/drb_ra/status/1948156416713171403","timestamp":"1753311659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cc8737dd-805c-5ebf-bf25-0062b575bd14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.34.66.77","comment":"https://x.com/drb_ra/status/1948156416713171403","timestamp":"1753311659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d736175c-8501-55d1-bb23-e8e29fe8b104","type":"url","category":"Network activity","to_ids":true,"value":"http://213.209.150.214:8443","comment":"https://x.com/drb_ra/status/1948156977269645745","timestamp":"1753311793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e79b5a5-7d38-5869-ad84-dc02270c8b22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.150.214","comment":"https://x.com/drb_ra/status/1948156977269645745","timestamp":"1753311793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5e18649c-4dcd-58e4-8967-a1a449c0636b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:80","comment":"https://x.com/drb_ra/status/1948157494796210348","timestamp":"1753311916","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1948157494796210348","timestamp":"1753311916","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a73c11d1-9843-5567-9226-a207f77586bf","type":"url","category":"Network activity","to_ids":true,"value":"http://110.41.12.167:80","comment":"https://x.com/drb_ra/status/1948157518229725241","timestamp":"1753311922","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aff9d230-04ce-53ac-8494-ee58402803ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.41.12.167","comment":"https://x.com/drb_ra/status/1948157518229725241","timestamp":"1753311922","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7e6746c6-f10a-52c1-845b-93f1e5a9eab9","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-begin.gczdzq.cn","comment":"https://x.com/masaomi346/status/1948163544186597409","timestamp":"1753313358","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6b7a6e4-2f4d-56b3-8074-ff2b6668cd89","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-begin.gczdzq.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1948163544186597409","timestamp":"1753313358","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4435966-7385-5a68-9c53-c238c63ea31f","type":"domain","category":"Network activity","to_ids":true,"value":"anandsr-dev.github.io","comment":"https://x.com/urldna_bot/status/1948171311466897433","timestamp":"1753315210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"370b0df8-5890-51fe-b93b-238992fd4aac","type":"url","category":"Network activity","to_ids":true,"value":"http://anandsr-dev.github.io/facebookclone","comment":"https://x.com/urldna_bot/status/1948171311466897433","timestamp":"1753315210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7b14870e-deea-5baf-bf77-e8c90b63b7cf","type":"domain","category":"Network activity","to_ids":true,"value":"eiadeythinngoea.0m362.com","comment":"https://x.com/catnap707/status/1948183949433590091","timestamp":"1753318223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06e8b8a3-7fbe-5ed2-ac51-48f3d4bc67bd","type":"url","category":"Network activity","to_ids":true,"value":"http://eiadeythinngoea.0m362.com","comment":"https://x.com/catnap707/status/1948183949433590091","timestamp":"1753318223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7791ebc5-01df-5d7f-a809-9dc9c11c3ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://43.129.87.244","comment":"https://x.com/catnap707/status/1948183949433590091","timestamp":"1753318223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a20ad368-6651-54b1-b913-111225017c39","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.129.87.244","comment":"https://x.com/catnap707/status/1948183949433590091","timestamp":"1753318223","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a44f2df8-6525-530d-983b-9b0a6e1e0004","type":"url","category":"Network activity","to_ids":true,"value":"https://nhn460.top/apemgu/","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b7e5320-9d00-58b0-9410-e197b0f62de0","type":"domain","category":"Network activity","to_ids":true,"value":"2h65tv.top","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc4f668e-60f3-5a52-b7ef-7584ceab76aa","type":"url","category":"Network activity","to_ids":true,"value":"https://2h65tv.top/apemgu/","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e947142c-38e9-570b-8abe-485802b6aa7a","type":"domain","category":"Network activity","to_ids":true,"value":"nhn460.top","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"90967ac8-4bcd-5317-b24c-24e601705a8c","type":"url","category":"Network activity","to_ids":true,"value":"https://wci6gh.top/apemgu/","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d930650e-6ca1-571d-a88b-4f6b50e9e111","type":"url","category":"Network activity","to_ids":true,"value":"http://47.76.208.57","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cbbd9c0-d2b3-509c-ac53-770ca8021a57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.208.57","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25c8f4e5-b8b9-57fc-84d7-7187fa7b0e9c","type":"domain","category":"Network activity","to_ids":true,"value":"wci6gh.top","comment":"https://x.com/Metemcyber/status/1948188198552977502","timestamp":"1753319236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3da52f6c-beb6-507e-bea9-71032d7d9634","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.222.142","comment":"https://x.com/Metemcyber/status/1948189819571716248","timestamp":"1753319623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8e0ae4b-bfd9-5a60-acba-27d060108dbb","type":"domain","category":"Network activity","to_ids":true,"value":"dhl-because.kuflqpk.cn","comment":"https://x.com/Metemcyber/status/1948189819571716248","timestamp":"1753319623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b772172-18b8-50c1-9fbb-233899189fc9","type":"url","category":"Network activity","to_ids":true,"value":"https://dhl-because.kuflqpk.cn/portal_login_exp/getQuoteTab/","comment":"https://x.com/Metemcyber/status/1948189819571716248","timestamp":"1753319623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4941873e-8703-56b0-ac4c-d014cd564a4c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.43.75","comment":"https://x.com/Metemcyber/status/1948189819571716248","timestamp":"1753319623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5c3979a9-4390-5015-b835-ba8453f8b8c5","type":"domain","category":"Network activity","to_ids":true,"value":"xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion","comment":"https://x.com/fbgwls245/status/1948190393901916478","timestamp":"1753319760","distribution":"5"},{"uuid":"33942073-29bf-5661-81b7-ef5d8bf5f39e","type":"url","category":"Network activity","to_ids":true,"value":"http://xssforumv3isucukbxhdhwz67hoa5e2voakcfkuieq4ch257vsburuid.onion","comment":"https://x.com/fbgwls245/status/1948190393901916478","timestamp":"1753319760","distribution":"5"},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2120f3cc-d5cb-52ab-9241-dfda7e17b96e","type":"url","category":"Network activity","to_ids":true,"value":"https://trackings-geniar.nwwdie.cn/japeanposder/","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8406d21b-96b9-5d0d-8a5a-a09b460aaa51","type":"domain","category":"Network activity","to_ids":true,"value":"trackings-geniar.nwwdie.cn","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1948192232840061021","timestamp":"1753320198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee6d65cb-af09-52ae-ab1a-42cf13e8ffbe","type":"domain","category":"Network activity","to_ids":true,"value":"webmailservice08.wixsite.com","comment":"https://x.com/urldna_bot/status/1948201507012161904","timestamp":"1753322409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"23fb8fda-9e9c-51bf-9314-e51448881166","type":"url","category":"Network activity","to_ids":true,"value":"https://webmailservice08.wixsite.com/my-site","comment":"https://x.com/urldna_bot/status/1948201507012161904","timestamp":"1753322409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4ef21e10-815c-5b95-8309-9fa7954aa489","type":"url","category":"Network activity","to_ids":true,"value":"https://gear-increases-prefers-gender.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0ae208cf-f9f3-591f-b10d-11ccff7d211a","type":"url","category":"Network activity","to_ids":true,"value":"https://golden-founded-liz-openings.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"6658a80d-0b66-599c-a72d-7ce768d14c1f","type":"domain","category":"Network activity","to_ids":true,"value":"golden-founded-liz-openings.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"a95a2be1-9d47-57ec-b9cc-8920f7d100fa","type":"domain","category":"Network activity","to_ids":true,"value":"gear-increases-prefers-gender.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"84d18b0a-97ec-5a61-9118-5ef062050423","type":"url","category":"Network activity","to_ids":true,"value":"https://science-payments-comics-dom.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"ee7d9318-2968-5d8b-8e46-51b675fffcf9","type":"domain","category":"Network activity","to_ids":true,"value":"science-payments-comics-dom.trycloudflare.com","comment":"https://x.com/momomopas/status/1948226633896431816","timestamp":"1753328400","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"9859e221-15df-5653-9d15-2246e491fae5","type":"domain","category":"Network activity","to_ids":true,"value":"pub-682ad3b65d944376b919745aae3c56d4.r2.dev","comment":"https://x.com/urldna_bot/status/1948231687558594584","timestamp":"1753329605","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b92d3556-f069-51aa-b59e-01f40ba93680","type":"url","category":"Network activity","to_ids":true,"value":"http://pub-682ad3b65d944376b919745aae3c56d4.r2.dev/document29.html","comment":"https://x.com/urldna_bot/status/1948231687558594584","timestamp":"1753329605","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b14f29a3-c240-5d92-b23b-261c2a70a2a0","type":"md5","category":"Payload delivery","to_ids":true,"value":"682ad3b65d944376b919745aae3c56d4","comment":"https://x.com/urldna_bot/status/1948231687558594584","timestamp":"1753329605","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b85b8988-0b86-5078-9bdb-087374add46a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.77.168","comment":"https://x.com/Metemcyber/status/1948261115563037054","timestamp":"1753336621","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6359fd82-cc82-50b4-af12-ae9a716f3638","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.210.67","comment":"https://x.com/Metemcyber/status/1948261115563037054","timestamp":"1753336621","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30d9e7ac-e743-5108-97a3-9d7a9421f7e1","type":"url","category":"Network activity","to_ids":true,"value":"https://rznzi0.top/nsCCtsCdx/","comment":"https://x.com/Metemcyber/status/1948261115563037054","timestamp":"1753336621","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8066658-5bfd-59b3-b53d-573e5796768c","type":"domain","category":"Network activity","to_ids":true,"value":"rznzi0.top","comment":"https://x.com/Metemcyber/status/1948261115563037054","timestamp":"1753336621","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b82e705a-aaba-5aaf-a6cb-63d347d752fb","type":"url","category":"Network activity","to_ids":true,"value":"http://heranfirsatlaryakinlardasizleribekliyor.xyz/sadece-online-ozel/urun.php?r=75","comment":"https://x.com/urldna_bot/status/1948261891379241008","timestamp":"1753336806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8d751864-36c6-5a52-8aeb-e0760db5b80d","type":"domain","category":"Network activity","to_ids":true,"value":"heranfirsatlaryakinlardasizleribekliyor.xyz","comment":"https://x.com/urldna_bot/status/1948261891379241008","timestamp":"1753336806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"14447607-619c-567c-bdd7-36ef72b3079f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.68.123","comment":"https://x.com/Metemcyber/status/1948263141835477375","timestamp":"1753337104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6bf91bc9-cc4c-51b6-919b-4d2b6e054220","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.195.88","comment":"https://x.com/Metemcyber/status/1948263141835477375","timestamp":"1753337104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5a5173e8-f491-5763-8609-f6b8ac8c126d","type":"domain","category":"Network activity","to_ids":true,"value":"1jfr2v.top","comment":"https://x.com/Metemcyber/status/1948263141835477375","timestamp":"1753337104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7857fe39-f710-5234-ae05-5feb8a591e2a","type":"url","category":"Network activity","to_ids":true,"value":"https://1jfr2v.top/nsCCtsCdx/","comment":"https://x.com/Metemcyber/status/1948263141835477375","timestamp":"1753337104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2ff6a3b-fbf6-5e88-91ab-369d318b6713","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-vestig.fphhvu.cn/RSV_P/smart_index.htm/","comment":"https://x.com/harugasumi/status/1948263920679944611","timestamp":"1753337290","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f63292d-cc50-5118-8c38-f3c8df06eaee","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-vestig.fphhvu.cn","comment":"https://x.com/harugasumi/status/1948263920679944611","timestamp":"1753337290","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba7c6b6a-4635-5fbb-a655-249749ac1615","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.133.110","comment":"https://x.com/Metemcyber/status/1948265929231479102","timestamp":"1753337769","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dd3e5f68-d60e-5a8a-b723-c19f0e2afe80","type":"domain","category":"Network activity","to_ids":true,"value":"czb8r1.top","comment":"https://x.com/Metemcyber/status/1948265929231479102","timestamp":"1753337769","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc329638-5b09-5aba-bc90-281902dec974","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.13.236","comment":"https://x.com/Metemcyber/status/1948265929231479102","timestamp":"1753337769","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43d1c4ea-be0d-50d6-bd5c-4925f0fe1699","type":"url","category":"Network activity","to_ids":true,"value":"https://czb8r1.top/nsCCtsCdx/","comment":"https://x.com/Metemcyber/status/1948265929231479102","timestamp":"1753337769","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bca388e5-0e7f-5af3-969b-34a51b739f53","type":"url","category":"Network activity","to_ids":true,"value":"https://pimateck.jp","comment":"https://x.com/harugasumi/status/1948268609450770901","timestamp":"1753338408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75c77cf6-89b1-5305-a8e2-28d521acff06","type":"domain","category":"Network activity","to_ids":true,"value":"pimateck.jp","comment":"https://x.com/harugasumi/status/1948268609450770901","timestamp":"1753338408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d25962c7-71bc-5a68-ad3e-525c76b888cb","type":"url","category":"Network activity","to_ids":true,"value":"http://47.105.51.165:2000","comment":"https://x.com/drb_ra/status/1948273423500656694","timestamp":"1753339555","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3e6aa1ca-c2ef-5c4d-8a5e-2d31fac9c4bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.105.51.165","comment":"https://x.com/drb_ra/status/1948273423500656694","timestamp":"1753339555","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"fdea2d90-e9e5-5f13-9583-11e7799d17ea","type":"url","category":"Network activity","to_ids":true,"value":"http://85.102.13.26:9999","comment":"https://x.com/drb_ra/status/1948273942126374978","timestamp":"1753339679","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d1764c44-2c15-5fa4-9782-ea0e8aaed563","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.102.13.26","comment":"https://x.com/drb_ra/status/1948273964758774072","timestamp":"1753339685","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ad185085-592b-5352-b719-dc786ff10651","type":"url","category":"Network activity","to_ids":true,"value":"http://85.102.13.26:3000","comment":"https://x.com/drb_ra/status/1948273964758774072","timestamp":"1753339685","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"566b5118-c84f-5864-a766-eed99817f5e1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.62.139:9999","comment":"https://x.com/drb_ra/status/1948273986325922186","timestamp":"1753339690","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a898443f-bc9d-5dc6-b9ba-81afaf7d5463","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.81.62.139","comment":"https://x.com/drb_ra/status/1948273986325922186","timestamp":"1753339690","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8d606a2c-f854-582c-8b87-5616c2359b7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"199.248.230.143","comment":"https://x.com/drb_ra/status/1948274008761286737","timestamp":"1753339695","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7572827b-8959-5732-9d29-f44e826d319d","type":"url","category":"Network activity","to_ids":true,"value":"http://199.248.230.143:80","comment":"https://x.com/drb_ra/status/1948274008761286737","timestamp":"1753339695","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cae3b8e4-bf91-5073-ac6b-618c5554b669","type":"url","category":"Network activity","to_ids":true,"value":"http://34.86.231.233:25","comment":"https://x.com/drb_ra/status/1948274031599259718","timestamp":"1753339700","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5c875dd7-6de4-5f98-b14c-298b1e471669","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.56:45051","comment":"https://x.com/drb_ra/status/1948274054445576247","timestamp":"1753339706","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"2b0ae53a-643c-5331-a9de-8c6480d68073","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.56","comment":"https://x.com/drb_ra/status/1948274054445576247","timestamp":"1753339706","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"a6bd7fc0-7ed9-5d4d-845b-0083b38c67ca","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.53.227:443","comment":"https://x.com/drb_ra/status/1948274076805382214","timestamp":"1753339711","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"103ca944-d605-5989-9c8b-1b6480b1d8dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.242.171.49","comment":"https://x.com/drb_ra/status/1948274098611565051","timestamp":"1753339716","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ab1798ef-9884-5128-b8f0-cfa35a7ee1f7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.242.171.49:443","comment":"https://x.com/drb_ra/status/1948274098611565051","timestamp":"1753339716","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b0b9b6d5-bdab-5942-a946-d17cc4289746","type":"url","category":"Network activity","to_ids":true,"value":"http://181.174.164.139:443","comment":"https://x.com/drb_ra/status/1948274121990713555","timestamp":"1753339722","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"6239c37c-6ea8-538e-a539-6ce6f21e9725","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.174.164.139","comment":"https://x.com/drb_ra/status/1948274121990713555","timestamp":"1753339722","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"d91005d2-f2c1-55fa-a712-9da6e80a8b67","type":"url","category":"Network activity","to_ids":true,"value":"http://111.90.151.59:7443","comment":"https://x.com/drb_ra/status/1948274145545875842","timestamp":"1753339728","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"7f6e4d3c-4652-56d3-821e-4e05ef56edee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.90.151.59","comment":"https://x.com/drb_ra/status/1948274145545875842","timestamp":"1753339728","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b1c8cf60-6ec0-5f92-ad45-f46eb0641beb","type":"domain","category":"Network activity","to_ids":true,"value":"XSS.is","comment":"https://x.com/getriffsec/status/1948274231080366553","timestamp":"1753339748","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a119b35d-a799-5fb8-80d5-b63c52158fa4","type":"url","category":"Network activity","to_ids":true,"value":"http://XSS.is","comment":"https://x.com/getriffsec/status/1948274231080366553","timestamp":"1753339748","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"329076f9-9f4c-543d-bc59-5b7333876d9d","type":"url","category":"Network activity","to_ids":true,"value":"http://91.99.136.143:11601","comment":"https://x.com/drb_ra/status/1948274663857004601","timestamp":"1753339851","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d5c72fb8-a120-54c2-98cb-349bd09fdff4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.99.136.143","comment":"https://x.com/drb_ra/status/1948274663857004601","timestamp":"1753339851","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"aa38a807-cade-59a2-8a2d-79381391a4ed","type":"url","category":"Network activity","to_ids":true,"value":"http://47.107.234.40:3232","comment":"https://x.com/drb_ra/status/1948274687164723336","timestamp":"1753339857","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"938c1809-bc59-57f8-ae0a-aa73b7e02a11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.107.234.40","comment":"https://x.com/drb_ra/status/1948274687164723336","timestamp":"1753339857","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"e2250e59-b6ad-5595-95c2-20e084301b16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.232.71.100","comment":"https://x.com/drb_ra/status/1948274713995743365","timestamp":"1753339863","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ef4fd062-4b75-515f-b2a8-549e66bd44a4","type":"url","category":"Network activity","to_ids":true,"value":"http://13.232.71.100:5222","comment":"https://x.com/drb_ra/status/1948274713995743365","timestamp":"1753339863","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8fc7baff-adba-5cef-bd45-2f9a668837a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"130.164.181.230","comment":"https://x.com/drb_ra/status/1948274740587540861","timestamp":"1753339870","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"41a31cfb-7a55-533f-97f4-b1a4c3c5bd12","type":"url","category":"Network activity","to_ids":true,"value":"http://130.164.181.230:443","comment":"https://x.com/drb_ra/status/1948274740587540861","timestamp":"1753339870","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"58a891fe-d853-5956-a026-be880d3f5464","type":"url","category":"Network activity","to_ids":true,"value":"http://102.100.73.246:443","comment":"https://x.com/drb_ra/status/1948274763631092218","timestamp":"1753339875","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c5a64aba-8999-5380-bd93-4083d4f8be79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.100.73.246","comment":"https://x.com/drb_ra/status/1948274763631092218","timestamp":"1753339875","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ff9159c8-69ce-5f01-804d-0680396ef719","type":"url","category":"Network activity","to_ids":true,"value":"https://www2eponfaxfcardcojp.t4949.fit","comment":"https://x.com/harugasumi/status/1948288729854169118","timestamp":"1753343205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2dbb9687-a4d2-52b4-9410-07524a226ded","type":"domain","category":"Network activity","to_ids":true,"value":"www2eponfaxfcardcojp.t4949.fit","comment":"https://x.com/harugasumi/status/1948288729854169118","timestamp":"1753343205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6349ef89-b4fb-5a8c-ae63-f29de2b994aa","type":"url","category":"Network activity","to_ids":true,"value":"https://edeka.gewinnspiel.gratis","comment":"https://x.com/ShadowOpCode/status/1948291281576251709","timestamp":"1753343813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08515885-3d02-5625-8d54-7ff9428ab67c","type":"domain","category":"Network activity","to_ids":true,"value":"edeka.gewinnspiel.gratis","comment":"https://x.com/ShadowOpCode/status/1948291281576251709","timestamp":"1753343813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e53da66-fdc6-582c-923d-c999443cbdbc","type":"domain","category":"Network activity","to_ids":true,"value":"online-taxies.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948292103861092819","timestamp":"1753344009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b77484eb-ddca-58e7-8d49-73b5d92440e2","type":"url","category":"Network activity","to_ids":true,"value":"https://online-taxies.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948292103861092819","timestamp":"1753344009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1d082103-e6bc-5ad7-ab16-433dbca5a109","type":"url","category":"Network activity","to_ids":true,"value":"https://nerdflick.com","comment":"https://x.com/ShadowOpCode/status/1948298219848405246","timestamp":"1753345467","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e4224ff7-2e6c-5d22-bf29-1cef54dda0dc","type":"domain","category":"Network activity","to_ids":true,"value":"nerdflick.com","comment":"https://x.com/ShadowOpCode/status/1948298219848405246","timestamp":"1753345467","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b144f2db-affa-5c96-854a-d4d670454016","type":"url","category":"Network activity","to_ids":true,"value":"https://promopeaks.lat","comment":"https://x.com/ShadowOpCode/status/1948298219848405246","timestamp":"1753345467","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9042691e-a9ee-59a4-9cfd-391ed9b43bb2","type":"domain","category":"Network activity","to_ids":true,"value":"promopeaks.lat","comment":"https://x.com/ShadowOpCode/status/1948298219848405246","timestamp":"1753345467","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee0805bb-0744-546c-a513-15c90e8edf73","type":"domain","category":"Network activity","to_ids":true,"value":"etwcz.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"708e8ac1-1990-56f8-b752-07dc115ef88a","type":"url","category":"Network activity","to_ids":true,"value":"http://etver.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"918953e2-7624-5697-a57b-2637ac78e6fe","type":"domain","category":"Network activity","to_ids":true,"value":"etmut.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1616903-1517-5086-9987-678984858f94","type":"url","category":"Network activity","to_ids":true,"value":"http://etmut.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c0b0130-27ea-52e7-8d22-d82a53043c12","type":"domain","category":"Network activity","to_ids":true,"value":"etver.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39d046f9-783a-5d56-891f-932a417e7d7d","type":"domain","category":"Network activity","to_ids":true,"value":"etkeh.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3435db5-f184-5855-af98-6ab652d90d20","type":"url","category":"Network activity","to_ids":true,"value":"http://etkeh.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a54c241-72a4-5010-ac09-7e4c9e9cbbc9","type":"domain","category":"Network activity","to_ids":true,"value":"etmiy.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a328834e-d2ad-536c-bf3c-16b5b6b3faba","type":"url","category":"Network activity","to_ids":true,"value":"http://etmiy.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6f052da4-c8b9-52f2-8ee6-a0529bf3320a","type":"url","category":"Network activity","to_ids":true,"value":"http://etwcz.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38bbf858-86ad-525b-b435-8ea1f837f9e9","type":"domain","category":"Network activity","to_ids":true,"value":"etetb.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"587e3ca7-292e-50ce-b9c0-6183ffff3396","type":"url","category":"Network activity","to_ids":true,"value":"http://etlbl.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73436a2b-fade-54d1-bf88-48dd7bbc56a4","type":"domain","category":"Network activity","to_ids":true,"value":"etlbl.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ded0f415-7d80-5868-8212-2d3262d1361f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.194.36.87","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"486bae74-965d-5c71-93a6-b902f0ee2920","type":"domain","category":"Network activity","to_ids":true,"value":"etwvt.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bbb1655-f7a8-5d2a-a079-8643d642e7fc","type":"domain","category":"Network activity","to_ids":true,"value":"etnbv.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54344398-7462-5ccf-8766-02ec05bf08a4","type":"url","category":"Network activity","to_ids":true,"value":"http://etnbv.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0c5dfae-50da-5168-a3d7-8b843117e330","type":"url","category":"Network activity","to_ids":true,"value":"http://45.194.36.87","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f25c209-dae7-522b-a339-4c2b30ae0993","type":"url","category":"Network activity","to_ids":true,"value":"http://etetb.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7c5ab91-48bb-5be2-af1b-19fe643bfd7c","type":"url","category":"Network activity","to_ids":true,"value":"http://etwvt.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"364c9a55-05ab-5923-9433-a59ee50de055","type":"url","category":"Network activity","to_ids":true,"value":"http://etpbt.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7769da3-8b35-57fe-b228-a756473c89a4","type":"domain","category":"Network activity","to_ids":true,"value":"etpbt.com","comment":"https://x.com/skocherhan/status/1948303844183584840","timestamp":"1753346808","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eefcc019-a0eb-570a-a57a-97e490adadfe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.242.206","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"1272011d-b1ad-5cff-8cd0-ffee706c66da","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.230.196","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"3c004e11-e2a8-5150-b208-671d36eefdb9","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.242.206","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"eaf7e34c-1e72-52f1-940f-216fecc08d7d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.230.196","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"8202a698-de69-5797-93b4-ee302dc679ca","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.204.137","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"775a14be-b63e-58bf-bc6b-32033d53bb15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.249.46","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"e55444a0-1f7b-53e6-b06a-eaff72fb0418","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.249.46","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"2cd8ef08-595d-5606-9d2c-504eee295432","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.204.137","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"3d00dc98-4e01-5704-8b70-50dbb2823f39","type":"sha256","category":"Payload delivery","to_ids":true,"value":"bd049d589a4165a7b0e5541722f96fefa4c27b53c7949f41c66f155d03268a45","comment":"https://x.com/Cyberteam008/status/1948321207020876109","timestamp":"1753350948","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"},{"name":"malware"}]},{"uuid":"3ada5be1-cb51-56ab-9868-5d4dbcce9dce","type":"url","category":"Network activity","to_ids":true,"value":"http://images-searcher.com","comment":"https://x.com/luke92881/status/1948334289604518204","timestamp":"1753354067","distribution":"5"},{"uuid":"2fe59c35-fda3-5a13-83a0-48b8ba0efa58","type":"domain","category":"Network activity","to_ids":true,"value":"pix-seek.com","comment":"https://x.com/luke92881/status/1948334289604518204","timestamp":"1753354067","distribution":"5"},{"uuid":"54d10f0a-8dfa-58fd-b00d-7c5894a8d402","type":"domain","category":"Network activity","to_ids":true,"value":"images-searcher.com","comment":"https://x.com/luke92881/status/1948334289604518204","timestamp":"1753354067","distribution":"5"},{"uuid":"7c363795-1ac6-59df-a926-7ecb3979dd32","type":"url","category":"Network activity","to_ids":true,"value":"http://pix-seek.com","comment":"https://x.com/luke92881/status/1948334289604518204","timestamp":"1753354067","distribution":"5"},{"uuid":"4e786279-12fa-5913-8fea-0cd03150981e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"372c8dc7df9e584f117c9543f1fbe1cc3674e8e47a848feaefa049e8e71870dc","comment":"https://x.com/ShadowChasing1/status/1948340732600975558","timestamp":"1753355603","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"7f04f719-3673-5b35-90db-0112b12704db","type":"domain","category":"Network activity","to_ids":true,"value":"ausumengineering.com","comment":"https://x.com/masaomi346/status/1948347647418617890","timestamp":"1753357252","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08ecff90-9f32-5079-9d40-781e9a52ef72","type":"url","category":"Network activity","to_ids":true,"value":"https://ausumengineering.com/OR/Sites/index.html","comment":"https://x.com/masaomi346/status/1948347647418617890","timestamp":"1753357252","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c91ac62c-e147-5e92-9f16-04d8cf1e375d","type":"url","category":"Network activity","to_ids":true,"value":"https://ausumengineering.com/JP/Sites/index.html","comment":"https://x.com/masaomi346/status/1948347647418617890","timestamp":"1753357252","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40ad6a0c-2ae1-54c7-8149-0a09fc23a25e","type":"domain","category":"Network activity","to_ids":true,"value":"svckhc.wixsite.com","comment":"https://x.com/urldna_bot/status/1948352488970567885","timestamp":"1753358406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"35f88640-81fa-59a1-864a-cd6ea3e29390","type":"url","category":"Network activity","to_ids":true,"value":"https://svckhc.wixsite.com/attmail","comment":"https://x.com/urldna_bot/status/1948352488970567885","timestamp":"1753358406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c13f707a-6c57-526a-9910-d2a4d2698368","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:31760","comment":"https://x.com/SarlackLab/status/1948352531291050130","timestamp":"1753358416","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"7c76c128-ca04-5350-9696-c9de56e42133","type":"domain","category":"Network activity","to_ids":true,"value":"style-vitamin.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948352531291050130","timestamp":"1753358416","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1948352531291050130","timestamp":"1753358416","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"300b91ff-9c8e-591b-ba93-1c21f67b55dc","type":"url","category":"Network activity","to_ids":true,"value":"http://style-vitamin.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948352531291050130","timestamp":"1753358416","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"108d44f5-4696-59a4-b82e-c972366a6ff1","type":"md5","category":"Payload delivery","to_ids":true,"value":"aa1b4aa4d2faec5723e4d9cb8a3c5ec0","comment":"https://x.com/skocherhan/status/1948358981463707941","timestamp":"1753359954","distribution":"5"},{"uuid":"f84543bd-3137-5679-86a3-fca76ca13854","type":"md5","category":"Payload delivery","to_ids":true,"value":"3becdef447c0b52db0907449be6b794f","comment":"https://x.com/skocherhan/status/1948358981463707941","timestamp":"1753359954","distribution":"5"},{"uuid":"492c229b-58d0-5cdd-9682-05ba31f4332c","type":"md5","category":"Payload delivery","to_ids":true,"value":"f72ad710abf413b5f7f4310ffba28749","comment":"https://x.com/skocherhan/status/1948358981463707941","timestamp":"1753359954","distribution":"5"},{"uuid":"68b22ff9-696a-5838-8228-95532f94b7cb","type":"domain","category":"Network activity","to_ids":true,"value":"theazot.icu","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"944bb6ad-43b2-5fd7-9377-bff2754d482d","type":"url","category":"Network activity","to_ids":true,"value":"http://breachforums.is","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"c580b29c-840a-539f-b5ef-16be01c0da83","type":"url","category":"Network activity","to_ids":true,"value":"http://theazot.icu","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"ae0285f5-710c-5ddc-9746-aaf6310e9bc8","type":"domain","category":"Network activity","to_ids":true,"value":"breachforums.is","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"aadc38e1-e6fc-5185-9ccf-e92fd8655ed6","type":"url","category":"Network activity","to_ids":true,"value":"http://theazot.xyz","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"bc5f3a1b-be66-5b5b-adb1-ded9be344284","type":"domain","category":"Network activity","to_ids":true,"value":"theazot.xyz","comment":"https://x.com/skocherhan/status/1948359170035433828","timestamp":"1753359999","distribution":"5"},{"uuid":"5fb43eb8-37e9-55e0-b7ab-544a6b585352","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8b6acc087e403b913254dd7d99f09136dc54fa45cf3029a8566151120d34d1c2","comment":"https://x.com/skocherhan/status/1948393151770550655","timestamp":"1753368101","distribution":"5"},{"uuid":"9e321699-62c5-559c-b06f-3430e63e632e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"969fb3e705ba8afe757ba7617e75d1096d4793d14796e2734613cfcc50675652","comment":"https://x.com/skocherhan/status/1948393151770550655","timestamp":"1753368101","distribution":"5"},{"uuid":"511274fe-d4da-5179-9a41-1b098d8c13c8","type":"domain","category":"Network activity","to_ids":true,"value":"hhmkwl.cn","comment":"https://x.com/harugasumi/status/1948401477875278194","timestamp":"1753370086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea39c27d-321a-514b-a662-95a8008ad33a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.hhmkwl.cn","comment":"https://x.com/harugasumi/status/1948401477875278194","timestamp":"1753370086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9d5c78e-d8af-5666-aca3-7e1e69334e22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.33.60.129","comment":"https://x.com/harugasumi/status/1948407927846617226","timestamp":"1753371624","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"66241966-5768-5b0c-ae3c-99a39d075962","type":"url","category":"Network activity","to_ids":true,"value":"https://line.me/ti/p/AFhqAaG2fm","comment":"https://x.com/harugasumi/status/1948407927846617226","timestamp":"1753371624","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"814fed60-0bd0-51a4-98e5-b8dbdedb1e47","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.76.21.93","comment":"https://x.com/harugasumi/status/1948407927846617226","timestamp":"1753371624","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f694ec3e-b6a3-5ace-852b-1b1c9a291edd","type":"domain","category":"Network activity","to_ids":true,"value":"fbgg.online","comment":"https://x.com/harugasumi/status/1948407927846617226","timestamp":"1753371624","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"480e5fef-32a0-5bc3-8487-f8c7ba155371","type":"url","category":"Network activity","to_ids":true,"value":"https://fbgg.online/sdah","comment":"https://x.com/harugasumi/status/1948407927846617226","timestamp":"1753371624","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"344f6e81-24a1-5a5e-a567-36492b6a327e","type":"md5","category":"Payload delivery","to_ids":true,"value":"bf73b53bb84355a0ef0db44eda904267","comment":"https://x.com/ReBensk/status/1948428588384223586","timestamp":"1753376550","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"956bf195-d6ee-5645-af82-2b8897853915","type":"md5","category":"Payload delivery","to_ids":true,"value":"73d5fc8a679c256723ce041e7e166811","comment":"https://x.com/ReBensk/status/1948433861433852323","timestamp":"1753377807","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"bdc86df5-7fb2-5dc5-b6b9-5ea2b5f2e966","type":"domain","category":"Network activity","to_ids":true,"value":"ecimg.cafe24img.com","comment":"https://x.com/skocherhan/status/1948434982474564028","timestamp":"1753378074","distribution":"5"},{"uuid":"17ba3e7f-bd80-5ad9-8cd4-ec12a8c0de11","type":"url","category":"Network activity","to_ids":true,"value":"http://ecimg.cafe24img.com/pg1661b51356846073/astrove810/web/tracking/index.html","comment":"https://x.com/skocherhan/status/1948434982474564028","timestamp":"1753378074","distribution":"5"},{"uuid":"44011410-6f0a-56e6-92ed-cec77b12387c","type":"domain","category":"Network activity","to_ids":true,"value":"zimfree.weebly.com","comment":"https://x.com/urldna_bot/status/1948443087660871887","timestamp":"1753380007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d7cd97ff-e156-5364-bad3-a2ccc18a3a07","type":"url","category":"Network activity","to_ids":true,"value":"https://zimfree.weebly.com","comment":"https://x.com/urldna_bot/status/1948443087660871887","timestamp":"1753380007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c3bf372f-ae2b-5906-ad8b-e31b368bc0b8","type":"url","category":"Network activity","to_ids":true,"value":"http://techzcore.org","comment":"https://x.com/teamcymru_S2/status/1948448626323099733","timestamp":"1753381327","distribution":"5"},{"uuid":"43005f6c-77c8-5810-8f2c-5b511b149cae","type":"domain","category":"Network activity","to_ids":true,"value":"cypowertech.org","comment":"https://x.com/teamcymru_S2/status/1948448626323099733","timestamp":"1753381327","distribution":"5"},{"uuid":"8a3f9fdc-06a6-54f5-8d44-29d6f24a1a2e","type":"url","category":"Network activity","to_ids":true,"value":"http://cypowertech.org","comment":"https://x.com/teamcymru_S2/status/1948448626323099733","timestamp":"1753381327","distribution":"5"},{"uuid":"dc3e48ce-f39d-5633-ba66-1e0ada1ca142","type":"domain","category":"Network activity","to_ids":true,"value":"techzcore.org","comment":"https://x.com/teamcymru_S2/status/1948448626323099733","timestamp":"1753381327","distribution":"5"},{"uuid":"6aa3d035-1016-5875-9155-5d3353fb50b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.131.108.94","comment":"https://x.com/teamcymru_S2/status/1948448626323099733","timestamp":"1753381327","distribution":"5"},{"uuid":"efc780e2-b2df-5e5d-ae7d-0fbd914c8e09","type":"domain","category":"Network activity","to_ids":true,"value":"compute.hwclouds-dns.com","comment":"https://x.com/SarlackLab/status/1948452931084157048","timestamp":"1753382353","distribution":"5"},{"uuid":"2ba53dae-6e42-5571-9fea-1b2d8d03f59d","type":"url","category":"Network activity","to_ids":true,"value":"http://compute.hwclouds-dns.com","comment":"https://x.com/SarlackLab/status/1948452931084157048","timestamp":"1753382353","distribution":"5"},{"uuid":"2ebdf848-f334-521f-a6fc-301b06140940","type":"url","category":"Network activity","to_ids":true,"value":"http://170.238.45.40:31337","comment":"https://x.com/drb_ra/status/1948454592275952080","timestamp":"1753382749","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9f65c034-526c-5c41-b25d-74a1ff82f70f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.238.45.40","comment":"https://x.com/drb_ra/status/1948454592275952080","timestamp":"1753382749","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ccc360d5-eaf1-524d-a977-a14435fd8da2","type":"url","category":"Network activity","to_ids":true,"value":"http://139.59.44.30:31337","comment":"https://x.com/drb_ra/status/1948454615491772843","timestamp":"1753382755","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4f6aabad-7545-57fe-bb47-074eb3461bbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.59.44.30","comment":"https://x.com/drb_ra/status/1948454615491772843","timestamp":"1753382755","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"173b0b2f-b38e-572f-a60e-caf8150367d0","type":"url","category":"Network activity","to_ids":true,"value":"http://198.7.124.59:31337","comment":"https://x.com/drb_ra/status/1948454636668813785","timestamp":"1753382760","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"45e66de2-6012-5696-ada0-49706608f2c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.7.124.59","comment":"https://x.com/drb_ra/status/1948454636668813785","timestamp":"1753382760","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"30468438-037e-57f4-b5d3-7d2edc6ffb4f","type":"url","category":"Network activity","to_ids":true,"value":"http://85.198.82.179:31337","comment":"https://x.com/drb_ra/status/1948454659812982914","timestamp":"1753382766","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9fc39570-4699-57b3-890c-69f9fd39900c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.198.82.179","comment":"https://x.com/drb_ra/status/1948454659812982914","timestamp":"1753382766","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2147143e-ba49-5cbd-b8fd-fa3cc1b11117","type":"url","category":"Network activity","to_ids":true,"value":"http://117.50.172.208:3333","comment":"https://x.com/drb_ra/status/1948455179663409600","timestamp":"1753382890","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"c3757a8d-4978-5d5f-ad8a-c3290273451a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.50.172.208","comment":"https://x.com/drb_ra/status/1948455179663409600","timestamp":"1753382890","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"a3dd0ea2-36d6-556d-b07a-0a9ba81ff33c","type":"url","category":"Network activity","to_ids":true,"value":"http://102.209.118.14:443","comment":"https://x.com/drb_ra/status/1948455201590894916","timestamp":"1753382895","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"841056d7-5f5a-5c4a-8f5b-aa8a5a77bdfe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.209.118.14","comment":"https://x.com/drb_ra/status/1948455201590894916","timestamp":"1753382895","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"171ac04b-dd08-57d0-af86-0fe5813b0f45","type":"url","category":"Network activity","to_ids":true,"value":"http://89.117.123.250:8443","comment":"https://x.com/drb_ra/status/1948455224018174106","timestamp":"1753382900","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4d32ffe3-0e0e-50df-9b61-5839bfcdc570","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.117.123.250","comment":"https://x.com/drb_ra/status/1948455224018174106","timestamp":"1753382900","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b9cbb8fa-fe38-51ff-b9b8-0d67f399ba1e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.12.211:443","comment":"https://x.com/drb_ra/status/1948455245740474454","timestamp":"1753382905","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"46fce5a9-7034-50da-99cd-c0273143c392","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.12.211","comment":"https://x.com/drb_ra/status/1948455245740474454","timestamp":"1753382905","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"9bd055f8-8942-51a4-a415-a68bfd629e91","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.140.23:443","comment":"https://x.com/drb_ra/status/1948455268062540060","timestamp":"1753382911","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7768c570-468b-51dc-abba-d6d86d52394e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.140.23","comment":"https://x.com/drb_ra/status/1948455268062540060","timestamp":"1753382911","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"43ca63d5-6562-5e29-b45a-d70e8d8d7cae","type":"url","category":"Network activity","to_ids":true,"value":"http://3.72.32.252:443","comment":"https://x.com/drb_ra/status/1948455289830654357","timestamp":"1753382916","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c4772a67-9e54-59c5-8443-71833d96287f","type":"url","category":"Network activity","to_ids":true,"value":"http://15.200.139.55:443","comment":"https://x.com/drb_ra/status/1948455313369432421","timestamp":"1753382921","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fcae2887-01c5-5e17-8012-8f3dc5dd8a35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.200.139.55","comment":"https://x.com/drb_ra/status/1948455313369432421","timestamp":"1753382921","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"bc84af58-1200-5888-ab86-692206a0af67","type":"url","category":"Network activity","to_ids":true,"value":"http://54.184.56.60:443","comment":"https://x.com/drb_ra/status/1948455336501039592","timestamp":"1753382927","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1e0ce30d-11c2-5f2d-867e-27a6ffb37f55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.184.56.60","comment":"https://x.com/drb_ra/status/1948455336501039592","timestamp":"1753382927","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7a21ba85-739c-59e9-be84-82acc58a1903","type":"url","category":"Network activity","to_ids":true,"value":"http://87.228.114.68:7443","comment":"https://x.com/drb_ra/status/1948455357870998008","timestamp":"1753382932","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b3395813-020f-5f5a-a7fc-01001b869b87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.228.114.68","comment":"https://x.com/drb_ra/status/1948455357870998008","timestamp":"1753382932","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"08c3aa1b-363d-5439-a072-9a1ad3f40e2c","type":"url","category":"Network activity","to_ids":true,"value":"http://109.196.100.217:7443","comment":"https://x.com/drb_ra/status/1948455381442703631","timestamp":"1753382938","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b4a69750-3296-5777-8021-2d5df600a1a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.196.100.217","comment":"https://x.com/drb_ra/status/1948455381442703631","timestamp":"1753382938","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"59f78441-bb26-5bdf-98f8-5dece3e28441","type":"url","category":"Network activity","to_ids":true,"value":"http://45.78.225.208:7443","comment":"https://x.com/drb_ra/status/1948455409683235084","timestamp":"1753382944","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"2f29b1bf-3a3d-553d-a8a7-aa7b1c5b1f70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.78.225.208","comment":"https://x.com/drb_ra/status/1948455409683235084","timestamp":"1753382944","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0b3fca46-ff24-5243-a6ee-1932962639cf","type":"url","category":"Network activity","to_ids":true,"value":"http://212.193.2.162:3389","comment":"https://x.com/drb_ra/status/1948455928002424889","timestamp":"1753383068","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1d074115-0fa5-5738-b679-539bcb029c09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.193.2.162","comment":"https://x.com/drb_ra/status/1948455928002424889","timestamp":"1753383068","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cea98fe7-5eae-5d6f-a196-ec55dbf6096c","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.111.244:443","comment":"https://x.com/drb_ra/status/1948455949917675584","timestamp":"1753383073","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"468bb075-f6ae-59a6-93f5-a023d6b574f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.111.244","comment":"https://x.com/drb_ra/status/1948455949917675584","timestamp":"1753383073","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"08e10b8a-06ee-5657-84bf-9544f811a33a","type":"url","category":"Network activity","to_ids":true,"value":"http://176.32.38.168:443","comment":"https://x.com/drb_ra/status/1948455974366286093","timestamp":"1753383079","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"96a6965a-47c3-5dac-bd19-6b21bb132f3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.32.38.168","comment":"https://x.com/drb_ra/status/1948455974366286093","timestamp":"1753383079","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"288fae45-0288-58c0-86bd-477ef8acb807","type":"url","category":"Network activity","to_ids":true,"value":"http://8.139.5.71:47486","comment":"https://x.com/drb_ra/status/1948456000551616551","timestamp":"1753383085","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dc343207-f1fa-55de-b2cd-27c283b580b1","type":"url","category":"Network activity","to_ids":true,"value":"http://3.96.189.206:1224","comment":"https://x.com/drb_ra/status/1948456023184081069","timestamp":"1753383091","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6efd8149-e6a3-5840-85ef-a3ae7a6892a9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.96.189.206:1024","comment":"https://x.com/drb_ra/status/1948456047058059384","timestamp":"1753383096","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1d3fb656-5a4e-5966-9674-04dca25bdfac","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.166.161:8636","comment":"https://x.com/drb_ra/status/1948456069325267022","timestamp":"1753383102","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9be97072-2e2d-5366-aec8-57adb57ee139","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.166.161","comment":"https://x.com/drb_ra/status/1948456069325267022","timestamp":"1753383102","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a5527f71-f7db-5a2f-9c44-e6ee55ea2158","type":"url","category":"Network activity","to_ids":true,"value":"http://34.23.44.248:8808","comment":"https://x.com/drb_ra/status/1948456094097146034","timestamp":"1753383108","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f19dc6a1-a9b4-52ca-8eb3-cf261ff01d75","type":"url","category":"Network activity","to_ids":true,"value":"http://34.250.176.156:80","comment":"https://x.com/drb_ra/status/1948456117404926443","timestamp":"1753383113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3f29c82c-8bc3-5c75-95f9-e81796f0e316","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.250.176.156","comment":"https://x.com/drb_ra/status/1948456117404926443","timestamp":"1753383113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e14778fb-30df-54eb-9a3c-b9a2e8c27d40","type":"domain","category":"Network activity","to_ids":true,"value":"y3betbet.com","comment":"https://x.com/urldna_bot/status/1948473281910100218","timestamp":"1753387205","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"837e36f5-b15c-5fb9-b95e-74901a0f3ab5","type":"url","category":"Network activity","to_ids":true,"value":"http://y3betbet.com","comment":"https://x.com/urldna_bot/status/1948473281910100218","timestamp":"1753387205","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"91fd0458-b2b1-5ab6-81fb-7df0ce38b93b","type":"url","category":"Network activity","to_ids":true,"value":"http://64.188.76.192","comment":"https://x.com/threatquery/status/1948488372936151447","timestamp":"1753390803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"9516782d-bc67-56a0-9d3f-1a1aae6cbcb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.188.76.192","comment":"https://x.com/threatquery/status/1948488372936151447","timestamp":"1753390803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"0fa0b6e2-9ef9-52ff-a1aa-79734f2b3a5b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.207.140.146","comment":"https://x.com/threatquery/status/1948488377226965441","timestamp":"1753390804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"5dc7da95-db45-5a5f-86c2-1f9f05af630d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.207.140.146","comment":"https://x.com/threatquery/status/1948488377226965441","timestamp":"1753390804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"edf72c67-3118-500e-92b7-ab68add68f0f","type":"url","category":"Network activity","to_ids":true,"value":"http://31.31.197.16","comment":"https://x.com/threatquery/status/1948488375029137727","timestamp":"1753390804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"362fd521-ca0e-5a1c-9a2c-f8b0f19d1a21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.31.197.16","comment":"https://x.com/threatquery/status/1948488375029137727","timestamp":"1753390804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f1bd9460-adf5-5c1f-a0ce-d675720e40be","type":"domain","category":"Network activity","to_ids":true,"value":"blog.plustopmainstream.digital","comment":"https://x.com/skocherhan/status/1948490384088195519","timestamp":"1753391283","distribution":"5"},{"uuid":"63f5bf75-bec1-532c-81b4-b6b16d83ada1","type":"url","category":"Network activity","to_ids":true,"value":"http://blog.plustopmainstream.digital","comment":"https://x.com/skocherhan/status/1948490384088195519","timestamp":"1753391283","distribution":"5"},{"uuid":"12752fc3-5c67-56df-9205-682ba1699c77","type":"domain","category":"Network activity","to_ids":true,"value":"akbarjoje.com","comment":"https://x.com/urldna_bot/status/1948503481733841271","timestamp":"1753394406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"773eda32-ddfa-5a33-8c9a-08201a329e31","type":"url","category":"Network activity","to_ids":true,"value":"https://akbarjoje.com/-/home.php","comment":"https://x.com/urldna_bot/status/1948503481733841271","timestamp":"1753394406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ae807cd0-ae3e-5b21-88da-e3ebdaf6f5ec","type":"url","category":"Network activity","to_ids":true,"value":"http://34.23.44.248:1177","comment":"https://x.com/SarlackLab/status/1948503524569997807","timestamp":"1753394416","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"3ebdaf90-9810-5d5c-932a-362a07b6c4e7","type":"domain","category":"Network activity","to_ids":true,"value":"roofcolor.com","comment":"https://x.com/skocherhan/status/1948506939723579832","timestamp":"1753395230","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"21d74119-a7e2-5131-9a5c-1e4146fe73c5","type":"url","category":"Network activity","to_ids":true,"value":"http://www.roofcolor.com/wp-includes/js/src/list.php?f=%25computername%25[.]txt","comment":"https://x.com/skocherhan/status/1948506939723579832","timestamp":"1753395230","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"38830a06-b215-58e4-8544-14daccefec85","type":"domain","category":"Network activity","to_ids":true,"value":"jcxkb9.top","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b8361fa-c6ad-5ba1-8e16-44b8dea790bf","type":"url","category":"Network activity","to_ids":true,"value":"https://jcxkb9.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f079a884-51fd-5f1d-9400-88540be2bdb2","type":"domain","category":"Network activity","to_ids":true,"value":"jd4xzw.top","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bdd2bf36-b961-5726-9fd9-3da99d2c9add","type":"url","category":"Network activity","to_ids":true,"value":"https://jd4xzw.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"610c51cb-0019-5483-83be-77b743296075","type":"domain","category":"Network activity","to_ids":true,"value":"jm7ew1.top","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5fb7e8de-6d58-58f1-981c-3ece6095d997","type":"url","category":"Network activity","to_ids":true,"value":"https://jm7ew1.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"500a2ad1-2d4a-5804-a46e-e16d5047cdd8","type":"domain","category":"Network activity","to_ids":true,"value":"pm1dmm.top","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"95de2487-1afb-5662-9240-0ee070f9261c","type":"url","category":"Network activity","to_ids":true,"value":"https://pm1dmm.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1948508325521621041","timestamp":"1753395560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8c1d395-2a7d-5e4f-a76b-a2707ebe5cec","type":"md5","category":"Payload delivery","to_ids":true,"value":"cf3f59e2c4c8767697ea46475171697c","comment":"https://x.com/skocherhan/status/1948518576048230645","timestamp":"1753398004","distribution":"5"},{"uuid":"b4839513-d13a-5bcb-88e6-00226616bcb2","type":"domain","category":"Network activity","to_ids":true,"value":"protonhb.eb-sites.com","comment":"https://x.com/urldna_bot/status/1948533693837885764","timestamp":"1753401609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c6a7b751-1083-52d0-8c2f-eda542c4f846","type":"url","category":"Network activity","to_ids":true,"value":"https://protonhb.eb-sites.com","comment":"https://x.com/urldna_bot/status/1948533693837885764","timestamp":"1753401609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4318e8ae-4dc7-5c76-8e7f-e156316db3ae","type":"domain","category":"Network activity","to_ids":true,"value":"attmalsdsddf.weebly.com","comment":"https://x.com/urldna_bot/status/1948563881309122946","timestamp":"1753408806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"71274dbe-8aeb-5b21-ad00-de1a80b10be0","type":"url","category":"Network activity","to_ids":true,"value":"https://attmalsdsddf.weebly.com","comment":"https://x.com/urldna_bot/status/1948563881309122946","timestamp":"1753408806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4fb9f22f-5ae6-5878-b83c-319e84756238","type":"domain","category":"Network activity","to_ids":true,"value":"asmie.live","comment":"https://x.com/Metemcyber/status/1948567904456241379","timestamp":"1753409765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"476660ac-480a-5abd-a025-a2006de7242b","type":"url","category":"Network activity","to_ids":true,"value":"https://asmie.live/zkqylm?rbswv=gpuybohluu","comment":"https://x.com/Metemcyber/status/1948567904456241379","timestamp":"1753409765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e3aa190-3838-508f-a580-fa55ace4efe1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.20.244","comment":"https://x.com/Metemcyber/status/1948567904456241379","timestamp":"1753409765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"490057a0-af26-515f-9863-b1b28c1e51c9","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.194.227","comment":"https://x.com/Metemcyber/status/1948567904456241379","timestamp":"1753409765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a01481eb-19dc-5da9-b906-2eb9c7118e0d","type":"url","category":"Network activity","to_ids":true,"value":"https://qxmcsd.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14706acd-b60b-54a7-a8e4-e6007f0c42bd","type":"domain","category":"Network activity","to_ids":true,"value":"pxcfjv.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a055ba79-c31b-533f-b777-3b5f5f92a267","type":"url","category":"Network activity","to_ids":true,"value":"https://pxcfjv.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f38c2b51-a563-5764-bdb3-a1e4762c8e0f","type":"domain","category":"Network activity","to_ids":true,"value":"qxmcsd.cn","comment":"https://x.com/Metemcyber/status/1948569672116539707","timestamp":"1753410187","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ee9346b-f7bf-5150-bff7-d6761f701bee","type":"url","category":"Network activity","to_ids":true,"value":"https://ellqpv.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"009977ea-438c-5a37-bfae-291e9f70a27b","type":"url","category":"Network activity","to_ids":true,"value":"https://yctibb.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"469bf927-1670-51ea-8168-4946bf28fccd","type":"domain","category":"Network activity","to_ids":true,"value":"yctibb.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3072a46-7314-582b-8caa-04127dea68fb","type":"domain","category":"Network activity","to_ids":true,"value":"ellqpv.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d754c10-e697-5dc0-ae9a-b28ef560ad94","type":"domain","category":"Network activity","to_ids":true,"value":"rjuqib.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"923cc352-95a7-582b-8cf0-3ed145e61ec2","type":"url","category":"Network activity","to_ids":true,"value":"https://rjuqib.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/Metemcyber/status/1948569753808761249","timestamp":"1753410206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcee862d-e857-5fe6-80e1-1ec4d814b4dc","type":"url","category":"Network activity","to_ids":true,"value":"https://wqbigo.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cef7348c-6394-5be5-aa0e-e8ea91440860","type":"domain","category":"Network activity","to_ids":true,"value":"wqbigo.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"146c50cc-0a17-51a9-a2b1-9e17fc3a8291","type":"domain","category":"Network activity","to_ids":true,"value":"fiugpz.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5f66ffd-823b-505c-9739-fc4c8f64d55b","type":"domain","category":"Network activity","to_ids":true,"value":"xojnbd.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b63754f-d402-5781-8073-8c14706e0ef5","type":"url","category":"Network activity","to_ids":true,"value":"https://fiugpz.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ecb0915e-7a6b-5944-a317-1e0a69a560ea","type":"url","category":"Network activity","to_ids":true,"value":"https://xojnbd.cn","comment":"https://x.com/Metemcyber/status/1948569844913504286","timestamp":"1753410228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff5438e4-a7d3-5c6c-a9aa-42216d1bf68b","type":"url","category":"Network activity","to_ids":true,"value":"https://yykmmx.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1bd1e3b-b69f-5a02-b468-2c1774ed62de","type":"domain","category":"Network activity","to_ids":true,"value":"yykmmx.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"871baccf-6c15-59be-b21f-8fa4126bd3f3","type":"domain","category":"Network activity","to_ids":true,"value":"bojmuh.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef345722-041a-565f-91c3-e81a479f4519","type":"url","category":"Network activity","to_ids":true,"value":"https://bojmuh.cn","comment":"https://x.com/Metemcyber/status/1948569949728854456","timestamp":"1753410253","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6f82c99-ef33-5c15-bbd8-02b86d38b224","type":"url","category":"Network activity","to_ids":true,"value":"https://sgqxmj.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f1e1df2-8b1d-5e15-88dd-7e9316ecc755","type":"domain","category":"Network activity","to_ids":true,"value":"sgqxmj.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"442a7eef-b4f6-5b47-b1bd-e513d35dc56c","type":"domain","category":"Network activity","to_ids":true,"value":"bpgdxg.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d729b8d0-b0ed-5920-a07c-3e21824e6e91","type":"domain","category":"Network activity","to_ids":true,"value":"gdqdvt.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25944168-fb49-5009-8f7c-607bc655d48a","type":"url","category":"Network activity","to_ids":true,"value":"https://bpgdxg.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51deb805-f382-533b-933d-ef44809dd463","type":"url","category":"Network activity","to_ids":true,"value":"https://gdqdvt.cn","comment":"https://x.com/Metemcyber/status/1948570027776770504","timestamp":"1753410271","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"241e491e-8f4a-5cd4-975a-3cadf3b3463e","type":"url","category":"Network activity","to_ids":true,"value":"https://vnupld.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"802460e4-a94f-5999-b9de-c7e6d45086f5","type":"url","category":"Network activity","to_ids":true,"value":"https://zangpiao.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f497b77-7fe8-5052-bd71-c4d67beb4c8a","type":"domain","category":"Network activity","to_ids":true,"value":"vnupld.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7ee4d2d-79d7-51eb-b16d-42489eb0bd9c","type":"domain","category":"Network activity","to_ids":true,"value":"zangpiao.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a759028f-a88c-595f-93d7-bf8768c40509","type":"url","category":"Network activity","to_ids":true,"value":"https://fjktbt.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85c58327-c79c-552c-b0b0-f1eef5eb4aa9","type":"domain","category":"Network activity","to_ids":true,"value":"fjktbt.cn","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddf48c2c-f8ad-5b58-b0c9-9e9f671df816","type":"url","category":"Network activity","to_ids":true,"value":"http://43.167.237.204","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a61029e9-c1fc-5690-8fb6-d96849690ace","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.237.204","comment":"https://x.com/Metemcyber/status/1948570110211367308","timestamp":"1753410291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46d03d7c-8502-5825-baf4-6f591cb3217a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.238.64.211","comment":"https://x.com/romonlyht/status/1948583008724025434","timestamp":"1753413366","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0f31ab6-4e44-505c-b74a-24a2c7184a81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.61.198.34","comment":"https://x.com/romonlyht/status/1948583013409063090","timestamp":"1753413367","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c103952-0822-5cb3-9dac-644761d1771e","type":"url","category":"Network activity","to_ids":true,"value":"https://bqbq.de/gjgkhfiy/bot.php","comment":"https://x.com/romonlyht/status/1948583013409063090","timestamp":"1753413367","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2505625-41ef-5122-ad4d-af66aeb3f099","type":"url","category":"Network activity","to_ids":true,"value":"https://bqbq.de/gjgkhfiy/index.html?uid=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1948583013409063090","timestamp":"1753413367","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0985dc23-8561-5c21-8bc8-edce4ff9c224","type":"domain","category":"Network activity","to_ids":true,"value":"bqbq.de","comment":"https://x.com/romonlyht/status/1948583013409063090","timestamp":"1753413367","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e53e22d-8ba2-530a-bb5c-9dbc119feaf8","type":"url","category":"Network activity","to_ids":true,"value":"https://sweepstakess19.godaddysites.com","comment":"https://x.com/urldna_bot/status/1948594082617385052","timestamp":"1753416007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a8ac6145-113b-5d0d-8ae0-f5a06ffabafc","type":"domain","category":"Network activity","to_ids":true,"value":"sweepstakess19.godaddysites.com","comment":"https://x.com/urldna_bot/status/1948594082617385052","timestamp":"1753416007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b4ab3d2b-414b-58e3-ba12-40106c544baa","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.218.165","comment":"https://x.com/Metemcyber/status/1948608272547938392","timestamp":"1753419390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c6cd470-1bec-5697-8619-3426bb31671c","type":"url","category":"Network activity","to_ids":true,"value":"https://4sjo2cu8.top/W0lBfYXZ/","comment":"https://x.com/Metemcyber/status/1948608272547938392","timestamp":"1753419390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"834e8045-5778-5b3e-98b6-8017c34bd8ce","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.59.78","comment":"https://x.com/Metemcyber/status/1948608272547938392","timestamp":"1753419390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"167de3ee-4320-553d-a6e6-e6160f1ffb94","type":"domain","category":"Network activity","to_ids":true,"value":"4sjo2cu8.top","comment":"https://x.com/Metemcyber/status/1948608272547938392","timestamp":"1753419390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9f20929-f08a-566e-8970-5c611fe09b5f","type":"domain","category":"Network activity","to_ids":true,"value":"ihsanprime.com","comment":"https://x.com/romonlyht/status/1948608284245754136","timestamp":"1753419393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"200dae3b-0bbf-5a7c-b10d-8fd43fda814a","type":"url","category":"Network activity","to_ids":true,"value":"https://ihsanprime.com/gm/?uid=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1948608284245754136","timestamp":"1753419393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d363229b-87f8-5f16-8afb-4b05d4efa754","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.127.92.11","comment":"https://x.com/romonlyht/status/1948608284245754136","timestamp":"1753419393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"76cf940d-e645-548b-9ad4-cc0ba2d3695b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.174.50.168","comment":"https://x.com/romonlyht/status/1948608284245754136","timestamp":"1753419393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7588ea31-f08c-543c-b846-c17b3ba0c8df","type":"url","category":"Network activity","to_ids":true,"value":"https://srv24900hostertestmesa.cfolks.pl/sb","comment":"https://x.com/AddressIntel/status/1948609181574992014","timestamp":"1753419606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab68072d-1210-537f-9a4e-56d050afa4db","type":"domain","category":"Network activity","to_ids":true,"value":"srv24900hostertestmesa.cfolks.pl","comment":"https://x.com/AddressIntel/status/1948609181574992014","timestamp":"1753419606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aef4a688-4cf9-5a14-9fb4-d1ee0dca3f8d","type":"domain","category":"Network activity","to_ids":true,"value":"0rig9qk3.top","comment":"https://x.com/Metemcyber/status/1948611192177787370","timestamp":"1753420086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"060e2a63-667e-5cbf-8131-d5e4f876869c","type":"url","category":"Network activity","to_ids":true,"value":"https://0rig9qk3.top/W0lBfYXZ/","comment":"https://x.com/Metemcyber/status/1948611192177787370","timestamp":"1753420086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"42d2d9cd-cbd8-5325-b22e-7489cf110952","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.63.6","comment":"https://x.com/Metemcyber/status/1948611192177787370","timestamp":"1753420086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84fadba2-8235-5ebd-ade6-a72afd5126fd","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.168.246","comment":"https://x.com/Metemcyber/status/1948611192177787370","timestamp":"1753420086","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c541deb9-bf75-570d-b017-4ed02dce2b98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.192.221.253","comment":"https://x.com/Metemcyber/status/1948613350105252015","timestamp":"1753420600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e3e9ad18-e176-50dc-868f-709ead445c21","type":"url","category":"Network activity","to_ids":true,"value":"http://212.192.221.253","comment":"https://x.com/Metemcyber/status/1948613350105252015","timestamp":"1753420600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a45beaa8-bf42-5e2f-adac-b54e4451ef26","type":"domain","category":"Network activity","to_ids":true,"value":"wbemail.email","comment":"https://x.com/Metemcyber/status/1948613350105252015","timestamp":"1753420600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aefc479b-cf96-5d3d-85e6-98c376849502","type":"url","category":"Network activity","to_ids":true,"value":"https://wbemail.email","comment":"https://x.com/Metemcyber/status/1948613350105252015","timestamp":"1753420600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d016fecd-4031-5508-8f64-1dd71fb19e2a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.84.59","comment":"https://x.com/Metemcyber/status/1948618686836998174","timestamp":"1753421873","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3807c0d5-eafa-5d39-9b68-ab6076aadd87","type":"url","category":"Network activity","to_ids":true,"value":"https://wva0eb.top/nsCCtsCdx/","comment":"https://x.com/Metemcyber/status/1948618686836998174","timestamp":"1753421873","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08afd9da-33b9-5db8-ae28-1845ef012e36","type":"domain","category":"Network activity","to_ids":true,"value":"wva0eb.top","comment":"https://x.com/Metemcyber/status/1948618686836998174","timestamp":"1753421873","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9631e3b7-ee0c-5f2e-af11-bfe80cd6645c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.187.29","comment":"https://x.com/Metemcyber/status/1948618686836998174","timestamp":"1753421873","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01d6b46d-9138-580e-8dbc-75ce68507028","type":"domain","category":"Network activity","to_ids":true,"value":"monex-jp.quethat.com","comment":"https://x.com/masaomi346/status/1948620730192757101","timestamp":"1753422360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddb1d141-d465-579c-8ebe-ff4de125bf22","type":"url","category":"Network activity","to_ids":true,"value":"https://monex-jp.quethat.com/support/","comment":"https://x.com/masaomi346/status/1948620730192757101","timestamp":"1753422360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9ce61f6-f29b-5820-9ee3-7199e7219a82","type":"domain","category":"Network activity","to_ids":true,"value":"7565meduniwien-ac-at.weebly.com","comment":"https://x.com/urldna_bot/status/1948624282482848016","timestamp":"1753423207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9b0dde64-19f2-5273-a13a-43ba93834d1a","type":"url","category":"Network activity","to_ids":true,"value":"https://7565meduniwien-ac-at.weebly.com","comment":"https://x.com/urldna_bot/status/1948624282482848016","timestamp":"1753423207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/SarlackLab/status/1948624359507046902","timestamp":"1753423225","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"1d164ce0-efec-5804-adb3-f1cc89b12003","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46:1912","comment":"https://x.com/SarlackLab/status/1948624359507046902","timestamp":"1753423225","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"bc8ab68b-f2a5-5751-bfbf-7359a508872f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.164.55.176","comment":"https://x.com/JAMESWT_WT/status/1948632329616064810","timestamp":"1753425125","distribution":"5"},{"uuid":"bd15e908-e5de-5629-9a8d-d199f9d4aefe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.228.17.73","comment":"https://x.com/drb_ra/status/1948635972268081303","timestamp":"1753425994","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c97e4434-1668-5eea-856f-480139ae77a4","type":"url","category":"Network activity","to_ids":true,"value":"http://87.228.17.73:443","comment":"https://x.com/drb_ra/status/1948635972268081303","timestamp":"1753425994","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"eb2cf89d-4c98-519c-8d47-f1f292df5b58","type":"url","category":"Network activity","to_ids":true,"value":"http://49.207.177.87:443","comment":"https://x.com/drb_ra/status/1948635995181928760","timestamp":"1753425999","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"db50d3d0-f553-58ba-8e0e-8012c6f1188e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.207.177.87","comment":"https://x.com/drb_ra/status/1948635995181928760","timestamp":"1753425999","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"04a7af76-5766-5f21-8f44-36ac18313135","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.13.56:7443","comment":"https://x.com/drb_ra/status/1948636018103484711","timestamp":"1753426005","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3ba7ad5d-ea1b-5829-b2bb-9989adc5e1a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.13.56","comment":"https://x.com/drb_ra/status/1948636018103484711","timestamp":"1753426005","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"35f69b19-9d7c-572d-a8d8-586197b0d953","type":"url","category":"Network activity","to_ids":true,"value":"http://68.168.222.171:7443","comment":"https://x.com/drb_ra/status/1948636040664600950","timestamp":"1753426010","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"1a727a72-3e73-52a2-8253-b19d45e4ea80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.168.222.171","comment":"https://x.com/drb_ra/status/1948636040664600950","timestamp":"1753426010","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"17427c17-af45-5390-83b1-21cd2c42a9ec","type":"url","category":"Network activity","to_ids":true,"value":"http://149.28.255.228:31337","comment":"https://x.com/drb_ra/status/1948636063557452033","timestamp":"1753426016","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c575b530-46f3-5b79-b236-e9057e41a84b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.28.255.228","comment":"https://x.com/drb_ra/status/1948636063557452033","timestamp":"1753426016","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"495ca3b6-cdb0-585d-b6f5-bec79c81c34e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.38.20.58:31337","comment":"https://x.com/drb_ra/status/1948636086265159931","timestamp":"1753426021","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"74383cbb-e45c-5664-89bb-39881f9a59e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.38.20.58","comment":"https://x.com/drb_ra/status/1948636086265159931","timestamp":"1753426021","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2335fa42-79cb-5d32-b578-e99f42e39c0d","type":"url","category":"Network activity","to_ids":true,"value":"http://123.55.210.143:40000","comment":"https://x.com/drb_ra/status/1948636109442883806","timestamp":"1753426027","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4b2b193c-04dc-530c-b906-03a8aadd255b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.55.210.143","comment":"https://x.com/drb_ra/status/1948636109442883806","timestamp":"1753426027","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"52fefc02-b00a-5ee1-9eed-8794ed0308f4","type":"url","category":"Network activity","to_ids":true,"value":"http://120.53.122.68:65535","comment":"https://x.com/drb_ra/status/1948636135506276528","timestamp":"1753426033","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"76ff2d31-1941-5de8-a6fd-42bed1a34020","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.53.122.68","comment":"https://x.com/drb_ra/status/1948636135506276528","timestamp":"1753426033","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"378091d9-6e46-5bc5-b851-1d8fb06065c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.116.10.29","comment":"https://x.com/drb_ra/status/1948636159275663429","timestamp":"1753426038","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dda7221b-f47c-54e2-9b5d-182212a14aea","type":"url","category":"Network activity","to_ids":true,"value":"http://50.116.10.29:443","comment":"https://x.com/drb_ra/status/1948636159275663429","timestamp":"1753426038","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"41c813d4-f20f-57b6-93d9-d9b56c3543cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.72.10.125","comment":"https://x.com/drb_ra/status/1948636183174451372","timestamp":"1753426044","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c40b600d-8c40-513b-a441-e9d90223201d","type":"url","category":"Network activity","to_ids":true,"value":"http://79.72.10.125:443","comment":"https://x.com/drb_ra/status/1948636183174451372","timestamp":"1753426044","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"07fc4006-507e-5422-b889-0ec4925d0452","type":"url","category":"Network activity","to_ids":true,"value":"http://103.47.130.195:443","comment":"https://x.com/drb_ra/status/1948636702739669492","timestamp":"1753426168","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9edd0e58-4c41-5bbc-9fb1-c2c07a8fd6d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.47.130.195","comment":"https://x.com/drb_ra/status/1948636702739669492","timestamp":"1753426168","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"947d2373-79ec-5ad0-ba51-5c6f0c8c4714","type":"url","category":"Network activity","to_ids":true,"value":"http://3.21.206.81:2405","comment":"https://x.com/drb_ra/status/1948636725242126447","timestamp":"1753426173","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"47521eae-746c-5b66-a793-cc4b9cdd6bfc","type":"url","category":"Network activity","to_ids":true,"value":"http://212.162.149.164:443","comment":"https://x.com/drb_ra/status/1948636747635605668","timestamp":"1753426179","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a5691d23-2105-5f88-86cb-d968d5439281","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.162.149.164","comment":"https://x.com/drb_ra/status/1948636747635605668","timestamp":"1753426179","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c61cbad3-291f-5119-8856-2c7255e05367","type":"url","category":"Network activity","to_ids":true,"value":"http://167.86.89.37:2404","comment":"https://x.com/drb_ra/status/1948636772797481033","timestamp":"1753426185","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e740ea13-843d-59e1-bf61-0ffba11a7531","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.86.89.37","comment":"https://x.com/drb_ra/status/1948636772797481033","timestamp":"1753426185","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6469ab7e-7d4f-54ff-964b-05ebb48dbdb0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.64.166.20:33824","comment":"https://x.com/drb_ra/status/1948636796629242233","timestamp":"1753426190","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b1ad22bc-1e90-5700-8ee8-cadfce056538","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.64.166.20","comment":"https://x.com/drb_ra/status/1948636796629242233","timestamp":"1753426190","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cfce85b3-f4a0-5ef3-b4f0-f9887ff634c2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.28.185.133:2053","comment":"https://x.com/drb_ra/status/1948636822864888324","timestamp":"1753426197","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"166ae2a1-3621-56d5-8acb-4d1ea77ab184","type":"url","category":"Network activity","to_ids":true,"value":"http://157.175.188.83:20001","comment":"https://x.com/drb_ra/status/1948636846864695726","timestamp":"1753426202","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"685503c3-8715-54c6-8772-7960f9d6ce16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.175.188.83","comment":"https://x.com/drb_ra/status/1948636868591190058","timestamp":"1753426208","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"402e7ee6-3cc9-5418-8603-214225dd36b6","type":"url","category":"Network activity","to_ids":true,"value":"http://157.175.188.83:1201","comment":"https://x.com/drb_ra/status/1948636868591190058","timestamp":"1753426208","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4f6c21dd-2d40-5424-8e5f-a4e694f4382b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.255.225.255","comment":"https://x.com/drb_ra/status/1948636892662018391","timestamp":"1753426213","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a4a96a9d-4125-53e3-9c13-97b275158f7d","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.225.255:7078","comment":"https://x.com/drb_ra/status/1948636892662018391","timestamp":"1753426213","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"bbced789-79a4-51c1-ae1f-f60e23a8b501","type":"url","category":"Network activity","to_ids":true,"value":"http://18.231.52.182:8080","comment":"https://x.com/drb_ra/status/1948636917957820598","timestamp":"1753426219","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"949dcc76-8d20-5ade-b5f4-4558cb68c524","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.231.52.182","comment":"https://x.com/drb_ra/status/1948636917957820598","timestamp":"1753426219","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"269cb4ff-48a3-50d8-ab12-2e88c835765f","type":"url","category":"Network activity","to_ids":true,"value":"http://15.237.190.215:2078","comment":"https://x.com/drb_ra/status/1948636946550382763","timestamp":"1753426226","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9d794714-8344-5f54-9835-3702e02db607","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.237.190.215","comment":"https://x.com/drb_ra/status/1948636946550382763","timestamp":"1753426226","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c05b7e57-d592-50a5-bd43-84b9ece263c8","type":"url","category":"Network activity","to_ids":true,"value":"http://35.183.198.97:56905","comment":"https://x.com/drb_ra/status/1948636970802184628","timestamp":"1753426232","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f712afbc-9584-54a7-9a12-111c80df527b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.183.198.97","comment":"https://x.com/drb_ra/status/1948636970802184628","timestamp":"1753426232","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"023d31ef-2abd-5363-9850-7f3eb157f530","type":"ip-dst","category":"Network activity","to_ids":true,"value":"190.70.120.31","comment":"https://x.com/drb_ra/status/1948636994545787082","timestamp":"1753426238","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3ca9ab14-2be1-50fe-aaeb-0b260cc57e5d","type":"url","category":"Network activity","to_ids":true,"value":"http://190.70.120.31:8808","comment":"https://x.com/drb_ra/status/1948636994545787082","timestamp":"1753426238","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"05a968ae-7532-51f7-a50c-a9b047b38384","type":"url","category":"Network activity","to_ids":true,"value":"http://181.131.217.24:8808","comment":"https://x.com/drb_ra/status/1948637019141210286","timestamp":"1753426243","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3956a6c7-e844-5b14-87eb-5c8f9d7a9d98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.131.217.24","comment":"https://x.com/drb_ra/status/1948637019141210286","timestamp":"1753426243","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"4bbf8554-4f45-532b-9c80-1446737c1cc9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.81.203:80","comment":"https://x.com/drb_ra/status/1948637041924669856","timestamp":"1753426249","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9966c3c4-7597-5a25-a7ec-b333eb62fd7d","type":"url","category":"Network activity","to_ids":true,"value":"http://23.21.82.111:443","comment":"https://x.com/drb_ra/status/1948637065047924759","timestamp":"1753426254","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e4598e1e-dc08-5125-8525-fb089b8e22e9","type":"url","category":"Network activity","to_ids":true,"value":"http://23.21.82.111:80","comment":"https://x.com/drb_ra/status/1948637088557224423","timestamp":"1753426260","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"20b4bb80-9407-5c7d-8877-3080fee805fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.21.82.111","comment":"https://x.com/drb_ra/status/1948637088557224423","timestamp":"1753426260","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f65beee8-cd4c-58f0-be32-ee52d6444809","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.20.102.180","comment":"https://x.com/drb_ra/status/1948637112296743227","timestamp":"1753426266","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"a95c03ea-865d-557f-89c9-72f5c0fa04bb","type":"url","category":"Network activity","to_ids":true,"value":"http://103.20.102.180:8848","comment":"https://x.com/drb_ra/status/1948637112296743227","timestamp":"1753426266","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"df0fc9b9-a249-56eb-8aae-26774f5069c3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.88.76.50:445","comment":"https://x.com/drb_ra/status/1948637135143403985","timestamp":"1753426271","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0beac006-bb38-5cb3-b689-c3701cb058ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.88.76.50","comment":"https://x.com/drb_ra/status/1948637135143403985","timestamp":"1753426271","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"05476625-cc25-5215-a0da-1b4a9136000a","type":"url","category":"Network activity","to_ids":true,"value":"https://vfyplntbkonl.weebly.com","comment":"https://x.com/urldna_bot/status/1948654479831617779","timestamp":"1753430406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a1f7e1eb-cba7-5dc8-9418-99b2ad6ef37b","type":"domain","category":"Network activity","to_ids":true,"value":"vfyplntbkonl.weebly.com","comment":"https://x.com/urldna_bot/status/1948654479831617779","timestamp":"1753430406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f6124ef7-8d55-5f4c-8808-977d319ade37","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-netcraft.bid","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ffc2268b-9bcc-5acd-af69-2d81ff1a9172","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-netcraft.bid","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"86c38ed3-f220-544f-8f5c-21aff59d4527","type":"domain","category":"Network activity","to_ids":true,"value":"rapidfort-google.com","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d3119d65-8398-58f5-8d42-501ec321f69e","type":"url","category":"Network activity","to_ids":true,"value":"http://rapidfort-google.com","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"58f198a4-8c21-5e33-9901-eeb90209a749","type":"domain","category":"Network activity","to_ids":true,"value":"nj-linkedin.com","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"729c64ef-9011-5f4a-8275-0673f9337a3e","type":"url","category":"Network activity","to_ids":true,"value":"http://nj-linkedin.com","comment":"https://x.com/c9lab_soc/status/1948675578388779028","timestamp":"1753435437","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"df500f37-34c5-5c43-a9fb-83217d2a4a4c","type":"domain","category":"Network activity","to_ids":true,"value":"i.pilot45.com","comment":"https://x.com/urldna_bot/status/1948684676043886957","timestamp":"1753437606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d312ae04-fb8e-5903-92b8-b4e34e1f9de4","type":"url","category":"Network activity","to_ids":true,"value":"https://i.pilot45.com/index.html","comment":"https://x.com/urldna_bot/status/1948684676043886957","timestamp":"1753437606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f920d557-1d6c-55c4-ba13-59001636b453","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.nsebseshop.cloud/ms/625478102395","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f4cf84c5-86be-5041-b291-9ec6e6835468","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7dd3a8a4-4d42-56af-8a08-67369169f43f","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4b2f7373-1e1c-53f4-8231-0c1fa62b8ea2","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"745f539c-21c5-5a53-9b35-cef5f4812b73","type":"domain","category":"Network activity","to_ids":true,"value":"ns3.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8cdcdb45-d113-5ad6-8db1-3f8eda17986e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.236.130.154","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5dd0eb30-afd0-591d-b8bf-5baa5861c817","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.130.154:53","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"73958432-d1f8-514b-a3c6-e3e2b80da810","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1948685251972366360","timestamp":"1753437743","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85e4913b-9652-5a5d-a022-5544ec879d30","type":"url","category":"Network activity","to_ids":true,"value":"http://110.42.57.182:8888","comment":"https://x.com/drb_ra/status/1948688819139870881","timestamp":"1753438594","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93e4bb21-ba26-5192-9ef3-b7a8c5282f3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.42.57.182","comment":"https://x.com/drb_ra/status/1948688819139870881","timestamp":"1753438594","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a5331216-2f86-5538-a680-6a21053e100c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:9999","comment":"https://x.com/drb_ra/status/1948688842652832226","timestamp":"1753438599","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bd670617-665a-5e73-b95c-454755afe266","type":"url","category":"Network activity","to_ids":true,"value":"http://47.98.216.193:8080","comment":"https://x.com/drb_ra/status/1948688866728182006","timestamp":"1753438605","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e865fa0f-b42b-5cd4-9e5e-27fc1acc34dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.98.216.193","comment":"https://x.com/drb_ra/status/1948688866728182006","timestamp":"1753438605","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"162ffcc9-1182-5110-b1d9-b3d769cc1959","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.107.255:80","comment":"https://x.com/drb_ra/status/1948688891923628388","timestamp":"1753438611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cd2760c2-5128-52f5-81f0-9cab0c80776f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.107.255","comment":"https://x.com/drb_ra/status/1948688891923628388","timestamp":"1753438611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"64b06ef6-bc82-5053-81d6-ac7cacca8c0a","type":"url","category":"Network activity","to_ids":true,"value":"http://121.61.108.193:444","comment":"https://x.com/drb_ra/status/1948688919148781872","timestamp":"1753438617","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aa552aa0-b536-54f5-8ed9-4826b9546eba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.61.108.193","comment":"https://x.com/drb_ra/status/1948688919148781872","timestamp":"1753438617","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"52c6f005-0d30-5aa3-aa6b-e1598caa857f","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.162.163:443","comment":"https://x.com/drb_ra/status/1948688948773232889","timestamp":"1753438624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e4f5d631-3819-5117-b023-c17af09b8a3a","type":"url","category":"Network activity","to_ids":true,"value":"https://cnd.baiidu.vip/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1948688948773232889","timestamp":"1753438624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85d61469-ffea-54c2-bafb-de77a5f4d4e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.162.163","comment":"https://x.com/drb_ra/status/1948688948773232889","timestamp":"1753438624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e0400a5a-c413-5b46-a180-8e20e19a38de","type":"domain","category":"Network activity","to_ids":true,"value":"cnd.baiidu.vip","comment":"https://x.com/drb_ra/status/1948688948773232889","timestamp":"1753438624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c49242c-402b-5a9a-9fcc-777c34b639ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.143.114.43","comment":"https://x.com/drb_ra/status/1948688975545159798","timestamp":"1753438631","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a21d0f23-c45e-5d11-be98-d7928e6ca085","type":"url","category":"Network activity","to_ids":true,"value":"http://43.143.114.43:8090","comment":"https://x.com/drb_ra/status/1948688975545159798","timestamp":"1753438631","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"87d18b6f-a179-5afb-9758-4a06efc62682","type":"url","category":"Network activity","to_ids":true,"value":"http://47.242.129.79:2087","comment":"https://x.com/drb_ra/status/1948689004574245275","timestamp":"1753438638","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bb8fbeba-28a0-587b-a158-2055fe29f8f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.242.129.79","comment":"https://x.com/drb_ra/status/1948689004574245275","timestamp":"1753438638","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1cd7f2c9-8798-5fe9-bbaa-c24053095221","type":"domain","category":"Network activity","to_ids":true,"value":"web.sparkfunding56.site","comment":"https://x.com/drb_ra/status/1948689035506970928","timestamp":"1753438645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bfb10540-c456-5959-9a92-d30146d7af45","type":"url","category":"Network activity","to_ids":true,"value":"https://web.sparkfunding56.site/jquery-3.2.2.min.js","comment":"https://x.com/drb_ra/status/1948689035506970928","timestamp":"1753438645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c28bbf07-439e-524a-b849-b7c4174a991e","type":"url","category":"Network activity","to_ids":true,"value":"http://216.73.156.143:443","comment":"https://x.com/drb_ra/status/1948689035506970928","timestamp":"1753438645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"883ef5ef-5a73-5f77-a24b-d7afacb5099e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.73.156.143","comment":"https://x.com/drb_ra/status/1948689035506970928","timestamp":"1753438645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85a1c67f-aa66-54c7-aab4-2e5a45d9e12f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8085","comment":"https://x.com/drb_ra/status/1948689063784972318","timestamp":"1753438652","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f3345320-cbef-588a-9fc6-17b5d9c9c838","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.88.26","comment":"https://x.com/drb_ra/status/1948689094592397559","timestamp":"1753438659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6ff93952-67c6-5724-b348-6ccb088f6c43","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.88.26:7777","comment":"https://x.com/drb_ra/status/1948689094592397559","timestamp":"1753438659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5936d9b0-2746-514c-b962-73e277e32bf8","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.152.104:18081","comment":"https://x.com/drb_ra/status/1948689123927359797","timestamp":"1753438666","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f1b0b0a1-bb4f-54fb-a51f-bb1c7f6c4018","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.152.104","comment":"https://x.com/drb_ra/status/1948689123927359797","timestamp":"1753438666","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ea6c21a2-1378-52f5-b632-5c8651e6640f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.198.49.48:8888","comment":"https://x.com/drb_ra/status/1948689153761399203","timestamp":"1753438673","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c75994f1-3c76-5c7d-b3a3-8e4d1e9479da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.198.49.48","comment":"https://x.com/drb_ra/status/1948689153761399203","timestamp":"1753438673","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"abfc7f44-4522-5525-8dd1-e64740ef761e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.152.65:80","comment":"https://x.com/drb_ra/status/1948689181976170591","timestamp":"1753438680","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83f61078-c820-531f-92e4-38e94c444428","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.152.65","comment":"https://x.com/drb_ra/status/1948689181976170591","timestamp":"1753438680","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e3e823fe-24dc-50cd-99da-325616de2ccb","type":"md5","category":"Payload delivery","to_ids":true,"value":"bf1d250ca4e5672aada0817d4849da68","comment":"https://x.com/skocherhan/status/1948689308480659765","timestamp":"1753438710","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"aaf5bed5-2e82-58c2-bc4c-73f5805e5ac8","type":"md5","category":"Payload delivery","to_ids":true,"value":"b326435c8ac36039300139fff3734db2","comment":"https://x.com/skocherhan/status/1948689308480659765","timestamp":"1753438710","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bb8b71cb-3b64-55d9-a2b2-d3777424afa6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.87.240.39","comment":"https://x.com/skocherhan/status/1948689308480659765","timestamp":"1753438710","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"04ea49ba-a5f2-5450-b034-bf68077acbc8","type":"url","category":"Network activity","to_ids":true,"value":"http://194.87.240.39/static/version2324897981/frontend/HardToFind/htfr","comment":"https://x.com/skocherhan/status/1948689308480659765","timestamp":"1753438710","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"64b21c8a-52ca-5ef1-a45c-d92ada19431d","type":"url","category":"Network activity","to_ids":true,"value":"http://129.28.85.210:55112","comment":"https://x.com/drb_ra/status/1948689705857638786","timestamp":"1753438805","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d2c4cb3d-51cc-5941-bb66-eae3a5560079","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.28.85.210","comment":"https://x.com/drb_ra/status/1948689705857638786","timestamp":"1753438805","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6b4d98d6-7fe9-5d50-8466-486e0ba24222","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.69.234:8088","comment":"https://x.com/drb_ra/status/1948689730951840091","timestamp":"1753438811","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cd794ab4-e8d0-595c-ab96-2a76c1f99b46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.69.234","comment":"https://x.com/drb_ra/status/1948689730951840091","timestamp":"1753438811","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7c68662e-fa78-5bea-82bf-a4ff24465e2f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.104.22.29","comment":"https://x.com/drb_ra/status/1948689755891179748","timestamp":"1753438817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5a76cae5-4eff-5fa0-91bf-d5a49c8ee155","type":"url","category":"Network activity","to_ids":true,"value":"http://39.104.22.29:8089","comment":"https://x.com/drb_ra/status/1948689755891179748","timestamp":"1753438817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a5889fc-19fe-5a5e-8de8-bee5b10f5814","type":"url","category":"Network activity","to_ids":true,"value":"https://m.szpx.news.cn/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1948689782931951808","timestamp":"1753438823","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2abfa6bc-3741-5bd2-9c80-7338a8a1d8d4","type":"domain","category":"Network activity","to_ids":true,"value":"m.szpx.news.cn","comment":"https://x.com/drb_ra/status/1948689782931951808","timestamp":"1753438823","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"276e2e60-88f4-58c6-b077-bdc026d04ad3","type":"url","category":"Network activity","to_ids":true,"value":"https://aliwsapubboce.suning.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1948689811621183512","timestamp":"1753438830","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"94df2a0a-1112-5a7f-8d1b-537b091201c2","type":"domain","category":"Network activity","to_ids":true,"value":"aliwsapubboce.suning.com","comment":"https://x.com/drb_ra/status/1948689811621183512","timestamp":"1753438830","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bc0d682b-e8ff-50d7-abf5-75d14ef83da2","type":"domain","category":"Network activity","to_ids":true,"value":"cdn.soft.qianxin.com","comment":"https://x.com/drb_ra/status/1948689838149956030","timestamp":"1753438836","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"433e61d0-be0d-5665-b948-549fb0dbdeb6","type":"url","category":"Network activity","to_ids":true,"value":"https://cdn.soft.qianxin.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1948689838149956030","timestamp":"1753438836","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6f039544-a610-580b-9ec4-deeb96c9ae35","type":"domain","category":"Network activity","to_ids":true,"value":"vhs.vivo.com.cn","comment":"https://x.com/drb_ra/status/1948689867116085683","timestamp":"1753438843","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7ab17805-3111-543e-b865-1241d7deaf30","type":"url","category":"Network activity","to_ids":true,"value":"https://vhs.vivo.com.cn/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1948689867116085683","timestamp":"1753438843","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f28cb84a-d9e5-53ee-be3f-14925241ac3a","type":"domain","category":"Network activity","to_ids":true,"value":"static.dingtalk.com","comment":"https://x.com/drb_ra/status/1948689895305748851","timestamp":"1753438850","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc86a0ef-2638-54a2-b933-1001cf270fc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.79.64.164","comment":"https://x.com/drb_ra/status/1948689895305748851","timestamp":"1753438850","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"609dfb91-cc89-5142-9ae4-2ba51ff2d45e","type":"url","category":"Network activity","to_ids":true,"value":"http://120.79.64.164:443","comment":"https://x.com/drb_ra/status/1948689895305748851","timestamp":"1753438850","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f043c3b8-6113-53c6-84b8-5d632d6aabdb","type":"url","category":"Network activity","to_ids":true,"value":"https://static.dingtalk.com/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1948689895305748851","timestamp":"1753438850","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"655180aa-67e1-53d2-bf23-6e0d95b088b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.24.47.254","comment":"https://x.com/drb_ra/status/1948689923164258807","timestamp":"1753438857","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6670a4c1-769c-5f76-bdbf-08b9ce65c447","type":"url","category":"Network activity","to_ids":true,"value":"http://175.24.47.254:4444","comment":"https://x.com/drb_ra/status/1948689923164258807","timestamp":"1753438857","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f7ce56e9-819d-5a39-b3b6-d954d498b401","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8082","comment":"https://x.com/drb_ra/status/1948689952646291622","timestamp":"1753438864","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1948689952646291622","timestamp":"1753438864","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"904c5843-dcea-56a3-a63b-07b3c0cddc00","type":"url","category":"Network activity","to_ids":true,"value":"http://reported-id6736.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"f3b4dfdd-818d-5694-ba20-806a257032b5","type":"domain","category":"Network activity","to_ids":true,"value":"extranet.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"1332d446-5be0-5f7b-8ea1-4446f6594645","type":"domain","category":"Network activity","to_ids":true,"value":"reported-id6736.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"3a9e227d-3a5e-5113-af82-4fae050bf427","type":"url","category":"Network activity","to_ids":true,"value":"http://extranet.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"d1ae2657-eee1-5cd2-8f98-b009e0e19be5","type":"domain","category":"Network activity","to_ids":true,"value":"id33kpartnet.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"c8193e9a-bef0-51b2-8c7f-fccc6274c96b","type":"url","category":"Network activity","to_ids":true,"value":"http://bookingcomplaint-id8873.live","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"8fe1124c-9008-56b9-8123-61b9f9585067","type":"domain","category":"Network activity","to_ids":true,"value":"bookingcomplaint-id8873.live","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"d170fc43-4160-5626-9ee2-3f293aadc521","type":"url","category":"Network activity","to_ids":true,"value":"http://id33kpartnet.com","comment":"https://x.com/executemalware/status/1948698238032511445","timestamp":"1753440839","distribution":"5"},{"uuid":"ef95136f-406a-59d9-ba1e-71b674f9958e","type":"domain","category":"Network activity","to_ids":true,"value":"furwmsx.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7f7e932e-e3c0-587f-9d4b-96bd4951ecf5","type":"domain","category":"Network activity","to_ids":true,"value":"annwt.xyz","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"3e8bb475-24c4-5197-b560-d4205f382317","type":"domain","category":"Network activity","to_ids":true,"value":"blihlo.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1a0cba99-67a1-51a1-9446-7b48d196a427","type":"url","category":"Network activity","to_ids":true,"value":"http://blihlo.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"b430ca31-bd28-52e3-86a2-eae3b9c1f2b9","type":"domain","category":"Network activity","to_ids":true,"value":"cidtfhh.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"66499224-a301-5155-82cf-8fcc6fcceb97","type":"url","category":"Network activity","to_ids":true,"value":"http://cidtfhh.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"a8b7b933-eb07-5d3b-99cd-f41adef7f269","type":"domain","category":"Network activity","to_ids":true,"value":"daruubs.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"19b4fa35-522a-5b17-9aa9-a9c8d76f9c73","type":"url","category":"Network activity","to_ids":true,"value":"http://daruubs.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7c63e1be-28a1-56ac-89d2-8542a03879a8","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunity.com/profiles/76561199863199067","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"69a890ae-4076-5f14-a627-5a7346bc45a5","type":"url","category":"Network activity","to_ids":true,"value":"http://furwmsx.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"e785f91d-de3f-50e1-9bca-56eb17f8ea06","type":"domain","category":"Network activity","to_ids":true,"value":"gigohe.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"48e41c78-6d07-5afa-b9d9-f8a009c8f61f","type":"url","category":"Network activity","to_ids":true,"value":"http://rayrhs.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"112046da-3ffa-5ab4-b356-58c703c66dde","type":"domain","category":"Network activity","to_ids":true,"value":"rayrhs.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7a3385b1-65da-5c7b-bd49-829625f4d2ba","type":"url","category":"Network activity","to_ids":true,"value":"http://annwt.xyz","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"f9f1af76-d8ca-52bc-b281-5c3ef94a5172","type":"domain","category":"Network activity","to_ids":true,"value":"mcaumnb.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"29d7b342-6135-5a29-973f-d22f75283c87","type":"url","category":"Network activity","to_ids":true,"value":"http://gigohe.top","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"5a6039d4-ddde-5ee5-9bfa-32d873cef313","type":"url","category":"Network activity","to_ids":true,"value":"http://greqjfu.xyz","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"17d0c58e-1bd7-5fc8-9570-7a356b3c583a","type":"domain","category":"Network activity","to_ids":true,"value":"greqjfu.xyz","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"8f4d022e-f70f-5a96-b4b5-5f5907e27d46","type":"url","category":"Network activity","to_ids":true,"value":"http://mcaumnb.shop","comment":"https://x.com/K_N1kolenko/status/1948702114697367927","timestamp":"1753441763","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"750080dc-3823-5c49-aa6d-fd6bea8a14b1","type":"url","category":"Network activity","to_ids":true,"value":"https://thrifty249-bicpromo-club.translate.goog/?_x_tr_sl=auto&_x_tr_tl=om&_x_tr_hl=sw","comment":"https://x.com/ir0n_fe/status/1948704796657004840","timestamp":"1753442403","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f4cbffa8-b579-57c0-9a43-ae30f3e4e03f","type":"url","category":"Network activity","to_ids":true,"value":"https://www-akuten-co-jp.bicpromo.net/godaddy/#/","comment":"https://x.com/ir0n_fe/status/1948704796657004840","timestamp":"1753442403","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac06bdb5-0511-562f-bee0-8c51b152893a","type":"domain","category":"Network activity","to_ids":true,"value":"www-akuten-co-jp.bicpromo.net","comment":"https://x.com/ir0n_fe/status/1948704796657004840","timestamp":"1753442403","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db40c512-8e03-5ad2-9fdd-3ae2ddbb486d","type":"domain","category":"Network activity","to_ids":true,"value":"thrifty249-bicpromo-club.translate.goog","comment":"https://x.com/ir0n_fe/status/1948704796657004840","timestamp":"1753442403","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b4caa54-f3a3-5e11-8fbd-0e106355a00b","type":"url","category":"Network activity","to_ids":true,"value":"https://www.eki.net.jp-paytolink.xykj888.com.cn/Personal/member/Login/index.php?oneTimeAccessID={","comment":"https://x.com/ir0n_fe/status/1948705994759880821","timestamp":"1753442689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d3eaa6e-c6f6-5569-8af3-8a8f60fcc743","type":"domain","category":"Network activity","to_ids":true,"value":"eki.net.jp-paytolink.xykj888.com.cn","comment":"https://x.com/ir0n_fe/status/1948705994759880821","timestamp":"1753442689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dadd8ff5-7c5a-5067-98ef-24d24bd79c56","type":"url","category":"Network activity","to_ids":true,"value":"https://reurl.cc/bm2avy","comment":"https://x.com/ir0n_fe/status/1948705994759880821","timestamp":"1753442689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2511a81c-bd76-5b40-a014-3c0e923cb288","type":"domain","category":"Network activity","to_ids":true,"value":"reurl.cc","comment":"https://x.com/ir0n_fe/status/1948705994759880821","timestamp":"1753442689","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea0773e5-cea2-513f-bdf8-3484fa3ce05b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.113.66.137","comment":"https://x.com/skocherhan/status/1948709685491569036","timestamp":"1753443568","distribution":"5"},{"uuid":"59d0a14b-b5ee-55c4-a97f-5ed84f32b5bf","type":"url","category":"Network activity","to_ids":true,"value":"https://62.113.66.137/WindowsUpdat","comment":"https://x.com/skocherhan/status/1948709685491569036","timestamp":"1753443568","distribution":"5"},{"uuid":"32bdd432-aa3e-5b59-b221-62d8d2770d55","type":"url","category":"Network activity","to_ids":true,"value":"https://62.113.66.137/WindowsUpdateService.ps1","comment":"https://x.com/skocherhan/status/1948709685491569036","timestamp":"1753443568","distribution":"5"},{"uuid":"68e87c27-1275-574a-a141-1fa00e38fb5d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.99.17.177","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"52dbe832-75b4-57ae-9464-f3311b9584e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.82.26.162","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"eeb119c5-741f-54d5-a21b-97342a25dd1e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.42.30.170","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"1ba626a2-aeae-51fb-991b-b871894de033","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.215.237","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"bbbdad8a-2bc4-55b6-ae0e-d2ce05b4dfb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.203.4.232","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"37377a9b-f7fb-58bb-a845-0fdd4e64cb76","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.12.203.92","comment":"https://x.com/K_N1kolenko/status/1948714425940127993","timestamp":"1753444699","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"b09c41c0-d51a-58ca-9342-4e71d31ba762","type":"domain","category":"Network activity","to_ids":true,"value":"fareadstcafe.wixsite.com","comment":"https://x.com/urldna_bot/status/1948714892816503074","timestamp":"1753444810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8f6c426f-8f83-550e-b877-b0ef45546d0b","type":"url","category":"Network activity","to_ids":true,"value":"https://fareadstcafe.wixsite.com/attsettings/","comment":"https://x.com/urldna_bot/status/1948714892816503074","timestamp":"1753444810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7205b0bf-5b58-516d-a2c6-e9f8aa65c5ae","type":"url","category":"Network activity","to_ids":true,"value":"https://cod-luxurybag-jp.shop","comment":"https://x.com/masaomi346/status/1948724342172561427","timestamp":"1753447063","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec839065-d23f-5686-b03e-2a8640091188","type":"domain","category":"Network activity","to_ids":true,"value":"cod-luxurybag-jp.shop","comment":"https://x.com/masaomi346/status/1948724342172561427","timestamp":"1753447063","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25294f4e-1bbe-59fe-8e53-192609ba6d8d","type":"domain","category":"Network activity","to_ids":true,"value":"akribis-sys.com","comment":"https://x.com/SaptangLabs/status/1948727354597278166","timestamp":"1753447781","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"911746b2-495f-5dd5-8a34-c051ada1eb69","type":"url","category":"Network activity","to_ids":true,"value":"http://akribis-sys.com","comment":"https://x.com/SaptangLabs/status/1948727354597278166","timestamp":"1753447781","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5088ef83-7451-5d87-b5ac-63e9b6d116cd","type":"domain","category":"Network activity","to_ids":true,"value":"Algeria-dz.com","comment":"https://x.com/FalconFeedsio/status/1948752434433851668","timestamp":"1753453761","distribution":"5"},{"uuid":"fe56e145-1fe4-5665-9bb4-9be52a3fc3d2","type":"url","category":"Network activity","to_ids":true,"value":"http://Algeria-dz.com","comment":"https://x.com/FalconFeedsio/status/1948752434433851668","timestamp":"1753453761","distribution":"5"},{"uuid":"cb517dc6-67c7-52f2-8f18-ff1dd428a336","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-regio.wzwzsp.cn","comment":"https://x.com/harugasumi/status/1948753586986647809","timestamp":"1753454035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"666c5677-aadb-534e-87d9-f139734280db","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-regio.wzwzsp.cn/netservice/login/","comment":"https://x.com/harugasumi/status/1948753586986647809","timestamp":"1753454035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08dcb9bc-0585-5dd2-bee6-c1728e0a7228","type":"domain","category":"Network activity","to_ids":true,"value":"uconnrequestcancellationform1.weebly.com","comment":"https://x.com/urldna_bot/status/1948775280622833718","timestamp":"1753459208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"11bc42ef-cd34-5ccf-a67a-feb673c2f842","type":"url","category":"Network activity","to_ids":true,"value":"https://uconnrequestcancellationform1.weebly.com","comment":"https://x.com/urldna_bot/status/1948775280622833718","timestamp":"1753459208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f00399bf-4baf-5f02-ae8c-f5db890e4ee8","type":"url","category":"Network activity","to_ids":true,"value":"http://Trip.com","comment":"https://x.com/harugasumi/status/1948778775308894553","timestamp":"1753460041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d1cd35b-9b0e-575c-a41d-c10fbbc14e70","type":"domain","category":"Network activity","to_ids":true,"value":"Trip.com","comment":"https://x.com/harugasumi/status/1948778775308894553","timestamp":"1753460041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cfa60d2-398d-5f28-8c31-bca7832163f1","type":"domain","category":"Network activity","to_ids":true,"value":"trip-fractern.ciyqbb.cn","comment":"https://x.com/harugasumi/status/1948778775308894553","timestamp":"1753460041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60cc522a-a03d-5708-ae47-d1d33a4fd347","type":"url","category":"Network activity","to_ids":true,"value":"https://trip-fractern.ciyqbb.cn/customer/announcement/","comment":"https://x.com/harugasumi/status/1948778775308894553","timestamp":"1753460041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cdf84d4c-c7d4-5b0d-8e2d-937267470e63","type":"url","category":"Network activity","to_ids":true,"value":"http://120.25.209.147:8888","comment":"https://x.com/drb_ra/status/1948794204572058021","timestamp":"1753463719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"848ae94d-cfd6-5a80-9e7d-3d0eb7e6fcd3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.25.209.147","comment":"https://x.com/drb_ra/status/1948794204572058021","timestamp":"1753463719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3cbb501f-fd5a-5fd8-8a6b-a9d75b231119","type":"domain","category":"Network activity","to_ids":true,"value":"1318387972-34ie6xy56d.ap-guangzhou.tencentscf.com","comment":"https://x.com/drb_ra/status/1948794228731248663","timestamp":"1753463725","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9fe56aa7-e340-511c-b266-f552122552fe","type":"url","category":"Network activity","to_ids":true,"value":"https://1318387972-34ie6xy56d.ap-guangzhou.tencentscf.com/api/get","comment":"https://x.com/drb_ra/status/1948794228731248663","timestamp":"1753463725","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5f64be31-000a-54b9-98de-605a9f5982fd","type":"url","category":"Network activity","to_ids":true,"value":"http://1.12.235.6:443","comment":"https://x.com/drb_ra/status/1948794228731248663","timestamp":"1753463725","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6fe7bd28-9de1-5417-9281-12b939436749","type":"url","category":"Network activity","to_ids":true,"value":"https://101.200.193.211/ptj","comment":"https://x.com/drb_ra/status/1948794248637120875","timestamp":"1753463730","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c4175934-fcd7-5eba-bbba-7bfce64b905b","type":"url","category":"Network activity","to_ids":true,"value":"http://101.200.193.211:8090","comment":"https://x.com/drb_ra/status/1948794248637120875","timestamp":"1753463730","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"46b94a51-eace-5ce7-88bf-882c000d7c5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.200.193.211","comment":"https://x.com/drb_ra/status/1948794248637120875","timestamp":"1753463730","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8d1d0955-1725-5c0e-90a1-ad51c85453df","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.176.248:443","comment":"https://x.com/drb_ra/status/1948794272196821049","timestamp":"1753463735","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1bb9fe7-8964-5bba-9b90-773cf06849c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.176.248","comment":"https://x.com/drb_ra/status/1948794272196821049","timestamp":"1753463735","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3b7c1666-582b-51de-ba67-b9bcb9e63673","type":"url","category":"Network activity","to_ids":true,"value":"https://47.109.176.248/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1948794272196821049","timestamp":"1753463735","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"48ae1f72-318d-5c35-acbf-be561ebbe121","type":"url","category":"Network activity","to_ids":true,"value":"https://154.64.250.99/visit.js","comment":"https://x.com/drb_ra/status/1948794292991877167","timestamp":"1753463740","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4d9d4892-a530-5630-90df-e51c22b8513f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.64.250.99:6666","comment":"https://x.com/drb_ra/status/1948794292991877167","timestamp":"1753463740","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3283e16c-ef23-58f3-8a86-8616c851cf0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.64.250.99","comment":"https://x.com/drb_ra/status/1948794292991877167","timestamp":"1753463740","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a665d06-c9a3-5314-8ff1-a53018c8a1c6","type":"url","category":"Network activity","to_ids":true,"value":"https://43.138.22.149/wc/58462514417","comment":"https://x.com/drb_ra/status/1948794316186681629","timestamp":"1753463746","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"998bb593-d14b-564c-bac7-645d52350e15","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8091","comment":"https://x.com/drb_ra/status/1948794316186681629","timestamp":"1753463746","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9976d83b-18f3-5c5f-85a1-7a5ff7a65452","type":"url","category":"Network activity","to_ids":true,"value":"https://101.42.157.172/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1948794336558112811","timestamp":"1753463751","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"17e165af-f751-5252-b1e1-b54c7495fe2b","type":"url","category":"Network activity","to_ids":true,"value":"http://101.42.157.172:8087","comment":"https://x.com/drb_ra/status/1948794336558112811","timestamp":"1753463751","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"30d322a2-08a9-5077-9ed3-eaf6fabaa8a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.42.157.172","comment":"https://x.com/drb_ra/status/1948794336558112811","timestamp":"1753463751","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f4411162-da5a-5e56-b8fd-59cfef3d9e29","type":"url","category":"Network activity","to_ids":true,"value":"https://101.42.187.157/dot.gif","comment":"https://x.com/drb_ra/status/1948794358150693117","timestamp":"1753463756","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"69a83d82-07ea-5c63-8617-1dc57f0ffc19","type":"url","category":"Network activity","to_ids":true,"value":"http://49.232.159.121:80","comment":"https://x.com/drb_ra/status/1948794358150693117","timestamp":"1753463756","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4ead97bd-a388-5d24-8788-5e201dce6bb8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.232.159.121","comment":"https://x.com/drb_ra/status/1948794358150693117","timestamp":"1753463756","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fb761ffc-2d36-5676-ae8c-8a15424d364d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.42.187.157","comment":"https://x.com/drb_ra/status/1948794358150693117","timestamp":"1753463756","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"56d1f29d-e92a-50c8-bc12-3e489b4147a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.91.224","comment":"https://x.com/drb_ra/status/1948794877992440294","timestamp":"1753463880","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"89235501-690b-5d22-8010-1bb69941f9a3","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.91.224:80","comment":"https://x.com/drb_ra/status/1948794877992440294","timestamp":"1753463880","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7d2a79c1-5531-58d3-a5d7-03ffeb6a644c","type":"url","category":"Network activity","to_ids":true,"value":"https://154.201.91.224/js/PromotionBanner.Main.min.js","comment":"https://x.com/drb_ra/status/1948794877992440294","timestamp":"1753463880","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"19ed73fd-143b-59d0-8029-283150da0f61","type":"url","category":"Network activity","to_ids":true,"value":"http://101.201.108.173:443","comment":"https://x.com/drb_ra/status/1948794902462300536","timestamp":"1753463886","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"724df832-b753-5fd6-9453-f2b7ed238f4f","type":"domain","category":"Network activity","to_ids":true,"value":"jmgle.com","comment":"https://x.com/drb_ra/status/1948794902462300536","timestamp":"1753463886","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8dbfd7f5-578d-5476-b057-9f38d88175df","type":"url","category":"Network activity","to_ids":true,"value":"https://www.jmgle.com/dist/css/bootstrap.min.css","comment":"https://x.com/drb_ra/status/1948794902462300536","timestamp":"1753463886","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aab4819b-9350-53b5-b2f8-2d70e799a416","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.201.108.173","comment":"https://x.com/drb_ra/status/1948794902462300536","timestamp":"1753463886","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6435bfb5-ef34-533d-b090-71bca170d4fe","type":"url","category":"Network activity","to_ids":true,"value":"https://mbbtmailnukm.weebly.com","comment":"https://x.com/urldna_bot/status/1948805474075193359","timestamp":"1753466406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"341adfe8-91b0-5d89-ac6b-2b68096fc1d4","type":"domain","category":"Network activity","to_ids":true,"value":"mbbtmailnukm.weebly.com","comment":"https://x.com/urldna_bot/status/1948805474075193359","timestamp":"1753466406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8a279a09-73e5-5c2a-aa4c-fbacde612d45","type":"url","category":"Network activity","to_ids":true,"value":"https://77.110.113.73/Documents/cu","comment":"https://x.com/skocherhan/status/1948806217314517211","timestamp":"1753466583","distribution":"5"},{"uuid":"6d41841b-952b-5b1d-ba40-749fdf1673a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.110.113.73","comment":"https://x.com/skocherhan/status/1948806217314517211","timestamp":"1753466583","distribution":"5"},{"uuid":"b3fc74f7-dd1c-58c5-aaa0-cfff51c37057","type":"url","category":"Network activity","to_ids":true,"value":"https://77.110.113.73/Documents/customer-receipt.pdf.lnk","comment":"https://x.com/skocherhan/status/1948806217314517211","timestamp":"1753466583","distribution":"5"},{"uuid":"41511e26-9999-5218-a897-dde1ae0166ef","type":"domain","category":"Network activity","to_ids":true,"value":"driverupdate.ue3hdn4-cdnsecurefile.com","comment":"https://x.com/skocherhan/status/1948806217314517211","timestamp":"1753466583","distribution":"5"},{"uuid":"738b6732-71af-5a9f-9c03-47194548ea5f","type":"url","category":"Network activity","to_ids":true,"value":"https://driverupdate.ue3hdn4-cdnsecurefile.com/Chrono24-receipt.pdf","comment":"https://x.com/skocherhan/status/1948806217314517211","timestamp":"1753466583","distribution":"5"},{"uuid":"dfb34c39-ae46-53b8-9dee-befcbbbd9774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.190.232.199","comment":"https://x.com/drb_ra/status/1948817168180936880","timestamp":"1753469194","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e7aa18a3-f9c3-52e5-805e-a9893a3fee5f","type":"url","category":"Network activity","to_ids":true,"value":"http://103.190.232.199:46110","comment":"https://x.com/drb_ra/status/1948817168180936880","timestamp":"1753469194","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"02c962f2-6f3d-55b5-a39b-e941c89c2ab5","type":"url","category":"Network activity","to_ids":true,"value":"http://182.30.42.214:443","comment":"https://x.com/drb_ra/status/1948817188862701632","timestamp":"1753469199","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b26582df-0caf-516f-97b2-4e5d46ab9abf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.30.42.214","comment":"https://x.com/drb_ra/status/1948817188862701632","timestamp":"1753469199","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"71cae2b9-e873-51ae-9f65-a10895f7ed1a","type":"url","category":"Network activity","to_ids":true,"value":"http://45.9.2.214:7443","comment":"https://x.com/drb_ra/status/1948817209524134137","timestamp":"1753469204","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6463d2f0-ca0f-54b6-a7fc-cc2e81c4bf4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.9.2.214","comment":"https://x.com/drb_ra/status/1948817209524134137","timestamp":"1753469204","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0c88faa7-40fc-53e4-afe7-a79c9b88241a","type":"url","category":"Network activity","to_ids":true,"value":"http://217.60.38.16:6443","comment":"https://x.com/drb_ra/status/1948817228511494318","timestamp":"1753469209","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"fd3e1929-8378-5d72-937e-f881f7073035","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.60.38.16","comment":"https://x.com/drb_ra/status/1948817228511494318","timestamp":"1753469209","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ee17b0f6-5481-53ba-b93c-14b613442412","type":"url","category":"Network activity","to_ids":true,"value":"http://139.59.190.193:7443","comment":"https://x.com/drb_ra/status/1948817249428455847","timestamp":"1753469214","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"37766226-69c8-57d4-9bf6-1ae4a2cc7665","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.59.190.193","comment":"https://x.com/drb_ra/status/1948817249428455847","timestamp":"1753469214","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"40d98007-9020-54b5-afe5-30f2003001b9","type":"url","category":"Network activity","to_ids":true,"value":"http://2.37.23.207:9002","comment":"https://x.com/drb_ra/status/1948817270651675028","timestamp":"1753469219","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"cb520585-6515-5c6a-8eeb-68dd6d03f5f6","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.224.52:31337","comment":"https://x.com/drb_ra/status/1948817291543449700","timestamp":"1753469224","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0d8956ba-582d-53d4-8e8e-d327e008637b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.224.52","comment":"https://x.com/drb_ra/status/1948817291543449700","timestamp":"1753469224","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"50b5c97e-5a6d-54b1-bb89-a39ec5db2486","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.1.112","comment":"https://x.com/drb_ra/status/1948817312372371481","timestamp":"1753469229","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ca1131b8-c22f-538d-968d-d8ee376dcf81","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.1.112:31337","comment":"https://x.com/drb_ra/status/1948817312372371481","timestamp":"1753469229","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2c6e327a-149c-51fd-943d-cb95ec26143c","type":"url","category":"Network activity","to_ids":true,"value":"http://20.235.39.5:31337","comment":"https://x.com/drb_ra/status/1948817335566868654","timestamp":"1753469234","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6e1b0e90-b527-5087-8d7d-d2f392692181","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.235.39.5","comment":"https://x.com/drb_ra/status/1948817335566868654","timestamp":"1753469234","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ce8b3d70-0ab6-5b7a-9677-4fbb7b6a043b","type":"url","category":"Network activity","to_ids":true,"value":"http://31.129.108.115:8888","comment":"https://x.com/drb_ra/status/1948817356014194874","timestamp":"1753469239","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5ecab962-0be7-51de-9aaf-52a659b9353c","type":"url","category":"Network activity","to_ids":true,"value":"http://31.129.108.115:31337","comment":"https://x.com/drb_ra/status/1948817376390070581","timestamp":"1753469244","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8b7d1f7d-8494-51f4-a65f-1528104e093d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.129.108.115","comment":"https://x.com/drb_ra/status/1948817376390070581","timestamp":"1753469244","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0b98e62c-fc10-570e-b159-9acacf4244ff","type":"url","category":"Network activity","to_ids":true,"value":"http://13.48.178.184:389","comment":"https://x.com/drb_ra/status/1948817895217398054","timestamp":"1753469368","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d105223c-97f1-5cfb-add5-3b17baaac661","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.48.178.184","comment":"https://x.com/drb_ra/status/1948817895217398054","timestamp":"1753469368","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"bb9bc5cb-0cf0-5011-ad4d-fca7697b9614","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.155.253.62","comment":"https://x.com/drb_ra/status/1948817910815670721","timestamp":"1753469371","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a7ad997c-ee07-5f30-8724-55de83e354f7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.155.253.62:34011","comment":"https://x.com/drb_ra/status/1948817910815670721","timestamp":"1753469371","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5f16d08a-f561-560e-bbdf-8b44b84fe6eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.184.116","comment":"https://x.com/drb_ra/status/1948817935252029882","timestamp":"1753469377","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5ab1a73c-1b4b-5124-a3d9-1ac4d0d8ad4f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.184.116:58000","comment":"https://x.com/drb_ra/status/1948817935252029882","timestamp":"1753469377","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"852ecfe9-c797-5fec-9a1e-7d4ff7bd7932","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.158.241:8808","comment":"https://x.com/drb_ra/status/1948817954952675708","timestamp":"1753469382","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"055a7df1-9f1f-5561-86da-9b5ca8a2794e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.158.241","comment":"https://x.com/drb_ra/status/1948817954952675708","timestamp":"1753469382","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"23794a37-03ab-54de-a2a0-6767e305914b","type":"url","category":"Network activity","to_ids":true,"value":"http://88.198.90.187:8443","comment":"https://x.com/drb_ra/status/1948817969481384144","timestamp":"1753469385","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b348b1bb-633f-52aa-96ec-d1e6611b8cdb","type":"url","category":"Network activity","to_ids":true,"value":"http://88.198.90.187:8080","comment":"https://x.com/drb_ra/status/1948817990054502474","timestamp":"1753469390","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4b8d603d-f71c-5074-858f-42453e3bf29f","type":"url","category":"Network activity","to_ids":true,"value":"http://88.198.90.187:587","comment":"https://x.com/drb_ra/status/1948818014389796905","timestamp":"1753469396","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8c67fbce-a308-5826-9b88-95bf508148de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.198.90.187","comment":"https://x.com/drb_ra/status/1948818014389796905","timestamp":"1753469396","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2002c0c3-22eb-5ab6-a3c9-f72434ebaea2","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.42.109:80","comment":"https://x.com/drb_ra/status/1948818033537060941","timestamp":"1753469401","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"aa10a3a5-a432-5291-98f0-c1508a2b8b97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.42.109","comment":"https://x.com/drb_ra/status/1948818033537060941","timestamp":"1753469401","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a180eb4d-6910-5a0e-949d-3cb444c9a1ed","type":"url","category":"Network activity","to_ids":true,"value":"http://216.144.226.186:587","comment":"https://x.com/drb_ra/status/1948818053468238023","timestamp":"1753469405","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f60d1db7-c937-535d-b2f9-6a8a3bf24d16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.144.226.186","comment":"https://x.com/drb_ra/status/1948818074553254388","timestamp":"1753469410","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8ebeffe5-8431-5017-ba2a-9cc66c078fbb","type":"url","category":"Network activity","to_ids":true,"value":"http://216.144.226.186:25","comment":"https://x.com/drb_ra/status/1948818074553254388","timestamp":"1753469410","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dbac1cc8-54ad-5079-b6e3-ab92cff30e52","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.108.37:80","comment":"https://x.com/drb_ra/status/1948818094777843959","timestamp":"1753469415","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"efa2303b-2b96-585f-abfd-922414cee5e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.108.37","comment":"https://x.com/drb_ra/status/1948818094777843959","timestamp":"1753469415","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"34c31f74-f407-590f-98a2-91618a63bcdf","type":"url","category":"Network activity","to_ids":true,"value":"http://159.65.229.135:80","comment":"https://x.com/drb_ra/status/1948818116126941622","timestamp":"1753469420","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"b9e58396-44f6-5ee3-8947-715cdb5d837e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.65.229.135","comment":"https://x.com/drb_ra/status/1948818116126941622","timestamp":"1753469420","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"d80e0599-4b5a-5428-80de-a63fd23d15bd","type":"url","category":"Network activity","to_ids":true,"value":"http://202.158.249.27:80","comment":"https://x.com/drb_ra/status/1948818137522077806","timestamp":"1753469425","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"12139e90-f14a-552b-88a7-15d416c582e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.158.249.27","comment":"https://x.com/drb_ra/status/1948818137522077806","timestamp":"1753469425","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"eec11c1d-eee4-581d-8c87-e5ebad3ba0b7","type":"url","category":"Network activity","to_ids":true,"value":"http://159.223.109.10:3333","comment":"https://x.com/drb_ra/status/1948818159038779574","timestamp":"1753469431","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"2ef35f29-2f88-54bd-b728-23471530f8ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.223.109.10","comment":"https://x.com/drb_ra/status/1948818159038779574","timestamp":"1753469431","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"65a9800c-35ee-573b-bd3d-a00a8e57cb14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.248.162.66","comment":"https://x.com/drb_ra/status/1948818180161302991","timestamp":"1753469436","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"14ec61ee-0186-5249-bda8-ef3fd2f0cfeb","type":"url","category":"Network activity","to_ids":true,"value":"http://109.248.162.66:3100","comment":"https://x.com/drb_ra/status/1948818180161302991","timestamp":"1753469436","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"db335181-1a21-59ea-9729-8d3069a8caa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.54.42.147","comment":"https://x.com/drb_ra/status/1948818201506447501","timestamp":"1753469441","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"4882ea09-ba7b-58d4-bbee-9b3d79391b48","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.147:6699","comment":"https://x.com/drb_ra/status/1948818201506447501","timestamp":"1753469441","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"e8bb48b9-92ef-5fd2-b3e5-d6ce7f9f39e5","type":"url","category":"Network activity","to_ids":true,"value":"http://2.121.208.13:443","comment":"https://x.com/drb_ra/status/1948818222599602512","timestamp":"1753469446","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b891a1db-cbde-5a98-b19c-e1b89744ca67","type":"url","category":"Network activity","to_ids":true,"value":"http://67.60.72.232:443","comment":"https://x.com/drb_ra/status/1948818245147853088","timestamp":"1753469451","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9279ae67-9f7e-52ba-b488-2bfb4f6be06e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.60.72.232","comment":"https://x.com/drb_ra/status/1948818245147853088","timestamp":"1753469451","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"c4c97432-ca53-5e10-98ab-c6a1e9b76778","type":"url","category":"Network activity","to_ids":true,"value":"http://103.56.19.86:8443","comment":"https://x.com/drb_ra/status/1948818269764571253","timestamp":"1753469457","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bb21e421-da00-51aa-9eda-f9098344dec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.56.19.86","comment":"https://x.com/drb_ra/status/1948818269764571253","timestamp":"1753469457","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9f507bda-8c8f-5c7f-b0e6-d532aba29423","type":"url","category":"Network activity","to_ids":true,"value":"http://18.221.239.131:8080","comment":"https://x.com/drb_ra/status/1948818790613221735","timestamp":"1753469581","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"a29160f7-98fd-5411-ba1c-7554c11f807d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.221.239.131","comment":"https://x.com/drb_ra/status/1948818790613221735","timestamp":"1753469581","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"fdb3a6e3-6d67-5276-abe0-55c15b2e772c","type":"url","category":"Network activity","to_ids":true,"value":"http://89.22.169.22:443","comment":"https://x.com/drb_ra/status/1948818814462034114","timestamp":"1753469587","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fe6fb71d-af63-514f-9eea-f4d428676fc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.22.169.22","comment":"https://x.com/drb_ra/status/1948818814462034114","timestamp":"1753469587","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"605d92bd-8797-5647-979a-6f61cba56825","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.104","comment":"https://x.com/drb_ra/status/1948818834695016732","timestamp":"1753469592","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"de1976ef-5eec-5492-b928-3b7f3ead8675","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.104:2404","comment":"https://x.com/drb_ra/status/1948818834695016732","timestamp":"1753469592","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9251b8a5-b5a6-5963-b09f-cf57a3d4b063","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.242:2404","comment":"https://x.com/drb_ra/status/1948818850306216084","timestamp":"1753469595","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ff5ebac9-3916-5a6b-a910-36f1f7452f6c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.242:2024","comment":"https://x.com/drb_ra/status/1948818877087179020","timestamp":"1753469602","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c5d38502-6c3a-5e4e-b18d-6ab19e94657a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.80.158.242","comment":"https://x.com/drb_ra/status/1948818877087179020","timestamp":"1753469602","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d555c805-97ff-5f9c-991d-865c9a6fb0d6","type":"domain","category":"Network activity","to_ids":true,"value":"norrydc.weebly.com","comment":"https://x.com/urldna_bot/status/1948835675945505004","timestamp":"1753473607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aab08fcd-3f28-5911-99ab-02d574e60946","type":"url","category":"Network activity","to_ids":true,"value":"https://norrydc.weebly.com","comment":"https://x.com/urldna_bot/status/1948835675945505004","timestamp":"1753473607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3c5bfcf5-d1f8-556b-be87-aa2b298fe9af","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.21:32644","comment":"https://x.com/SarlackLab/status/1948835720887496985","timestamp":"1753473618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"c71b3ca7-4e9a-5041-8d66-129f6e2cb0c2","type":"domain","category":"Network activity","to_ids":true,"value":"survey-push.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948835720887496985","timestamp":"1753473618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"fb828955-6878-5c19-814b-326f8177f613","type":"url","category":"Network activity","to_ids":true,"value":"http://survey-push.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948835720887496985","timestamp":"1753473618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"38bcbab0-34e9-587c-a373-12979439e886","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.21","comment":"https://x.com/SarlackLab/status/1948835720887496985","timestamp":"1753473618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"69a363db-0ae4-544f-9b86-12fdd06156e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.95.154","comment":"https://x.com/drb_ra/status/1948843180775850259","timestamp":"1753475396","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a288f636-a687-5c00-a4fb-32b01bf53fcc","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.95.154:443","comment":"https://x.com/drb_ra/status/1948843180775850259","timestamp":"1753475396","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d1f5052e-a0d3-5eef-b9a0-da20831df592","type":"url","category":"Network activity","to_ids":true,"value":"https://144.172.95.154:443","comment":"https://x.com/drb_ra/status/1948843180775850259","timestamp":"1753475396","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5ca249ba-4b83-53db-ab12-36209ee83907","type":"url","category":"Network activity","to_ids":true,"value":"https://109.205.213.174:443","comment":"https://x.com/drb_ra/status/1948843204356223239","timestamp":"1753475402","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4c970901-098a-57ff-975e-24e95c320273","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.213.174:443","comment":"https://x.com/drb_ra/status/1948843204356223239","timestamp":"1753475402","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7b9c280e-9756-5511-abae-d68df35a1eb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.205.213.174","comment":"https://x.com/drb_ra/status/1948843204356223239","timestamp":"1753475402","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"906e00c6-db8b-5b04-a034-8dcd86449c1d","type":"url","category":"Network activity","to_ids":true,"value":"http://82.118.20.29:443","comment":"https://x.com/drb_ra/status/1948843226397364628","timestamp":"1753475407","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0405c6d5-2337-537d-b1a8-fbb65a0b7a45","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.118.20.29","comment":"https://x.com/drb_ra/status/1948843226397364628","timestamp":"1753475407","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"70d823f6-151d-5ccf-93b6-96abf52fc268","type":"url","category":"Network activity","to_ids":true,"value":"https://82.118.20.29:443","comment":"https://x.com/drb_ra/status/1948843226397364628","timestamp":"1753475407","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b87885ac-e9d2-5d5c-8732-5a28253b10eb","type":"domain","category":"Network activity","to_ids":true,"value":"azdot.arizonaa.cc","comment":"https://x.com/1LupeLaaw/status/1948845365454843916","timestamp":"1753475917","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf0b981d-422b-5cbd-a259-052294dc83f9","type":"url","category":"Network activity","to_ids":true,"value":"http://azdot.arizonaa.cc","comment":"https://x.com/1LupeLaaw/status/1948845365454843916","timestamp":"1753475917","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b48ec359-613a-5d99-93ba-3117a5536523","type":"url","category":"Network activity","to_ids":true,"value":"http://61.216.94.62","comment":"https://x.com/threatquery/status/1948850764811530365","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"a4f48f4b-ef20-5166-bc51-48dcdc3b6d1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.216.94.62","comment":"https://x.com/threatquery/status/1948850764811530365","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"6b178799-9e65-5121-87d8-af205f6cb62c","type":"url","category":"Network activity","to_ids":true,"value":"http://120.221.22.109","comment":"https://x.com/threatquery/status/1948850763079266472","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"c0799910-b6da-520c-a4fb-66e1e8a5a460","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.221.22.109","comment":"https://x.com/threatquery/status/1948850763079266472","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"16c09fd6-ae9f-539d-a7d3-060bbabd2b88","type":"url","category":"Network activity","to_ids":true,"value":"http://149.28.145.214","comment":"https://x.com/threatquery/status/1948850761485426739","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"d41b180d-f762-5be6-872e-9a9208d0e7ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.28.145.214","comment":"https://x.com/threatquery/status/1948850761485426739","timestamp":"1753477204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"f26627d5-05e2-5778-a921-ad2683f509b6","type":"domain","category":"Network activity","to_ids":true,"value":"smartparcelchain.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948865869544640787","timestamp":"1753480806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6aeed1c6-bf2e-5294-98b5-2c3e3140304a","type":"url","category":"Network activity","to_ids":true,"value":"https://smartparcelchain.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948865869544640787","timestamp":"1753480806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"34102435-17ac-567c-a502-3e641d86d26b","type":"url","category":"Network activity","to_ids":true,"value":"https://176.46.152.35/cm","comment":"https://x.com/drb_ra/status/1948882196854706261","timestamp":"1753484698","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e56f539b-acca-5c49-9378-6980137448cc","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.35:80","comment":"https://x.com/drb_ra/status/1948882196854706261","timestamp":"1753484698","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"caa4085c-559b-5ca5-9719-4dc52e87efbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.35","comment":"https://x.com/drb_ra/status/1948882196854706261","timestamp":"1753484698","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ee249991-589d-5c1c-b00b-02d1b3bda7d1","type":"url","category":"Network activity","to_ids":true,"value":"https://115.190.151.227/en_US/all.js","comment":"https://x.com/drb_ra/status/1948882221433323548","timestamp":"1753484704","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"14d491f0-cb61-52a1-a7b9-f1dad986b8a5","type":"url","category":"Network activity","to_ids":true,"value":"http://115.190.151.227:801","comment":"https://x.com/drb_ra/status/1948882221433323548","timestamp":"1753484704","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"006e6928-c4de-547d-a3ae-d3f2fe7ce8c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.190.151.227","comment":"https://x.com/drb_ra/status/1948882221433323548","timestamp":"1753484704","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b5ee5255-5a4d-5027-a5e9-0bccaa60af5c","type":"url","category":"Network activity","to_ids":true,"value":"https://121.199.52.25/fwlink","comment":"https://x.com/drb_ra/status/1948882243822256241","timestamp":"1753484710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1b6ec88-1820-55a6-ba0a-31d05d6eb987","type":"url","category":"Network activity","to_ids":true,"value":"http://121.199.52.25:80","comment":"https://x.com/drb_ra/status/1948882243822256241","timestamp":"1753484710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"607beaba-5339-572e-9350-1ee311578ad9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.199.52.25","comment":"https://x.com/drb_ra/status/1948882243822256241","timestamp":"1753484710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c82d9925-b837-5a7e-9e13-bcd761c89bd9","type":"url","category":"Network activity","to_ids":true,"value":"https://121.40.76.3/dot.gif","comment":"https://x.com/drb_ra/status/1948882267264483446","timestamp":"1753484715","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"73079a60-49e7-5244-b489-3f09b6a9245a","type":"url","category":"Network activity","to_ids":true,"value":"http://121.40.76.3:80","comment":"https://x.com/drb_ra/status/1948882267264483446","timestamp":"1753484715","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d947c71f-7e44-5ae0-b042-0405de0002cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.40.76.3","comment":"https://x.com/drb_ra/status/1948882267264483446","timestamp":"1753484715","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d5047c1e-e250-5446-87e1-cf34fa9c8d60","type":"url","category":"Network activity","to_ids":true,"value":"https://47.109.58.47/dpixel","comment":"https://x.com/drb_ra/status/1948882292514095255","timestamp":"1753484721","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4e6e0d28-ec10-5534-b9e9-10bbd606eb50","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.58.47:8989","comment":"https://x.com/drb_ra/status/1948882292514095255","timestamp":"1753484721","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d3a44054-e596-5470-9752-3e389b561713","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.58.47","comment":"https://x.com/drb_ra/status/1948882292514095255","timestamp":"1753484721","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0ab4c05a-12e2-5101-8221-126f8e021a28","type":"url","category":"Network activity","to_ids":true,"value":"https://59.110.12.179/load","comment":"https://x.com/drb_ra/status/1948882314181616069","timestamp":"1753484726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"123cdef4-d028-57db-b2b2-7e5188229d7e","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.12.179:443","comment":"https://x.com/drb_ra/status/1948882314181616069","timestamp":"1753484726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"41decb88-dad6-51d9-8ee2-0ddb324e7363","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.12.179","comment":"https://x.com/drb_ra/status/1948882314181616069","timestamp":"1753484726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"39176c89-f4c0-5e96-b720-a9a1319013ac","type":"url","category":"Network activity","to_ids":true,"value":"https://179.43.186.224/fwlink","comment":"https://x.com/drb_ra/status/1948882338613801372","timestamp":"1753484732","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f31c2d6c-6cd5-5b5a-b3e9-b620658da99c","type":"url","category":"Network activity","to_ids":true,"value":"http://179.43.186.224:443","comment":"https://x.com/drb_ra/status/1948882338613801372","timestamp":"1753484732","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"44f25ba6-6f47-5693-8f1a-7699cf2f917e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.43.186.224","comment":"https://x.com/drb_ra/status/1948882338613801372","timestamp":"1753484732","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f98a365-f0e1-54ff-8dc6-dce4ba535ed7","type":"domain","category":"Network activity","to_ids":true,"value":"web.vnpti.uk","comment":"https://x.com/drb_ra/status/1948882360902250920","timestamp":"1753484737","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"61b80d1e-2503-5701-b8e2-1fbc394401c8","type":"url","category":"Network activity","to_ids":true,"value":"https://web.vnpti.uk/visit.js","comment":"https://x.com/drb_ra/status/1948882360902250920","timestamp":"1753484737","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7c3a02e0-c745-5fc4-aac6-ac096a4a731b","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.68:2052","comment":"https://x.com/drb_ra/status/1948882360902250920","timestamp":"1753484737","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a175a540-7b42-55b4-8586-00011da031e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.54.42.68","comment":"https://x.com/drb_ra/status/1948882360902250920","timestamp":"1753484737","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"23fdd559-5821-52a9-960b-70e0c092e8a7","type":"url","category":"Network activity","to_ids":true,"value":"https://120.55.73.61/Anticipate/v1.56/4P2JXO8AR2UO","comment":"https://x.com/drb_ra/status/1948882386420457500","timestamp":"1753484744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d8668902-0656-5add-985a-1ece551227bf","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.62:3389","comment":"https://x.com/drb_ra/status/1948882386420457500","timestamp":"1753484744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5bfa9f7a-466a-5e29-87c9-e40893f67399","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.62","comment":"https://x.com/drb_ra/status/1948882386420457500","timestamp":"1753484744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0d58d4c6-3cf3-5109-83b6-7200fe2808d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.55.73.61","comment":"https://x.com/drb_ra/status/1948882386420457500","timestamp":"1753484744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4d69f445-a206-5fda-bd71-bcea60bb3427","type":"domain","category":"Network activity","to_ids":true,"value":"5ndg65b68274v.cfc-execute.bj.baidubce.com","comment":"https://x.com/drb_ra/status/1948882905213645232","timestamp":"1753484867","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2c0a8a46-dfb3-584f-91d1-c5131bb0bd3e","type":"url","category":"Network activity","to_ids":true,"value":"https://5ndg65b68274v.cfc-execute.bj.baidubce.com/api/x","comment":"https://x.com/drb_ra/status/1948882905213645232","timestamp":"1753484867","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1322b047-efcf-5315-9b45-f2de3ca216e6","type":"url","category":"Network activity","to_ids":true,"value":"http://101.34.66.77:8089","comment":"https://x.com/drb_ra/status/1948882905213645232","timestamp":"1753484867","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cc8737dd-805c-5ebf-bf25-0062b575bd14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.34.66.77","comment":"https://x.com/drb_ra/status/1948882905213645232","timestamp":"1753484867","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bd321b2e-9c87-5b06-a41c-a4fe42af5b50","type":"domain","category":"Network activity","to_ids":true,"value":"inform-01.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948896077467234396","timestamp":"1753488008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dfbf5fe0-0696-57f4-8aa5-6510ff3863db","type":"url","category":"Network activity","to_ids":true,"value":"https://inform-01.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1948896077467234396","timestamp":"1753488008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"19dc815a-d8f9-50c2-b650-8c572dec75b7","type":"domain","category":"Network activity","to_ids":true,"value":"brldgeumbria.org","comment":"https://x.com/qrjxl/status/1948906074075267389","timestamp":"1753490391","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"636bfdca-8de0-512a-b33e-f4ee363aa4f7","type":"url","category":"Network activity","to_ids":true,"value":"https://brldgeumbria.org","comment":"https://x.com/qrjxl/status/1948906074075267389","timestamp":"1753490391","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e93fc2f8-7977-5921-82cb-94ec28fbfc9a","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:26212","comment":"https://x.com/SarlackLab/status/1948912280038469761","timestamp":"1753491871","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"2b475028-9119-5367-aa02-060f1fd5e956","type":"domain","category":"Network activity","to_ids":true,"value":"art-infinite.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948912280038469761","timestamp":"1753491871","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"a367bbe9-331c-5da4-83a3-f05444bb8334","type":"url","category":"Network activity","to_ids":true,"value":"http://art-infinite.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1948912280038469761","timestamp":"1753491871","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1948912280038469761","timestamp":"1753491871","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"f45382ab-18df-52f7-bef7-57eb3177f9c2","type":"domain","category":"Network activity","to_ids":true,"value":"gencatsupporthelpdeskadministradordept.weebly.com","comment":"https://x.com/Ki__zzy/status/1948915351590404536","timestamp":"1753492603","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a865706-7152-5726-92f0-bac6c995a5af","type":"url","category":"Network activity","to_ids":true,"value":"https://gencatsupporthelpdeskadministradordept.weebly.com","comment":"https://x.com/Ki__zzy/status/1948915351590404536","timestamp":"1753492603","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c71dfb4b-4fa0-51dc-bae3-e8e29c9501e7","type":"domain","category":"Network activity","to_ids":true,"value":"hndfndf.weebly.com","comment":"https://x.com/urldna_bot/status/1948926270290477479","timestamp":"1753495206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"11d9adda-286e-5500-a1f2-92901852c89c","type":"url","category":"Network activity","to_ids":true,"value":"https://hndfndf.weebly.com","comment":"https://x.com/urldna_bot/status/1948926270290477479","timestamp":"1753495206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0c0d9f36-f8ed-5227-a831-374cd75138c8","type":"md5","category":"Payload delivery","to_ids":true,"value":"f6b8aa93f70ebca070f268d2a4f62243","comment":"https://x.com/ReBensk/status/1948941702074695925","timestamp":"1753498886","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"e151f255-f56a-5a8a-865d-e100a16f3c87","type":"md5","category":"Payload delivery","to_ids":true,"value":"858e7405ad546bcdeb56ad309604dbff","comment":"https://x.com/ReBensk/status/1948942950693773777","timestamp":"1753499183","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"583eb159-d9d1-55cc-add0-4f2f3794cc3c","type":"domain","category":"Network activity","to_ids":true,"value":"att-home-27e6df.webflow.io","comment":"https://x.com/urldna_bot/status/1948956460626362461","timestamp":"1753502404","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5d461fda-3c1b-5261-b004-0545b3cae173","type":"url","category":"Network activity","to_ids":true,"value":"https://att-home-27e6df.webflow.io","comment":"https://x.com/urldna_bot/status/1948956460626362461","timestamp":"1753502404","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8d8b5164-eabc-5f89-aa47-6b421111f57c","type":"domain","category":"Network activity","to_ids":true,"value":"btr6hfklamerd.cfolks.pl","comment":"https://x.com/AddressIntel/status/1948971567498596666","timestamp":"1753506006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"216ef82d-3400-548e-bdbf-fa782e23b2be","type":"url","category":"Network activity","to_ids":true,"value":"https://btr6hfklamerd.cfolks.pl/a/io/auth/l","comment":"https://x.com/AddressIntel/status/1948971567498596666","timestamp":"1753506006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6236cd12-a5dc-5b86-b400-7488aed18f01","type":"md5","category":"Payload delivery","to_ids":true,"value":"6cb7da5dfdb28f829b599bcdf5aad4f5","comment":"https://x.com/ReBensk/status/1948973562364395904","timestamp":"1753506482","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"ec837c1b-8096-5ef0-9d7b-4ac3d60f2d47","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/313Team/313-AlmuntaqimVirus","comment":"https://x.com/askardyuss/status/1948982011374567753","timestamp":"1753508496","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bf9d5fec-7eab-57fc-b3b7-17dd29b5b866","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/313Team/313-AlmuntaqimVirus/raw/refs/heads/main/313%20AlmuntaqimVirus.exe","comment":"https://x.com/askardyuss/status/1948982011374567753","timestamp":"1753508496","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"4e6f6c79-7c42-5513-8e62-217d8dec316b","type":"domain","category":"Network activity","to_ids":true,"value":"888365168.com","comment":"https://x.com/urldna_bot/status/1948986665592066181","timestamp":"1753509606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ead3fc7f-f8f1-5a24-be88-4666cffa2644","type":"url","category":"Network activity","to_ids":true,"value":"http://www.888365168.com","comment":"https://x.com/urldna_bot/status/1948986665592066181","timestamp":"1753509606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c7f3e44f-3cf2-5a50-96d0-ecd31ed5a91a","type":"url","category":"Network activity","to_ids":true,"value":"http://45.79.249.239:443","comment":"https://x.com/drb_ra/status/1948998288050384906","timestamp":"1753512377","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1f28e20b-024b-5acd-9b2b-64d8c2d52dd6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.79.249.239","comment":"https://x.com/drb_ra/status/1948998288050384906","timestamp":"1753512377","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c38ffba0-ab59-5ff4-851c-061aca0a995e","type":"url","category":"Network activity","to_ids":true,"value":"http://91.236.230.205:443","comment":"https://x.com/drb_ra/status/1948998310204764384","timestamp":"1753512382","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"55ddb895-617d-5560-b0de-44dc95db0358","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.236.230.205","comment":"https://x.com/drb_ra/status/1948998310204764384","timestamp":"1753512382","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e436ee3b-80c8-52bb-9472-1b10c516e19c","type":"url","category":"Network activity","to_ids":true,"value":"http://15.161.93.7:135","comment":"https://x.com/drb_ra/status/1948998828633227264","timestamp":"1753512506","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e34b6a28-1c9c-570b-8e77-849674e2ba43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.161.93.7","comment":"https://x.com/drb_ra/status/1948998828633227264","timestamp":"1753512506","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"05dba8fc-a7a1-5e59-85a9-85bb77a4f911","type":"url","category":"Network activity","to_ids":true,"value":"http://51.16.250.152:2376","comment":"https://x.com/drb_ra/status/1948998851437768835","timestamp":"1753512511","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a5a2d6d9-e43a-5277-81d6-4efce22e2fd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.16.250.152","comment":"https://x.com/drb_ra/status/1948998851437768835","timestamp":"1753512511","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"746b486c-67d3-5fef-b202-c29fac7ccdf3","type":"url","category":"Network activity","to_ids":true,"value":"http://18.231.246.194:55615","comment":"https://x.com/drb_ra/status/1948998874296635604","timestamp":"1753512516","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3eea5128-667b-5ca2-babe-327adc6ef728","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.231.246.194","comment":"https://x.com/drb_ra/status/1948998874296635604","timestamp":"1753512516","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"aab2663b-f510-552b-8bd3-0c8ff498923f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.53.250.171:2375","comment":"https://x.com/drb_ra/status/1948998897788998012","timestamp":"1753512522","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d5e9316a-bb81-5aab-be81-8f60e83d940d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.53.250.171","comment":"https://x.com/drb_ra/status/1948998897788998012","timestamp":"1753512522","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"08dd251d-a5dd-5421-930a-d661ece569cb","type":"url","category":"Network activity","to_ids":true,"value":"http://3.70.241.88:18245","comment":"https://x.com/drb_ra/status/1948998920400433539","timestamp":"1753512527","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"899e1f8b-47f3-57b2-bd7f-a01349c2b35f","type":"url","category":"Network activity","to_ids":true,"value":"http://85.107.57.112:8808","comment":"https://x.com/drb_ra/status/1948998943951475006","timestamp":"1753512533","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ca2c5ece-6f7f-50a1-b8bb-b25382219c72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.107.57.112","comment":"https://x.com/drb_ra/status/1948998943951475006","timestamp":"1753512533","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"7b165df8-c625-577a-8aef-040b1cd02e34","type":"url","category":"Network activity","to_ids":true,"value":"http://34.53.68.244:80","comment":"https://x.com/drb_ra/status/1948998967619907827","timestamp":"1753512539","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"5ac04035-718a-5cfc-b02c-55cca3bbc259","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.36.36:80","comment":"https://x.com/drb_ra/status/1948998995763773828","timestamp":"1753512545","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9a56c307-fbb1-51e6-8152-037ad178e053","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.36.36","comment":"https://x.com/drb_ra/status/1948998995763773828","timestamp":"1753512545","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"245e86b4-10e9-5109-b882-0f244ada82f1","type":"url","category":"Network activity","to_ids":true,"value":"http://54.78.18.220:80","comment":"https://x.com/drb_ra/status/1948999018916315552","timestamp":"1753512551","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"44cccfe5-714d-5347-b7a5-1c5903efcc5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.78.18.220","comment":"https://x.com/drb_ra/status/1948999018916315552","timestamp":"1753512551","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c3d20c95-e20a-580e-a7f1-a73f44feef12","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.250.212:80","comment":"https://x.com/drb_ra/status/1948999042412720465","timestamp":"1753512557","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"151ddc22-5c57-5653-b86a-9d5307017319","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.250.212","comment":"https://x.com/drb_ra/status/1948999042412720465","timestamp":"1753512557","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"34ffd52e-833f-5b7a-9192-65f15b1256c3","type":"url","category":"Network activity","to_ids":true,"value":"http://159.0.42.113:443","comment":"https://x.com/drb_ra/status/1948999065603047850","timestamp":"1753512562","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"cbeb4413-6e0a-5661-bacc-1400f25d388b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.0.42.113","comment":"https://x.com/drb_ra/status/1948999065603047850","timestamp":"1753512562","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7f07cdf5-d0f0-538c-8f8e-4bb35e75f862","type":"url","category":"Network activity","to_ids":true,"value":"http://189.235.176.160:995","comment":"https://x.com/drb_ra/status/1948999088965320969","timestamp":"1753512568","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"c222f409-cb52-5547-a994-2fc6c75ef38e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.235.176.160","comment":"https://x.com/drb_ra/status/1948999088965320969","timestamp":"1753512568","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2b7f054e-d93c-5e33-b029-ab7ea4057624","type":"url","category":"Network activity","to_ids":true,"value":"https://185.14.31.158:443","comment":"https://x.com/drb_ra/status/1949024404349792326","timestamp":"1753518603","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"62cd8561-1580-5360-b06c-485383ba8034","type":"url","category":"Network activity","to_ids":true,"value":"http://185.14.31.158:443","comment":"https://x.com/drb_ra/status/1949024404349792326","timestamp":"1753518603","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a4f502e9-9330-5803-8317-5074969d784b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.14.31.158","comment":"https://x.com/drb_ra/status/1949024404349792326","timestamp":"1753518603","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5edb56b5-91d9-5756-9856-d68e60f075e4","type":"url","category":"Network activity","to_ids":true,"value":"https://77.233.6.176:4444","comment":"https://x.com/drb_ra/status/1949024426638389325","timestamp":"1753518609","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5d692275-bab6-55db-8e23-880b44d9e93d","type":"url","category":"Network activity","to_ids":true,"value":"http://77.233.6.176:4444","comment":"https://x.com/drb_ra/status/1949024426638389325","timestamp":"1753518609","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8253131c-284e-50f2-b7d2-eb8f9e62011e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.233.6.176","comment":"https://x.com/drb_ra/status/1949024426638389325","timestamp":"1753518609","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"256fa45d-6f25-5f04-b65b-443563fc64fd","type":"domain","category":"Network activity","to_ids":true,"value":"7i1egd.top","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b0f67af-beb3-5658-ac2a-b7726dcfa5c3","type":"url","category":"Network activity","to_ids":true,"value":"https://7i1egd.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38db253c-0180-5bf9-bf4f-ecf397fcb7e5","type":"domain","category":"Network activity","to_ids":true,"value":"mj6xel.top","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09c42f77-2017-5ab4-9570-ace69ed6d6c8","type":"url","category":"Network activity","to_ids":true,"value":"https://mj6xel.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ebe6792-4a6b-5f52-a4bc-1cb385c09b0d","type":"domain","category":"Network activity","to_ids":true,"value":"x8qotk.top","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92daaaeb-39c6-5120-a6d1-b5fe6f3a8aff","type":"url","category":"Network activity","to_ids":true,"value":"https://x8qotk.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949042622393147571","timestamp":"1753522947","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd751919-80e3-587c-9dff-6d3cf0295b58","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.0a9192.shop","comment":"https://x.com/urldna_bot/status/1949047077729718602","timestamp":"1753524009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"76cc9954-9a60-52e2-aa37-833c2d2031dd","type":"url","category":"Network activity","to_ids":true,"value":"https://allegrolokalnie.0a9192.shop","comment":"https://x.com/urldna_bot/status/1949047077729718602","timestamp":"1753524009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9c5c8488-e0f2-53ce-bd6d-5bd3c7a7c811","type":"md5","category":"Payload delivery","to_ids":true,"value":"B3E5B0DDAB44F789DD51E8187EDCA0B7","comment":"https://x.com/fbgwls245/status/1949071561635545436","timestamp":"1753529846","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"0aec554e-5028-558a-909b-78e7658fce6b","type":"domain","category":"Network activity","to_ids":true,"value":"careen.com","comment":"https://x.com/kelly1fernandes/status/1949073762126569840","timestamp":"1753530371","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bad03385-4573-5155-9bc9-05b722d5c1e2","type":"url","category":"Network activity","to_ids":true,"value":"http://careen.com","comment":"https://x.com/kelly1fernandes/status/1949073762126569840","timestamp":"1753530371","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e6516a4-a0aa-5ba5-ae89-703a0a240347","type":"domain","category":"Network activity","to_ids":true,"value":"codebustler.github.io","comment":"https://x.com/urldna_bot/status/1949077268329902110","timestamp":"1753531207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"916af437-b985-5a8b-a625-0c05aa617a82","type":"url","category":"Network activity","to_ids":true,"value":"http://codebustler.github.io/insta-login-page/","comment":"https://x.com/urldna_bot/status/1949077268329902110","timestamp":"1753531207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"48d45c55-b82a-574a-bc1a-2f0a72a9e679","type":"domain","category":"Network activity","to_ids":true,"value":"breached26tezcofqla4adzyn22notfqwcac7gpbrleg4usehljwkgqd.onion","comment":"https://x.com/skocherhan/status/1949084033243119773","timestamp":"1753532820","distribution":"5"},{"uuid":"3cf42eb0-5e0e-529b-9d4f-7536b53c6945","type":"url","category":"Network activity","to_ids":true,"value":"http://breached26tezcofqla4adzyn22notfqwcac7gpbrleg4usehljwkgqd.onion","comment":"https://x.com/skocherhan/status/1949084033243119773","timestamp":"1753532820","distribution":"5"},{"uuid":"bb3f7882-58a7-5f2d-8ab2-fb96b83200b0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"14137558073301053ccb26440d07e2def8a0add9029d42c4bf0776bf3c0f5659","comment":"https://x.com/skocherhan/status/1949106624661963182","timestamp":"1753538206","distribution":"5"},{"uuid":"881f3f3f-d695-5e16-b6fd-cb9e59379fb6","type":"domain","category":"Network activity","to_ids":true,"value":"feropmeratre.weebly.com","comment":"https://x.com/urldna_bot/status/1949107463044682046","timestamp":"1753538406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7ba18e4b-b1a5-5c19-9eb7-6d978218b2aa","type":"url","category":"Network activity","to_ids":true,"value":"https://feropmeratre.weebly.com","comment":"https://x.com/urldna_bot/status/1949107463044682046","timestamp":"1753538406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"453c28d7-9f4a-54b3-b51e-84e17d6482e6","type":"domain","category":"Network activity","to_ids":true,"value":"coin-team.com","comment":"https://x.com/Power_licious/status/1949108329646633271","timestamp":"1753538613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc900b97-772d-5733-866a-6a0372a9191f","type":"url","category":"Network activity","to_ids":true,"value":"http://coin-team.com","comment":"https://x.com/Power_licious/status/1949108329646633271","timestamp":"1753538613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"740d0975-f952-511a-b8ed-7becab0471d2","type":"domain","category":"Network activity","to_ids":true,"value":"aqrl-trade.com","comment":"https://x.com/Power_licious/status/1949108329646633271","timestamp":"1753538613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ad42b42-6690-5a33-bbd1-4174967a4c53","type":"url","category":"Network activity","to_ids":true,"value":"http://aqrl-trade.com","comment":"https://x.com/Power_licious/status/1949108329646633271","timestamp":"1753538613","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"931a70e5-3522-5ff1-a41d-3a235fc36c29","type":"domain","category":"Network activity","to_ids":true,"value":"netfildd.top","comment":"https://x.com/urldna_bot/status/1949137672036876521","timestamp":"1753545608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e3332809-cf51-560e-adb0-741d63f8ccd6","type":"url","category":"Network activity","to_ids":true,"value":"http://netfildd.top/Authenticate/","comment":"https://x.com/urldna_bot/status/1949137672036876521","timestamp":"1753545608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dd9321b6-0e0a-5ac6-aa95-c531e14fbc52","type":"domain","category":"Network activity","to_ids":true,"value":"fawearsserviceatt.weebly.com","comment":"https://x.com/urldna_bot/status/1949167861945004260","timestamp":"1753552806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ac6aa14f-7f98-57af-b8d7-d42ef67241e3","type":"url","category":"Network activity","to_ids":true,"value":"https://fawearsserviceatt.weebly.com","comment":"https://x.com/urldna_bot/status/1949167861945004260","timestamp":"1753552806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7c049961-0a9e-50ba-b544-489ef941f73d","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.164:8595","comment":"https://x.com/SarlackLab/status/1949188161332002884","timestamp":"1753557646","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ba6badd7-fe21-529c-9333-306fa8636dba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.164","comment":"https://x.com/SarlackLab/status/1949188161332002884","timestamp":"1753557646","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f10c7264-f476-5b62-b49e-d105ba044fe2","type":"url","category":"Network activity","to_ids":true,"value":"http://87.242.106.13:44333","comment":"https://x.com/SarlackLab/status/1949188282106945546","timestamp":"1753557675","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"362445d8-8df0-5799-829f-7e9f50ae94f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.242.106.13","comment":"https://x.com/SarlackLab/status/1949188282106945546","timestamp":"1753557675","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"18772d40-f72a-59c1-94f0-1366fd437357","type":"domain","category":"Network activity","to_ids":true,"value":"outlook-secure.vercel.app","comment":"https://x.com/urldna_bot/status/1949198059218301258","timestamp":"1753560006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a799ebf8-3892-5a8f-8d9a-aec3f9085b4c","type":"url","category":"Network activity","to_ids":true,"value":"https://outlook-secure.vercel.app","comment":"https://x.com/urldna_bot/status/1949198059218301258","timestamp":"1753560006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f267fd93-ee17-52b4-b8d0-00eb0c9a7ffa","type":"domain","category":"Network activity","to_ids":true,"value":"www-officialregistration-accounts.netlify.app","comment":"https://x.com/volrant136/status/1949199453102985695","timestamp":"1753560338","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"9923f521-2169-5d5a-8cd6-c0e2cca51968","type":"url","category":"Network activity","to_ids":true,"value":"http://www-officialregistration-accounts.netlify.app","comment":"https://x.com/volrant136/status/1949199453102985695","timestamp":"1753560338","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"e0abc851-2162-502c-be95-e3d7ba398b96","type":"domain","category":"Network activity","to_ids":true,"value":"www-navl-com-lk.pages.dev","comment":"https://x.com/volrant136/status/1949199453102985695","timestamp":"1753560338","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"71cb50f5-41da-540d-b929-0b0af172d501","type":"url","category":"Network activity","to_ids":true,"value":"http://www-navl-com-lk.pages.dev","comment":"https://x.com/volrant136/status/1949199453102985695","timestamp":"1753560338","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"18b9a78d-1c88-59b6-9d99-f6900eb0df50","type":"url","category":"Network activity","to_ids":true,"value":"http://151.242.63.30","comment":"https://x.com/threatquery/status/1949213144787603728","timestamp":"1753563603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"683089ba-bd51-5bb5-b74b-e6ac80dc2835","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.242.63.30","comment":"https://x.com/threatquery/status/1949213144787603728","timestamp":"1753563603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"324371d9-44c5-5da0-bf4f-91041340c2a7","type":"url","category":"Network activity","to_ids":true,"value":"http://77.81.142.4","comment":"https://x.com/threatquery/status/1949213152605827365","timestamp":"1753563604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"5fa3e934-6bdf-517f-bbb1-20b01f43b137","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.81.142.4","comment":"https://x.com/threatquery/status/1949213152605827365","timestamp":"1753563604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"9ee8c1a3-e198-54fd-b483-4a00890e0700","type":"url","category":"Network activity","to_ids":true,"value":"http://103.42.30.170","comment":"https://x.com/threatquery/status/1949213149866983543","timestamp":"1753563604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"eeb119c5-741f-54d5-a21b-97342a25dd1e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.42.30.170","comment":"https://x.com/threatquery/status/1949213149866983543","timestamp":"1753563604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"e9dae272-0210-50a7-b4eb-72f199719ba6","type":"url","category":"Network activity","to_ids":true,"value":"http://192.169.69.26:6903","comment":"https://x.com/SarlackLab/status/1949213214488625219","timestamp":"1753563619","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"253a895a-2486-5752-8fb9-119b8d66f22f","type":"domain","category":"Network activity","to_ids":true,"value":"amiroxs.duckdns.org","comment":"https://x.com/SarlackLab/status/1949213214488625219","timestamp":"1753563619","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"5556ec0b-2e17-5f91-8168-fa1c433cd3b8","type":"url","category":"Network activity","to_ids":true,"value":"http://amiroxs.duckdns.org","comment":"https://x.com/SarlackLab/status/1949213214488625219","timestamp":"1753563619","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"cb029d4f-a1ba-5334-ab6a-221687c67f5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.169.69.26","comment":"https://x.com/SarlackLab/status/1949213214488625219","timestamp":"1753563619","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"a63e1ca0-6e48-5873-9462-6e03eac1b506","type":"domain","category":"Network activity","to_ids":true,"value":"openseaczs.vercel.app","comment":"https://x.com/urldna_bot/status/1949228258521739359","timestamp":"1753567206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"78dbf7d9-3b69-5daa-bc46-0de38bdcc3d5","type":"url","category":"Network activity","to_ids":true,"value":"http://www.openseaczs.vercel.app","comment":"https://x.com/urldna_bot/status/1949228258521739359","timestamp":"1753567206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9fa82b24-b8a0-5277-b531-1984d5c49520","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.29:1912","comment":"https://x.com/SarlackLab/status/1949228681550774697","timestamp":"1753567307","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"75027869-dbe0-564b-bfb5-76b4aefa0781","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.29","comment":"https://x.com/SarlackLab/status/1949228681550774697","timestamp":"1753567307","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"8cb2bf87-0c9f-5eb9-a052-a8f73ea26ad4","type":"domain","category":"Network activity","to_ids":true,"value":"jdjjdisisiisiss88.weebly.com","comment":"https://x.com/urldna_bot/status/1949258471259439357","timestamp":"1753574409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b2531430-4e3e-51f2-bcee-e3dd95d921f5","type":"url","category":"Network activity","to_ids":true,"value":"https://jdjjdisisiisiss88.weebly.com","comment":"https://x.com/urldna_bot/status/1949258471259439357","timestamp":"1753574409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"28b454ab-693c-5258-8255-f2cefb33dcdb","type":"domain","category":"Network activity","to_ids":true,"value":"sstage.portfolio.metamask.cx","comment":"https://x.com/urldna_bot/status/1949288655232643149","timestamp":"1753581606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"961e949f-6971-50a9-bb71-7ff56102edcf","type":"url","category":"Network activity","to_ids":true,"value":"https://sstage.portfolio.metamask.cx","comment":"https://x.com/urldna_bot/status/1949288655232643149","timestamp":"1753581606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8a1ef853-d4a2-5976-bd21-a99a1ccadf00","type":"domain","category":"Network activity","to_ids":true,"value":"wewewecodesadwewesadwe.weebly.com","comment":"https://x.com/urldna_bot/status/1949318851788722448","timestamp":"1753588805","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c24bc5d8-cf82-50a7-bda5-972654351361","type":"url","category":"Network activity","to_ids":true,"value":"https://wewewecodesadwewesadwe.weebly.com","comment":"https://x.com/urldna_bot/status/1949318851788722448","timestamp":"1753588805","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ab4da7bd-56ef-5082-ae02-20bd046347a5","type":"md5","category":"Payload delivery","to_ids":true,"value":"b671a5d1b4c9d738bd8eda0718481500","comment":"https://x.com/ReBensk/status/1949343912977662390","timestamp":"1753594780","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/harugasumi/status/1949353396999512503","timestamp":"1753597041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/harugasumi/status/1949353396999512503","timestamp":"1753597041","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36f827b5-1ca7-5cdc-bcba-affd8745ec0f","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-brach.wtfhlo.cn/RSV_P/smart_index.htm/","comment":"https://x.com/harugasumi/status/1949356926095216895","timestamp":"1753597883","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b87c52d-1270-5c80-afb8-c4ac2d0efe99","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-brach.wtfhlo.cn","comment":"https://x.com/harugasumi/status/1949356926095216895","timestamp":"1753597883","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d26d10c-35bb-5b59-8fdd-394cff7d7e47","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-onproof.uikiza.cn","comment":"https://x.com/harugasumi/status/1949364001575772191","timestamp":"1753599570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee88134f-0d8b-5ab9-9032-1b4a71f905f6","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-onproof.uikiza.cn/netservice/login//","comment":"https://x.com/harugasumi/status/1949364001575772191","timestamp":"1753599570","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91a204bd-eb22-54ea-ba3f-27cafe268116","type":"domain","category":"Network activity","to_ids":true,"value":"pub-51656ae3d0ef4f2ba59cdfc6830c8098.r2.dev","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"91977310-ee80-5317-a4e1-d36322b19b92","type":"md5","category":"Payload delivery","to_ids":true,"value":"51656ae3d0ef4f2ba59cdfc6830c8098","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"84c3fc9e-5843-507f-ac36-9f98c98fe5d6","type":"url","category":"Network activity","to_ids":true,"value":"http://one.ebext.in/openurl?nid=&user_id=&random_id=&thread_id=&from_email=&source=web_ext&url=http%3A%2F%2Fhubs.ly/Q037hZCD0","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"b02e26df-9cd7-50e3-a903-7b5e03c4f280","type":"url","category":"Network activity","to_ids":true,"value":"http://pub-51656ae3d0ef4f2ba59cdfc6830c8098.r2.dev/meeting.htm?utm_campaign=8634688-zm-30000&utm_source=ppc","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"465065f3-db09-5d73-9122-8bc36cfd53f7","type":"url","category":"Network activity","to_ids":true,"value":"http://hubs.ly/Q037hZCD0","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"497363d3-660c-525c-82ec-36abe28ed658","type":"domain","category":"Network activity","to_ids":true,"value":"hubs.ly","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"3ad99607-604b-525d-9f81-dbfc604f9db4","type":"domain","category":"Network activity","to_ids":true,"value":"one.ebext.in","comment":"https://x.com/skocherhan/status/1949422893047111749","timestamp":"1753613610","distribution":"5"},{"uuid":"2f56e0f7-7a6b-5bcf-b887-9438ff31fed1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.156.141.157","comment":"https://x.com/SarlackLab/status/1949424628390089019","timestamp":"1753614024","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a983a335-db1e-51e4-95e3-03798fb836dc","type":"url","category":"Network activity","to_ids":true,"value":"http://35.156.141.157:1337","comment":"https://x.com/SarlackLab/status/1949424628390089019","timestamp":"1753614024","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"adc11691-b49b-5706-b597-768f2b9ab9f2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.126.224.214:18065","comment":"https://x.com/SarlackLab/status/1949424750389858435","timestamp":"1753614053","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"32f7745b-5cbf-59c5-80f1-39f3fbb44bd7","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.247/l838.exe","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3c137501-1f67-5acd-9ad8-2f411473f550","type":"domain","category":"Network activity","to_ids":true,"value":"boltex.net","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f0d3d32d-e626-5b5f-bb05-d1ddf94994b6","type":"url","category":"Network activity","to_ids":true,"value":"http://boltex.net/xpao","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f148de77-ca0c-5266-b95c-7e90e44ce4a6","type":"domain","category":"Network activity","to_ids":true,"value":"molefkx.com","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1e06a0b9-a706-5604-a617-cb462ec0f1a5","type":"url","category":"Network activity","to_ids":true,"value":"http://molefkx.com/xalo","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dd8bb541-cd85-5077-b552-81125def3370","type":"domain","category":"Network activity","to_ids":true,"value":"sponfht.com","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4e50490b-52e1-56b5-8b6a-f276cc32a351","type":"url","category":"Network activity","to_ids":true,"value":"http://sponfht.com/xrie","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"867626b3-7e6f-58a7-88d6-3ef036f17bbf","type":"domain","category":"Network activity","to_ids":true,"value":"follcp.org","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d92774b1-4da0-5717-b06e-19a331d350ee","type":"url","category":"Network activity","to_ids":true,"value":"http://runuxs.org/zpla","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"806a3a4c-2319-5e54-be5a-e878853128b8","type":"domain","category":"Network activity","to_ids":true,"value":"berijng.net","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"842cbe92-561d-5b39-9f3b-82e373a761ad","type":"url","category":"Network activity","to_ids":true,"value":"http://follcp.org/atnr","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7c1b930f-0d65-5c09-b9ee-ad3207061a5d","type":"md5","category":"Payload delivery","to_ids":true,"value":"29f7b4a5017bd6710923bb2738ede799","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2e77ef6b-4692-5b7a-8f1d-72f2828c551c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.247","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dddaf9da-2b83-5007-b9da-d1d5abfd5db3","type":"url","category":"Network activity","to_ids":true,"value":"http://berijng.net/otir","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bbcaa10e-8b82-5922-8f06-d4ab1db1040a","type":"domain","category":"Network activity","to_ids":true,"value":"remotuw.org","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2f90645f-0b89-507e-b508-610fdb4c5da2","type":"url","category":"Network activity","to_ids":true,"value":"http://detrewb.net/aqyw","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0c02e501-cc00-5d2e-a354-811d63047e22","type":"domain","category":"Network activity","to_ids":true,"value":"detrewb.net","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"44065a45-9dae-5207-95d1-5afc451f961f","type":"url","category":"Network activity","to_ids":true,"value":"http://remotuw.org/xiza","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a91a485d-b04f-5a82-b7cd-a790ae3536c0","type":"domain","category":"Network activity","to_ids":true,"value":"runuxs.org","comment":"https://x.com/skocherhan/status/1949429111606194583","timestamp":"1753615093","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f9bfea79-96f5-5e69-8f27-73fda06c645e","type":"url","category":"Network activity","to_ids":true,"value":"http://xt.dev.review.technology","comment":"https://x.com/skocherhan/status/1949432960840536145","timestamp":"1753616011","distribution":"5"},{"uuid":"d67af43d-a46f-5d9a-8065-0d0cc92e8124","type":"url","category":"Network activity","to_ids":true,"value":"http://mx.smtp.review.digital","comment":"https://x.com/skocherhan/status/1949432960840536145","timestamp":"1753616011","distribution":"5"},{"uuid":"b9cfe266-4d64-5862-96bc-13626166f930","type":"domain","category":"Network activity","to_ids":true,"value":"xt.dev.review.technology","comment":"https://x.com/skocherhan/status/1949432960840536145","timestamp":"1753616011","distribution":"5"},{"uuid":"87342cfc-71fd-51b2-bd81-f3bf2b851cbc","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/dz25gz","comment":"https://x.com/skocherhan/status/1949432960840536145","timestamp":"1753616011","distribution":"5"},{"uuid":"0981a13c-2f98-5adf-bc09-aa4738fe9e5d","type":"domain","category":"Network activity","to_ids":true,"value":"mx.smtp.review.digital","comment":"https://x.com/skocherhan/status/1949432960840536145","timestamp":"1753616011","distribution":"5"},{"uuid":"85ad5587-31d4-5a6e-8f20-c98a3740df6e","type":"domain","category":"Network activity","to_ids":true,"value":"garciamerlos.com","comment":"https://x.com/masaomi346/status/1949436519871283289","timestamp":"1753616859","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddfa4f41-2add-5c6a-ae6b-225564071ccd","type":"url","category":"Network activity","to_ids":true,"value":"https://garciamerlos.com/accountplalaupdate/Sites/index.html","comment":"https://x.com/masaomi346/status/1949436519871283289","timestamp":"1753616859","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a21c75b1-4772-5926-abb0-5f99a5354443","type":"url","category":"Network activity","to_ids":true,"value":"http://kakaoroom.com","comment":"https://x.com/BartekJuraszek_/status/1949438968170156171","timestamp":"1753617443","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"5eb38d68-cfbd-546c-ba7b-e49991d3d29e","type":"domain","category":"Network activity","to_ids":true,"value":"kakaoroom.com","comment":"https://x.com/BartekJuraszek_/status/1949438968170156171","timestamp":"1753617443","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"b334d2ad-a519-5b19-a12d-b477ae7a8553","type":"domain","category":"Network activity","to_ids":true,"value":"dievertine.github.io","comment":"https://x.com/urldna_bot/status/1949439651934048640","timestamp":"1753617606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5fee92be-3070-5434-874a-bfc8ff39d52a","type":"url","category":"Network activity","to_ids":true,"value":"https://dievertine.github.io/Facebook/","comment":"https://x.com/urldna_bot/status/1949439651934048640","timestamp":"1753617606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8d63a578-0a9c-568d-9d1e-e572a884e1b7","type":"md5","category":"Payload delivery","to_ids":true,"value":"68BD43A00BA948F435ECBDD402914298","comment":"https://x.com/fbgwls245/status/1949457917931045350","timestamp":"1753621961","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"656cebe5-dd3f-5926-8abd-f20eac1ac499","type":"domain","category":"Network activity","to_ids":true,"value":"zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion","comment":"https://x.com/fbgwls245/status/1949457917931045350","timestamp":"1753621961","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"758087bd-f534-501b-9f1f-01961e147ac3","type":"url","category":"Network activity","to_ids":true,"value":"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html","comment":"https://x.com/fbgwls245/status/1949457917931045350","timestamp":"1753621961","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"6598e4a3-4aa5-533e-8b21-3fa44aef754d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8A0B41E965E66689E78CA36D3477CB0C","comment":"https://x.com/fbgwls245/status/1949457917931045350","timestamp":"1753621961","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"26d60fb5-d95b-50c2-9e02-4750a08d5b16","type":"url","category":"Network activity","to_ids":true,"value":"https://navlunara.com.wplanders.a2hosted.com","comment":"https://x.com/urldna_bot/status/1949469854924255537","timestamp":"1753624807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3d9755fa-6fd2-5f72-ad7b-06c6e20312b8","type":"domain","category":"Network activity","to_ids":true,"value":"navlunara.com.wplanders.a2hosted.com","comment":"https://x.com/urldna_bot/status/1949469854924255537","timestamp":"1753624807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"666e8678-fbdd-52bd-ac23-d21a4aa56897","type":"url","category":"Network activity","to_ids":true,"value":"https://getfiles.pro/scan/?wG1wGwd?utm=10jaSB","comment":"https://x.com/StopMalvertisin/status/1949473503675359311","timestamp":"1753625677","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c05309df-3541-5e01-ad54-b9418ad1a367","type":"domain","category":"Network activity","to_ids":true,"value":"getfiles.pro","comment":"https://x.com/StopMalvertisin/status/1949473503675359311","timestamp":"1753625677","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"23b85dc5-77aa-5642-adb0-269eebe8f1c0","type":"url","category":"Network activity","to_ids":true,"value":"https://mega.nz/file/z8h30B7Z#omohibWKsWtKR1LKZGW3vmZD_9na22mbsRDWCGinDI4","comment":"https://x.com/StopMalvertisin/status/1949473503675359311","timestamp":"1753625677","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f45382ab-18df-52f7-bef7-57eb3177f9c2","type":"domain","category":"Network activity","to_ids":true,"value":"gencatsupporthelpdeskadministradordept.weebly.com","comment":"https://x.com/urldna_bot/status/1949500061697642695","timestamp":"1753632009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9a865706-7152-5726-92f0-bac6c995a5af","type":"url","category":"Network activity","to_ids":true,"value":"https://gencatsupporthelpdeskadministradordept.weebly.com","comment":"https://x.com/urldna_bot/status/1949500061697642695","timestamp":"1753632009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fa7253cd-8807-5176-91bf-83964e3e0f4a","type":"domain","category":"Network activity","to_ids":true,"value":"myxstalk.lol","comment":"https://x.com/SedimentIV/status/1949501172047602006","timestamp":"1753632274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"684e39d5-ed26-57aa-9994-d7bfc29ca1e9","type":"url","category":"Network activity","to_ids":true,"value":"http://myxstalk.lol","comment":"https://x.com/SedimentIV/status/1949501172047602006","timestamp":"1753632274","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f11d71ef-a4ba-5fdb-9f7f-51dd20869cdf","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ziman.net/prodotto-p-329207.html","comment":"https://x.com/JAMESWT_WT/status/1949512500673642807","timestamp":"1753634975","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"0787788d-7dcd-58b6-80f2-1fdd4307106c","type":"domain","category":"Network activity","to_ids":true,"value":"ziman.net","comment":"https://x.com/JAMESWT_WT/status/1949512500673642807","timestamp":"1753634975","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"d9009f59-3cd8-5010-b1de-8aa183c7a1d0","type":"url","category":"Network activity","to_ids":true,"value":"http://tradingview.connect-app.us.com/cloudflare/","comment":"https://x.com/skocherhan/status/1949534337927426362","timestamp":"1753640181","distribution":"5"},{"uuid":"6c382712-b7c9-5386-9d67-9c5cb1cfc08e","type":"domain","category":"Network activity","to_ids":true,"value":"tradingview.connect-app.us.com","comment":"https://x.com/skocherhan/status/1949534337927426362","timestamp":"1753640181","distribution":"5"},{"uuid":"d5bd1f19-cbcb-5826-b1ca-cdde85b53466","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-mod-gov-np-account-file-data.netlify.app/bof.html","comment":"https://x.com/volrant136/status/1949543032547582120","timestamp":"1753642254","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"7049c152-5f7f-5669-a53b-af6ab42b189f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-mod-gov-np-account-file-data.netlify.app","comment":"https://x.com/volrant136/status/1949543032547582120","timestamp":"1753642254","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"a2158573-34a3-527d-b7d3-b562de0a158c","type":"domain","category":"Network activity","to_ids":true,"value":"atenasgroup.com","comment":"https://x.com/urldna_bot/status/1949560450535882985","timestamp":"1753646407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cddca3be-169a-504f-ab7e-e3d0495f0bb4","type":"url","category":"Network activity","to_ids":true,"value":"https://atenasgroup.com","comment":"https://x.com/urldna_bot/status/1949560450535882985","timestamp":"1753646407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b29ca427-8ad8-5e17-8c40-781875499ad8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.29.222","comment":"https://x.com/threatquery/status/1949575534867775949","timestamp":"1753650003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4ee25933-1b9e-5153-8bcc-ca6eeae59c4b","type":"url","category":"Network activity","to_ids":true,"value":"http://87.120.93.214","comment":"https://x.com/threatquery/status/1949575536520434024","timestamp":"1753650003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"b3e8e2c4-c9f8-557e-a8bf-818c6a949bae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.120.93.214","comment":"https://x.com/threatquery/status/1949575536520434024","timestamp":"1753650003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"stealer"}]},{"uuid":"41a79ded-33ec-58b1-a8be-68aeefe1862d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.29.222","comment":"https://x.com/threatquery/status/1949575534867775949","timestamp":"1753650003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"75b6e789-0f29-5181-9c27-eafd0a9bcf51","type":"url","category":"Network activity","to_ids":true,"value":"http://15.152.35.176","comment":"https://x.com/threatquery/status/1949575538172977471","timestamp":"1753650004","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"72ed5655-47b6-5d6b-97ec-39803bc64f46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.152.35.176","comment":"https://x.com/threatquery/status/1949575538172977471","timestamp":"1753650004","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"14a7462c-5f43-5e8f-9867-fe123c90f0fc","type":"url","category":"Network activity","to_ids":true,"value":"http://117.78.41.31:5080","comment":"https://x.com/drb_ra/status/1949582903312060776","timestamp":"1753651760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b1ce1cdf-3350-56c6-9079-4234ed583493","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.78.41.31","comment":"https://x.com/drb_ra/status/1949582903312060776","timestamp":"1753651760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9990e972-117c-5d0a-9205-6e1959db1d67","type":"domain","category":"Network activity","to_ids":true,"value":"lkjhgvhyf675gygy.weebly.com","comment":"https://x.com/urldna_bot/status/1949590645300994436","timestamp":"1753653606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b1aba6da-3337-55c3-b23a-4f55e95268bf","type":"url","category":"Network activity","to_ids":true,"value":"http://www.lkjhgvhyf675gygy.weebly.com","comment":"https://x.com/urldna_bot/status/1949590645300994436","timestamp":"1753653606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4c4fca0b-0be0-5843-b05a-6b20da9b244a","type":"domain","category":"Network activity","to_ids":true,"value":"2czl5nw4.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55e3656d-e21b-51c7-8715-e6dbc1ea87c8","type":"url","category":"Network activity","to_ids":true,"value":"https://2czl5nw4.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"563fbbb5-573f-5e68-ab48-9004b69842f8","type":"domain","category":"Network activity","to_ids":true,"value":"3prl1ve5.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e1454a5-b7d1-529e-8ce9-7d9aca7f5e23","type":"url","category":"Network activity","to_ids":true,"value":"https://3prl1ve5.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1043940-85e3-5b3d-a7d0-0df0732eb31c","type":"domain","category":"Network activity","to_ids":true,"value":"4faz2en8.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d19a6f22-4146-52a6-9b67-b289c8ea8e8b","type":"url","category":"Network activity","to_ids":true,"value":"https://4faz2en8.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49558b0e-01be-57db-90aa-8e3bd16aaf98","type":"domain","category":"Network activity","to_ids":true,"value":"5jiedt.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ada2c924-d11e-5659-824f-99e96bccafdf","type":"url","category":"Network activity","to_ids":true,"value":"https://5jiedt.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb4b6ae-90ea-57ce-ae0b-edb480ba1b3d","type":"domain","category":"Network activity","to_ids":true,"value":"8lrj0tk8.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2fe27246-384c-5ed4-9096-cabfbf03e562","type":"url","category":"Network activity","to_ids":true,"value":"https://8lrj0tk8.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cae1f793-10cd-55c8-be91-e3887d900b75","type":"domain","category":"Network activity","to_ids":true,"value":"kbwz1y.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30743240-bf65-5098-a008-0827adb19c01","type":"url","category":"Network activity","to_ids":true,"value":"https://kbwz1y.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35682849-ec4f-5e22-b608-0b395ea6845e","type":"domain","category":"Network activity","to_ids":true,"value":"qrunu5.top","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d16d420-c918-50bf-af54-2e60189bdc46","type":"url","category":"Network activity","to_ids":true,"value":"https://qrunu5.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949602638246662299","timestamp":"1753656465","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e7d53fd-2b58-5788-85c9-d47ee2ce8e1b","type":"domain","category":"Network activity","to_ids":true,"value":"rs5ncs.top","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e2889ab4-7b3f-516e-a71b-17d86890a743","type":"url","category":"Network activity","to_ids":true,"value":"https://rs5ncs.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e3dff843-4046-5341-a2f9-79bfc2cc35ff","type":"domain","category":"Network activity","to_ids":true,"value":"stkd7o.top","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43628745-5a09-5e9b-9a94-414c64302a6d","type":"url","category":"Network activity","to_ids":true,"value":"https://stkd7o.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff6a83ff-ee43-5e4f-9912-fec22e3e87a3","type":"domain","category":"Network activity","to_ids":true,"value":"te1crk.top","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"26cc7bee-5c20-5927-bb56-7a66ce65957e","type":"url","category":"Network activity","to_ids":true,"value":"https://te1crk.top/nsCCtsCdx/","comment":"https://x.com/masaomi346/status/1949603115877163025","timestamp":"1753656579","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a238aab-4410-516a-aac9-cd1c66a01351","type":"domain","category":"Network activity","to_ids":true,"value":"notificationalserverwebmail.weebly.com","comment":"https://x.com/urldna_bot/status/1949620855589261764","timestamp":"1753660808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"64448202-b6dd-5cf7-8d53-09ec249993dc","type":"url","category":"Network activity","to_ids":true,"value":"https://notificationalserverwebmail.weebly.com","comment":"https://x.com/urldna_bot/status/1949620855589261764","timestamp":"1753660808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bbae8f15-97a5-5c38-960d-8d9d01bed80a","type":"domain","category":"Network activity","to_ids":true,"value":"hzatict.cn","comment":"https://x.com/catnap707/status/1949626615064866854","timestamp":"1753662181","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"766795b8-2627-5f9b-930b-c858700ff90f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.hzatict.cn","comment":"https://x.com/catnap707/status/1949626615064866854","timestamp":"1753662181","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65485487-6ae7-550e-af48-0a611ca82a57","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.181.136","comment":"https://x.com/catnap707/status/1949626615064866854","timestamp":"1753662181","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fdac86cb-87f0-5405-b3da-c7183860ab62","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.181.136","comment":"https://x.com/catnap707/status/1949626615064866854","timestamp":"1753662181","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a32eea79-dfb1-5640-8662-e3f4df691f1d","type":"domain","category":"Network activity","to_ids":true,"value":"www-apple-jp.atienerji.com","comment":"https://x.com/catnap707/status/1949627262896378302","timestamp":"1753662336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01675d5f-6d4d-5452-8524-66bd51207c94","type":"url","category":"Network activity","to_ids":true,"value":"http://www-apple-jp.atienerji.com/account/?offer=~","comment":"https://x.com/catnap707/status/1949627262896378302","timestamp":"1753662336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6f0fd30-6277-5acd-bb5b-3937c315d335","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.149.123","comment":"https://x.com/catnap707/status/1949627262896378302","timestamp":"1753662336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec1e3dd4-6627-544b-b1b2-8708c925cc3d","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/TextesAV","comment":"https://x.com/skocherhan/status/1949648810218528891","timestamp":"1753667473","distribution":"5"},{"uuid":"de088021-99b8-58e3-a72d-a697d0b84587","type":"domain","category":"Network activity","to_ids":true,"value":"pollo90.wuaze.com","comment":"https://x.com/urldna_bot/status/1949651056448741848","timestamp":"1753668009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"032efd87-7cd7-5ea7-b938-e1041f85dff1","type":"url","category":"Network activity","to_ids":true,"value":"https://pollo90.wuaze.com","comment":"https://x.com/urldna_bot/status/1949651056448741848","timestamp":"1753668009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"39d1e368-d9d8-5156-a4de-ff3184fb447a","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.157.32/files/8111443583/YT1For2.exe","comment":"https://x.com/skocherhan/status/1949656787671515356","timestamp":"1753669375","distribution":"5"},{"uuid":"a7d55d68-879a-5cf5-8887-a37b41b8150a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.157.32","comment":"https://x.com/skocherhan/status/1949656787671515356","timestamp":"1753669375","distribution":"5"},{"uuid":"e760f459-50d0-5c2d-addc-231dbb03af48","type":"md5","category":"Payload delivery","to_ids":true,"value":"e5ce3951f82531943d68b4eb1a8e13c2","comment":"https://x.com/skocherhan/status/1949656787671515356","timestamp":"1753669375","distribution":"5"},{"uuid":"7049c152-5f7f-5669-a53b-af6ab42b189f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-mod-gov-np-account-file-data.netlify.app","comment":"https://x.com/ShadowChasing1/status/1949657714541609386","timestamp":"1753669596","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"d5bd1f19-cbcb-5826-b1ca-cdde85b53466","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-mod-gov-np-account-file-data.netlify.app/bof.html","comment":"https://x.com/ShadowChasing1/status/1949657714541609386","timestamp":"1753669596","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"8f44a5e4-e941-5119-ab6f-4aef879e3597","type":"url","category":"Network activity","to_ids":true,"value":"http://jul5050quasab.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"3fdc7311-9b9e-5ab4-801d-bc24eedffd96","type":"domain","category":"Network activity","to_ids":true,"value":"jbsak.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"b925d60c-fbfd-5197-9662-48fd5d2f1ab7","type":"url","category":"Network activity","to_ids":true,"value":"http://jbsak.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"e47ed265-03e2-5fc8-9024-da3019e72492","type":"domain","category":"Network activity","to_ids":true,"value":"jul5050quasa.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"27ad251d-c1a2-5bb2-8995-2197fee7d73d","type":"url","category":"Network activity","to_ids":true,"value":"http://jul5050quasa.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"74f92518-aee6-53c0-b936-daccd6ffeccd","type":"url","category":"Network activity","to_ids":true,"value":"http://tvsanarch.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"40c9ed57-4e78-534b-a39c-192ba5fac455","type":"domain","category":"Network activity","to_ids":true,"value":"jul5050quasab.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"7544cd77-1ce9-5144-87b5-96ab0ebe89e4","type":"domain","category":"Network activity","to_ids":true,"value":"venomfhd.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"b5b7e178-babf-54f8-a64d-5726d11cbf77","type":"url","category":"Network activity","to_ids":true,"value":"http://venomfhd.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"b2755151-eac0-50f3-913d-0facd84610f2","type":"domain","category":"Network activity","to_ids":true,"value":"ygfbasync.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"7c45d2a7-9fcb-5db8-a2f9-17b02c1e035b","type":"url","category":"Network activity","to_ids":true,"value":"http://ygfbasync.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"8829a3c9-36a9-5cae-be5c-4e6813ad6c9a","type":"sha256","category":"Payload delivery","to_ids":true,"value":"23d127279303b5f36f802617ed2c5b6172049955e67b0c11bcd1ae76f5860cd3","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"d22e63d0-d603-55b9-b8c2-47b680656a45","type":"domain","category":"Network activity","to_ids":true,"value":"tvsanarch.duckdns.org","comment":"https://x.com/skocherhan/status/1949658203450479017","timestamp":"1753669713","distribution":"5"},{"uuid":"b73ac4e9-2626-5231-8fd4-5cac1e5996fa","type":"domain","category":"Network activity","to_ids":true,"value":"image-logo-popup-files.vercel.app","comment":"https://x.com/skocherhan/status/1949661627235610955","timestamp":"1753670529","distribution":"5"},{"uuid":"2cda28a7-1d23-583d-b809-0b269263919f","type":"url","category":"Network activity","to_ids":true,"value":"http://image-logo-popup-files.vercel.app/success.png","comment":"https://x.com/skocherhan/status/1949661627235610955","timestamp":"1753670529","distribution":"5"},{"uuid":"4c412c30-636c-5fe1-b274-3ddf4b1e37b0","type":"md5","category":"Payload delivery","to_ids":true,"value":"721981853fb236e89169efc6ff3be9bf","comment":"https://x.com/skocherhan/status/1949661627235610955","timestamp":"1753670529","distribution":"5"},{"uuid":"f5d4e969-b354-586c-82c3-949ed62ccb1a","type":"md5","category":"Payload delivery","to_ids":true,"value":"9825b88257b0e29c1be73d3758c0c98b","comment":"https://x.com/skocherhan/status/1949661627235610955","timestamp":"1753670529","distribution":"5"},{"uuid":"f6b1b68e-b823-53ef-ad2a-73d92b08ba18","type":"domain","category":"Network activity","to_ids":true,"value":"dryskyholding.com","comment":"https://x.com/skocherhan/status/1949661776343146569","timestamp":"1753670565","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0aaceef0-dc21-5d03-9b24-89f58f178d3c","type":"url","category":"Network activity","to_ids":true,"value":"https://dryskyholding.com/wp-includes/js/common/src/list.php","comment":"https://x.com/skocherhan/status/1949661776343146569","timestamp":"1753670565","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bb3f7882-58a7-5f2d-8ab2-fb96b83200b0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"14137558073301053ccb26440d07e2def8a0add9029d42c4bf0776bf3c0f5659","comment":"https://x.com/ShadowChasing1/status/1949664023877972449","timestamp":"1753671100","distribution":"5"},{"uuid":"b57a08ab-3046-5b2c-9188-007051d78d0d","type":"url","category":"Network activity","to_ids":true,"value":"https://datamero.org/biuA873q4jIUBoaFibnoianbscoia/sitrie","comment":"https://x.com/ShadowChasing1/status/1949664039149445388","timestamp":"1753671104","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fe1b6259-f391-564f-bfe2-e1d8ecb7b1ea","type":"domain","category":"Network activity","to_ids":true,"value":"datamero.org","comment":"https://x.com/ShadowChasing1/status/1949664039149445388","timestamp":"1753671104","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"135fd497-f0ae-51ba-b204-ff93d2fca0f8","type":"md5","category":"Payload delivery","to_ids":true,"value":"3699b8277299668f9e8489a465723be7","comment":"https://x.com/ShadowChasing1/status/1949664039149445388","timestamp":"1753671104","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"37eab6dd-9b1d-5f24-97bc-13a2225d5506","type":"md5","category":"Payload delivery","to_ids":true,"value":"0dcef9d1e1cd96ed5b19c0befa1e6e7f","comment":"https://x.com/ShadowChasing1/status/1949664039149445388","timestamp":"1753671104","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7a6bb8b3-b4d4-531c-8b56-e0975db3de75","type":"md5","category":"Payload delivery","to_ids":true,"value":"ba2f1868f2af9e191ebf47a5fab5cbab","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"0112e2e6-a955-5584-ad22-c700d7bda8a5","type":"md5","category":"Payload delivery","to_ids":true,"value":"c5f0425dabd01d7ba80dfc3d5ca19841","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"3fd4ffb2-4291-5832-a3a6-70005a5b3b7e","type":"domain","category":"Network activity","to_ids":true,"value":"terminate.so","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"44a6041d-a594-5940-a1e4-0c8e12d80c21","type":"url","category":"Network activity","to_ids":true,"value":"https://terminate.so","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"e23d4d24-bad9-5ed3-b53d-d52c9146bef3","type":"md5","category":"Payload delivery","to_ids":true,"value":"1995682d600e329b7833003a01609252","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"2af19166-5973-5bbc-b0ed-8f3ef8cf4834","type":"md5","category":"Payload delivery","to_ids":true,"value":"c697848015bb8c2cbb7cc1502905ba23","comment":"https://x.com/ShadowChasing1/status/1949664087933153602","timestamp":"1753671116","distribution":"5"},{"uuid":"354fd093-ef78-5806-b1a8-4d19aab97458","type":"md5","category":"Payload delivery","to_ids":true,"value":"5152410aeef667ffaf42d40746af4d84","comment":"https://x.com/ShadowChasing1/status/1949664098565988408","timestamp":"1753671118","distribution":"5"},{"uuid":"e37908a0-4358-526c-b7c9-65cccd7a193e","type":"domain","category":"Network activity","to_ids":true,"value":"m-sbisec.hzcoolers.com","comment":"https://x.com/catnap707/status/1949670670570557825","timestamp":"1753672685","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"130a6962-f8d4-5742-a4f6-f06b5d68d3fe","type":"url","category":"Network activity","to_ids":true,"value":"http://m-sbisec.hzcoolers.com/ETGate/?sbisec=~","comment":"https://x.com/catnap707/status/1949670670570557825","timestamp":"1753672685","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a5ea542f-35b5-5e43-9ba6-783ede77e0ff","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.148.156","comment":"https://x.com/catnap707/status/1949670670570557825","timestamp":"1753672685","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82a53287-16d4-5426-9c6c-7742c21f9c0d","type":"domain","category":"Network activity","to_ids":true,"value":"monex-jp.baotoujk.com","comment":"https://x.com/catnap707/status/1949671170577735738","timestamp":"1753672804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dfb81b3c-2ed1-589b-9f66-86753884d8b6","type":"url","category":"Network activity","to_ids":true,"value":"http://monex-jp.baotoujk.com/support/?login=~","comment":"https://x.com/catnap707/status/1949671170577735738","timestamp":"1753672804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1ef2bd4-e1ee-52ad-9c49-da011576b8f4","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.181.47","comment":"https://x.com/catnap707/status/1949671170577735738","timestamp":"1753672804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b3f60bf3-1258-5c6a-90bd-f93719bcefb9","type":"domain","category":"Network activity","to_ids":true,"value":"info-monex.algmoney.com","comment":"https://x.com/catnap707/status/1949671661739131271","timestamp":"1753672921","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b05dbde1-f4bd-52ea-9d2d-56d415e244a5","type":"url","category":"Network activity","to_ids":true,"value":"http://info-monex.algmoney.com/support/?login=~","comment":"https://x.com/catnap707/status/1949671661739131271","timestamp":"1753672921","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/catnap707/status/1949671661739131271","timestamp":"1753672921","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/catnap707/status/1949671661739131271","timestamp":"1753672921","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b089a069-398f-51bc-b1c7-44bf56845253","type":"domain","category":"Network activity","to_ids":true,"value":"trip-nocfic.ecdnvv.cn","comment":"https://x.com/catnap707/status/1949672485944766575","timestamp":"1753673118","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df2cc880-0399-5d14-afe0-8a6aaa1208c1","type":"url","category":"Network activity","to_ids":true,"value":"http://trip-nocfic.ecdnvv.cn/customer/announcement/","comment":"https://x.com/catnap707/status/1949672485944766575","timestamp":"1753673118","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4908df26-dfa2-5481-9d00-a6dd27ca70e7","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.199.22","comment":"https://x.com/catnap707/status/1949672485944766575","timestamp":"1753673118","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8570615-196e-5519-a034-a749f6618429","type":"domain","category":"Network activity","to_ids":true,"value":"arstmping002.web.app","comment":"https://x.com/urldna_bot/status/1949681257190662504","timestamp":"1753675209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7c13b923-da4b-56d6-91ab-e8200aafa6a5","type":"url","category":"Network activity","to_ids":true,"value":"https://arstmping002.web.app","comment":"https://x.com/urldna_bot/status/1949681257190662504","timestamp":"1753675209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"382882f5-daea-5620-827d-4eaeddc327cb","type":"domain","category":"Network activity","to_ids":true,"value":"raeslmszqiomtre.weebly.com","comment":"https://x.com/urldna_bot/status/1949711441658835152","timestamp":"1753682406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b0823194-4724-55a5-b9bf-c25c09a4256c","type":"url","category":"Network activity","to_ids":true,"value":"https://raeslmszqiomtre.weebly.com","comment":"https://x.com/urldna_bot/status/1949711441658835152","timestamp":"1753682406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f267fd93-ee17-52b4-b8d0-00eb0c9a7ffa","type":"domain","category":"Network activity","to_ids":true,"value":"www-officialregistration-accounts.netlify.app","comment":"https://x.com/ShadowChasing1/status/1949716619371905233","timestamp":"1753683640","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"71cb50f5-41da-540d-b929-0b0af172d501","type":"url","category":"Network activity","to_ids":true,"value":"http://www-navl-com-lk.pages.dev","comment":"https://x.com/ShadowChasing1/status/1949716619371905233","timestamp":"1753683640","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"9923f521-2169-5d5a-8cd6-c0e2cca51968","type":"url","category":"Network activity","to_ids":true,"value":"http://www-officialregistration-accounts.netlify.app","comment":"https://x.com/ShadowChasing1/status/1949716619371905233","timestamp":"1753683640","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"e0abc851-2162-502c-be95-e3d7ba398b96","type":"domain","category":"Network activity","to_ids":true,"value":"www-navl-com-lk.pages.dev","comment":"https://x.com/ShadowChasing1/status/1949716619371905233","timestamp":"1753683640","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"f69f3db5-0ed3-5c27-b2cf-a3bce85d8a5e","type":"domain","category":"Network activity","to_ids":true,"value":"www-srilankanavy-cabinet-decision.netlify.app","comment":"https://x.com/ShadowChasing1/status/1949716722615037975","timestamp":"1753683665","distribution":"5"},{"uuid":"2515169f-5683-550c-a297-351376f891e2","type":"url","category":"Network activity","to_ids":true,"value":"https://www-srilankanavy-cabinet-decision.netlify.app","comment":"https://x.com/ShadowChasing1/status/1949716722615037975","timestamp":"1753683665","distribution":"5"},{"uuid":"22afe78a-6a3c-56d1-9c2c-c78cfbf585a5","type":"domain","category":"Network activity","to_ids":true,"value":"e-bankofamerica.com","comment":"https://x.com/c9lab_soc/status/1949717891101675545","timestamp":"1753683943","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"495590d8-b290-5b5d-9236-cd7124824070","type":"url","category":"Network activity","to_ids":true,"value":"http://e-bankofamerica.com","comment":"https://x.com/c9lab_soc/status/1949717891101675545","timestamp":"1753683943","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1f175fb5-5417-5543-8758-9b4b42253d97","type":"domain","category":"Network activity","to_ids":true,"value":"telegeram-qq.org","comment":"https://x.com/c9lab_soc/status/1949717891101675545","timestamp":"1753683943","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0fd9fd78-5dc9-57f9-9726-90e162044956","type":"url","category":"Network activity","to_ids":true,"value":"http://telegeram-qq.org","comment":"https://x.com/c9lab_soc/status/1949717891101675545","timestamp":"1753683943","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b7908fda-e37f-5d97-99cf-baba33b30597","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.143.1.153","comment":"https://x.com/RakeshKrish12/status/1949718334414471218","timestamp":"1753684049","distribution":"5","Tag":[{"name":"stealer"},{"name":"CobaltStrike"},{"name":"ransomware"},{"name":"Lumma"},{"name":"malware"}]},{"uuid":"b361485a-7d9c-5dde-accf-cff130ac6456","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.38.125","comment":"https://x.com/RakeshKrish12/status/1949718334414471218","timestamp":"1753684049","distribution":"5","Tag":[{"name":"stealer"},{"name":"CobaltStrike"},{"name":"ransomware"},{"name":"Lumma"},{"name":"malware"}]},{"uuid":"656cebe5-dd3f-5926-8abd-f20eac1ac499","type":"domain","category":"Network activity","to_ids":true,"value":"zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion","comment":"https://x.com/fbgwls245/status/1949731671512895785","timestamp":"1753687229","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"758087bd-f534-501b-9f1f-01961e147ac3","type":"url","category":"Network activity","to_ids":true,"value":"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html","comment":"https://x.com/fbgwls245/status/1949731671512895785","timestamp":"1753687229","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"6598e4a3-4aa5-533e-8b21-3fa44aef754d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8A0B41E965E66689E78CA36D3477CB0C","comment":"https://x.com/fbgwls245/status/1949731671512895785","timestamp":"1753687229","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"8d63a578-0a9c-568d-9d1e-e572a884e1b7","type":"md5","category":"Payload delivery","to_ids":true,"value":"68BD43A00BA948F435ECBDD402914298","comment":"https://x.com/fbgwls245/status/1949731671512895785","timestamp":"1753687229","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"1d651f68-7fda-5a32-95c2-63e2a1a9fb44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.223.84.8","comment":"https://x.com/JAMESWT_WT/status/1949735553206776224","timestamp":"1753688154","distribution":"5","Tag":[{"name":"AgentTesla"},{"name":"GuLoader"}]},{"uuid":"268e0a38-631b-5aa4-b316-cc1e8e1b2525","type":"domain","category":"Network activity","to_ids":true,"value":"prronmerilca.netlify.app","comment":"https://x.com/urldna_bot/status/1949741654421750060","timestamp":"1753689609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0d046753-70c2-549c-843a-28f7d0e1eb54","type":"url","category":"Network activity","to_ids":true,"value":"https://prronmerilca.netlify.app","comment":"https://x.com/urldna_bot/status/1949741654421750060","timestamp":"1753689609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"453c28d7-9f4a-54b3-b51e-84e17d6482e6","type":"domain","category":"Network activity","to_ids":true,"value":"coin-team.com","comment":"https://x.com/Tino_jazz/status/1949746002946396294","timestamp":"1753690646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc900b97-772d-5733-866a-6a0372a9191f","type":"url","category":"Network activity","to_ids":true,"value":"http://coin-team.com","comment":"https://x.com/Tino_jazz/status/1949746002946396294","timestamp":"1753690646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"740d0975-f952-511a-b8ed-7becab0471d2","type":"domain","category":"Network activity","to_ids":true,"value":"aqrl-trade.com","comment":"https://x.com/Tino_jazz/status/1949746002946396294","timestamp":"1753690646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ad42b42-6690-5a33-bbd1-4174967a4c53","type":"url","category":"Network activity","to_ids":true,"value":"http://aqrl-trade.com","comment":"https://x.com/Tino_jazz/status/1949746002946396294","timestamp":"1753690646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d24518e-2293-5fd9-8a2d-d9a083f3c3d5","type":"url","category":"Network activity","to_ids":true,"value":"http://sponfht.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"a91a485d-b04f-5a82-b7cd-a790ae3536c0","type":"domain","category":"Network activity","to_ids":true,"value":"runuxs.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"dd8bb541-cd85-5077-b552-81125def3370","type":"domain","category":"Network activity","to_ids":true,"value":"sponfht.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"867626b3-7e6f-58a7-88d6-3ef036f17bbf","type":"domain","category":"Network activity","to_ids":true,"value":"follcp.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"f148de77-ca0c-5266-b95c-7e90e44ce4a6","type":"domain","category":"Network activity","to_ids":true,"value":"molefkx.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"26c3aefd-35c9-52c8-aafb-a1de3ff2451d","type":"domain","category":"Network activity","to_ids":true,"value":"nortlmm.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7c63e1be-28a1-56ac-89d2-8542a03879a8","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunity.com/profiles/76561199863199067","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"83627ba7-d0cd-51dd-8b9d-5f99f9bdb672","type":"url","category":"Network activity","to_ids":true,"value":"http://molefkx.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"86bc3002-b5cf-51cf-a3c2-20c1c533667f","type":"url","category":"Network activity","to_ids":true,"value":"http://runuxs.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c8620d94-00cc-5e3a-949d-e4aa48249fe0","type":"url","category":"Network activity","to_ids":true,"value":"http://nortlmm.com","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"0c02e501-cc00-5d2e-a354-811d63047e22","type":"domain","category":"Network activity","to_ids":true,"value":"detrewb.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"af05d72b-d2ca-5838-b8e5-aa5ad596026d","type":"url","category":"Network activity","to_ids":true,"value":"http://berijng.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"806a3a4c-2319-5e54-be5a-e878853128b8","type":"domain","category":"Network activity","to_ids":true,"value":"berijng.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"05fe4f9b-1f2a-5df1-a2e5-df1e2414f468","type":"url","category":"Network activity","to_ids":true,"value":"http://detrewb.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"bbcaa10e-8b82-5922-8f06-d4ab1db1040a","type":"domain","category":"Network activity","to_ids":true,"value":"remotuw.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"b5da94ba-eac9-5bc0-98fb-d70ba4a8869d","type":"url","category":"Network activity","to_ids":true,"value":"http://boltex.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1fa18271-45ad-5bcc-82e5-be236b824d8b","type":"url","category":"Network activity","to_ids":true,"value":"http://follcp.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"d705e276-568d-5560-ada2-b4a10b9f21bc","type":"url","category":"Network activity","to_ids":true,"value":"http://remotuw.org","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"3c137501-1f67-5acd-9ad8-2f411473f550","type":"domain","category":"Network activity","to_ids":true,"value":"boltex.net","comment":"https://x.com/K_N1kolenko/status/1949753588424548840","timestamp":"1753692454","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c3e38a15-695c-56bf-a7d6-47426256a2b0","type":"domain","category":"Network activity","to_ids":true,"value":"static6-jquery.com","comment":"https://x.com/sdcyberresearch/status/1949756756789174645","timestamp":"1753693210","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"4843f7f7-be13-56a7-baec-3e86d2f3f79d","type":"url","category":"Network activity","to_ids":true,"value":"http://static6-jquery.com","comment":"https://x.com/sdcyberresearch/status/1949756756789174645","timestamp":"1753693210","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"0e7b23d6-de6d-561d-80ac-adda1f8c636e","type":"domain","category":"Network activity","to_ids":true,"value":"nihaocloud.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"7cf4df5d-136b-5dcb-bf93-2cc45500a6bc","type":"url","category":"Network activity","to_ids":true,"value":"http://nihaocloud.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"6e4fdd60-b3e3-5d5c-8e48-f706363b30cb","type":"domain","category":"Network activity","to_ids":true,"value":"mail.fiald.ro","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"7583eacf-7e68-507b-b4c8-6afe7f8d4a52","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.fiald.ro","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"123a9cb6-d728-5262-9c01-bbffb2f74103","type":"domain","category":"Network activity","to_ids":true,"value":"mail.j-fores.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"3831e34d-7c19-503f-b040-621dffb71f92","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.j-fores.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"a746c8f3-9f30-5af2-b947-720cce484438","type":"domain","category":"Network activity","to_ids":true,"value":"mail.novochrom.us","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"94afb3bb-84c7-5a38-87e2-ff4d9fe18a96","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.novochrom.us","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"d547e440-1d57-5614-9266-886e0c340374","type":"domain","category":"Network activity","to_ids":true,"value":"yettigretrading.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"5ffab345-a072-5451-b33b-1cc98623576d","type":"url","category":"Network activity","to_ids":true,"value":"http://yettigretrading.com","comment":"https://x.com/skocherhan/status/1949765605927575753","timestamp":"1753695320","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"446f5fa6-ad30-528d-86a1-4054f3c04fda","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-minim.ovkhfq.cn","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2eaf04d4-d01d-55ff-82dd-e3fe3c2eaebd","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-minim.ovkhfq.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"709cbcae-1efb-58ce-8fff-1c32371e8e20","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-doxory.wlvoxq.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06c1d330-64fa-560a-9924-58c2d76a4d96","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-case.irbrcd.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57d5fdd5-9d77-5404-8ca9-830c320f38a3","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-case.irbrcd.cn","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"676ad001-7612-5c72-9a6a-2f619e712516","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-doxory.wlvoxq.cn","comment":"https://x.com/masaomi346/status/1949766111085633762","timestamp":"1753695440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a5234135-cd66-534e-8f42-203fe1c830ca","type":"domain","category":"Network activity","to_ids":true,"value":"wsu-edutyi.weebly.com","comment":"https://x.com/urldna_bot/status/1949771847676891204","timestamp":"1753696808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c5b679eb-b583-5baf-9c7a-af3ef1cc663d","type":"url","category":"Network activity","to_ids":true,"value":"https://wsu-edutyi.weebly.com","comment":"https://x.com/urldna_bot/status/1949771847676891204","timestamp":"1753696808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3484672f-5dba-52a7-a9a1-b2802c4b2463","type":"url","category":"Network activity","to_ids":true,"value":"https://signeharmony.weebly.com","comment":"https://x.com/urldna_bot/status/1949802041020133755","timestamp":"1753704006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"68ce9785-b98c-5408-a176-f54c60d10670","type":"domain","category":"Network activity","to_ids":true,"value":"signeharmony.weebly.com","comment":"https://x.com/urldna_bot/status/1949802041020133755","timestamp":"1753704006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b15da3e7-2aee-5241-afe1-e8aecc5bd515","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.22.24.12","comment":"https://x.com/abuse_ch/status/1949808703927906424","timestamp":"1753705595","distribution":"5"},{"uuid":"fdd936e3-342c-5129-bf11-904913be3856","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.22.24.11","comment":"https://x.com/abuse_ch/status/1949808703927906424","timestamp":"1753705595","distribution":"5"},{"uuid":"db15461b-a0ae-5756-a008-8ede31a89ec8","type":"domain","category":"Network activity","to_ids":true,"value":"oy4bhd.top","comment":"https://x.com/Metemcyber/status/1949813588174274830","timestamp":"1753706759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3695803c-55c5-5814-9fec-c2eddb012d2c","type":"url","category":"Network activity","to_ids":true,"value":"https://oy4bhd.top/EniNgYEUT/","comment":"https://x.com/Metemcyber/status/1949813588174274830","timestamp":"1753706759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"298e8946-d6db-5e12-a773-242ceb2407c0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.80.1","comment":"https://x.com/Metemcyber/status/1949813588174274830","timestamp":"1753706759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e61cc4c2-f87b-5c7d-aec7-068b3cb068e5","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.31.20","comment":"https://x.com/Metemcyber/status/1949814848860414136","timestamp":"1753707060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce66946f-5520-571c-9aa8-3d57a7bb7e7c","type":"domain","category":"Network activity","to_ids":true,"value":"t8g6cy.top","comment":"https://x.com/Metemcyber/status/1949814848860414136","timestamp":"1753707060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0aea12c2-571e-543b-bb32-b5570a88f992","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.174.167","comment":"https://x.com/Metemcyber/status/1949814848860414136","timestamp":"1753707060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0af441b-1f7f-5ea2-8b6d-fba02b85ba8a","type":"url","category":"Network activity","to_ids":true,"value":"https://t8g6cy.top/XpDG57SCXS/","comment":"https://x.com/Metemcyber/status/1949814848860414136","timestamp":"1753707060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9945fd84-2e39-5a78-838c-35251c2fa570","type":"domain","category":"Network activity","to_ids":true,"value":"phoenix-online-nexus.com","comment":"https://x.com/skocherhan/status/1949819887322378360","timestamp":"1753708261","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0a28ab6c-aaae-5bc3-b9dd-18497398c604","type":"url","category":"Network activity","to_ids":true,"value":"http://phoenix-online-nexus.com/mschat/cchat/","comment":"https://x.com/skocherhan/status/1949819887322378360","timestamp":"1753708261","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"4090c76f-622e-5808-8323-fe6a54d98d0e","type":"url","category":"Network activity","to_ids":true,"value":"http://77.90.153.62","comment":"https://x.com/skocherhan/status/1949824512586854417","timestamp":"1753709364","distribution":"5"},{"uuid":"c48d1989-0f21-5ddb-9cbd-e6e62d32516b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.90.153.62","comment":"https://x.com/skocherhan/status/1949824512586854417","timestamp":"1753709364","distribution":"5"},{"uuid":"2291604d-3471-5be5-bcce-36269c555f26","type":"url","category":"Network activity","to_ids":true,"value":"https://ryevmmip.com?token=jxWq5jGHxJQcKMithTe2","comment":"https://x.com/harugasumi/status/1949827178834923946","timestamp":"1753710000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87bc1519-baed-53f8-9279-2bfcc8d336aa","type":"domain","category":"Network activity","to_ids":true,"value":"ryevmmip.com","comment":"https://x.com/harugasumi/status/1949827178834923946","timestamp":"1753710000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f2611a3-fb41-5a9f-9252-38a868be4964","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.158.8","comment":"https://x.com/skocherhan/status/1949827435513500125","timestamp":"1753710061","distribution":"5"},{"uuid":"1c1c8337-7ac0-5d87-a922-199354126c16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.158.8","comment":"https://x.com/skocherhan/status/1949827435513500125","timestamp":"1753710061","distribution":"5"},{"uuid":"8d4765f7-e8a1-5bd7-9bd3-1ac1e06fc08a","type":"url","category":"Network activity","to_ids":true,"value":"http://astfajy.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"72a5cf69-1d11-5443-9b6f-41df2db40297","type":"domain","category":"Network activity","to_ids":true,"value":"airplzo.club","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"b41793b3-6b1c-57cd-8b5d-ba85de4063dd","type":"domain","category":"Network activity","to_ids":true,"value":"ancobkg.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"d900f5eb-e096-597e-8591-7b8bf995b31b","type":"url","category":"Network activity","to_ids":true,"value":"http://ancobkg.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7962c941-6259-52ed-a8cb-2b304c636806","type":"url","category":"Network activity","to_ids":true,"value":"http://arethqg.lat","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"791c8ec7-a431-5d03-a9e5-c0cd622e5015","type":"url","category":"Network activity","to_ids":true,"value":"http://aphaecv.lol","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"bccabf2d-7485-53d4-b289-fca966dd3c4d","type":"domain","category":"Network activity","to_ids":true,"value":"arethqg.lat","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"96cffea8-87aa-5591-9fd0-fa320f0fb7f5","type":"domain","category":"Network activity","to_ids":true,"value":"astfajy.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"0634dbd7-8b4d-5d2f-a939-500d60156286","type":"domain","category":"Network activity","to_ids":true,"value":"arnolfv.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"4075130e-8081-592f-8d91-80b3c9bb5e3a","type":"url","category":"Network activity","to_ids":true,"value":"http://arnolfv.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"2f0c88de-8ba5-50bc-b117-cdd42e723ea3","type":"domain","category":"Network activity","to_ids":true,"value":"arsetca.lat","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"0be56bf7-fdc4-50b0-bfe0-dd4b506e8dee","type":"url","category":"Network activity","to_ids":true,"value":"http://arsetca.lat","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"49739497-5a89-56b2-bc97-6f94a8bd1ea0","type":"domain","category":"Network activity","to_ids":true,"value":"aspecqo.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"2996935a-a5c2-5809-b256-99c544b9af45","type":"url","category":"Network activity","to_ids":true,"value":"http://aspecqo.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"08f6920a-84ed-5d8a-95c2-8fdda35b6860","type":"domain","category":"Network activity","to_ids":true,"value":"aphaecv.lol","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"99ae308c-9162-5f74-b41c-f8de56a236fb","type":"url","category":"Network activity","to_ids":true,"value":"http://airplzo.club","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"8b5c318b-0305-57a2-bb62-a208b5557e1f","type":"url","category":"Network activity","to_ids":true,"value":"http://columnez.shop","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"a9fb2d3d-14d3-53f3-bf69-0c9b043b9d8d","type":"url","category":"Network activity","to_ids":true,"value":"http://colikvl.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"6c755ce0-3969-54be-917f-37a2263304e9","type":"domain","category":"Network activity","to_ids":true,"value":"breabm.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c8d867c0-b31d-5015-9adc-ab258bb3b668","type":"url","category":"Network activity","to_ids":true,"value":"http://breabm.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"e307d3d2-de3f-546d-afae-fdb6c04bc85b","type":"domain","category":"Network activity","to_ids":true,"value":"bunhgks.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"07a13cfe-7bd0-5566-b8b7-84405ce45933","type":"url","category":"Network activity","to_ids":true,"value":"http://bunhgks.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"17ae853f-a292-5170-bef4-606757c4d074","type":"domain","category":"Network activity","to_ids":true,"value":"chapaqr.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"5b4bbf83-ae72-5ac6-8a46-94c643d0e32f","type":"url","category":"Network activity","to_ids":true,"value":"http://chapaqr.click","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1e25cefa-d727-5436-a603-3c048b7cd190","type":"url","category":"Network activity","to_ids":true,"value":"http://courxbs.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1159cb6c-355b-5897-a4ea-d91a1a62957b","type":"domain","category":"Network activity","to_ids":true,"value":"columnez.shop","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"fdcb709b-8f94-523a-aa2a-e76b02fbf465","type":"domain","category":"Network activity","to_ids":true,"value":"colikvl.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"b5bdcf58-6b6f-56e8-96b1-817c2bdf3100","type":"domain","category":"Network activity","to_ids":true,"value":"courxbs.pics","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"ffbb19f8-0f2e-5042-9071-d704e330c092","type":"domain","category":"Network activity","to_ids":true,"value":"bedfelc.lol","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"48f002de-984c-5ed3-a2d1-4bd2fcb241cb","type":"url","category":"Network activity","to_ids":true,"value":"http://coshas.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"04020d21-d0ab-5a91-89b2-05a5acd0e4c8","type":"domain","category":"Network activity","to_ids":true,"value":"coshas.top","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"3f31f741-48dc-5214-a46d-30e1ae5ffb80","type":"url","category":"Network activity","to_ids":true,"value":"http://bedfelc.lol","comment":"https://x.com/skocherhan/status/1949829362137678132","timestamp":"1753710520","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"78c23ad6-6e0a-5215-84b5-4bd27922c26c","type":"domain","category":"Network activity","to_ids":true,"value":"steamcommunllity.com","comment":"https://x.com/skocherhan/status/1949830985383621041","timestamp":"1753710907","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32fcda2a-e3ec-5c9d-b37c-5bec631cfb6f","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunllity.com/id=5947221648","comment":"https://x.com/skocherhan/status/1949830985383621041","timestamp":"1753710907","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffb93712-e88a-5e64-adb7-155c7d174c78","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.196.34.1","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"3c812493-a9db-5f44-b7a2-01536dc2d3cc","type":"url","category":"Network activity","to_ids":true,"value":"http://91.196.34.1","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"4f4b2fee-d4c9-55f6-b0e9-4e2ba93842c6","type":"domain","category":"Network activity","to_ids":true,"value":"bookpopow.shop","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"444eb81b-c7d9-5fdd-af12-f0c34c894a9e","type":"domain","category":"Network activity","to_ids":true,"value":"bookdownlur.xyz","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"bdd7e425-c5f2-5e08-a710-b23ee27dc151","type":"domain","category":"Network activity","to_ids":true,"value":"bookdownlue.xyz","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"abbf3497-d4bc-56cb-ba65-1b27aec1da42","type":"url","category":"Network activity","to_ids":true,"value":"http://bookdownlur.xyz","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"bd621482-356f-51fa-b908-1534af81236e","type":"url","category":"Network activity","to_ids":true,"value":"http://bookdownlue.xyz","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"ba6ba126-9f94-5dc5-8029-99e465f371a6","type":"url","category":"Network activity","to_ids":true,"value":"http://bookpopow.shop","comment":"https://x.com/skocherhan/status/1949843208214573258","timestamp":"1753713821","distribution":"5"},{"uuid":"1a2036d4-a358-562a-b373-704fbe923443","type":"url","category":"Network activity","to_ids":true,"value":"https://info-monex.corlubirey.com/support/","comment":"https://x.com/harugasumi/status/1949845943903461672","timestamp":"1753714474","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2dbf2d6f-9f11-5791-8caf-5875cf4c35f9","type":"domain","category":"Network activity","to_ids":true,"value":"info-monex.corlubirey.com","comment":"https://x.com/harugasumi/status/1949845943903461672","timestamp":"1753714474","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b5759210-d099-533d-94ea-ba57a86ab3e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.98.216.119","comment":"https://x.com/drb_ra/status/1949854998306636257","timestamp":"1753716632","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"414df4c0-eca2-59ce-aeee-ea12a0c8feed","type":"url","category":"Network activity","to_ids":true,"value":"http://47.98.216.119:3232","comment":"https://x.com/drb_ra/status/1949854998306636257","timestamp":"1753716632","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"e724d407-c03d-5188-ab8d-41aab6a09b35","type":"url","category":"Network activity","to_ids":true,"value":"http://154.31.216.212:3232","comment":"https://x.com/drb_ra/status/1949855027897545044","timestamp":"1753716639","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"1c507329-2139-5355-8154-346d09f3b48e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.31.216.212","comment":"https://x.com/drb_ra/status/1949855027897545044","timestamp":"1753716639","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f1685ccc-c3b1-591d-892e-e7196589d861","type":"url","category":"Network activity","to_ids":true,"value":"http://108.137.68.134:2077","comment":"https://x.com/drb_ra/status/1949855053692502121","timestamp":"1753716646","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7edf17f3-1f0e-5738-81a2-2ce92bed7813","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.137.68.134","comment":"https://x.com/drb_ra/status/1949855053692502121","timestamp":"1753716646","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4577d05e-58f0-5118-ab6b-700df05ec820","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.253.2:59068","comment":"https://x.com/drb_ra/status/1949855079332249980","timestamp":"1753716652","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e93c9a71-ef3e-593e-b5c1-7c194e2008e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.253.2","comment":"https://x.com/drb_ra/status/1949855079332249980","timestamp":"1753716652","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8c814a8a-5def-58e5-98b1-15f6273d5f2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.89.245.59","comment":"https://x.com/drb_ra/status/1949855108218458586","timestamp":"1753716659","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fb00bbd6-ec99-5d86-9636-f29f66aa3230","type":"url","category":"Network activity","to_ids":true,"value":"http://52.89.245.59:44818","comment":"https://x.com/drb_ra/status/1949855108218458586","timestamp":"1753716659","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7a590404-ae7e-5797-967f-ec578019cc6a","type":"url","category":"Network activity","to_ids":true,"value":"http://35.188.118.135:8808","comment":"https://x.com/drb_ra/status/1949855137406607389","timestamp":"1753716665","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"fccc400e-d3f0-5a1e-ae3d-24a4754e3d7d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.136:8080","comment":"https://x.com/drb_ra/status/1949855161964224559","timestamp":"1753716671","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"c1ecfbfc-330f-5f81-b7f3-c240a6300a41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.136","comment":"https://x.com/drb_ra/status/1949855161964224559","timestamp":"1753716671","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"94991f90-c7a8-5033-b9a6-8dac38a32c47","type":"url","category":"Network activity","to_ids":true,"value":"http://5.226.191.22:8808","comment":"https://x.com/drb_ra/status/1949855187335582172","timestamp":"1753716677","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e2324a28-3f0d-58a2-9f99-7a6cb1618cfe","type":"url","category":"Network activity","to_ids":true,"value":"http://87.5.69.100:25","comment":"https://x.com/drb_ra/status/1949855213021458542","timestamp":"1753716683","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c16587c0-37d5-5802-8362-cd383e2e1b5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.5.69.100","comment":"https://x.com/drb_ra/status/1949855213021458542","timestamp":"1753716683","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"834f0541-b4e8-57f2-9e71-ab59a4a67ba9","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.49.235:22388","comment":"https://x.com/drb_ra/status/1949855237684048096","timestamp":"1753716689","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"a2edc410-f749-5aea-a1c0-49b6075a2565","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.49.235","comment":"https://x.com/drb_ra/status/1949855237684048096","timestamp":"1753716689","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9926025f-7ddd-5c54-bcac-43fbb306cf15","type":"url","category":"Network activity","to_ids":true,"value":"http://201.192.179.236:443","comment":"https://x.com/drb_ra/status/1949855261801291849","timestamp":"1753716695","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1f6aec76-25db-5657-a928-3d4011421757","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.192.179.236","comment":"https://x.com/drb_ra/status/1949855261801291849","timestamp":"1753716695","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"3b4220b1-4913-5907-bf9a-d4ec336b46c0","type":"url","category":"Network activity","to_ids":true,"value":"http://5.161.144.140:443","comment":"https://x.com/drb_ra/status/1949855286388216185","timestamp":"1753716701","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"49446961-6409-5d64-b153-2dbdf35865e4","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.70.55:443","comment":"https://x.com/drb_ra/status/1949855306747453540","timestamp":"1753716706","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"cc6be2eb-ec30-50ec-a778-e49e04968c7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.70.55","comment":"https://x.com/drb_ra/status/1949855306747453540","timestamp":"1753716706","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"8128c65f-62a5-55eb-885b-b87f219062de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.23.35.131","comment":"https://x.com/drb_ra/status/1949855323575013469","timestamp":"1753716710","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ca73d539-2e41-5119-bb60-dfc3a26ed928","type":"url","category":"Network activity","to_ids":true,"value":"http://99.23.35.131:8843","comment":"https://x.com/drb_ra/status/1949855323575013469","timestamp":"1753716710","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f681a6ff-9982-53bc-9c95-3954cb2b25b2","type":"url","category":"Network activity","to_ids":true,"value":"http://104.194.80.11:443","comment":"https://x.com/drb_ra/status/1949855348782694542","timestamp":"1753716716","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"9544ad13-34b2-5ff7-a9a2-8734e4dd2283","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.194.80.11","comment":"https://x.com/drb_ra/status/1949855348782694542","timestamp":"1753716716","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f8a84b05-e434-51ff-8b11-865b310db37a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.5.63","comment":"https://x.com/drb_ra/status/1949855374414053787","timestamp":"1753716722","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ecc4bcc0-6669-5085-bf58-11b653f2c850","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.5.63:443","comment":"https://x.com/drb_ra/status/1949855374414053787","timestamp":"1753716722","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5111417c-3404-5ede-8e61-5ddfa13963d7","type":"url","category":"Network activity","to_ids":true,"value":"http://4.201.184.162:31337","comment":"https://x.com/drb_ra/status/1949855398220923240","timestamp":"1753716728","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"06d2faed-9c66-5437-bc79-e4111ef27a0c","type":"url","category":"Network activity","to_ids":true,"value":"http://93.113.25.131:31337","comment":"https://x.com/drb_ra/status/1949855426440208849","timestamp":"1753716734","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"39c58114-4364-568a-a61b-60e2d7446722","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.113.25.131","comment":"https://x.com/drb_ra/status/1949855426440208849","timestamp":"1753716734","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ba6302d5-4813-5f85-95e8-1fff2c2b63f4","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.95.226:443","comment":"https://x.com/drb_ra/status/1949855451585130704","timestamp":"1753716740","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e842bc58-e828-5b4e-b2a5-45cabb4511f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.95.226","comment":"https://x.com/drb_ra/status/1949855451585130704","timestamp":"1753716740","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9d779192-24b3-5758-84bd-e58c6518fead","type":"url","category":"Network activity","to_ids":true,"value":"http://101.200.84.218:3389","comment":"https://x.com/drb_ra/status/1949855478013383058","timestamp":"1753716747","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ad21493-cda6-53b4-bbc4-c65b8173e7cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.223","comment":"https://x.com/drb_ra/status/1949855506169737594","timestamp":"1753716753","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a87a7a85-c796-5f87-b10c-089ac805784d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.223:8080","comment":"https://x.com/drb_ra/status/1949855506169737594","timestamp":"1753716753","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cf322a04-45f6-5c07-88fa-707be2264457","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.224","comment":"https://x.com/drb_ra/status/1949855531482406956","timestamp":"1753716759","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c908f496-4796-5ff7-afc9-95c4c01cc6f9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.224:8080","comment":"https://x.com/drb_ra/status/1949855531482406956","timestamp":"1753716759","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4fd24845-ae1a-58e2-9612-b4e772293bfc","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8099","comment":"https://x.com/drb_ra/status/1949855556920836116","timestamp":"1753716765","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1949855556920836116","timestamp":"1753716765","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ef9425b7-b1b5-547f-b948-cd799549b7fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.152","comment":"https://x.com/drb_ra/status/1949855581977657631","timestamp":"1753716771","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a5472d94-2219-59a3-8c2d-89206189f093","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.152:8080","comment":"https://x.com/drb_ra/status/1949855581977657631","timestamp":"1753716771","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b45f5225-9146-5be7-8c49-4df09594e627","type":"url","category":"Network activity","to_ids":true,"value":"https://3.19.222.192/load","comment":"https://x.com/drb_ra/status/1949855607168647651","timestamp":"1753716777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7b9f8b24-2efb-5578-9a0b-2f6f252dae13","type":"url","category":"Network activity","to_ids":true,"value":"http://3.19.222.192:80","comment":"https://x.com/drb_ra/status/1949855607168647651","timestamp":"1753716777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bb5168c-54d5-5fdc-8dab-f7c29c8d58b5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.106:3389","comment":"https://x.com/drb_ra/status/1949855632862912950","timestamp":"1753716784","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6c387410-717b-5c9f-acc1-1ea2dc623a72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.106","comment":"https://x.com/drb_ra/status/1949855632862912950","timestamp":"1753716784","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"43208596-da93-5665-988a-f18747b1bbd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.200.84.218","comment":"https://x.com/drb_ra/status/1949855632862912950","timestamp":"1753716784","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ba9a5a04-b746-5867-a713-973a2bd7879d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.153:8080","comment":"https://x.com/drb_ra/status/1949855657420546139","timestamp":"1753716789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0b529619-e814-57b6-9d78-dccb4d15da2d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.153","comment":"https://x.com/drb_ra/status/1949855657420546139","timestamp":"1753716789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1771fb8c-1f10-5b6a-bb38-d39ec21874b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.239.170","comment":"https://x.com/drb_ra/status/1949855684037661179","timestamp":"1753716796","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a2a4bfec-e50a-547e-a325-ceb1e5cdd0f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.193.225.10","comment":"https://x.com/drb_ra/status/1949855684037661179","timestamp":"1753716796","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b50a775b-c2cc-55a6-a242-a861d63ef765","type":"url","category":"Network activity","to_ids":true,"value":"http://42.193.225.10:443","comment":"https://x.com/drb_ra/status/1949855684037661179","timestamp":"1753716796","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"781fa6fb-e3ca-558a-b384-3694bafb276a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.0.16.127","comment":"https://x.com/drb_ra/status/1949855710415626319","timestamp":"1753716802","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"71781db0-ebfc-5dbe-9d65-cb452c262020","type":"url","category":"Network activity","to_ids":true,"value":"https://149.0.16.127:443","comment":"https://x.com/drb_ra/status/1949855710415626319","timestamp":"1753716802","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a3f257fd-1481-5444-a2e7-3c70fed15171","type":"url","category":"Network activity","to_ids":true,"value":"http://149.0.16.127:443","comment":"https://x.com/drb_ra/status/1949855710415626319","timestamp":"1753716802","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0b73571d-f4ec-5380-9ac7-7e4d966e9247","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.28.104.49","comment":"https://x.com/drb_ra/status/1949855733480120447","timestamp":"1753716808","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"76a7e01e-26e9-5735-85b1-a842efbd6a18","type":"url","category":"Network activity","to_ids":true,"value":"http://16.28.104.49:37404","comment":"https://x.com/drb_ra/status/1949855733480120447","timestamp":"1753716808","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ca2d707c-36cf-5cc2-a0bc-0705bd1cde7c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.39.254.225:11213","comment":"https://x.com/drb_ra/status/1949855758461333791","timestamp":"1753716814","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"91977980-2a57-522d-9d6e-52abc327c9f0","type":"url","category":"Network activity","to_ids":true,"value":"http://93.232.98.22:82","comment":"https://x.com/drb_ra/status/1949855782968652199","timestamp":"1753716819","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1c17ebc4-0bcf-5961-a439-0a5f05eb38a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.232.98.22","comment":"https://x.com/drb_ra/status/1949855782968652199","timestamp":"1753716819","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"dd491c3c-5016-50ae-8fa7-b20aff0d6608","type":"url","category":"Network activity","to_ids":true,"value":"http://51.95.70.41:55274","comment":"https://x.com/drb_ra/status/1949855807912190435","timestamp":"1753716825","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7856e059-6994-5098-bb33-026e95e99c62","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.95.70.41","comment":"https://x.com/drb_ra/status/1949855807912190435","timestamp":"1753716825","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1c6d8e5a-beb7-52de-ad7a-292963b7f83c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.249.2.120","comment":"https://x.com/drb_ra/status/1949855832075558920","timestamp":"1753716831","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"104e568b-3bb5-57a8-a480-f43ce0a8cd5c","type":"url","category":"Network activity","to_ids":true,"value":"http://173.249.2.120:587","comment":"https://x.com/drb_ra/status/1949855832075558920","timestamp":"1753716831","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e83b1dff-7ea1-5753-b284-2b15191536a6","type":"url","category":"Network activity","to_ids":true,"value":"http://163.227.239.216:6000","comment":"https://x.com/drb_ra/status/1949855857090465907","timestamp":"1753716837","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"daf9e88e-0430-56bd-8a6c-5aa24cedb940","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.227.239.216","comment":"https://x.com/drb_ra/status/1949855857090465907","timestamp":"1753716837","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"53b61848-9a6a-523c-8f90-2d4cf1a44af7","type":"url","category":"Network activity","to_ids":true,"value":"http://23.237.106.61:9999","comment":"https://x.com/drb_ra/status/1949855881903935504","timestamp":"1753716843","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b4821d79-7faa-5429-ac51-97f4253daeca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.237.106.61","comment":"https://x.com/drb_ra/status/1949855881903935504","timestamp":"1753716843","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"c32566ce-5e13-5eb8-8906-a5e9d43bcddf","type":"url","category":"Network activity","to_ids":true,"value":"http://119.152.232.82:7779","comment":"https://x.com/drb_ra/status/1949855907032051772","timestamp":"1753716849","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"520d0138-d354-54e1-98aa-a9f1ed2f112d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.152.232.82","comment":"https://x.com/drb_ra/status/1949855907032051772","timestamp":"1753716849","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"920ef6ef-c7a8-52f0-8980-be134a2cfb26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.145.99","comment":"https://x.com/drb_ra/status/1949855931115749878","timestamp":"1753716855","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"bb590159-0bcb-54ba-b4bf-0cc3a9d754b5","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.145.99:995","comment":"https://x.com/drb_ra/status/1949855931115749878","timestamp":"1753716855","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"59d93ab5-1107-5c48-81fa-85de0642db36","type":"url","category":"Network activity","to_ids":true,"value":"http://117.247.198.235:443","comment":"https://x.com/drb_ra/status/1949855957070082393","timestamp":"1753716861","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"05edf7cb-b2fb-5454-8848-204d89ff09d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.247.198.235","comment":"https://x.com/drb_ra/status/1949855957070082393","timestamp":"1753716861","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"0ecd20b7-00b3-57ad-a0a8-ca918764250b","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.169.108:7443","comment":"https://x.com/drb_ra/status/1949855980612735222","timestamp":"1753716867","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"4cb2edcf-030b-5b6b-82e3-0070576aea89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.169.108","comment":"https://x.com/drb_ra/status/1949855980612735222","timestamp":"1753716867","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"440a5217-88dd-5ef9-aedd-5bb468475eba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.166.69.208","comment":"https://x.com/drb_ra/status/1949856004000055506","timestamp":"1753716872","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bed87f0d-04bc-5a51-ad6e-8a9a3aa5bbe8","type":"url","category":"Network activity","to_ids":true,"value":"http://188.166.69.208:443","comment":"https://x.com/drb_ra/status/1949856004000055506","timestamp":"1753716872","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"352764f1-9fa3-57b8-8a28-4a3f40ad6de8","type":"url","category":"Network activity","to_ids":true,"value":"http://152.110.70.52:31337","comment":"https://x.com/drb_ra/status/1949856027953840633","timestamp":"1753716878","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"55f88af1-b165-58d4-81b5-7c83b49fe6b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.110.70.52","comment":"https://x.com/drb_ra/status/1949856027953840633","timestamp":"1753716878","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fe826184-9375-5373-9c1f-3ff033d67be6","type":"url","category":"Network activity","to_ids":true,"value":"http://161.35.226.130:8888","comment":"https://x.com/drb_ra/status/1949856053442531698","timestamp":"1753716884","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"032706bb-57aa-5c58-9fc3-c0336b85117e","type":"url","category":"Network activity","to_ids":true,"value":"http://161.35.226.130:31337","comment":"https://x.com/drb_ra/status/1949856077610115272","timestamp":"1753716890","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1d2e7595-8ea5-5496-be1a-6936c9953a58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.35.226.130","comment":"https://x.com/drb_ra/status/1949856077610115272","timestamp":"1753716890","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"edbeb946-0505-57b8-a14f-7b00c1784e60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.142.19.208","comment":"https://x.com/drb_ra/status/1949856104176849172","timestamp":"1753716896","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bdef746-22a2-523b-931b-fadf48f41339","type":"url","category":"Network activity","to_ids":true,"value":"http://43.142.19.208:443","comment":"https://x.com/drb_ra/status/1949856104176849172","timestamp":"1753716896","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7b0eab96-a8da-578a-ba00-7013e2331af9","type":"url","category":"Network activity","to_ids":true,"value":"https://www.expects-crucial-pest-bubble.club/include/template/isx.php","comment":"https://x.com/drb_ra/status/1949856104176849172","timestamp":"1753716896","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c07d28d2-55e2-56c0-bcba-e8498e233a9c","type":"domain","category":"Network activity","to_ids":true,"value":"expects-crucial-pest-bubble.club","comment":"https://x.com/drb_ra/status/1949856104176849172","timestamp":"1753716896","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f581994a-4b23-5606-b325-48063358e2e5","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.226:8080","comment":"https://x.com/drb_ra/status/1949856125630702018","timestamp":"1753716901","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0dd7baf7-ec4d-588c-9a41-ff2151248df3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.226","comment":"https://x.com/drb_ra/status/1949856125630702018","timestamp":"1753716901","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3073e2bf-c071-5717-b835-465019756056","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.156","comment":"https://x.com/drb_ra/status/1949856146463879584","timestamp":"1753716906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"854a1f22-2e24-54ad-8478-4e6405d24d79","type":"url","category":"Network activity","to_ids":true,"value":"https://120.55.73.61/admin/Start/Server/v1.84/API/BHTQUDRI0N","comment":"https://x.com/drb_ra/status/1949856146463879584","timestamp":"1753716906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1a319c62-34c7-504b-a7b1-7c10d128ebc2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.156:8080","comment":"https://x.com/drb_ra/status/1949856146463879584","timestamp":"1753716906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"324be825-dd1c-5cff-8417-fac34c6053c8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.225:8080","comment":"https://x.com/drb_ra/status/1949856167745798579","timestamp":"1753716911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8e45ce3d-08e8-5749-a815-1c26509a6b34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.225","comment":"https://x.com/drb_ra/status/1949856167745798579","timestamp":"1753716911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0d58d4c6-3cf3-5109-83b6-7200fe2808d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.55.73.61","comment":"https://x.com/drb_ra/status/1949856167745798579","timestamp":"1753716911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f560dfdd-3107-59eb-b026-7b8dcb928968","type":"url","category":"Network activity","to_ids":true,"value":"https://43.138.22.149/s/58462514417","comment":"https://x.com/drb_ra/status/1949858329842356530","timestamp":"1753717427","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0a352c19-928b-52e0-9fe6-e5199f26029e","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8086","comment":"https://x.com/drb_ra/status/1949858329842356530","timestamp":"1753717427","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ba272cb2-e227-5191-8b47-7f24de60a3df","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.227:8080","comment":"https://x.com/drb_ra/status/1949858354118934570","timestamp":"1753717432","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78b7fafa-1e47-5fb5-8153-5b054013c93d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.227","comment":"https://x.com/drb_ra/status/1949858354118934570","timestamp":"1753717432","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b1ce1cdf-3350-56c6-9079-4234ed583493","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.78.41.31","comment":"https://x.com/drb_ra/status/1949858378576023852","timestamp":"1753717438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"14a7462c-5f43-5e8f-9867-fe123c90f0fc","type":"url","category":"Network activity","to_ids":true,"value":"http://117.78.41.31:5080","comment":"https://x.com/drb_ra/status/1949858378576023852","timestamp":"1753717438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"db4691be-1d56-5dd8-a8e2-58a4fd0461bd","type":"url","category":"Network activity","to_ids":true,"value":"http://3.23.92.222:56501","comment":"https://x.com/drb_ra/status/1949858603042582627","timestamp":"1753717492","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4a7a3735-f86e-5bba-b53a-158eaf261a30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.61.252.144","comment":"https://x.com/drb_ra/status/1949858627432411480","timestamp":"1753717498","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d371b054-50c0-5d18-8d01-b3571ef5cfba","type":"url","category":"Network activity","to_ids":true,"value":"http://18.61.252.144:11101","comment":"https://x.com/drb_ra/status/1949858627432411480","timestamp":"1753717498","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e6da8c60-7f00-5f35-97e3-72b0ca346997","type":"url","category":"Network activity","to_ids":true,"value":"http://16.24.72.24:56769","comment":"https://x.com/drb_ra/status/1949858646969459045","timestamp":"1753717502","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0e0b99c3-2067-5e17-baed-28a0620d2439","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.24.72.24","comment":"https://x.com/drb_ra/status/1949858646969459045","timestamp":"1753717502","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2d39c0e8-287b-5bcc-bed8-7f1095c0c742","type":"url","category":"Network activity","to_ids":true,"value":"http://54.183.65.116:2404","comment":"https://x.com/drb_ra/status/1949858670340112684","timestamp":"1753717508","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"09319933-bed2-5e2a-9b42-b0f9fb151cd3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.183.65.116","comment":"https://x.com/drb_ra/status/1949858670340112684","timestamp":"1753717508","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"14b0f877-c52b-57b4-ac8b-8fd71a307bc7","type":"url","category":"Network activity","to_ids":true,"value":"http://13.220.134.86:9080","comment":"https://x.com/drb_ra/status/1949858693916324197","timestamp":"1753717513","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"01a52453-eb83-56f9-8c76-42a7f21d0cee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.220.134.86","comment":"https://x.com/drb_ra/status/1949858693916324197","timestamp":"1753717513","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5167a0ea-e24b-50bb-8c94-92862588300c","type":"url","category":"Network activity","to_ids":true,"value":"http://179.95.172.188:9990","comment":"https://x.com/drb_ra/status/1949858718863999262","timestamp":"1753717519","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b50488ed-e056-5f68-a27d-29968a47113a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.95.172.188","comment":"https://x.com/drb_ra/status/1949858718863999262","timestamp":"1753717519","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8b1b1779-abff-5d1b-9fc5-324895a37804","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.51.142.236","comment":"https://x.com/drb_ra/status/1949858867443036496","timestamp":"1753717555","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"53b1df19-2c5a-5ccd-ab03-c810ec42f5d9","type":"url","category":"Network activity","to_ids":true,"value":"http://52.51.142.236:80","comment":"https://x.com/drb_ra/status/1949858867443036496","timestamp":"1753717555","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"35a587a2-d056-506e-844b-07accced83f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.91.174.161","comment":"https://x.com/drb_ra/status/1949858891279266110","timestamp":"1753717560","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"bcb93556-f165-59da-8439-ea9109e4c831","type":"url","category":"Network activity","to_ids":true,"value":"http://121.91.174.161:8888","comment":"https://x.com/drb_ra/status/1949858891279266110","timestamp":"1753717560","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"340eb7b3-fd8d-5ae3-bb3f-c63c95401863","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.82.6.254","comment":"https://x.com/drb_ra/status/1949858918160622065","timestamp":"1753717567","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"b5a75c24-b5ed-518c-821e-c7dfb3180341","type":"url","category":"Network activity","to_ids":true,"value":"http://206.82.6.254:8888","comment":"https://x.com/drb_ra/status/1949858918160622065","timestamp":"1753717567","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"5e04b3e1-a3f7-541c-b89e-833572a035c5","type":"url","category":"Network activity","to_ids":true,"value":"http://177.255.88.14:8081","comment":"https://x.com/drb_ra/status/1949858941233504575","timestamp":"1753717572","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"15c4fe1e-1293-5a78-9770-3356457ca904","type":"ip-dst","category":"Network activity","to_ids":true,"value":"177.255.88.14","comment":"https://x.com/drb_ra/status/1949858941233504575","timestamp":"1753717572","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"489b7765-6c2d-576c-bc70-21f1ab24199b","type":"url","category":"Network activity","to_ids":true,"value":"http://70.31.125.47:2222","comment":"https://x.com/drb_ra/status/1949858965535224319","timestamp":"1753717578","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"f78f808a-4288-53d2-949f-07874bd57468","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.31.125.47","comment":"https://x.com/drb_ra/status/1949858965535224319","timestamp":"1753717578","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"49977163-8b78-5969-ba8b-426fcd9184de","type":"url","category":"Network activity","to_ids":true,"value":"http://95.85.34.215:80","comment":"https://x.com/drb_ra/status/1949858988876616029","timestamp":"1753717584","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"7b25d951-6981-5858-b1ab-2b6e2102606a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.85.34.215","comment":"https://x.com/drb_ra/status/1949858988876616029","timestamp":"1753717584","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"a21c9c45-d254-5517-a6fc-2a512eb8ae28","type":"url","category":"Network activity","to_ids":true,"value":"http://15.197.129.209:443","comment":"https://x.com/drb_ra/status/1949859012247228567","timestamp":"1753717589","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"58f01e4d-a89d-5693-a870-d81e4586bdd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.197.129.209","comment":"https://x.com/drb_ra/status/1949859012247228567","timestamp":"1753717589","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"07b0f072-e640-5ccc-ab53-1185311a1d3e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.229.190.80:443","comment":"https://x.com/drb_ra/status/1949859036918100034","timestamp":"1753717595","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7ff19b1f-5108-5fb0-a629-e7f73fa9b31c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.229.190.80","comment":"https://x.com/drb_ra/status/1949859036918100034","timestamp":"1753717595","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8dfd0916-c2a6-5255-9f50-978b13943461","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.157.3:443","comment":"https://x.com/drb_ra/status/1949859060330721444","timestamp":"1753717601","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"550a0d60-cf6f-56a3-877b-41ae0c464c4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.157.3","comment":"https://x.com/drb_ra/status/1949859060330721444","timestamp":"1753717601","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1804446d-ba0e-58c9-af2f-13f4753cc12c","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.145.34:443","comment":"https://x.com/drb_ra/status/1949859084213117375","timestamp":"1753717606","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"eceb46da-d580-5913-9f69-b47f58bf7f7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.145.34","comment":"https://x.com/drb_ra/status/1949859084213117375","timestamp":"1753717606","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d7792704-a18c-5311-8357-f8b6a604cc35","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.5.160:443","comment":"https://x.com/drb_ra/status/1949859108611326316","timestamp":"1753717612","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8cb4b5b1-c322-5dcd-82db-3818e535fe11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.5.160","comment":"https://x.com/drb_ra/status/1949859108611326316","timestamp":"1753717612","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ba586fb1-e77b-5e1d-8945-50651a4e8992","type":"url","category":"Network activity","to_ids":true,"value":"http://185.224.129.217:31337","comment":"https://x.com/drb_ra/status/1949859133034786933","timestamp":"1753717618","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"90ba6c45-5263-5121-b469-992fddd48e4a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.224.129.217","comment":"https://x.com/drb_ra/status/1949859133034786933","timestamp":"1753717618","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a2630458-d618-5264-aa74-572e740deab2","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.225.244:443","comment":"https://x.com/drb_ra/status/1949859158838137218","timestamp":"1753717624","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"75843f99-59aa-54ec-98e2-cb9ce8166abd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.182.225.244","comment":"https://x.com/drb_ra/status/1949859158838137218","timestamp":"1753717624","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7b377f76-90bd-57d0-b056-56b8c611327d","type":"url","category":"Network activity","to_ids":true,"value":"http://175.178.34.215:443","comment":"https://x.com/drb_ra/status/1949859183743954974","timestamp":"1753717630","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc8d05c4-fb4a-5c01-a996-6d44e32a1d3d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.178.34.215","comment":"https://x.com/drb_ra/status/1949859183743954974","timestamp":"1753717630","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3575e0b0-1271-56a9-85ce-2bf84d3d6556","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.230.161.5","comment":"https://x.com/drb_ra/status/1949859207986954359","timestamp":"1753717636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b8dcab38-3557-5e53-85b4-1ba52ecfa5fd","type":"url","category":"Network activity","to_ids":true,"value":"https://111.230.161.5/hrmregister/corpTrial/get_permission","comment":"https://x.com/drb_ra/status/1949859207986954359","timestamp":"1753717636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c442c4b8-5787-5784-a317-b728639398cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.230.29.245","comment":"https://x.com/drb_ra/status/1949859207986954359","timestamp":"1753717636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93099af4-bf4e-5e7a-9df1-6f9d94fd9c46","type":"url","category":"Network activity","to_ids":true,"value":"http://111.230.29.245:8080","comment":"https://x.com/drb_ra/status/1949859207986954359","timestamp":"1753717636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a4ca5a15-587a-5c69-81c6-ae385e1c4bd0","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.101:8080","comment":"https://x.com/drb_ra/status/1949859231781322776","timestamp":"1753717642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b42b3d33-34a7-536a-a250-27248d21d93b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.101","comment":"https://x.com/drb_ra/status/1949859231781322776","timestamp":"1753717642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"714a848b-027a-5719-8f85-40d59e515ce6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.38.125:8080","comment":"https://x.com/drb_ra/status/1949859257601437891","timestamp":"1753717648","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ab12f739-a99b-5bd3-83ab-778f152a8b47","type":"url","category":"Network activity","to_ids":true,"value":"https://115.126.49.18/webmail/","comment":"https://x.com/drb_ra/status/1949859282687557774","timestamp":"1753717654","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a4494eeb-83c9-5244-9b63-58b9ddb61295","type":"url","category":"Network activity","to_ids":true,"value":"http://115.126.49.18:2002","comment":"https://x.com/drb_ra/status/1949859282687557774","timestamp":"1753717654","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1748648f-aa61-514f-83bf-022d7974382e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.126.49.18","comment":"https://x.com/drb_ra/status/1949859282687557774","timestamp":"1753717654","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8790b09d-a454-5398-844a-288755a58ec8","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.140.12:8080","comment":"https://x.com/drb_ra/status/1949859307610104294","timestamp":"1753717660","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e10fb07f-f9c0-539e-9295-04d517532d96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.140.12","comment":"https://x.com/drb_ra/status/1949859307610104294","timestamp":"1753717660","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b57c1f70-1e7f-5282-826b-8ea305edd823","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.111:8080","comment":"https://x.com/drb_ra/status/1949859332280983638","timestamp":"1753717666","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"04024082-64da-5c44-a135-5f8b9c8258e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.111","comment":"https://x.com/drb_ra/status/1949859332280983638","timestamp":"1753717666","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f925d368-1605-5649-8349-c6b45cc7f574","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.119:8080","comment":"https://x.com/drb_ra/status/1949859358814187879","timestamp":"1753717672","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9f43c4f9-b58e-5995-b0d7-ec75cf8c403d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.119","comment":"https://x.com/drb_ra/status/1949859358814187879","timestamp":"1753717672","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"50019ca8-3339-5f5c-970e-a8a04dc02fe0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.235.175","comment":"https://x.com/drb_ra/status/1949859382721749081","timestamp":"1753717678","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e6328ce5-5da6-50f2-8e65-5ec4b8fdb479","type":"url","category":"Network activity","to_ids":true,"value":"http://43.167.235.175:9987","comment":"https://x.com/drb_ra/status/1949859382721749081","timestamp":"1753717678","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"46188e5e-c621-57b3-bb27-0e87ee169a33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.186","comment":"https://x.com/drb_ra/status/1949859408210534708","timestamp":"1753717684","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a7ceebc-3830-5510-99d2-50ddbe4f370c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.186:8080","comment":"https://x.com/drb_ra/status/1949859408210534708","timestamp":"1753717684","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"65696416-ca54-55ec-9689-4d142ee923d9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.196.247.222:8080","comment":"https://x.com/drb_ra/status/1949859432470290501","timestamp":"1753717689","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d702e5a9-c207-5045-8ae6-7a4cb2747b52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.196.247.222","comment":"https://x.com/drb_ra/status/1949859432470290501","timestamp":"1753717689","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f264a70-bfd9-5ff4-827e-75e0aa222ceb","type":"url","category":"Network activity","to_ids":true,"value":"http://45.142.195.242:80","comment":"https://x.com/drb_ra/status/1949859455333458390","timestamp":"1753717695","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f0c4d81a-ede1-5ea5-98e7-d2e460ce75bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.142.195.242","comment":"https://x.com/drb_ra/status/1949859455333458390","timestamp":"1753717695","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bc6e123d-56b6-56d9-9055-fb59691b6207","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.33.31:443","comment":"https://x.com/drb_ra/status/1949859478712492342","timestamp":"1753717701","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a0740ae8-4c19-5366-8632-ae7e81599677","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.33.31","comment":"https://x.com/drb_ra/status/1949859478712492342","timestamp":"1753717701","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b0cbf9a7-b0db-578b-9d24-a5da41cc9708","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.132.40:2404","comment":"https://x.com/drb_ra/status/1949859502808805441","timestamp":"1753717706","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7fd1de0f-e158-586b-af23-c259e0d04091","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.132.40","comment":"https://x.com/drb_ra/status/1949859502808805441","timestamp":"1753717706","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"28d5e677-8fdf-55e2-9eee-73ad3d75fbe7","type":"url","category":"Network activity","to_ids":true,"value":"http://51.20.250.182:2944","comment":"https://x.com/drb_ra/status/1949859525445476410","timestamp":"1753717712","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"96df8960-c5af-51fb-a840-8acc5e3d9d8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.20.250.182","comment":"https://x.com/drb_ra/status/1949859525445476410","timestamp":"1753717712","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2f3ff099-4281-55cf-9ba8-efaa1e11ad43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.40.131","comment":"https://x.com/drb_ra/status/1949859549566951823","timestamp":"1753717717","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a8f92303-af82-5553-b28b-e65907669ad2","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.40.131:59929","comment":"https://x.com/drb_ra/status/1949859549566951823","timestamp":"1753717717","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d0072799-ffe3-5cf6-bedc-1793a8581cca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.171.170.5","comment":"https://x.com/drb_ra/status/1949861092760355224","timestamp":"1753718085","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6605196c-17b9-5272-bee3-c3394b588a42","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.170.5:20547","comment":"https://x.com/drb_ra/status/1949861092760355224","timestamp":"1753718085","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5251ada3-5de1-5ba8-a36a-26a169a0ac70","type":"url","category":"Network activity","to_ids":true,"value":"https://jobsmartic.co.ke/suivie/assets/index.php","comment":"https://x.com/urldna_bot/status/1949862436372205705","timestamp":"1753718406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7294bcdf-06a0-5421-a99d-632e3283f70e","type":"domain","category":"Network activity","to_ids":true,"value":"jobsmartic.co.ke","comment":"https://x.com/urldna_bot/status/1949862436372205705","timestamp":"1753718406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a469ed4e-e4f6-582d-b36b-679e16230cbf","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.233.53:3000","comment":"https://x.com/drb_ra/status/1949862633374416960","timestamp":"1753718453","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e8e90fad-0ef0-5a72-a498-06914d06fdaf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.233.53","comment":"https://x.com/drb_ra/status/1949862633374416960","timestamp":"1753718453","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7a97eb46-9915-5198-a865-e22957d7299f","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.76.17:8888","comment":"https://x.com/drb_ra/status/1949862656719954115","timestamp":"1753718458","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"dd0727b1-87bf-5ff2-a786-ed720346fbd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.76.17","comment":"https://x.com/drb_ra/status/1949862656719954115","timestamp":"1753718458","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"f358e280-6160-5cac-90fd-0a1584eb38f1","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.16.11:8000","comment":"https://x.com/drb_ra/status/1949862680191217764","timestamp":"1753718464","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"014d1861-b8ee-5aeb-b94b-8b13be4751c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.16.11","comment":"https://x.com/drb_ra/status/1949862680191217764","timestamp":"1753718464","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b54bb0f9-b829-5b9c-b41c-83caee47c878","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.64.215.39","comment":"https://x.com/drb_ra/status/1949862702576197980","timestamp":"1753718469","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"4d5182dd-50a5-57f3-9105-9657819e6109","type":"url","category":"Network activity","to_ids":true,"value":"http://52.64.215.39:443","comment":"https://x.com/drb_ra/status/1949862702576197980","timestamp":"1753718469","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b24a3263-e66d-5f71-b1b0-46c7cea5ad36","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.237.243:7443","comment":"https://x.com/drb_ra/status/1949862725753950679","timestamp":"1753718475","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3f2c7857-c9e3-5757-ae0a-fbc5c08988d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.237.243","comment":"https://x.com/drb_ra/status/1949862725753950679","timestamp":"1753718475","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"9bca477b-31d9-5bc8-a8df-36c6779ff76e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.110.106.206","comment":"https://x.com/drb_ra/status/1949862749158191173","timestamp":"1753718480","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"01f471c0-8aa2-5459-871a-9cb0445a0c06","type":"url","category":"Network activity","to_ids":true,"value":"http://77.110.106.206:443","comment":"https://x.com/drb_ra/status/1949862749158191173","timestamp":"1753718480","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f2ac88ef-d293-565e-ba1d-945ab220f11d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.98.10.88","comment":"https://x.com/drb_ra/status/1949862769152434466","timestamp":"1753718485","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b1921d4-57e2-5b92-adc6-028e50e36971","type":"domain","category":"Network activity","to_ids":true,"value":"dns2.fjhfkjgfoufruyduyd.org","comment":"https://x.com/drb_ra/status/1949862769152434466","timestamp":"1753718485","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"13ab9f29-4a57-5e09-9adb-cd79d3dd7058","type":"url","category":"Network activity","to_ids":true,"value":"https://dns2.fjhfkjgfoufruyduyd.org/dot.gif","comment":"https://x.com/drb_ra/status/1949862769152434466","timestamp":"1753718485","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"277cd24c-33b7-5612-bc0e-813c3e95a8c4","type":"url","category":"Network activity","to_ids":true,"value":"http://141.98.10.88:53","comment":"https://x.com/drb_ra/status/1949862769152434466","timestamp":"1753718485","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5dd0eb30-afd0-591d-b8bf-5baa5861c817","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.130.154:53","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b2f7373-1e1c-53f4-8231-0c1fa62b8ea2","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a72b248-8a34-589e-add4-deb0cda6183f","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7dd3a8a4-4d42-56af-8a08-67369169f43f","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a94648c-aea7-5b58-a3a1-0a21fb05de8a","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.nsebseshop.cloud/ms/625478102395","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"745f539c-21c5-5a53-9b35-cef5f4812b73","type":"domain","category":"Network activity","to_ids":true,"value":"ns3.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7a8e0027-5593-533a-846c-2a553035609b","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/ms/625478102395","comment":"https://x.com/drb_ra/status/1949862793449980064","timestamp":"1753718491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"934373bb-b3e6-5b28-8ea8-53b9c30cd2a1","type":"url","category":"Network activity","to_ids":true,"value":"http://49.65.96.18:9292","comment":"https://x.com/drb_ra/status/1949862818490032320","timestamp":"1753718497","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e1b62f18-bb0c-51b0-b001-9fe4fa54ef6a","type":"url","category":"Network activity","to_ids":true,"value":"https://49.65.96.18/sugrec","comment":"https://x.com/drb_ra/status/1949862818490032320","timestamp":"1753718497","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"30c03677-3696-542f-9b4e-4672f2c3c76b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.65.96.18","comment":"https://x.com/drb_ra/status/1949862818490032320","timestamp":"1753718497","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4567e28c-8b56-5488-88b4-0e690ba46b59","type":"url","category":"Network activity","to_ids":true,"value":"http://103.176.145.162:443","comment":"https://x.com/drb_ra/status/1949862845396504929","timestamp":"1753718503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9f0898b1-1e62-58bd-b959-d091d7968041","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.176.145.162","comment":"https://x.com/drb_ra/status/1949862845396504929","timestamp":"1753718503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"11307e10-226b-53cd-87be-d148c65f5b4c","type":"domain","category":"Network activity","to_ids":true,"value":"dyn20fd74336408.sunny.edgevnpay.vn","comment":"https://x.com/drb_ra/status/1949862845396504929","timestamp":"1753718503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5728a677-9d09-5ea9-9717-3666a2e57136","type":"url","category":"Network activity","to_ids":true,"value":"https://dyn20fd74336408.sunny.edgevnpay.vn/architecture/well-architected/unknow","comment":"https://x.com/drb_ra/status/1949862845396504929","timestamp":"1753718503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"001a91a2-6968-5969-90bf-7618e00d457e","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.155.41:19999","comment":"https://x.com/drb_ra/status/1949862870214209550","timestamp":"1753718509","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ab28d14f-668d-5671-8096-5e41da582ea6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.155.41","comment":"https://x.com/drb_ra/status/1949862870214209550","timestamp":"1753718509","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d69ec7eb-640a-5cec-bba9-f061d56de819","type":"url","category":"Network activity","to_ids":true,"value":"http://139.224.54.133:9443","comment":"https://x.com/drb_ra/status/1949862895224807931","timestamp":"1753718515","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d4720c6-1206-515e-9841-ed2f99bed9e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.224.54.133","comment":"https://x.com/drb_ra/status/1949862895224807931","timestamp":"1753718515","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"980f75d8-e1a8-5c8a-af81-204416597d8c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.194.84:443","comment":"https://x.com/drb_ra/status/1949862920734589253","timestamp":"1753718521","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8cdcdb45-d113-5ad6-8db1-3f8eda17986e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.236.130.154","comment":"https://x.com/drb_ra/status/1949862947267776855","timestamp":"1753718527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"96f6d49c-1e54-5ce0-b3ce-1d8b9b9adb89","type":"url","category":"Network activity","to_ids":true,"value":"https://cioud.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1949862947267776855","timestamp":"1753718527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bfbf023-ccbc-5d98-b4b6-67910a7a596e","type":"domain","category":"Network activity","to_ids":true,"value":"cioud.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1949862947267776855","timestamp":"1753718527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fdb82787-de84-58f9-94d3-9878a46cfbcd","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.130.154:8443","comment":"https://x.com/drb_ra/status/1949862947267776855","timestamp":"1753718527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8a344765-f729-507a-9a0e-45d17b243e6a","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.194.84:80","comment":"https://x.com/drb_ra/status/1949862972915884514","timestamp":"1753718534","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"79ece9da-692e-526d-91f6-49a6afe4d608","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.194.84","comment":"https://x.com/drb_ra/status/1949862972915884514","timestamp":"1753718534","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"34e8bd5f-f510-5451-b1b7-2b205466521a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.17.9.58","comment":"https://x.com/drb_ra/status/1949862998555623934","timestamp":"1753718540","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7f644d29-3722-58bb-87fb-45477ea30960","type":"url","category":"Network activity","to_ids":true,"value":"http://85.17.9.58:443","comment":"https://x.com/drb_ra/status/1949862998555623934","timestamp":"1753718540","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da1cb8d8-56bd-5337-bfeb-12e7ce428773","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.140.158/dot.gif","comment":"https://x.com/drb_ra/status/1949862998555623934","timestamp":"1753718540","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"301fd49d-4c8f-57e9-b237-c5aa6b84eb85","type":"url","category":"Network activity","to_ids":true,"value":"https://85.17.9.58/ga.js","comment":"https://x.com/drb_ra/status/1949862998555623934","timestamp":"1753718540","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2606be7b-ddee-5198-ba1a-24ed4b0de152","type":"url","category":"Network activity","to_ids":true,"value":"https://117.50.175.19/wc/58462514417","comment":"https://x.com/drb_ra/status/1949863022769410359","timestamp":"1753718545","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3c3e420-314e-5c68-8cb8-516c84b8b7d2","type":"url","category":"Network activity","to_ids":true,"value":"http://117.50.175.19:80","comment":"https://x.com/drb_ra/status/1949863022769410359","timestamp":"1753718545","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"05a07e59-b4ea-584d-9878-ce891bb3a32c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.50.175.19","comment":"https://x.com/drb_ra/status/1949863022769410359","timestamp":"1753718545","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"08081d37-ac83-508e-a537-5ef6d5386a3d","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.205.250:60133","comment":"https://x.com/drb_ra/status/1949863050091135381","timestamp":"1753718552","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7e7a91cb-8b63-59c7-93fd-a593f5a235d4","type":"domain","category":"Network activity","to_ids":true,"value":"mail-mod-gov-bd-account-conf-files.netlify.app","comment":"https://x.com/volrant136/status/1949867469012685147","timestamp":"1753719606","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"ea63ad6c-92e4-5403-a714-fe20741053df","type":"url","category":"Network activity","to_ids":true,"value":"http://mail-mod-gov-bd-account-conf-files.netlify.app","comment":"https://x.com/volrant136/status/1949867469012685147","timestamp":"1753719606","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"d018f753-f14a-506a-894f-281061d8498e","type":"url","category":"Network activity","to_ids":true,"value":"https://www.immortalnight.com/a/musaa456/mozart/index.html","comment":"https://x.com/urldna_bot/status/1949892650015887698","timestamp":"1753725609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"517c3bf1-e0a5-51b8-9300-b95afb4a8fa8","type":"domain","category":"Network activity","to_ids":true,"value":"immortalnight.com","comment":"https://x.com/urldna_bot/status/1949892650015887698","timestamp":"1753725609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e17bff78-1cae-5e8e-b701-08522e4b9895","type":"url","category":"Network activity","to_ids":true,"value":"http://dianqi2.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1949902644501172727","timestamp":"1753727992","distribution":"5"},{"uuid":"ca67e9c8-2fb2-5561-ab2b-a76b037445d7","type":"domain","category":"Network activity","to_ids":true,"value":"dianqi2.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1949902644501172727","timestamp":"1753727992","distribution":"5"},{"uuid":"373d0f77-b9a9-5b73-87b9-497322473d4b","type":"domain","category":"Network activity","to_ids":true,"value":"dianqi1.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1949902644501172727","timestamp":"1753727992","distribution":"5"},{"uuid":"bd4700a3-7e2a-5156-8b08-7e5bb00550e3","type":"url","category":"Network activity","to_ids":true,"value":"http://dianqi1.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1949902644501172727","timestamp":"1753727992","distribution":"5"},{"uuid":"ced89669-20e4-5b00-85ec-1b47b49f39f8","type":"url","category":"Network activity","to_ids":true,"value":"http://8.218.16.243","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"6436f9c2-4568-517c-99c7-2a0acc1a876a","type":"url","category":"Network activity","to_ids":true,"value":"http://xeyo.g0uxvrhz.com","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"b36e85c6-bbde-5110-adce-5abbdad299ad","type":"domain","category":"Network activity","to_ids":true,"value":"xeyo.g0uxvrhz.com","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"40026135-53e2-5c93-80b0-4e74d1aba42d","type":"url","category":"Network activity","to_ids":true,"value":"http://xmym2.rrdmasdfghjkl.com","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"0960f89e-cae4-5ff4-9712-bff96c5d6571","type":"domain","category":"Network activity","to_ids":true,"value":"xmym2.rrdmasdfghjkl.com","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"718e59f6-2d34-586a-9061-5a13eaf3bfd7","type":"domain","category":"Network activity","to_ids":true,"value":"fyxmy22.mlcrosoft.asia","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"24696122-3e3e-5019-bb09-b6f61337fcea","type":"url","category":"Network activity","to_ids":true,"value":"http://zhxmy2.mlcrosoft.win","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"241cbcb6-e076-5214-a5c4-4a66d580757b","type":"domain","category":"Network activity","to_ids":true,"value":"zhxmy2.mlcrosoft.win","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"20411405-46a4-5879-b1f7-284874f20a1c","type":"url","category":"Network activity","to_ids":true,"value":"http://fyxmy22.mlcrosoft.asia","comment":"https://x.com/skocherhan/status/1949906973862089195","timestamp":"1753729024","distribution":"5"},{"uuid":"c621b297-56ae-5ccd-b29c-fef388b590d0","type":"domain","category":"Network activity","to_ids":true,"value":"my-portal.pages.dev","comment":"https://x.com/skocherhan/status/1949920314080534941","timestamp":"1753732205","distribution":"5"},{"uuid":"7bbb8ce0-7885-5e62-bc88-b9a5f0c26b8f","type":"url","category":"Network activity","to_ids":true,"value":"http://my-portal.pages.dev/DataSync1752334096.exe","comment":"https://x.com/skocherhan/status/1949920314080534941","timestamp":"1753732205","distribution":"5"},{"uuid":"ab92f43b-2ddb-513d-876d-bbc4115e6aac","type":"url","category":"Network activity","to_ids":true,"value":"http://eir-mobile-auth.com","comment":"https://x.com/urldna_bot/status/1949922842151100432","timestamp":"1753732808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f0c5aed2-ffed-5a02-b29c-e61d39c185a8","type":"domain","category":"Network activity","to_ids":true,"value":"eir-mobile-auth.com","comment":"https://x.com/urldna_bot/status/1949922842151100432","timestamp":"1753732808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"00c19e8c-f9c7-5dce-bffe-a6601331eeb0","type":"domain","category":"Network activity","to_ids":true,"value":"previous-vietnamese.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1949922888544358578","timestamp":"1753732819","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"75434acb-d0ed-56cd-bace-f3a8609e87f3","type":"url","category":"Network activity","to_ids":true,"value":"http://previous-vietnamese.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1949922888544358578","timestamp":"1753732819","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"3c506b45-c668-5909-9673-614e0ead90c7","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:40099","comment":"https://x.com/SarlackLab/status/1949922888544358578","timestamp":"1753732819","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1949922888544358578","timestamp":"1753732819","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"d43bec82-7eb7-5b89-a560-dcbebfd60d49","type":"url","category":"Network activity","to_ids":true,"value":"http://18.221.254.211","comment":"https://x.com/threatquery/status/1949937923035468277","timestamp":"1753736403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"b047ea6b-5df2-57b0-8dbd-e89d971a3c15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.221.254.211","comment":"https://x.com/threatquery/status/1949937923035468277","timestamp":"1753736403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"74116dc8-800e-5210-af1a-5978374f3977","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.207","comment":"https://x.com/threatquery/status/1949937926709674259","timestamp":"1753736404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Sliver"}]},{"uuid":"7cb4efd5-f468-5fd1-9bab-478a6cb84f4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.207","comment":"https://x.com/threatquery/status/1949937926709674259","timestamp":"1753736404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Sliver"}]},{"uuid":"b5316831-a175-58f6-8fbe-069e7b67156c","type":"url","category":"Network activity","to_ids":true,"value":"http://161.97.135.253","comment":"https://x.com/threatquery/status/1949937924776075605","timestamp":"1753736404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Sliver"}]},{"uuid":"98d88259-91aa-5a65-9243-104f354fa5df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.97.135.253","comment":"https://x.com/threatquery/status/1949937924776075605","timestamp":"1753736404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Sliver"}]},{"uuid":"2113d33c-140a-56c7-92a9-8e3143a54545","type":"url","category":"Network activity","to_ids":true,"value":"http://208.89.73.157","comment":"https://x.com/skocherhan/status/1949941859503022120","timestamp":"1753737342","distribution":"5"},{"uuid":"26d502d6-30d8-50e4-9b4f-8758dbd89593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"208.89.73.157","comment":"https://x.com/skocherhan/status/1949941859503022120","timestamp":"1753737342","distribution":"5"},{"uuid":"783475ba-1605-5e04-a9e6-9adf1362fff9","type":"domain","category":"Network activity","to_ids":true,"value":"superstaryg.jp","comment":"https://x.com/ir0n_fe/status/1949951115891527834","timestamp":"1753739549","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1d5b840-10a6-5484-887a-e7b99f449c31","type":"url","category":"Network activity","to_ids":true,"value":"https://superstaryg.jp/jabank/Verifyidentity","comment":"https://x.com/ir0n_fe/status/1949951115891527834","timestamp":"1753739549","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73b643a4-4e59-5dea-9734-72d88d80c992","type":"domain","category":"Network activity","to_ids":true,"value":"driect-jebnkcash.com","comment":"https://x.com/ir0n_fe/status/1949951115891527834","timestamp":"1753739549","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"adf2f3ff-2388-5ff5-938e-01be9cc4a7b5","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-jebnkcash.com/index/driect/ib/3210000","comment":"https://x.com/ir0n_fe/status/1949951115891527834","timestamp":"1753739549","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"17927bea-e627-5722-b3f7-af6b77a38a60","type":"domain","category":"Network activity","to_ids":true,"value":"tts7324.webmo.fr","comment":"https://x.com/urldna_bot/status/1949953033757917664","timestamp":"1753740006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"84776dfa-98f5-597d-8960-f7542154b951","type":"url","category":"Network activity","to_ids":true,"value":"https://tts7324.webmo.fr/NRD/2647f06/Sign_in.php","comment":"https://x.com/urldna_bot/status/1949953033757917664","timestamp":"1753740006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3df488a8-5d13-5bf5-a0fa-1fecf47b9c91","type":"domain","category":"Network activity","to_ids":true,"value":"bmmkyeip.com","comment":"https://x.com/masaomi346/status/1949964579804434515","timestamp":"1753742759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f817590d-a487-59fe-bb0d-181ca8cd0789","type":"url","category":"Network activity","to_ids":true,"value":"https://bmmkyeip.com/account","comment":"https://x.com/masaomi346/status/1949964579804434515","timestamp":"1753742759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cc10e16-c887-5335-9f81-466dd956716a","type":"domain","category":"Network activity","to_ids":true,"value":"creativepackout.co","comment":"https://x.com/JangPr0/status/1949970852180549795","timestamp":"1753744254","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"3ab24cdf-7a92-525f-bfa0-69b705812fd5","type":"url","category":"Network activity","to_ids":true,"value":"https://creativepackout.co/wp-admin/js/widgets/hurryup/?rv=bear^&za=battle0","comment":"https://x.com/JangPr0/status/1949970852180549795","timestamp":"1753744254","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"24981e16-69b2-547d-af74-2e8668f62324","type":"md5","category":"Payload delivery","to_ids":true,"value":"639b5489d2fb79bcb715905a046d4a54","comment":"https://x.com/JangPr0/status/1949970852180549795","timestamp":"1753744254","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"6837d03f-a4d6-5e43-9ca5-99d226bf5311","type":"domain","category":"Network activity","to_ids":true,"value":"pzmqgow.top","comment":"https://x.com/Ayyaan__1/status/1949972683761828158","timestamp":"1753744691","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"0f325be4-0355-57d2-90a4-dbf633e24b1f","type":"url","category":"Network activity","to_ids":true,"value":"http://pzmqgow.top","comment":"https://x.com/Ayyaan__1/status/1949972683761828158","timestamp":"1753744691","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"96bc94f6-2096-5c1b-9570-4d611e6152f7","type":"domain","category":"Network activity","to_ids":true,"value":"community-ethereum.com","comment":"https://x.com/urldna_bot/status/1949983252422250661","timestamp":"1753747210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"760e59ba-942b-52ad-b86a-0b2d934fa295","type":"url","category":"Network activity","to_ids":true,"value":"https://community-ethereum.com","comment":"https://x.com/urldna_bot/status/1949983252422250661","timestamp":"1753747210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bc2e418a-23bf-5075-ba76-64d54b198714","type":"domain","category":"Network activity","to_ids":true,"value":"stu-ukznadministratorsupportupdate.weebly.com","comment":"https://x.com/urldna_bot/status/1950013443525705816","timestamp":"1753754409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c85f8c4b-209c-5b4c-a737-840006a48460","type":"url","category":"Network activity","to_ids":true,"value":"https://stu-ukznadministratorsupportupdate.weebly.com","comment":"https://x.com/urldna_bot/status/1950013443525705816","timestamp":"1753754409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8f6bd228-fed2-5d1f-bb2c-f8739261a16f","type":"md5","category":"Payload delivery","to_ids":true,"value":"546cf5e93f11b51c96f52c7d9daf62f9","comment":"https://x.com/Cyberteam008/status/1950019927898837282","timestamp":"1753755955","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c0814210-f302-5134-915a-d245284e2b2a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5eddcbbfc15659d8d6ad3f351819ae1e","comment":"https://x.com/Cyberteam008/status/1950019927898837282","timestamp":"1753755955","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"60e1feef-fb54-530d-95ae-110de116088e","type":"md5","category":"Payload delivery","to_ids":true,"value":"9428d384055328b95d7190ac60d20c4d","comment":"https://x.com/Cyberteam008/status/1950019932059496605","timestamp":"1753755956","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1d97cfa9-1acf-5888-90e8-59c355295322","type":"md5","category":"Payload delivery","to_ids":true,"value":"f4376e3d6e0d350fa0abf86f9cb389d4","comment":"https://x.com/Cyberteam008/status/1950019932059496605","timestamp":"1753755956","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"dcb1227e-503e-5463-95f0-e2c8f6d87e10","type":"url","category":"Network activity","to_ids":true,"value":"http://filestore.space","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2ad5e586-eb51-5d7e-9b82-e1b2690c3c8f","type":"md5","category":"Payload delivery","to_ids":true,"value":"929b636b5b8bdf9f1108f500974e894e","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fabab79c-c18c-5c85-ab31-812e3f6aef76","type":"md5","category":"Payload delivery","to_ids":true,"value":"6ce6ff9a9664c8e9d3dd49be07a03a9c","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c9350ff0-0e22-56f8-864b-dc1866b0f28c","type":"domain","category":"Network activity","to_ids":true,"value":"Medical_Report_2025.pptx.zip","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"59e6662c-5dc1-5d8a-bd44-036feddd5f8a","type":"domain","category":"Network activity","to_ids":true,"value":"filestore.space","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5211054b-80af-5f7a-943a-81772b27b369","type":"url","category":"Network activity","to_ids":true,"value":"http://Medical_Report_2025.pptx.zip","comment":"https://x.com/Cyberteam008/status/1950019936484462923","timestamp":"1753755957","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9b0b86ad-5791-5b40-8a2a-be09f34cb2ef","type":"md5","category":"Payload delivery","to_ids":true,"value":"134972f67d41047e98fcfbd634358b40","comment":"https://x.com/skocherhan/status/1950029038061273582","timestamp":"1753758127","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"92b61ad9-c197-5b32-a662-d12dcbeff6af","type":"domain","category":"Network activity","to_ids":true,"value":"okglobalconcept.com:2555","comment":"https://x.com/skocherhan/status/1950029038061273582","timestamp":"1753758127","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"27c80c0d-4bf5-556d-b297-1af37e847d90","type":"url","category":"Network activity","to_ids":true,"value":"http://okglobalconcept.com:2555","comment":"https://x.com/skocherhan/status/1950029038061273582","timestamp":"1753758127","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"537195e5-cd6c-5646-bd0c-5b9755332674","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.102.43","comment":"https://x.com/skocherhan/status/1950031015159709902","timestamp":"1753758598","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"aad878da-2ae6-58d1-b5c2-46fb72b3c044","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.102.43:14646","comment":"https://x.com/skocherhan/status/1950031015159709902","timestamp":"1753758598","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"128408de-1b22-5555-a8aa-5c64cba0db67","type":"url","category":"Network activity","to_ids":true,"value":"http://angeleviagivenmebestthingsforbetterfeell.duckdns.org","comment":"https://x.com/skocherhan/status/1950031015159709902","timestamp":"1753758598","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"61ed9034-cc1c-53dc-acb3-7e3365566167","type":"domain","category":"Network activity","to_ids":true,"value":"angeleviagivenmebestthingsforbetterfeell.duckdns.org","comment":"https://x.com/skocherhan/status/1950031015159709902","timestamp":"1753758598","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"54f6945f-9aef-53dc-8d98-0a0e95c3227f","type":"url","category":"Network activity","to_ids":true,"value":"http://serverdata-cloud.cloud","comment":"https://x.com/skocherhan/status/1950038093622362344","timestamp":"1753760286","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"5f1c0971-5a9b-5142-a6fc-0e177eba1af0","type":"domain","category":"Network activity","to_ids":true,"value":"serverdata-cloud.cloud","comment":"https://x.com/skocherhan/status/1950038093622362344","timestamp":"1753760286","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"98ea027a-7d32-52fe-8389-937ee8e72d5c","type":"url","category":"Network activity","to_ids":true,"value":"http://shadow.steelpanman.com","comment":"https://x.com/skocherhan/status/1950038093622362344","timestamp":"1753760286","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"7cb2aeb9-af46-5609-9f03-6f00780fdb6e","type":"domain","category":"Network activity","to_ids":true,"value":"shadow.steelpanman.com","comment":"https://x.com/skocherhan/status/1950038093622362344","timestamp":"1753760286","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"77500c79-2b1c-5c13-9f4f-cae1fe3c4fcc","type":"md5","category":"Payload delivery","to_ids":true,"value":"513f1a59273fb5ead33d5c14252565c4","comment":"https://x.com/skocherhan/status/1950038093622362344","timestamp":"1753760286","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"656cebe5-dd3f-5926-8abd-f20eac1ac499","type":"domain","category":"Network activity","to_ids":true,"value":"zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion","comment":"https://x.com/skocherhan/status/1950040753847111976","timestamp":"1753760920","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"8d63a578-0a9c-568d-9d1e-e572a884e1b7","type":"md5","category":"Payload delivery","to_ids":true,"value":"68BD43A00BA948F435ECBDD402914298","comment":"https://x.com/skocherhan/status/1950040753847111976","timestamp":"1753760920","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"6598e4a3-4aa5-533e-8b21-3fa44aef754d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8A0B41E965E66689E78CA36D3477CB0C","comment":"https://x.com/skocherhan/status/1950040753847111976","timestamp":"1753760920","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"758087bd-f534-501b-9f1f-01961e147ac3","type":"url","category":"Network activity","to_ids":true,"value":"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html","comment":"https://x.com/skocherhan/status/1950040753847111976","timestamp":"1753760920","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"4bb9f4a4-89d0-5ced-b718-247cce248a8f","type":"url","category":"Network activity","to_ids":true,"value":"http://scanqris.me","comment":"https://x.com/skocherhan/status/1950042792568238440","timestamp":"1753761406","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"c20161a9-fcd9-5726-b7ae-6f1e65e92793","type":"domain","category":"Network activity","to_ids":true,"value":"scanqris.me","comment":"https://x.com/skocherhan/status/1950042792568238440","timestamp":"1753761406","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"06f15c57-a901-5077-929a-ea5435a6e721","type":"url","category":"Network activity","to_ids":true,"value":"http://ipfs.io/ipfs/bafkreibn6b7inojjz3cmczkt6a3y324jjcqvlk7s2d5kb4vwqfcsvprrt4","comment":"https://x.com/urldna_bot/status/1950043644729131352","timestamp":"1753761609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1bbebe30-7349-509e-8c62-5245344f6b68","type":"url","category":"Network activity","to_ids":true,"value":"http://okserver29.com/K3K_222_Weuxfrrljzj","comment":"https://x.com/skocherhan/status/1950046504829296829","timestamp":"1753762291","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"81459897-bdde-5465-b1a9-edaf2ac15ad8","type":"domain","category":"Network activity","to_ids":true,"value":"okserver29.com","comment":"https://x.com/skocherhan/status/1950046504829296829","timestamp":"1753762291","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"c90320a4-5189-53e0-9e80-5bffa1469358","type":"md5","category":"Payload delivery","to_ids":true,"value":"c711e7057b156662dfca760326a3ec72","comment":"https://x.com/skocherhan/status/1950046504829296829","timestamp":"1753762291","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"78bb18c0-822a-54d1-99b6-a65396bd8e7f","type":"md5","category":"Payload delivery","to_ids":true,"value":"af3ea9365d474b52fd2201b13af28df6","comment":"https://x.com/ReBensk/status/1950067620813697177","timestamp":"1753767325","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"ba78ce83-9852-5d20-9156-fbe15657577a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5185886a46551de0f08d6fc6301dc590","comment":"https://x.com/suyog41/status/1950068595951616215","timestamp":"1753767558","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"eedcae5e-3ca8-54fb-a068-f117081ccfc9","type":"url","category":"Network activity","to_ids":true,"value":"http://genkidama.site","comment":"https://x.com/skocherhan/status/1950070017652847079","timestamp":"1753767897","distribution":"5"},{"uuid":"ec3badce-bc4e-5913-ab2d-770857a62475","type":"md5","category":"Payload delivery","to_ids":true,"value":"91067aef4819b66a68eb3f45e928e2c7","comment":"https://x.com/skocherhan/status/1950070017652847079","timestamp":"1753767897","distribution":"5"},{"uuid":"3babc6e0-35e9-5fd5-9f58-fb7b092522ae","type":"domain","category":"Network activity","to_ids":true,"value":"genkidama.site","comment":"https://x.com/skocherhan/status/1950070017652847079","timestamp":"1753767897","distribution":"5"},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/SarlackLab/status/1950073899795783992","timestamp":"1753768822","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"48d21455-1a81-542f-aa08-a42d829212ef","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46:1911","comment":"https://x.com/SarlackLab/status/1950073899795783992","timestamp":"1753768822","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"cf7d83f1-edee-5d13-8600-53536c41a9c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.122.69","comment":"https://x.com/JAMESWT_WT/status/1950080721294397491","timestamp":"1753770449","distribution":"5"},{"uuid":"0c4f4b2d-42dc-5bb5-84b4-dc2fddd20047","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.60.37.55","comment":"https://x.com/Fact_Finder03/status/1950095876430385440","timestamp":"1753774062","distribution":"5"},{"uuid":"4e6423a7-32df-5433-be7e-5d61f6cbf96a","type":"domain","category":"Network activity","to_ids":true,"value":"vfyamarillonvrfy.weebly.com","comment":"https://x.com/urldna_bot/status/1950104040466993394","timestamp":"1753776009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ab37f235-a637-5c4a-a034-7a841a96d9f9","type":"url","category":"Network activity","to_ids":true,"value":"https://vfyamarillonvrfy.weebly.com","comment":"https://x.com/urldna_bot/status/1950104040466993394","timestamp":"1753776009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"37876cb4-bbdf-51c3-b731-cb606bd1ccb1","type":"url","category":"Network activity","to_ids":true,"value":"http://csp-bank-com.l.ink","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5d5a3158-dd4e-566c-b79f-2ccde2d634e2","type":"domain","category":"Network activity","to_ids":true,"value":"csp-bank-com.l.ink","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"88b53fbd-55f9-567e-a588-d81a5a56893e","type":"url","category":"Network activity","to_ids":true,"value":"http://paypal-kundencenter.com","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f1686aee-d3c2-5998-843e-e712d27a02dd","type":"domain","category":"Network activity","to_ids":true,"value":"paypal-kundencenter.com","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a9ba2c7d-3710-58cf-b874-179bcb59c66b","type":"url","category":"Network activity","to_ids":true,"value":"http://spy-signal.com","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dd31be93-6034-5509-901e-da79316a5530","type":"domain","category":"Network activity","to_ids":true,"value":"spy-signal.com","comment":"https://x.com/c9lab_soc/status/1950114217949818943","timestamp":"1753778435","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fdd936e3-342c-5129-bf11-904913be3856","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.22.24.11","comment":"https://x.com/skocherhan/status/1950118653162066002","timestamp":"1753779493","distribution":"5"},{"uuid":"b15da3e7-2aee-5241-afe1-e8aecc5bd515","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.22.24.12","comment":"https://x.com/skocherhan/status/1950118653162066002","timestamp":"1753779493","distribution":"5"},{"uuid":"d9a3fd47-124b-5d04-8de8-cb18be3ee713","type":"url","category":"Network activity","to_ids":true,"value":"http://18.158.61.80:19646","comment":"https://x.com/drb_ra/status/1950123559147180491","timestamp":"1753780662","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"35c9c4a9-9fb8-5983-816e-f7ca599d772c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.158.61.80","comment":"https://x.com/drb_ra/status/1950123585386823990","timestamp":"1753780668","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6f8747da-5041-552d-92ca-6d1b31612cb6","type":"url","category":"Network activity","to_ids":true,"value":"http://18.158.61.80:14596","comment":"https://x.com/drb_ra/status/1950123585386823990","timestamp":"1753780668","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6c3fc60f-026a-593a-a112-2f5d20dc4744","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.48.138.122","comment":"https://x.com/drb_ra/status/1950123610166743341","timestamp":"1753780674","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"06a6d613-6830-590c-95e8-c854dd431b48","type":"url","category":"Network activity","to_ids":true,"value":"http://13.48.138.122:35791","comment":"https://x.com/drb_ra/status/1950123610166743341","timestamp":"1753780674","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c2242670-f5b8-515c-ba51-b52bbd3b4001","type":"url","category":"Network activity","to_ids":true,"value":"http://13.211.143.231:6640","comment":"https://x.com/drb_ra/status/1950123634908868688","timestamp":"1753780680","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a1123783-f81a-57b8-82a9-845ddff2ee84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.211.143.231","comment":"https://x.com/drb_ra/status/1950123634908868688","timestamp":"1753780680","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4f9f5466-2af8-593e-bb3d-fb17333cb772","type":"url","category":"Network activity","to_ids":true,"value":"http://13.126.101.250:8010","comment":"https://x.com/drb_ra/status/1950123658648654210","timestamp":"1753780686","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8ec5bb78-43a2-525f-b344-a4663428cd0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.126.101.250","comment":"https://x.com/drb_ra/status/1950123658648654210","timestamp":"1753780686","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d56dbf5d-f997-5b21-a875-122c347f4fb2","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.49.232:22388","comment":"https://x.com/drb_ra/status/1950123822989885806","timestamp":"1753780725","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"353cc948-0c76-56ac-b91f-25ecfe555b6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.49.232","comment":"https://x.com/drb_ra/status/1950123822989885806","timestamp":"1753780725","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"8ffda2d1-ea2d-55aa-9378-16d7595ba4fe","type":"url","category":"Network activity","to_ids":true,"value":"http://68.64.177.239:18888","comment":"https://x.com/drb_ra/status/1950123847170101527","timestamp":"1753780731","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"a1fc9eae-9902-5257-8d8f-ea918f9e1e7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.64.177.239","comment":"https://x.com/drb_ra/status/1950123847170101527","timestamp":"1753780731","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"d6bc529d-a4f6-519d-b548-746b12d01c9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.24.61.56","comment":"https://x.com/drb_ra/status/1950123871522476342","timestamp":"1753780737","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"de60440d-706a-5d39-94c4-744fb7895912","type":"url","category":"Network activity","to_ids":true,"value":"http://120.24.61.56:8888","comment":"https://x.com/drb_ra/status/1950123871522476342","timestamp":"1753780737","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"2d937cc9-599b-544d-83c8-e50bb3490018","type":"url","category":"Network activity","to_ids":true,"value":"http://88.247.16.132:1604","comment":"https://x.com/drb_ra/status/1950123893244465609","timestamp":"1753780742","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"ab7df22e-8c4c-55f9-b64e-095892677042","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.247.16.132","comment":"https://x.com/drb_ra/status/1950123893244465609","timestamp":"1753780742","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"0518cfb7-27d6-590d-876b-a23c752994ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.60.205.18","comment":"https://x.com/drb_ra/status/1950123916535435299","timestamp":"1753780747","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"bd239127-1778-5ce1-a075-7eb8f4b68816","type":"url","category":"Network activity","to_ids":true,"value":"http://67.60.205.18:443","comment":"https://x.com/drb_ra/status/1950123916535435299","timestamp":"1753780747","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"0b0fefe5-5365-55dd-9c74-248348afeb3b","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.234.10:443","comment":"https://x.com/drb_ra/status/1950123938584920512","timestamp":"1753780753","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"2f33d972-87bf-5a2b-8815-33a7fac4ca17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.234.10","comment":"https://x.com/drb_ra/status/1950123938584920512","timestamp":"1753780753","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"8802c8b0-9ef4-5c11-aa88-2a384dd77cd5","type":"url","category":"Network activity","to_ids":true,"value":"http://80.92.206.8:443","comment":"https://x.com/drb_ra/status/1950123961368322424","timestamp":"1753780758","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4ab159fc-16f4-5f4c-b454-b44cd2b1651b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.92.206.8","comment":"https://x.com/drb_ra/status/1950123961368322424","timestamp":"1753780758","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"bcdf6bee-1e21-56e6-b1a0-987fc687857b","type":"url","category":"Network activity","to_ids":true,"value":"http://34.69.221.5:7443","comment":"https://x.com/drb_ra/status/1950123984336421256","timestamp":"1753780764","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e5539f82-e279-579e-b017-460c29f200ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.110.49.105","comment":"https://x.com/drb_ra/status/1950124008059383946","timestamp":"1753780769","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e5e89328-5ef1-5afa-a3d5-587c0a6b56de","type":"url","category":"Network activity","to_ids":true,"value":"http://79.110.49.105:7443","comment":"https://x.com/drb_ra/status/1950124008059383946","timestamp":"1753780769","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"09609ef4-2339-5cf2-b84c-b141ea772311","type":"url","category":"Network activity","to_ids":true,"value":"http://139.59.111.220:7443","comment":"https://x.com/drb_ra/status/1950124031618723872","timestamp":"1753780775","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"735c12cf-f450-5cf8-b3b2-707f5bef55f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.59.111.220","comment":"https://x.com/drb_ra/status/1950124031618723872","timestamp":"1753780775","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d3a9b679-8be9-57bc-98bc-b300e6cc02a7","type":"url","category":"Network activity","to_ids":true,"value":"http://4.201.139.41:31337","comment":"https://x.com/drb_ra/status/1950124054674899113","timestamp":"1753780780","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1731dcb3-0d7e-530d-b4e7-3999d03d8877","type":"url","category":"Network activity","to_ids":true,"value":"http://38.114.100.139:31337","comment":"https://x.com/drb_ra/status/1950124077131203031","timestamp":"1753780786","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a31e0828-af3c-5789-92e0-9d93e52800fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.114.100.139","comment":"https://x.com/drb_ra/status/1950124077131203031","timestamp":"1753780786","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"33484900-7616-5f48-ab25-f5810a663200","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.158.51","comment":"https://x.com/drb_ra/status/1950124099159609835","timestamp":"1753780791","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"22b1200c-8a6c-5993-9fa9-29264fdc6c3c","type":"url","category":"Network activity","to_ids":true,"value":"http://46.101.158.51:31337","comment":"https://x.com/drb_ra/status/1950124099159609835","timestamp":"1753780791","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1d80e5c1-fc9d-56c7-a79f-c8df117be289","type":"url","category":"Network activity","to_ids":true,"value":"http://198.206.134.133:8989","comment":"https://x.com/drb_ra/status/1950124125747343688","timestamp":"1753780797","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"063ff36d-21bc-5b1d-b7e9-15e0c6bf9642","type":"url","category":"Network activity","to_ids":true,"value":"http://198.206.134.133:31337","comment":"https://x.com/drb_ra/status/1950124149847785744","timestamp":"1753780803","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6b88b056-3b6b-5071-8ecb-ecdc47619fb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.206.134.133","comment":"https://x.com/drb_ra/status/1950124149847785744","timestamp":"1753780803","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"98bb6152-ca7a-5a56-bf4a-9821302870ad","type":"url","category":"Network activity","to_ids":true,"value":"http://154.216.157.235:443","comment":"https://x.com/drb_ra/status/1950124174317433270","timestamp":"1753780809","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4166002f-63e0-54fc-b1bc-5c4cd2f52b87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.216.157.235","comment":"https://x.com/drb_ra/status/1950124174317433270","timestamp":"1753780809","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88ff6ce4-05ab-5507-8cba-05012f70baa9","type":"url","category":"Network activity","to_ids":true,"value":"http://175.27.168.31:44333","comment":"https://x.com/drb_ra/status/1950124198988251543","timestamp":"1753780815","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"43cc8f8b-f171-574d-86e4-f4367dd3c4c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.144.111","comment":"https://x.com/drb_ra/status/1950124226112802824","timestamp":"1753780821","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0b0ba6b0-0115-54de-89a0-c3abd744d055","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.144.111:80","comment":"https://x.com/drb_ra/status/1950124226112802824","timestamp":"1753780821","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"79ffd0ae-e30a-51bc-b2de-fa5dde7377e4","type":"url","category":"Network activity","to_ids":true,"value":"http://1.14.58.96:8088","comment":"https://x.com/drb_ra/status/1950124250506854687","timestamp":"1753780827","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4448d628-2344-5843-8574-74995494eb28","type":"domain","category":"Network activity","to_ids":true,"value":"edufinder.ir","comment":"https://x.com/drb_ra/status/1950124274498367545","timestamp":"1753780833","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b04a6d87-0a81-5149-9734-06a4a85d449b","type":"url","category":"Network activity","to_ids":true,"value":"https://edufinder.ir/cm","comment":"https://x.com/drb_ra/status/1950124274498367545","timestamp":"1753780833","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f91b523c-60b9-5108-b1ca-afcd4487c8fc","type":"url","category":"Network activity","to_ids":true,"value":"http://87.248.155.251:80","comment":"https://x.com/drb_ra/status/1950124274498367545","timestamp":"1753780833","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b970defe-2186-5583-ab39-d396efd9561a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.248.155.251","comment":"https://x.com/drb_ra/status/1950124274498367545","timestamp":"1753780833","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93cedfcf-5ae2-5b82-b9d6-63db056009ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.108.200.194","comment":"https://x.com/drb_ra/status/1950124298464641446","timestamp":"1753780838","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b19d2aa8-e784-5f24-b540-80e5a1a0891b","type":"url","category":"Network activity","to_ids":true,"value":"http://166.108.200.194:80","comment":"https://x.com/drb_ra/status/1950124298464641446","timestamp":"1753780838","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"82523afd-0be7-54ec-8073-78f37914d684","type":"url","category":"Network activity","to_ids":true,"value":"http://124.222.32.224:8780","comment":"https://x.com/drb_ra/status/1950124321881395204","timestamp":"1753780844","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"74d8e930-0ca9-5381-9017-e607a143d7ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.222.32.224","comment":"https://x.com/drb_ra/status/1950124321881395204","timestamp":"1753780844","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e9edcf56-98e3-5922-9728-021f0a3b5e31","type":"url","category":"Network activity","to_ids":true,"value":"http://192.144.232.209:4433","comment":"https://x.com/drb_ra/status/1950124346506084380","timestamp":"1753780850","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"04cf507d-9591-5154-b567-c543c13a7078","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.144.232.209","comment":"https://x.com/drb_ra/status/1950124346506084380","timestamp":"1753780850","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c103011-0a4f-55f1-b79e-da786bc75447","type":"url","category":"Network activity","to_ids":true,"value":"http://39.100.73.141:80","comment":"https://x.com/drb_ra/status/1950124371395190919","timestamp":"1753780856","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e17098f-65c9-5c61-81db-1425fbee22b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.100.73.141","comment":"https://x.com/drb_ra/status/1950124371395190919","timestamp":"1753780856","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"edbeb946-0505-57b8-a14f-7b00c1784e60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.142.19.208","comment":"https://x.com/drb_ra/status/1950124395357196453","timestamp":"1753780862","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"327a9bec-daa4-5818-bef6-8e7fa827cb3d","type":"url","category":"Network activity","to_ids":true,"value":"http://43.142.19.208:8888","comment":"https://x.com/drb_ra/status/1950124395357196453","timestamp":"1753780862","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a823feba-7d63-5669-85ad-d95d8a6bc2b7","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.150.197:7443","comment":"https://x.com/drb_ra/status/1950124420212691281","timestamp":"1753780867","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0be1c01d-6bc5-50aa-896d-b8071225a5de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.27.168.31","comment":"https://x.com/drb_ra/status/1950124445617516848","timestamp":"1753780874","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"577ccf61-8230-5176-b937-dfd3e6332118","type":"url","category":"Network activity","to_ids":true,"value":"http://175.27.168.31:2222","comment":"https://x.com/drb_ra/status/1950124445617516848","timestamp":"1753780874","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c2049fb-53a1-58ab-bdab-893bc67153ab","type":"url","category":"Network activity","to_ids":true,"value":"https://175.27.168.31/api/v1/get","comment":"https://x.com/drb_ra/status/1950124445617516848","timestamp":"1753780874","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b322d14c-e308-5743-b9e5-2abdc3799bc4","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.62.170:7777","comment":"https://x.com/drb_ra/status/1950124470720507991","timestamp":"1753780880","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"130c8f28-b159-5f94-8754-01f2da056a8c","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.100.162:7011","comment":"https://x.com/drb_ra/status/1950124494175035807","timestamp":"1753780885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"49b7908b-0a53-5ca6-beff-f333601fa65c","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.150.197:9443","comment":"https://x.com/drb_ra/status/1950124521207324712","timestamp":"1753780892","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c9529fc-b565-5ad2-bc7d-d92c028f17e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.150.197","comment":"https://x.com/drb_ra/status/1950124521207324712","timestamp":"1753780892","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1d419b78-fed4-565d-ac8d-7156d395f535","type":"url","category":"Network activity","to_ids":true,"value":"http://3.87.72.135:443","comment":"https://x.com/drb_ra/status/1950124545274220827","timestamp":"1753780897","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"b5612501-eac7-58d1-91a6-3c9c4e79c204","type":"url","category":"Network activity","to_ids":true,"value":"http://3.87.72.135:80","comment":"https://x.com/drb_ra/status/1950124568464531556","timestamp":"1753780903","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"690799e2-0810-527a-a8b0-a3e18cdbd09b","type":"url","category":"Network activity","to_ids":true,"value":"http://83.166.242.24:11601","comment":"https://x.com/drb_ra/status/1950128075074593141","timestamp":"1753781739","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6adcb957-e1f6-5f0b-9a25-1e451d0c9877","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.166.242.24","comment":"https://x.com/drb_ra/status/1950128075074593141","timestamp":"1753781739","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b6c769d6-83dc-5f19-9160-8ac6172e9ca8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.49.81","comment":"https://x.com/drb_ra/status/1950128213931233490","timestamp":"1753781772","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7cf15902-f88f-5d80-b06d-8fc6114737b6","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.49.81:1987","comment":"https://x.com/drb_ra/status/1950128213931233490","timestamp":"1753781772","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"48010b18-f2b1-54f7-89bd-524dfa14db42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.132.32","comment":"https://x.com/drb_ra/status/1950128352175559041","timestamp":"1753781805","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c1cffc50-e8bd-54bd-b042-73c563363ec5","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.132.32:2404","comment":"https://x.com/drb_ra/status/1950128352175559041","timestamp":"1753781805","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a2edc410-f749-5aea-a1c0-49b6075a2565","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.49.235","comment":"https://x.com/drb_ra/status/1950128490092609831","timestamp":"1753781838","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"ade73285-e569-5d7f-83af-145c5a9b642f","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.49.235:3232","comment":"https://x.com/drb_ra/status/1950128490092609831","timestamp":"1753781838","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"db738f54-08b7-56de-9ae6-422d9f5e8950","type":"url","category":"Network activity","to_ids":true,"value":"http://3.76.34.46:34341","comment":"https://x.com/drb_ra/status/1950128628039036962","timestamp":"1753781871","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"86cd06dc-b50f-5fb1-adf3-9a4b5d7d33b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.24.71.107","comment":"https://x.com/drb_ra/status/1950128767260651875","timestamp":"1753781904","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ab5caaf6-8690-5fef-842e-d1fe58469736","type":"url","category":"Network activity","to_ids":true,"value":"http://16.24.71.107:21842","comment":"https://x.com/drb_ra/status/1950128767260651875","timestamp":"1753781904","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6f427859-9786-5279-a68b-3f9ad24ca96b","type":"url","category":"Network activity","to_ids":true,"value":"http://139.64.25.160:443","comment":"https://x.com/drb_ra/status/1950128905307717846","timestamp":"1753781937","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8492b056-727b-55c0-8792-f6264bcf3383","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.64.25.160","comment":"https://x.com/drb_ra/status/1950128905307717846","timestamp":"1753781937","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"24f51758-b7ec-5def-ac1c-d8aa9614542a","type":"url","category":"Network activity","to_ids":true,"value":"http://4.216.156.191:3333","comment":"https://x.com/drb_ra/status/1950129044093042926","timestamp":"1753781970","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"15b35930-5f51-580a-b0e8-b4bd364d97fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.83.47","comment":"https://x.com/drb_ra/status/1950129181498449976","timestamp":"1753782003","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"f0cae004-17e1-508b-a7a4-7d648a1a4587","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.83.47:8888","comment":"https://x.com/drb_ra/status/1950129181498449976","timestamp":"1753782003","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7652c0a0-598b-5d92-b523-bc77b7028e57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.16.196","comment":"https://x.com/drb_ra/status/1950129319419797991","timestamp":"1753782036","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"ed1ae98c-caa9-5fed-8736-7e76078b7fd8","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.16.196:443","comment":"https://x.com/drb_ra/status/1950129319419797991","timestamp":"1753782036","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"32290f76-e9fe-5d9d-9a00-e59722c5c8c3","type":"url","category":"Network activity","to_ids":true,"value":"http://176.9.163.47:10443","comment":"https://x.com/drb_ra/status/1950129457756352658","timestamp":"1753782069","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"18f2bcbb-bfc0-5072-86be-25d4cf608c14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.9.163.47","comment":"https://x.com/drb_ra/status/1950129457756352658","timestamp":"1753782069","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"fd99b746-1c4e-5649-8c2a-d6220013bfaa","type":"url","category":"Network activity","to_ids":true,"value":"https://sublocacaorj.com/dow/update/silk/ito/?zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1950129562202812669","timestamp":"1753782093","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddebd0ca-a1de-52a2-99a5-bce1f549c17c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.167.168.55","comment":"https://x.com/romonlyht/status/1950129562202812669","timestamp":"1753782093","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f6cf39fe-4f58-5cd7-8d2a-eba78163c3c0","type":"url","category":"Network activity","to_ids":true,"value":"https://sublocacaorj.com/dow/update/silk/ito/system.php?praga=87009f7ef17fa8e9001b96af7a1ebbd4&pid=87009f7ef17fa8e9001b96af7a1ebbd4&framework87009f7ef17fa8e9001b96af7a1ebbd4=87009f7ef17fa8e9001b96af7a1ebbd4&zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1950129565780890104","timestamp":"1753782094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c17cd9e2-0cd9-5fd6-970e-153f84888883","type":"domain","category":"Network activity","to_ids":true,"value":"sublocacaorj.com","comment":"https://x.com/romonlyht/status/1950129568393691564","timestamp":"1753782095","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e9edf0c-cafe-511a-91d9-b335e5cabff7","type":"url","category":"Network activity","to_ids":true,"value":"https://sublocacaorj.com/dow/update/silk/ito/auth.php","comment":"https://x.com/romonlyht/status/1950129568393691564","timestamp":"1753782095","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"960c3e4b-7c5a-590e-a310-c5a74904a805","type":"md5","category":"Payload delivery","to_ids":true,"value":"87009f7ef17fa8e9001b96af7a1ebbd4","comment":"https://x.com/romonlyht/status/1950129568393691564","timestamp":"1753782095","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9053dd20-0b03-5f5a-964e-46a04f6a8a15","type":"url","category":"Network activity","to_ids":true,"value":"http://138.201.85.33:8081","comment":"https://x.com/drb_ra/status/1950129597304971556","timestamp":"1753782102","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"49d20897-4f20-570e-b859-b9e91073f9ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.201.85.33","comment":"https://x.com/drb_ra/status/1950129597304971556","timestamp":"1753782102","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"35c53035-f37c-5d66-bfc6-38be4d7f4281","type":"url","category":"Network activity","to_ids":true,"value":"http://139.177.206.95:443","comment":"https://x.com/drb_ra/status/1950129736446881911","timestamp":"1753782135","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c5c397b9-a356-5bbd-b48a-8340d1a20449","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.177.206.95","comment":"https://x.com/drb_ra/status/1950129736446881911","timestamp":"1753782135","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c8bea925-8ad8-5f06-9658-0440d26376b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.50.88.4","comment":"https://x.com/drb_ra/status/1950129874095554857","timestamp":"1753782168","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"d738960c-98b2-5684-98fc-f5db787ede2e","type":"url","category":"Network activity","to_ids":true,"value":"http://74.50.88.4:8080","comment":"https://x.com/drb_ra/status/1950129874095554857","timestamp":"1753782168","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"c380d89e-1f53-5796-8744-9dc3dd931c00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.153.72.85","comment":"https://x.com/drb_ra/status/1950130012159394302","timestamp":"1753782201","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b9dbfd5e-4d76-55fb-a78f-df43c49e0a60","type":"url","category":"Network activity","to_ids":true,"value":"http://23.153.72.85:8881","comment":"https://x.com/drb_ra/status/1950130012159394302","timestamp":"1753782201","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a9c811c1-9820-5b5d-8ea9-9915c2806b6b","type":"url","category":"Network activity","to_ids":true,"value":"https://kaido.run/Webmail/1/Webmail/webmail.php?email=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1950130015091208275","timestamp":"1753782201","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a20d641-7fff-5ee2-9239-497c48e29582","type":"domain","category":"Network activity","to_ids":true,"value":"kaido.run","comment":"https://x.com/romonlyht/status/1950130015091208275","timestamp":"1753782201","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0df8c00e-7c67-5300-9726-698d3977f2d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.208.66.189","comment":"https://x.com/romonlyht/status/1950130015091208275","timestamp":"1753782201","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f1791c69-ee30-597d-885f-305fdc0c1aec","type":"domain","category":"Network activity","to_ids":true,"value":"coolhuntershop.com","comment":"https://x.com/romonlyht/status/1950130017884590525","timestamp":"1753782202","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"446dc62b-b1d5-530f-8179-659b09c82afb","type":"url","category":"Network activity","to_ids":true,"value":"https://coolhuntershop.com/wp-admin/loginn.php","comment":"https://x.com/romonlyht/status/1950130017884590525","timestamp":"1753782202","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51707a79-b6e6-5da1-ba0b-66a371ace0b1","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.236.16:7443","comment":"https://x.com/drb_ra/status/1950130149308891514","timestamp":"1753782233","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"91b7b50a-1220-5fe7-8a36-dacf8a1e3553","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.236.16","comment":"https://x.com/drb_ra/status/1950130149308891514","timestamp":"1753782233","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"52617585-cb5c-500c-ba00-6722348e0dae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.93.5.173","comment":"https://x.com/drb_ra/status/1950130286177529968","timestamp":"1753782266","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b2292fc2-c810-5e1b-a0e3-0f26461559df","type":"url","category":"Network activity","to_ids":true,"value":"http://147.93.5.173:443","comment":"https://x.com/drb_ra/status/1950130286177529968","timestamp":"1753782266","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cbe808f6-4a60-5e79-ae40-23c2b26d4cea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.201.31","comment":"https://x.com/skocherhan/status/1950132305613209931","timestamp":"1753782748","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0519400-98f3-5ba6-a699-c856d35fdbd0","type":"url","category":"Network activity","to_ids":true,"value":"https://l5tps6.top/sbeni3s","comment":"https://x.com/skocherhan/status/1950132305613209931","timestamp":"1753782748","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5574cbf-c95d-5bc8-9a31-691a762fcbf4","type":"domain","category":"Network activity","to_ids":true,"value":"l5tps6.top","comment":"https://x.com/skocherhan/status/1950132305613209931","timestamp":"1753782748","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3044b941-1189-5aae-9241-41e37a4c271c","type":"url","category":"Network activity","to_ids":true,"value":"https://l5tps6.top/sbeni3s/","comment":"https://x.com/skocherhan/status/1950132305613209931","timestamp":"1753782748","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"649dbbc6-d454-51e6-a08e-ef317ca3461b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.60.17:443","comment":"https://x.com/drb_ra/status/1950149187070271545","timestamp":"1753786772","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc10be5d-971d-5a72-af97-4cd5bc18b491","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.60.17","comment":"https://x.com/drb_ra/status/1950149187070271545","timestamp":"1753786772","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dcec09cc-115e-5337-afff-65b95ecd2f07","type":"domain","category":"Network activity","to_ids":true,"value":"repermaiec.weebly.com","comment":"https://x.com/urldna_bot/status/1950164442173378883","timestamp":"1753790409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"701a7049-acff-5235-bce7-149aab6de1cd","type":"url","category":"Network activity","to_ids":true,"value":"https://repermaiec.weebly.com","comment":"https://x.com/urldna_bot/status/1950164442173378883","timestamp":"1753790409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a3b0d811-4ca9-5846-9f11-062c20a8de26","type":"domain","category":"Network activity","to_ids":true,"value":"server-web-cdn.nefixeg373.workers.dev","comment":"https://x.com/drb_ra/status/1950171603729371518","timestamp":"1753792117","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"df5544a7-6a12-59a4-bc40-96949a54a415","type":"url","category":"Network activity","to_ids":true,"value":"http://server-web-cdn.nefixeg373.workers.dev","comment":"https://x.com/drb_ra/status/1950171603729371518","timestamp":"1753792117","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d9600fd2-91f1-5a3d-9712-81bf033fb97f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.42.145:80","comment":"https://x.com/drb_ra/status/1950171603729371518","timestamp":"1753792117","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0d22fa87-6593-5e1e-93d1-2c6f82411302","type":"domain","category":"Network activity","to_ids":true,"value":"usalall11.weebly.com","comment":"https://x.com/urldna_bot/status/1950194626087792812","timestamp":"1753797606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c57e0554-b0af-534b-9bde-8a0b97297a7b","type":"url","category":"Network activity","to_ids":true,"value":"https://usalall11.weebly.com","comment":"https://x.com/urldna_bot/status/1950194626087792812","timestamp":"1753797606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a1da7c42-bb9c-5932-affe-aec23eb94034","type":"domain","category":"Network activity","to_ids":true,"value":"peoplesbkmo.weebly.com","comment":"https://x.com/urldna_bot/status/1950224839869857887","timestamp":"1753804809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1df95ccf-422e-55bd-9953-11b864b11893","type":"url","category":"Network activity","to_ids":true,"value":"https://peoplesbkmo.weebly.com","comment":"https://x.com/urldna_bot/status/1950224839869857887","timestamp":"1753804809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c327bec9-92dd-53cd-a391-872b5a12c027","type":"md5","category":"Payload delivery","to_ids":true,"value":"af084c9a9c19c7353d313c744bf95c01","comment":"https://x.com/skocherhan/status/1950254961801220235","timestamp":"1753811991","distribution":"5"},{"uuid":"ba5593fe-bdc1-5fc7-923b-a193ad1752bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.214.58.8","comment":"https://x.com/skocherhan/status/1950254961801220235","timestamp":"1753811991","distribution":"5"},{"uuid":"df3a689d-aa7a-5954-a225-99196d6dae22","type":"url","category":"Network activity","to_ids":true,"value":"http://88.214.58.8:4782","comment":"https://x.com/skocherhan/status/1950254961801220235","timestamp":"1753811991","distribution":"5"},{"uuid":"8dfda74c-7c83-55af-992c-3d19423b34d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.83.123","comment":"https://x.com/drb_ra/status/1950266500239282416","timestamp":"1753814742","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"289b2eee-b448-538e-9642-7a4595b5be18","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.83.123:443","comment":"https://x.com/drb_ra/status/1950266500239282416","timestamp":"1753814742","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"406d87b6-2e8a-5cd8-b4ce-b46797db87f4","type":"url","category":"Network activity","to_ids":true,"value":"http://16.176.209.90:443","comment":"https://x.com/drb_ra/status/1950266637493686323","timestamp":"1753814775","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5130713d-043d-51db-9c4b-26cc482c26ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.176.209.90","comment":"https://x.com/drb_ra/status/1950266637493686323","timestamp":"1753814775","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2732ba85-1868-5d3d-be1f-04267cf62dcd","type":"url","category":"Network activity","to_ids":true,"value":"http://78.181.216.57:222","comment":"https://x.com/drb_ra/status/1950267281491247507","timestamp":"1753814928","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f4cd5307-ea63-5732-8ba5-e291eebd9e68","type":"url","category":"Network activity","to_ids":true,"value":"http://78.181.216.57:3000","comment":"https://x.com/drb_ra/status/1950267419169038722","timestamp":"1753814961","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"82ed275c-2956-5976-9116-42ce0191b6f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.181.216.57","comment":"https://x.com/drb_ra/status/1950267419169038722","timestamp":"1753814961","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f190eb5e-abf8-50ae-91b8-d8d59495ddeb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.6.236","comment":"https://x.com/drb_ra/status/1950267557703012717","timestamp":"1753814994","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"460f8209-3319-57ee-a736-ae703f818559","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.6.236:8808","comment":"https://x.com/drb_ra/status/1950267557703012717","timestamp":"1753814994","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e4cb3865-f4bb-52bb-8884-5d75545e1176","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.85.116","comment":"https://x.com/drb_ra/status/1950267694319632804","timestamp":"1753815027","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"12b1e7cb-7fb8-5520-bee3-3ae4c33e6840","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.85.116:5000","comment":"https://x.com/drb_ra/status/1950267694319632804","timestamp":"1753815027","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"abbd25ae-6774-59a4-92ae-eaa3c2e5ed58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.65.129.136","comment":"https://x.com/drb_ra/status/1950267833876648318","timestamp":"1753815060","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dcd1a47a-4d10-54d2-84c6-cfc51b649db7","type":"url","category":"Network activity","to_ids":true,"value":"http://159.65.129.136:25","comment":"https://x.com/drb_ra/status/1950267833876648318","timestamp":"1753815060","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"749826c8-cd94-5527-aa57-cbc101372b13","type":"url","category":"Network activity","to_ids":true,"value":"http://52.18.205.240:80","comment":"https://x.com/drb_ra/status/1950267971168776505","timestamp":"1753815093","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"27acc0ac-ae03-5bea-b453-c8e6612487d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.18.205.240","comment":"https://x.com/drb_ra/status/1950267971168776505","timestamp":"1753815093","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d249b236-1933-5412-a69b-fcb74d6f695a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.105.187.205:443","comment":"https://x.com/drb_ra/status/1950268108150550935","timestamp":"1753815125","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7b5de9cc-c4be-59c4-a49d-e131617808c4","type":"url","category":"Network activity","to_ids":true,"value":"http://149.202.248.199:587","comment":"https://x.com/drb_ra/status/1950268245249761596","timestamp":"1753815158","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0d5d3332-4640-5bfe-b129-ca32f74cb251","type":"url","category":"Network activity","to_ids":true,"value":"http://149.202.248.199:25","comment":"https://x.com/drb_ra/status/1950268382659362894","timestamp":"1753815191","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"41489c92-207f-599e-ad52-bdf61975501a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.202.248.199","comment":"https://x.com/drb_ra/status/1950268382659362894","timestamp":"1753815191","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0ae560a1-7965-55ed-83c8-ba9357527706","type":"url","category":"Network activity","to_ids":true,"value":"http://12.53.37.87:16000","comment":"https://x.com/drb_ra/status/1950268521830613110","timestamp":"1753815224","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e9fc0bf2-5065-5308-a53b-9e8f5b1cc9a8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"12.53.37.87","comment":"https://x.com/drb_ra/status/1950268521830613110","timestamp":"1753815224","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"01557096-daa8-5202-bbd6-c11ab6cdaee7","type":"url","category":"Network activity","to_ids":true,"value":"http://154.12.83.175:8888","comment":"https://x.com/drb_ra/status/1950268660544917729","timestamp":"1753815257","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"d473ee40-7392-517a-872b-5c346dc2370d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.12.83.175","comment":"https://x.com/drb_ra/status/1950268660544917729","timestamp":"1753815257","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"0e431c6e-f738-5aa6-aa70-7fb06deac02c","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.25.174:443","comment":"https://x.com/drb_ra/status/1950268800131101123","timestamp":"1753815290","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"45cc598c-fd0e-53de-9eae-834ef5626578","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.25.174","comment":"https://x.com/drb_ra/status/1950268800131101123","timestamp":"1753815290","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ce60304a-7547-5d87-b12e-2172ede6e8ea","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.85.171:443","comment":"https://x.com/drb_ra/status/1950268936991256927","timestamp":"1753815323","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1d8af7c5-6a35-5197-849d-7a4ce5366f63","type":"url","category":"Network activity","to_ids":true,"value":"http://85.239.63.3:443","comment":"https://x.com/drb_ra/status/1950269075608776843","timestamp":"1753815356","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1e4c653b-0e8a-590d-86b9-faad2764f630","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.239.63.3","comment":"https://x.com/drb_ra/status/1950269075608776843","timestamp":"1753815356","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"188c68d4-4691-520b-a4a2-36e8a200a6c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.232.181.197","comment":"https://x.com/drb_ra/status/1950269213303550099","timestamp":"1753815389","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"592d22e2-6d60-57c2-8f1d-94023038e030","type":"url","category":"Network activity","to_ids":true,"value":"http://34.232.181.197:443","comment":"https://x.com/drb_ra/status/1950269213303550099","timestamp":"1753815389","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"63dc2526-75ca-5254-811b-e0f4dda5adbd","type":"url","category":"Network activity","to_ids":true,"value":"http://92.112.127.132:2053","comment":"https://x.com/drb_ra/status/1950269351313232211","timestamp":"1753815422","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"712b7dbb-425a-5213-a71a-3a3501e4a229","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.112.127.132","comment":"https://x.com/drb_ra/status/1950269351313232211","timestamp":"1753815422","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"39637f06-ad75-52e1-b5cd-7d80ecb1dfba","type":"url","category":"Network activity","to_ids":true,"value":"http://16.78.217.162:443","comment":"https://x.com/drb_ra/status/1950269489745915955","timestamp":"1753815455","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a2d85258-0347-5e51-8b82-3a87fc7a299b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.78.217.162","comment":"https://x.com/drb_ra/status/1950269489745915955","timestamp":"1753815455","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f6ad36b6-8d4f-5b19-87ff-7e476974a482","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.165.178:7443","comment":"https://x.com/drb_ra/status/1950269628288004283","timestamp":"1753815488","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bd15582f-77c7-5d05-a7dd-caaa698d322d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.165.178","comment":"https://x.com/drb_ra/status/1950269628288004283","timestamp":"1753815488","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"49f66828-476f-5566-bbf9-00ceec7faa79","type":"url","category":"Network activity","to_ids":true,"value":"http://178.15.47.110:80","comment":"https://x.com/drb_ra/status/1950270276387688642","timestamp":"1753815642","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d1ea4103-83bc-5379-acca-f78304dd8d02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.15.47.110","comment":"https://x.com/drb_ra/status/1950270276387688642","timestamp":"1753815642","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"495b0e2b-4ae7-5de2-a8aa-0d053e39e919","type":"url","category":"Network activity","to_ids":true,"value":"http://79.110.50.8:14305","comment":"https://x.com/drb_ra/status/1950270413562433815","timestamp":"1753815675","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a9a490e7-a953-5a87-ba3c-d75a1d53b47d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.110.50.8","comment":"https://x.com/drb_ra/status/1950270413562433815","timestamp":"1753815675","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8671c007-81a4-5beb-ab5a-010d76daa25a","type":"url","category":"Network activity","to_ids":true,"value":"http://179.13.0.116:2404","comment":"https://x.com/drb_ra/status/1950270553803075636","timestamp":"1753815708","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e60137c3-4e61-5258-9245-0b0eb12185bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.13.0.116","comment":"https://x.com/drb_ra/status/1950270553803075636","timestamp":"1753815708","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7be6a887-21d1-53af-a39e-d58eea45b5a1","type":"url","category":"Network activity","to_ids":true,"value":"http://155.254.24.175:58834","comment":"https://x.com/drb_ra/status/1950270691481161977","timestamp":"1753815741","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"749d7caf-6546-5750-871e-66c8bd23ea91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.254.24.175","comment":"https://x.com/drb_ra/status/1950270691481161977","timestamp":"1753815741","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"72a6ef11-bcbe-5012-b657-88cb42c5aee0","type":"url","category":"Network activity","to_ids":true,"value":"http://51.112.53.216:4443","comment":"https://x.com/drb_ra/status/1950270830174413305","timestamp":"1753815774","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"dc0a79db-292b-5780-83d6-78e4a4405223","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.112.53.216","comment":"https://x.com/drb_ra/status/1950270830174413305","timestamp":"1753815774","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a97e98ea-e110-583b-8173-a6d0af5812f8","type":"domain","category":"Network activity","to_ids":true,"value":"binancetlr.xyz","comment":"https://x.com/skocherhan/status/1950283621476020337","timestamp":"1753818824","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d5c0d11-893d-5cfb-bca8-840f23294692","type":"url","category":"Network activity","to_ids":true,"value":"http://binancetlr.xyz","comment":"https://x.com/skocherhan/status/1950283621476020337","timestamp":"1753818824","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"964470a1-d26d-5c54-8e50-e8ad40674ed3","type":"domain","category":"Network activity","to_ids":true,"value":"stndatt.weebly.com","comment":"https://x.com/urldna_bot/status/1950285224677441570","timestamp":"1753819206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"85068eca-f76f-51b1-a830-f159313501d7","type":"url","category":"Network activity","to_ids":true,"value":"https://stndatt.weebly.com","comment":"https://x.com/urldna_bot/status/1950285224677441570","timestamp":"1753819206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"57c73ea9-3487-53fd-82ab-a9d333f4c7f3","type":"domain","category":"Network activity","to_ids":true,"value":"ng0jw0rijs.bbk0ku.duckdns.org","comment":"https://x.com/skocherhan/status/1950285958257029330","timestamp":"1753819381","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"24f1fb71-0859-5635-96a4-cc1590d18351","type":"url","category":"Network activity","to_ids":true,"value":"http://ng0jw0rijs.bbk0ku.duckdns.org","comment":"https://x.com/skocherhan/status/1950285958257029330","timestamp":"1753819381","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce8bb46b-3bcf-529f-99c7-af29f0f2166b","type":"url","category":"Network activity","to_ids":true,"value":"http://103.99.210.5","comment":"https://x.com/skocherhan/status/1950285958257029330","timestamp":"1753819381","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"48822d7e-5b1a-5ce1-bfbe-c479658bb728","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.99.210.5","comment":"https://x.com/skocherhan/status/1950285958257029330","timestamp":"1753819381","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0301e461-e354-511a-97ba-f5c402cde41b","type":"domain","category":"Network activity","to_ids":true,"value":"ecttromjjh.duckdns.org","comment":"https://x.com/skocherhan/status/1950289582601490865","timestamp":"1753820245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c460eaa-a6f6-5991-a9dc-d62274e092ee","type":"url","category":"Network activity","to_ids":true,"value":"http://ecttromjjh.duckdns.org/ja/","comment":"https://x.com/skocherhan/status/1950289582601490865","timestamp":"1753820245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04ee3bc2-6624-5003-b78e-b21bae3355c4","type":"url","category":"Network activity","to_ids":true,"value":"http://103.80.134.11","comment":"https://x.com/skocherhan/status/1950289582601490865","timestamp":"1753820245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25121c29-6fe3-577a-a978-a7093dc38ca2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.80.134.11","comment":"https://x.com/skocherhan/status/1950289582601490865","timestamp":"1753820245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4fb95c8b-c18a-58cf-8001-67622b099727","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.39.50:8880","comment":"https://x.com/drb_ra/status/1950290203626684857","timestamp":"1753820393","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"44d91398-6791-555d-bbd0-3e7cd3e56c7d","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.39.50:2096","comment":"https://x.com/drb_ra/status/1950290342764278048","timestamp":"1753820427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f1ef0fe-97aa-54f9-afc2-3b97b033dca6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.39.50","comment":"https://x.com/drb_ra/status/1950290342764278048","timestamp":"1753820427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ecefd75a-fc32-5440-8593-3c0b9e762285","type":"url","category":"Network activity","to_ids":true,"value":"https://8.141.5.49/assets/login_guide.js","comment":"https://x.com/drb_ra/status/1950290481625158085","timestamp":"1753820460","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8497666c-d53e-5192-93da-36c2866569e7","type":"url","category":"Network activity","to_ids":true,"value":"http://8.141.5.49:10000","comment":"https://x.com/drb_ra/status/1950290481625158085","timestamp":"1753820460","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"58697125-ddc6-51eb-a266-a7adfe0d0964","type":"url","category":"Network activity","to_ids":true,"value":"http://31.210.50.205","comment":"https://x.com/threatquery/status/1950300311261712741","timestamp":"1753822803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"d387c3e9-275a-5612-8144-db3682232688","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.210.50.205","comment":"https://x.com/threatquery/status/1950300311261712741","timestamp":"1753822803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"25f50aa9-61a9-5c26-881e-afeb5ab2fd9c","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.85.116","comment":"https://x.com/threatquery/status/1950300314696815042","timestamp":"1753822804","distribution":"5","Tag":[{"name":"malware"},{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"55f59ab5-b848-52fe-9960-8267b323f4e6","type":"url","category":"Network activity","to_ids":true,"value":"http://95.138.160.116","comment":"https://x.com/threatquery/status/1950300313128174061","timestamp":"1753822804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"324dd652-18e5-5ad7-98f4-0dc25b382e59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.138.160.116","comment":"https://x.com/threatquery/status/1950300313128174061","timestamp":"1753822804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"e1edc0d8-f6c5-5744-8807-f740ed92e7b1","type":"domain","category":"Network activity","to_ids":true,"value":"mengovwebmaintenance.weebly.com","comment":"https://x.com/urldna_bot/status/1950315421384442240","timestamp":"1753826406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1417ff20-31fb-5902-ac4a-dacaf0ce9e59","type":"url","category":"Network activity","to_ids":true,"value":"https://mengovwebmaintenance.weebly.com","comment":"https://x.com/urldna_bot/status/1950315421384442240","timestamp":"1753826406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e04b7908-ba8a-5ae9-8a18-d5c7f0a15383","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-ement.ueclbnlvrt.cn","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54e7c324-c678-5d76-b911-0b7f464915af","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-ement.ueclbnlvrt.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2bd5845-36f8-59ea-8e7c-9c7861163e82","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-ndred.upaloop.cn","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56e7b541-1e52-59ca-8edf-6f8f9b2add82","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-ndred.upaloop.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2a2ac6fb-6782-5303-9eef-b538d76f80ff","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-sutin.ujienhouji.cn","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d027397b-9f9b-5414-8bd6-e01c4ae60de4","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-sutin.ujienhouji.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1950333017672847479","timestamp":"1753830601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31e10264-733f-5505-9ea9-8ab2b6f0c613","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-thinga.sudzby.cn","comment":"https://x.com/masaomi346/status/1950333500797911047","timestamp":"1753830716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b6817dd2-1f23-51e5-944d-09a413eb4c23","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-thinga.sudzby.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1950333500797911047","timestamp":"1753830716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f6b1b68e-b823-53ef-ad2a-73d92b08ba18","type":"domain","category":"Network activity","to_ids":true,"value":"dryskyholding.com","comment":"https://x.com/JangPr0/status/1950337034645885285","timestamp":"1753831559","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cb6cf9eb-cdcb-57ac-bf72-dd119a85f755","type":"url","category":"Network activity","to_ids":true,"value":"https://dryskyholding.com/wp-includes/js/common/inc/get.php","comment":"https://x.com/JangPr0/status/1950337034645885285","timestamp":"1753831559","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"46c0855b-d6da-55b7-a3b2-63e29361520e","type":"md5","category":"Payload delivery","to_ids":true,"value":"5a59b2fb4603062e2d469f51b0647a64","comment":"https://x.com/JangPr0/status/1950337034645885285","timestamp":"1753831559","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7a8b6cd9-596b-5d88-9065-251de1e3bc88","type":"domain","category":"Network activity","to_ids":true,"value":"mycciservicemail.weebly.com","comment":"https://x.com/urldna_bot/status/1950345627390394374","timestamp":"1753833607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fac79cdf-cceb-50c4-87c1-5d894b6ab1b3","type":"url","category":"Network activity","to_ids":true,"value":"https://mycciservicemail.weebly.com","comment":"https://x.com/urldna_bot/status/1950345627390394374","timestamp":"1753833607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"656cebe5-dd3f-5926-8abd-f20eac1ac499","type":"domain","category":"Network activity","to_ids":true,"value":"zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion","comment":"https://x.com/JRoosen/status/1950349377806995951","timestamp":"1753834502","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"758087bd-f534-501b-9f1f-01961e147ac3","type":"url","category":"Network activity","to_ids":true,"value":"http://zfytizegsze6uiswodhbaalyy5rawaytv2nzyzdkt3susbewviqqh7yd.onion/touchus.html","comment":"https://x.com/JRoosen/status/1950349377806995951","timestamp":"1753834502","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"6598e4a3-4aa5-533e-8b21-3fa44aef754d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8A0B41E965E66689E78CA36D3477CB0C","comment":"https://x.com/JRoosen/status/1950349377806995951","timestamp":"1753834502","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"8d63a578-0a9c-568d-9d1e-e572a884e1b7","type":"md5","category":"Payload delivery","to_ids":true,"value":"68BD43A00BA948F435ECBDD402914298","comment":"https://x.com/JRoosen/status/1950349377806995951","timestamp":"1753834502","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5b43a2b5-117b-5bad-8b36-d200252680d2","type":"domain","category":"Network activity","to_ids":true,"value":"ssobiglobenejp.weebly.com","comment":"https://x.com/masaomi346/status/1950359075797291045","timestamp":"1753836814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d1e8846-b781-5d8a-9cc0-733f4e2bea94","type":"url","category":"Network activity","to_ids":true,"value":"https://ssobiglobenejp.weebly.com","comment":"https://x.com/masaomi346/status/1950359075797291045","timestamp":"1753836814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cd2477a-7880-5908-a30e-873ec9d3b234","type":"domain","category":"Network activity","to_ids":true,"value":"sgsmtp12.sgcloudhosting.com","comment":"https://x.com/skocherhan/status/1950370468747497872","timestamp":"1753839530","distribution":"5","Tag":[{"name":"Remcos"},{"name":"GuLoader"}]},{"uuid":"a7d6b617-f37e-5fb6-b40e-873ea990f4c9","type":"url","category":"Network activity","to_ids":true,"value":"http://sgsmtp12.sgcloudhosting.com","comment":"https://x.com/skocherhan/status/1950370468747497872","timestamp":"1753839530","distribution":"5","Tag":[{"name":"Remcos"},{"name":"GuLoader"}]},{"uuid":"6fbf9efb-42a7-531e-af62-6c8c45e255de","type":"domain","category":"Network activity","to_ids":true,"value":"beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion","comment":"https://x.com/fbgwls245/status/1950373718930444623","timestamp":"1753840305","distribution":"5"},{"uuid":"2e120a27-5a30-5e58-a4ee-e91db8accacb","type":"url","category":"Network activity","to_ids":true,"value":"http://beast6azu4f7fxjakiayhnssybibsgjnmy77a6duufqw5afjzfjhzuqd.onion","comment":"https://x.com/fbgwls245/status/1950373718930444623","timestamp":"1753840305","distribution":"5"},{"uuid":"212a13fe-f9b2-5345-9033-c836e797deed","type":"domain","category":"Network activity","to_ids":true,"value":"yy5670yxe.cc","comment":"https://x.com/urldna_bot/status/1950375819240407368","timestamp":"1753840806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9961d7f9-b2c0-51e2-a7c7-2224173e49f7","type":"url","category":"Network activity","to_ids":true,"value":"https://www.yy5670yxe.cc","comment":"https://x.com/urldna_bot/status/1950375819240407368","timestamp":"1753840806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3e0fc7c1-5d39-51a6-ae4d-24a8b8ab2ef1","type":"domain","category":"Network activity","to_ids":true,"value":"auth.sos.growvmark.com","comment":"https://x.com/masaomi346/status/1950377193680576996","timestamp":"1753841133","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab1bd8f3-fe62-506c-91cf-db5588d5de2b","type":"url","category":"Network activity","to_ids":true,"value":"https://www.auth.sos.growvmark.com","comment":"https://x.com/masaomi346/status/1950377193680576996","timestamp":"1753841133","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"730358db-ac39-52aa-994c-386306570e73","type":"md5","category":"Payload delivery","to_ids":true,"value":"7706c058d22910da05272d94f96ddc5a","comment":"https://x.com/suyog41/status/1950388154273583396","timestamp":"1753843747","distribution":"5"},{"uuid":"17e85bb4-1bcd-52fe-b64c-f0292ec87c20","type":"md5","category":"Payload delivery","to_ids":true,"value":"f89ff0b3a6469ce953cdcd53152fbfa2","comment":"https://x.com/suyog41/status/1950388154273583396","timestamp":"1753843747","distribution":"5"},{"uuid":"8e048bb0-5fa1-5608-aa30-e6876ef2f940","type":"md5","category":"Payload delivery","to_ids":true,"value":"8958868a9ad4c2f8335496c23c8a1ff1","comment":"https://x.com/suyog41/status/1950388154273583396","timestamp":"1753843747","distribution":"5"},{"uuid":"93b4b31a-27ed-56df-ab36-f73cb8bea55d","type":"md5","category":"Payload delivery","to_ids":true,"value":"53de31e1747b21f0762550ad2cac3b98","comment":"https://x.com/suyog41/status/1950388154273583396","timestamp":"1753843747","distribution":"5"},{"uuid":"238ad2fd-457f-5f86-bda4-792360955b0f","type":"md5","category":"Payload delivery","to_ids":true,"value":"0d027529c342e2ef2bc4d01b1d96a47c","comment":"https://x.com/suyog41/status/1950388154273583396","timestamp":"1753843747","distribution":"5"},{"uuid":"e00015a0-6e57-5003-988c-cb5b27dd2854","type":"domain","category":"Network activity","to_ids":true,"value":"indiagov.support","comment":"https://x.com/skocherhan/status/1950392043202658485","timestamp":"1753844674","distribution":"5"},{"uuid":"ed4ce401-0b19-5f7f-8e65-1657b182493e","type":"url","category":"Network activity","to_ids":true,"value":"http://indiagov.support","comment":"https://x.com/skocherhan/status/1950392043202658485","timestamp":"1753844674","distribution":"5"},{"uuid":"7e110847-9e03-5f2b-bd7c-b21fb8a95adf","type":"domain","category":"Network activity","to_ids":true,"value":"flixkart.xyz","comment":"https://x.com/skocherhan/status/1950394241370202291","timestamp":"1753845198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc6c1411-b2b7-5380-b83d-34010dfe0dc1","type":"url","category":"Network activity","to_ids":true,"value":"http://flixkart.xyz/cb/test650/","comment":"https://x.com/skocherhan/status/1950394241370202291","timestamp":"1753845198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"26a8ca02-1bfe-5206-b5e7-91ab2e8bd572","type":"domain","category":"Network activity","to_ids":true,"value":"americansourcebooks.com","comment":"https://x.com/skocherhan/status/1950394241370202291","timestamp":"1753845198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b2613b89-8d6a-5993-ad2d-ac0c9baa07c2","type":"url","category":"Network activity","to_ids":true,"value":"http://americansourcebooks.com/tamil/asdasd/lp1/tm/?fbclid","comment":"https://x.com/skocherhan/status/1950394241370202291","timestamp":"1753845198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1730b1f-4143-5d11-8fcc-b078c2fa7ef8","type":"domain","category":"Network activity","to_ids":true,"value":"pub-9d425aa9335c4307a502c0721d499bdd.r2.dev","comment":"https://x.com/urldna_bot/status/1950406022197121461","timestamp":"1753848007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1a636952-18dd-52b6-b0c8-977adfe666f7","type":"url","category":"Network activity","to_ids":true,"value":"http://pub-9d425aa9335c4307a502c0721d499bdd.r2.dev/7MSoutlook4.html","comment":"https://x.com/urldna_bot/status/1950406022197121461","timestamp":"1753848007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f1ade178-7f6b-5d2c-81de-fe3b83471134","type":"md5","category":"Payload delivery","to_ids":true,"value":"9d425aa9335c4307a502c0721d499bdd","comment":"https://x.com/urldna_bot/status/1950406022197121461","timestamp":"1753848007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a465d521-7ad5-5dc6-9422-9b2922ff58b3","type":"md5","category":"Payload delivery","to_ids":true,"value":"9ee94b23bbc51e7c0d0261fc581512b7","comment":"https://x.com/ReBensk/status/1950433691110609047","timestamp":"1753854603","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"2fd54225-9e10-5045-b6e5-2ecdf0616353","type":"md5","category":"Payload delivery","to_ids":true,"value":"9966193fa9fa9a0a165803d5ed89fe80","comment":"https://x.com/ReBensk/status/1950434591992590459","timestamp":"1753854818","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"52c930b9-af85-559a-a734-5907899931fd","type":"domain","category":"Network activity","to_ids":true,"value":"govappinfo.com","comment":"https://x.com/urldna_bot/status/1950436218757419225","timestamp":"1753855206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b49f0260-f424-509d-9496-e3fb7ea725bf","type":"url","category":"Network activity","to_ids":true,"value":"https://govappinfo.com","comment":"https://x.com/urldna_bot/status/1950436218757419225","timestamp":"1753855206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"29bcac21-b422-5933-a0ed-e1640f524d68","type":"domain","category":"Network activity","to_ids":true,"value":"privatebin.net","comment":"https://x.com/BlinkzSec/status/1950437415472287763","timestamp":"1753855491","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ec5fa47-3a9e-5b54-a3c9-cd1bfefd585d","type":"url","category":"Network activity","to_ids":true,"value":"https://privatebin.net/?7492f60e91c53722#C6H7igpFctz3a5z6BsGs7bNMZhFfXefazeriDeMkohLT","comment":"https://x.com/BlinkzSec/status/1950437415472287763","timestamp":"1753855491","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60c3d6bc-ac15-556d-9339-8f2284419b72","type":"domain","category":"Network activity","to_ids":true,"value":"xx.xinxiangnancs.com","comment":"https://x.com/drb_ra/status/1950441206921449732","timestamp":"1753856395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"455f9dd1-5977-59d5-b6b0-b6eb46238618","type":"url","category":"Network activity","to_ids":true,"value":"https://xx.xinxiangnancs.com/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1950441206921449732","timestamp":"1753856395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b0ab7d7d-d123-586a-b81e-870ee1d3be7f","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.39.50:8443","comment":"https://x.com/drb_ra/status/1950441206921449732","timestamp":"1753856395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f1ef0fe-97aa-54f9-afc2-3b97b033dca6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.39.50","comment":"https://x.com/drb_ra/status/1950441206921449732","timestamp":"1753856395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6948264d-4f6c-5f88-b02a-e25ba46205e0","type":"url","category":"Network activity","to_ids":true,"value":"https://183.230.68.139/hrmregister/corpTrial/get_permission","comment":"https://x.com/drb_ra/status/1950441350480208215","timestamp":"1753856430","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22734fa7-e38d-53c8-b136-9952f7af09a6","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.9.167:443","comment":"https://x.com/drb_ra/status/1950441350480208215","timestamp":"1753856430","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c509849b-3469-5ced-b6d3-37e5bcf1c536","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.9.167","comment":"https://x.com/drb_ra/status/1950441350480208215","timestamp":"1753856430","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8a205cf0-fe97-5ff6-9219-cf75751d354e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"183.230.68.139","comment":"https://x.com/drb_ra/status/1950441350480208215","timestamp":"1753856430","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0729a1a7-6328-5bbd-9d8e-d39d16324e37","type":"url","category":"Network activity","to_ids":true,"value":"http://50.232.172.114:443","comment":"https://x.com/drb_ra/status/1950448084082729149","timestamp":"1753858035","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"438b667e-f994-502e-93f2-e6e66423ee48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.232.172.114","comment":"https://x.com/drb_ra/status/1950448084082729149","timestamp":"1753858035","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2fdae9af-8859-5ff3-b0d0-c6d5e121e93e","type":"url","category":"Network activity","to_ids":true,"value":"http://64.4.225.218:443","comment":"https://x.com/drb_ra/status/1950448222788329517","timestamp":"1753858068","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"480fbbfa-2301-5935-933b-9709ae32a78f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.4.225.218","comment":"https://x.com/drb_ra/status/1950448222788329517","timestamp":"1753858068","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"e11c113d-0410-5a92-8d73-c7b5e017505d","type":"url","category":"Network activity","to_ids":true,"value":"http://118.161.7.158:443","comment":"https://x.com/drb_ra/status/1950448361938547001","timestamp":"1753858101","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1a7751c1-6528-5383-b09d-182ab274cb4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.161.7.158","comment":"https://x.com/drb_ra/status/1950448361938547001","timestamp":"1753858101","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"b5c4136e-8338-58cd-9d5e-77ca7d71030a","type":"url","category":"Network activity","to_ids":true,"value":"http://70.31.125.197:2078","comment":"https://x.com/drb_ra/status/1950448500115931330","timestamp":"1753858134","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"c479bbea-711c-58fc-a962-16a593c1d164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.31.125.197","comment":"https://x.com/drb_ra/status/1950448500115931330","timestamp":"1753858134","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1dd10975-ad49-570d-8001-62b7054f2978","type":"url","category":"Network activity","to_ids":true,"value":"http://5.230.70.57:5555","comment":"https://x.com/drb_ra/status/1950448638464807369","timestamp":"1753858167","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"19a38394-5f34-5cdb-aa0e-3c9a6aa2374d","type":"url","category":"Network activity","to_ids":true,"value":"http://13.37.250.113:443","comment":"https://x.com/drb_ra/status/1950448776964923513","timestamp":"1753858200","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"266b5e24-706c-5228-a2ca-9ab99c960e00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.37.250.113","comment":"https://x.com/drb_ra/status/1950448776964923513","timestamp":"1753858200","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c9253c0c-7c23-533e-9d85-86e00d17dce6","type":"url","category":"Network activity","to_ids":true,"value":"http://45.31.209.24:8080","comment":"https://x.com/drb_ra/status/1950448915469230129","timestamp":"1753858233","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"49971a42-6404-5b15-bbb1-9a7eb5671047","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.31.209.24","comment":"https://x.com/drb_ra/status/1950448915469230129","timestamp":"1753858233","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"378cb572-aa75-5538-83f8-1095b0fe9e44","type":"url","category":"Network activity","to_ids":true,"value":"http://80.149.60.139:443","comment":"https://x.com/drb_ra/status/1950449052895604844","timestamp":"1753858266","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"9aafcd99-3565-5d10-8506-51c08027b4b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.149.60.139","comment":"https://x.com/drb_ra/status/1950449052895604844","timestamp":"1753858266","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"04cfdea6-8cb6-5858-bd90-0974eb42173f","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.209.212:443","comment":"https://x.com/drb_ra/status/1950449191156842748","timestamp":"1753858299","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"145dc792-81f6-5d83-b2d6-395e39ae4c59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.83.209.212","comment":"https://x.com/drb_ra/status/1950449191156842748","timestamp":"1753858299","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5dc0bbcf-260d-56fd-9877-84a0add27979","type":"url","category":"Network activity","to_ids":true,"value":"http://4.230.4.109:443","comment":"https://x.com/drb_ra/status/1950449329396686994","timestamp":"1753858332","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"da9af579-7424-51f2-97e2-aba04919ff8e","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.97.159:7443","comment":"https://x.com/drb_ra/status/1950449468546908222","timestamp":"1753858365","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"4718f1d9-6558-570f-a9c2-3d852172aee4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.233.97.159","comment":"https://x.com/drb_ra/status/1950449468546908222","timestamp":"1753858365","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6f4d35bd-0da1-54f4-b361-a715b4e026b5","type":"url","category":"Network activity","to_ids":true,"value":"http://159.65.155.15:7443","comment":"https://x.com/drb_ra/status/1950449606636052840","timestamp":"1753858398","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"bd0ec3fb-14e2-5c84-8e73-e4dc532b0d41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.65.155.15","comment":"https://x.com/drb_ra/status/1950449606636052840","timestamp":"1753858398","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f08d7167-d4e3-5897-bde6-66610a7f5bef","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.207:31337","comment":"https://x.com/drb_ra/status/1950449744125243565","timestamp":"1753858431","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7cb4efd5-f468-5fd1-9bab-478a6cb84f4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.207","comment":"https://x.com/drb_ra/status/1950449744125243565","timestamp":"1753858431","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8b06d456-23fd-596b-af7a-6db9957b2310","type":"url","category":"Network activity","to_ids":true,"value":"http://185.177.239.38:31337","comment":"https://x.com/drb_ra/status/1950449882533183544","timestamp":"1753858464","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b7927f0f-0922-5951-8d1a-ddedb8a13c53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.177.239.38","comment":"https://x.com/drb_ra/status/1950449882533183544","timestamp":"1753858464","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"508de0be-e496-5d70-991e-cd2cdf3e022f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.104.110.213:443","comment":"https://x.com/drb_ra/status/1950450020903506398","timestamp":"1753858497","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a670b65d-b820-5275-a494-f59a61666867","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.104.110.213","comment":"https://x.com/drb_ra/status/1950450020903506398","timestamp":"1753858497","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"74bbc4cb-a3de-586c-b679-e31908cb21c9","type":"url","category":"Network activity","to_ids":true,"value":"http://161.97.135.253:31337","comment":"https://x.com/drb_ra/status/1950450158916833663","timestamp":"1753858530","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"98d88259-91aa-5a65-9243-104f354fa5df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.97.135.253","comment":"https://x.com/drb_ra/status/1950450158916833663","timestamp":"1753858530","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"69b6c87f-2908-5671-ad90-4a97f7780319","type":"url","category":"Network activity","to_ids":true,"value":"http://49.13.51.178:31337","comment":"https://x.com/drb_ra/status/1950450296817107011","timestamp":"1753858563","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"63c54965-1413-557d-abbf-ce63605119ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.13.51.178","comment":"https://x.com/drb_ra/status/1950450296817107011","timestamp":"1753858563","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7d9b601f-9b25-5c34-ab53-913fa9b0e6e2","type":"url","category":"Network activity","to_ids":true,"value":"http://91.236.116.22:80","comment":"https://x.com/drb_ra/status/1950450942270160905","timestamp":"1753858716","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6a464d05-1a6c-5e68-97e2-de7e435c9b52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.236.116.22","comment":"https://x.com/drb_ra/status/1950450942270160905","timestamp":"1753858716","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"09cc0c58-cfba-5707-a1a3-b8f36f30f670","type":"url","category":"Network activity","to_ids":true,"value":"http://3.104.135.43:8080","comment":"https://x.com/drb_ra/status/1950451080740884851","timestamp":"1753858749","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"0e2e7931-602c-5fc5-80d4-8a96eb030f79","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.118.181:2404","comment":"https://x.com/drb_ra/status/1950451219442651499","timestamp":"1753858783","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"658ef650-71d1-5663-8208-94e0e369a5f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.118.181","comment":"https://x.com/drb_ra/status/1950451219442651499","timestamp":"1753858783","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a82cb646-5336-5985-a2d6-1d692d65e7b5","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.40:2404","comment":"https://x.com/drb_ra/status/1950451358026322139","timestamp":"1753858816","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b5caeffb-9228-5838-b987-59cdee739487","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.40","comment":"https://x.com/drb_ra/status/1950451358026322139","timestamp":"1753858816","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9ad8d385-0c03-533c-9073-27aea9cebe37","type":"url","category":"Network activity","to_ids":true,"value":"http://45.145.228.142:3232","comment":"https://x.com/drb_ra/status/1950451498837582160","timestamp":"1753858849","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"04f18651-6fcc-5450-b42c-e202efd04f98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.145.228.142","comment":"https://x.com/drb_ra/status/1950451498837582160","timestamp":"1753858849","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"98f9a293-71d2-5bf1-bf1d-e2008b2849d2","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.159.70:3232","comment":"https://x.com/drb_ra/status/1950451638386512288","timestamp":"1753858882","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"c38243d5-f54f-58af-85d5-e9cb91f9880d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.159.70","comment":"https://x.com/drb_ra/status/1950451638386512288","timestamp":"1753858882","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"9efb2a5c-ac3a-5018-9f6b-8de103d3a160","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.199.160:8080","comment":"https://x.com/drb_ra/status/1950451776701764058","timestamp":"1753858915","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d93fc055-5ada-5ab0-b0f1-604600814f50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.199.160","comment":"https://x.com/drb_ra/status/1950451776701764058","timestamp":"1753858915","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c28a1f06-da6f-5c20-82f3-a1d11f9db612","type":"url","category":"Network activity","to_ids":true,"value":"http://63.176.95.110:20001","comment":"https://x.com/drb_ra/status/1950451915856499016","timestamp":"1753858949","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4265b126-6f8d-501b-988f-935322504c35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.176.95.110","comment":"https://x.com/drb_ra/status/1950451915856499016","timestamp":"1753858949","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"75e0fcf8-368e-5780-a689-aeedadc55b25","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.225.38:5061","comment":"https://x.com/drb_ra/status/1950452054813450660","timestamp":"1753858982","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0a3adf84-3de2-5bd0-adfb-70a6a483f0b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.225.38","comment":"https://x.com/drb_ra/status/1950452054813450660","timestamp":"1753858982","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cfcd9b06-808f-533e-9381-7c7db33faad8","type":"url","category":"Network activity","to_ids":true,"value":"http://18.231.172.205:1963","comment":"https://x.com/drb_ra/status/1950452194039218217","timestamp":"1753859015","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"83b8e7e5-35f2-5651-8edc-6e0b2bad3e08","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.231.172.205","comment":"https://x.com/drb_ra/status/1950452194039218217","timestamp":"1753859015","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"968e8d55-2f94-5787-9348-bff171fd3e41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.238.35.235:24551","comment":"https://x.com/drb_ra/status/1950452332480655491","timestamp":"1753859048","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"911516ff-ecf1-56fd-be6a-02537665e17e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.238.35.235","comment":"https://x.com/drb_ra/status/1950452332480655491","timestamp":"1753859048","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"73f0ea63-f7b9-5995-92c8-0057b5f21786","type":"url","category":"Network activity","to_ids":true,"value":"http://45.77.188.10:8888","comment":"https://x.com/drb_ra/status/1950452471542739084","timestamp":"1753859081","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"4ed0832f-21d7-579c-8fda-16b6c85ac5b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.77.188.10","comment":"https://x.com/drb_ra/status/1950452471542739084","timestamp":"1753859081","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"22906292-cee7-568d-8d19-3e6f7beee9fe","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:587","comment":"https://x.com/drb_ra/status/1950452610504212884","timestamp":"1753859114","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"94fbba11-0d4c-5d49-8463-b7917d60d241","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:465","comment":"https://x.com/drb_ra/status/1950452749566656965","timestamp":"1753859147","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"39c0cdcd-d7b4-5450-a81e-e219e3f9a3a0","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:443","comment":"https://x.com/drb_ra/status/1950452888443998361","timestamp":"1753859180","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"73d7e29c-6bda-5702-8f8c-927b115b0b0b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:80","comment":"https://x.com/drb_ra/status/1950453027556499715","timestamp":"1753859214","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9471f9de-e5b5-5a7c-8ae9-f3e4428f5a06","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:25","comment":"https://x.com/drb_ra/status/1950453165716918683","timestamp":"1753859247","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0b78a10d-3cea-5f8e-8e9c-a74879878c56","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.187.3:8443","comment":"https://x.com/drb_ra/status/1950453306595201041","timestamp":"1753859280","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ef9c1a60-c4fc-52e1-9039-07047fef821c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.187.3","comment":"https://x.com/drb_ra/status/1950453306595201041","timestamp":"1753859280","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4fa9e04e-ad13-5a80-9470-1937e5edbf8d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.122.146:80","comment":"https://x.com/drb_ra/status/1950453444478980297","timestamp":"1753859313","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"11a123f0-114e-5fd0-b10d-7c33ef909495","type":"url","category":"Network activity","to_ids":true,"value":"http://52.11.10.85:80","comment":"https://x.com/drb_ra/status/1950453583352066066","timestamp":"1753859346","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ede62e52-c2fc-5737-bac2-e5a00791e013","type":"url","category":"Network activity","to_ids":true,"value":"http://52.11.10.85:25","comment":"https://x.com/drb_ra/status/1950453721818943922","timestamp":"1753859379","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ee3cc571-f93f-5b24-9256-86fc6fbf67bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.11.10.85","comment":"https://x.com/drb_ra/status/1950453721818943922","timestamp":"1753859379","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"894e848c-da94-54fa-be03-df6982704631","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.162.135:80","comment":"https://x.com/drb_ra/status/1950453861094944971","timestamp":"1753859412","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"afdfe1ad-a9b1-5466-8fb1-2888c73ede07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.162.135","comment":"https://x.com/drb_ra/status/1950453861094944971","timestamp":"1753859412","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d85bee3e-ca64-5074-b237-9f3b9e842afa","type":"url","category":"Network activity","to_ids":true,"value":"http://3.144.26.0:25","comment":"https://x.com/drb_ra/status/1950453998630150285","timestamp":"1753859445","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e9830eb7-e6c6-5da7-ac7a-4197970d3a4a","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.9.57:8888","comment":"https://x.com/drb_ra/status/1950454137617076439","timestamp":"1753859478","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"aee674e5-78b5-5b56-ae85-ed7f7e06d41c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.9.57","comment":"https://x.com/drb_ra/status/1950454137617076439","timestamp":"1753859478","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"3064635b-e99a-59da-9323-7ed1faad5f8a","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.159.237:18088","comment":"https://x.com/drb_ra/status/1950454276733751514","timestamp":"1753859511","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"2600f970-2dc1-5b43-b789-c206be723664","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.159.237","comment":"https://x.com/drb_ra/status/1950454276733751514","timestamp":"1753859511","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"634e581c-2b8d-5e21-81a8-fae98544c1f2","type":"url","category":"Network activity","to_ids":true,"value":"http://124.222.81.246:8888","comment":"https://x.com/drb_ra/status/1950454416060141658","timestamp":"1753859545","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"b0632def-dce8-550a-b71d-2afe20c372e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.222.81.246","comment":"https://x.com/drb_ra/status/1950454416060141658","timestamp":"1753859545","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"f03548fe-849f-5ef6-bf94-e857d99443e3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.153.34.67:2000","comment":"https://x.com/drb_ra/status/1950454553654002034","timestamp":"1753859577","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"9380702b-2e4d-5a3d-a841-e68f4d05868f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.153.34.67","comment":"https://x.com/drb_ra/status/1950454553654002034","timestamp":"1753859577","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"6c999d03-6f94-538a-9d9d-a4d64ae2ecdf","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.43:1888","comment":"https://x.com/drb_ra/status/1950454693152637089","timestamp":"1753859611","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"3ba28549-07b0-59a7-b861-845c2a4e0efb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.43","comment":"https://x.com/drb_ra/status/1950454693152637089","timestamp":"1753859611","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"5360d7e8-025f-568b-8b33-500b6fc4cf66","type":"domain","category":"Network activity","to_ids":true,"value":"revdioaplomerd.weebly.com","comment":"https://x.com/urldna_bot/status/1950466424440303746","timestamp":"1753862408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"82649ca1-f634-5341-aed0-7f8b76c11c4e","type":"url","category":"Network activity","to_ids":true,"value":"https://revdioaplomerd.weebly.com","comment":"https://x.com/urldna_bot/status/1950466424440303746","timestamp":"1753862408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7219ca71-4eef-5dc1-9a15-180fe6d732e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.238.177","comment":"https://x.com/PrakkiSathwik/status/1950469991142445180","timestamp":"1753863258","distribution":"5","Tag":[{"name":"phishing"},{"name":"Mythic"},{"name":"C2"},{"name":"APT"}]},{"uuid":"6699fdb3-13ac-5282-9ab1-02f6fdff6eca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.246.74","comment":"https://x.com/PrakkiSathwik/status/1950469991142445180","timestamp":"1753863258","distribution":"5","Tag":[{"name":"phishing"},{"name":"Mythic"},{"name":"C2"},{"name":"APT"}]},{"uuid":"7c75d1fc-a8eb-5d07-9460-fcb28c89c64d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8b4f9f707a7ba6cf9a22e0b52ded18d8","comment":"https://x.com/PrakkiSathwik/status/1950469991142445180","timestamp":"1753863258","distribution":"5","Tag":[{"name":"phishing"},{"name":"Mythic"},{"name":"C2"},{"name":"APT"}]},{"uuid":"086e604c-d227-54d4-b0d9-a2202bea39fb","type":"md5","category":"Payload delivery","to_ids":true,"value":"afe6ce1c9298dad1f2eb058d7ef5bc05","comment":"https://x.com/PrakkiSathwik/status/1950469991142445180","timestamp":"1753863258","distribution":"5","Tag":[{"name":"phishing"},{"name":"Mythic"},{"name":"C2"},{"name":"APT"}]},{"uuid":"4bb40adb-f692-5759-a648-a0807b21ef81","type":"md5","category":"Payload delivery","to_ids":true,"value":"5d08d498ccd70e05d7fa50fe429f36a5","comment":"https://x.com/PrakkiSathwik/status/1950469991142445180","timestamp":"1753863258","distribution":"5","Tag":[{"name":"phishing"},{"name":"Mythic"},{"name":"C2"},{"name":"APT"}]},{"uuid":"509119a7-4142-5c19-891a-b5cb1c063b39","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.207.232","comment":"https://x.com/PrakkiSathwik/status/1950469995273863504","timestamp":"1753863259","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"a894340f-3892-5bfa-b57a-256156b8b700","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.75.150","comment":"https://x.com/PrakkiSathwik/status/1950469995273863504","timestamp":"1753863259","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"c9027f01-6e17-5ddf-86c6-287586d84d60","type":"md5","category":"Payload delivery","to_ids":true,"value":"01b4c2cc0536f2bde928624dc60121f0","comment":"https://x.com/PrakkiSathwik/status/1950469995273863504","timestamp":"1753863259","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"9f171a6a-c2b2-56d4-ab1f-3920b4aeb230","type":"md5","category":"Payload delivery","to_ids":true,"value":"afdeca3eb5862e49b77ccdd6e1fa675e","comment":"https://x.com/PrakkiSathwik/status/1950469995273863504","timestamp":"1753863259","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"31d23d72-399b-5d3c-af4c-2b0c99c41e10","type":"domain","category":"Network activity","to_ids":true,"value":"isimtescilyenileme.eu","comment":"https://x.com/WebMarkeThink/status/1950471959881347448","timestamp":"1753863727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85e76389-2782-57f3-9347-59ee8c452344","type":"url","category":"Network activity","to_ids":true,"value":"https://www.isimtescilyenileme.eu/?56SFSHH1=76TZYGZUGYZ","comment":"https://x.com/WebMarkeThink/status/1950471959881347448","timestamp":"1753863727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ef20d07-e216-57e2-b0e9-3147937d1e53","type":"domain","category":"Network activity","to_ids":true,"value":"accountmain-loginservice.kraamzorgtane.nl","comment":"https://x.com/WebMarkeThink/status/1950471959881347448","timestamp":"1753863727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cde607b8-81b4-5e2d-be70-8cfcf4fce07f","type":"url","category":"Network activity","to_ids":true,"value":"https://accountmain-loginservice.kraamzorgtane.nl/orzds04jmsnokp33k2535psqfig3q72zokapmyaett05cd25p0q4f2k99qlcmm504pyf1x6ir4dxlscz","comment":"https://x.com/WebMarkeThink/status/1950471959881347448","timestamp":"1753863727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58de06b4-b4ba-59f9-a429-d70767a44971","type":"domain","category":"Network activity","to_ids":true,"value":"p7v.14c.myftpupload.com","comment":"https://x.com/JAMESWT_WT/status/1950485194072322252","timestamp":"1753866883","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"18e70e87-2e6b-573c-990c-160762e176e7","type":"url","category":"Network activity","to_ids":true,"value":"https://p7v.14c.myftpupload.com/0R6M1/","comment":"https://x.com/JAMESWT_WT/status/1950485194072322252","timestamp":"1753866883","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9eb16f3-b790-5bef-9ae9-1cbead82c54c","type":"domain","category":"Network activity","to_ids":true,"value":"museuvirtualdoseguro.pt","comment":"https://x.com/JAMESWT_WT/status/1950485667244589117","timestamp":"1753866995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"625015fd-02cb-53db-b178-9408278ff0ce","type":"url","category":"Network activity","to_ids":true,"value":"https://museuvirtualdoseguro.pt/wp-admin/user/1/","comment":"https://x.com/JAMESWT_WT/status/1950485667244589117","timestamp":"1753866995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa5facc5-406a-5b33-a088-2247f0ec6815","type":"domain","category":"Network activity","to_ids":true,"value":"coibaseprooologiynnnn.godaddysites.com","comment":"https://x.com/urldna_bot/status/1950496619780010090","timestamp":"1753869607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c2c13ffd-9ce9-5e3c-b802-ba4714574163","type":"url","category":"Network activity","to_ids":true,"value":"https://coibaseprooologiynnnn.godaddysites.com","comment":"https://x.com/urldna_bot/status/1950496619780010090","timestamp":"1753869607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c4006e6b-1531-5c37-80bb-3f1d2c24928b","type":"domain","category":"Network activity","to_ids":true,"value":"ineco-bank.top","comment":"https://x.com/c9lab_soc/status/1950499777331822705","timestamp":"1753870360","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"04b56e35-fda7-5d1d-af94-264bf55e18b2","type":"url","category":"Network activity","to_ids":true,"value":"http://ineco-bank.top","comment":"https://x.com/c9lab_soc/status/1950499777331822705","timestamp":"1753870360","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c15967fe-0f82-5a80-9619-a8bf8bf36e97","type":"domain","category":"Network activity","to_ids":true,"value":"acba-bank.top","comment":"https://x.com/c9lab_soc/status/1950499777331822705","timestamp":"1753870360","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"66b1a702-29c5-5674-a1f4-16b234254eba","type":"url","category":"Network activity","to_ids":true,"value":"http://acba-bank.top","comment":"https://x.com/c9lab_soc/status/1950499777331822705","timestamp":"1753870360","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"503d3fbb-fa4d-5079-9485-834492feba96","type":"url","category":"Network activity","to_ids":true,"value":"http://180.97.220.91:8765","comment":"https://x.com/drb_ra/status/1950513691218292914","timestamp":"1753873677","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78e5c49c-18b9-5253-8a8b-ea192e554d68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.97.220.91","comment":"https://x.com/drb_ra/status/1950513691218292914","timestamp":"1753873677","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"42dd2d40-aa23-5402-bcc7-e797ed8703b9","type":"url","category":"Network activity","to_ids":true,"value":"http://103.12.149.83:80","comment":"https://x.com/drb_ra/status/1950513830305337458","timestamp":"1753873710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6e9c16c6-38ab-5963-9d7e-551f0349cfba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.12.149.83","comment":"https://x.com/drb_ra/status/1950513830305337458","timestamp":"1753873710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3d55e25b-07da-5433-8473-c08c35edbbbc","type":"domain","category":"Network activity","to_ids":true,"value":"cf.xinxiangnancs.com","comment":"https://x.com/drb_ra/status/1950513971389227419","timestamp":"1753873744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9c26e023-db52-5365-ba78-9adb9223e170","type":"url","category":"Network activity","to_ids":true,"value":"https://cf.xinxiangnancs.com/__utm.gif","comment":"https://x.com/drb_ra/status/1950513971389227419","timestamp":"1753873744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8b3680a6-31de-56fe-b302-e4ce15d25893","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.39.50:8080","comment":"https://x.com/drb_ra/status/1950513971389227419","timestamp":"1753873744","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"836ccb95-08a8-52c7-ae00-13398769ea06","type":"url","category":"Network activity","to_ids":true,"value":"http://8.130.9.18:4444","comment":"https://x.com/drb_ra/status/1950514111701307658","timestamp":"1753873777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b0b150b5-d3be-5dde-a9c9-89b5092217cf","type":"url","category":"Network activity","to_ids":true,"value":"http://1.117.62.197:443","comment":"https://x.com/drb_ra/status/1950514251258335577","timestamp":"1753873810","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"00af2dff-4609-5b6e-aa5c-1e8bddc5a2c8","type":"url","category":"Network activity","to_ids":true,"value":"http://47.102.87.217:60443","comment":"https://x.com/drb_ra/status/1950514391943925894","timestamp":"1753873844","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d19a4ccc-b571-5430-aadd-ebd298d0fcef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.102.87.217","comment":"https://x.com/drb_ra/status/1950514391943925894","timestamp":"1753873844","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"72caeb39-80d9-5f1b-9a7d-174903b50c32","type":"url","category":"Network activity","to_ids":true,"value":"https://1.14.243.132/omp/api/get_page_config","comment":"https://x.com/drb_ra/status/1950514532301869290","timestamp":"1753873877","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f655faf0-8219-5ab8-a8e3-625f365371c7","type":"url","category":"Network activity","to_ids":true,"value":"http://1.14.243.132:8080","comment":"https://x.com/drb_ra/status/1950514532301869290","timestamp":"1753873877","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"83ab602a-94d1-56c8-94cf-4bb48b50b302","type":"domain","category":"Network activity","to_ids":true,"value":"dev.twcdn.org","comment":"https://x.com/drb_ra/status/1950514671905096120","timestamp":"1753873911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b9e21258-0eaf-5dde-98bf-7d867c86779b","type":"url","category":"Network activity","to_ids":true,"value":"https://dev.twcdn.org/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1950514671905096120","timestamp":"1753873911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ae56052e-dd9b-5c19-b3e4-aec780691aa8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.32.250.246:443","comment":"https://x.com/drb_ra/status/1950514671905096120","timestamp":"1753873911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8867df1f-8f12-55e3-9686-a579fd4b1db3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.32.250.246","comment":"https://x.com/drb_ra/status/1950514671905096120","timestamp":"1753873911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b8f9a79e-62c8-54a2-8604-1ea1746225ce","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.229","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"3127b7d3-12b0-5fb0-80f9-fb8334f0c60b","type":"domain","category":"Network activity","to_ids":true,"value":"christchurchappomattox.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"4d6f3434-1923-50e0-b751-f04c939bda5e","type":"url","category":"Network activity","to_ids":true,"value":"http://christchurchappomattox.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"952019f8-362c-5039-8f4b-374d31babcdd","type":"domain","category":"Network activity","to_ids":true,"value":"habbeza.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"acace108-0c20-57a4-a364-9c9e8afe4de0","type":"url","category":"Network activity","to_ids":true,"value":"http://habbeza.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"00528ae7-0ac8-572b-91af-ef425067b5f8","type":"domain","category":"Network activity","to_ids":true,"value":"priyankashahra.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"d164107b-bfef-53ae-b5d2-8dc65323c682","type":"url","category":"Network activity","to_ids":true,"value":"http://priyankashahra.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"47ceed1f-4000-5b86-ad05-499a85ec9f03","type":"domain","category":"Network activity","to_ids":true,"value":"williamshipp.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"06a49631-9e07-51f8-bfb3-ee6ef04f31b9","type":"url","category":"Network activity","to_ids":true,"value":"http://williamshipp.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"58aad6f9-f6fb-5744-89c0-268ebffed6ad","type":"domain","category":"Network activity","to_ids":true,"value":"pongata.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"430eb5c3-3ca8-5978-b3de-0c15cd4725c7","type":"url","category":"Network activity","to_ids":true,"value":"http://pongata.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"9cb570f5-1913-599b-bcb1-b7f2007cfa79","type":"domain","category":"Network activity","to_ids":true,"value":"tapthemicradio.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"22386779-0e19-5db5-99bf-5f59b2b39bcd","type":"url","category":"Network activity","to_ids":true,"value":"http://tapthemicradio.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"ca572ad2-869c-5dc7-87a5-f62dfc8afa64","type":"domain","category":"Network activity","to_ids":true,"value":"schenk-trading.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"44a31e80-99d1-5990-ae30-0de8547b3743","type":"url","category":"Network activity","to_ids":true,"value":"http://schenk-trading.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"1713268c-ad41-58c7-9043-63628ce4dbfa","type":"domain","category":"Network activity","to_ids":true,"value":"allpowersolarsystem.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"d65783ea-eab3-5ca9-86b9-0d048fa5258c","type":"url","category":"Network activity","to_ids":true,"value":"http://allpowersolarsystem.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"dc438819-312e-5b4f-a892-e6dd1ec9943b","type":"domain","category":"Network activity","to_ids":true,"value":"voyagerproductdesign.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"0e8de1a0-bab7-5290-b033-b50f7cd04f60","type":"url","category":"Network activity","to_ids":true,"value":"http://voyagerproductdesign.com","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"eb883243-9f7a-588c-aa07-9fd8f17fbf9c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.229","comment":"https://x.com/skocherhan/status/1950518366734553525","timestamp":"1753874792","distribution":"5"},{"uuid":"e37f58d1-507d-587d-a7db-ff8212f09fe5","type":"domain","category":"Network activity","to_ids":true,"value":"cdn1.cowivat156.workers.dev","comment":"https://x.com/drb_ra/status/1950520395536253301","timestamp":"1753875275","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2f585e13-f505-5406-aee5-ce2f261a348b","type":"url","category":"Network activity","to_ids":true,"value":"http://cdn1.cowivat156.workers.dev","comment":"https://x.com/drb_ra/status/1950520395536253301","timestamp":"1753875275","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"21d0cd28-304c-5d33-808a-45896d9dc69f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1:443","comment":"https://x.com/drb_ra/status/1950520395536253301","timestamp":"1753875275","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"56ab6368-058b-5204-bae9-60cb88d10a3f","type":"domain","category":"Network activity","to_ids":true,"value":"ukr.somee.com","comment":"https://x.com/skocherhan/status/1950522020279750858","timestamp":"1753875663","distribution":"5"},{"uuid":"ec3d7a2c-5d45-5e01-a497-e24553ff9b84","type":"url","category":"Network activity","to_ids":true,"value":"http://ukr.somee.com/gw/ep.txt","comment":"https://x.com/skocherhan/status/1950522020279750858","timestamp":"1753875663","distribution":"5"},{"uuid":"a5e37e18-228b-5c42-a0f7-7173275b2761","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping10.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"c899e492-605a-5856-bb19-49622eaff84c","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping10.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"ac6f7391-61d0-5b1e-901b-4b4182262089","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping3.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"d369741c-4c62-5eb5-bb8b-8e91f12515bc","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping3.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"0f021c28-7dea-592b-9cfb-e7d9e410354b","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping4.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"38ceedef-f32c-56b1-b032-92dfbbe3f671","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping4.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"e279455d-d582-58d8-a8cc-63935615496e","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping5.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"2b61d65f-5ad1-538f-9188-8f2167e1b601","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping5.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"0cc307fe-9197-597e-88af-0289246a8523","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping6.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"0932cf92-af6f-5b26-8b75-75e6a3bfe4a1","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping6.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"2430a69c-1719-58d1-9521-bdc2a294363d","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping7.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"0595797a-fbad-5fdd-a2db-d11c960976e0","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping7.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"fc58b175-9092-5647-aaac-f3661bb36409","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping8.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"8f233fdb-206b-5b24-b2d8-35ee3686b7a6","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping8.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"efd13b69-9899-512c-ac8c-14d15e35a31e","type":"domain","category":"Network activity","to_ids":true,"value":"ms-team-ping9.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"f67a692d-3b69-5bbf-b6b5-a7e3de97d281","type":"url","category":"Network activity","to_ids":true,"value":"http://ms-team-ping9.com","comment":"https://x.com/skocherhan/status/1950523004586221789","timestamp":"1753875897","distribution":"5"},{"uuid":"fe761711-d5cd-5b7c-b3dc-fff2f961c2c3","type":"md5","category":"Payload delivery","to_ids":true,"value":"8beece81a6dca4e5a8483f56917344ff","comment":"https://x.com/skocherhan/status/1950526767531200640","timestamp":"1753876795","distribution":"5"},{"uuid":"97924ee4-b1f5-52d8-8374-c174d95795c0","type":"domain","category":"Network activity","to_ids":true,"value":"kssiu.weebly.com","comment":"https://x.com/urldna_bot/status/1950526819116916977","timestamp":"1753876807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"254b3b13-524a-5127-8760-9e77a9a4130f","type":"url","category":"Network activity","to_ids":true,"value":"https://kssiu.weebly.com","comment":"https://x.com/urldna_bot/status/1950526819116916977","timestamp":"1753876807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"56e65560-c42d-5de8-a88e-bc61a5cc2f3a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.41.139.193:80","comment":"https://x.com/SarlackLab/status/1950526854047125563","timestamp":"1753876815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"74513354-cdad-58fc-a754-2233064fe433","type":"domain","category":"Network activity","to_ids":true,"value":"reudic.ga","comment":"https://x.com/SarlackLab/status/1950526854047125563","timestamp":"1753876815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"1c4a19c5-d335-5c54-97d6-abd8d492ac0f","type":"url","category":"Network activity","to_ids":true,"value":"http://reudic.ga","comment":"https://x.com/SarlackLab/status/1950526854047125563","timestamp":"1753876815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"38a5b8c0-7d03-51d3-b7e3-8d6bf9840cf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"174.138.186.157","comment":"https://x.com/skocherhan/status/1950534921052684564","timestamp":"1753878739","distribution":"5"},{"uuid":"10387176-de57-5530-ad92-84a0b823cb88","type":"sha256","category":"Payload delivery","to_ids":true,"value":"3393ea2658320ea0ba5c6583ca85700ed389fb0188c5ed4a8ace7a00a7018696","comment":"https://x.com/skocherhan/status/1950534921052684564","timestamp":"1753878739","distribution":"5"},{"uuid":"388b6492-03ea-52bc-b9d9-4f2103ed9c88","type":"sha256","category":"Payload delivery","to_ids":true,"value":"28a94a1d5105e7460d9e0540fe634dd1935fae1208ff0662a4ec210cbad7d7fd","comment":"https://x.com/skocherhan/status/1950534921052684564","timestamp":"1753878739","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1e493901-03b1-5eb1-83f4-83d6ba721dda","type":"domain","category":"Network activity","to_ids":true,"value":"pypj.org","comment":"https://x.com/MeridianEU/status/1950542419138621561","timestamp":"1753880526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bbf01582-fd20-545d-9f6a-8f7bcf55b610","type":"url","category":"Network activity","to_ids":true,"value":"http://pypj.org","comment":"https://x.com/MeridianEU/status/1950542419138621561","timestamp":"1753880526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1d2b5a9-9edd-5da6-b48c-3f859ec53f66","type":"url","category":"Network activity","to_ids":true,"value":"http://31.59.58.87","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"df7a6cd4-4e46-5a32-92e5-8cefb8d1d112","type":"domain","category":"Network activity","to_ids":true,"value":"qmabkngserccaptura.org","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"172ad5c8-26ba-5cda-9f0a-691699ffad2b","type":"url","category":"Network activity","to_ids":true,"value":"http://qmabkngserccaptura.org","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"849f438c-83f2-5939-ae4b-7b9d42b92829","type":"domain","category":"Network activity","to_ids":true,"value":"admin-extranetrsvrv-cstmrv.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"057f372f-1d15-5679-9640-b30589b59086","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-extranetrsvrv-cstmrv.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"04f4770e-a239-56f8-86d5-035c39e81e7d","type":"domain","category":"Network activity","to_ids":true,"value":"mistyexycapt.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"d4b83350-c914-5378-b837-9f11e712c89c","type":"url","category":"Network activity","to_ids":true,"value":"http://mistyexycapt.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"a6919ec5-1904-59b2-b624-0c9b7dfd0725","type":"domain","category":"Network activity","to_ids":true,"value":"admin-captcha-properties-095908401.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"1d4a0158-85db-51db-84c9-7dadbb88691b","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-captcha-properties-095908401.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"5447f6c7-b041-5042-b557-9ae271782bd5","type":"domain","category":"Network activity","to_ids":true,"value":"admin-extranetrsvrv-cstmrs.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"21786302-e25e-5fa1-97f7-89c78a51a2f8","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-extranetrsvrv-cstmrs.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"62a6b592-7bac-5333-92bb-ea6d0edfcffc","type":"domain","category":"Network activity","to_ids":true,"value":"admin-properties-captcha.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"eaef4469-320a-5943-a0ba-7d1c79b7d2dc","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-properties-captcha.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"e4dcba85-eec7-5fcf-afd5-e456bf7dcc4f","type":"domain","category":"Network activity","to_ids":true,"value":"bkngadmchecks.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"19dee3ce-86f4-5d0c-b9e5-06a2949080e9","type":"url","category":"Network activity","to_ids":true,"value":"http://bkngadmchecks.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"cf48f6f6-cc12-5ff2-8f20-8259670dd0bb","type":"domain","category":"Network activity","to_ids":true,"value":"bknpnt.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"6da55ecc-2c59-5aa4-9fa3-eeb17bb8797c","type":"url","category":"Network activity","to_ids":true,"value":"http://bknpnt.com","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"40d048a1-d602-591e-9ce3-37372778cd11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.59.58.87","comment":"https://x.com/skocherhan/status/1950542946140340232","timestamp":"1753880652","distribution":"5"},{"uuid":"087309e7-3adf-5a32-9d81-2517c7e38eed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.134.26.74","comment":"https://x.com/skocherhan/status/1950543793448501626","timestamp":"1753880854","distribution":"5"},{"uuid":"9a6b4dae-2cf2-55a0-87bd-bb54ffb1b73d","type":"domain","category":"Network activity","to_ids":true,"value":"metsions861.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"9064c434-a183-520e-b86c-0ca60dcbfe44","type":"url","category":"Network activity","to_ids":true,"value":"http://metsions861.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"b2f51f20-e7d6-5a90-b041-09e5e4e44a6e","type":"domain","category":"Network activity","to_ids":true,"value":"minesqvoretqsma.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"e86ae373-8685-5d7b-ae33-36bac862e348","type":"url","category":"Network activity","to_ids":true,"value":"http://minesqvoretqsma.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"1a52ba59-f48f-529f-bea9-28be3d3710d6","type":"domain","category":"Network activity","to_ids":true,"value":"micromissingservice86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"c1a69998-beb0-5bee-afbe-7f3e247d6248","type":"url","category":"Network activity","to_ids":true,"value":"http://micromissingservice86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"25560d3a-6216-56b4-b120-3b00a7c730e3","type":"domain","category":"Network activity","to_ids":true,"value":"micromissingservicex86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"73e11723-ca11-5137-b637-ba2c2dd74d26","type":"url","category":"Network activity","to_ids":true,"value":"http://micromissingservicex86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"67970818-cd92-50b4-97ab-aea5532e6dc7","type":"domain","category":"Network activity","to_ids":true,"value":"micromissingservicx86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"deedcd62-1b9b-50cf-b555-6802d8a69415","type":"url","category":"Network activity","to_ids":true,"value":"http://micromissingservicx86checksup.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"2b92e860-7263-5ea9-a28a-2f270c0e6ddd","type":"domain","category":"Network activity","to_ids":true,"value":"qoiwexsoftamicros821.info","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"dc90c31e-ee31-56bd-a0e6-8e3076fedfee","type":"url","category":"Network activity","to_ids":true,"value":"http://qoiwexsoftamicros821.info","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"6c89e7a5-8acb-587d-ae34-8a8e3a5ec0ea","type":"domain","category":"Network activity","to_ids":true,"value":"summiteriqosconvietnt.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"925e0b85-7fd4-5070-a8d6-28cb12f19062","type":"url","category":"Network activity","to_ids":true,"value":"http://summiteriqosconvietnt.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"7c383c44-93f6-5316-a6d4-c84ec4915a62","type":"domain","category":"Network activity","to_ids":true,"value":"sunsetvismarketsoliocosca.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"55e2e3cd-e60b-575e-9034-0485df5e116d","type":"url","category":"Network activity","to_ids":true,"value":"http://sunsetvismarketsoliocosca.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"8e034eee-4570-5fbf-af8c-ada9318594a6","type":"domain","category":"Network activity","to_ids":true,"value":"superiormagazinecos.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"ab06e49e-26f8-529b-92dc-7aa6b1d570b2","type":"url","category":"Network activity","to_ids":true,"value":"http://superiormagazinecos.com","comment":"https://x.com/skocherhan/status/1950545643878875185","timestamp":"1753881295","distribution":"5"},{"uuid":"51d5aac7-6f89-5976-98b8-a95a23263b7a","type":"domain","category":"Network activity","to_ids":true,"value":"artsciencephysio.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"8edbbdfe-c462-5770-b2e5-a6a7e06641b9","type":"url","category":"Network activity","to_ids":true,"value":"http://artsciencephysio.com/l1kl","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"f03db38e-9360-5758-b8f3-fbb5e20fd3fe","type":"domain","category":"Network activity","to_ids":true,"value":"booking.id28k666partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"1ebce224-5eab-5e11-9581-7c4839233847","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.id28k666partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"258982e9-67db-5572-8e61-d954b8032386","type":"domain","category":"Network activity","to_ids":true,"value":"booking.revers-id-237extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"f58b8bb4-d357-5677-b813-72478f9f525a","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.revers-id-237extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"efa7b5cb-467d-5685-b7e8-970d28825087","type":"domain","category":"Network activity","to_ids":true,"value":"booking.revers-id-732extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"4c3952bf-aa35-5b89-bd49-38a10fcde67b","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.revers-id-732extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"f56db326-7151-5fb1-9a5b-5cb0f187a9f9","type":"domain","category":"Network activity","to_ids":true,"value":"booking.revers-id-837extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"a67b4a14-a907-5c32-8070-adaaa49263a6","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.revers-id-837extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"57e9e2a2-ebcf-5c3c-a846-08060fc78b3b","type":"domain","category":"Network activity","to_ids":true,"value":"booking.revers-id-672extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"7298bd53-cdcb-5888-a46c-455a224fdd0d","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.revers-id-672extranet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"ccd1ffa2-977f-5a1a-98c5-97199f7de50c","type":"domain","category":"Network activity","to_ids":true,"value":"booking.id28k222partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"fd2c52f5-b762-53e5-8b2e-cd1f4c565fc1","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.id28k222partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"6774f40e-382e-52a5-99a3-880e050e4f9d","type":"domain","category":"Network activity","to_ids":true,"value":"booking.id28k772partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"7583c2dc-1e47-5f33-af52-c8bfe000f354","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.id28k772partnet.com","comment":"https://x.com/skocherhan/status/1950553194632782310","timestamp":"1753883095","distribution":"5"},{"uuid":"98458bfa-0a06-5e87-9db6-601b5d8e44cb","type":"domain","category":"Network activity","to_ids":true,"value":"noygittn2025.com","comment":"https://x.com/urldna_bot/status/1950557015882780885","timestamp":"1753884006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0fd7a3ac-b3ca-5224-90db-484626d8c06b","type":"url","category":"Network activity","to_ids":true,"value":"https://noygittn2025.com/pages/index/login.php","comment":"https://x.com/urldna_bot/status/1950557015882780885","timestamp":"1753884006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8e7b5e9c-dfbd-588f-971b-8f01a6518241","type":"domain","category":"Network activity","to_ids":true,"value":"rustyquill.top","comment":"https://x.com/skocherhan/status/1950562483078385812","timestamp":"1753885310","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9ca77477-47ad-5ea3-a116-889910861117","type":"url","category":"Network activity","to_ids":true,"value":"https://rustyquill.top/shw/the-magnus-protoco1.jpg","comment":"https://x.com/skocherhan/status/1950562483078385812","timestamp":"1753885310","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"eccf2b6a-66dc-5ca4-b4b1-a1c4c07cf5be","type":"domain","category":"Network activity","to_ids":true,"value":"ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1950563977433694242","timestamp":"1753885666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"9c3d6c97-e3f4-5121-8574-63ddbea8533d","type":"url","category":"Network activity","to_ids":true,"value":"http://ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1950563977433694242","timestamp":"1753885666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"ce48994b-5455-5e42-94f7-da5d20d51786","type":"domain","category":"Network activity","to_ids":true,"value":"SSL.com","comment":"https://x.com/JRoosen/status/1950567965075689881","timestamp":"1753886617","distribution":"5"},{"uuid":"2c0320a7-520a-5f34-a700-559c0a24ec2e","type":"url","category":"Network activity","to_ids":true,"value":"http://SSL.com","comment":"https://x.com/JRoosen/status/1950567965075689881","timestamp":"1753886617","distribution":"5"},{"uuid":"04d620b2-af76-52c0-ab2a-62a72eb16916","type":"md5","category":"Payload delivery","to_ids":true,"value":"ddf9bba66ffc5f2638682a0d6712e177","comment":"https://x.com/JRoosen/status/1950567965075689881","timestamp":"1753886617","distribution":"5"},{"uuid":"6850557e-9693-5002-ae85-2aec3755e3c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.208.206.158","comment":"https://x.com/marcandrebeaul1/status/1950571888863826268","timestamp":"1753887552","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/harugasumi/status/1950585332510097714","timestamp":"1753890758","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/harugasumi/status/1950585332510097714","timestamp":"1753890758","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ed7a44f0-ac01-58dc-b125-92750004b3b5","type":"domain","category":"Network activity","to_ids":true,"value":"universityofarkansascampus.weebly.com","comment":"https://x.com/urldna_bot/status/1950587212212433184","timestamp":"1753891206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7fb17584-2fde-5341-9c3f-d98243bef773","type":"url","category":"Network activity","to_ids":true,"value":"https://universityofarkansascampus.weebly.com","comment":"https://x.com/urldna_bot/status/1950587212212433184","timestamp":"1753891206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8da80e43-c44e-5bf5-b8ea-ecfb3e1601a2","type":"url","category":"Network activity","to_ids":true,"value":"http://189.1.220.31:48443","comment":"https://x.com/drb_ra/status/1950593108023947786","timestamp":"1753892611","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aec2a2c3-0efb-569d-8809-ee17b1671905","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.1.220.31","comment":"https://x.com/drb_ra/status/1950593108023947786","timestamp":"1753892611","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5c086a67-e71c-5228-86bc-1dd9701de05a","type":"domain","category":"Network activity","to_ids":true,"value":"admin-properties-captcha-extranet.com","comment":"https://x.com/1ZRR4H/status/1950598321740849547","timestamp":"1753893854","distribution":"5"},{"uuid":"c66c80ad-5e01-584d-b227-6939baedaeeb","type":"url","category":"Network activity","to_ids":true,"value":"https://admin-properties-captcha-extranet.com","comment":"https://x.com/1ZRR4H/status/1950598321740849547","timestamp":"1753893854","distribution":"5"},{"uuid":"9ca342f9-d7ee-5ad1-acc4-4cb2c094435d","type":"url","category":"Network activity","to_ids":true,"value":"http://111.254.202.51","comment":"https://x.com/skocherhan/status/1950604798954180739","timestamp":"1753895399","distribution":"5"},{"uuid":"a54dd66e-a679-51e2-9123-032144e07df9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.254.202.51","comment":"https://x.com/skocherhan/status/1950604798954180739","timestamp":"1753895399","distribution":"5"},{"uuid":"188b92ce-7f70-519d-8055-1cfc3508584e","type":"domain","category":"Network activity","to_ids":true,"value":"2011.filemail.com","comment":"https://x.com/JAMESWT_WT/status/1950605994637303957","timestamp":"1753895684","distribution":"5"},{"uuid":"c34c364e-339b-546c-9161-a5129cf2d65d","type":"url","category":"Network activity","to_ids":true,"value":"https://2011.filemail.com/api/file/get?filekey=Exsd44RH9Z6htYM0mINzzIHWgZALh7P1XKn0_fgbXO3EpAeobpBQHcsn1I6GohiE&pk_vid=e02883b622f101aa1753858042c1eb95","comment":"https://x.com/JAMESWT_WT/status/1950605994637303957","timestamp":"1753895684","distribution":"5"},{"uuid":"0b354216-5938-5e11-91c8-034838f8e21d","type":"md5","category":"Payload delivery","to_ids":true,"value":"e02883b622f101aa1753858042c1eb95","comment":"https://x.com/JAMESWT_WT/status/1950605994637303957","timestamp":"1753895684","distribution":"5"},{"uuid":"cd79f45f-0137-5c66-95d8-6151c566e4a4","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.shgsfhdjstjsttjgjzddshgrw.info","comment":"https://x.com/drb_ra/status/1950606442831991128","timestamp":"1753895791","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"44597398-2717-5181-b296-7d573bc656a4","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.shgsfhdjstjsttjgjzddshgrw.info/fwlink","comment":"https://x.com/drb_ra/status/1950606442831991128","timestamp":"1753895791","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"277cd24c-33b7-5612-bc0e-813c3e95a8c4","type":"url","category":"Network activity","to_ids":true,"value":"http://141.98.10.88:53","comment":"https://x.com/drb_ra/status/1950606442831991128","timestamp":"1753895791","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f2ac88ef-d293-565e-ba1d-945ab220f11d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.98.10.88","comment":"https://x.com/drb_ra/status/1950606442831991128","timestamp":"1753895791","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"43035321-2607-58e7-9089-0b39ca6e2fc6","type":"url","category":"Network activity","to_ids":true,"value":"http://91.208.162.61:53","comment":"https://x.com/drb_ra/status/1950606583798366614","timestamp":"1753895824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"89c1a39d-21ec-5cae-a895-bce462d4bd71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.208.162.61","comment":"https://x.com/drb_ra/status/1950606583798366614","timestamp":"1753895824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"993807a8-b603-58db-9c2e-774f1dc32733","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.147.15","comment":"https://x.com/drb_ra/status/1950606583798366614","timestamp":"1753895824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f2f68383-85fa-59b6-bc65-c282f2b016d0","type":"domain","category":"Network activity","to_ids":true,"value":"jal-co.bond","comment":"https://x.com/urldna_bot/status/1950617414112051244","timestamp":"1753898406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"74e16cd1-da43-5c29-bad8-66a836eed108","type":"url","category":"Network activity","to_ids":true,"value":"http://jal-co.bond","comment":"https://x.com/urldna_bot/status/1950617414112051244","timestamp":"1753898406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cf157858-1532-5f9c-9650-37ca41cca255","type":"url","category":"Network activity","to_ids":true,"value":"http://49.12.240.231:31337","comment":"https://x.com/drb_ra/status/1950629191138881887","timestamp":"1753901214","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"137bba2f-0d8d-59de-ac79-bae0a98db9b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.12.240.231","comment":"https://x.com/drb_ra/status/1950629191138881887","timestamp":"1753901214","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b3fd0347-8f18-5401-b7ac-9d5862eb20e8","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.89.250:31337","comment":"https://x.com/drb_ra/status/1950629329790017669","timestamp":"1753901247","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cc7035a1-f5e1-5e8f-95c1-bc407c5f8078","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.89.250","comment":"https://x.com/drb_ra/status/1950629329790017669","timestamp":"1753901247","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f40beb76-97bf-5e9e-a0f5-d82a9f559d53","type":"url","category":"Network activity","to_ids":true,"value":"http://64.23.249.98:31337","comment":"https://x.com/drb_ra/status/1950629469988995414","timestamp":"1753901281","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"dba4df73-8966-5348-a13f-ca3725699c21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.23.249.98","comment":"https://x.com/drb_ra/status/1950629469988995414","timestamp":"1753901281","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"419be45f-aa17-5b2b-99b4-3e9adc35d22c","type":"url","category":"Network activity","to_ids":true,"value":"http://146.59.228.67:31337","comment":"https://x.com/drb_ra/status/1950629607344140597","timestamp":"1753901313","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e1f35278-d9d5-5713-bc1c-d310794f7ff4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.59.228.67","comment":"https://x.com/drb_ra/status/1950629607344140597","timestamp":"1753901313","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2f703de6-4927-56fe-b768-83b155ab7187","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.162:31337","comment":"https://x.com/drb_ra/status/1950629745026126312","timestamp":"1753901346","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"22a9c75c-64f3-5627-8fb4-fd1782e36403","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.162","comment":"https://x.com/drb_ra/status/1950629745026126312","timestamp":"1753901346","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5eb0d735-eb9e-5dc4-b5bb-99257d92d1ba","type":"url","category":"Network activity","to_ids":true,"value":"http://45.15.66.42:31337","comment":"https://x.com/drb_ra/status/1950629883467710920","timestamp":"1753901379","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e9a3d6aa-d9a9-5ea3-82f5-52d826b27f43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.15.66.42","comment":"https://x.com/drb_ra/status/1950629883467710920","timestamp":"1753901379","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"158429c4-b8e4-51f2-aa9d-2b1d439df024","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.222.83:31337","comment":"https://x.com/drb_ra/status/1950630025838924184","timestamp":"1753901413","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ea19a770-168d-562b-ae83-a075fbe56e48","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.222.83:9999","comment":"https://x.com/drb_ra/status/1950630168306848033","timestamp":"1753901447","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"34a6663f-3950-597c-ae43-a36ad2abba4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.222.83","comment":"https://x.com/drb_ra/status/1950630168306848033","timestamp":"1753901447","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"dc968836-912c-5e1f-b62e-6d5f088f2ac5","type":"url","category":"Network activity","to_ids":true,"value":"http://5.189.184.115:80","comment":"https://x.com/drb_ra/status/1950630814460563719","timestamp":"1753901601","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"377db5c2-aba7-5d61-ba75-2ca3362115ef","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.93.183:443","comment":"https://x.com/drb_ra/status/1950630954281869437","timestamp":"1753901635","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"52e8f32d-fbac-527c-b308-b6622b6ca986","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.93.183","comment":"https://x.com/drb_ra/status/1950630954281869437","timestamp":"1753901635","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"67ac713a-978e-55ea-97a0-c020580d608e","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.42:33862","comment":"https://x.com/drb_ra/status/1950631092412723501","timestamp":"1753901668","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b086057c-d089-579e-89c5-9bafe576878d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.42","comment":"https://x.com/drb_ra/status/1950631092412723501","timestamp":"1753901668","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"991a420b-0f07-579a-b567-56964d56c09a","type":"url","category":"Network activity","to_ids":true,"value":"http://45.156.87.226:9373","comment":"https://x.com/drb_ra/status/1950631231357321239","timestamp":"1753901701","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f8fbfcf5-e00d-5e0f-8a8d-da3ec09a8c3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.156.87.226","comment":"https://x.com/drb_ra/status/1950631231357321239","timestamp":"1753901701","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1e359f76-1968-5f84-9245-aeba9dbeae10","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.28:6002","comment":"https://x.com/drb_ra/status/1950631370008715308","timestamp":"1753901734","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e6599cf1-fe14-5b84-bdb3-c3ff44362f4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.28","comment":"https://x.com/drb_ra/status/1950631370008715308","timestamp":"1753901734","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"04bef067-224e-51f4-bbaa-945b3f3c2cb6","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.30:5000","comment":"https://x.com/drb_ra/status/1950631507975893459","timestamp":"1753901767","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a6deff00-77bb-5c78-b0ec-645032cbb4ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.30","comment":"https://x.com/drb_ra/status/1950631507975893459","timestamp":"1753901767","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c79d39e3-9843-5629-b39d-58c3b511e3f5","type":"url","category":"Network activity","to_ids":true,"value":"http://139.159.238.207:3232","comment":"https://x.com/drb_ra/status/1950631648732614979","timestamp":"1753901800","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"50ff172f-fbf5-5fed-87a6-f08a17a41754","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.159.238.207","comment":"https://x.com/drb_ra/status/1950631648732614979","timestamp":"1753901800","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"1bc440fb-7600-55cb-8425-e21d98cf011b","type":"url","category":"Network activity","to_ids":true,"value":"http://13.245.75.9:1433","comment":"https://x.com/drb_ra/status/1950631788050886927","timestamp":"1753901833","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d426cac7-edf6-55d5-80ee-236fed189192","type":"url","category":"Network activity","to_ids":true,"value":"http://13.245.75.9:833","comment":"https://x.com/drb_ra/status/1950631926852681975","timestamp":"1753901867","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"72617465-71c3-5e1d-bb6d-4932998eb384","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.245.75.9","comment":"https://x.com/drb_ra/status/1950631926852681975","timestamp":"1753901867","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1e0fe908-7852-58f0-b16e-353687e972b9","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.127.3:51005","comment":"https://x.com/drb_ra/status/1950632065281794098","timestamp":"1753901900","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7812e561-bf9c-54a2-b670-0a4f7caed747","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.127.3:50805","comment":"https://x.com/drb_ra/status/1950632204037677522","timestamp":"1753901933","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6a4a1b85-c8ee-5e77-9dd2-f28c9896f4f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.127.3","comment":"https://x.com/drb_ra/status/1950632204037677522","timestamp":"1753901933","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5f2dd00e-5161-5bff-9881-92f4b21a74d7","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46:6606","comment":"https://x.com/drb_ra/status/1950632342118371598","timestamp":"1753901966","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/drb_ra/status/1950632342118371598","timestamp":"1753901966","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"eba23863-540a-560d-b470-612169c0e371","type":"url","category":"Network activity","to_ids":true,"value":"http://185.242.5.90:8525","comment":"https://x.com/drb_ra/status/1950632481008554165","timestamp":"1753901999","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"48d463fe-c27d-5236-b522-cf3038a76a0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.242.5.90","comment":"https://x.com/drb_ra/status/1950632481008554165","timestamp":"1753901999","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"50d11a01-8335-547a-bf5d-7d3b79f9de7c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.160.220.169:443","comment":"https://x.com/drb_ra/status/1950632619613597925","timestamp":"1753902032","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1f66fb56-06d1-532c-b27e-bc361b4d82fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.160.220.169","comment":"https://x.com/drb_ra/status/1950632619613597925","timestamp":"1753902032","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e11baeb5-5c43-5fd8-86da-0a2bf48e7f26","type":"url","category":"Network activity","to_ids":true,"value":"http://52.209.52.25:80","comment":"https://x.com/drb_ra/status/1950632760147910817","timestamp":"1753902065","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ff176d67-2543-52bf-86e6-2543c724f41d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.209.52.25","comment":"https://x.com/drb_ra/status/1950632760147910817","timestamp":"1753902065","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d117e5cf-e2f0-597f-9cc7-b4f63061dc9c","type":"url","category":"Network activity","to_ids":true,"value":"http://18.202.77.34:80","comment":"https://x.com/drb_ra/status/1950632898215956806","timestamp":"1753902098","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"88034d6f-8236-5c63-ba36-53b8e42fd179","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.202.77.34","comment":"https://x.com/drb_ra/status/1950632898215956806","timestamp":"1753902098","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d595be44-ea2c-5feb-a2d1-d6399f7b7164","type":"url","category":"Network activity","to_ids":true,"value":"http://3.255.172.20:80","comment":"https://x.com/drb_ra/status/1950633037106139622","timestamp":"1753902131","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dbd33f14-7cca-5a91-b072-d9c9ea999062","type":"url","category":"Network activity","to_ids":true,"value":"http://54.154.237.176:443","comment":"https://x.com/drb_ra/status/1950633175329436140","timestamp":"1753902164","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d26f61eb-8576-5859-9256-bd01dd8d6c0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.154.237.176","comment":"https://x.com/drb_ra/status/1950633175329436140","timestamp":"1753902164","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b35d9490-f5e0-5488-ae43-f3f64f2f6aa6","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.28.158:80","comment":"https://x.com/drb_ra/status/1950633314311623042","timestamp":"1753902197","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"060d447f-f545-55d0-ac26-7122644c5bb8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.28.158","comment":"https://x.com/drb_ra/status/1950633314311623042","timestamp":"1753902197","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f817fddf-df18-5a8a-b9be-66e4d002cb11","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.96.169:80","comment":"https://x.com/drb_ra/status/1950633452568469746","timestamp":"1753902230","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7e2f7404-362b-5e99-a2e1-85617623c080","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.96.169","comment":"https://x.com/drb_ra/status/1950633452568469746","timestamp":"1753902230","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"53c79b6e-0fea-5792-8118-6fce90b940ea","type":"url","category":"Network activity","to_ids":true,"value":"http://81.181.166.190:8443","comment":"https://x.com/drb_ra/status/1950633591530201372","timestamp":"1753902263","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3c69ad1c-81a2-51c6-a7ce-f92a01f11e67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.181.166.190","comment":"https://x.com/drb_ra/status/1950633591530201372","timestamp":"1753902263","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0e7fba09-b397-5443-8e53-a8a3984b90f0","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.139.44:8080","comment":"https://x.com/drb_ra/status/1950633729669419434","timestamp":"1753902296","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"67e813fc-2628-5308-b8e6-640f38a53ef4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.203.139.44","comment":"https://x.com/drb_ra/status/1950633729669419434","timestamp":"1753902296","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"565cba20-6f2a-5496-a9f0-b637d8ae4227","type":"url","category":"Network activity","to_ids":true,"value":"http://83.229.112.185:3333","comment":"https://x.com/drb_ra/status/1950633869470040456","timestamp":"1753902330","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"bc7aab7e-a77b-50bb-9dc4-aaab5fbf6ebd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.229.112.185","comment":"https://x.com/drb_ra/status/1950633869470040456","timestamp":"1753902330","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"fb928650-bb50-52d7-8491-5614f99e3862","type":"url","category":"Network activity","to_ids":true,"value":"http://78.168.170.251:443","comment":"https://x.com/drb_ra/status/1950634007496130938","timestamp":"1753902363","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"321ea362-39ee-55fe-975a-037b13358c8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.168.170.251","comment":"https://x.com/drb_ra/status/1950634007496130938","timestamp":"1753902363","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"852a4cf3-660a-50fe-a315-aa88eb6e2653","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.152.8:443","comment":"https://x.com/drb_ra/status/1950634147220992175","timestamp":"1753902396","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ea9fc44b-f503-5305-9c4e-71165d62a0bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.152.8","comment":"https://x.com/drb_ra/status/1950634147220992175","timestamp":"1753902396","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"848aa498-ed13-5d6e-8f58-1883add327ea","type":"url","category":"Network activity","to_ids":true,"value":"http://70.27.138.135:2222","comment":"https://x.com/drb_ra/status/1950634284571566253","timestamp":"1753902429","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"8f2e3b64-a714-5e9f-9dee-c94666a39d79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.27.138.135","comment":"https://x.com/drb_ra/status/1950634284571566253","timestamp":"1753902429","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2836a691-1539-5311-89bf-3c2c37919ac1","type":"url","category":"Network activity","to_ids":true,"value":"http://24.158.34.168:443","comment":"https://x.com/drb_ra/status/1950634423965413434","timestamp":"1753902462","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ceaafcf1-5dd4-562e-b9c7-c1091f36ee77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.158.34.168","comment":"https://x.com/drb_ra/status/1950634423965413434","timestamp":"1753902462","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"235e739a-dd9b-5e3f-971c-7f3350e0f4d1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.47.138.207:443","comment":"https://x.com/drb_ra/status/1950634561848652225","timestamp":"1753902495","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"3eb664ef-3af0-54f7-b467-0a833f47a583","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.149.190:443","comment":"https://x.com/drb_ra/status/1950634700978139161","timestamp":"1753902528","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5cf8d49c-03db-5002-a80e-f73f836ca879","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.83.149.190","comment":"https://x.com/drb_ra/status/1950634700978139161","timestamp":"1753902528","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"998f48cc-6e3b-52fb-a121-0e13c70403e0","type":"url","category":"Network activity","to_ids":true,"value":"http://208.254.122.210:4443","comment":"https://x.com/drb_ra/status/1950634850320572728","timestamp":"1753902564","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"0b051d7b-14d4-50f5-a0a0-62f51ac0531a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"208.254.122.210","comment":"https://x.com/drb_ra/status/1950634850320572728","timestamp":"1753902564","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c0b7a9b9-0dcc-5f67-904a-b07b0555bea9","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.165.215:7443","comment":"https://x.com/drb_ra/status/1950634989273669928","timestamp":"1753902597","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ceec0551-b9d4-5ccf-98da-31a1d2349d9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.165.215","comment":"https://x.com/drb_ra/status/1950634989273669928","timestamp":"1753902597","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0d64041f-0600-5c02-80fe-9995665a748d","type":"domain","category":"Network activity","to_ids":true,"value":"danskebank-payments.com","comment":"https://x.com/TeamDreier/status/1950639025250836609","timestamp":"1753903559","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"76759619-5d9f-5659-8a6a-1ad358a0d0e1","type":"url","category":"Network activity","to_ids":true,"value":"https://danskebank-payments.com","comment":"https://x.com/TeamDreier/status/1950639025250836609","timestamp":"1753903559","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eec3e403-b496-57a0-9f2a-006c0fce0143","type":"domain","category":"Network activity","to_ids":true,"value":"lelevant.net","comment":"https://x.com/urldna_bot/status/1950647623162982451","timestamp":"1753905609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8d1df8b3-1739-5f51-928a-0d300ee082d1","type":"url","category":"Network activity","to_ids":true,"value":"https://www.lelevant.net/tax/via.admin.ch.php?data=card","comment":"https://x.com/urldna_bot/status/1950647623162982451","timestamp":"1753905609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6f6ecb52-abc4-5de9-991d-40e22ea5cba0","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.149.190","comment":"https://x.com/threatquery/status/1950662703535546674","timestamp":"1753909204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"ce858011-e8f4-5701-aca9-c49e2bce4eef","type":"url","category":"Network activity","to_ids":true,"value":"http://70.27.138.135","comment":"https://x.com/threatquery/status/1950662707494969432","timestamp":"1753909205","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"5d570291-9202-502c-be04-26b76ebce939","type":"url","category":"Network activity","to_ids":true,"value":"http://78.168.170.251","comment":"https://x.com/threatquery/status/1950662705670447235","timestamp":"1753909205","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6ddcb02e-ebec-5458-a37a-427da571f9c2","type":"url","category":"Network activity","to_ids":true,"value":"http://87.242.106.13:52703","comment":"https://x.com/SarlackLab/status/1950662767175684601","timestamp":"1753909219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"f45c66cb-b2f5-5868-a9d5-712adef9d201","type":"domain","category":"Network activity","to_ids":true,"value":"tpc.cloudpub.ru","comment":"https://x.com/SarlackLab/status/1950662767175684601","timestamp":"1753909219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ef295df8-bedc-55ef-ab54-a9db4a976b79","type":"url","category":"Network activity","to_ids":true,"value":"http://tpc.cloudpub.ru","comment":"https://x.com/SarlackLab/status/1950662767175684601","timestamp":"1753909219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"362445d8-8df0-5799-829f-7e9f50ae94f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.242.106.13","comment":"https://x.com/SarlackLab/status/1950662767175684601","timestamp":"1753909219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"97882cdd-79ef-5d9f-9304-3c21594b138f","type":"url","category":"Network activity","to_ids":true,"value":"http://118.89.73.78:443","comment":"https://x.com/drb_ra/status/1950665067294265502","timestamp":"1753909768","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f9e58d68-40d5-5529-b613-175c1dff557a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.89.73.78","comment":"https://x.com/drb_ra/status/1950665067294265502","timestamp":"1753909768","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"77caec53-f741-5ad5-bf80-bb96ee60109d","type":"domain","category":"Network activity","to_ids":true,"value":"cadastromotorista.online","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"cde0f450-98e5-5f31-917b-7bd41674a8fa","type":"url","category":"Network activity","to_ids":true,"value":"https://cadastromotorista.online","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"cd4382d6-9ca5-5811-b798-e42571466db7","type":"domain","category":"Network activity","to_ids":true,"value":"descargarseguro.store","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"7c0845e6-fc55-59c4-9d90-28710f50cb65","type":"url","category":"Network activity","to_ids":true,"value":"https://www.descargarseguro.store","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"9bd2b6b4-523c-519d-952b-260b830dcee6","type":"domain","category":"Network activity","to_ids":true,"value":"baixarseguro.store","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"5bb21faa-454e-5655-bc3c-de4d3424f3cf","type":"url","category":"Network activity","to_ids":true,"value":"https://www.baixarseguro.store","comment":"https://x.com/P4nd3m1cb0y/status/1950677225835036810","timestamp":"1753912667","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"4c305b08-9cb1-5c9a-8e87-69fc1959f0e1","type":"domain","category":"Network activity","to_ids":true,"value":"suporte.jimpike.com.au","comment":"https://x.com/urldna_bot/status/1950677815038259345","timestamp":"1753912807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c57f9cd5-ad4a-5106-8a6f-50ac853a93ae","type":"url","category":"Network activity","to_ids":true,"value":"https://www.suporte.jimpike.com.au/mobile/front/","comment":"https://x.com/urldna_bot/status/1950677815038259345","timestamp":"1753912807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4ca72a3c-ce4a-5ebe-94ed-baf76af4907d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.219.201","comment":"https://x.com/skocherhan/status/1950680683304583415","timestamp":"1753913491","distribution":"5"},{"uuid":"283aecec-d2b7-52fc-8b24-3f8e53f339cf","type":"md5","category":"Payload delivery","to_ids":true,"value":"b2647b263c14226c62fe743dbff5c70a","comment":"https://x.com/skocherhan/status/1950680683304583415","timestamp":"1753913491","distribution":"5"},{"uuid":"92959d42-30f4-592d-84d8-2ce236f0e49a","type":"domain","category":"Network activity","to_ids":true,"value":"fri66g.top","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db4ba008-3db0-53a2-87d2-68d83621e8a6","type":"url","category":"Network activity","to_ids":true,"value":"https://fri66g.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd2e7087-0a75-54e9-b3a3-05c1c237ce82","type":"domain","category":"Network activity","to_ids":true,"value":"i6o9o1.top","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e236192-f174-5920-a0be-488426a8132f","type":"url","category":"Network activity","to_ids":true,"value":"https://i6o9o1.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15c33ce6-5b83-53d6-aeda-b7303c3f3c7c","type":"domain","category":"Network activity","to_ids":true,"value":"kh23mi.top","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7884f256-92ad-5899-a95e-31f4f0a0552e","type":"url","category":"Network activity","to_ids":true,"value":"https://kh23mi.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"663afefb-8948-5b0b-950f-7551f03d3769","type":"domain","category":"Network activity","to_ids":true,"value":"qz0htw.top","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6112ee2a-33e6-5ee9-9247-d85468414a62","type":"url","category":"Network activity","to_ids":true,"value":"https://qz0htw.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1950694558469402690","timestamp":"1753916799","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"035b2a1c-129d-5c4e-864b-83733040d38d","type":"url","category":"Network activity","to_ids":true,"value":"https://45.86.153.106/owa/u82PGyZFTRBV0tNkIDrKlcKM","comment":"https://x.com/drb_ra/status/1950696671983128596","timestamp":"1753917303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a475770-a44f-5acb-b4bd-1207c68c8639","type":"url","category":"Network activity","to_ids":true,"value":"http://45.86.153.106:443","comment":"https://x.com/drb_ra/status/1950696671983128596","timestamp":"1753917303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c55e46bd-d348-55a4-a154-56349ba05857","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.153.106","comment":"https://x.com/drb_ra/status/1950696671983128596","timestamp":"1753917303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bff6b3dd-4be8-5eb0-84fc-72350d058f62","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.64.250:80","comment":"https://x.com/drb_ra/status/1950696812270207421","timestamp":"1753917336","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dc8e043f-97e8-5a7d-b6f6-0fdc97255de6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.64.250","comment":"https://x.com/drb_ra/status/1950696812270207421","timestamp":"1753917336","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a98ef5c-d6b4-5627-9fc2-576eaf102c11","type":"url","category":"Network activity","to_ids":true,"value":"http://101.35.95.220:18062","comment":"https://x.com/drb_ra/status/1950696950715551930","timestamp":"1753917369","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a42d8a0f-50f1-5530-845f-8080edb85730","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.35.95.220","comment":"https://x.com/drb_ra/status/1950696950715551930","timestamp":"1753917369","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"382ecbac-3e4d-5d44-95b8-6ed800f1cc5b","type":"domain","category":"Network activity","to_ids":true,"value":"api.dnstools.im","comment":"https://x.com/drb_ra/status/1950697091329847555","timestamp":"1753917403","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"84818400-3c86-56a5-8a10-7a317599118f","type":"url","category":"Network activity","to_ids":true,"value":"https://api.dnstools.im/api/3","comment":"https://x.com/drb_ra/status/1950697091329847555","timestamp":"1753917403","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"23842bc4-e70c-5046-ba9e-3a72a25cf446","type":"url","category":"Network activity","to_ids":true,"value":"http://148.135.90.66:2095","comment":"https://x.com/drb_ra/status/1950697091329847555","timestamp":"1753917403","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b53c08d8-9760-5120-bec6-ce0791ecf016","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.135.90.66","comment":"https://x.com/drb_ra/status/1950697091329847555","timestamp":"1753917403","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b1a6bdda-5a82-5cba-98ff-f49429745ad7","type":"url","category":"Network activity","to_ids":true,"value":"http://8.153.163.236:80","comment":"https://x.com/drb_ra/status/1950697229808771076","timestamp":"1753917436","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"748e3c57-dcc4-5b5d-8e03-9d4d702bdebf","type":"url","category":"Network activity","to_ids":true,"value":"http://110.41.15.186:443","comment":"https://x.com/drb_ra/status/1950697370477572245","timestamp":"1753917469","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0d459c55-8869-5b55-a3fc-8f7e015fbadf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.41.15.186","comment":"https://x.com/drb_ra/status/1950697370477572245","timestamp":"1753917469","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a270ebc-0d3e-5fee-839f-3ff6d71ec8ec","type":"url","category":"Network activity","to_ids":true,"value":"https://156.238.243.78/watch","comment":"https://x.com/drb_ra/status/1950697509015240982","timestamp":"1753917503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"820f06d9-7c71-5a0a-8216-40acc2b15fac","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.78:54321","comment":"https://x.com/drb_ra/status/1950697509015240982","timestamp":"1753917503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d513b394-72aa-5876-98d1-da82ef6797c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.78","comment":"https://x.com/drb_ra/status/1950697509015240982","timestamp":"1753917503","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fae504c8-39d4-5e77-9cd4-4fea087c97a2","type":"domain","category":"Network activity","to_ids":true,"value":"junk-essex-vocals-stays.trycloudflare.com","comment":"https://x.com/drb_ra/status/1950697650711326916","timestamp":"1753917536","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0ad73e2c-b732-5103-862b-85eeb76f94aa","type":"url","category":"Network activity","to_ids":true,"value":"https://junk-essex-vocals-stays.trycloudflare.com/wp06/wp-includes/po.php","comment":"https://x.com/drb_ra/status/1950697650711326916","timestamp":"1753917536","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ec6e3a8-62ca-5315-87cd-b05448de7065","type":"url","category":"Network activity","to_ids":true,"value":"http://43.142.19.208:80","comment":"https://x.com/drb_ra/status/1950697650711326916","timestamp":"1753917536","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"edbeb946-0505-57b8-a14f-7b00c1784e60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.142.19.208","comment":"https://x.com/drb_ra/status/1950697650711326916","timestamp":"1753917536","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a94af16-263f-52e2-b980-07d43f3f7e3e","type":"domain","category":"Network activity","to_ids":true,"value":"grandchem.online","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"567f7596-0f5a-5334-84b6-0bdb552f5ca6","type":"url","category":"Network activity","to_ids":true,"value":"http://www.grandchem.online/ghuc/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"63af7df5-5437-563a-b257-796ba01994bc","type":"domain","category":"Network activity","to_ids":true,"value":"augmentingdata.xyz","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"19ef077c-cde4-52fc-abda-7df8e40f8532","type":"url","category":"Network activity","to_ids":true,"value":"http://www.augmentingdata.xyz/yf4t/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"51d21da3-522c-5502-89b3-aefc9082b8c2","type":"domain","category":"Network activity","to_ids":true,"value":"instantcomputer.xyz","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"bca77686-9794-5dd2-b6e0-a30af97805de","type":"url","category":"Network activity","to_ids":true,"value":"http://www.instantcomputer.xyz/wo5k/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"0e346083-fc48-5299-bd18-c40cb7bf5b77","type":"domain","category":"Network activity","to_ids":true,"value":"nonamesms.online","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"667b89f0-02e1-54eb-95cc-7057718ccbc9","type":"url","category":"Network activity","to_ids":true,"value":"http://www.nonamesms.online/amnv/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"2a2c62b5-2671-5584-9cba-b448216cfd60","type":"domain","category":"Network activity","to_ids":true,"value":"rocketkava.xyz","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"8b5ced2e-1238-5842-96e0-9f5521295bd2","type":"url","category":"Network activity","to_ids":true,"value":"http://www.rocketkava.xyz/hftv/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"6b3a55b7-46d9-55f2-8c20-0aa165d654f6","type":"domain","category":"Network activity","to_ids":true,"value":"av11.top","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"fa473b72-882e-55c2-a451-6b55d97c9aa4","type":"url","category":"Network activity","to_ids":true,"value":"http://www.av11.top/6p0a/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"7d752389-2002-55e2-bec0-c6ccf11ab1f8","type":"domain","category":"Network activity","to_ids":true,"value":"financialbalance.xyz","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"7f373609-677f-58ac-b485-3626c5201a81","type":"url","category":"Network activity","to_ids":true,"value":"http://www.financialbalance.xyz/22lr/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"4c465d15-865d-5ae9-8d62-6421daf2dfd3","type":"domain","category":"Network activity","to_ids":true,"value":"rangersorange.click","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"a8e989ef-77a5-52bf-b125-8002bdc2e907","type":"url","category":"Network activity","to_ids":true,"value":"http://www.rangersorange.click/gvj5/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"95b2169a-1b72-5f14-aadb-ee4f28a7603e","type":"domain","category":"Network activity","to_ids":true,"value":"596767.top","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"3e26c713-d533-5cd8-a634-f3d449e33739","type":"url","category":"Network activity","to_ids":true,"value":"http://www.596767.top/mrjo/","comment":"https://x.com/skocherhan/status/1950697679102808352","timestamp":"1753917543","distribution":"5"},{"uuid":"cf175af0-8579-58d8-a89b-f2f3e85dbec4","type":"url","category":"Network activity","to_ids":true,"value":"http://122.51.235.217:8065","comment":"https://x.com/drb_ra/status/1950697789727351013","timestamp":"1753917569","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a26f4712-0fbf-554b-8404-f18c78cc9876","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.51.235.217","comment":"https://x.com/drb_ra/status/1950697789727351013","timestamp":"1753917569","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1c1ebb31-a35e-5ed2-be26-e486117d1bc5","type":"domain","category":"Network activity","to_ids":true,"value":"etcprofile.biying007.xyz","comment":"https://x.com/drb_ra/status/1950697930748506134","timestamp":"1753917603","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bc4dc4d0-3632-5852-93c2-f675eaadc74b","type":"url","category":"Network activity","to_ids":true,"value":"https://etcprofile.biying007.xyz/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1950697930748506134","timestamp":"1753917603","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bf22ef1-6aca-5aa9-9929-7183f20c491a","type":"url","category":"Network activity","to_ids":true,"value":"http://173.44.62.141:443","comment":"https://x.com/drb_ra/status/1950697930748506134","timestamp":"1753917603","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"32a8f1f4-7894-580b-8779-937c29cb56dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.44.62.141","comment":"https://x.com/drb_ra/status/1950697930748506134","timestamp":"1753917603","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ca09a840-e512-5478-b4b1-cb61416f34cd","type":"url","category":"Network activity","to_ids":true,"value":"https://bfm2024.xyz/visit.js","comment":"https://x.com/drb_ra/status/1950698070108512339","timestamp":"1753917636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"efa206db-18e4-571c-9485-ecfceb9d9f58","type":"url","category":"Network activity","to_ids":true,"value":"http://39.99.141.149:2053","comment":"https://x.com/drb_ra/status/1950698070108512339","timestamp":"1753917636","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dff40f50-0c81-5a7e-b12a-a43d7ff00419","type":"url","category":"Network activity","to_ids":true,"value":"http://78.24.223.191:443","comment":"https://x.com/drb_ra/status/1950698716215623775","timestamp":"1753917790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dbb4d11c-4dc4-5817-ae12-d7a50deb6b4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.24.223.191","comment":"https://x.com/drb_ra/status/1950698716215623775","timestamp":"1753917790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"92cc187c-e409-5cc8-ba6c-479c4e2dd3c6","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.165.37:80","comment":"https://x.com/drb_ra/status/1950698855873605935","timestamp":"1753917824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cbfffab6-4f72-5be1-8aaa-2e99e2e7e4dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.165.37","comment":"https://x.com/drb_ra/status/1950698855873605935","timestamp":"1753917824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bfd1e689-df89-5465-8325-cbb4b50e41f7","type":"domain","category":"Network activity","to_ids":true,"value":"bfm2024.xyz","comment":"https://x.com/drb_ra/status/1950698995535257999","timestamp":"1753917857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b51d9f5a-ee5d-5c7d-b661-e8eee32bc4ae","type":"url","category":"Network activity","to_ids":true,"value":"https://bfm2024.xyz/pixel.gif","comment":"https://x.com/drb_ra/status/1950698995535257999","timestamp":"1753917857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"52ea6e25-bff5-54df-9326-8eb2b1250167","type":"url","category":"Network activity","to_ids":true,"value":"http://39.99.141.149:80","comment":"https://x.com/drb_ra/status/1950698995535257999","timestamp":"1753917857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"de58d920-635e-5b10-9ea5-818815dad1bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.99.141.149","comment":"https://x.com/drb_ra/status/1950698995535257999","timestamp":"1753917857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f4a6aefd-4da3-5982-8445-dfc45d500fa3","type":"url","category":"Network activity","to_ids":true,"value":"http://47.254.149.115:8081","comment":"https://x.com/drb_ra/status/1950699135251714414","timestamp":"1753917890","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2b3e7291-7864-540a-acdf-a9b30cdfde1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.254.149.115","comment":"https://x.com/drb_ra/status/1950699135251714414","timestamp":"1753917890","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0e897cf0-f944-5af9-8f60-d4e5fc8444c8","type":"domain","category":"Network activity","to_ids":true,"value":"appsuite-sources.weebly.com","comment":"https://x.com/urldna_bot/status/1950708028627386875","timestamp":"1753920011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"44435465-ceb2-5a38-9f49-c42126d733e1","type":"url","category":"Network activity","to_ids":true,"value":"https://appsuite-sources.weebly.com","comment":"https://x.com/urldna_bot/status/1950708028627386875","timestamp":"1753920011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"294cf228-0960-53cf-81a7-8f558425ea0e","type":"domain","category":"Network activity","to_ids":true,"value":"offworldempires.com","comment":"https://x.com/skocherhan/status/1950708382106620148","timestamp":"1753920095","distribution":"5"},{"uuid":"d5105423-5a08-5fed-9abd-0a0158bdd6e0","type":"url","category":"Network activity","to_ids":true,"value":"http://offworldempires.com/mrtech-solutions.com","comment":"https://x.com/skocherhan/status/1950708382106620148","timestamp":"1753920095","distribution":"5"},{"uuid":"e8c326ba-bae1-5752-9489-c7592aba1e93","type":"domain","category":"Network activity","to_ids":true,"value":"eki-net-vapeer.shyzdsm.cn","comment":"https://x.com/catnap707/status/1950710631105253419","timestamp":"1753920631","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36ecce98-1477-590d-a825-3c350cfd9a69","type":"url","category":"Network activity","to_ids":true,"value":"http://eki-net-vapeer.shyzdsm.cn/Perosnal_member/","comment":"https://x.com/catnap707/status/1950710631105253419","timestamp":"1753920631","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c14eb4d3-1a6b-5382-8bf8-cedfc57aeb0e","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.166.60","comment":"https://x.com/catnap707/status/1950710631105253419","timestamp":"1753920631","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c3d6c97-e3f4-5121-8574-63ddbea8533d","type":"url","category":"Network activity","to_ids":true,"value":"http://ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1950719329265385544","timestamp":"1753922705","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"eccf2b6a-66dc-5ca4-b4b1-a1c4c07cf5be","type":"domain","category":"Network activity","to_ids":true,"value":"ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1950719329265385544","timestamp":"1753922705","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"dc595979-9564-5ac8-a0a8-c19626e0d0cf","type":"domain","category":"Network activity","to_ids":true,"value":"trackings-torset.wtsssds.cn","comment":"https://x.com/Metemcyber/status/1950725943124779088","timestamp":"1753924282","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29ff17b5-153d-5f95-afce-7d9b8600e369","type":"url","category":"Network activity","to_ids":true,"value":"https://trackings-torset.wtsssds.cn/japeanposder/","comment":"https://x.com/Metemcyber/status/1950725943124779088","timestamp":"1753924282","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"487ebb2a-5cf2-5e75-8d20-cf0ead14b85d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.26.153","comment":"https://x.com/Metemcyber/status/1950725943124779088","timestamp":"1753924282","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"16a977e9-797d-5488-b811-3d997ec04b74","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.136.138","comment":"https://x.com/Metemcyber/status/1950725943124779088","timestamp":"1753924282","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40fca4ef-0843-56f2-a07f-224669909343","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.203.64","comment":"https://x.com/Metemcyber/status/1950727894499787144","timestamp":"1753924747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4ad58c51-7676-57db-9bc0-9ed4de0319f3","type":"url","category":"Network activity","to_ids":true,"value":"https://mastercard-identi.vhgdcvntd.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1950727894499787144","timestamp":"1753924747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5eb23cdf-3c0b-56be-a695-5a5ca48763c8","type":"domain","category":"Network activity","to_ids":true,"value":"mastercard-identi.vhgdcvntd.cn","comment":"https://x.com/Metemcyber/status/1950727894499787144","timestamp":"1753924747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"281c0b98-d557-50a4-a048-d68362acc6f2","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.44.193","comment":"https://x.com/Metemcyber/status/1950727894499787144","timestamp":"1753924747","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a25e29d9-0d57-5c75-a13c-0bcf54a36ea9","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.15.46","comment":"https://x.com/Metemcyber/status/1950730406996873328","timestamp":"1753925346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43799cde-149b-5457-8add-ba5b198e9ac8","type":"url","category":"Network activity","to_ids":true,"value":"https://dhl-couldment.veryyes.cn/portal_login_exp/getQuoteTab/","comment":"https://x.com/Metemcyber/status/1950730406996873328","timestamp":"1753925346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54776928-fb41-5e9c-a6c4-9dc5f57a093d","type":"domain","category":"Network activity","to_ids":true,"value":"dhl-couldment.veryyes.cn","comment":"https://x.com/Metemcyber/status/1950730406996873328","timestamp":"1753925346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35b52536-1bd0-5c81-9ec6-c77cf3e5bb90","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.205.135","comment":"https://x.com/Metemcyber/status/1950730406996873328","timestamp":"1753925346","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"098e2646-3e22-5f49-b51f-50f2985a46c0","type":"url","category":"Network activity","to_ids":true,"value":"https://i1r2e9.top/yqTd5jtNmj","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3e9ea5d-ac21-5a13-b3ff-ef936b782a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.85.82.194","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a72eefa-48a3-5125-a247-eabdadff9b35","type":"url","category":"Network activity","to_ids":true,"value":"http://47.85.82.194","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dddf38ad-7b98-529b-9bc7-a89bbd8d1346","type":"domain","category":"Network activity","to_ids":true,"value":"i1r2e9.top","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d30f919a-634c-58d1-b4a3-5982103a71e1","type":"domain","category":"Network activity","to_ids":true,"value":"wxqno5.top","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1dd392b-58b4-544b-94c9-f5b3e4ba51d0","type":"domain","category":"Network activity","to_ids":true,"value":"zo6qtf.top","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fe49485-7577-52ac-941c-f3075015e6af","type":"url","category":"Network activity","to_ids":true,"value":"https://wxqno5.top/yqTd5jtNmj","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2711658-18f9-5d7c-b003-dd898eb4b23d","type":"url","category":"Network activity","to_ids":true,"value":"https://zo6qtf.top/yqTd5jtNmj","comment":"https://x.com/Metemcyber/status/1950732223671669018","timestamp":"1753925779","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74199dd8-495c-5319-9e0d-a24b6c275fc3","type":"domain","category":"Network activity","to_ids":true,"value":"buscaonline9.shop","comment":"https://x.com/urldna_bot/status/1950738210771894328","timestamp":"1753927207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ae1c9a9c-8534-5797-a4ea-9f27258ea258","type":"url","category":"Network activity","to_ids":true,"value":"https://buscaonline9.shop","comment":"https://x.com/urldna_bot/status/1950738210771894328","timestamp":"1753927207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e0f31ab6-4e44-505c-b74a-24a2c7184a81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.61.198.34","comment":"https://x.com/romonlyht/status/1950745944355754145","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46d03d7c-8502-5825-baf4-6f591cb3217a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.238.64.211","comment":"https://x.com/romonlyht/status/1950745942539558977","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcde430f-a2df-59ed-bf13-38908b7c5c15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.253.120.237","comment":"https://x.com/romonlyht/status/1950745942539558977","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8148886e-4bff-5431-a4a0-e2d3deee4dfa","type":"url","category":"Network activity","to_ids":true,"value":"http://bqbq.de/gjgkhfiy/index.html?uid=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1950745944355754145","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0985dc23-8561-5c21-8bc8-edce4ff9c224","type":"domain","category":"Network activity","to_ids":true,"value":"bqbq.de","comment":"https://x.com/romonlyht/status/1950745944355754145","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3ee66a9-2396-51a2-ae78-5649a6103113","type":"url","category":"Network activity","to_ids":true,"value":"http://bqbq.de/gjgkhfiy/bot.php","comment":"https://x.com/romonlyht/status/1950745944355754145","timestamp":"1753929050","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/catnap707/status/1950747225556148495","timestamp":"1753929356","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/catnap707/status/1950747225556148495","timestamp":"1753929356","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/catnap707/status/1950747225556148495","timestamp":"1753929356","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"450ccf6c-95a7-54c1-a46b-ff0e5a2daf4f","type":"domain","category":"Network activity","to_ids":true,"value":"info-monex.rywak.com","comment":"https://x.com/catnap707/status/1950747225556148495","timestamp":"1753929356","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82b8149d-6c50-5c1f-bd03-1d08ecb7ee98","type":"url","category":"Network activity","to_ids":true,"value":"http://info-monex.rywak.com/support/?login=~","comment":"https://x.com/catnap707/status/1950747225556148495","timestamp":"1753929356","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3603329-b988-5f30-8616-8331b29ed0c1","type":"url","category":"Network activity","to_ids":true,"value":"http://www.16zipai.xyz/t0ik/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"80f0f34d-6580-55e5-ab93-46329a1877ce","type":"domain","category":"Network activity","to_ids":true,"value":"3533callegavanzo.com","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"346a58b5-59db-52a2-b0eb-e0abf44378ba","type":"domain","category":"Network activity","to_ids":true,"value":"1996baokd.top","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"20da6be0-3370-57ef-a767-1667b1e335a1","type":"url","category":"Network activity","to_ids":true,"value":"http://www.1996baokd.top/9seb/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3486e071-b736-5947-9801-1ded7c0ec938","type":"url","category":"Network activity","to_ids":true,"value":"http://www.14jewxn.sbs/ds0w/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"900e8975-2eb1-53b6-8294-51b8f0c7571d","type":"url","category":"Network activity","to_ids":true,"value":"http://www.3533callegavanzo.com/f3ip/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d365960a-0153-5aef-94c4-51aeec4c9f50","type":"domain","category":"Network activity","to_ids":true,"value":"3egcfl.cyou","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"28c27739-28b9-547b-9112-b34044845e05","type":"url","category":"Network activity","to_ids":true,"value":"http://www.3egcfl.cyou/dunk/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c80118fe-0265-581a-b607-49e0f6c35a65","type":"domain","category":"Network activity","to_ids":true,"value":"16zipai.xyz","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"257645b0-1337-5f48-a3b5-74567231c042","type":"domain","category":"Network activity","to_ids":true,"value":"0543cq.com","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"99a273a4-56b1-55d0-9793-edfadeb7fa46","type":"domain","category":"Network activity","to_ids":true,"value":"127368.buzz","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c304b4ea-9380-512b-98d9-1ce9078c335c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.0w3jy.com/dhxt/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d70f2039-6561-5142-aa2c-255daadef162","type":"domain","category":"Network activity","to_ids":true,"value":"0w3jy.com","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4de0c695-fb68-5463-8a3b-c3153804a072","type":"url","category":"Network activity","to_ids":true,"value":"http://www.0543cq.com/ermr/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"564eba3d-55ef-591b-af68-5f13420de4be","type":"domain","category":"Network activity","to_ids":true,"value":"14jewxn.sbs","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"49d3d94c-81ff-54be-869a-835af389c236","type":"url","category":"Network activity","to_ids":true,"value":"http://www.031234440.xyz/cc2i/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"86df9206-d679-57d3-b744-dfa8df52881f","type":"domain","category":"Network activity","to_ids":true,"value":"031234440.xyz","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"28cc0c35-c3f3-5c78-a48b-cab4df9f90ae","type":"url","category":"Network activity","to_ids":true,"value":"http://www.127368.buzz/ohdd/","comment":"https://x.com/skocherhan/status/1950749142000488458","timestamp":"1753929813","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8e6336d0-b864-5e9d-b7a7-2a382cc0fedb","type":"domain","category":"Network activity","to_ids":true,"value":"bybit-log-in-auth.webflow.io","comment":"https://x.com/urldna_bot/status/1950768412734459930","timestamp":"1753934407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"98c88ddc-6ed1-5674-afb7-796c1d95ae55","type":"url","category":"Network activity","to_ids":true,"value":"http://bybit-log-in-auth.webflow.io","comment":"https://x.com/urldna_bot/status/1950768412734459930","timestamp":"1753934407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dc3f0ac8-e085-5c5d-8ac2-76497b5a2619","type":"md5","category":"Payload delivery","to_ids":true,"value":"d98ed7f95003332a873fbb03c9ec1237","comment":"https://x.com/JangPr0/status/1950785865305018870","timestamp":"1753938568","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cca6cd0e-4de0-5778-a1f6-5d5e8087b1ac","type":"md5","category":"Payload delivery","to_ids":true,"value":"20b6d0b1f9b2bfa388510e35b7fece61","comment":"https://x.com/JangPr0/status/1950791209003425796","timestamp":"1753939842","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"722a0aa8-ccc6-5d0f-85d0-4750bfc6f37c","type":"domain","category":"Network activity","to_ids":true,"value":"etc-mentsav.dbqegb.cn","comment":"https://x.com/Metemcyber/status/1950798080523042995","timestamp":"1753941481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62a950ba-886a-508f-8532-358cd456cde8","type":"url","category":"Network activity","to_ids":true,"value":"https://etc-mentsav.dbqegb.cn/Rfuncc1013000extfunc/","comment":"https://x.com/Metemcyber/status/1950798080523042995","timestamp":"1753941481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55add78b-8423-54b8-a6a1-4a8051626580","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.207.146","comment":"https://x.com/Metemcyber/status/1950798080523042995","timestamp":"1753941481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d19a7d74-17ba-5c25-b021-cc37c68a7ff4","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.15.219","comment":"https://x.com/Metemcyber/status/1950798080523042995","timestamp":"1753941481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0cd8f5a4-9893-5773-953b-a64444086548","type":"domain","category":"Network activity","to_ids":true,"value":"eki-zonship.jmfore.cn","comment":"https://x.com/Metemcyber/status/1950800330318651612","timestamp":"1753942017","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4200541e-d121-5c75-9b26-8d124996fed5","type":"url","category":"Network activity","to_ids":true,"value":"https://eki-zonship.jmfore.cn/Perosnal_member/","comment":"https://x.com/Metemcyber/status/1950800330318651612","timestamp":"1753942017","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1950800330318651612","timestamp":"1753942017","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03828a91-6aa7-5dee-b993-6a31b8f586d9","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.45.54","comment":"https://x.com/Metemcyber/status/1950803408375439647","timestamp":"1753942751","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e38aa68c-fb50-5688-a053-65bee30fb6d8","type":"domain","category":"Network activity","to_ids":true,"value":"mygas-sheati.caxahw.cn","comment":"https://x.com/Metemcyber/status/1950803408375439647","timestamp":"1753942751","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a056a7e-016c-5703-af47-f807829531b6","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.210.77","comment":"https://x.com/Metemcyber/status/1950803408375439647","timestamp":"1753942751","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32805b4c-a92b-5616-a02f-7dd1491fa66b","type":"url","category":"Network activity","to_ids":true,"value":"https://mygas-sheati.caxahw.cn/mtgalogin/","comment":"https://x.com/Metemcyber/status/1950803408375439647","timestamp":"1753942751","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3e0b15d-ed05-5b21-bd1e-cc3228817c94","type":"url","category":"Network activity","to_ids":true,"value":"http://23.177.184.243:8080","comment":"https://x.com/galkofahi/status/1950807771496026215","timestamp":"1753943791","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"d7f4ee8c-a1ff-5b19-91ff-8ac3a51d28d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.177.184.243","comment":"https://x.com/galkofahi/status/1950807771496026215","timestamp":"1753943791","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"4cfab16d-74af-5dd8-a7d6-26d8616dc37e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.228.141.131:443","comment":"https://x.com/drb_ra/status/1950810324648493070","timestamp":"1753944400","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e4db7550-6b1e-50e1-9e2b-d7df2f5cc6ca","type":"url","category":"Network activity","to_ids":true,"value":"http://54.159.231.42:9601","comment":"https://x.com/drb_ra/status/1950810472208298179","timestamp":"1753944435","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e22152cb-5623-536d-9d4e-2d5ff32163dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.159.231.42","comment":"https://x.com/drb_ra/status/1950810472208298179","timestamp":"1753944435","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b5796c62-58c7-5282-a4bb-159acf47c3a8","type":"url","category":"Network activity","to_ids":true,"value":"http://144.24.71.247:443","comment":"https://x.com/drb_ra/status/1950810612801392664","timestamp":"1753944469","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"9bfde1c6-f2cc-5eea-a008-596bb98b0a07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.24.71.247","comment":"https://x.com/drb_ra/status/1950810612801392664","timestamp":"1753944469","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"eda0dcd0-3431-5036-9d71-f40b295ecf9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.83.191.129","comment":"https://x.com/drb_ra/status/1950810752656306642","timestamp":"1753944502","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3e6cb26d-72b1-529e-8cd0-bf7bd83ddfbd","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.191.129:443","comment":"https://x.com/drb_ra/status/1950810752656306642","timestamp":"1753944502","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"edca985e-68bd-585a-9aba-ca2e48915e88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.34.226.54","comment":"https://x.com/drb_ra/status/1950811030096916870","timestamp":"1753944568","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"0f6e4169-63aa-556d-9b99-4fe1ecd93da4","type":"url","category":"Network activity","to_ids":true,"value":"http://144.34.226.54:36430","comment":"https://x.com/drb_ra/status/1950811030096916870","timestamp":"1753944568","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e617ccb9-a4c3-5515-b487-c5ce5436db8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.238.232.4","comment":"https://x.com/drb_ra/status/1950811169050046892","timestamp":"1753944601","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"2d23d353-eeac-5b8a-b51e-b4dc42a631af","type":"url","category":"Network activity","to_ids":true,"value":"http://34.238.232.4:443","comment":"https://x.com/drb_ra/status/1950811169050046892","timestamp":"1753944601","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"11ae95ee-2be5-54bb-bb48-9a244ba4102d","type":"url","category":"Network activity","to_ids":true,"value":"http://138.124.123.107:7443","comment":"https://x.com/drb_ra/status/1950811308078580148","timestamp":"1753944634","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a29639b2-d8b3-545c-ab4c-a933ec6f603b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.124.123.107","comment":"https://x.com/drb_ra/status/1950811308078580148","timestamp":"1753944634","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"056550e1-95af-517a-ae0b-aee010efff1a","type":"url","category":"Network activity","to_ids":true,"value":"http://117.247.198.235:31337","comment":"https://x.com/drb_ra/status/1950811447497232568","timestamp":"1753944668","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"05edf7cb-b2fb-5454-8848-204d89ff09d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.247.198.235","comment":"https://x.com/drb_ra/status/1950811447497232568","timestamp":"1753944668","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"35fa9270-7397-5e53-952f-0de52c3d4063","type":"url","category":"Network activity","to_ids":true,"value":"http://123.163.223.199:40000","comment":"https://x.com/drb_ra/status/1950811586773274874","timestamp":"1753944701","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1cf37266-ca8d-5937-b7c9-175d88a17c35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.163.223.199","comment":"https://x.com/drb_ra/status/1950811586773274874","timestamp":"1753944701","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"dec96496-9ec1-58e2-841a-863e6cd0967b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.102.138.57","comment":"https://x.com/drb_ra/status/1950811724463874516","timestamp":"1753944734","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c418b716-a454-5a3c-a750-b6f559241db4","type":"url","category":"Network activity","to_ids":true,"value":"http://66.102.138.57:31337","comment":"https://x.com/drb_ra/status/1950811724463874516","timestamp":"1753944734","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5f4c3d61-1620-50cf-8ef6-808261adf84c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.99.198.194","comment":"https://x.com/drb_ra/status/1950811866717934058","timestamp":"1753944768","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8a475ef1-84fb-500e-92aa-23cae5379645","type":"url","category":"Network activity","to_ids":true,"value":"http://167.99.198.194:31337","comment":"https://x.com/drb_ra/status/1950811866717934058","timestamp":"1753944768","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f39398c4-d3f8-5b1f-9394-fe09c85408ea","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.79.159:443","comment":"https://x.com/drb_ra/status/1950812005238997493","timestamp":"1753944801","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"419e48f1-2419-5380-bf1d-777845f22aa7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.79.159","comment":"https://x.com/drb_ra/status/1950812005238997493","timestamp":"1753944801","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fe6d713b-d5b6-5761-82db-ee78b04212b3","type":"url","category":"Network activity","to_ids":true,"value":"http://152.89.218.30:443","comment":"https://x.com/drb_ra/status/1950812143143539016","timestamp":"1753944833","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c899dcdd-69c8-5f4d-9b11-9b6a04619e1f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.89.218.30","comment":"https://x.com/drb_ra/status/1950812143143539016","timestamp":"1753944833","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4fe181ce-2b3d-5004-9bb1-3940fc8efcc0","type":"url","category":"Network activity","to_ids":true,"value":"http://216.126.225.57:443","comment":"https://x.com/drb_ra/status/1950812283111612546","timestamp":"1753944867","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c3201ece-8b8e-552c-a449-891007d20155","type":"url","category":"Network activity","to_ids":true,"value":"http://216.126.225.57:31337","comment":"https://x.com/drb_ra/status/1950812421020422224","timestamp":"1753944900","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f0837dc7-0751-54bb-a8a5-603641935a0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.126.225.57","comment":"https://x.com/drb_ra/status/1950812421020422224","timestamp":"1753944900","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"906e1be3-99e4-50a5-8f00-d20e275e142c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.75.155.46","comment":"https://x.com/drb_ra/status/1950813067136114855","timestamp":"1753945054","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"85f0652c-be1f-5e96-855e-c1cbb6e6f9b1","type":"url","category":"Network activity","to_ids":true,"value":"http://159.75.155.46:4321","comment":"https://x.com/drb_ra/status/1950813067136114855","timestamp":"1753945054","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9035b91f-2e81-5703-80da-ca3a7e1ba7eb","type":"url","category":"Network activity","to_ids":true,"value":"http://34.38.216.20:443","comment":"https://x.com/drb_ra/status/1950813205975990712","timestamp":"1753945087","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7b7f6c7b-8d7b-5b01-940b-a834425ce15d","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.158.42:8808","comment":"https://x.com/drb_ra/status/1950813344115359992","timestamp":"1753945120","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"72d467a6-e5ea-57b0-99ae-f9bf28b2dcb6","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.158.42:2404","comment":"https://x.com/drb_ra/status/1950813482485449177","timestamp":"1753945153","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"523ec0a6-3529-5140-94c1-e03c29d65ecb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.158.42","comment":"https://x.com/drb_ra/status/1950813621476380957","timestamp":"1753945186","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c447452a-ee46-5eb3-8682-a177ee61b9f9","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.158.42:443","comment":"https://x.com/drb_ra/status/1950813621476380957","timestamp":"1753945186","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e1f90408-7e6e-59a0-a516-58b35f8fb00f","type":"url","category":"Network activity","to_ids":true,"value":"http://216.9.224.52:2077","comment":"https://x.com/drb_ra/status/1950813761608044704","timestamp":"1753945219","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"33d5d4b6-6513-581c-add1-a9a935f063e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.9.224.52","comment":"https://x.com/drb_ra/status/1950813761608044704","timestamp":"1753945219","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e66e4219-988b-5f73-8810-480c4beb3808","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.223.67:2404","comment":"https://x.com/drb_ra/status/1950813900712079659","timestamp":"1753945252","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"731edf76-0b47-5ad9-a6da-81aed776ecdd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.223.67","comment":"https://x.com/drb_ra/status/1950813900712079659","timestamp":"1753945252","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"2e49e6c5-6c61-5b6c-9f04-dac9ed41f012","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.15.140.131","comment":"https://x.com/drb_ra/status/1950814039845540249","timestamp":"1753945286","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"96d5d009-c6a1-547e-89d7-6fc40204fdc2","type":"url","category":"Network activity","to_ids":true,"value":"http://179.15.140.131:2404","comment":"https://x.com/drb_ra/status/1950814039845540249","timestamp":"1753945286","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a898443f-bc9d-5dc6-b9ba-81afaf7d5463","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.81.62.139","comment":"https://x.com/drb_ra/status/1950814177842344077","timestamp":"1753945319","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"68e4d037-4407-5ef1-b3a2-226dcb512be6","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.62.139:8888","comment":"https://x.com/drb_ra/status/1950814177842344077","timestamp":"1753945319","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e269011d-199d-528b-bded-fbec7f524607","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.170:2404","comment":"https://x.com/drb_ra/status/1950814316921299005","timestamp":"1753945352","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"2d73802b-0231-5928-b28d-7a63b713db8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.170","comment":"https://x.com/drb_ra/status/1950814316921299005","timestamp":"1753945352","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7f9fdb5a-b332-5fcb-825a-62d3103f8c18","type":"url","category":"Network activity","to_ids":true,"value":"http://104.36.83.75:2505","comment":"https://x.com/drb_ra/status/1950814455329145272","timestamp":"1753945385","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"092c7f0a-1d02-5a3c-ae43-3036f57ce786","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.36.83.75","comment":"https://x.com/drb_ra/status/1950814455329145272","timestamp":"1753945385","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"02744202-c7e8-503e-b6b2-3689395f313c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.9","comment":"https://x.com/drb_ra/status/1950814593741095356","timestamp":"1753945418","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c5fde18d-99be-580f-995c-aafc41a0e5cb","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.9:2404","comment":"https://x.com/drb_ra/status/1950814593741095356","timestamp":"1753945418","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5a5e078c-75d5-5722-98d9-4847594e173e","type":"url","category":"Network activity","to_ids":true,"value":"http://216.9.224.34:16090","comment":"https://x.com/drb_ra/status/1950814732916527550","timestamp":"1753945451","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0febb2f3-916e-5a3f-abf9-33f16e53e752","type":"url","category":"Network activity","to_ids":true,"value":"http://216.9.224.34:16070","comment":"https://x.com/drb_ra/status/1950814871047606459","timestamp":"1753945484","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7e67fbde-2935-5c9c-a62a-bb5fc2901ea7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.9.224.34","comment":"https://x.com/drb_ra/status/1950814871047606459","timestamp":"1753945484","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d31588cc-e07d-56bf-90b1-e96a24764bc3","type":"url","category":"Network activity","to_ids":true,"value":"http://91.92.120.100:2404","comment":"https://x.com/drb_ra/status/1950815010155802762","timestamp":"1753945517","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c97404f2-69d4-5635-af36-167c4e44e69b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.92.120.100","comment":"https://x.com/drb_ra/status/1950815010155802762","timestamp":"1753945517","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"03efcc6b-a748-58b9-8f99-f7c01b54a213","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.113.153:2404","comment":"https://x.com/drb_ra/status/1950815147905184238","timestamp":"1753945550","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4d1341c7-2054-5b6e-9468-6fbd915591dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.113.153","comment":"https://x.com/drb_ra/status/1950815147905184238","timestamp":"1753945550","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"11643ce6-b4bf-5505-ae40-d25d1da99778","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.113.21:2404","comment":"https://x.com/drb_ra/status/1950815286635974975","timestamp":"1753945583","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"392470c7-bf64-55f1-b11e-299b9b3ad7da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.113.21","comment":"https://x.com/drb_ra/status/1950815286635974975","timestamp":"1753945583","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1e2affb1-6397-554c-a980-f6e789d3816b","type":"url","category":"Network activity","to_ids":true,"value":"http://179.14.11.248:2404","comment":"https://x.com/drb_ra/status/1950815425056411746","timestamp":"1753945616","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"72dd6aa9-881e-5ab7-8f36-149d7c8f1df0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.14.11.248","comment":"https://x.com/drb_ra/status/1950815425056411746","timestamp":"1753945616","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"60aeb78f-b381-5784-b582-2a71a2f6e0ac","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.177:2404","comment":"https://x.com/drb_ra/status/1950815563279647025","timestamp":"1753945649","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c2f2f446-bb16-57e3-b1f4-eedbed6f3c88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.177","comment":"https://x.com/drb_ra/status/1950815563279647025","timestamp":"1753945649","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c5b36f4b-7ed5-5d0c-80fb-981f00f493d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.179","comment":"https://x.com/drb_ra/status/1950815701830156676","timestamp":"1753945682","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6603fdd5-632e-5396-b47f-8035e19cc460","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.179:5000","comment":"https://x.com/drb_ra/status/1950815701830156676","timestamp":"1753945682","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5b65addc-ec8b-5c5a-95b7-d8f8f9828d46","type":"url","category":"Network activity","to_ids":true,"value":"http://185.143.228.159:9090","comment":"https://x.com/drb_ra/status/1950815840510619979","timestamp":"1753945715","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9a48d7dd-332d-55b6-8a4f-35507d8835c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.143.228.159","comment":"https://x.com/drb_ra/status/1950815840510619979","timestamp":"1753945715","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f53a2b41-904a-55ae-9460-e75da9a9cd1f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.242.237.39","comment":"https://x.com/drb_ra/status/1950815979300175982","timestamp":"1753945748","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f5cc68c2-2e29-5007-acb6-1742c03329ee","type":"url","category":"Network activity","to_ids":true,"value":"http://38.242.237.39:2404","comment":"https://x.com/drb_ra/status/1950815979300175982","timestamp":"1753945748","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ca0c1e08-479a-5407-9b4f-d304efdbc255","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.49.221","comment":"https://x.com/drb_ra/status/1950816117653447108","timestamp":"1753945781","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f43044ba-4097-5da1-b5bb-9703392c2857","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.49.221:3232","comment":"https://x.com/drb_ra/status/1950816117653447108","timestamp":"1753945781","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"9a72e0ed-12ef-5428-a58c-e688a6b2698f","type":"url","category":"Network activity","to_ids":true,"value":"http://103.140.239.174:80","comment":"https://x.com/drb_ra/status/1950816257286013060","timestamp":"1753945814","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"0c0e8016-9e1b-5709-bd33-3fadc4887bd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.140.239.174","comment":"https://x.com/drb_ra/status/1950816257286013060","timestamp":"1753945814","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"6b30e1c8-d481-5121-b36f-c02a0534cb51","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.63.107:4840","comment":"https://x.com/drb_ra/status/1950816395941359916","timestamp":"1753945847","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"deb67dac-4115-56e7-b78e-d034172fffb0","type":"url","category":"Network activity","to_ids":true,"value":"http://3.99.188.26:35547","comment":"https://x.com/drb_ra/status/1950816534428836130","timestamp":"1753945880","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6fb25601-be38-5dc8-9f59-34ff6607a585","type":"url","category":"Network activity","to_ids":true,"value":"http://45.10.244.209:7443","comment":"https://x.com/drb_ra/status/1950816672115224640","timestamp":"1753945913","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bc4cb8a7-6353-5248-8977-12a2e227cdb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.10.244.209","comment":"https://x.com/drb_ra/status/1950816672115224640","timestamp":"1753945913","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c6219e19-b9a3-52df-b41b-2395a7308845","type":"url","category":"Network activity","to_ids":true,"value":"http://151.115.78.120:443","comment":"https://x.com/drb_ra/status/1950816810200101016","timestamp":"1753945946","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d5db7f07-5bd3-55c5-ac90-dff4dec2bd0c","type":"url","category":"Network activity","to_ids":true,"value":"http://151.115.78.120:80","comment":"https://x.com/drb_ra/status/1950816948335391126","timestamp":"1753945979","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dac39e63-100a-55b1-95ab-ac67efd5ea41","type":"url","category":"Network activity","to_ids":true,"value":"http://151.115.78.120:25","comment":"https://x.com/drb_ra/status/1950817086214738092","timestamp":"1753946012","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"35bd4849-e497-5f6f-9e4e-e9b84731f09e","type":"url","category":"Network activity","to_ids":true,"value":"http://151.115.78.120:587","comment":"https://x.com/drb_ra/status/1950817224777777525","timestamp":"1753946045","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"06fdfe33-110b-5f48-94f2-62901737ec20","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.115.78.120","comment":"https://x.com/drb_ra/status/1950817224777777525","timestamp":"1753946045","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a545ef33-20bf-5289-873d-c9322b905e81","type":"url","category":"Network activity","to_ids":true,"value":"http://35.223.178.212:587","comment":"https://x.com/drb_ra/status/1950817364066324777","timestamp":"1753946078","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"31ea4380-0e50-5b82-b75c-715142f1c4c8","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.182.4","comment":"https://x.com/catnap707/status/1950817479875240386","timestamp":"1753946106","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5aa344dd-d88b-514d-a29c-613edcaf496f","type":"url","category":"Network activity","to_ids":true,"value":"http://yodobashi-citizen.hqoxfc.cn/login_index/","comment":"https://x.com/catnap707/status/1950817479875240386","timestamp":"1753946106","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e2df67c-eabb-5389-b857-9334c2ebb384","type":"domain","category":"Network activity","to_ids":true,"value":"yodobashi-citizen.hqoxfc.cn","comment":"https://x.com/catnap707/status/1950817479875240386","timestamp":"1753946106","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41b39f3c-9868-58fb-a20a-20544c0fd2b3","type":"url","category":"Network activity","to_ids":true,"value":"http://35.223.178.212:465","comment":"https://x.com/drb_ra/status/1950817502872670646","timestamp":"1753946111","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"70c77f76-056c-5fbc-90b7-78bb5d339cfe","type":"url","category":"Network activity","to_ids":true,"value":"http://35.223.178.212:443","comment":"https://x.com/drb_ra/status/1950817641712554300","timestamp":"1753946144","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2137b219-25aa-55b7-8442-e456b02a9f38","type":"url","category":"Network activity","to_ids":true,"value":"http://35.223.178.212:80","comment":"https://x.com/drb_ra/status/1950817780527214594","timestamp":"1753946177","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d5058067-f0ca-5c10-98ea-6789b33267e5","type":"url","category":"Network activity","to_ids":true,"value":"http://35.223.178.212:25","comment":"https://x.com/drb_ra/status/1950817919501242816","timestamp":"1753946211","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8c00bfce-c646-59bb-851c-e50e83f86ee8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.223.178.212","comment":"https://x.com/drb_ra/status/1950817919501242816","timestamp":"1753946211","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8fc60741-ad70-5ffd-9a96-5fa2ca80aff6","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.151.38:8888","comment":"https://x.com/drb_ra/status/1950818057846194581","timestamp":"1753946244","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"cedda20f-68d6-5b8d-a5b1-9dbe0f9624ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.151.38","comment":"https://x.com/drb_ra/status/1950818057846194581","timestamp":"1753946244","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"229f9ab4-52a4-58f9-b849-511dde0772f6","type":"url","category":"Network activity","to_ids":true,"value":"http://23.27.169.64:9898","comment":"https://x.com/drb_ra/status/1950818196803502269","timestamp":"1753946277","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"d23e0c15-3846-5f88-b1ff-cda8bc2a2814","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.27.169.64","comment":"https://x.com/drb_ra/status/1950818196803502269","timestamp":"1753946277","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b313e70b-d52a-5b79-ab07-2d6e4d4688d2","type":"url","category":"Network activity","to_ids":true,"value":"http://149.109.82.24:443","comment":"https://x.com/drb_ra/status/1950818334653448438","timestamp":"1753946310","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"654a401c-dc2d-5016-9b53-ca232a8ef587","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.109.82.24","comment":"https://x.com/drb_ra/status/1950818334653448438","timestamp":"1753946310","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"660c56d4-ecd7-55b4-8fbd-3faea14f06dc","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.185.134:995","comment":"https://x.com/drb_ra/status/1950818472977478047","timestamp":"1753946343","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"14a76a69-1258-5daf-b6df-36d6d4f8082b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.61.21","comment":"https://x.com/drb_ra/status/1950818612152795424","timestamp":"1753946376","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"f275029f-6f6b-5613-ae78-2d4cd53cb7c5","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.61.21:443","comment":"https://x.com/drb_ra/status/1950818612152795424","timestamp":"1753946376","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"976f0eb4-3609-5881-b8d2-4339f7014f54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.171.239.168","comment":"https://x.com/drb_ra/status/1950818752590713258","timestamp":"1753946409","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"805c96ae-b831-5e98-99ab-77f61b14ba24","type":"url","category":"Network activity","to_ids":true,"value":"http://20.171.239.168:80","comment":"https://x.com/drb_ra/status/1950818752590713258","timestamp":"1753946409","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"31cfc916-62ca-57ec-b003-514daf0483c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.248.154.28","comment":"https://x.com/drb_ra/status/1950818890725908531","timestamp":"1753946442","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fb075667-73af-5747-bb54-8185eb1cfb4c","type":"url","category":"Network activity","to_ids":true,"value":"http://192.248.154.28:443","comment":"https://x.com/drb_ra/status/1950818890725908531","timestamp":"1753946442","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e371464d-77cd-5642-9540-fc6eb601b712","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.135.155","comment":"https://x.com/drb_ra/status/1950819028366143974","timestamp":"1753946475","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"bfcdf7c1-9d9e-5bbc-846b-64779d37e35a","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.135.155:443","comment":"https://x.com/drb_ra/status/1950819028366143974","timestamp":"1753946475","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6b623a5a-e124-59c3-b886-3cb6dd481213","type":"url","category":"Network activity","to_ids":true,"value":"http://3.212.35.166:443","comment":"https://x.com/drb_ra/status/1950819167289909698","timestamp":"1753946508","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0b2bdb42-1101-5ab0-85d6-30cd39f6fa30","type":"url","category":"Network activity","to_ids":true,"value":"http://120.223.239.172:10250","comment":"https://x.com/drb_ra/status/1950819304808517777","timestamp":"1753946541","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f70ecbb3-7c04-5a6d-9b29-7832a593772c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.223.239.172","comment":"https://x.com/drb_ra/status/1950819304808517777","timestamp":"1753946541","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6d0f7984-11f7-5619-80b6-145d7c4f6d51","type":"url","category":"Network activity","to_ids":true,"value":"http://185.143.220.95:8384","comment":"https://x.com/drb_ra/status/1950819444130795543","timestamp":"1753946574","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c4e423e1-9f4b-5160-a1ab-69dee89d8605","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.143.220.95","comment":"https://x.com/drb_ra/status/1950819444130795543","timestamp":"1753946574","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"530e7b33-b804-5b5c-8110-b1021c67709d","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.164.90:443","comment":"https://x.com/drb_ra/status/1950819582983217255","timestamp":"1753946607","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e9d34b00-6f06-5df6-a024-0ec1a82d7e34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.164.90","comment":"https://x.com/drb_ra/status/1950819582983217255","timestamp":"1753946607","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fabfd192-7635-51d9-9b3e-fb0117338824","type":"url","category":"Network activity","to_ids":true,"value":"http://75.2.13.64:443","comment":"https://x.com/drb_ra/status/1950819721630060954","timestamp":"1753946640","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7029ca3a-8088-53a8-9955-adf2a77a8c06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.2.13.64","comment":"https://x.com/drb_ra/status/1950819721630060954","timestamp":"1753946640","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5c67bf74-298f-5a3f-a18a-0b5aa3bcce73","type":"url","category":"Network activity","to_ids":true,"value":"http://140.233.190.88:40008","comment":"https://x.com/drb_ra/status/1950819860121879003","timestamp":"1753946673","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"0d50038f-266a-54e0-81cf-121dda4f1667","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.233.190.88","comment":"https://x.com/drb_ra/status/1950819860121879003","timestamp":"1753946673","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"70e772e9-444f-5212-a01e-215f00b1a670","type":"domain","category":"Network activity","to_ids":true,"value":"tissotindustrie.com","comment":"https://x.com/SaptangLabs/status/1950828149127954777","timestamp":"1753948650","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"55170334-3edc-51b2-bddb-e8e2cb03f039","type":"url","category":"Network activity","to_ids":true,"value":"http://tissotindustrie.com","comment":"https://x.com/SaptangLabs/status/1950828149127954777","timestamp":"1753948650","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"e00662f9-9708-5b34-9a6e-d2e38fc9b904","type":"url","category":"Network activity","to_ids":true,"value":"https://webmailnetplusrs.weebly.com","comment":"https://x.com/urldna_bot/status/1950828811903181224","timestamp":"1753948808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"288b9ce6-d9f3-58a7-83c3-02685c76efb0","type":"domain","category":"Network activity","to_ids":true,"value":"webmailnetplusrs.weebly.com","comment":"https://x.com/urldna_bot/status/1950828811903181224","timestamp":"1753948808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"567abe79-aa68-5487-962a-c90678c4784d","type":"url","category":"Network activity","to_ids":true,"value":"http://wordplay.ing","comment":"https://x.com/c9lab_soc/status/1950838494374617433","timestamp":"1753951116","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4ce8c795-9b13-5fc1-a44b-435d61c683c6","type":"domain","category":"Network activity","to_ids":true,"value":"login-linkedin.com","comment":"https://x.com/c9lab_soc/status/1950838494374617433","timestamp":"1753951116","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"eb8b1eac-8c03-5eeb-bceb-79eec68b799d","type":"url","category":"Network activity","to_ids":true,"value":"http://login-linkedin.com","comment":"https://x.com/c9lab_soc/status/1950838494374617433","timestamp":"1753951116","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a2ea1e0a-bf97-5367-83e3-8fae405be30e","type":"domain","category":"Network activity","to_ids":true,"value":"wordplay.ing","comment":"https://x.com/c9lab_soc/status/1950838494374617433","timestamp":"1753951116","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ee4ad509-49bd-552d-bf6f-1b45531e6c33","type":"url","category":"Network activity","to_ids":true,"value":"https://x.com/zerodayx1","comment":"https://x.com/JAMESWT_WT/status/1950845770879693267","timestamp":"1753952851","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"ab65190b-4545-5f52-9d6b-7f1ce6316720","type":"url","category":"Network activity","to_ids":true,"value":"http://yywhylvqeqynzik6ibocb53o2nat7lmzn5ynjpar3stndzcgmy6dkgid.onion","comment":"https://x.com/JAMESWT_WT/status/1950845770879693267","timestamp":"1753952851","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f2873025-84d6-52f7-8794-e36a17ff4fea","type":"domain","category":"Network activity","to_ids":true,"value":"yywhylvqeqynzik6ibocb53o2nat7lmzn5ynjpar3stndzcgmy6dkgid.onion","comment":"https://x.com/JAMESWT_WT/status/1950845770879693267","timestamp":"1753952851","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"dc73087e-53a0-5082-aa1b-9db1a2077404","type":"domain","category":"Network activity","to_ids":true,"value":"craxsrat-craxrat-craxsrats-craxs-rat-official.net","comment":"https://x.com/galkofahi/status/1950849361669214551","timestamp":"1753953707","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"5a99b98a-3819-505c-aeb2-5060a4678387","type":"url","category":"Network activity","to_ids":true,"value":"http://craxsrat-craxrat-craxsrats-craxs-rat-official.net","comment":"https://x.com/galkofahi/status/1950849361669214551","timestamp":"1753953707","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"0ea5c76e-be94-5fc2-b265-0733d7b4e2d7","type":"domain","category":"Network activity","to_ids":true,"value":"jeffersonfinancialmvn.weebly.com","comment":"https://x.com/urldna_bot/status/1950859007070986422","timestamp":"1753956007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"093e92e3-77b2-5b1d-8f41-fdab2b680bda","type":"url","category":"Network activity","to_ids":true,"value":"https://jeffersonfinancialmvn.weebly.com","comment":"https://x.com/urldna_bot/status/1950859007070986422","timestamp":"1753956007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b28b7d85-e42b-51f8-b463-6f03a2d0f566","type":"domain","category":"Network activity","to_ids":true,"value":"myxstalk.sbs","comment":"https://x.com/SedimentIV/status/1950860621970366469","timestamp":"1753956392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19bc7f77-e408-5caa-a6c7-3fbec52bcca8","type":"url","category":"Network activity","to_ids":true,"value":"http://myxstalk.sbs","comment":"https://x.com/SedimentIV/status/1950860621970366469","timestamp":"1753956392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"075c886a-906f-5af4-9b02-747ab6034c61","type":"md5","category":"Payload delivery","to_ids":true,"value":"e8f81d0347fcb14e53db86f79f7e66f9","comment":"https://x.com/suyog41/status/1950863888943100111","timestamp":"1753957171","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"24c82d15-a144-5343-905e-445ccf2dca5c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.96.1:443","comment":"https://x.com/drb_ra/status/1950869723345735696","timestamp":"1753958562","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d8f30c98-6fdb-54e9-876c-a1670d57b603","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.96.1:80","comment":"https://x.com/drb_ra/status/1950869864148513093","timestamp":"1753958595","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e6b45fa5-b0b9-583a-b432-ee975bd5412c","type":"domain","category":"Network activity","to_ids":true,"value":"server-web-cdn.vosax32455.workers.dev","comment":"https://x.com/drb_ra/status/1950869864148513093","timestamp":"1753958595","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"70825c5d-b2cb-5925-9798-e0ce0635347e","type":"url","category":"Network activity","to_ids":true,"value":"http://server-web-cdn.vosax32455.workers.dev","comment":"https://x.com/drb_ra/status/1950869864148513093","timestamp":"1753958595","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e554521f-352c-5e98-93f3-7c2222806f8e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"b008997d6b39af478ea4c661f474b4d6930f4d77caf747145690580c70354180","comment":"https://x.com/ShadowChasing1/status/1950871232636924412","timestamp":"1753958921","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5882b743-da8e-5ef1-93c8-1106167fcfc6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.14.25:25941","comment":"https://x.com/drb_ra/status/1950874569004208289","timestamp":"1753959717","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"96403818-4a5a-5c93-bcf7-2e94a494cf62","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.14.25","comment":"https://x.com/drb_ra/status/1950874569004208289","timestamp":"1753959717","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3ac8344c-1a76-5c5b-b058-de55469b7d04","type":"url","category":"Network activity","to_ids":true,"value":"https://47.111.14.25/pixel.gif","comment":"https://x.com/drb_ra/status/1950874569004208289","timestamp":"1753959717","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c265d7d-5185-5c51-a1d5-5e044bb90591","type":"url","category":"Network activity","to_ids":true,"value":"http://8.213.198.50:8081","comment":"https://x.com/drb_ra/status/1950874708724912520","timestamp":"1753959750","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c70b40ed-c5db-55db-b443-2e67ab6f963c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.99.193.152","comment":"https://x.com/drb_ra/status/1950874849271779799","timestamp":"1753959784","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2008b3fe-1a36-5a2b-8c75-2c4308873698","type":"url","category":"Network activity","to_ids":true,"value":"http://65.99.193.152:8088","comment":"https://x.com/drb_ra/status/1950874849271779799","timestamp":"1753959784","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f85ff797-1d84-56b8-ad80-8feda943173a","type":"url","category":"Network activity","to_ids":true,"value":"http://142.171.168.59:2083","comment":"https://x.com/drb_ra/status/1950874988921188732","timestamp":"1753959817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"650e09d2-772a-5ebd-a8b3-07c0be0a53e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.171.168.59","comment":"https://x.com/drb_ra/status/1950874988921188732","timestamp":"1753959817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c0916e27-b0ad-5096-b570-312a74cf9d6e","type":"url","category":"Network activity","to_ids":true,"value":"https://www.qlchacha.top/wc/58462514417","comment":"https://x.com/drb_ra/status/1950875131300946196","timestamp":"1753959851","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3bad5a40-d58a-51c6-a6d3-5f32481f1895","type":"domain","category":"Network activity","to_ids":true,"value":"qlchacha.top","comment":"https://x.com/drb_ra/status/1950875131300946196","timestamp":"1753959851","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b75083ce-da48-534c-a94c-940b3ddcba16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.0.254.101","comment":"https://x.com/drb_ra/status/1950875131300946196","timestamp":"1753959851","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"874ab885-dee6-55e5-9b3f-4d3f0ea95490","type":"url","category":"Network activity","to_ids":true,"value":"http://49.0.254.101:443","comment":"https://x.com/drb_ra/status/1950875131300946196","timestamp":"1753959851","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22b0e874-5774-52e8-ac03-8254c6e6f8d9","type":"domain","category":"Network activity","to_ids":true,"value":"web.d-you.uk","comment":"https://x.com/drb_ra/status/1950875272040902868","timestamp":"1753959885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"41d10cb0-9e7f-5ff9-98ff-d14eb5dec4b1","type":"url","category":"Network activity","to_ids":true,"value":"https://web.d-you.uk/resource/jquery.min.js","comment":"https://x.com/drb_ra/status/1950875272040902868","timestamp":"1753959885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5a9f2573-c2b3-5dcc-ab50-d58904773ff4","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.79.68:443","comment":"https://x.com/drb_ra/status/1950875272040902868","timestamp":"1753959885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ffd849fc-c0c7-57c6-b47d-f405bf6c5671","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.79.68","comment":"https://x.com/drb_ra/status/1950875272040902868","timestamp":"1753959885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2cf06589-6de8-551f-a107-c3fe68de8f94","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.202.108:443","comment":"https://x.com/drb_ra/status/1950875412252221732","timestamp":"1753959918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"685b824f-3983-5a48-931f-50953b3bf7d6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.202.108:80","comment":"https://x.com/drb_ra/status/1950876060196749760","timestamp":"1753960072","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6b52d179-dc66-516e-a57c-0cfe1dc318d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.202.108","comment":"https://x.com/drb_ra/status/1950876060196749760","timestamp":"1753960072","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6a3b0768-4a57-5626-bd96-575b7bfba9de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.26.42","comment":"https://x.com/drb_ra/status/1950878735344767459","timestamp":"1753960710","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e4e5f72e-c5fa-5c31-91c9-9c28d90fdd92","type":"url","category":"Network activity","to_ids":true,"value":"http://47.121.26.42:80","comment":"https://x.com/drb_ra/status/1950878735344767459","timestamp":"1753960710","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dba9ac37-1f5d-5597-892f-6089c6eca4f1","type":"url","category":"Network activity","to_ids":true,"value":"http://115.29.202.62:80","comment":"https://x.com/drb_ra/status/1950878875795267945","timestamp":"1753960744","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7b58e8bf-af7b-5d87-87a8-7482584ada95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.29.202.62","comment":"https://x.com/drb_ra/status/1950878875795267945","timestamp":"1753960744","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9497f9d0-7705-526c-a171-e8e13edd1884","type":"domain","category":"Network activity","to_ids":true,"value":"zimbrafree1.godaddysites.com","comment":"https://x.com/urldna_bot/status/1950889222224609719","timestamp":"1753963211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7734e7e2-411a-5d15-9c4c-0809e693bc20","type":"url","category":"Network activity","to_ids":true,"value":"https://zimbrafree1.godaddysites.com","comment":"https://x.com/urldna_bot/status/1950889222224609719","timestamp":"1753963211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ab102d8d-b7dd-54bc-8744-9513c0d1e716","type":"domain","category":"Network activity","to_ids":true,"value":"lasoriodrens.com","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"e58b9fe5-3e56-5632-98b3-5ba5fa57df4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.173","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"d2b21781-ef9e-59ad-8f2d-47339475743b","type":"domain","category":"Network activity","to_ids":true,"value":"asioklaydpory.com","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"d534226d-c274-5e82-a04a-4bac8ebd31d7","type":"url","category":"Network activity","to_ids":true,"value":"http://asioklaydpory.com/work/","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"6bee016f-2369-599b-a087-668d8ee1a3d3","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.173","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"e769e798-d9ac-5d0c-aec1-297aff80ab70","type":"url","category":"Network activity","to_ids":true,"value":"http://lasoriodrens.com/work/","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"a11bdc46-9286-543c-a1cf-4ac0d9fe4e09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.226","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"08c82a82-70af-530a-b2d9-66ec4c86ae94","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.226","comment":"https://x.com/skocherhan/status/1950891621337215269","timestamp":"1753963782","distribution":"5"},{"uuid":"2f664226-19fd-5c4a-a27e-def6248ad492","type":"domain","category":"Network activity","to_ids":true,"value":"zixroj.click","comment":"https://x.com/masaomi346/status/1950893566345252922","timestamp":"1753964246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9904e956-95b8-5707-9eba-c9eb78bf4da9","type":"url","category":"Network activity","to_ids":true,"value":"https://zixroj.click/plalaupdate25/Sites/index.html","comment":"https://x.com/masaomi346/status/1950893566345252922","timestamp":"1753964246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4ace20e2-0942-5918-825e-e2bad8616f6a","type":"domain","category":"Network activity","to_ids":true,"value":"bardbig.my","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"23d09cd1-79da-5385-915c-89db8ffbac84","type":"domain","category":"Network activity","to_ids":true,"value":"stranlk.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d7a11a94-1ac8-504a-b6bb-9eae82094652","type":"domain","category":"Network activity","to_ids":true,"value":"visctix.lol","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8a6e90a2-079e-54dd-87f9-ebadd0a57ae9","type":"url","category":"Network activity","to_ids":true,"value":"http://stranlk.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"505777a2-0046-5e58-9253-ec8677702f9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.61.165.8","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f4c5b5f2-a884-5af3-8b53-8bad18a4f914","type":"url","category":"Network activity","to_ids":true,"value":"http://visctix.lol","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"38aed48e-ad42-5dc7-930b-68233eed421f","type":"url","category":"Network activity","to_ids":true,"value":"http://tuead.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"01a4045f-a879-52dc-8f35-2967451bec09","type":"url","category":"Network activity","to_ids":true,"value":"http://boxmc.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ecd0e38a-302e-5251-a9c0-e6756b2aa5a3","type":"domain","category":"Network activity","to_ids":true,"value":"iscouzfya.top","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bee1bd6b-c4f5-5e3f-b9aa-5ef278423717","type":"url","category":"Network activity","to_ids":true,"value":"http://iscouzfya.top","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9e18d044-fd8c-5c33-b849-b03be7ddc7fb","type":"url","category":"Network activity","to_ids":true,"value":"http://hejwrgb.club","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8a2b2dc8-fc75-5c79-9acb-a865d90f1bcf","type":"url","category":"Network activity","to_ids":true,"value":"http://bardbig.my","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0fb13953-5467-5ff3-ad47-5fa07493f8f2","type":"domain","category":"Network activity","to_ids":true,"value":"tuead.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"44936cdf-8a4d-5a9e-8b03-29013fed4ac5","type":"domain","category":"Network activity","to_ids":true,"value":"hejwrgb.club","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ea972d9c-08f4-5915-b608-27ee182b600f","type":"domain","category":"Network activity","to_ids":true,"value":"fritron.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0786e36e-3920-5fd3-9fa0-fa3be0910da4","type":"domain","category":"Network activity","to_ids":true,"value":"mocadia.com","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"217db522-307e-5cff-acd4-2e1b4d593a44","type":"url","category":"Network activity","to_ids":true,"value":"http://45.61.165.8","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1abc155e-8e02-5b5e-ae78-021eb119ca37","type":"url","category":"Network activity","to_ids":true,"value":"http://ripenue.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7bd70a93-ff4b-5dab-af55-ab2b871ad473","type":"domain","category":"Network activity","to_ids":true,"value":"vishneviyjazz.ru","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"aceedbeb-e1b5-5d72-8142-01d6c83d8dff","type":"domain","category":"Network activity","to_ids":true,"value":"ripenue.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5547c862-243c-599a-9106-a45d9d99664b","type":"url","category":"Network activity","to_ids":true,"value":"http://fritron.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0ef71731-cc1f-5142-8165-be0e941037c6","type":"url","category":"Network activity","to_ids":true,"value":"http://vishneviyjazz.ru","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6ebda6fc-8902-55f4-ad5c-fe81f8099fbc","type":"domain","category":"Network activity","to_ids":true,"value":"wrenthu.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b2e369d4-f0ad-5993-9503-5d8b93769ae2","type":"url","category":"Network activity","to_ids":true,"value":"http://wrenthu.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"73d5f781-d3d1-513d-8684-41211b15f5c5","type":"domain","category":"Network activity","to_ids":true,"value":"mindlevqtg.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b01fa747-9f35-53ae-bbad-de930002d6cc","type":"url","category":"Network activity","to_ids":true,"value":"http://mindlevqtg.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"26eb4d7b-1ce9-527a-8802-a7474442a4fe","type":"domain","category":"Network activity","to_ids":true,"value":"boxmc.xyz","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8514c889-0cb4-56eb-89e5-3b9af87cc186","type":"url","category":"Network activity","to_ids":true,"value":"http://mocadia.com","comment":"https://x.com/skocherhan/status/1950894519261475020","timestamp":"1753964473","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"be816596-2ec8-59dd-b2e1-d9e0e457ddf4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.239.106.57","comment":"https://x.com/skocherhan/status/1950894576031474133","timestamp":"1753964487","distribution":"5","Tag":[{"name":"Trojan"}]},{"uuid":"4b04e5d8-446a-5888-b8a0-9b3b3ec44526","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.21.189.68","comment":"https://x.com/skocherhan/status/1950894576031474133","timestamp":"1753964487","distribution":"5","Tag":[{"name":"Trojan"}]},{"uuid":"1d692242-bd8a-5a2f-9854-9ce05d449010","type":"md5","category":"Payload delivery","to_ids":true,"value":"377735661c0d5c333e29399b1c9b7d21","comment":"https://x.com/suyog41/status/1950905054757892293","timestamp":"1753966985","distribution":"5"},{"uuid":"17bdac8e-43ad-5ec8-8368-7d1c77c0343c","type":"md5","category":"Payload delivery","to_ids":true,"value":"061ca158a91bdfd03b702b64c86e5ac5","comment":"https://x.com/suyog41/status/1950905054757892293","timestamp":"1753966985","distribution":"5"},{"uuid":"ea278822-868b-5f9a-a226-44cf3dc89dc2","type":"md5","category":"Payload delivery","to_ids":true,"value":"efafbedccf69f98685d78dc1d8bb544b","comment":"https://x.com/suyog41/status/1950905054757892293","timestamp":"1753966985","distribution":"5"},{"uuid":"d7caff2b-fcc4-506f-9207-a6cbb0ac0965","type":"md5","category":"Payload delivery","to_ids":true,"value":"4fca1804b022996c7e2d26560c29cd11","comment":"https://x.com/suyog41/status/1950905054757892293","timestamp":"1753966985","distribution":"5"},{"uuid":"1e9c30d9-cf07-5345-bf65-e5a0ecb479ec","type":"md5","category":"Payload delivery","to_ids":true,"value":"626493333e1ccaa1da20cc8ed808c64e","comment":"https://x.com/suyog41/status/1950905054757892293","timestamp":"1753966985","distribution":"5"},{"uuid":"470a6642-9cac-5fec-9df2-6fc035fcb2c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.12.83.69","comment":"https://x.com/JAMESWT_WT/status/1950907331278970979","timestamp":"1753967528","distribution":"5"},{"uuid":"e5d40ca6-d36a-564e-b612-0415f4c14a78","type":"domain","category":"Network activity","to_ids":true,"value":"connectblockchains.web.app","comment":"https://x.com/urldna_bot/status/1950919409049960612","timestamp":"1753970408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"be20be96-3715-528b-8d41-12c75e0c0128","type":"url","category":"Network activity","to_ids":true,"value":"https://connectblockchains.web.app","comment":"https://x.com/urldna_bot/status/1950919409049960612","timestamp":"1753970408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7846dc2b-9037-5d32-b308-b83723c34672","type":"domain","category":"Network activity","to_ids":true,"value":"speake.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b6719915-6fad-5bfc-9c1c-86567d6dcf71","type":"url","category":"Network activity","to_ids":true,"value":"http://portxo.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"eda8ccc8-021c-55d0-929e-df145d4178cd","type":"url","category":"Network activity","to_ids":true,"value":"http://ptyctdu.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7595b5f0-6a34-5496-b5f0-c293a079dd9e","type":"url","category":"Network activity","to_ids":true,"value":"http://daubhmg.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a3774956-9a57-5419-92d2-d8892a76b07e","type":"domain","category":"Network activity","to_ids":true,"value":"portxo.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"922a9e0a-4f65-572f-aa46-7305dd7c5893","type":"domain","category":"Network activity","to_ids":true,"value":"resigev.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7b60c428-01b2-5a32-9e96-2124f11c9824","type":"domain","category":"Network activity","to_ids":true,"value":"daubhmg.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7851c317-2e96-5f97-a5ce-82883f6a14ce","type":"url","category":"Network activity","to_ids":true,"value":"http://spirbjj.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9d0b4b20-6c07-552a-b969-0fb5fd96a89a","type":"url","category":"Network activity","to_ids":true,"value":"http://resigev.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7cc2a63a-8b4d-5592-ae4f-69f1bce9f9dc","type":"url","category":"Network activity","to_ids":true,"value":"http://speake.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6fc1ac69-ba74-581b-b125-68ccc4911730","type":"url","category":"Network activity","to_ids":true,"value":"http://evolftp.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3bf4c097-4999-55f2-9946-ff541950010a","type":"domain","category":"Network activity","to_ids":true,"value":"ptyctdu.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b415b41a-ba7e-53d6-83a8-7bbec2fb0022","type":"domain","category":"Network activity","to_ids":true,"value":"evolftp.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b00a33ca-61d5-55af-afa2-22ff89126cf0","type":"domain","category":"Network activity","to_ids":true,"value":"spirbjj.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"68985f62-42b1-5a9c-aac2-ad1d8607ad4b","type":"url","category":"Network activity","to_ids":true,"value":"http://loostny.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3b557463-d706-5f86-bd57-7c26ccddcc14","type":"domain","category":"Network activity","to_ids":true,"value":"goldfih.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6eb43ccb-433a-54cb-8802-59f3afac8d7c","type":"url","category":"Network activity","to_ids":true,"value":"http://goldfih.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e8c31f0d-4bdd-51a8-951a-b66a529b4ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://nonmoyj.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8c67f551-fe25-5072-9d09-2da9c2a78a97","type":"url","category":"Network activity","to_ids":true,"value":"http://lineqkd.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2dbedd9f-09fa-5afd-981f-ec5e14b2f1db","type":"domain","category":"Network activity","to_ids":true,"value":"lineqkd.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0c05fd46-7ed8-5d1c-8994-0340bc4dbfb1","type":"domain","category":"Network activity","to_ids":true,"value":"wealy.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c7a1c531-0e49-5e6b-90ea-1865c164ef54","type":"domain","category":"Network activity","to_ids":true,"value":"loostny.lat","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8be6ab00-8377-5afd-8e02-55e330704414","type":"domain","category":"Network activity","to_ids":true,"value":"docugfe.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"cdc1aee0-7736-5151-8932-21051ba53dda","type":"url","category":"Network activity","to_ids":true,"value":"http://docugfe.pics","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"16b552c8-600a-5258-b831-2fa564986d43","type":"domain","category":"Network activity","to_ids":true,"value":"nonmoyj.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"918f9eb7-1d32-5758-ab98-3e001be082c5","type":"url","category":"Network activity","to_ids":true,"value":"http://wealy.lol","comment":"https://x.com/skocherhan/status/1950925819536199847","timestamp":"1753971936","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bc217935-2265-52e8-9f57-aca2143bdc81","type":"domain","category":"Network activity","to_ids":true,"value":"v.tw","comment":"https://x.com/FalconFeedsio/status/1950927600152437064","timestamp":"1753972361","distribution":"5"},{"uuid":"06be83a0-c924-58e0-8b13-2e057c282f92","type":"url","category":"Network activity","to_ids":true,"value":"http://v.tw","comment":"https://x.com/FalconFeedsio/status/1950927600152437064","timestamp":"1753972361","distribution":"5"},{"uuid":"b285c8a2-ad21-5ecb-a024-db0d6a762315","type":"domain","category":"Network activity","to_ids":true,"value":"5615e47XYZ.nxcli.io","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aebad50b-f324-56eb-8cfc-7310a4f3d1bd","type":"url","category":"Network activity","to_ids":true,"value":"http://5615e47XYZ.nxcli.io","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a9ca878-12c3-5446-8a71-45bfa3218f05","type":"domain","category":"Network activity","to_ids":true,"value":"thelocpod.com","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f9479e65-032d-5633-806c-2abda903b41a","type":"url","category":"Network activity","to_ids":true,"value":"http://ff4a0a3XYZ.nxcli.io","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23ec177b-4945-5270-a1aa-59d7b1a9cf95","type":"url","category":"Network activity","to_ids":true,"value":"https://thelocpod.com","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3a6393b-9ae5-54e1-8318-1600cd381dab","type":"domain","category":"Network activity","to_ids":true,"value":"ff4a0a3XYZ.nxcli.io","comment":"https://x.com/jh__1995/status/1950934834626408947","timestamp":"1753974085","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5dd0eb30-afd0-591d-b8bf-5baa5861c817","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.130.154:53","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8cdcdb45-d113-5ad6-8db1-3f8eda17986e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.236.130.154","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"73958432-d1f8-514b-a3c6-e3e2b80da810","type":"url","category":"Network activity","to_ids":true,"value":"https://ns3.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"745f539c-21c5-5a53-9b35-cef5f4812b73","type":"domain","category":"Network activity","to_ids":true,"value":"ns3.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f4cf84c5-86be-5041-b291-9ec6e6835468","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7dd3a8a4-4d42-56af-8a08-67369169f43f","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b2f7373-1e1c-53f4-8231-0c1fa62b8ea2","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.nsebseshop.cloud","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a72b248-8a34-589e-add4-deb0cda6183f","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.nsebseshop.cloud/v/741823546921","comment":"https://x.com/drb_ra/status/1950940401650504123","timestamp":"1753975413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9fe9b2c5-bf8f-54c9-b7b1-d3f01c8cb70e","type":"domain","category":"Network activity","to_ids":true,"value":"gnav-8j0.s3.us-east-2.amazonaws.com","comment":"https://x.com/urldna_bot/status/1950949613386477951","timestamp":"1753977609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ad6a010e-a535-588e-bfdc-c7f4346fbf22","type":"url","category":"Network activity","to_ids":true,"value":"http://gnav-8j0.s3.us-east-2.amazonaws.com/pinnav.html","comment":"https://x.com/urldna_bot/status/1950949613386477951","timestamp":"1753977609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bb278372-b136-5627-9ca9-272e650e9516","type":"url","category":"Network activity","to_ids":true,"value":"http://18.136.205.188:801","comment":"https://x.com/drb_ra/status/1950952209018933344","timestamp":"1753978228","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2fd34659-6e16-530d-9984-0adb255f554f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.136.205.188","comment":"https://x.com/drb_ra/status/1950952209018933344","timestamp":"1753978228","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"39a9c1a7-3667-55f9-89e2-15e49e15f082","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.218.228:80","comment":"https://x.com/drb_ra/status/1950952350408990821","timestamp":"1753978261","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c0a1473-5f3b-5b96-9ad1-a74e59ad2dd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.218.228","comment":"https://x.com/drb_ra/status/1950952350408990821","timestamp":"1753978261","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83ec595e-3c3a-5551-950a-a2dd159c6761","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8089","comment":"https://x.com/drb_ra/status/1950952492860055849","timestamp":"1753978295","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1950952492860055849","timestamp":"1753978295","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ef308f4-3a33-56df-bf78-00fb1c11bdde","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.52.150/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1950952633977483411","timestamp":"1753978329","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5fe9964f-13d7-57d6-a96f-c07134a41d4b","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.140.211:80","comment":"https://x.com/drb_ra/status/1950952633977483411","timestamp":"1753978329","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9b1ecf2e-2352-553d-a597-7d789ceb0f9c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.140.211","comment":"https://x.com/drb_ra/status/1950952633977483411","timestamp":"1753978329","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"747b0a59-4637-5db2-94e4-dce5f4d7829b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.101.74.162","comment":"https://x.com/drb_ra/status/1950953283088007629","timestamp":"1753978484","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f4015560-ee36-5661-a74f-730254c6cc6e","type":"url","category":"Network activity","to_ids":true,"value":"http://39.101.74.162:443","comment":"https://x.com/drb_ra/status/1950953283088007629","timestamp":"1753978484","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ef8d2964-ac1b-5aad-a73a-527d0881e352","type":"domain","category":"Network activity","to_ids":true,"value":"musician.kugou.com","comment":"https://x.com/drb_ra/status/1950953283088007629","timestamp":"1753978484","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2b99ecd2-a22f-5d45-857c-ec5decdc581f","type":"url","category":"Network activity","to_ids":true,"value":"https://musician.kugou.com/dist/css/bootstrap.min.css","comment":"https://x.com/drb_ra/status/1950953283088007629","timestamp":"1753978484","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7eda7cc8-964d-5151-b331-7a73418467ca","type":"sha256","category":"Payload delivery","to_ids":true,"value":"eb5558d414c6f96efeb30db704734c463eb08758a3feacf452d743ba5f8fe662","comment":"https://x.com/skocherhan/status/1950959739212345674","timestamp":"1753980023","distribution":"5"},{"uuid":"15860bf7-e292-528b-82d2-a6395f086d66","type":"domain","category":"Network activity","to_ids":true,"value":"decently.hrstatefarm.pro","comment":"https://x.com/skocherhan/status/1950962528915238993","timestamp":"1753980688","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"128b6856-73ec-58d9-a268-ec2d7d2c6a2f","type":"url","category":"Network activity","to_ids":true,"value":"http://decently.hrstatefarm.pro/6SALYBlZ07SZ6XD/","comment":"https://x.com/skocherhan/status/1950962528915238993","timestamp":"1753980688","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd9c6912-7212-5cd9-8cfd-2b2ab78acd91","type":"md5","category":"Payload delivery","to_ids":true,"value":"51cec87191ec324c6f946c493a86bc74","comment":"https://x.com/ReBensk/status/1950964851741978882","timestamp":"1753981242","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"740af505-1302-59c1-8319-289594210323","type":"url","category":"Network activity","to_ids":true,"value":"http://smokesignal-pncb-h9cuhnfjgqf8cwh8.eastus2-01.azurewebsites.net","comment":"https://x.com/skocherhan/status/1950965871431586126","timestamp":"1753981485","distribution":"5"},{"uuid":"176cb882-bcb7-55f0-8b7f-325b9ae67b1e","type":"domain","category":"Network activity","to_ids":true,"value":"smokesignal-pncb-h9cuhnfjgqf8cwh8.eastus2-01.azurewebsites.net","comment":"https://x.com/skocherhan/status/1950965871431586126","timestamp":"1753981485","distribution":"5"},{"uuid":"f25ec4e1-e0e2-503a-8875-1af441c15ddc","type":"domain","category":"Network activity","to_ids":true,"value":"westneoouyr.weebly.com","comment":"https://x.com/urldna_bot/status/1950979814157881395","timestamp":"1753984809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65ab6e5a-959c-51fb-9b68-54b52b6159f8","type":"url","category":"Network activity","to_ids":true,"value":"https://westneoouyr.weebly.com","comment":"https://x.com/urldna_bot/status/1950979814157881395","timestamp":"1753984809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"795aa860-9532-58ca-8f67-adb810ed13ca","type":"domain","category":"Network activity","to_ids":true,"value":"afrilifehoney.com","comment":"https://x.com/skocherhan/status/1950981868058202477","timestamp":"1753985299","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"76ffda53-47f7-50c0-b4dd-2c9a538a1e57","type":"url","category":"Network activity","to_ids":true,"value":"http://afrilifehoney.com/wp-load.html","comment":"https://x.com/skocherhan/status/1950981868058202477","timestamp":"1753985299","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dada1e5b-fdad-519d-b677-f1889c808647","type":"url","category":"Network activity","to_ids":true,"value":"http://45.78.6.141:443","comment":"https://x.com/drb_ra/status/1950991466190270509","timestamp":"1753987587","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5355df16-c1b1-5e42-8f64-2f4d2f3b0ae9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.78.6.141","comment":"https://x.com/drb_ra/status/1950991466190270509","timestamp":"1753987587","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6994af61-a1ab-58c1-a324-24f903359dd2","type":"url","category":"Network activity","to_ids":true,"value":"http://8.209.214.148:8446","comment":"https://x.com/drb_ra/status/1950991605302747158","timestamp":"1753987621","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b9ef9c82-59ba-517d-be09-e68a4691f4cd","type":"url","category":"Network activity","to_ids":true,"value":"http://176.123.2.6:7443","comment":"https://x.com/drb_ra/status/1950991743156977717","timestamp":"1753987653","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8ce68507-c132-5a56-9383-ced499e0c6ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.123.2.6","comment":"https://x.com/drb_ra/status/1950991743156977717","timestamp":"1753987653","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"3d699212-d25a-53f7-b82b-a1104e45a41d","type":"url","category":"Network activity","to_ids":true,"value":"http://143.198.144.177:7443","comment":"https://x.com/drb_ra/status/1950991882038698080","timestamp":"1753987687","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8fbd3c97-4030-5888-a036-d4c3b59ea96f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.198.144.177","comment":"https://x.com/drb_ra/status/1950991882038698080","timestamp":"1753987687","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"64e968fa-b5e0-5e4f-a72f-4dfcf4af6c00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.75.205.189","comment":"https://x.com/drb_ra/status/1950992019872162003","timestamp":"1753987719","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"c9dd4503-fdb5-57b0-b756-aa2c3df3807e","type":"url","category":"Network activity","to_ids":true,"value":"http://51.75.205.189:8443","comment":"https://x.com/drb_ra/status/1950992019872162003","timestamp":"1753987719","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"0ce82512-92e6-58c7-ab29-9b210d7f5f65","type":"url","category":"Network activity","to_ids":true,"value":"http://158.247.241.219:443","comment":"https://x.com/drb_ra/status/1950992158216839464","timestamp":"1753987752","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"83e4f3d9-eb22-50f3-91d9-7f7f9d4dcceb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.247.241.219","comment":"https://x.com/drb_ra/status/1950992158216839464","timestamp":"1753987752","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"44dbbd1e-8e2c-5f59-aed3-8d16ee252352","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.193.218:443","comment":"https://x.com/drb_ra/status/1950992296599539937","timestamp":"1753987785","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ba50558b-04ae-5c15-a7a7-eb6cf14677fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.193.218","comment":"https://x.com/drb_ra/status/1950992296599539937","timestamp":"1753987785","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d2d97d14-59f9-50d8-8631-bde89159d8a0","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.160.155:13443","comment":"https://x.com/drb_ra/status/1950992434961195092","timestamp":"1753987818","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ecf2f1dd-6945-50b1-ae62-b5b1ee327bb3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.160.155","comment":"https://x.com/drb_ra/status/1950992434961195092","timestamp":"1753987818","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e207d657-51d0-5d33-b401-7840a16459e6","type":"url","category":"Network activity","to_ids":true,"value":"http://24.255.243.54:2404","comment":"https://x.com/drb_ra/status/1950993081299243377","timestamp":"1753987972","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cba25c0a-d6ef-5ec7-b54c-07876b9ed748","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.255.243.54","comment":"https://x.com/drb_ra/status/1950993081299243377","timestamp":"1753987972","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a24c74ba-e0cc-5c78-84ff-8b289c23580a","type":"url","category":"Network activity","to_ids":true,"value":"http://88.214.59.189:2404","comment":"https://x.com/drb_ra/status/1950993220923478083","timestamp":"1753988006","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"bee97446-c3eb-5a24-a25f-62267c1f321d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.214.59.189","comment":"https://x.com/drb_ra/status/1950993220923478083","timestamp":"1753988006","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a5bd9609-094b-5d4f-84b6-2ffffda6c684","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.202.232.196","comment":"https://x.com/drb_ra/status/1950993359696257457","timestamp":"1753988039","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6461fe30-2df8-56ec-81dc-82f5e6c79020","type":"url","category":"Network activity","to_ids":true,"value":"http://203.202.232.196:6374","comment":"https://x.com/drb_ra/status/1950993359696257457","timestamp":"1753988039","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9cd20ce3-beb9-56d0-8452-bd6bba25c975","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.117.47:5000","comment":"https://x.com/drb_ra/status/1950993499626807791","timestamp":"1753988072","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"45759246-6cf6-5a48-8c3b-24d27af45558","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.117.47","comment":"https://x.com/drb_ra/status/1950993499626807791","timestamp":"1753988072","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7eeaa438-4ef8-5879-b365-3f3d8aea44f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.38.133.210","comment":"https://x.com/drb_ra/status/1950993638420349123","timestamp":"1753988105","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f744f4b2-2a31-5f9d-827d-b66365fa2c0e","type":"url","category":"Network activity","to_ids":true,"value":"http://84.38.133.210:2404","comment":"https://x.com/drb_ra/status/1950993638420349123","timestamp":"1753988105","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"72531ee2-7ef6-52de-b937-501a17109ff1","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.148.104:3789","comment":"https://x.com/drb_ra/status/1950993776949768432","timestamp":"1753988138","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"17aa9760-3a22-5e72-9b86-030c6ebd9ea1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.148.104","comment":"https://x.com/drb_ra/status/1950993776949768432","timestamp":"1753988138","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"efa81a1c-461d-5779-8b3d-acd5ac97ecf3","type":"url","category":"Network activity","to_ids":true,"value":"http://15.157.71.70:18082","comment":"https://x.com/drb_ra/status/1950993915869331587","timestamp":"1753988171","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"25efadb9-0f4a-53a0-bf5d-33b68a377740","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.157.71.70","comment":"https://x.com/drb_ra/status/1950994057318011349","timestamp":"1753988205","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6ca6b021-8194-5716-a5a0-3c552a60f60b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.157.71.70:8082","comment":"https://x.com/drb_ra/status/1950994057318011349","timestamp":"1753988205","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f6bed04b-786b-56b3-b5d8-36245b18e422","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.188.220:6699","comment":"https://x.com/drb_ra/status/1950994197583917394","timestamp":"1753988239","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"93e03b95-45f1-5f43-aa7e-fdd8b86ecf4f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.188.220:3299","comment":"https://x.com/drb_ra/status/1950994335958286349","timestamp":"1753988272","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5f66dde4-1a32-5a33-b179-badf6a7580b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.188.220","comment":"https://x.com/drb_ra/status/1950994335958286349","timestamp":"1753988272","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"940ca6b5-40e9-5581-a4bd-77fc28faf8dd","type":"url","category":"Network activity","to_ids":true,"value":"http://3.92.21.197:14548","comment":"https://x.com/drb_ra/status/1950994475376923075","timestamp":"1753988305","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"32d2e8b4-576b-591c-a303-7383e70811fb","type":"url","category":"Network activity","to_ids":true,"value":"http://109.195.115.106:3321","comment":"https://x.com/drb_ra/status/1950994614384517209","timestamp":"1753988338","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c1c3b35a-9c96-5709-825e-0318c8b6b1cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.195.115.106","comment":"https://x.com/drb_ra/status/1950994614384517209","timestamp":"1753988338","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8e2ea1dd-5ee4-5e9f-852a-988b236965c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.245.54","comment":"https://x.com/drb_ra/status/1950994752607752431","timestamp":"1753988371","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ee06c5f8-0697-5032-91ff-2f25afb80d9d","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.245.54:10699","comment":"https://x.com/drb_ra/status/1950994752607752431","timestamp":"1753988371","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dbcc2b87-ab7a-55fa-9ea7-9040dacb2302","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.62.49.104","comment":"https://x.com/drb_ra/status/1950994891724423432","timestamp":"1753988404","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f157507e-03b4-5501-86c7-159e5745ee72","type":"url","category":"Network activity","to_ids":true,"value":"http://13.62.49.104:41795","comment":"https://x.com/drb_ra/status/1950994891724423432","timestamp":"1753988404","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ad973dc7-64d3-5995-ae7f-fe0223ed085b","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.35.244:80","comment":"https://x.com/drb_ra/status/1950995029935398928","timestamp":"1753988437","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"70338128-cfea-508b-954b-1733007c2262","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.48.58:8888","comment":"https://x.com/drb_ra/status/1950995168515014824","timestamp":"1753988470","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"aa807943-5cf2-510b-9ed9-e311bfd9b9fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.48.58","comment":"https://x.com/drb_ra/status/1950995168515014824","timestamp":"1753988470","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"fe7b4ef6-260a-55e7-814f-cd209392ce0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.143.217.68","comment":"https://x.com/drb_ra/status/1950995306482467121","timestamp":"1753988503","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"acbcc692-eaa1-5bce-8ffb-1a7704819d97","type":"url","category":"Network activity","to_ids":true,"value":"http://85.143.217.68:8443","comment":"https://x.com/drb_ra/status/1950995306482467121","timestamp":"1753988503","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"29a285eb-adb7-51e1-bf8d-71ed744f47e4","type":"url","category":"Network activity","to_ids":true,"value":"http://43.141.131.221:10250","comment":"https://x.com/drb_ra/status/1950995445410369785","timestamp":"1753988536","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"81ec0c3c-695a-50d7-9a1e-88dc1b273a93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.141.131.221","comment":"https://x.com/drb_ra/status/1950995445410369785","timestamp":"1753988536","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5f4bd026-e0d0-55de-9e94-fa239ec7c594","type":"url","category":"Network activity","to_ids":true,"value":"http://192.9.150.144:443","comment":"https://x.com/drb_ra/status/1950995584350888195","timestamp":"1753988569","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"78a0470f-992e-552a-b02d-ce3ae34a5d91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.9.150.144","comment":"https://x.com/drb_ra/status/1950995584350888195","timestamp":"1753988569","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"71e1141b-364f-5c99-943a-f066b8d1f87e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.252.157.156:443","comment":"https://x.com/drb_ra/status/1950995722863558778","timestamp":"1753988602","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"241bd86d-712b-56f2-bc43-10896db81a59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.252.157.156","comment":"https://x.com/drb_ra/status/1950995722863558778","timestamp":"1753988602","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"627eb70a-dc3a-5850-a11b-8910874c8cf1","type":"domain","category":"Network activity","to_ids":true,"value":"docsignauthorizationpoint.regmil.cyou","comment":"https://x.com/skocherhan/status/1950998182126813487","timestamp":"1753989189","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b286f945-349f-5945-aff8-c65df6961c99","type":"url","category":"Network activity","to_ids":true,"value":"http://docsignauthorizationpoint.regmil.cyou/doc/viewpoint","comment":"https://x.com/skocherhan/status/1950998182126813487","timestamp":"1753989189","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb9087a5-e59d-5993-93b3-f75c03d53952","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.21.189.133","comment":"https://x.com/1ZRR4H/status/1950998856549736510","timestamp":"1753989349","distribution":"5"},{"uuid":"ae5f6cfb-0721-5b9b-bc9b-9d803e83daa9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.79.155.133","comment":"https://x.com/drb_ra/status/1950998906877386921","timestamp":"1753989361","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7a932e46-3613-52f7-8cf1-c2fe00d0307b","type":"url","category":"Network activity","to_ids":true,"value":"http://210.79.155.133:8000","comment":"https://x.com/drb_ra/status/1950998906877386921","timestamp":"1753989361","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bca4d34a-498b-55b7-9a58-353a64961e40","type":"sha256","category":"Payload delivery","to_ids":true,"value":"14e6171511d17cca3b66efc7cc9a63eab66fd529445b33d071d8ef4a45e0172a","comment":"https://x.com/1ZRR4H/status/1950999369303425192","timestamp":"1753989472","distribution":"5"},{"uuid":"5ef56251-83e7-5e09-9f31-971f83abd6aa","type":"url","category":"Network activity","to_ids":true,"value":"http://praise-ambien-infected-inform.trycloudflare.com/second.html","comment":"https://x.com/1ZRR4H/status/1950999369303425192","timestamp":"1753989472","distribution":"5"},{"uuid":"132db55e-3253-5761-a461-f20ae35683b6","type":"url","category":"Network activity","to_ids":true,"value":"http://vvindowsupdate.org/Cisco-AnyConnect-win-4.11.msi","comment":"https://x.com/1ZRR4H/status/1950999369303425192","timestamp":"1753989472","distribution":"5"},{"uuid":"047ce11b-e059-5cd9-92f2-3c8b968067e1","type":"domain","category":"Network activity","to_ids":true,"value":"vvindowsupdate.org","comment":"https://x.com/1ZRR4H/status/1950999369303425192","timestamp":"1753989472","distribution":"5"},{"uuid":"21f6d19e-bd05-5ecd-becd-9f9c4a27e700","type":"domain","category":"Network activity","to_ids":true,"value":"praise-ambien-infected-inform.trycloudflare.com","comment":"https://x.com/1ZRR4H/status/1950999369303425192","timestamp":"1753989472","distribution":"5"},{"uuid":"170e51f9-c024-59c8-a933-50cad80e3b8c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.206.82.44","comment":"https://x.com/skocherhan/status/1951003436226585064","timestamp":"1753990441","distribution":"5"},{"uuid":"9e86d950-6e64-5335-a62f-db4aba3031b7","type":"domain","category":"Network activity","to_ids":true,"value":"ghczyzsttmudspezbhnmcwiv.com","comment":"https://x.com/skocherhan/status/1951003436226585064","timestamp":"1753990441","distribution":"5"},{"uuid":"8698c4ed-e5e2-5187-a90e-5df3d8e899c6","type":"url","category":"Network activity","to_ids":true,"value":"http://ghczyzsttmudspezbhnmcwiv.com","comment":"https://x.com/skocherhan/status/1951003436226585064","timestamp":"1753990441","distribution":"5"},{"uuid":"b9fe3591-2d53-57df-b218-8715548cd8d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.206.82.44","comment":"https://x.com/skocherhan/status/1951003436226585064","timestamp":"1753990441","distribution":"5"},{"uuid":"fd432064-668d-5129-acdf-99e7e577ba80","type":"domain","category":"Network activity","to_ids":true,"value":"manageswiftuberthe-file.top","comment":"https://x.com/skocherhan/status/1951004708207759745","timestamp":"1753990745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ed965c18-77b1-54d6-857a-0d2676f40a00","type":"url","category":"Network activity","to_ids":true,"value":"http://manageswiftuberthe-file.top/4FitZop346oaRoxIaKETo0RUD4zbs_e8cOL9OgTH7wk/?cn_par2=540092&cn_par3=fec9db8509054821b929237bb313aafe&cn_par1=2F78NK7","comment":"https://x.com/skocherhan/status/1951004708207759745","timestamp":"1753990745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f9d21bbf-8840-55d6-9a1e-558af9a2ef02","type":"md5","category":"Payload delivery","to_ids":true,"value":"fec9db8509054821b929237bb313aafe","comment":"https://x.com/skocherhan/status/1951004708207759745","timestamp":"1753990745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11f4fefb-3da2-527e-a8e5-93af66ea4020","type":"domain","category":"Network activity","to_ids":true,"value":"onlineadminshaw1mail.weebly.com","comment":"https://x.com/urldna_bot/status/1951010013046063226","timestamp":"1753992009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5939c75d-163c-51b0-a04f-edc082228f7e","type":"url","category":"Network activity","to_ids":true,"value":"https://onlineadminshaw1mail.weebly.com","comment":"https://x.com/urldna_bot/status/1951010013046063226","timestamp":"1753992009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65c1cd2f-d639-55fe-b2c1-b775428e4622","type":"url","category":"Network activity","to_ids":true,"value":"http://85.143.217.68","comment":"https://x.com/threatquery/status/1951025088653828176","timestamp":"1753995604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"3e6b75c6-5ab1-5556-ac58-52f686d0658f","type":"url","category":"Network activity","to_ids":true,"value":"http://8.209.214.148","comment":"https://x.com/threatquery/status/1951025090461593988","timestamp":"1753995604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"474a942f-d9dc-5adf-b90a-76e0fab60c75","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:44132","comment":"https://x.com/SarlackLab/status/1951025147034353744","timestamp":"1753995618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"0808f5cf-b772-5c76-b410-28867ef18da1","type":"domain","category":"Network activity","to_ids":true,"value":"lower-sam.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1951025147034353744","timestamp":"1753995618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"1a52eb52-e199-5348-85e8-e2e6fb81be35","type":"url","category":"Network activity","to_ids":true,"value":"http://lower-sam.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1951025147034353744","timestamp":"1753995618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1951025147034353744","timestamp":"1753995618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"eb7ab7b2-520e-5c60-8745-99c654d4d9ce","type":"domain","category":"Network activity","to_ids":true,"value":"auth-facebook-zh-hk.weebly.com","comment":"https://x.com/s3curetheweb/status/1951037602200477706","timestamp":"1753998587","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dfdd6a1-52d5-50c3-89a1-868a4dec6eed","type":"url","category":"Network activity","to_ids":true,"value":"https://auth-facebook-zh-hk.weebly.com","comment":"https://x.com/s3curetheweb/status/1951037602200477706","timestamp":"1753998587","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5b9dde08-b3a3-5970-bf35-d35f2fb05fc5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.255.237.10/login.php","comment":"https://x.com/skocherhan/status/1951038455829373025","timestamp":"1753998791","distribution":"5"},{"uuid":"7553a125-8f69-5030-bfb7-d76e32763c37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.255.237.10","comment":"https://x.com/skocherhan/status/1951038455829373025","timestamp":"1753998791","distribution":"5"},{"uuid":"e3629005-bb7f-50c7-bd82-374f4868f57d","type":"domain","category":"Network activity","to_ids":true,"value":"fra1.digitaloceanspaces.com","comment":"https://x.com/skocherhan/status/1951040033969799604","timestamp":"1753999167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dfc204c3-5075-55a4-b8bc-354322e1c7e1","type":"url","category":"Network activity","to_ids":true,"value":"http://fra1.digitaloceanspaces.com/docu-sign31072025xgue379390docu0388390secured83082/docu.html","comment":"https://x.com/skocherhan/status/1951040033969799604","timestamp":"1753999167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbd68e33-ba3b-5f32-a06f-c9110888a5da","type":"url","category":"Network activity","to_ids":true,"value":"http://v1-ledgerlive.netlify.app","comment":"https://x.com/urldna_bot/status/1951040196100620342","timestamp":"1753999205","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5a38e842-9216-5475-975b-cdd39bffb9fc","type":"domain","category":"Network activity","to_ids":true,"value":"v1-ledgerlive.netlify.app","comment":"https://x.com/urldna_bot/status/1951040196100620342","timestamp":"1753999205","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4b1c1c61-11f8-5d22-80e4-25499f2aed29","type":"url","category":"Network activity","to_ids":true,"value":"http://vemvemserver.duckdns.org","comment":"https://x.com/SarlackLab/status/1951040256095965351","timestamp":"1753999220","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"730f8bac-3c7c-5e64-806c-4879c26c3997","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.169.69.25","comment":"https://x.com/SarlackLab/status/1951040256095965351","timestamp":"1753999220","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"962a5d7d-b86b-53dd-a256-36eca214df32","type":"url","category":"Network activity","to_ids":true,"value":"http://192.169.69.25:52132","comment":"https://x.com/SarlackLab/status/1951040256095965351","timestamp":"1753999220","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"cb759ee5-73a3-55ed-940a-b47b3eae4253","type":"domain","category":"Network activity","to_ids":true,"value":"vemvemserver.duckdns.org","comment":"https://x.com/SarlackLab/status/1951040256095965351","timestamp":"1753999220","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"a97b9053-942b-54e9-ab09-84c2d096b611","type":"url","category":"Network activity","to_ids":true,"value":"http://uniccshop.su","comment":"https://x.com/skocherhan/status/1951043405166825965","timestamp":"1753999971","distribution":"5"},{"uuid":"62969077-c44c-5a89-ba32-996c9e3322a5","type":"url","category":"Network activity","to_ids":true,"value":"http://93.95.226.202","comment":"https://x.com/skocherhan/status/1951043405166825965","timestamp":"1753999971","distribution":"5"},{"uuid":"15690dac-0f4a-5f4b-97fe-c363ad31b60b","type":"domain","category":"Network activity","to_ids":true,"value":"uniccshop.su","comment":"https://x.com/skocherhan/status/1951043405166825965","timestamp":"1753999971","distribution":"5"},{"uuid":"5b233e8a-a170-5b3c-8399-e2b01f3a49b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.95.226.202","comment":"https://x.com/skocherhan/status/1951043405166825965","timestamp":"1753999971","distribution":"5"},{"uuid":"1f6d4821-ea66-5d89-b498-ee304280b3d5","type":"domain","category":"Network activity","to_ids":true,"value":"briansclub.work","comment":"https://x.com/skocherhan/status/1951043758297858160","timestamp":"1754000055","distribution":"5"},{"uuid":"c90d6b93-d6d9-5e23-adba-9a18f6fe2487","type":"url","category":"Network activity","to_ids":true,"value":"http://briansclub.work/login.php","comment":"https://x.com/skocherhan/status/1951043758297858160","timestamp":"1754000055","distribution":"5"},{"uuid":"9948170d-1319-5e3a-b90e-09c027bb462f","type":"url","category":"Network activity","to_ids":true,"value":"http://89.116.133.168","comment":"https://x.com/skocherhan/status/1951046383571509674","timestamp":"1754000681","distribution":"5"},{"uuid":"b59b0cb6-63ea-5d74-ac96-f31b6de4d2ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.116.133.168","comment":"https://x.com/skocherhan/status/1951046383571509674","timestamp":"1754000681","distribution":"5"},{"uuid":"0320d13b-891c-55b9-965a-e6251424dbca","type":"url","category":"Network activity","to_ids":true,"value":"http://web.archive.org/web/*/chatgpt.com/share/*","comment":"https://x.com/skocherhan/status/1951046737700811023","timestamp":"1754000765","distribution":"5"},{"uuid":"cc2e956c-521a-50a3-9f8d-975058e2cb6f","type":"domain","category":"Network activity","to_ids":true,"value":"ae1db4.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c351c26e-62de-572c-bc7e-821aad6bc971","type":"url","category":"Network activity","to_ids":true,"value":"https://ae1db4.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1d1680a-6635-5168-856e-8654c3aca49f","type":"domain","category":"Network activity","to_ids":true,"value":"bc1xdy.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44334137-f03f-53e3-895f-0b21e6407a84","type":"url","category":"Network activity","to_ids":true,"value":"https://bc1xdy.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f11b2b23-7ff9-5887-8b57-75abec5c91b8","type":"domain","category":"Network activity","to_ids":true,"value":"fy2hsd.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"357af7b6-022d-5fdd-95a5-bb5f4f322b33","type":"url","category":"Network activity","to_ids":true,"value":"https://fy2hsd.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"340bd5e4-8f2c-504c-b453-b209e9364e5b","type":"domain","category":"Network activity","to_ids":true,"value":"gk1niq.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1e44860-939b-55b9-a668-cb480bcd4da2","type":"url","category":"Network activity","to_ids":true,"value":"https://gk1niq.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e8dc80a-3d08-53b9-b1ed-8abc2cc469a2","type":"domain","category":"Network activity","to_ids":true,"value":"i9kdjk.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c06ef1f-cbbe-54bf-a7d2-a11f100f8f9f","type":"url","category":"Network activity","to_ids":true,"value":"https://i9kdjk.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e092e62f-fdd0-58c9-a0f2-4f7d29b409b5","type":"domain","category":"Network activity","to_ids":true,"value":"qj1ili.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0c9fcf5-a435-5af7-a52e-bf8f6d1793d8","type":"url","category":"Network activity","to_ids":true,"value":"https://qj1ili.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93c6eabc-a760-5004-9bde-101e00bf20aa","type":"domain","category":"Network activity","to_ids":true,"value":"xk0dvf.top","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1663088-5cfe-5194-a836-b6e820bee424","type":"url","category":"Network activity","to_ids":true,"value":"https://xk0dvf.top/EvVfglLOg/","comment":"https://x.com/masaomi346/status/1951048116020584473","timestamp":"1754001094","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a8fc71e-716a-57c9-84c5-5bf7e944a6b4","type":"domain","category":"Network activity","to_ids":true,"value":"pub-01c3d3d13dcc4aaa9e7f2f736299e065.r2.dev","comment":"https://x.com/skocherhan/status/1951050043055624576","timestamp":"1754001553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"099991be-8940-5b27-9942-a397df891acb","type":"url","category":"Network activity","to_ids":true,"value":"http://pub-01c3d3d13dcc4aaa9e7f2f736299e065.r2.dev/doll1.html","comment":"https://x.com/skocherhan/status/1951050043055624576","timestamp":"1754001553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23bc6cbf-1471-56c8-9b0f-ff2c448052b7","type":"domain","category":"Network activity","to_ids":true,"value":"djda-rick.com","comment":"https://x.com/skocherhan/status/1951050043055624576","timestamp":"1754001553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"590ad7d1-6e2c-5768-8791-8302d59d738a","type":"url","category":"Network activity","to_ids":true,"value":"http://djda-rick.com","comment":"https://x.com/skocherhan/status/1951050043055624576","timestamp":"1754001553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fcc2f0e-23ba-5620-adad-e38f8db79300","type":"md5","category":"Payload delivery","to_ids":true,"value":"01c3d3d13dcc4aaa9e7f2f736299e065","comment":"https://x.com/skocherhan/status/1951050043055624576","timestamp":"1754001553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9feb8360-ccd7-5d54-8987-95d60f362892","type":"domain","category":"Network activity","to_ids":true,"value":"zmwe.nhsaportal.com","comment":"https://x.com/urldna_bot/status/1951070419319963794","timestamp":"1754006411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bdc2934b-2dc9-5c76-8c28-4cf9aa912532","type":"url","category":"Network activity","to_ids":true,"value":"https://zmwe.nhsaportal.com","comment":"https://x.com/urldna_bot/status/1951070419319963794","timestamp":"1754006411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"52c5710d-fde0-577d-81ac-9f59ca7932a7","type":"domain","category":"Network activity","to_ids":true,"value":"fishnew.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2cef9831-ce6c-52f1-b12e-0d7bff5a64b2","type":"url","category":"Network activity","to_ids":true,"value":"https://fishnew.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12887805-9149-55ca-a335-8b4198eaad8f","type":"domain","category":"Network activity","to_ids":true,"value":"fggbutf.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de71dda3-8936-5a00-b401-f1273446056d","type":"url","category":"Network activity","to_ids":true,"value":"https://fggbutf.cn","comment":"https://x.com/Metemcyber/status/1951093708847534504","timestamp":"1754011964","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7482a3cf-27d2-5b43-ac12-011784093978","type":"url","category":"Network activity","to_ids":true,"value":"https://hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80da2721-b46f-5a98-8e05-1fe0dfd2a316","type":"domain","category":"Network activity","to_ids":true,"value":"hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51c3318d-6a29-5379-ad46-c91e7c23b434","type":"url","category":"Network activity","to_ids":true,"value":"https://knewlog.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a59b56e-08a8-5a36-8f53-259aa302d02b","type":"url","category":"Network activity","to_ids":true,"value":"https://eyyonline.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6dc9129-c121-58da-b195-d94c2849ab15","type":"domain","category":"Network activity","to_ids":true,"value":"knewlog.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad777e99-68ba-509f-8557-cecb84e7ea1c","type":"domain","category":"Network activity","to_ids":true,"value":"eyyonline.cn","comment":"https://x.com/Metemcyber/status/1951093778590343640","timestamp":"1754011981","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23c4a4c4-d198-52ad-82a6-77d3056a5266","type":"url","category":"Network activity","to_ids":true,"value":"https://liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65eb5a49-30a9-5acf-8fbd-78e26ca578c8","type":"url","category":"Network activity","to_ids":true,"value":"https://laiyeling.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c8f0fa2-2f29-5648-a3ad-22edf7868254","type":"domain","category":"Network activity","to_ids":true,"value":"liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"255f07db-791a-5534-8565-75b50fc7455d","type":"domain","category":"Network activity","to_ids":true,"value":"laiyeling.cn","comment":"https://x.com/Metemcyber/status/1951093854121447706","timestamp":"1754011999","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba4906bd-c0bf-522b-a315-6f5f86d25619","type":"url","category":"Network activity","to_ids":true,"value":"https://fubolai.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0233d1e4-9eb3-5999-a83e-b5d50041af23","type":"domain","category":"Network activity","to_ids":true,"value":"duolalife.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffb12536-9c5f-5325-930b-51289275d8d3","type":"domain","category":"Network activity","to_ids":true,"value":"fubolai.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d9f4315-f5ef-5df7-bd3f-b34da2ac2c95","type":"url","category":"Network activity","to_ids":true,"value":"https://duolalife.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"807f20f4-b899-545c-be1b-d76c3fdfbc0e","type":"domain","category":"Network activity","to_ids":true,"value":"fananba.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbeaa4a0-c412-5657-8ebc-271c1740435f","type":"url","category":"Network activity","to_ids":true,"value":"https://fananba.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e52bb16-081b-57c1-b7d9-1419899ab5a8","type":"url","category":"Network activity","to_ids":true,"value":"https://hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9bc2cb56-c538-524c-bbf6-e1ea4bc937f4","type":"domain","category":"Network activity","to_ids":true,"value":"hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1951093928092114991","timestamp":"1754012016","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68d071e5-0765-5e1e-845d-b2b95a0a97c3","type":"url","category":"Network activity","to_ids":true,"value":"https://geagent.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8234f07f-fbab-5654-97b0-377f7bb2c586","type":"domain","category":"Network activity","to_ids":true,"value":"geagent.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f76c2cb5-d6c7-53bd-9467-9a4d3ec1e22c","type":"domain","category":"Network activity","to_ids":true,"value":"lihuawang.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84104d47-2a21-5a0b-a012-b20fb169cc7d","type":"url","category":"Network activity","to_ids":true,"value":"https://lihuawang.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/Metemcyber/status/1951094000943042932","timestamp":"1754012034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf17a554-68c7-5b9b-a8ee-75a22de68200","type":"domain","category":"Network activity","to_ids":true,"value":"klkpobh.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f82831a-fa0f-58c2-b54f-6cd42c9fb71c","type":"url","category":"Network activity","to_ids":true,"value":"https://klkpobh.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"380f7404-b22b-58be-b731-3184705766ac","type":"url","category":"Network activity","to_ids":true,"value":"https://erqhism.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3786faa-e05d-5e67-9580-dcb5d7abba56","type":"domain","category":"Network activity","to_ids":true,"value":"hackwps.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9085948-103e-53dd-9cf6-e2953aaf7357","type":"url","category":"Network activity","to_ids":true,"value":"https://hackwps.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bebbc42-7682-5b93-871d-f003ae91b3ed","type":"domain","category":"Network activity","to_ids":true,"value":"erqhism.cn","comment":"https://x.com/Metemcyber/status/1951094076377538652","timestamp":"1754012052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddf48c2c-f8ad-5b58-b0c9-9e9f671df816","type":"url","category":"Network activity","to_ids":true,"value":"http://43.167.237.204","comment":"https://x.com/Metemcyber/status/1951094132887396623","timestamp":"1754012065","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"802460e4-a94f-5999-b9de-c7e6d45086f5","type":"url","category":"Network activity","to_ids":true,"value":"https://zangpiao.cn","comment":"https://x.com/Metemcyber/status/1951094132887396623","timestamp":"1754012065","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7ee4d2d-79d7-51eb-b16d-42489eb0bd9c","type":"domain","category":"Network activity","to_ids":true,"value":"zangpiao.cn","comment":"https://x.com/Metemcyber/status/1951094132887396623","timestamp":"1754012065","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a61029e9-c1fc-5690-8fb6-d96849690ace","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.237.204","comment":"https://x.com/Metemcyber/status/1951094132887396623","timestamp":"1754012065","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6464256-5929-56b5-83af-ad374ba95a27","type":"url","category":"Network activity","to_ids":true,"value":"https://eblagheee.xlphp.net","comment":"https://x.com/urldna_bot/status/1951100602458542361","timestamp":"1754013607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a78bafcc-98c0-56d8-bf12-68789102f7b4","type":"domain","category":"Network activity","to_ids":true,"value":"eblagheee.xlphp.net","comment":"https://x.com/urldna_bot/status/1951100602458542361","timestamp":"1754013607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"248153d2-a8fa-56a0-b041-1b74377b9018","type":"url","category":"Network activity","to_ids":true,"value":"https://au4dfa.top/7gy56s2H/","comment":"https://x.com/Metemcyber/status/1951101785231466880","timestamp":"1754013889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e3d0f78-1ca2-5b7f-ab0d-596c5086121d","type":"domain","category":"Network activity","to_ids":true,"value":"au4dfa.top","comment":"https://x.com/Metemcyber/status/1951101785231466880","timestamp":"1754013889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6434b1ca-b606-50fe-8b0e-eb1e6e2f1094","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.186.152","comment":"https://x.com/Metemcyber/status/1951101785231466880","timestamp":"1754013889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b386e783-8be5-5616-abec-ae49cb6468c3","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.186.152","comment":"https://x.com/Metemcyber/status/1951101785231466880","timestamp":"1754013889","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b349fc75-1283-5b8e-afe7-ae203196e952","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.195.22","comment":"https://x.com/Metemcyber/status/1951105373378846823","timestamp":"1754014745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"902af504-20a6-51d3-81d4-a578964d190e","type":"url","category":"Network activity","to_ids":true,"value":"https://monex-jp.mt-baidu.com/support/","comment":"https://x.com/Metemcyber/status/1951105373378846823","timestamp":"1754014745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"78db6a46-3e59-535b-a1fb-7a45bb6c2814","type":"domain","category":"Network activity","to_ids":true,"value":"monex-jp.mt-baidu.com","comment":"https://x.com/Metemcyber/status/1951105373378846823","timestamp":"1754014745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85945b8b-3c2c-5882-9e44-9a59e052f5f9","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.44.49","comment":"https://x.com/Metemcyber/status/1951105373378846823","timestamp":"1754014745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d2e571b-9afe-553d-a0ef-6d4edbff1934","type":"domain","category":"Network activity","to_ids":true,"value":"fyrtheupwyj.web.app","comment":"https://x.com/urldna_bot/status/1951130811706548471","timestamp":"1754020810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3900908b-d157-53e0-956a-b52249a6ef04","type":"url","category":"Network activity","to_ids":true,"value":"https://fyrtheupwyj.web.app","comment":"https://x.com/urldna_bot/status/1951130811706548471","timestamp":"1754020810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eccf2b6a-66dc-5ca4-b4b1-a1c4c07cf5be","type":"domain","category":"Network activity","to_ids":true,"value":"ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1951135414070419506","timestamp":"1754021907","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"9c3d6c97-e3f4-5121-8574-63ddbea8533d","type":"url","category":"Network activity","to_ids":true,"value":"http://ooie6tet7ggcmlgvtmyvok4s6vha6ecwczssbchbyxrg2r6v2m6zkkad.onion","comment":"https://x.com/fbgwls245/status/1951135414070419506","timestamp":"1754021907","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5ef56251-83e7-5e09-9f31-971f83abd6aa","type":"url","category":"Network activity","to_ids":true,"value":"http://praise-ambien-infected-inform.trycloudflare.com/second.html","comment":"https://x.com/JAMESWT_WT/status/1951139928777150692","timestamp":"1754022984","distribution":"5"},{"uuid":"21f6d19e-bd05-5ecd-becd-9f9c4a27e700","type":"domain","category":"Network activity","to_ids":true,"value":"praise-ambien-infected-inform.trycloudflare.com","comment":"https://x.com/JAMESWT_WT/status/1951139928777150692","timestamp":"1754022984","distribution":"5"},{"uuid":"132db55e-3253-5761-a461-f20ae35683b6","type":"url","category":"Network activity","to_ids":true,"value":"http://vvindowsupdate.org/Cisco-AnyConnect-win-4.11.msi","comment":"https://x.com/JAMESWT_WT/status/1951139928777150692","timestamp":"1754022984","distribution":"5"},{"uuid":"047ce11b-e059-5cd9-92f2-3c8b968067e1","type":"domain","category":"Network activity","to_ids":true,"value":"vvindowsupdate.org","comment":"https://x.com/JAMESWT_WT/status/1951139928777150692","timestamp":"1754022984","distribution":"5"},{"uuid":"bca4d34a-498b-55b7-9a58-353a64961e40","type":"sha256","category":"Payload delivery","to_ids":true,"value":"14e6171511d17cca3b66efc7cc9a63eab66fd529445b33d071d8ef4a45e0172a","comment":"https://x.com/JAMESWT_WT/status/1951139928777150692","timestamp":"1754022984","distribution":"5"},{"uuid":"5a8a6134-786a-5fca-a18a-40262b691f64","type":"url","category":"Network activity","to_ids":true,"value":"https://officialliker.co","comment":"https://x.com/urldna_bot/status/1951161002684235795","timestamp":"1754028008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a71fdcae-7e61-5996-b2d5-5880d15b81fc","type":"domain","category":"Network activity","to_ids":true,"value":"officialliker.co","comment":"https://x.com/urldna_bot/status/1951161002684235795","timestamp":"1754028008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"61cfd593-b69a-5a6a-8114-2fdcdda932ea","type":"url","category":"Network activity","to_ids":true,"value":"http://47.239.169.128","comment":"https://x.com/Metemcyber/status/1951162994811085260","timestamp":"1754028483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2b74acc-6760-54b3-85af-8011ebdd20fa","type":"domain","category":"Network activity","to_ids":true,"value":"gl21gf.top","comment":"https://x.com/Metemcyber/status/1951162994811085260","timestamp":"1754028483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6afdc51-9143-5208-9295-7a479b9f9389","type":"url","category":"Network activity","to_ids":true,"value":"https://gl21gf.top/appelug/","comment":"https://x.com/Metemcyber/status/1951162994811085260","timestamp":"1754028483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8868968b-6049-5bbd-b792-22597b6a9708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.239.169.128","comment":"https://x.com/Metemcyber/status/1951162994811085260","timestamp":"1754028483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"853806a0-4f55-574b-9d8d-a4d2f66e21ba","type":"domain","category":"Network activity","to_ids":true,"value":"f0meuc.top","comment":"https://x.com/Metemcyber/status/1951165351238180892","timestamp":"1754029045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e9937719-022f-5bab-8931-42d291f8bef7","type":"url","category":"Network activity","to_ids":true,"value":"https://f0meuc.top/EvVfglLOg/","comment":"https://x.com/Metemcyber/status/1951165351238180892","timestamp":"1754029045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a61472f2-e777-5b35-9020-8318f33a5acd","type":"md5","category":"Payload delivery","to_ids":true,"value":"3e2512be2fe26790b3a370051e96999a","comment":"https://x.com/ReBensk/status/1951165394489864621","timestamp":"1754029055","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"da04640f-9408-5f6d-a83a-c97690f522cf","type":"md5","category":"Payload delivery","to_ids":true,"value":"0cf8f4e13f168ac1ec0421af5945c5a3","comment":"https://x.com/ReBensk/status/1951166151876329557","timestamp":"1754029236","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"25b17bf6-fa29-5954-a1c2-039c27759414","type":"url","category":"Network activity","to_ids":true,"value":"https://v2t4zy.top/EvVfglLOg/","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f1ea3c6e-06ab-5ee4-85ac-08f23757d607","type":"domain","category":"Network activity","to_ids":true,"value":"v2t4zy.top","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1951167550680866952","timestamp":"1754029569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e0ebe6a-7f27-527f-883a-5e7c4f8bbaee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.200.77.114","comment":"https://x.com/drb_ra/status/1951172508415049892","timestamp":"1754030751","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"66688fe4-40ab-5ed4-a939-eaf64c5e8524","type":"url","category":"Network activity","to_ids":true,"value":"http://84.200.77.114:31337","comment":"https://x.com/drb_ra/status/1951172508415049892","timestamp":"1754030751","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"060ceb96-3a05-5de3-be5d-470d5846e564","type":"url","category":"Network activity","to_ids":true,"value":"http://77.110.123.63:31337","comment":"https://x.com/drb_ra/status/1951172645967323634","timestamp":"1754030784","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"95ce2c72-07b6-585c-bc5b-8ed55f484b57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.110.123.63","comment":"https://x.com/drb_ra/status/1951172645967323634","timestamp":"1754030784","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"eb82a0c4-51c3-5e54-bb94-392f5d8de33d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.9.205.40","comment":"https://x.com/drb_ra/status/1951172784282894463","timestamp":"1754030817","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2fb96a99-d31e-5d62-b884-d1b580b4ca67","type":"url","category":"Network activity","to_ids":true,"value":"http://85.9.205.40:443","comment":"https://x.com/drb_ra/status/1951172784282894463","timestamp":"1754030817","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2c6f3d79-20ec-565f-af15-4638461ed017","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.163.206.136","comment":"https://x.com/drb_ra/status/1951172924456518076","timestamp":"1754030850","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3d195b20-344a-5eea-92ca-680293080ea6","type":"url","category":"Network activity","to_ids":true,"value":"http://123.163.206.136:40000","comment":"https://x.com/drb_ra/status/1951172924456518076","timestamp":"1754030850","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d53f6193-d56b-56fd-91cf-11729cd5d05e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.24.70.88","comment":"https://x.com/drb_ra/status/1951173572728148042","timestamp":"1754031005","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d86b10ab-c70f-5ca0-8035-91b60fad2822","type":"url","category":"Network activity","to_ids":true,"value":"http://16.24.70.88:7170","comment":"https://x.com/drb_ra/status/1951173572728148042","timestamp":"1754031005","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b6594b62-a944-5ee3-8928-4841678eb997","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.60.219:55615","comment":"https://x.com/drb_ra/status/1951173710947217493","timestamp":"1754031038","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e02e4a97-098b-561c-9b79-9895dadf2dc1","type":"md5","category":"Payload delivery","to_ids":true,"value":"5aa109e379e15bcc885e4cd114878fb9","comment":"https://x.com/suyog41/status/1951173713715667054","timestamp":"1754031039","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"cd4efec0-7028-5c87-88d4-c7d1ce4a2fe7","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.60.219:25565","comment":"https://x.com/drb_ra/status/1951173850437234898","timestamp":"1754031071","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b100704c-6423-5c82-8efa-859995170d17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.60.219","comment":"https://x.com/drb_ra/status/1951173850437234898","timestamp":"1754031071","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b4adc50e-cf05-5ca3-bcd6-031ff57d9041","type":"url","category":"Network activity","to_ids":true,"value":"http://5.226.191.18:8808","comment":"https://x.com/drb_ra/status/1951173989302411424","timestamp":"1754031104","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6a3d82f0-13a6-5cd6-956e-95b8a94198f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.93.177.187","comment":"https://x.com/drb_ra/status/1951174126711762988","timestamp":"1754031137","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"07da7222-92a9-51de-b880-378e7038ed35","type":"url","category":"Network activity","to_ids":true,"value":"http://147.93.177.187:45500","comment":"https://x.com/drb_ra/status/1951174126711762988","timestamp":"1754031137","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"53a95c8a-d7cc-5c31-bda2-f0c853bda7fe","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.145.138:80","comment":"https://x.com/drb_ra/status/1951174266336190528","timestamp":"1754031170","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8e1c3be8-83a4-5214-b0bd-d787b09aba41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.182.145.138","comment":"https://x.com/drb_ra/status/1951174403439440104","timestamp":"1754031203","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dfe12a98-88df-5698-92aa-0cc1beb7c33c","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.145.138:25","comment":"https://x.com/drb_ra/status/1951174403439440104","timestamp":"1754031203","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"21fd79e6-f55c-5b79-bc56-47a7f9d01f60","type":"url","category":"Network activity","to_ids":true,"value":"http://83.217.220.229:443","comment":"https://x.com/drb_ra/status/1951174542363337184","timestamp":"1754031236","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"309b435d-09c6-5055-be6b-7b27a6b85887","type":"url","category":"Network activity","to_ids":true,"value":"http://83.217.220.229:80","comment":"https://x.com/drb_ra/status/1951174679751688273","timestamp":"1754031269","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ae5b85d1-7142-5e33-9595-4f561a0d1c48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.217.220.229","comment":"https://x.com/drb_ra/status/1951174679751688273","timestamp":"1754031269","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"233307de-4e7a-5548-8e18-2eb6d2344ce9","type":"url","category":"Network activity","to_ids":true,"value":"http://93.127.142.157:80","comment":"https://x.com/drb_ra/status/1951174819107520782","timestamp":"1754031302","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"84f40e2a-5ad8-53aa-bc2f-88f7f6150265","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.127.142.157","comment":"https://x.com/drb_ra/status/1951174819107520782","timestamp":"1754031302","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"89a3489c-425b-51dc-90e4-7ff5da6f8b08","type":"url","category":"Network activity","to_ids":true,"value":"http://162.213.249.133:4000","comment":"https://x.com/drb_ra/status/1951174960048906267","timestamp":"1754031336","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"b0a1bf50-6b94-5036-a335-992b298b347f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.213.249.133","comment":"https://x.com/drb_ra/status/1951174960048906267","timestamp":"1754031336","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"53a8fa23-b5e4-5aa9-8e7f-cea9e356380e","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.221.58:8888","comment":"https://x.com/drb_ra/status/1951175096694899094","timestamp":"1754031368","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"0ed8c222-c39c-5b87-a266-0b2bfd46e93e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.221.58","comment":"https://x.com/drb_ra/status/1951175096694899094","timestamp":"1754031368","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"68f8cef4-36f2-5f7c-8e31-837125739089","type":"url","category":"Network activity","to_ids":true,"value":"http://103.233.8.39:8888","comment":"https://x.com/drb_ra/status/1951175237183189193","timestamp":"1754031402","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"b0ff6d7b-8715-55c4-bd92-bad6707d1113","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.233.8.39","comment":"https://x.com/drb_ra/status/1951175237183189193","timestamp":"1754031402","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"c9c39967-fb10-573c-b7d4-259eeefe9ff6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.71.219:445","comment":"https://x.com/drb_ra/status/1951175376392339947","timestamp":"1754031435","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e5e7a0f4-04f6-5675-9bdc-899fbbfbb8a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.71.219","comment":"https://x.com/drb_ra/status/1951175376392339947","timestamp":"1754031435","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"83f8d355-6d2a-560e-8d7d-ef4573d4f1ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.182.244.59","comment":"https://x.com/drb_ra/status/1951175513759723629","timestamp":"1754031468","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"388922ad-c59a-58f9-ace9-4739e5fc79ce","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.244.59:443","comment":"https://x.com/drb_ra/status/1951175513759723629","timestamp":"1754031468","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c1054069-324d-53ae-9673-a63279ad03eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.59.231.46","comment":"https://x.com/drb_ra/status/1951175655040684283","timestamp":"1754031501","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5402677a-24e2-5823-b8b2-5644f49cf1a2","type":"url","category":"Network activity","to_ids":true,"value":"http://137.59.231.46:40181","comment":"https://x.com/drb_ra/status/1951175655040684283","timestamp":"1754031501","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"56a5cb62-1059-5da3-a27d-7542c5a0e5a8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.71.14.166","comment":"https://x.com/drb_ra/status/1951175795738812786","timestamp":"1754031535","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"860ddb42-1bb4-55b8-a64f-881d3cfb99bf","type":"url","category":"Network activity","to_ids":true,"value":"http://202.71.14.166:443","comment":"https://x.com/drb_ra/status/1951175795738812786","timestamp":"1754031535","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"944d496f-af57-5067-a547-254cf9f02d25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.198.91.116","comment":"https://x.com/drb_ra/status/1951175940467306905","timestamp":"1754031569","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"6a5744c0-f86d-51c9-bc32-e8523446a9ba","type":"url","category":"Network activity","to_ids":true,"value":"http://143.198.91.116:8080","comment":"https://x.com/drb_ra/status/1951175940467306905","timestamp":"1754031569","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"172ba5cf-09d0-521c-987f-d6646b66d3fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.153.138.122","comment":"https://x.com/drb_ra/status/1951176080737574967","timestamp":"1754031603","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"94a55516-0d17-5c00-b82e-9be353207171","type":"url","category":"Network activity","to_ids":true,"value":"http://82.153.138.122:443","comment":"https://x.com/drb_ra/status/1951176080737574967","timestamp":"1754031603","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"10d00646-9638-50fa-ac2a-b2050a766c18","type":"url","category":"Network activity","to_ids":true,"value":"http://16.171.254.61:443","comment":"https://x.com/drb_ra/status/1951176220076560486","timestamp":"1754031636","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"aff86ce1-8f56-5ec2-aa7e-7bf4eada9219","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.171.254.61","comment":"https://x.com/drb_ra/status/1951176220076560486","timestamp":"1754031636","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"75608552-0ea7-514c-a314-cb03a8412559","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.63.237:443","comment":"https://x.com/drb_ra/status/1951176358257700997","timestamp":"1754031669","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4fc01a24-2545-545d-8c8b-b99d45e1e117","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.63.237","comment":"https://x.com/drb_ra/status/1951176358257700997","timestamp":"1754031669","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ea2f4244-8989-5532-ab1e-6eb23f7e80c8","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.17:443","comment":"https://x.com/drb_ra/status/1951176497340748128","timestamp":"1754031702","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5ec256b3-ae33-5564-8eef-c67026ecdfed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.17","comment":"https://x.com/drb_ra/status/1951176497340748128","timestamp":"1754031702","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"04b5deb3-0d68-58ee-930f-080dcbd57491","type":"url","category":"Network activity","to_ids":true,"value":"http://18.143.195.26:443","comment":"https://x.com/drb_ra/status/1951176639771017379","timestamp":"1754031736","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"288d9647-a5f9-52bd-8886-0a56c638e78f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.143.195.26","comment":"https://x.com/drb_ra/status/1951176639771017379","timestamp":"1754031736","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"5ab9019d-a5e4-5246-b042-ca4527b44477","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.244.234.231","comment":"https://x.com/drb_ra/status/1951176777742610749","timestamp":"1754031769","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c25ef003-2d1f-545a-aa7c-146e139ad042","type":"url","category":"Network activity","to_ids":true,"value":"http://54.244.234.231:443","comment":"https://x.com/drb_ra/status/1951176777742610749","timestamp":"1754031769","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0c7b443e-01d8-5427-9b2f-559b3a7658ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.55.67.75","comment":"https://x.com/drb_ra/status/1951176916448473430","timestamp":"1754031802","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"47f59aca-84ba-5efd-91f2-2fb55471e42d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.55.67.75:7443","comment":"https://x.com/drb_ra/status/1951176916448473430","timestamp":"1754031802","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"70142021-4e93-54ee-9634-9c7f67597a80","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.172.39:7443","comment":"https://x.com/drb_ra/status/1951177055112143040","timestamp":"1754031835","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"817f873c-ac56-594a-b5b1-603672555887","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.172.39","comment":"https://x.com/drb_ra/status/1951177055112143040","timestamp":"1754031835","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"912ad3bb-257a-5562-8f4d-324a92cbc021","type":"ip-dst","category":"Network activity","to_ids":true,"value":"57.182.176.173","comment":"https://x.com/drb_ra/status/1951177192429531403","timestamp":"1754031868","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"593677f6-9f09-5ea7-b316-570ffe5204bd","type":"url","category":"Network activity","to_ids":true,"value":"http://57.182.176.173:80","comment":"https://x.com/drb_ra/status/1951177192429531403","timestamp":"1754031868","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"3b5b8e6d-c1da-5910-9a2f-46f95519d41e","type":"url","category":"Network activity","to_ids":true,"value":"http://108.61.205.235:8443","comment":"https://x.com/drb_ra/status/1951177332330246165","timestamp":"1754031901","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"70be3326-b448-5731-89e3-b041c766c0f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.61.205.235","comment":"https://x.com/drb_ra/status/1951177332330246165","timestamp":"1754031901","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"05537e56-c633-5ed3-9fbe-87fa747e870e","type":"url","category":"Network activity","to_ids":true,"value":"http://38.47.120.26:31337","comment":"https://x.com/drb_ra/status/1951177471161933848","timestamp":"1754031934","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c94de241-26d4-54e8-9f2b-d1c04f3859d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.47.120.26","comment":"https://x.com/drb_ra/status/1951177471161933848","timestamp":"1754031934","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ea3f04e4-de9d-516b-a00c-c8104b212900","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.122.100","comment":"https://x.com/drb_ra/status/1951178116467958019","timestamp":"1754032088","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"72739a99-0e2c-5fe4-b568-c7d8f5d3405a","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.122.100:8443","comment":"https://x.com/drb_ra/status/1951178116467958019","timestamp":"1754032088","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7f557e39-fc19-5ff9-a6f3-19baa1ed32c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.10.134.202","comment":"https://x.com/drb_ra/status/1951178252728332642","timestamp":"1754032121","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"3770d58a-9aac-5103-943a-35fc1e74360d","type":"url","category":"Network activity","to_ids":true,"value":"http://72.10.134.202:8888","comment":"https://x.com/drb_ra/status/1951178252728332642","timestamp":"1754032121","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"87c152bf-41ff-5dad-8b80-96b5466fbcc1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.221.66.178","comment":"https://x.com/drb_ra/status/1951178392197341221","timestamp":"1754032154","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"15b27508-0ef9-58f3-8b03-192618f6e4af","type":"url","category":"Network activity","to_ids":true,"value":"http://37.221.66.178:3306","comment":"https://x.com/drb_ra/status/1951178392197341221","timestamp":"1754032154","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"95199f73-337f-5fcf-ac46-addb32dc0dab","type":"url","category":"Network activity","to_ids":true,"value":"http://84.247.182.55:80","comment":"https://x.com/drb_ra/status/1951178530617753841","timestamp":"1754032187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"be5876c4-95cd-5ed1-849d-a7a2e2aff869","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.247.182.55","comment":"https://x.com/drb_ra/status/1951178530617753841","timestamp":"1754032187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"64148f79-437a-5709-917a-935e828f779d","type":"url","category":"Network activity","to_ids":true,"value":"http://62.113.66.7:443","comment":"https://x.com/drb_ra/status/1951178668253811143","timestamp":"1754032220","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c1b1ee16-cc14-589b-98a4-8945a1d7845f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.113.66.7","comment":"https://x.com/drb_ra/status/1951178668253811143","timestamp":"1754032220","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dd16b976-42c9-5bf7-b7e4-dc678e7bab09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.244.101","comment":"https://x.com/drb_ra/status/1951178807135621281","timestamp":"1754032253","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"41cbcdd2-38f1-52ab-ab29-5536144c7251","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.244.101:37830","comment":"https://x.com/drb_ra/status/1951178807135621281","timestamp":"1754032253","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dac5b2d0-529d-5bc7-b2b7-78219ea5a633","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.18.114","comment":"https://x.com/drb_ra/status/1951178943748284450","timestamp":"1754032285","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4decc9fa-c862-5943-a1c2-5658a852c4aa","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.18.114:2404","comment":"https://x.com/drb_ra/status/1951178943748284450","timestamp":"1754032285","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3bb69fdf-5184-5072-b28d-d762ed4aa8e6","type":"url","category":"Network activity","to_ids":true,"value":"http://51.68.244.175:2404","comment":"https://x.com/drb_ra/status/1951179085427663135","timestamp":"1754032319","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5ffad7e2-9639-538f-a693-291879e0e438","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.68.244.175","comment":"https://x.com/drb_ra/status/1951179085427663135","timestamp":"1754032319","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9a1f2dda-e805-5f32-b020-14ab07efdf42","type":"url","category":"Network activity","to_ids":true,"value":"http://2.58.56.225:2404","comment":"https://x.com/drb_ra/status/1951179223135047938","timestamp":"1754032352","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9551970e-c469-5613-9c7c-8b96805f6bd1","type":"url","category":"Network activity","to_ids":true,"value":"http://1.13.164.149:3232","comment":"https://x.com/drb_ra/status/1951179359923957853","timestamp":"1754032385","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"16ea388f-8b3a-5e41-87e6-97381d8755ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.198.181.242","comment":"https://x.com/drb_ra/status/1951179497610330590","timestamp":"1754032418","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5331d0f8-8f09-51c2-a598-1b504b398bb5","type":"url","category":"Network activity","to_ids":true,"value":"http://93.198.181.242:81","comment":"https://x.com/drb_ra/status/1951179497610330590","timestamp":"1754032418","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"715e58b0-7a54-5883-867d-3fe752fbd8eb","type":"url","category":"Network activity","to_ids":true,"value":"http://13.250.126.10:8013","comment":"https://x.com/drb_ra/status/1951179634688553448","timestamp":"1754032450","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e2a3f0d9-7681-5c68-b051-0895493184b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.250.126.10","comment":"https://x.com/drb_ra/status/1951179634688553448","timestamp":"1754032450","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5d72dc5f-ee52-50b2-a66b-90097b108d48","type":"url","category":"Network activity","to_ids":true,"value":"http://mastwin.in/qsaz","comment":"https://x.com/K_N1kolenko/status/1951190444261400939","timestamp":"1754035027","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c0f98a8d-4f35-5474-95bb-0121655bf6cc","type":"url","category":"Network activity","to_ids":true,"value":"http://cezgroup.contact","comment":"https://x.com/K_N1kolenko/status/1951190444261400939","timestamp":"1754035027","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"1ab48c70-5342-50e7-8d09-d8e293b57834","type":"domain","category":"Network activity","to_ids":true,"value":"cezgroup.contact","comment":"https://x.com/K_N1kolenko/status/1951190444261400939","timestamp":"1754035027","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"511d75ce-b533-5043-a09d-ca54b7b9fcab","type":"domain","category":"Network activity","to_ids":true,"value":"mastwin.in","comment":"https://x.com/K_N1kolenko/status/1951190444261400939","timestamp":"1754035027","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"4cd965e3-837c-57a6-acec-e9fbb72c36a0","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.xingkech5.com","comment":"https://x.com/urldna_bot/status/1951191211814899769","timestamp":"1754035210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"54bdb866-f33a-5a07-9ecf-1d12e7eca0bd","type":"domain","category":"Network activity","to_ids":true,"value":"booking.xingkech5.com","comment":"https://x.com/urldna_bot/status/1951191211814899769","timestamp":"1754035210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"84e8bb85-ae95-5863-bc42-ecb77a3fa967","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.181.20.6","comment":"https://x.com/skocherhan/status/1951191376286138662","timestamp":"1754035250","distribution":"5"},{"uuid":"e05b709a-c658-5167-a9a5-99b39dce7160","type":"url","category":"Network activity","to_ids":true,"value":"http://envs.sh/0EB.exe","comment":"https://x.com/skocherhan/status/1951194487138435498","timestamp":"1754035991","distribution":"5"},{"uuid":"50454cca-7d9a-59ab-8fb4-54b2216f4a7a","type":"md5","category":"Payload delivery","to_ids":true,"value":"d405313a5f89758fafd947cd0e008f75","comment":"https://x.com/skocherhan/status/1951194487138435498","timestamp":"1754035991","distribution":"5"},{"uuid":"5b639938-0468-50ce-84a6-1b714a2bdbbb","type":"domain","category":"Network activity","to_ids":true,"value":"envs.sh","comment":"https://x.com/skocherhan/status/1951194487138435498","timestamp":"1754035991","distribution":"5"},{"uuid":"2fd5f036-9d2e-5e18-8b3a-68c5a186d2c0","type":"domain","category":"Network activity","to_ids":true,"value":"XRPmining.com","comment":"https://x.com/RyanProgrammer_/status/1951198754188529780","timestamp":"1754037009","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"59e81275-7681-54bb-bc5c-9da1ad8e7b5b","type":"url","category":"Network activity","to_ids":true,"value":"http://XRPmining.com","comment":"https://x.com/RyanProgrammer_/status/1951198754188529780","timestamp":"1754037009","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"b1dfd265-4eae-52ad-b24c-14ddc1467cc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.58.39.75","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"557311f6-6b56-5695-ba6a-eaca4fd3522a","type":"url","category":"Network activity","to_ids":true,"value":"http://disciply.nl","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"bd01d55e-80d3-576f-a46f-9de9cb813d4e","type":"domain","category":"Network activity","to_ids":true,"value":"cobyrose.com","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"0fda55d0-c17d-5e30-9aac-d2240bd17e27","type":"url","category":"Network activity","to_ids":true,"value":"http://cobyrose.com","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"a3c41102-caee-5abc-8124-1854acc6c040","type":"url","category":"Network activity","to_ids":true,"value":"http://195.58.39.75","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"bd77618c-e54e-514d-832f-2dcd11f871d2","type":"url","category":"Network activity","to_ids":true,"value":"http://solanges.info","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"7fd960d0-3e7c-5f60-9acd-1a0b1fbf2ef3","type":"url","category":"Network activity","to_ids":true,"value":"http://euthemis.com","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"30c95435-1fe3-5f3a-a0f6-c5bf94928442","type":"domain","category":"Network activity","to_ids":true,"value":"solanges.info","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"e48e2a0f-70d9-5504-b8f6-1ac71653d6a1","type":"domain","category":"Network activity","to_ids":true,"value":"disciply.nl","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"af9f22c6-81ab-5bf6-aad4-711d6bd57473","type":"domain","category":"Network activity","to_ids":true,"value":"euthemis.com","comment":"https://x.com/skocherhan/status/1951200439665397832","timestamp":"1754037411","distribution":"5","Tag":[{"name":"SmokeLoader"}]},{"uuid":"6dd919a4-f1ec-577a-b794-752116601910","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/reusmey","comment":"https://x.com/skocherhan/status/1951203654788104207","timestamp":"1754038177","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a03ed77b-2f49-549e-8824-60ef42ed4281","type":"domain","category":"Network activity","to_ids":true,"value":"nucleji.my","comment":"https://x.com/skocherhan/status/1951203654788104207","timestamp":"1754038177","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"06611946-4fc4-5afa-aef0-b84118c89797","type":"url","category":"Network activity","to_ids":true,"value":"http://nucleji.my/ituw","comment":"https://x.com/skocherhan/status/1951203654788104207","timestamp":"1754038177","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"760071ba-f2b9-5ef8-8c97-33d9757c28dd","type":"domain","category":"Network activity","to_ids":true,"value":"mnvgp.click","comment":"https://x.com/skocherhan/status/1951204478322987313","timestamp":"1754038373","distribution":"5"},{"uuid":"c7b3e81a-513a-59d3-9cc4-354b37a7522f","type":"url","category":"Network activity","to_ids":true,"value":"http://mnvgp.click/tiri","comment":"https://x.com/skocherhan/status/1951204478322987313","timestamp":"1754038373","distribution":"5"},{"uuid":"76498371-a445-538f-8ff9-30632f3d5c18","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/vtmaa","comment":"https://x.com/skocherhan/status/1951204478322987313","timestamp":"1754038373","distribution":"5"},{"uuid":"95b61c26-5e5f-5ec0-bad2-afef4f037d43","type":"url","category":"Network activity","to_ids":true,"value":"http://allegrolokalnle.pl5341.cfd","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"45a534fa-3455-5e31-b209-f4b6b559ef24","type":"domain","category":"Network activity","to_ids":true,"value":"allegro.pl-kategorie7127371548167.sbs","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"1235c5a8-4c7a-58b1-adfd-0b463353bd15","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.pl-oferta9034.icu","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"267b7cdc-0287-5e90-b51f-6832482edc68","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.pl-kategorie7127371548167.sbs","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"b8226d0b-be68-50ae-8521-2d3c330e2d14","type":"url","category":"Network activity","to_ids":true,"value":"http://allegrolokalnie.pl-kategorie7127371548167.sbs","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"df639ca0-ebcb-5334-b70f-7e68158a3066","type":"url","category":"Network activity","to_ids":true,"value":"http://allegro.pl-kategorie7127371548167.sbs","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"78aa9526-9449-5bd8-a929-a20180959ccf","type":"url","category":"Network activity","to_ids":true,"value":"http://allegrolokalnie.pl-oferta9034.icu","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"3185258e-a267-5581-b0f9-bf5df45370b9","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.oferta287484.cfd","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"021189f9-94c1-52bb-9ef5-9f2af873caa5","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnle.pl5341.cfd","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"a6ab0a70-98f5-52ef-b0b7-7af24cfbe587","type":"url","category":"Network activity","to_ids":true,"value":"http://allegro.pl-oferta9563717.shop","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"fcd7a768-b9d9-53fb-aca3-c1b46757d737","type":"domain","category":"Network activity","to_ids":true,"value":"allegro.pl-oferta9563717.shop","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"9befb00e-4e86-5965-9a69-7c27435fedac","type":"url","category":"Network activity","to_ids":true,"value":"http://allegro.pl-oferta9587793.icu","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"4091a069-f267-5a59-9402-cc7cf3444d02","type":"url","category":"Network activity","to_ids":true,"value":"http://allegrolokalnie.oferta287484.cfd","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"9f0193f0-d29e-58a4-8de0-9c1921a2922e","type":"domain","category":"Network activity","to_ids":true,"value":"allegro.pl-oferta9587793.icu","comment":"https://x.com/skocherhan/status/1951205638534541648","timestamp":"1754038650","distribution":"5"},{"uuid":"55193e78-2660-563a-97c6-8aee9e903b50","type":"md5","category":"Payload delivery","to_ids":true,"value":"6221B0BF4D365454D40C546CF7133570","comment":"https://x.com/siri_urz/status/1951206600422646039","timestamp":"1754038879","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3d4b78d8-a0f0-56e9-906f-d22434a37d7b","type":"md5","category":"Payload delivery","to_ids":true,"value":"4247a32258aeb6b2008a7869005158e8","comment":"https://x.com/skocherhan/status/1951210189333336564","timestamp":"1754039735","distribution":"5"},{"uuid":"7d91cb38-2360-56f0-9aee-35e9321206ab","type":"url","category":"Network activity","to_ids":true,"value":"http://188.114.97.3:1337","comment":"https://x.com/skocherhan/status/1951210189333336564","timestamp":"1754039735","distribution":"5"},{"uuid":"f846c4e0-48fd-5fbf-917f-65a6f13da8f8","type":"url","category":"Network activity","to_ids":true,"value":"http://discord.clothing","comment":"https://x.com/c9lab_soc/status/1951212396472574326","timestamp":"1754040261","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7e1c328d-39eb-5738-84d1-e4513ad480a6","type":"domain","category":"Network activity","to_ids":true,"value":"discord.clothing","comment":"https://x.com/c9lab_soc/status/1951212396472574326","timestamp":"1754040261","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7daf1e92-4f0f-54fc-8ab3-6f3882afc84b","type":"domain","category":"Network activity","to_ids":true,"value":"razorpay.asia","comment":"https://x.com/c9lab_soc/status/1951212396472574326","timestamp":"1754040261","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7d57e091-0677-5e4c-b701-41e83de789d0","type":"url","category":"Network activity","to_ids":true,"value":"http://razorpay.asia","comment":"https://x.com/c9lab_soc/status/1951212396472574326","timestamp":"1754040261","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"262f23f1-0ae5-5058-a4cf-df9752a67eaf","type":"url","category":"Network activity","to_ids":true,"value":"https://staff-area.ddns.net/2/carrello/index.php","comment":"https://x.com/JAMESWT_WT/status/1951220278073168172","timestamp":"1754042140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84748fae-6316-5227-978d-e71b273862e5","type":"domain","category":"Network activity","to_ids":true,"value":"staff-area.ddns.net","comment":"https://x.com/JAMESWT_WT/status/1951220278073168172","timestamp":"1754042140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53d9bfca-aca0-5abe-b785-1f79bd352c08","type":"domain","category":"Network activity","to_ids":true,"value":"smart-lilac.vercel.app","comment":"https://x.com/urldna_bot/status/1951221392591958070","timestamp":"1754042406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bfe94da5-e502-5ab0-b690-7226161435c0","type":"url","category":"Network activity","to_ids":true,"value":"https://smart-lilac.vercel.app","comment":"https://x.com/urldna_bot/status/1951221392591958070","timestamp":"1754042406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6554b063-b13c-5be5-ac85-40c7ebde3218","type":"url","category":"Network activity","to_ids":true,"value":"http://mocadia.com/iuew","comment":"https://x.com/K_N1kolenko/status/1951230254699151665","timestamp":"1754044519","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"0786e36e-3920-5fd3-9fa0-fa3be0910da4","type":"domain","category":"Network activity","to_ids":true,"value":"mocadia.com","comment":"https://x.com/K_N1kolenko/status/1951230254699151665","timestamp":"1754044519","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"3c5179eb-46d1-59a8-b176-f6a1cf057cd1","type":"domain","category":"Network activity","to_ids":true,"value":"cas-cn.org","comment":"https://x.com/skocherhan/status/1951231240004108702","timestamp":"1754044754","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9c488d7c-01d2-5406-a17c-8dfea17921ea","type":"url","category":"Network activity","to_ids":true,"value":"http://cas-cn.org","comment":"https://x.com/skocherhan/status/1951231240004108702","timestamp":"1754044754","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fd85aa0f-e60a-5df2-a177-7ea26bb3c01f","type":"md5","category":"Payload delivery","to_ids":true,"value":"1ba6d40966b024bb99770ee9a4df27f2","comment":"https://x.com/skocherhan/status/1951231240004108702","timestamp":"1754044754","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9344f34b-8aec-57e6-96af-c0d5ad6e0474","type":"md5","category":"Payload delivery","to_ids":true,"value":"3f285f7af7383550e7f0fe7848a3b3c7","comment":"https://x.com/skocherhan/status/1951231240004108702","timestamp":"1754044754","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"3ffeea0b-da37-5655-8f77-1a5029e1004a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.in.gov/iot/nts/Shared%20Documents/VPN/","comment":"https://x.com/JAMESWT_WT/status/1951231510792515967","timestamp":"1754044818","distribution":"5"},{"uuid":"01481aa5-67a4-5152-89a1-de762904b455","type":"domain","category":"Network activity","to_ids":true,"value":"in.gov","comment":"https://x.com/JAMESWT_WT/status/1951231510792515967","timestamp":"1754044818","distribution":"5"},{"uuid":"b2f0650c-cc3f-547a-a8a7-86afd0ae34d8","type":"url","category":"Network activity","to_ids":true,"value":"https://www.in.gov/iot/nts/Shared%20Documents/VPN/secureclient51474/cisco-secure-client-win-5.1.4.74-core-vpn-predeploy-k9.msi","comment":"https://x.com/JAMESWT_WT/status/1951231510792515967","timestamp":"1754044818","distribution":"5"},{"uuid":"22b6d180-227b-559c-97df-a17fca93e238","type":"url","category":"Network activity","to_ids":true,"value":"https://auth-facebook-my-en.weebly.com","comment":"https://x.com/s3curetheweb/status/1951238700660125754","timestamp":"1754046533","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f24912e9-8837-53e0-84c7-fee48b9aea38","type":"domain","category":"Network activity","to_ids":true,"value":"auth-facebook-my-en.weebly.com","comment":"https://x.com/s3curetheweb/status/1951238700660125754","timestamp":"1754046533","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dfdd6a1-52d5-50c3-89a1-868a4dec6eed","type":"url","category":"Network activity","to_ids":true,"value":"https://auth-facebook-zh-hk.weebly.com","comment":"https://x.com/s3curetheweb/status/1951238700660125754","timestamp":"1754046533","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb7ab7b2-520e-5c60-8745-99c654d4d9ce","type":"domain","category":"Network activity","to_ids":true,"value":"auth-facebook-zh-hk.weebly.com","comment":"https://x.com/s3curetheweb/status/1951238700660125754","timestamp":"1754046533","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b59139ff-90d3-5e0f-af3b-4e59a1ca7728","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.55.147.24","comment":"https://x.com/drb_ra/status/1951239161131803056","timestamp":"1754046642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bdbd45b-7601-5e05-99ca-958328acff69","type":"url","category":"Network activity","to_ids":true,"value":"https://114.55.147.24/j.ad","comment":"https://x.com/drb_ra/status/1951239161131803056","timestamp":"1754046642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"077e297b-ca30-5445-98ed-584597bd74ae","type":"url","category":"Network activity","to_ids":true,"value":"http://114.55.147.24:8443","comment":"https://x.com/drb_ra/status/1951239161131803056","timestamp":"1754046642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1e7a389a-5da9-53a4-902e-d9c0387bc747","type":"url","category":"Network activity","to_ids":true,"value":"https://45.86.153.106/owa/Q5gPb76xgLDlTkoqBUCBXJ1J6gf-sk5Veh5","comment":"https://x.com/drb_ra/status/1951239303280898187","timestamp":"1754046676","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a475770-a44f-5acb-b4bd-1207c68c8639","type":"url","category":"Network activity","to_ids":true,"value":"http://45.86.153.106:443","comment":"https://x.com/drb_ra/status/1951239303280898187","timestamp":"1754046676","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c55e46bd-d348-55a4-a154-56349ba05857","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.153.106","comment":"https://x.com/drb_ra/status/1951239303280898187","timestamp":"1754046676","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"040ebd58-1f8e-55e1-9a8e-a0d69fcf4fa9","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.126.64:3389","comment":"https://x.com/drb_ra/status/1951239443760717936","timestamp":"1754046710","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"20a45e12-e530-5311-9e97-a3840bed02ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.83.84","comment":"https://x.com/drb_ra/status/1951239583611408526","timestamp":"1754046743","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc9414c8-e8e2-507e-82d3-2f9ca84d4b94","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.83.84:18180","comment":"https://x.com/drb_ra/status/1951239583611408526","timestamp":"1754046743","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f8162d6-e889-50ac-b98e-ebd63e79ed82","type":"url","category":"Network activity","to_ids":true,"value":"https://47.109.83.84/dpixel","comment":"https://x.com/drb_ra/status/1951239583611408526","timestamp":"1754046743","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"edbeb946-0505-57b8-a14f-7b00c1784e60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.142.19.208","comment":"https://x.com/drb_ra/status/1951239726054228241","timestamp":"1754046777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ec6e3a8-62ca-5315-87cd-b05448de7065","type":"url","category":"Network activity","to_ids":true,"value":"http://43.142.19.208:80","comment":"https://x.com/drb_ra/status/1951239726054228241","timestamp":"1754046777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eaffc2e7-d4e3-5833-b54e-ae21e05a4615","type":"domain","category":"Network activity","to_ids":true,"value":"himself-checks-blood-receptors.trycloudflare.com","comment":"https://x.com/drb_ra/status/1951239726054228241","timestamp":"1754046777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"60e09ed2-0937-5fef-9302-23cf8d6538ac","type":"url","category":"Network activity","to_ids":true,"value":"https://himself-checks-blood-receptors.trycloudflare.com/cdn-cgi/images/trace","comment":"https://x.com/drb_ra/status/1951239726054228241","timestamp":"1754046777","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c754054-0bc3-52a9-9f55-2f560168fec1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"10.10.16.19","comment":"https://x.com/drb_ra/status/1951239866735337850","timestamp":"1754046811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e2b713a8-3108-59e7-a3dc-7ae9f35185c7","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.251.4:80","comment":"https://x.com/drb_ra/status/1951239866735337850","timestamp":"1754046811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"451c4bb5-5762-56e2-8d18-53b8e103ff97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.251.4","comment":"https://x.com/drb_ra/status/1951239866735337850","timestamp":"1754046811","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"39a9c1a7-3667-55f9-89e2-15e49e15f082","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.218.228:80","comment":"https://x.com/drb_ra/status/1951240008918049133","timestamp":"1754046845","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"63f3d8eb-1145-59e7-87a3-d95192082875","type":"url","category":"Network activity","to_ids":true,"value":"https://47.83.218.228/update_wapp2.aspx","comment":"https://x.com/drb_ra/status/1951240008918049133","timestamp":"1754046845","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2c0a1473-5f3b-5b96-9ad1-a74e59ad2dd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.218.228","comment":"https://x.com/drb_ra/status/1951240008918049133","timestamp":"1754046845","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6696d9ab-c6b4-5a3a-be9c-8ce4dc0bc29a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.queirozdesign.com/push","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fa8b4fc3-e226-5640-ac2c-45c102b98c90","type":"domain","category":"Network activity","to_ids":true,"value":"ag3battery.com","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"87a39801-ca03-54a4-ae77-83f31728a1e4","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ag3battery.com/updates.rss","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b45f5683-9cf8-57d8-89d2-2517b59b6f8a","type":"domain","category":"Network activity","to_ids":true,"value":"cannabispatientcare.com","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93b60432-b05d-5215-badf-f89b62195a02","type":"url","category":"Network activity","to_ids":true,"value":"https://www.cannabispatientcare.com/cm","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b8332d6-1d60-568b-9996-4f8bb31bf294","type":"domain","category":"Network activity","to_ids":true,"value":"mediawick.com","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"571641f8-09b4-5279-a765-c7a2fbfc9de2","type":"url","category":"Network activity","to_ids":true,"value":"https://www.mediawick.com/pixel","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1df5cd88-8bf9-59d4-9aeb-6ea988868323","type":"domain","category":"Network activity","to_ids":true,"value":"queirozdesign.com","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"12afa290-a44f-512f-a204-7e7b513bec8c","type":"domain","category":"Network activity","to_ids":true,"value":"crownmagnetics.com","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6ea32388-6656-5150-b426-e3a698ba61cf","type":"url","category":"Network activity","to_ids":true,"value":"https://www.crownmagnetics.com/pixel","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d736175c-8501-55d1-bb23-e8e29fe8b104","type":"url","category":"Network activity","to_ids":true,"value":"http://213.209.150.214:8443","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6e79b5a5-7d38-5869-ad84-dc02270c8b22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.150.214","comment":"https://x.com/drb_ra/status/1951240660775813620","timestamp":"1754047000","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6a28f846-e827-542e-81ff-6faa477ecd3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.87.111","comment":"https://x.com/drb_ra/status/1951240801192755246","timestamp":"1754047033","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b813d7e8-0e46-5ac9-b5c3-e78481ff9371","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.87.111:8888","comment":"https://x.com/drb_ra/status/1951240801192755246","timestamp":"1754047033","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f2e9741d-021a-508f-a4da-e23cd569f5cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.141.123.139","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"be3819e1-dc18-5c29-bf70-b491eb0a59cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.108.238","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"be1bde37-44e2-5d76-a58a-9f6054c41af1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.56.48.161","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"f92b78b8-6e01-577c-9617-749376e84e93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.206.253","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"4060b699-adec-54bc-9825-0150b47079a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.59.160.219","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"4dea7251-4d79-5dc3-87e5-5612c9f5c57e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.50.253.17","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"5f77fbf2-7f26-5108-b001-1a1f24b2d164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.21.131","comment":"https://x.com/K_N1kolenko/status/1951242678361825558","timestamp":"1754047481","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"ee26b199-663f-586a-969c-17be84133712","type":"domain","category":"Network activity","to_ids":true,"value":"authe-phantom-wallet---sso.webflow.io","comment":"https://x.com/urldna_bot/status/1951251600091021763","timestamp":"1754049608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"84029c32-e66d-5a61-9ba7-4584a4fbe735","type":"url","category":"Network activity","to_ids":true,"value":"https://authe-phantom-wallet---sso.webflow.io","comment":"https://x.com/urldna_bot/status/1951251600091021763","timestamp":"1754049608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7554c27d-4df3-5e55-9878-6aaeb50821b5","type":"url","category":"Network activity","to_ids":true,"value":"http://41.103.158.248:999","comment":"https://x.com/SarlackLab/status/1951266725762117744","timestamp":"1754053214","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"91a6dd4e-4794-5695-af54-24b434c9d5ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"41.103.158.248","comment":"https://x.com/SarlackLab/status/1951266725762117744","timestamp":"1754053214","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"9756d550-d140-5c4f-8426-b96c47b829b7","type":"domain","category":"Network activity","to_ids":true,"value":"usciscenter.com","comment":"https://x.com/urldna_bot/status/1951281805723574465","timestamp":"1754056810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2771d556-b1ef-51e6-b491-094730f48e92","type":"url","category":"Network activity","to_ids":true,"value":"https://usciscenter.com/humanitarian.html","comment":"https://x.com/urldna_bot/status/1951281805723574465","timestamp":"1754056810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"34c7c8c8-3c20-5253-a63e-625a47a7d7d9","type":"url","category":"Network activity","to_ids":true,"value":"http://axigen-web-expired-paknavy-files.netlify.app","comment":"https://x.com/ShadowChasing1/status/1951288310804128038","timestamp":"1754058361","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7806242b-0c06-5434-a004-7a409fe50228","type":"domain","category":"Network activity","to_ids":true,"value":"axigen-web-expired-paknavy-files.netlify.app","comment":"https://x.com/ShadowChasing1/status/1951288310804128038","timestamp":"1754058361","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bf743bc9-67bb-5666-96ce-81a5b8682db8","type":"domain","category":"Network activity","to_ids":true,"value":"encrypted-files-paknavy-0pen.netlify.app","comment":"https://x.com/ShadowChasing1/status/1951288855958561148","timestamp":"1754058491","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"62df3348-ef2e-5197-a243-9a806a6ef573","type":"url","category":"Network activity","to_ids":true,"value":"https://encrypted-files-paknavy-0pen.netlify.app","comment":"https://x.com/ShadowChasing1/status/1951288855958561148","timestamp":"1754058491","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"27a8ccaf-addf-51b0-8038-887a3674fcc5","type":"md5","category":"Payload delivery","to_ids":true,"value":"5bfeeae3cc9386513dc7c301c61e67a7","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"2d696736-06dc-5324-87e1-9989df7c6f78","type":"url","category":"Network activity","to_ids":true,"value":"http://modindia.serveminecraft.net","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"1ba19a0c-a437-58e3-a150-e9a9c67e6453","type":"domain","category":"Network activity","to_ids":true,"value":"modgovindia.space","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"d9ccbb64-8528-51cc-b95c-dcdff68f3a13","type":"domain","category":"Network activity","to_ids":true,"value":"modindia.serveminecraft.net","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"75e48f31-1269-53c7-9282-7b62cfebb002","type":"domain","category":"Network activity","to_ids":true,"value":"kavach.space","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"63a6e5b9-a360-5050-aaac-b75b7a4d24d8","type":"url","category":"Network activity","to_ids":true,"value":"http://kavach.space","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"4209cb08-52a6-54ef-999f-d01f788f1cf3","type":"md5","category":"Payload delivery","to_ids":true,"value":"311f9894297fb1624a2c99ac5c8d8abf","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"706c0e2a-00db-558d-ba2f-4d2266cf2a9c","type":"url","category":"Network activity","to_ids":true,"value":"http://modgovindia.space","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"695d925e-e3a2-570e-bdd1-f691851c1f5f","type":"md5","category":"Payload delivery","to_ids":true,"value":"10b7139952e3daae8f9d7ee407696ccf","comment":"https://x.com/ShadowChasing1/status/1951289758245884297","timestamp":"1754058706","distribution":"5","Tag":[{"name":"RAT"},{"name":"APT"},{"name":"phishing"}]},{"uuid":"2e090db2-2033-52fa-ae44-5769d9d9ea7c","type":"url","category":"Network activity","to_ids":true,"value":"https://servidor2025.com/control/admin2/","comment":"https://x.com/Merlax_/status/1951295026627060091","timestamp":"1754059962","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"8e99e0a2-be12-5f49-b425-58fb820445d5","type":"domain","category":"Network activity","to_ids":true,"value":"servidor2025.com","comment":"https://x.com/Merlax_/status/1951295026627060091","timestamp":"1754059962","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"dc424b33-0200-55e0-89fe-ba72d77af052","type":"url","category":"Network activity","to_ids":true,"value":"https://servidor2025.com/gpt.php","comment":"https://x.com/Merlax_/status/1951295026627060091","timestamp":"1754059962","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0e4855b4-94cb-5388-9175-cd08f65311e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.98.56.220","comment":"https://x.com/sicehice/status/1951307997151461575","timestamp":"1754063054","distribution":"5"},{"uuid":"45ad88c0-c187-56c0-a84c-09c9ca2d663c","type":"domain","category":"Network activity","to_ids":true,"value":"bnpromerc.z13.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1951312004234293723","timestamp":"1754064010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9a97a1f6-8d79-5e71-97f1-ae992a39f7f8","type":"url","category":"Network activity","to_ids":true,"value":"https://bnpromerc.z13.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1951312004234293723","timestamp":"1754064010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"52cd2ca8-23df-5398-8132-9df7b60ba718","type":"domain","category":"Network activity","to_ids":true,"value":"capital-one-sign-in-form.netlify.app","comment":"https://x.com/s3curetheweb/status/1951335650235654214","timestamp":"1754069647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c18949d-5445-5f6d-b4ff-391d22e47c76","type":"url","category":"Network activity","to_ids":true,"value":"https://capital-one-sign-in-form.netlify.app","comment":"https://x.com/s3curetheweb/status/1951335650235654214","timestamp":"1754069647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b37089f-a292-5e74-a57f-0df80164ef3d","type":"domain","category":"Network activity","to_ids":true,"value":"bigpond.durablesites.com","comment":"https://x.com/urldna_bot/status/1951342190128496875","timestamp":"1754071206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e1214a12-198e-585d-a741-1083584502ef","type":"url","category":"Network activity","to_ids":true,"value":"https://bigpond.durablesites.com","comment":"https://x.com/urldna_bot/status/1951342190128496875","timestamp":"1754071206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4887d381-7048-5598-9e4f-765a82133d9f","type":"url","category":"Network activity","to_ids":true,"value":"http://166.0.132.184:443","comment":"https://x.com/drb_ra/status/1951353576540016690","timestamp":"1754073921","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1a632fd4-d03c-595b-b5b8-0fa821d5c63f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.0.132.184","comment":"https://x.com/drb_ra/status/1951353576540016690","timestamp":"1754073921","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"40daf832-58c6-5711-81d8-f11136000b2d","type":"url","category":"Network activity","to_ids":true,"value":"http://91.241.93.244:4000","comment":"https://x.com/drb_ra/status/1951354224874496288","timestamp":"1754074076","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"1c98d74d-cd0b-598a-a160-a30243c0081c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.241.93.244","comment":"https://x.com/drb_ra/status/1951354224874496288","timestamp":"1754074076","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"60d16ef0-2cf9-56b9-9111-e1a62a9c81ca","type":"url","category":"Network activity","to_ids":true,"value":"http://67.71.45.64:2222","comment":"https://x.com/drb_ra/status/1951354362489389358","timestamp":"1754074109","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"860301d4-8458-5c5c-9251-e379f7334ad1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.71.45.64","comment":"https://x.com/drb_ra/status/1951354362489389358","timestamp":"1754074109","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2a61663b-21e1-5286-b5f9-0fb94fb9a2e9","type":"url","category":"Network activity","to_ids":true,"value":"http://52.48.172.163:443","comment":"https://x.com/drb_ra/status/1951354501526384967","timestamp":"1754074142","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"969bd5bd-39e5-5dba-b858-98c0bc1c8015","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.48.172.163","comment":"https://x.com/drb_ra/status/1951354501526384967","timestamp":"1754074142","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3ed2eacf-51e0-52c1-9a9c-9c053d318295","type":"url","category":"Network activity","to_ids":true,"value":"http://182.30.8.113:443","comment":"https://x.com/drb_ra/status/1951354640487813234","timestamp":"1754074175","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"d55356e4-ebc5-5ec4-aea6-684adc4d135c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.30.8.113","comment":"https://x.com/drb_ra/status/1951354640487813234","timestamp":"1754074175","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"70b2ec15-6cfd-5d5b-b05a-5d75b47a5a34","type":"url","category":"Network activity","to_ids":true,"value":"http://194.87.239.112:443","comment":"https://x.com/drb_ra/status/1951354780841873624","timestamp":"1754074208","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f6f9eb9a-5962-591e-a800-1a24fe166034","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.87.239.112","comment":"https://x.com/drb_ra/status/1951354780841873624","timestamp":"1754074208","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"996e2406-d095-5950-9934-1a70de524051","type":"url","category":"Network activity","to_ids":true,"value":"http://18.220.79.189:443","comment":"https://x.com/drb_ra/status/1951354919346118842","timestamp":"1754074241","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"7bcb3505-5a2b-5751-a289-65eee85410af","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.220.79.189","comment":"https://x.com/drb_ra/status/1951354919346118842","timestamp":"1754074241","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"96c8eb3c-4ed2-51bc-80e9-499f52c2607d","type":"url","category":"Network activity","to_ids":true,"value":"http://4.210.171.193:7443","comment":"https://x.com/drb_ra/status/1951355058471510444","timestamp":"1754074275","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b4195c3f-b42a-52c8-b6f0-925b1ff0d5d2","type":"url","category":"Network activity","to_ids":true,"value":"http://188.124.51.141:7443","comment":"https://x.com/drb_ra/status/1951355199668244694","timestamp":"1754074308","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"4c1b2075-a033-5df0-8e00-652e49e27ca0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.124.51.141","comment":"https://x.com/drb_ra/status/1951355199668244694","timestamp":"1754074308","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"947418c7-7e44-593d-a9b1-10c89c852de6","type":"url","category":"Network activity","to_ids":true,"value":"http://89.197.168.150:7443","comment":"https://x.com/drb_ra/status/1951355337212125628","timestamp":"1754074341","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f1dfd165-ac90-54be-836f-a8bb9a2a3bad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.197.168.150","comment":"https://x.com/drb_ra/status/1951355337212125628","timestamp":"1754074341","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8b96e5aa-28aa-510b-8073-72d55f69ef94","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.161.203:7443","comment":"https://x.com/drb_ra/status/1951355475448176981","timestamp":"1754074374","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"54ac5e3c-3598-5858-8887-fba44f07eb54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.161.203","comment":"https://x.com/drb_ra/status/1951355475448176981","timestamp":"1754074374","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b7922441-1dd4-55c3-902c-a4c9e736afe8","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.95.180:8080","comment":"https://x.com/drb_ra/status/1951356120330645538","timestamp":"1754074528","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"95d7f283-b4c7-5927-bb6e-6485d148b62b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.95.180","comment":"https://x.com/drb_ra/status/1951356120330645538","timestamp":"1754074528","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c54e8a80-ab02-5a49-80bf-aee81cae8103","type":"url","category":"Network activity","to_ids":true,"value":"http://95.99.61.198:443","comment":"https://x.com/drb_ra/status/1951356259229131164","timestamp":"1754074561","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"308ce9fa-4dff-53a8-81fb-a6bdc2503ec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.99.61.198","comment":"https://x.com/drb_ra/status/1951356259229131164","timestamp":"1754074561","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"81414eb7-3c0f-5bc3-99ba-cc2d154be3bc","type":"url","category":"Network activity","to_ids":true,"value":"http://206.82.6.254:3232","comment":"https://x.com/drb_ra/status/1951356399247569026","timestamp":"1754074594","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"340eb7b3-fd8d-5ae3-bb3f-c63c95401863","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.82.6.254","comment":"https://x.com/drb_ra/status/1951356399247569026","timestamp":"1754074594","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"6633708c-eac2-5c2c-a74d-48b411c75d01","type":"url","category":"Network activity","to_ids":true,"value":"http://154.44.28.33:8080","comment":"https://x.com/drb_ra/status/1951356537122750927","timestamp":"1754074627","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bd21be43-bad1-5361-a344-d89dcf58690f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.44.28.33","comment":"https://x.com/drb_ra/status/1951356537122750927","timestamp":"1754074627","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c61b2542-0a3d-51bb-8268-815ed29beab2","type":"url","category":"Network activity","to_ids":true,"value":"http://15.168.61.27:1311","comment":"https://x.com/drb_ra/status/1951356675421790323","timestamp":"1754074660","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"890fe619-a390-5d6f-b640-6c1d8c515b89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.168.61.27","comment":"https://x.com/drb_ra/status/1951356675421790323","timestamp":"1754074660","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a09356b4-db99-5186-a6c0-4673baee6d28","type":"url","category":"Network activity","to_ids":true,"value":"http://16.78.2.231:2086","comment":"https://x.com/drb_ra/status/1951356813363888301","timestamp":"1754074693","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"927a216b-34b8-5c0b-b480-9eed138f434e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.78.2.231","comment":"https://x.com/drb_ra/status/1951356813363888301","timestamp":"1754074693","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5e8992a7-104d-5af7-85f0-7162b8052795","type":"url","category":"Network activity","to_ids":true,"value":"http://54.198.55.119:47587","comment":"https://x.com/drb_ra/status/1951356952816070685","timestamp":"1754074726","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d9740ffd-5f30-5fec-9003-d644347bbd34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.198.55.119","comment":"https://x.com/drb_ra/status/1951356952816070685","timestamp":"1754074726","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"aafbc46d-9f20-5586-a114-e22f688531e9","type":"url","category":"Network activity","to_ids":true,"value":"http://43.203.255.221:15443","comment":"https://x.com/drb_ra/status/1951357091085451420","timestamp":"1754074759","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8b315a04-5b77-55c4-9137-041e015229b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.203.255.221","comment":"https://x.com/drb_ra/status/1951357091085451420","timestamp":"1754074759","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d0f5102f-3aad-53a2-af8a-830739f2ccfd","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.122:7077","comment":"https://x.com/drb_ra/status/1951357229249995122","timestamp":"1754074792","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"7bb77d3b-b8e6-5a32-a332-0b57a256d70b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.80.158.122","comment":"https://x.com/drb_ra/status/1951357229249995122","timestamp":"1754074792","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"df2a8417-8912-5101-826c-564ece309645","type":"url","category":"Network activity","to_ids":true,"value":"http://82.25.93.235:443","comment":"https://x.com/drb_ra/status/1951357367536468058","timestamp":"1754074825","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"22876186-f569-5204-9fad-2a1fea439243","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.25.93.235","comment":"https://x.com/drb_ra/status/1951357367536468058","timestamp":"1754074825","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c3ed74c6-9b00-5a6b-b806-7c90e56248df","type":"domain","category":"Network activity","to_ids":true,"value":"riosaladohp.com","comment":"https://x.com/anand_himanshu/status/1951363159282901317","timestamp":"1754076206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aae64e7b-3278-5f86-9106-af8855385091","type":"url","category":"Network activity","to_ids":true,"value":"https://riosaladohp.com/godaddys/assets/","comment":"https://x.com/anand_himanshu/status/1951363159282901317","timestamp":"1754076206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7125acec-758e-5473-a046-df04a2845e2f","type":"domain","category":"Network activity","to_ids":true,"value":"newucoffice.weebly.com","comment":"https://x.com/urldna_bot/status/1951372387284369552","timestamp":"1754078406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f00bbc0f-55b9-5749-b50d-ffb2c2ebed7f","type":"url","category":"Network activity","to_ids":true,"value":"https://newucoffice.weebly.com","comment":"https://x.com/urldna_bot/status/1951372387284369552","timestamp":"1754078406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d481d638-116c-5610-bdb1-4c6f2b5b3c84","type":"url","category":"Network activity","to_ids":true,"value":"http://43.203.255.221","comment":"https://x.com/threatquery/status/1951387475865149948","timestamp":"1754082003","distribution":"5","Tag":[{"name":"malware"},{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d004a3fc-be38-5142-85e3-cbeecfad2192","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.213.69","comment":"https://x.com/threatquery/status/1951387479392608754","timestamp":"1754082004","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"75577a61-2090-5d36-8311-6894a0531494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.213.69","comment":"https://x.com/threatquery/status/1951387479392608754","timestamp":"1754082004","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"6af8b793-9b90-5eb3-8289-949ac43faba1","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.122","comment":"https://x.com/threatquery/status/1951387477517746321","timestamp":"1754082004","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"malware"},{"name":"C2"}]},{"uuid":"2959c1df-e39f-5413-9621-872376b0779e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.34.88:9000","comment":"https://x.com/drb_ra/status/1951392011636056089","timestamp":"1754083085","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91ec10bb-00dd-5f9e-a511-2c9911ceda02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.34.88","comment":"https://x.com/drb_ra/status/1951392011636056089","timestamp":"1754083085","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d1f72bb3-53d3-5372-a4f8-a124bc6f137e","type":"domain","category":"Network activity","to_ids":true,"value":"mejillones-a01ce.web.app","comment":"https://x.com/urldna_bot/status/1951402595349631229","timestamp":"1754085608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e96336a4-9376-5467-ae21-1b99e5c27769","type":"url","category":"Network activity","to_ids":true,"value":"https://mejillones-a01ce.web.app","comment":"https://x.com/urldna_bot/status/1951402595349631229","timestamp":"1754085608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"064b7792-bb9c-51a8-b023-821cb484b657","type":"domain","category":"Network activity","to_ids":true,"value":"tranquil-jalebi-2c4377.netlify.app","comment":"https://x.com/s3curetheweb/status/1951414362947649685","timestamp":"1754088414","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8444aa0-09a7-5c6b-bf23-213e892a7bff","type":"url","category":"Network activity","to_ids":true,"value":"https://tranquil-jalebi-2c4377.netlify.app","comment":"https://x.com/s3curetheweb/status/1951414362947649685","timestamp":"1754088414","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f41949b-2b38-5f2d-9a12-62b80a560e7d","type":"url","category":"Network activity","to_ids":true,"value":"http://106.75.214.122:80","comment":"https://x.com/drb_ra/status/1951419029748339182","timestamp":"1754089526","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b363c14e-4e8e-5e0e-86fa-4f6741249fa5","type":"url","category":"Network activity","to_ids":true,"value":"http://140.143.194.26:3389","comment":"https://x.com/drb_ra/status/1951419168768578036","timestamp":"1754089560","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e929178-87e3-51db-a151-11813f9e4d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.143.194.26","comment":"https://x.com/drb_ra/status/1951419168768578036","timestamp":"1754089560","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"680a4f03-066e-5d42-855c-f1fb9f6b30a5","type":"url","category":"Network activity","to_ids":true,"value":"http://101.201.75.136:80","comment":"https://x.com/drb_ra/status/1951419310250815491","timestamp":"1754089593","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"731ea14e-362b-5084-96b6-8dc59cfbced2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.201.75.136","comment":"https://x.com/drb_ra/status/1951419310250815491","timestamp":"1754089593","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ed08de17-1185-5a83-bebb-55d6c31895f7","type":"url","category":"Network activity","to_ids":true,"value":"http://42.113.217.220:4444","comment":"https://x.com/drb_ra/status/1951419449304604962","timestamp":"1754089626","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"677f3a40-466f-5813-95cc-6829e82a1b6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.113.217.220","comment":"https://x.com/drb_ra/status/1951419449304604962","timestamp":"1754089626","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e8abff7a-bcd6-51b8-9b27-2288d0c4a009","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.131.115:8080","comment":"https://x.com/drb_ra/status/1951419589226533193","timestamp":"1754089660","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d77a9591-ee1d-5dd6-a405-78b270d00de0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.131.115","comment":"https://x.com/drb_ra/status/1951419589226533193","timestamp":"1754089660","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38e5995b-7628-5aa1-832a-387eab62f02a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.103.62.252","comment":"https://x.com/drb_ra/status/1951419589226533193","timestamp":"1754089660","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"689409ce-4f1a-5670-b7f7-1664a7f10d99","type":"url","category":"Network activity","to_ids":true,"value":"https://himself-checks-blood-receptors.trycloudflare.com/submit.php","comment":"https://x.com/drb_ra/status/1951419733250609462","timestamp":"1754089694","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6f75b57c-bf7f-5f1b-8860-cb28c9df4752","type":"url","category":"Network activity","to_ids":true,"value":"http://120.46.72.74:80","comment":"https://x.com/drb_ra/status/1951419872073642049","timestamp":"1754089727","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"95ea1c07-1f93-5203-a444-03a0f6cff83a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.46.72.74","comment":"https://x.com/drb_ra/status/1951419872073642049","timestamp":"1754089727","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"992ea0f9-0737-5f97-9d99-b22918037365","type":"url","category":"Network activity","to_ids":true,"value":"http://106.75.214.122:443","comment":"https://x.com/drb_ra/status/1951420011228147725","timestamp":"1754089760","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5bc53049-35d0-5026-b7ba-60662322721f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.75.214.122","comment":"https://x.com/drb_ra/status/1951420011228147725","timestamp":"1754089760","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"821e78cc-f9d5-5fde-9620-dd9e0dbb89e8","type":"domain","category":"Network activity","to_ids":true,"value":"mail.eleven.com.bo","comment":"https://x.com/masaomi346/status/1951422575898431667","timestamp":"1754090372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c45e737-3757-5f5d-89f5-f5bf89483741","type":"url","category":"Network activity","to_ids":true,"value":"https://mail.eleven.com.bo/wordpress/wp-content/uploads/2025/Sites/web1.plala.or.jp/cgi-bin/mail/plus/webmail_login.php","comment":"https://x.com/masaomi346/status/1951422575898431667","timestamp":"1754090372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db9ad810-ef1c-53f1-86e3-3251962ce01e","type":"domain","category":"Network activity","to_ids":true,"value":"btconnect-voicemail.weebly.com","comment":"https://x.com/urldna_bot/status/1951432798331396294","timestamp":"1754092809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4d02d31c-fec5-5804-83f5-e5f73a24551b","type":"url","category":"Network activity","to_ids":true,"value":"https://btconnect-voicemail.weebly.com","comment":"https://x.com/urldna_bot/status/1951432798331396294","timestamp":"1754092809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"55193e78-2660-563a-97c6-8aee9e903b50","type":"md5","category":"Payload delivery","to_ids":true,"value":"6221B0BF4D365454D40C546CF7133570","comment":"https://x.com/fbgwls245/status/1951438330694082876","timestamp":"1754094128","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"8fa94e61-efa8-520e-a637-5c3861ac901c","type":"domain","category":"Network activity","to_ids":true,"value":"06.top","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"7ff54734-7e52-5c55-9434-8f17c68173e7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.06.top/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5b2cbcdd-a7d3-5d96-9d77-b610b8ba5db4","type":"domain","category":"Network activity","to_ids":true,"value":"2zyo6w.top","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"cfc71fe6-8a89-55b2-b90c-febb8c622bcd","type":"url","category":"Network activity","to_ids":true,"value":"http://www.2zyo6w.top/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"2cb3efbf-000f-5018-ba23-42f12af2fe68","type":"domain","category":"Network activity","to_ids":true,"value":"8dqy8.top","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d54a9b57-2aae-5f20-b7e6-8a8209c6bf27","type":"url","category":"Network activity","to_ids":true,"value":"http://www.8dqy8.top/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b8413667-74fa-5c09-b2e7-bef2fc0231cb","type":"domain","category":"Network activity","to_ids":true,"value":"ainianoffice.net","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"a19e104f-91ed-5de1-94e8-85f7835804fb","type":"url","category":"Network activity","to_ids":true,"value":"http://www.ainianoffice.net/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1c6cf6c2-145e-5303-9819-6dfe60fa5525","type":"domain","category":"Network activity","to_ids":true,"value":"alentabroadgroup.shop","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d690bcec-c4e7-54f1-9aaa-59cc736f23de","type":"url","category":"Network activity","to_ids":true,"value":"http://www.alentabroadgroup.shop/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"9ddacf6e-a5c4-550c-9534-0b62383ff7e9","type":"domain","category":"Network activity","to_ids":true,"value":"alentedgegrouphq.top","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8119da75-0dc7-5dd7-ac2b-2d9678c77ccb","type":"url","category":"Network activity","to_ids":true,"value":"http://www.alentedgegrouphq.top/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4074cf8f-f406-5397-ad4e-129cb5abfeec","type":"domain","category":"Network activity","to_ids":true,"value":"allantit.net","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5843c2f5-bd2a-589f-9185-b70043e07f03","type":"url","category":"Network activity","to_ids":true,"value":"http://www.allantit.net/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"a32d97d2-791a-52ad-9d2a-a7f022e619f6","type":"domain","category":"Network activity","to_ids":true,"value":"andsbyen-nh.art","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ffd84e3a-ac77-555c-adc0-4e7491a57991","type":"url","category":"Network activity","to_ids":true,"value":"http://www.andsbyen-nh.art/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8d0bc96c-6d1a-5f88-adad-ebc2f313157e","type":"domain","category":"Network activity","to_ids":true,"value":"antwedding.food","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"2e900fe6-72be-5f85-a942-a25ecff6972f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.antwedding.food/l36c/","comment":"https://x.com/skocherhan/status/1951448923811217693","timestamp":"1754096654","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"42aecaa1-b6d5-5e20-8578-818252d1f4fc","type":"domain","category":"Network activity","to_ids":true,"value":"meatsmkluugine.webflow.io","comment":"https://x.com/urldna_bot/status/1951462988738675028","timestamp":"1754100007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e2ccac5c-cfb5-55c4-aaa1-cd83fedce35a","type":"url","category":"Network activity","to_ids":true,"value":"https://meatsmkluugine.webflow.io","comment":"https://x.com/urldna_bot/status/1951462988738675028","timestamp":"1754100007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ce48994b-5455-5e42-94f7-da5d20d51786","type":"domain","category":"Network activity","to_ids":true,"value":"SSL.com","comment":"https://x.com/skocherhan/status/1951475694220820753","timestamp":"1754103036","distribution":"5"},{"uuid":"2c0320a7-520a-5f34-a700-559c0a24ec2e","type":"url","category":"Network activity","to_ids":true,"value":"http://SSL.com","comment":"https://x.com/skocherhan/status/1951475694220820753","timestamp":"1754103036","distribution":"5"},{"uuid":"04d620b2-af76-52c0-ab2a-62a72eb16916","type":"md5","category":"Payload delivery","to_ids":true,"value":"ddf9bba66ffc5f2638682a0d6712e177","comment":"https://x.com/skocherhan/status/1951475694220820753","timestamp":"1754103036","distribution":"5"},{"uuid":"27ab9ae4-9805-5271-af10-edff025b5300","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.29/fod4/","comment":"https://x.com/skocherhan/status/1951479279222464603","timestamp":"1754103891","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"51bd2aaf-3aa7-5fbf-a6d4-17e764126456","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.29","comment":"https://x.com/skocherhan/status/1951479279222464603","timestamp":"1754103891","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"c492bf0a-69df-5f1b-93d7-ac31aa1b540d","type":"domain","category":"Network activity","to_ids":true,"value":"78449973.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"71386f68-9e81-5872-bc14-26fc2e8e9a35","type":"domain","category":"Network activity","to_ids":true,"value":"9axgb6.vip","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"dca8758c-4ceb-55d1-aba1-61b52c9279c6","type":"url","category":"Network activity","to_ids":true,"value":"http://78451658.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8e9b833c-f293-51fa-940a-41d3b97019e3","type":"domain","category":"Network activity","to_ids":true,"value":"78451658.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"140a382b-eb6a-5057-bff5-de652358bafa","type":"url","category":"Network activity","to_ids":true,"value":"http://78449973.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c13f3645-2d81-5a28-9f4d-659b3f99ed6f","type":"url","category":"Network activity","to_ids":true,"value":"http://429s233s.top","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4e21ea46-b21a-5fe6-a8b9-b3c9f177295d","type":"url","category":"Network activity","to_ids":true,"value":"http://596767.top","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"405ec185-d21f-500e-9564-9b638e84c0ba","type":"domain","category":"Network activity","to_ids":true,"value":"achtzehngrad.net","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3af1ac75-78b1-561d-9ebf-588f0cade7e7","type":"domain","category":"Network activity","to_ids":true,"value":"429s233s.top","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"520c610b-549f-5c32-b27d-41aeb8989c8b","type":"url","category":"Network activity","to_ids":true,"value":"http://2026xr.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"58bd98cf-444b-5761-ba92-4c17a7eae66a","type":"url","category":"Network activity","to_ids":true,"value":"http://9axgb6.vip","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"e4f3bcb7-51e5-5dc1-91fa-fb4ed66aaa94","type":"domain","category":"Network activity","to_ids":true,"value":"2026xr.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"cef33ad7-bbaf-5f7a-a1e3-2adc3dccf157","type":"url","category":"Network activity","to_ids":true,"value":"http://achtzehngrad.net","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"95b2169a-1b72-5f14-aadb-ee4f28a7603e","type":"domain","category":"Network activity","to_ids":true,"value":"596767.top","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3eb1399b-6936-5bdb-ba3b-0878e6939f28","type":"url","category":"Network activity","to_ids":true,"value":"http://ascendia.club","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6832f8ce-fba8-5190-ade0-12569098fefe","type":"md5","category":"Payload delivery","to_ids":true,"value":"bdb92d611372578a89c0329832214331","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"64987a49-03fa-5362-b5d1-581b8f12aba1","type":"url","category":"Network activity","to_ids":true,"value":"http://clearairways1st.net","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1b266bcc-29cd-56c4-b33f-dfdcaf422ca7","type":"domain","category":"Network activity","to_ids":true,"value":"clearairways1st.net","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"bf78221a-66ad-5df8-ab0a-efe56f26ba94","type":"url","category":"Network activity","to_ids":true,"value":"http://buymydomain.today","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8d5ab1cf-a68c-522b-884b-234704a7f06f","type":"domain","category":"Network activity","to_ids":true,"value":"buymydomain.today","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"e1979e62-d900-55c1-b066-01e26b2111a3","type":"url","category":"Network activity","to_ids":true,"value":"http://biologyedtech.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"f8678824-4276-51fd-9548-6abefd548973","type":"domain","category":"Network activity","to_ids":true,"value":"ascendia.club","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"e1651600-0a4f-5813-b3be-95c65202e17e","type":"url","category":"Network activity","to_ids":true,"value":"http://batchcopilot.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"7663cb40-3e07-5eb0-a9af-0662aeb568dc","type":"domain","category":"Network activity","to_ids":true,"value":"batchcopilot.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"da426bf2-e0f6-538a-98e5-e2c132613953","type":"url","category":"Network activity","to_ids":true,"value":"http://augmentingdata.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"63af7df5-5437-563a-b257-796ba01994bc","type":"domain","category":"Network activity","to_ids":true,"value":"augmentingdata.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1a1fca0b-9608-5fee-8b6c-8c41800a011d","type":"domain","category":"Network activity","to_ids":true,"value":"biologyedtech.xyz","comment":"https://x.com/skocherhan/status/1951491387179888910","timestamp":"1754106778","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1b044ead-8b47-51ac-ba4c-f74e5c798f31","type":"url","category":"Network activity","to_ids":true,"value":"https://logontoaccessweb.weebly.com","comment":"https://x.com/urldna_bot/status/1951493188411117909","timestamp":"1754107207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"48ae3cfc-48ef-5e1b-a70b-51e760f13aa0","type":"domain","category":"Network activity","to_ids":true,"value":"logontoaccessweb.weebly.com","comment":"https://x.com/urldna_bot/status/1951493188411117909","timestamp":"1754107207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"455054eb-22a1-517a-9b77-e841cade2ce5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.158.159.254","comment":"https://x.com/SarlackLab/status/1951493308527608158","timestamp":"1754107236","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"0a6704bb-6398-5323-b509-48c87299ec20","type":"url","category":"Network activity","to_ids":true,"value":"http://3.121.139.82:16995","comment":"https://x.com/SarlackLab/status/1951493308527608158","timestamp":"1754107236","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"f61a8a2d-48c1-58d8-8586-7b6706feedba","type":"url","category":"Network activity","to_ids":true,"value":"http://3.127.253.86:16995","comment":"https://x.com/SarlackLab/status/1951493308527608158","timestamp":"1754107236","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"c006fff6-c9cd-5998-bab9-d600812468da","type":"url","category":"Network activity","to_ids":true,"value":"http://35.158.159.254:16995","comment":"https://x.com/SarlackLab/status/1951493308527608158","timestamp":"1754107236","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"62ff3eb6-4fe8-5fe6-bb13-f3a1c38efe88","type":"domain","category":"Network activity","to_ids":true,"value":"temporarymailerexpress.weebly.com","comment":"https://x.com/urldna_bot/status/1951523396799410403","timestamp":"1754114410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"36de882b-26e1-58eb-83c8-ce903c4e1912","type":"url","category":"Network activity","to_ids":true,"value":"https://temporarymailerexpress.weebly.com","comment":"https://x.com/urldna_bot/status/1951523396799410403","timestamp":"1754114410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7599b375-3856-5d69-9042-6a171b7161d6","type":"url","category":"Network activity","to_ids":true,"value":"https://myonlinevisionsfedscuweblogonhtmlmainphp.weebly.com","comment":"https://x.com/urldna_bot/status/1951553580197953560","timestamp":"1754121606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"62b85bb2-a7ef-58ec-a139-e83af4c65874","type":"domain","category":"Network activity","to_ids":true,"value":"myonlinevisionsfedscuweblogonhtmlmainphp.weebly.com","comment":"https://x.com/urldna_bot/status/1951553580197953560","timestamp":"1754121606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"106cd588-425e-5446-a831-968566e872e2","type":"domain","category":"Network activity","to_ids":true,"value":"tangsong.vip","comment":"https://x.com/masaomi346/status/1951579610191434172","timestamp":"1754127812","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e5be0f7-93e2-5f0f-9b81-62cf54dd399e","type":"url","category":"Network activity","to_ids":true,"value":"https://tangsong.vip/L1HE/","comment":"https://x.com/masaomi346/status/1951579610191434172","timestamp":"1754127812","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3bdbfd6c-813c-5b7a-82b9-15081abc3739","type":"domain","category":"Network activity","to_ids":true,"value":"kindbea48.activehosted.com","comment":"https://x.com/urldna_bot/status/1951583802595127520","timestamp":"1754128811","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2adcd3bd-776f-5fd0-b9df-f92230df03c3","type":"url","category":"Network activity","to_ids":true,"value":"https://kindbea48.activehosted.com","comment":"https://x.com/urldna_bot/status/1951583802595127520","timestamp":"1754128811","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bcb022af-de14-59c2-a3cc-27fafc33d13b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.93.89.63","comment":"https://x.com/Fact_Finder03/status/1951590712488903139","timestamp":"1754130459","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"064a1883-2034-52bd-af5f-5a72128ef852","type":"md5","category":"Payload delivery","to_ids":true,"value":"f8e99cd0501918f17dee315a9f342567","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"49333275-267c-582c-aaa4-306a8c8d4d27","type":"url","category":"Network activity","to_ids":true,"value":"http://www.ukinky.shop/ha9l/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6e87edb6-a8c4-5365-99a8-c2ca03c168d2","type":"domain","category":"Network activity","to_ids":true,"value":"ukinky.shop","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ec73d40f-2920-57e2-b55f-c4d0698fb8d8","type":"url","category":"Network activity","to_ids":true,"value":"http://www.twd60.top/riay/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6e8b37e8-9590-56e0-af2f-79df4afba5b4","type":"url","category":"Network activity","to_ids":true,"value":"http://www.incisozluk.com.tr/zkyw/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b172f451-9804-534d-b097-e4745852dea1","type":"domain","category":"Network activity","to_ids":true,"value":"twd60.top","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5a7429d4-0bc0-53aa-97e4-b331c2a9e5fa","type":"url","category":"Network activity","to_ids":true,"value":"http://www.autonomyvirtual.xyz/2v2x/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"cdef8604-2c5a-5c2e-8d3f-aec50a87f668","type":"domain","category":"Network activity","to_ids":true,"value":"autonomyvirtual.xyz","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"0149b032-5dd0-5192-a5a6-77eb92a68ecb","type":"url","category":"Network activity","to_ids":true,"value":"http://www.atomicmanager.xyz/qw9o/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b2a24015-c2f8-5020-85d0-a5b88a56a7e6","type":"domain","category":"Network activity","to_ids":true,"value":"atomicmanager.xyz","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"558d7c7e-0088-5690-91eb-daeca6d09e84","type":"url","category":"Network activity","to_ids":true,"value":"http://www.9axgb6.vip/e0nt/","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"bd3026be-192c-58d9-aa31-40fdae37fa1e","type":"domain","category":"Network activity","to_ids":true,"value":"incisozluk.com.tr","comment":"https://x.com/skocherhan/status/1951609651822203289","timestamp":"1754134974","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1be79285-ce8d-597d-9907-55e015c414be","type":"domain","category":"Network activity","to_ids":true,"value":"ourappointment.de","comment":"https://x.com/JRoosen/status/1951610041011671475","timestamp":"1754135067","distribution":"5"},{"uuid":"c8f0e557-6e37-5249-bf33-87b0b144f4bc","type":"url","category":"Network activity","to_ids":true,"value":"https://ourappointment.de/excel/windows/invite.php","comment":"https://x.com/JRoosen/status/1951610041011671475","timestamp":"1754135067","distribution":"5"},{"uuid":"7eda7cc8-964d-5151-b331-7a73418467ca","type":"sha256","category":"Payload delivery","to_ids":true,"value":"eb5558d414c6f96efeb30db704734c463eb08758a3feacf452d743ba5f8fe662","comment":"https://x.com/JRoosen/status/1951611522548953462","timestamp":"1754135420","distribution":"5"},{"uuid":"05caf11e-e9bb-551c-b24a-85fbd2b8a092","type":"domain","category":"Network activity","to_ids":true,"value":"pay.llustrationu.com","comment":"https://x.com/harugasumi/status/1951613512457064765","timestamp":"1754135895","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"72537f41-ca38-5e79-89d9-fb6938c5bea9","type":"url","category":"Network activity","to_ids":true,"value":"https://pay.llustrationu.com","comment":"https://x.com/harugasumi/status/1951613512457064765","timestamp":"1754135895","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d72ae263-5a09-583a-a113-49af1cf78319","type":"url","category":"Network activity","to_ids":true,"value":"https://kjgyuhuikgyuhlid.weebly.com","comment":"https://x.com/urldna_bot/status/1951613982441116015","timestamp":"1754136007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a69008ab-3cbe-54b1-a83c-e5cc8e74d07f","type":"domain","category":"Network activity","to_ids":true,"value":"kjgyuhuikgyuhlid.weebly.com","comment":"https://x.com/urldna_bot/status/1951613982441116015","timestamp":"1754136007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d004a3fc-be38-5142-85e3-cbeecfad2192","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.213.69","comment":"https://x.com/skocherhan/status/1951626124523380765","timestamp":"1754138902","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"75577a61-2090-5d36-8311-6894a0531494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.213.69","comment":"https://x.com/skocherhan/status/1951626124523380765","timestamp":"1754138902","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"442fa3c0-6462-5558-9ada-39d3e9674b9f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/skocherhan/status/1951626136569450533","timestamp":"1754138905","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c99f3de5-9b4c-5752-8a46-2d70e5089ae7","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-modp-gov-pk-view.netlify.app/error.html","comment":"https://x.com/skocherhan/status/1951626136569450533","timestamp":"1754138905","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bc201f3f-c0a0-51b8-aef8-d1bcce1891f0","type":"domain","category":"Network activity","to_ids":true,"value":"zweryfikowac683859.click","comment":"https://x.com/urldna_bot/status/1951674381278548050","timestamp":"1754150407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9ccf5c41-21e3-55d0-8c71-8208a30d497d","type":"url","category":"Network activity","to_ids":true,"value":"https://zweryfikowac683859.click","comment":"https://x.com/urldna_bot/status/1951674381278548050","timestamp":"1754150407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ba808a63-965c-56b5-8646-2ff202c45a1d","type":"domain","category":"Network activity","to_ids":true,"value":"daily.alltop.asia","comment":"https://x.com/skocherhan/status/1951677664114171937","timestamp":"1754151190","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"41155ccb-f9b3-5803-b4c1-79cb6a52e982","type":"url","category":"Network activity","to_ids":true,"value":"http://daily.alltop.asia/blog/article/d2.php","comment":"https://x.com/skocherhan/status/1951677664114171937","timestamp":"1754151190","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"27439b3b-0bb4-575c-abb3-c345533f0b97","type":"url","category":"Network activity","to_ids":true,"value":"http://daily.alltop.asia/blog/article/del2.php","comment":"https://x.com/skocherhan/status/1951677664114171937","timestamp":"1754151190","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"65c11879-2841-5154-b6e3-0993b4ae692b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d8d86b15e68889bf76b3cf8e335f43afe0287b9b20aeb18b136b90a516695989","comment":"https://x.com/skocherhan/status/1951677664114171937","timestamp":"1754151190","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c7ce9925-98d1-57e1-a6d8-646804022501","type":"domain","category":"Network activity","to_ids":true,"value":"bc-game.icu","comment":"https://x.com/skocherhan/status/1951687015059042317","timestamp":"1754153419","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc3adc06-a04c-590b-8ff1-efdc2ff68f6b","type":"url","category":"Network activity","to_ids":true,"value":"http://bc-game.icu","comment":"https://x.com/skocherhan/status/1951687015059042317","timestamp":"1754153419","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c49e6e6f-b490-5689-ae56-34225a4e29a7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"393a5a6dfc60be0498402043769134cce07b6a878d705d47f279b03ab9f63a80","comment":"https://x.com/skocherhan/status/1951687015059042317","timestamp":"1754153419","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"303ee782-1a80-5099-a06b-71ac4f3272ba","type":"domain","category":"Network activity","to_ids":true,"value":"51-cg.pro","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d0fac84e-b4ff-5f26-9145-b5b1c6d30cbc","type":"url","category":"Network activity","to_ids":true,"value":"http://www.51-cg.pro","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"eec01f54-1896-5425-8eb5-9f5faa1ae645","type":"domain","category":"Network activity","to_ids":true,"value":"51580.vip","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"7555d108-0ff0-57f1-b8d0-fec8401e4dba","type":"url","category":"Network activity","to_ids":true,"value":"http://www.51580.vip","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"a2c4fcbb-8b09-545d-96e9-583ffdb673a3","type":"domain","category":"Network activity","to_ids":true,"value":"altcoinmusic.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"94d71efa-142c-5220-be2b-7a293e69baa8","type":"url","category":"Network activity","to_ids":true,"value":"http://www.altcoinmusic.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"998c80f5-792e-5fc0-b97e-51f3aa0671c5","type":"domain","category":"Network activity","to_ids":true,"value":"alunos.fun","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"82a4fd1b-5775-5058-a7d1-8312a8e8d5d8","type":"url","category":"Network activity","to_ids":true,"value":"http://www.alunos.fun","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"f2745252-d62b-5acb-a990-5f418e7ed7a8","type":"domain","category":"Network activity","to_ids":true,"value":"amp4dslot.beauty","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d1a22a99-a985-5d18-b725-fb217538d4e8","type":"url","category":"Network activity","to_ids":true,"value":"http://www.amp4dslot.beauty","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"bf151686-52c7-5854-af4d-116ce0004052","type":"domain","category":"Network activity","to_ids":true,"value":"automationsweep.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c95a5189-d7c0-5aba-a920-09e358cdaa08","type":"url","category":"Network activity","to_ids":true,"value":"http://www.automationsweep.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"581c5dc4-741f-5012-a2af-de6f2e7578b0","type":"domain","category":"Network activity","to_ids":true,"value":"br316164.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"38a1f91b-107d-545e-8b51-0e92a059dc21","type":"url","category":"Network activity","to_ids":true,"value":"http://www.br316164.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"1fb2d613-f25f-553f-814e-08ad814bbe23","type":"domain","category":"Network activity","to_ids":true,"value":"brokensilenze.cfd","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"2fe75774-0c26-5f03-a57e-7daa9e903cf7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.brokensilenze.cfd","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ef5e44e0-3ba2-5ae3-b449-505f6191e51a","type":"domain","category":"Network activity","to_ids":true,"value":"checkurl.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"84cd4067-51a6-5216-b2e6-89a3704a79e7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.checkurl.xyz","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"db7dffb4-9d4c-59d4-b768-5c93609ea184","type":"domain","category":"Network activity","to_ids":true,"value":"clario-services.info","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"096e5f48-5f09-597c-8e29-de63d0b04cc1","type":"url","category":"Network activity","to_ids":true,"value":"http://www.clario-services.info","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"289ca1ef-b7ac-51fb-b121-3a81c2f924e2","type":"md5","category":"Payload delivery","to_ids":true,"value":"3fb6b4a8b9db3999c16d98095e6644a5","comment":"https://x.com/skocherhan/status/1951697011993919720","timestamp":"1754155803","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"85a34d9e-fbb0-55a6-b591-88117359487a","type":"domain","category":"Network activity","to_ids":true,"value":"bafybeicedalcolwlvq7fjhtcvzj3vivz4pdfd7b3cgr4gm55mafkj7geua.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1951704585816420366","timestamp":"1754157608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c6814f14-fffa-598e-8443-a8590fcbe0dc","type":"url","category":"Network activity","to_ids":true,"value":"https://bafybeicedalcolwlvq7fjhtcvzj3vivz4pdfd7b3cgr4gm55mafkj7geua.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1951704585816420366","timestamp":"1754157608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2c2ad6c9-63ad-516b-9203-0e31966a740b","type":"url","category":"Network activity","to_ids":true,"value":"http://gitlab.com/hi4201225/","comment":"https://x.com/skocherhan/status/1951705620933128580","timestamp":"1754157855","distribution":"5"},{"uuid":"9f789b51-b2ef-51cf-9d8b-d88d5c14308d","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/ud-progen2/","comment":"https://x.com/skocherhan/status/1951705620933128580","timestamp":"1754157855","distribution":"5"},{"uuid":"9f6ed4d1-0782-5f86-892f-c5dcfa6ff123","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/mrw-2","comment":"https://x.com/skocherhan/status/1951705620933128580","timestamp":"1754157855","distribution":"5"},{"uuid":"61739e57-3367-5bc2-b001-cbc1b91920e7","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/iry2am","comment":"https://x.com/skocherhan/status/1951724802005221462","timestamp":"1754162428","distribution":"5"},{"uuid":"70dcbf0a-4b76-5a5c-9520-4f86827725e6","type":"domain","category":"Network activity","to_ids":true,"value":"api.organica.tv","comment":"https://x.com/skocherhan/status/1951724802005221462","timestamp":"1754162428","distribution":"5"},{"uuid":"8d8d220b-2350-5d66-b827-9d7d60a3454e","type":"url","category":"Network activity","to_ids":true,"value":"http://api.organica.tv","comment":"https://x.com/skocherhan/status/1951724802005221462","timestamp":"1754162428","distribution":"5"},{"uuid":"4ca3f732-6a97-552f-8e9b-353a94328a5f","type":"domain","category":"Network activity","to_ids":true,"value":"allan.clayrat.top","comment":"https://x.com/skocherhan/status/1951725497437897094","timestamp":"1754162594","distribution":"5"},{"uuid":"b88ea265-86e3-5709-beea-bb3cec82c064","type":"url","category":"Network activity","to_ids":true,"value":"http://allan.clayrat.top","comment":"https://x.com/skocherhan/status/1951725497437897094","timestamp":"1754162594","distribution":"5"},{"uuid":"c009ec42-74c2-5d36-8425-0c9c8de4a4c9","type":"domain","category":"Network activity","to_ids":true,"value":"ataev.claybaster.top","comment":"https://x.com/skocherhan/status/1951726467613897112","timestamp":"1754162825","distribution":"5"},{"uuid":"99fa4086-ce8c-5c89-b2d7-af035dca95df","type":"url","category":"Network activity","to_ids":true,"value":"http://ataev.claybaster.top","comment":"https://x.com/skocherhan/status/1951726467613897112","timestamp":"1754162825","distribution":"5"},{"uuid":"6f7b36f1-f0de-58f6-aec0-5de12d05c1cd","type":"domain","category":"Network activity","to_ids":true,"value":"blocket.aqvqe.sbs","comment":"https://x.com/skocherhan/status/1951727825293295881","timestamp":"1754163149","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a9fa5cc-f005-5d91-ae6f-3716766d9eed","type":"url","category":"Network activity","to_ids":true,"value":"http://blocket.aqvqe.sbs/order/8nHHmq8gAl5C/","comment":"https://x.com/skocherhan/status/1951727825293295881","timestamp":"1754163149","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06d020d5-c14f-5995-a368-91d313a0cf55","type":"domain","category":"Network activity","to_ids":true,"value":"loginacguyanefridp11profileoidcauthorizexecutioe2e2.weebly.com","comment":"https://x.com/urldna_bot/status/1951734776106299441","timestamp":"1754164806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"28ca5d47-f64c-59a8-9d02-21e28c98abaa","type":"url","category":"Network activity","to_ids":true,"value":"https://loginacguyanefridp11profileoidcauthorizexecutioe2e2.weebly.com","comment":"https://x.com/urldna_bot/status/1951734776106299441","timestamp":"1754164806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"47151ba7-2bd9-5f46-b665-b2fb394b0a63","type":"url","category":"Network activity","to_ids":true,"value":"http://13.210.0.111","comment":"https://x.com/threatquery/status/1951749862803816767","timestamp":"1754168403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"ba32983b-3664-5706-bbc3-5d644d9f3f3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.210.0.111","comment":"https://x.com/threatquery/status/1951749862803816767","timestamp":"1754168403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4c4b36ed-2586-57ea-946b-5fa450eb0653","type":"url","category":"Network activity","to_ids":true,"value":"http://94.158.244.156","comment":"https://x.com/threatquery/status/1951749861004525965","timestamp":"1754168403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"NetSupportRAT"}]},{"uuid":"c26ed0b6-4d05-5fc6-9583-4a43f17ea1b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.158.244.156","comment":"https://x.com/threatquery/status/1951749861004525965","timestamp":"1754168403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"NetSupportRAT"}]},{"uuid":"3a8daa4c-fdc6-5fb9-bb5a-c17ebbba3c70","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.115.244","comment":"https://x.com/threatquery/status/1951749864519254097","timestamp":"1754168404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"AsyncRAT"}]},{"uuid":"24f15b55-f37b-526d-a50c-03f7f1067307","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.115.244","comment":"https://x.com/threatquery/status/1951749864519254097","timestamp":"1754168404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"AsyncRAT"}]},{"uuid":"5c7bbc84-5f05-5b8d-b166-69bf70b5036c","type":"domain","category":"Network activity","to_ids":true,"value":"maildefence.weebly.com","comment":"https://x.com/urldna_bot/status/1951764976076574807","timestamp":"1754172006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"71bad302-f39f-548d-a8f9-53dcb486cb57","type":"url","category":"Network activity","to_ids":true,"value":"https://maildefence.weebly.com","comment":"https://x.com/urldna_bot/status/1951764976076574807","timestamp":"1754172006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b8fbd5ec-24ac-55b5-8002-7ccdbf185ee5","type":"domain","category":"Network activity","to_ids":true,"value":"u3212790.isp.regruhosting.ru","comment":"https://x.com/urldna_bot/status/1951795196665954389","timestamp":"1754179212","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a9feabb6-ca81-5b84-a204-c71bb54da1b2","type":"url","category":"Network activity","to_ids":true,"value":"http://u3212790.isp.regruhosting.ru/DGT_ES/","comment":"https://x.com/urldna_bot/status/1951795196665954389","timestamp":"1754179212","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6730cb64-4312-55f0-8ed5-967f2ff1cb7a","type":"domain","category":"Network activity","to_ids":true,"value":"mailinfortelstr.weebly.com","comment":"https://x.com/urldna_bot/status/1951825372913254639","timestamp":"1754186406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"94ecad23-b1c3-5350-b6b6-10f0a015954e","type":"url","category":"Network activity","to_ids":true,"value":"https://mailinfortelstr.weebly.com","comment":"https://x.com/urldna_bot/status/1951825372913254639","timestamp":"1754186406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aa801462-acb6-52bc-83eb-e3f068e741ad","type":"domain","category":"Network activity","to_ids":true,"value":"bet73007.com","comment":"https://x.com/urldna_bot/status/1951855585151914477","timestamp":"1754193609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dc56c017-8807-50ea-87d5-6c9af1f92079","type":"url","category":"Network activity","to_ids":true,"value":"https://bet73007.com/fish/76","comment":"https://x.com/urldna_bot/status/1951855585151914477","timestamp":"1754193609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1d987678-ce86-514a-a551-edf7285cfd99","type":"domain","category":"Network activity","to_ids":true,"value":"bittsgly.my","comment":"https://x.com/K_N1kolenko/status/1951884331196064127","timestamp":"1754200463","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7cce831b-3ac6-523f-be42-9e4eef16560d","type":"url","category":"Network activity","to_ids":true,"value":"http://bittsgly.my/atop","comment":"https://x.com/K_N1kolenko/status/1951884331196064127","timestamp":"1754200463","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"669b9c2a-280a-51fd-8e06-f80c272324a1","type":"url","category":"Network activity","to_ids":true,"value":"https://0592asre850.weebly.com","comment":"https://x.com/urldna_bot/status/1951885784878862793","timestamp":"1754200810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e39a325d-f191-5f88-a0bd-869a423f4631","type":"domain","category":"Network activity","to_ids":true,"value":"0592asre850.weebly.com","comment":"https://x.com/urldna_bot/status/1951885784878862793","timestamp":"1754200810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"922d4ca4-1526-56f0-9685-273ed652da37","type":"url","category":"Network activity","to_ids":true,"value":"https://www1-janetbank-inforelease-rog.tuanlan.shop","comment":"https://x.com/harugasumi/status/1951888904157827230","timestamp":"1754201553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"222a7da7-3b39-55d9-a822-81c87570ca8c","type":"domain","category":"Network activity","to_ids":true,"value":"www1-janetbank-inforelease-rog.tuanlan.shop","comment":"https://x.com/harugasumi/status/1951888904157827230","timestamp":"1754201553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dac45b7c-4fdb-5cd4-b7fe-5d2af4feb41d","type":"url","category":"Network activity","to_ids":true,"value":"http://92.118.112.17:8080","comment":"https://x.com/galkofahi/status/1951932833158619176","timestamp":"1754212027","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"Trojan"}]},{"uuid":"c1d2fe55-52ea-5bbf-b5b1-ec669b438349","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.118.112.17","comment":"https://x.com/galkofahi/status/1951932833158619176","timestamp":"1754212027","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"Trojan"}]},{"uuid":"9f525958-7b67-506c-adfb-5daf0e77dd0f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"db09f8ba6b1ec60f3e02eb61451690beedecb2ff2cf8ef9731736c22f17b32d2","comment":"https://x.com/galkofahi/status/1951932833158619176","timestamp":"1754212027","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"Trojan"}]},{"uuid":"b41bd390-d540-59d0-893a-7b0ef6b3a40d","type":"domain","category":"Network activity","to_ids":true,"value":"rlim.com","comment":"https://x.com/skocherhan/status/1951942543798645099","timestamp":"1754214342","distribution":"5"},{"uuid":"a7fcd9cf-6b10-5bb4-b09f-3d9f8f58d80c","type":"url","category":"Network activity","to_ids":true,"value":"http://rlim.com/MicrosoftCur/raw","comment":"https://x.com/skocherhan/status/1951942543798645099","timestamp":"1754214342","distribution":"5"},{"uuid":"c891aeb2-a2d1-5523-8f07-f0235e5d6cfb","type":"sha256","category":"Payload delivery","to_ids":true,"value":"51afcd5539ca6270fae45979cfd5f434d3635a4fc747b8231cf3a60906b32b2a","comment":"https://x.com/skocherhan/status/1951944930143678951","timestamp":"1754214911","distribution":"5"},{"uuid":"c3fd3691-9280-512d-a8d4-3f9090ec67dc","type":"url","category":"Network activity","to_ids":true,"value":"http://signin.microsoft.com.cerblos.ch","comment":"https://x.com/urldna_bot/status/1951946171129176309","timestamp":"1754215207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8689ebf0-219f-53d3-8a9b-9156fc077fff","type":"domain","category":"Network activity","to_ids":true,"value":"signin.microsoft.com.cerblos.ch","comment":"https://x.com/urldna_bot/status/1951946171129176309","timestamp":"1754215207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7a3cfd5c-ee22-5752-a693-a2d41c614d3e","type":"url","category":"Network activity","to_ids":true,"value":"http://technology-rome.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1951946226628255976","timestamp":"1754215220","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1951946226628255976","timestamp":"1754215220","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"cec7f210-d662-5dfc-a99a-d043febcc7a9","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:45022","comment":"https://x.com/SarlackLab/status/1951946226628255976","timestamp":"1754215220","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a7e39fc7-68ad-55c8-894f-12f4025e678f","type":"domain","category":"Network activity","to_ids":true,"value":"technology-rome.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1951946226628255976","timestamp":"1754215220","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"cb7937e4-131d-5b9e-bf07-6d3d08a69933","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.189.164.137","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"4402f1ba-ccf6-5dfc-8afe-ad246e37661d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.140.86.154","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"ad0c0195-e640-5b51-9615-c79c3a2291ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.213.232","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"75ed6509-3577-54d8-9a16-e7db888e3a16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.213.19","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"d4775dcd-8dee-5532-9d9c-cbf942560dce","type":"url","category":"Network activity","to_ids":true,"value":"http://207.189.164.137:1244","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"0e77b313-d787-5c22-8f3e-7fc759d5b5dd","type":"url","category":"Network activity","to_ids":true,"value":"http://165.140.86.154:1244","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"2f23c453-fd11-5e93-b747-fce350ba8458","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.213.232:1244","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"fb7dbe52-8656-551f-a08d-959c04e95fcb","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.213.19:1244","comment":"https://x.com/skocherhan/status/1951963990403289159","timestamp":"1754219455","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"a50b2eee-6276-5233-8214-5fd9aa701018","type":"domain","category":"Network activity","to_ids":true,"value":"walletauthenticators.vercel.app","comment":"https://x.com/urldna_bot/status/1951976374144581721","timestamp":"1754222408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a1dbfdd5-4ef6-5d4c-b306-67a0b635fd08","type":"url","category":"Network activity","to_ids":true,"value":"https://walletauthenticators.vercel.app","comment":"https://x.com/urldna_bot/status/1951976374144581721","timestamp":"1754222408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"27d72dc4-90dc-5096-99f2-e8ba145aeebe","type":"url","category":"Network activity","to_ids":true,"value":"https://check-host.net/check-report/2aabbc9ck68f","comment":"https://x.com/skocherhan/status/1951977501267202502","timestamp":"1754222676","distribution":"5"},{"uuid":"e6459938-dd22-562a-a4fe-7a5378473fe3","type":"domain","category":"Network activity","to_ids":true,"value":"check-host.net","comment":"https://x.com/skocherhan/status/1951977501267202502","timestamp":"1754222676","distribution":"5"},{"uuid":"0cd6150b-f045-58fb-849e-6f34dcfe0745","type":"url","category":"Network activity","to_ids":true,"value":"http://microskinuk.com/dkshskdjgkjhsljsklksj/dsvjhvhshjbdskjlndskjlns/EJYHGAVUYSHAUYVEUYUA&sa=D&source=editors&ust=1754226376938033&usg=AOvVaw2QvEBnOiRE4QripYvdZcJQ","comment":"https://x.com/skocherhan/status/1951979044288844197","timestamp":"1754223044","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7dae01d8-9a38-57e9-8de8-a3cc8c41ff65","type":"domain","category":"Network activity","to_ids":true,"value":"microskinuk.com","comment":"https://x.com/skocherhan/status/1951979044288844197","timestamp":"1754223044","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"da96a260-0a7d-5aad-9055-ba425f7258fb","type":"url","category":"Network activity","to_ids":true,"value":"http://docs.google.com/presentation/d/1JWK6KTsJHAk4PhUBXbip8bBzsU8kkj7qzcqCL-Io-5M/preview?pli=1#slide=id.p","comment":"https://x.com/skocherhan/status/1951979044288844197","timestamp":"1754223044","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a32d3828-c84c-584b-9354-b73fea133e88","type":"url","category":"Network activity","to_ids":true,"value":"http://dr16899.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"f843fa48-caf5-5420-8747-ed3e7e23a506","type":"domain","category":"Network activity","to_ids":true,"value":"codeveinsurance.info","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"aa94713f-6f78-5c60-a500-1a87bd214f1b","type":"url","category":"Network activity","to_ids":true,"value":"http://codeveinsurance.info/1/","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"5ef0711b-5061-51a4-82a0-bcc598b37e81","type":"domain","category":"Network activity","to_ids":true,"value":"kingsbkup1.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"5cf5425c-caae-5073-bef3-627a652c8ec8","type":"domain","category":"Network activity","to_ids":true,"value":"opy.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"081fb142-209d-5d36-b220-3f49e0bcaf3c","type":"url","category":"Network activity","to_ids":true,"value":"http://opy.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"4a2b3ac1-7836-54d0-a26e-d287238c508c","type":"domain","category":"Network activity","to_ids":true,"value":"zyg.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"36ce3ad9-ae9f-5c57-8695-f7191216ef98","type":"url","category":"Network activity","to_ids":true,"value":"http://zyg.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"7d3e094e-9473-5d4b-b33a-cf4284e373e6","type":"domain","category":"Network activity","to_ids":true,"value":"che.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"2c6d3dd1-82a8-518c-a682-27fb04c431d0","type":"url","category":"Network activity","to_ids":true,"value":"http://che.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"cd633668-a878-59d8-9ec3-1ae1f19dac4e","type":"domain","category":"Network activity","to_ids":true,"value":"dr16899.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"25b4a5b3-fb2b-54bd-a758-11a766f79c34","type":"url","category":"Network activity","to_ids":true,"value":"http://kingsbkup1.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"e6419785-abda-5bda-b80a-a0813569ffa9","type":"domain","category":"Network activity","to_ids":true,"value":"bin12.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"840beccd-c86c-5ad4-96d6-83cf7ec654fe","type":"url","category":"Network activity","to_ids":true,"value":"http://bin12.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"11081fa3-44d1-5214-9900-45bc907277e9","type":"domain","category":"Network activity","to_ids":true,"value":"bin14.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"eb8cb939-4158-5ec9-ac35-ff5e703042d1","type":"url","category":"Network activity","to_ids":true,"value":"http://bin14.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"51cc49ee-e6e7-5ce6-8e3a-67812dc84b11","type":"domain","category":"Network activity","to_ids":true,"value":"smfcs1.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"70d0f8c3-6644-50d4-b202-5c3014a891bc","type":"url","category":"Network activity","to_ids":true,"value":"http://smfcs1.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"0c66afd6-7301-5fea-85c1-cf33940eaf3f","type":"domain","category":"Network activity","to_ids":true,"value":"win32.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"e697bf42-6a27-5613-ace8-01b27776142e","type":"domain","category":"Network activity","to_ids":true,"value":"smfcs3.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"5227d332-4e26-50d0-8fb9-387855b62a24","type":"url","category":"Network activity","to_ids":true,"value":"http://smfcs3.ydns.eu:3908","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"31598b21-661e-568d-b9e7-89d63c8caed7","type":"md5","category":"Payload delivery","to_ids":true,"value":"89f7e9298369151b1ee3316350988e39","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"dc1e21c7-7132-5b03-9daf-3e67fcdd0395","type":"url","category":"Network activity","to_ids":true,"value":"http://win32.ydns.eu","comment":"https://x.com/skocherhan/status/1951998006686839018","timestamp":"1754227565","distribution":"5"},{"uuid":"669ac0a4-78be-5074-bcce-22d94c0f9536","type":"url","category":"Network activity","to_ids":true,"value":"https://venom--mozilla--org.webflow.io","comment":"https://x.com/urldna_bot/status/1952006570394489203","timestamp":"1754229607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"87fc4be3-8218-5fe9-85e0-f1f81a64f7a9","type":"domain","category":"Network activity","to_ids":true,"value":"venom--mozilla--org.webflow.io","comment":"https://x.com/urldna_bot/status/1952006570394489203","timestamp":"1754229607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"55193e78-2660-563a-97c6-8aee9e903b50","type":"md5","category":"Payload delivery","to_ids":true,"value":"6221B0BF4D365454D40C546CF7133570","comment":"https://x.com/fbgwls245/status/1952019399529156797","timestamp":"1754232666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d98f325e-f06a-5781-9e64-7bf36a0731e4","type":"domain","category":"Network activity","to_ids":true,"value":"hskyzvrcwbfx.web.app","comment":"https://x.com/urldna_bot/status/1952036768917684449","timestamp":"1754236807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3c55ccc5-f9fa-5601-bfac-6990314c858e","type":"url","category":"Network activity","to_ids":true,"value":"https://hskyzvrcwbfx.web.app","comment":"https://x.com/urldna_bot/status/1952036768917684449","timestamp":"1754236807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cd6a6b5c-d28e-5a0d-b28f-336dd7b4d4c7","type":"url","category":"Network activity","to_ids":true,"value":"https://mailserver-lk.com/Cabinet/decision.php","comment":"https://x.com/skocherhan/status/1952047255122243994","timestamp":"1754239307","distribution":"5"},{"uuid":"f6c91189-097a-52b2-ad3d-8294ce1fcb43","type":"domain","category":"Network activity","to_ids":true,"value":"mailserver-lk.com","comment":"https://x.com/skocherhan/status/1952047328367628523","timestamp":"1754239325","distribution":"5"},{"uuid":"a2688d56-34de-56ff-952a-b33e505b190b","type":"url","category":"Network activity","to_ids":true,"value":"https://mailserver-lk.com/Official/registraion.php","comment":"https://x.com/skocherhan/status/1952047328367628523","timestamp":"1754239325","distribution":"5"},{"uuid":"ed9b67c4-f5ac-5a26-aaed-ed895f8c539d","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/AI-USE","comment":"https://x.com/skocherhan/status/1952049241641439268","timestamp":"1754239781","distribution":"5"},{"uuid":"d23f8a08-1135-5b6d-89c7-b2c07cb5ff7a","type":"domain","category":"Network activity","to_ids":true,"value":"reverse-g355.onrender.com","comment":"https://x.com/skocherhan/status/1952049241641439268","timestamp":"1754239781","distribution":"5"},{"uuid":"695ca651-1b09-5c5e-bacd-00b98f61c201","type":"url","category":"Network activity","to_ids":true,"value":"http://reverse-g355.onrender.com","comment":"https://x.com/skocherhan/status/1952049241641439268","timestamp":"1754239781","distribution":"5"},{"uuid":"cbee3b62-9567-5f93-82b5-c9ccf3f32776","type":"url","category":"Network activity","to_ids":true,"value":"http://169.150.231.246:57744","comment":"https://x.com/skocherhan/status/1952053694645633406","timestamp":"1754240842","distribution":"5"},{"uuid":"0754d41f-6df2-5723-b0da-4f7293e8af77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"169.150.231.246","comment":"https://x.com/skocherhan/status/1952053694645633406","timestamp":"1754240842","distribution":"5"},{"uuid":"8cdb032b-9dda-5f05-ae96-5218e1f6f1ef","type":"md5","category":"Payload delivery","to_ids":true,"value":"0f1f51e0a3090d8d30a5dba831a6757c","comment":"https://x.com/skocherhan/status/1952073078734778513","timestamp":"1754245464","distribution":"5"},{"uuid":"a3ad80ee-ebf7-5592-b54b-67b8a670c9d3","type":"url","category":"Network activity","to_ids":true,"value":"http://76.46.157.65","comment":"https://x.com/skocherhan/status/1952073078734778513","timestamp":"1754245464","distribution":"5"},{"uuid":"f43ae79e-aeec-59b4-b57d-b9abd6907982","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.46.157.65","comment":"https://x.com/skocherhan/status/1952073078734778513","timestamp":"1754245464","distribution":"5"},{"uuid":"ebb4b551-4c7f-599c-80e8-c6d7d2c861ac","type":"domain","category":"Network activity","to_ids":true,"value":"systemloop.online:4444","comment":"https://x.com/skocherhan/status/1952076123249979603","timestamp":"1754246190","distribution":"5"},{"uuid":"77b2dd9b-f9c9-5dba-8687-0545922e2497","type":"url","category":"Network activity","to_ids":true,"value":"http://systemloop.online:4444","comment":"https://x.com/skocherhan/status/1952076123249979603","timestamp":"1754246190","distribution":"5"},{"uuid":"82ebbdd9-dfbe-5a6b-99d7-9d04d61369df","type":"md5","category":"Payload delivery","to_ids":true,"value":"b1aeaef812a9abc1f6d4d92f911bbdc1","comment":"https://x.com/skocherhan/status/1952076123249979603","timestamp":"1754246190","distribution":"5"},{"uuid":"12e40111-7745-51a3-b3ff-9c57ec79ba49","type":"url","category":"Network activity","to_ids":true,"value":"http://c2.skelet.lol","comment":"https://x.com/skocherhan/status/1952077057971609815","timestamp":"1754246413","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"7c69182d-eb36-5f29-a218-13d79714b838","type":"domain","category":"Network activity","to_ids":true,"value":"c2.skelet.lol","comment":"https://x.com/skocherhan/status/1952077057971609815","timestamp":"1754246413","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"d633c5cf-6b27-58aa-b964-d00778b4a5d5","type":"url","category":"Network activity","to_ids":true,"value":"http://91.147.113.214","comment":"https://x.com/skocherhan/status/1952077057971609815","timestamp":"1754246413","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"8e83a1fd-8638-5fb5-9dee-78f5e957a7da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.147.113.214","comment":"https://x.com/skocherhan/status/1952077057971609815","timestamp":"1754246413","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"fa6eae83-bdf7-5e87-81fb-349dbb7bfc8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.156.136.113","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"acc637e7-70cc-5acb-96ab-935d2803cf27","type":"url","category":"Network activity","to_ids":true,"value":"http://167.114.145.155","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"a3494b41-71b5-57fa-a1f6-bef3fbca23ac","type":"url","category":"Network activity","to_ids":true,"value":"http://3.149.190.172","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"53ecfa27-d74a-5f5a-9e5f-f9af48a5312e","type":"url","category":"Network activity","to_ids":true,"value":"http://15.156.136.113","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"ae2f4bb2-3a6d-515c-b4fa-31e0b58c7a13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.114.145.155","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"71ad6e80-4915-5942-846e-638612fcc5fa","type":"domain","category":"Network activity","to_ids":true,"value":"kala1.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"a0ca7a1b-64a0-55c5-9627-69021e8a6e75","type":"url","category":"Network activity","to_ids":true,"value":"http://kala007.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"3f4565a2-876c-5b2a-b97b-1d02e7963753","type":"url","category":"Network activity","to_ids":true,"value":"http://kala1.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"d8734385-c0ba-5e87-b256-d7bf6dd44026","type":"url","category":"Network activity","to_ids":true,"value":"http://homesafe1000.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"6498c094-9c9c-5e3c-8738-d4cae2988b83","type":"domain","category":"Network activity","to_ids":true,"value":"homesafe1000.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"e1c4eaf9-cb77-5067-b090-dad441a2ad40","type":"url","category":"Network activity","to_ids":true,"value":"http://seoudy.duckdns.org:7001","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"8af3214d-7a52-5a84-bdd9-fb394184c8cf","type":"domain","category":"Network activity","to_ids":true,"value":"seoudy.duckdns.org:7001","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"b0274c32-8da4-5288-8a13-8b6985e23114","type":"url","category":"Network activity","to_ids":true,"value":"http://pulsarmuna.duckdns.org:4404","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"191f1974-25fb-50d3-abad-bf1afb613377","type":"domain","category":"Network activity","to_ids":true,"value":"pulsarmuna.duckdns.org:4404","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"64b05105-58eb-50b8-919e-f8d7d59a3b14","type":"domain","category":"Network activity","to_ids":true,"value":"kala007.duckdns.org","comment":"https://x.com/skocherhan/status/1952080247609844120","timestamp":"1754247173","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Xworm"}]},{"uuid":"4d6b6404-ddb0-5081-8bca-43ae2888254f","type":"md5","category":"Payload delivery","to_ids":true,"value":"735ef2743617497a79ce7cb3a1d4b9c9","comment":"https://x.com/skocherhan/status/1952092253687554283","timestamp":"1754250036","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"8787d77e-ea64-5984-a103-14ab9711a0fa","type":"md5","category":"Payload delivery","to_ids":true,"value":"d9dd561ce8a6f0898846d47a613306d8","comment":"https://x.com/skocherhan/status/1952092253687554283","timestamp":"1754250036","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"c4b9aa9e-0d80-5db6-aea4-2b19278c84d7","type":"domain","category":"Network activity","to_ids":true,"value":"cia.tf","comment":"https://x.com/skocherhan/status/1952092253687554283","timestamp":"1754250036","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"e43db891-3569-5c02-9ef9-9fb003678c5d","type":"url","category":"Network activity","to_ids":true,"value":"http://cia.tf/735ef2743617497a79ce7cb3a1d4b9c9.vdf","comment":"https://x.com/skocherhan/status/1952092253687554283","timestamp":"1754250036","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"51a36532-71f0-5c21-b733-444920704b97","type":"domain","category":"Network activity","to_ids":true,"value":"ref-orange-login-vocal.weebly.com","comment":"https://x.com/urldna_bot/status/1952097168455594144","timestamp":"1754251207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3ccc27db-25cd-5583-8f61-ceeb36d4be32","type":"url","category":"Network activity","to_ids":true,"value":"https://ref-orange-login-vocal.weebly.com","comment":"https://x.com/urldna_bot/status/1952097168455594144","timestamp":"1754251207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0d42b3da-6429-58be-88ad-04652b0bb40b","type":"url","category":"Network activity","to_ids":true,"value":"http://52.27.181.0","comment":"https://x.com/threatquery/status/1952112252301008929","timestamp":"1754254804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"1a895512-9aba-5d8e-bbfd-9f6043181c2c","type":"url","category":"Network activity","to_ids":true,"value":"http://34.82.165.200","comment":"https://x.com/threatquery/status/1952112255819972882","timestamp":"1754254804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"6f08ea9d-9318-5099-8fed-8473b74b822f","type":"url","category":"Network activity","to_ids":true,"value":"http://44.237.77.82","comment":"https://x.com/threatquery/status/1952112254079418493","timestamp":"1754254804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"cbf7b62e-823f-523f-a419-1734d8743005","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.237.77.82","comment":"https://x.com/threatquery/status/1952112254079418493","timestamp":"1754254804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"ef95686e-eee5-572a-bf33-9915b0a2198f","type":"md5","category":"Payload delivery","to_ids":true,"value":"ae2bb7218dfc264fc6380e7b83fe629b","comment":"https://x.com/skocherhan/status/1952117717290369291","timestamp":"1754256107","distribution":"5"},{"uuid":"10165a3c-247f-50f2-b226-8027c85d51e8","type":"url","category":"Network activity","to_ids":true,"value":"http://scapqep.club/xwir","comment":"https://x.com/skocherhan/status/1952117717290369291","timestamp":"1754256107","distribution":"5"},{"uuid":"f94f95e3-1fd8-57f1-b1cc-f7c8a02ba60d","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/wd3f2r32rewt","comment":"https://x.com/skocherhan/status/1952117717290369291","timestamp":"1754256107","distribution":"5"},{"uuid":"1abfbf9d-8814-501f-9beb-e0ce34d2f941","type":"domain","category":"Network activity","to_ids":true,"value":"scapqep.club","comment":"https://x.com/skocherhan/status/1952117717290369291","timestamp":"1754256107","distribution":"5"},{"uuid":"5ad42b42-6690-5a33-bbd1-4174967a4c53","type":"url","category":"Network activity","to_ids":true,"value":"http://aqrl-trade.com","comment":"https://x.com/CryptoRecoverCF/status/1952121551840792787","timestamp":"1754257021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"740d0975-f952-511a-b8ed-7becab0471d2","type":"domain","category":"Network activity","to_ids":true,"value":"aqrl-trade.com","comment":"https://x.com/CryptoRecoverCF/status/1952121551840792787","timestamp":"1754257021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc900b97-772d-5733-866a-6a0372a9191f","type":"url","category":"Network activity","to_ids":true,"value":"http://coin-team.com","comment":"https://x.com/CryptoRecoverCF/status/1952121551840792787","timestamp":"1754257021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"453c28d7-9f4a-54b3-b51e-84e17d6482e6","type":"domain","category":"Network activity","to_ids":true,"value":"coin-team.com","comment":"https://x.com/CryptoRecoverCF/status/1952121551840792787","timestamp":"1754257021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3029d31b-4ba3-5356-a9de-4403134eab08","type":"domain","category":"Network activity","to_ids":true,"value":"site-tzjljqpn4.godaddysites.com","comment":"https://x.com/urldna_bot/status/1952127368677491191","timestamp":"1754258408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d5451676-d0d1-55b4-8ec9-bb7273e31f92","type":"url","category":"Network activity","to_ids":true,"value":"https://site-tzjljqpn4.godaddysites.com","comment":"https://x.com/urldna_bot/status/1952127368677491191","timestamp":"1754258408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b6b5e673-cc14-53b4-a326-c9746ff9bd8b","type":"md5","category":"Payload delivery","to_ids":true,"value":"4e14793601b6cf7d3f2b5bc0ddd0681c","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"abdb8284-3554-5178-9f8f-7f287844fbfc","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.zada.ba","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"e1be2997-c0da-55af-b984-9a94187cf227","type":"domain","category":"Network activity","to_ids":true,"value":"mail.zada.ba","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"9d5cec74-638e-5a57-adf7-777496f77f7c","type":"url","category":"Network activity","to_ids":true,"value":"http://amila.music@zada.ba","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"951fb5e4-dbe7-51fb-a1ab-7493ed48d13f","type":"domain","category":"Network activity","to_ids":true,"value":"amila.music@zada.ba","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"505b202e-dc8a-5afd-9965-71f2000143ba","type":"url","category":"Network activity","to_ids":true,"value":"http://chief.accountant@kome88.com.vn","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"0ba1cd4c-36a4-53d6-ad7b-0bce687bcb30","type":"domain","category":"Network activity","to_ids":true,"value":"chief.accountant@kome88.com.vn","comment":"https://x.com/skocherhan/status/1952127619291402550","timestamp":"1754258467","distribution":"5"},{"uuid":"d22796b1-5ce3-5d8f-8c5c-74299a63262f","type":"md5","category":"Payload delivery","to_ids":true,"value":"eeb45d4a7cb22900d7c2d2ed0fc4bc92","comment":"https://x.com/skocherhan/status/1952129085569716520","timestamp":"1754258817","distribution":"5"},{"uuid":"0a84e6b9-37e1-5ebb-bb79-fe556b3af8e8","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.multisecure.co.id","comment":"https://x.com/skocherhan/status/1952129085569716520","timestamp":"1754258817","distribution":"5"},{"uuid":"7dec93f2-7582-5cd3-8f32-40185b9ff6e2","type":"domain","category":"Network activity","to_ids":true,"value":"mail.multisecure.co.id","comment":"https://x.com/skocherhan/status/1952129085569716520","timestamp":"1754258817","distribution":"5"},{"uuid":"6f57c4b4-b7fe-5d2e-838e-0a09810940c4","type":"url","category":"Network activity","to_ids":true,"value":"http://multisecure.co.id","comment":"https://x.com/skocherhan/status/1952129085569716520","timestamp":"1754258817","distribution":"5"},{"uuid":"b64055d0-852c-5941-898a-7cd592364904","type":"domain","category":"Network activity","to_ids":true,"value":"multisecure.co.id","comment":"https://x.com/skocherhan/status/1952129085569716520","timestamp":"1754258817","distribution":"5"},{"uuid":"e527907f-cc4d-5b20-a472-bc5580530033","type":"domain","category":"Network activity","to_ids":true,"value":"roxane.vn","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"a09d1944-8bbc-5dd6-92d1-d2d673a340ca","type":"url","category":"Network activity","to_ids":true,"value":"http://roxane.vn","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"ba964675-0982-5f44-a028-5b21b48b6a6c","type":"domain","category":"Network activity","to_ids":true,"value":"mpsv-hnz-k.ba","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"8663f381-6c35-57fc-a355-f31f9e3eca1d","type":"url","category":"Network activity","to_ids":true,"value":"http://mpsv-hnz-k.ba","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"09fec161-c0c7-53f3-b99e-6f89677a694b","type":"domain","category":"Network activity","to_ids":true,"value":"mail.mpsv-hnz-k.ba","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"2ea2180f-763d-5e86-b78a-6d53b23e5d98","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.mpsv-hnz-k.ba","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"cc729627-9f89-583a-863c-404899b7559c","type":"md5","category":"Payload delivery","to_ids":true,"value":"f3dbb90f61361304a50031af30416e95","comment":"https://x.com/skocherhan/status/1952130691820319129","timestamp":"1754259200","distribution":"5"},{"uuid":"25699498-52ee-55a9-a73c-d5156a792708","type":"domain","category":"Network activity","to_ids":true,"value":"mcnzxz.com","comment":"https://x.com/skocherhan/status/1952132887085556154","timestamp":"1754259723","distribution":"5"},{"uuid":"933412ff-c71e-5b51-87da-c0672371a77f","type":"url","category":"Network activity","to_ids":true,"value":"http://mcnzxz.com","comment":"https://x.com/skocherhan/status/1952132887085556154","timestamp":"1754259723","distribution":"5"},{"uuid":"79d50dca-d1de-57e2-b70a-abec7cba4ac5","type":"domain","category":"Network activity","to_ids":true,"value":"cphost14.qhoster.net","comment":"https://x.com/skocherhan/status/1952132887085556154","timestamp":"1754259723","distribution":"5"},{"uuid":"5de3a222-4a64-5ee3-9569-012e312c06fa","type":"url","category":"Network activity","to_ids":true,"value":"http://cphost14.qhoster.net","comment":"https://x.com/skocherhan/status/1952132887085556154","timestamp":"1754259723","distribution":"5"},{"uuid":"ed581f92-1865-5444-877a-385625eb26ff","type":"md5","category":"Payload delivery","to_ids":true,"value":"6d6a4a091d976e78b58cdb5dec11a43d","comment":"https://x.com/skocherhan/status/1952132887085556154","timestamp":"1754259723","distribution":"5"},{"uuid":"0b5623da-1b85-55ee-9784-e8a187d2a6de","type":"url","category":"Network activity","to_ids":true,"value":"http://kilimanjaro.crabdance.com:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"01a77c4f-b26d-5629-84f4-bc19891c5801","type":"domain","category":"Network activity","to_ids":true,"value":"kilimanjaro.bigmoney.biz:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"e6dc4126-aee0-56cc-9ead-fcaa70d8661c","type":"domain","category":"Network activity","to_ids":true,"value":"kilimanjaro.crabdance.com:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"7e4afbd9-0f2d-5c04-8f7d-3abc8f15aff9","type":"url","category":"Network activity","to_ids":true,"value":"http://kilimanjaro.bigmoney.biz:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"dd61c796-b782-54d0-99de-3088477b2cc7","type":"domain","category":"Network activity","to_ids":true,"value":"kilimanjaro.theworkpc.com:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"bf92be13-08b6-57b7-a7eb-014bcc042329","type":"url","category":"Network activity","to_ids":true,"value":"http://kilimanjaro.run.place:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"47037eb2-01ab-5a55-9eaa-21ed8a3dc271","type":"domain","category":"Network activity","to_ids":true,"value":"kilimanjaro.run.place:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"78aeec17-06a4-55dc-af05-04152ab35b6e","type":"url","category":"Network activity","to_ids":true,"value":"http://kilimanjaro.theworkpc.com:8812","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"59777527-e108-5222-8512-5111b95d84d5","type":"md5","category":"Payload delivery","to_ids":true,"value":"812455a70780bd8e89750435819438dd","comment":"https://x.com/skocherhan/status/1952133989512225229","timestamp":"1754259986","distribution":"5"},{"uuid":"044ddddb-2935-51f0-b471-09d7948225e9","type":"url","category":"Network activity","to_ids":true,"value":"http://103.82.36.216/15429.txt","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"a8ca472e-bfd5-5fb6-9a65-1a96e25b0261","type":"url","category":"Network activity","to_ids":true,"value":"http://103.82.36.216/protected_RuntimeBroker_20250425_153651.txt","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"816a6f4e-31ac-5a1b-8d0d-4a287170ecba","type":"url","category":"Network activity","to_ids":true,"value":"http://103.82.36.216/protected_testrytt_20250305_193453.txt","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"6e0e604e-fb5a-5125-b0fc-f455044e8de9","type":"url","category":"Network activity","to_ids":true,"value":"http://103.82.36.216/protected_WindowsComp_20250507_080239.txt","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"4bd2263b-f730-5c58-9a6c-46eb0e6e02f4","type":"url","category":"Network activity","to_ids":true,"value":"http://103.82.36.216/thungforme216.bin","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"7c26f7b3-21db-5d72-851f-69bfc3e73ba5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.82.36.216","comment":"https://x.com/skocherhan/status/1952139322766827622","timestamp":"1754261258","distribution":"5"},{"uuid":"246ba7f7-d1cc-5e6d-a402-4f658b845399","type":"domain","category":"Network activity","to_ids":true,"value":"open-monex.aoelive.com","comment":"https://x.com/masaomi346/status/1952141418002362400","timestamp":"1754261757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3036d0cd-5492-51ea-ad3b-c3eb17680ba4","type":"url","category":"Network activity","to_ids":true,"value":"https://open-monex.aoelive.com/support/","comment":"https://x.com/masaomi346/status/1952141418002362400","timestamp":"1754261757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b061b3c-f544-520c-80aa-9db2b76c8735","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex.mabeibei.com","comment":"https://x.com/masaomi346/status/1952141418002362400","timestamp":"1754261757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1add9760-b52f-5934-a9b0-6eb3b5340752","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex.mabeibei.com/support/","comment":"https://x.com/masaomi346/status/1952141418002362400","timestamp":"1754261757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85695777-0b7f-5767-98b2-67ada0f859e4","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.236.65/protected_slhosti_20250730_124937.txt","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"490417fc-9ae3-5e60-bfa5-bd6744fa8c30","type":"url","category":"Network activity","to_ids":true,"value":"http://137.220.229.14:8000","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"f6376dde-195c-5851-b6a6-b1b72854a897","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.12.33:8000","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"581a4b50-d642-5bcd-b242-9b036beba10d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.236.65","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"92bfcb6d-f072-579e-9665-95085aa723c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.220.229.14","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"8cd28ada-484f-589e-9b17-ec0219c43866","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.12.33","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"daf7c8d8-f589-54bd-a903-e90bdf8d112a","type":"md5","category":"Payload delivery","to_ids":true,"value":"413e17069119525bdb6ddec90099a116","comment":"https://x.com/skocherhan/status/1952144284599321014","timestamp":"1754262441","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"d0a617a8-5aff-5d20-a55b-4c3a0bacb4d5","type":"domain","category":"Network activity","to_ids":true,"value":"scorpiocrypter.cc","comment":"https://x.com/skocherhan/status/1952147286386983058","timestamp":"1754263156","distribution":"5"},{"uuid":"86f9a334-d416-563c-9959-eeac2e069105","type":"url","category":"Network activity","to_ids":true,"value":"http://scorpiocrypter.cc","comment":"https://x.com/skocherhan/status/1952147286386983058","timestamp":"1754263156","distribution":"5"},{"uuid":"f1f9f762-4c3d-5700-bdc0-16cd8b2dffb3","type":"domain","category":"Network activity","to_ids":true,"value":"ebawightmancoded.weebly.com","comment":"https://x.com/urldna_bot/status/1952157570661073368","timestamp":"1754265608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5ea556c4-cc88-5196-a6d5-caed3437306d","type":"url","category":"Network activity","to_ids":true,"value":"https://ebawightmancoded.weebly.com","comment":"https://x.com/urldna_bot/status/1952157570661073368","timestamp":"1754265608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e4cd6386-76ca-5629-93f1-bd312df7a172","type":"domain","category":"Network activity","to_ids":true,"value":"bytes.press","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c9ae211e-a295-5369-8146-a2c5a0335e26","type":"domain","category":"Network activity","to_ids":true,"value":"031233414.xyz","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3830dad7-5611-5105-8216-7ae2b28c581f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.031233414.xyz","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"52c479fd-e369-586d-84ba-d727b7165de9","type":"domain","category":"Network activity","to_ids":true,"value":"99fxz.net","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"59e6a258-68a1-554f-bce6-1f936792a78b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.99fxz.net","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"46c78f48-b323-550a-a18c-30ab15e9ae56","type":"url","category":"Network activity","to_ids":true,"value":"http://www.bionanosurf.info","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8b64aa53-0af3-5576-8ef4-ebf1bfaeedc8","type":"domain","category":"Network activity","to_ids":true,"value":"borneolab.net","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ae4c2846-6844-5fb3-bb66-9c5c86df89a1","type":"url","category":"Network activity","to_ids":true,"value":"http://www.borneolab.net","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ff7055fb-2432-50bd-89a4-859e74c5325a","type":"domain","category":"Network activity","to_ids":true,"value":"bionanosurf.info","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"f2b00880-552e-55b3-8cdc-4a4f08566298","type":"url","category":"Network activity","to_ids":true,"value":"http://www.bytes.press","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d7e61748-e7a4-50b8-8e51-a5c2d6f8aa22","type":"domain","category":"Network activity","to_ids":true,"value":"dietproio.info","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d184c6dd-930b-5693-bdb6-0a60fb91c030","type":"url","category":"Network activity","to_ids":true,"value":"http://www.dietproio.info","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"94a2464c-83ce-5221-9f32-d32eaaadf3c2","type":"domain","category":"Network activity","to_ids":true,"value":"drgnmoney-98.buzz","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4c8a5419-3776-5cd4-b3e0-c03d87a5d831","type":"url","category":"Network activity","to_ids":true,"value":"http://www.drgnmoney-98.buzz","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4cbc72f7-3cb1-5fe2-96cc-4c12c005fcbc","type":"domain","category":"Network activity","to_ids":true,"value":"earnshill.com","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"373d62b4-51dc-5376-8286-712a0ea47d9d","type":"md5","category":"Payload delivery","to_ids":true,"value":"d8e0597482281218846e38360bf6fa04","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6bdbc181-780b-5e08-b807-c1ebb894eb7c","type":"md5","category":"Payload delivery","to_ids":true,"value":"7d7e3acbeb93396c76ebdbb4785682ef","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"35bdd23f-9c5d-5971-a300-b0a1c23a9a9f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.earnshill.com","comment":"https://x.com/skocherhan/status/1952158714066047220","timestamp":"1754265881","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"ead10fc7-323b-537d-9e9f-6364b6e35403","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.245.0.121","comment":"https://x.com/skocherhan/status/1952158753240793190","timestamp":"1754265890","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"fe5b5f8e-cf72-597f-b0ce-8e3ef1ff8ee9","type":"url","category":"Network activity","to_ids":true,"value":"http://203.245.0.121","comment":"https://x.com/skocherhan/status/1952158753240793190","timestamp":"1754265890","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"41db4f14-2991-51eb-be7e-e0b0870b0fd8","type":"url","category":"Network activity","to_ids":true,"value":"http://Hireinfluence.it","comment":"https://x.com/Gabby_Recvry/status/1952169817231994913","timestamp":"1754268528","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"00e4f01b-db28-5fe9-953f-a4acb92a49d5","type":"domain","category":"Network activity","to_ids":true,"value":"Hireinfluence.it","comment":"https://x.com/Gabby_Recvry/status/1952169817231994913","timestamp":"1754268528","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"a5a2d385-83be-5c25-b93b-c54db97b2dfb","type":"domain","category":"Network activity","to_ids":true,"value":"ethfarm.live","comment":"https://x.com/Gabby_Recvry/status/1952169817231994913","timestamp":"1754268528","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"9f746803-0378-5526-a35e-f6a252ad6ae4","type":"url","category":"Network activity","to_ids":true,"value":"http://ethfarm.live","comment":"https://x.com/Gabby_Recvry/status/1952169817231994913","timestamp":"1754268528","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"0b4fd6e3-f161-58ce-b1cb-a43a099e6dae","type":"domain","category":"Network activity","to_ids":true,"value":"m.123huodong.com.cloud.cdntip.com.s2-web.dogedns.com","comment":"https://x.com/G60930953/status/1952175678243397889","timestamp":"1754269926","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"aa72c369-e0ec-5b25-a4ee-95f805a156fb","type":"url","category":"Network activity","to_ids":true,"value":"http://m.123huodong.com.cloud.cdntip.com.s2-web.dogedns.com","comment":"https://x.com/G60930953/status/1952175678243397889","timestamp":"1754269926","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"62c13c98-73bd-51d4-a5fc-3443f00e2605","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6573136f9b804ddc637f6be3a4536ed0013da7a5592b2f3a3cd37c0c71926365","comment":"https://x.com/G60930953/status/1952175678243397889","timestamp":"1754269926","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"a56858a6-8bbe-5ffd-ae78-caa91cb752ec","type":"url","category":"Network activity","to_ids":true,"value":"https://sarerererer.weebly.com","comment":"https://x.com/urldna_bot/status/1952187764314628313","timestamp":"1754272807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ee6e3a34-2f94-51b1-b6e0-86c666a27d1f","type":"domain","category":"Network activity","to_ids":true,"value":"sarerererer.weebly.com","comment":"https://x.com/urldna_bot/status/1952187764314628313","timestamp":"1754272807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7a410090-0c76-5d82-bf13-71da8996beb7","type":"url","category":"Network activity","to_ids":true,"value":"http://define-clusters-american-counters.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"f2923e1c-e1c9-5b1c-a2ed-642c669681e9","type":"url","category":"Network activity","to_ids":true,"value":"http://rush-poetry-stations-disciplinary.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"bdad9f0e-3007-52a2-a246-2350d1115e93","type":"domain","category":"Network activity","to_ids":true,"value":"rush-poetry-stations-disciplinary.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"ab853043-96c7-5cbf-acff-14b75fb6c559","type":"domain","category":"Network activity","to_ids":true,"value":"define-clusters-american-counters.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0c66391b-e5a6-508f-bca5-1c3c7d0b432f","type":"url","category":"Network activity","to_ids":true,"value":"http://architects-mins-emails-dimensions.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"bc3e12b2-6ba4-5dfa-9397-5f15962cfdb3","type":"domain","category":"Network activity","to_ids":true,"value":"architects-mins-emails-dimensions.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"4dea6ca3-a0c1-5e00-8b24-303083a8b2f8","type":"url","category":"Network activity","to_ids":true,"value":"http://inbox-mixer-mysql-gmbh.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"4bebb8ef-7bf9-5dfe-8d64-7a0bf9f21076","type":"domain","category":"Network activity","to_ids":true,"value":"inbox-mixer-mysql-gmbh.trycloudflare.com","comment":"https://x.com/momomopas/status/1952210385504719274","timestamp":"1754278200","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"4ba06df9-8230-512d-856a-91296988c706","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/sadfgsdfgdfg124","comment":"https://x.com/K_N1kolenko/status/1952239821210165479","timestamp":"1754285218","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"ba4a0dea-f852-5913-a480-3b09bd28465c","type":"domain","category":"Network activity","to_ids":true,"value":"fillettx.xin","comment":"https://x.com/K_N1kolenko/status/1952239821210165479","timestamp":"1754285218","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"553e8148-f55a-57b1-a332-d18bba00b908","type":"url","category":"Network activity","to_ids":true,"value":"http://fillettx.xin/otiq","comment":"https://x.com/K_N1kolenko/status/1952239821210165479","timestamp":"1754285218","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"dc801c4d-f808-5e67-8441-e6b2b8259c1a","type":"domain","category":"Network activity","to_ids":true,"value":"trip-plains.shjkahdjah.cn","comment":"https://x.com/catnap707/status/1952239947995554084","timestamp":"1754285249","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9c93446-71e3-5ff8-a0d8-40cc0c99c096","type":"url","category":"Network activity","to_ids":true,"value":"http://trip-plains.shjkahdjah.cn/customer/announcement/","comment":"https://x.com/catnap707/status/1952239947995554084","timestamp":"1754285249","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcc8b789-89b1-5f49-a032-620046325265","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.95.192","comment":"https://x.com/catnap707/status/1952239947995554084","timestamp":"1754285249","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1938c04f-a5b4-56a8-a20e-e0a5a11281f6","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.165.235","comment":"https://x.com/catnap707/status/1952241478954328575","timestamp":"1754285614","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"becd7566-0a2c-52d1-8f77-192de478e742","type":"domain","category":"Network activity","to_ids":true,"value":"icloud-putage.jnbkw.cn","comment":"https://x.com/catnap707/status/1952241478954328575","timestamp":"1754285614","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d34794ed-17cc-55ce-8ef6-26bf6a9b8441","type":"url","category":"Network activity","to_ids":true,"value":"http://icloud-putage.jnbkw.cn/gvIY2S/","comment":"https://x.com/catnap707/status/1952241478954328575","timestamp":"1754285614","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d4c7140-f6fe-5dd4-bff9-1fc5004d4176","type":"domain","category":"Network activity","to_ids":true,"value":"zimbrafixit.weebly.com","comment":"https://x.com/urldna_bot/status/1952248163680608599","timestamp":"1754287207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"596892eb-b339-5fb5-9f3e-8b93337d05e7","type":"url","category":"Network activity","to_ids":true,"value":"https://zimbrafixit.weebly.com","comment":"https://x.com/urldna_bot/status/1952248163680608599","timestamp":"1754287207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"55193e78-2660-563a-97c6-8aee9e903b50","type":"md5","category":"Payload delivery","to_ids":true,"value":"6221B0BF4D365454D40C546CF7133570","comment":"https://x.com/fbgwls245/status/1952248934086451468","timestamp":"1754287391","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"27439b3b-0bb4-575c-abb3-c345533f0b97","type":"url","category":"Network activity","to_ids":true,"value":"http://daily.alltop.asia/blog/article/del2.php","comment":"https://x.com/ShadowChasing1/status/1952257858948804856","timestamp":"1754289519","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"41155ccb-f9b3-5803-b4c1-79cb6a52e982","type":"url","category":"Network activity","to_ids":true,"value":"http://daily.alltop.asia/blog/article/d2.php","comment":"https://x.com/ShadowChasing1/status/1952257858948804856","timestamp":"1754289519","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"65c11879-2841-5154-b6e3-0993b4ae692b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d8d86b15e68889bf76b3cf8e335f43afe0287b9b20aeb18b136b90a516695989","comment":"https://x.com/ShadowChasing1/status/1952257858948804856","timestamp":"1754289519","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ba808a63-965c-56b5-8646-2ff202c45a1d","type":"domain","category":"Network activity","to_ids":true,"value":"daily.alltop.asia","comment":"https://x.com/ShadowChasing1/status/1952257858948804856","timestamp":"1754289519","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d4319c35-14ba-5371-8e90-f19e0170a659","type":"domain","category":"Network activity","to_ids":true,"value":"mail-baf-mil-bd-account-data-files-document.pages.dev","comment":"https://x.com/ShadowChasing1/status/1952258650325795077","timestamp":"1754289708","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0145831e-3962-5d52-812f-3a80fb8ab229","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-baf-mil-bd-account-data-files-document.pages.dev","comment":"https://x.com/ShadowChasing1/status/1952258650325795077","timestamp":"1754289708","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"442fa3c0-6462-5558-9ada-39d3e9674b9f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/ShadowChasing1/status/1952258687785181590","timestamp":"1754289717","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c99f3de5-9b4c-5752-8a46-2d70e5089ae7","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-modp-gov-pk-view.netlify.app/error.html","comment":"https://x.com/ShadowChasing1/status/1952258687785181590","timestamp":"1754289717","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cf0a8a88-8647-52eb-91d1-b164e2d5336c","type":"md5","category":"Payload delivery","to_ids":true,"value":"dc85c90e73911a57ff2e3862fb30e0b0","comment":"https://x.com/suyog41/status/1952260988826456261","timestamp":"1754290265","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"62f92694-1004-5143-a975-635441f1eb74","type":"md5","category":"Payload delivery","to_ids":true,"value":"75f51daff0696bb59f14a9b3f12d3578","comment":"https://x.com/suyog41/status/1952260988826456261","timestamp":"1754290265","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"609698c3-43cd-5eff-9cd6-fb6a724817b5","type":"url","category":"Network activity","to_ids":true,"value":"https://ww2-mi-connecto-app.somzenazazrakov.com","comment":"https://x.com/JAMESWT_WT/status/1952263030152048824","timestamp":"1754290752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a2318288-0d5a-5817-9019-91103a64edcb","type":"domain","category":"Network activity","to_ids":true,"value":"ww2-mi-connecto-app.somzenazazrakov.com","comment":"https://x.com/JAMESWT_WT/status/1952263030152048824","timestamp":"1754290752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3dc0cdf0-c5c7-5ecf-9e0f-0adfc27afec0","type":"md5","category":"Payload delivery","to_ids":true,"value":"eba2a543352ab5333a0aa369834278c8","comment":"https://x.com/suyog41/status/1952266082162778500","timestamp":"1754291479","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"7719040c-e3e5-5c63-8901-c89ddc295b98","type":"domain","category":"Network activity","to_ids":true,"value":"turbo-mines.pro","comment":"https://x.com/urldna_bot/status/1952278363629932592","timestamp":"1754294408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e61b3aa2-7bd2-5bad-8714-bd3e2ecab264","type":"url","category":"Network activity","to_ids":true,"value":"https://turbo-mines.pro/withdrawal","comment":"https://x.com/urldna_bot/status/1952278363629932592","timestamp":"1754294408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a43ac2ac-899c-5545-9216-f1fc022a594f","type":"url","category":"Network activity","to_ids":true,"value":"http://thomasc0ncrete.com","comment":"https://x.com/solidnames/status/1952284929875972190","timestamp":"1754295973","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3bc0f16d-eba0-5c80-a26f-0ac78bd8e451","type":"domain","category":"Network activity","to_ids":true,"value":"thomasc0ncrete.com","comment":"https://x.com/solidnames/status/1952284929875972190","timestamp":"1754295973","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c8f0fa2-2f29-5648-a3ad-22edf7868254","type":"domain","category":"Network activity","to_ids":true,"value":"liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23c4a4c4-d198-52ad-82a6-77d3056a5266","type":"url","category":"Network activity","to_ids":true,"value":"https://liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"807f20f4-b899-545c-be1b-d76c3fdfbc0e","type":"domain","category":"Network activity","to_ids":true,"value":"fananba.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbeaa4a0-c412-5657-8ebc-271c1740435f","type":"url","category":"Network activity","to_ids":true,"value":"https://fananba.cn","comment":"https://x.com/Metemcyber/status/1952286839156707801","timestamp":"1754296428","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7482a3cf-27d2-5b43-ac12-011784093978","type":"url","category":"Network activity","to_ids":true,"value":"https://hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80da2721-b46f-5a98-8e05-1fe0dfd2a316","type":"domain","category":"Network activity","to_ids":true,"value":"hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f82831a-fa0f-58c2-b54f-6cd42c9fb71c","type":"url","category":"Network activity","to_ids":true,"value":"https://klkpobh.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf17a554-68c7-5b9b-a8ee-75a22de68200","type":"domain","category":"Network activity","to_ids":true,"value":"klkpobh.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bebbc42-7682-5b93-871d-f003ae91b3ed","type":"domain","category":"Network activity","to_ids":true,"value":"erqhism.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51c3318d-6a29-5379-ad46-c91e7c23b434","type":"url","category":"Network activity","to_ids":true,"value":"https://knewlog.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6dc9129-c121-58da-b195-d94c2849ab15","type":"domain","category":"Network activity","to_ids":true,"value":"knewlog.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"380f7404-b22b-58be-b731-3184705766ac","type":"url","category":"Network activity","to_ids":true,"value":"https://erqhism.cn","comment":"https://x.com/Metemcyber/status/1952286989224690023","timestamp":"1754296464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8234f07f-fbab-5654-97b0-377f7bb2c586","type":"domain","category":"Network activity","to_ids":true,"value":"geagent.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68d071e5-0765-5e1e-845d-b2b95a0a97c3","type":"url","category":"Network activity","to_ids":true,"value":"https://geagent.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"255f07db-791a-5534-8565-75b50fc7455d","type":"domain","category":"Network activity","to_ids":true,"value":"laiyeling.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65eb5a49-30a9-5acf-8fbd-78e26ca578c8","type":"url","category":"Network activity","to_ids":true,"value":"https://laiyeling.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/Metemcyber/status/1952287117432013170","timestamp":"1754296495","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"802460e4-a94f-5999-b9de-c7e6d45086f5","type":"url","category":"Network activity","to_ids":true,"value":"https://zangpiao.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7ee4d2d-79d7-51eb-b16d-42489eb0bd9c","type":"domain","category":"Network activity","to_ids":true,"value":"zangpiao.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84104d47-2a21-5a0b-a012-b20fb169cc7d","type":"url","category":"Network activity","to_ids":true,"value":"https://lihuawang.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12887805-9149-55ca-a335-8b4198eaad8f","type":"domain","category":"Network activity","to_ids":true,"value":"fggbutf.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f76c2cb5-d6c7-53bd-9467-9a4d3ec1e22c","type":"domain","category":"Network activity","to_ids":true,"value":"lihuawang.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de71dda3-8936-5a00-b401-f1273446056d","type":"url","category":"Network activity","to_ids":true,"value":"https://fggbutf.cn","comment":"https://x.com/Metemcyber/status/1952287215804948586","timestamp":"1754296518","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e52bb16-081b-57c1-b7d9-1419899ab5a8","type":"url","category":"Network activity","to_ids":true,"value":"https://hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9085948-103e-53dd-9cf6-e2953aaf7357","type":"url","category":"Network activity","to_ids":true,"value":"https://hackwps.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3786faa-e05d-5e67-9580-dcb5d7abba56","type":"domain","category":"Network activity","to_ids":true,"value":"hackwps.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9bc2cb56-c538-524c-bbf6-e1ea4bc937f4","type":"domain","category":"Network activity","to_ids":true,"value":"hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1952287311930302582","timestamp":"1754296541","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddf48c2c-f8ad-5b58-b0c9-9e9f671df816","type":"url","category":"Network activity","to_ids":true,"value":"http://43.167.237.204","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a61029e9-c1fc-5690-8fb6-d96849690ace","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.237.204","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffb12536-9c5f-5325-930b-51289275d8d3","type":"domain","category":"Network activity","to_ids":true,"value":"fubolai.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba4906bd-c0bf-522b-a315-6f5f86d25619","type":"url","category":"Network activity","to_ids":true,"value":"https://fubolai.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d9f4315-f5ef-5df7-bd3f-b34da2ac2c95","type":"url","category":"Network activity","to_ids":true,"value":"https://duolalife.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0233d1e4-9eb3-5999-a83e-b5d50041af23","type":"domain","category":"Network activity","to_ids":true,"value":"duolalife.cn","comment":"https://x.com/Metemcyber/status/1952287411217822155","timestamp":"1754296565","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8375560d-e21c-53c7-bbec-a42c001e3601","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:51522","comment":"https://x.com/SarlackLab/status/1952293508099825901","timestamp":"1754298018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"939039ce-b803-5870-a515-15d9ba771e26","type":"domain","category":"Network activity","to_ids":true,"value":"30.ip.gl.ply.gg","comment":"https://x.com/SarlackLab/status/1952293508099825901","timestamp":"1754298018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"f2143eab-cef4-52f4-ae44-19d2e8077cf4","type":"url","category":"Network activity","to_ids":true,"value":"http://30.ip.gl.ply.gg","comment":"https://x.com/SarlackLab/status/1952293508099825901","timestamp":"1754298018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1952293508099825901","timestamp":"1754298018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"31ea4380-0e50-5b82-b75c-715142f1c4c8","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.182.4","comment":"https://x.com/Metemcyber/status/1952295285990015075","timestamp":"1754298442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"244c3404-7748-53cd-8b6d-8bc717763541","type":"url","category":"Network activity","to_ids":true,"value":"https://yodobashi-citizen.hqoxfc.cn/login_index/","comment":"https://x.com/Metemcyber/status/1952295285990015075","timestamp":"1754298442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e2df67c-eabb-5389-b857-9334c2ebb384","type":"domain","category":"Network activity","to_ids":true,"value":"yodobashi-citizen.hqoxfc.cn","comment":"https://x.com/Metemcyber/status/1952295285990015075","timestamp":"1754298442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a29e14f2-bf34-5ec2-9fd7-5b4dec68d966","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.59.175","comment":"https://x.com/Metemcyber/status/1952295285990015075","timestamp":"1754298442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1e62dda-c422-51c3-a2ba-1968acbe8f0e","type":"domain","category":"Network activity","to_ids":true,"value":"hsbc-uk.co","comment":"https://x.com/c9lab_soc/status/1952295480366649504","timestamp":"1754298489","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6d170a4a-c3b8-57e5-b878-510ee4a324f0","type":"url","category":"Network activity","to_ids":true,"value":"http://hsbc-uk.co","comment":"https://x.com/c9lab_soc/status/1952295480366649504","timestamp":"1754298489","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"db2a4ec9-cf1f-5ec2-b790-09822c6772ec","type":"domain","category":"Network activity","to_ids":true,"value":"jpmorgan.org.cn","comment":"https://x.com/c9lab_soc/status/1952295480366649504","timestamp":"1754298489","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b22bf6c9-918f-585b-b87f-90743008c2ca","type":"url","category":"Network activity","to_ids":true,"value":"http://jpmorgan.org.cn","comment":"https://x.com/c9lab_soc/status/1952295480366649504","timestamp":"1754298489","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aa7c9489-6fcd-555f-80b4-057e4b4ca798","type":"domain","category":"Network activity","to_ids":true,"value":"yodobashi-oculato.xteotw.cn","comment":"https://x.com/Metemcyber/status/1952295644447768999","timestamp":"1754298528","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8276c84c-050a-5f76-8ccb-6dd6fef2a588","type":"url","category":"Network activity","to_ids":true,"value":"https://yodobashi-oculato.xteotw.cn/login_index/","comment":"https://x.com/Metemcyber/status/1952295644447768999","timestamp":"1754298528","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3207e53a-01f6-5a75-a54d-f2d6997eb334","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.61.38","comment":"https://x.com/Metemcyber/status/1952295644447768999","timestamp":"1754298528","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"798e7749-08da-5c7a-ae5f-d51827c879b6","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.205.201","comment":"https://x.com/Metemcyber/status/1952295644447768999","timestamp":"1754298528","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8def3b3a-de7a-5e7b-b6cd-077e76249062","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.145.244","comment":"https://x.com/Metemcyber/status/1952295814229012860","timestamp":"1754298568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c62d741b-c8ce-547c-9945-11b7fabc01b4","type":"url","category":"Network activity","to_ids":true,"value":"https://yodobashi-numer.tostog.cn/login_index/","comment":"https://x.com/Metemcyber/status/1952295814229012860","timestamp":"1754298568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f605e51e-ea4d-5414-9336-25f910eb7231","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.87.205","comment":"https://x.com/Metemcyber/status/1952295814229012860","timestamp":"1754298568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bd98496-298a-54cc-9139-b6f1617e9872","type":"domain","category":"Network activity","to_ids":true,"value":"yodobashi-numer.tostog.cn","comment":"https://x.com/Metemcyber/status/1952295814229012860","timestamp":"1754298568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"780cb271-6041-5ccf-9199-1211e0fdc6e3","type":"domain","category":"Network activity","to_ids":true,"value":"ieeeeoreg.weebly.com","comment":"https://x.com/urldna_bot/status/1952308580557762966","timestamp":"1754301612","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c6a41ba6-bb42-55c0-9c0e-fa171ad58bf9","type":"url","category":"Network activity","to_ids":true,"value":"https://ieeeeoreg.weebly.com","comment":"https://x.com/urldna_bot/status/1952308580557762966","timestamp":"1754301612","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fa9b4c61-526a-5e51-812d-2435590d7341","type":"domain","category":"Network activity","to_ids":true,"value":"Veza.lt","comment":"https://x.com/FalconFeedsio/status/1952309551082205278","timestamp":"1754301843","distribution":"5"},{"uuid":"f2c1ba36-3f35-5b2f-ab01-bff9f979d8d0","type":"url","category":"Network activity","to_ids":true,"value":"http://Veza.lt","comment":"https://x.com/FalconFeedsio/status/1952309551082205278","timestamp":"1754301843","distribution":"5"},{"uuid":"9ed528cb-4145-56fd-83db-2255c9d3632f","type":"domain","category":"Network activity","to_ids":true,"value":"univ-lorraine0.weebly.com","comment":"https://x.com/urldna_bot/status/1952338775306031445","timestamp":"1754308811","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ae3f160e-76b9-5b2d-a6cf-8087b0bc1242","type":"url","category":"Network activity","to_ids":true,"value":"https://univ-lorraine0.weebly.com","comment":"https://x.com/urldna_bot/status/1952338775306031445","timestamp":"1754308811","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"17bf28bf-bfa1-5c99-a089-7f60c20cac5e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6cd349eda0fa6c8b274a0920852c68f8b727afea1fdbc69ad183cef05d9cf141","comment":"https://x.com/cyb3rops/status/1952343906345001106","timestamp":"1754310034","distribution":"5"},{"uuid":"4ddbab67-47c4-5eb2-ad95-4c3bf16f1587","type":"domain","category":"Network activity","to_ids":true,"value":"mypage-ocn.3d3udjo.top","comment":"https://x.com/masaomi346/status/1952346282254827868","timestamp":"1754310601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f628bc5-de60-5c6d-81f1-77f52fa8e771","type":"url","category":"Network activity","to_ids":true,"value":"https://mypage-ocn.3d3udjo.top","comment":"https://x.com/masaomi346/status/1952346282254827868","timestamp":"1754310601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b577f21-4c84-5d28-b04b-c1fb6345b9da","type":"domain","category":"Network activity","to_ids":true,"value":"mypage-ocn.enyny5.top","comment":"https://x.com/masaomi346/status/1952346282254827868","timestamp":"1754310601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31966354-3ec4-5d92-a7c1-cf0dfd904ed0","type":"url","category":"Network activity","to_ids":true,"value":"https://mypage-ocn.enyny5.top","comment":"https://x.com/masaomi346/status/1952346282254827868","timestamp":"1754310601","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c81ce38-c3b3-595e-8ad7-758f3e852cbc","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8b3a13340d10f0370404eb5618a5ca2137a5bc9a0de7bd4a7fe45bf33f6b87ac","comment":"https://x.com/osint_barbie/status/1952362162200228069","timestamp":"1754314387","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e620263e-769c-5703-99ea-390af2abd897","type":"domain","category":"Network activity","to_ids":true,"value":"dropcheats.net","comment":"https://x.com/ShadowOpCode/status/1952368875800273363","timestamp":"1754315987","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"71e935c3-854c-5adc-a81b-811fe5f38347","type":"url","category":"Network activity","to_ids":true,"value":"https://dropcheats.net","comment":"https://x.com/ShadowOpCode/status/1952368875800273363","timestamp":"1754315987","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ea2c6c44-0ed6-5815-b41c-c68409065c21","type":"url","category":"Network activity","to_ids":true,"value":"https://www.mediafire.com/file/p19s2bay3c2jzm3/DropCheats.zip/file","comment":"https://x.com/ShadowOpCode/status/1952368875800273363","timestamp":"1754315987","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0786e36e-3920-5fd3-9fa0-fa3be0910da4","type":"domain","category":"Network activity","to_ids":true,"value":"mocadia.com","comment":"https://x.com/ShadowOpCode/status/1952368875800273363","timestamp":"1754315987","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5a9c3af6-e6bc-5e67-8cfe-0c318d48fbb2","type":"url","category":"Network activity","to_ids":true,"value":"https://mocadia.com","comment":"https://x.com/ShadowOpCode/status/1952368875800273363","timestamp":"1754315987","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d74dcb88-a62d-5d11-8d17-771aa9a544bc","type":"domain","category":"Network activity","to_ids":true,"value":"netflix-rouge-pi.vercel.app","comment":"https://x.com/urldna_bot/status/1952368974873678295","timestamp":"1754316011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"68880f01-3f22-5f63-b939-4357bd86e943","type":"url","category":"Network activity","to_ids":true,"value":"https://www.netflix-rouge-pi.vercel.app","comment":"https://x.com/urldna_bot/status/1952368974873678295","timestamp":"1754316011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d75fe981-5c8b-5a3c-8e38-ea305a4047c6","type":"md5","category":"Payload delivery","to_ids":true,"value":"6ceb71f988e0a34ee85ed12d145d3582","comment":"https://x.com/suyog41/status/1952371704124068164","timestamp":"1754316662","distribution":"5"},{"uuid":"7d5a5c6c-e7a7-5c28-a423-7d1dc6116699","type":"md5","category":"Payload delivery","to_ids":true,"value":"51c56775967d9811753cd3864d268e77","comment":"https://x.com/suyog41/status/1952371704124068164","timestamp":"1754316662","distribution":"5"},{"uuid":"65efbe9c-741a-5d8c-ba5a-7f506fcd067a","type":"md5","category":"Payload delivery","to_ids":true,"value":"aa183a51c8a3a0aa512aedae532bcb6e","comment":"https://x.com/suyog41/status/1952371704124068164","timestamp":"1754316662","distribution":"5"},{"uuid":"c94ec78b-5e1d-59c4-88ba-9dc9fb3c5745","type":"md5","category":"Payload delivery","to_ids":true,"value":"7667f74f2125d4d7164270f282c29a09","comment":"https://x.com/suyog41/status/1952371704124068164","timestamp":"1754316662","distribution":"5"},{"uuid":"ad1db740-a1c1-5b4f-8d5d-c3f6dc696019","type":"md5","category":"Payload delivery","to_ids":true,"value":"2f87edf24f991ac02a414f2b5ee12d38","comment":"https://x.com/suyog41/status/1952371704124068164","timestamp":"1754316662","distribution":"5"},{"uuid":"89840742-e6dd-5df2-befc-f2197f78fa80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.131.144","comment":"https://x.com/SarlackLab/status/1952384102771921222","timestamp":"1754319618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"f8b28c81-7378-5a17-a925-08cfc3d046a1","type":"url","category":"Network activity","to_ids":true,"value":"http://uzamaki.duckdns.org","comment":"https://x.com/SarlackLab/status/1952384102771921222","timestamp":"1754319618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"bdc06d16-3a96-5070-a9df-e416acbd3d8c","type":"domain","category":"Network activity","to_ids":true,"value":"uzamaki.duckdns.org","comment":"https://x.com/SarlackLab/status/1952384102771921222","timestamp":"1754319618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"539e3d14-f461-5613-b23c-d861207f9519","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.131.144:5353","comment":"https://x.com/SarlackLab/status/1952384102771921222","timestamp":"1754319618","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"960150ea-76ad-5995-abaf-7f271049c273","type":"domain","category":"Network activity","to_ids":true,"value":"mufg-eithera.maicoffee.cn","comment":"https://x.com/harugasumi/status/1952397556438487309","timestamp":"1754322825","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13908e51-27e7-50ac-b131-78393aee08b7","type":"url","category":"Network activity","to_ids":true,"value":"https://mufg-eithera.maicoffee.cn?token=RW03120mckiw00l","comment":"https://x.com/harugasumi/status/1952397556438487309","timestamp":"1754322825","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"279201fc-0872-5510-abe3-d370532ff093","type":"domain","category":"Network activity","to_ids":true,"value":"r-ckerstattung.vercel.app","comment":"https://x.com/urldna_bot/status/1952399166748889450","timestamp":"1754323209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e24731f3-0ad2-573a-8eca-6b88d7f8268c","type":"url","category":"Network activity","to_ids":true,"value":"https://r-ckerstattung.vercel.app","comment":"https://x.com/urldna_bot/status/1952399166748889450","timestamp":"1754323209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eb3bb865-4bb9-5007-9d75-dc4739793c04","type":"domain","category":"Network activity","to_ids":true,"value":"xpgjkkf03.com","comment":"https://x.com/harugasumi/status/1952399761983861245","timestamp":"1754323351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9076587a-d4fb-5673-8b5f-b433b70f7b8a","type":"url","category":"Network activity","to_ids":true,"value":"https://xpgjkkf03.com","comment":"https://x.com/harugasumi/status/1952399761983861245","timestamp":"1754323351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cef00c5-c1b9-5caa-bf20-a5d248cf4b04","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/jaybobo1/Supplier","comment":"https://x.com/James_inthe_box/status/1952401051669381401","timestamp":"1754323659","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8ad535e2-1f6b-595a-a875-01cb394afbda","type":"domain","category":"Network activity","to_ids":true,"value":"mail.dndmelectrical.co.za","comment":"https://x.com/James_inthe_box/status/1952401051669381401","timestamp":"1754323659","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0da08c81-daea-5dbc-91f2-cba56e13244b","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.dndmelectrical.co.za","comment":"https://x.com/James_inthe_box/status/1952401051669381401","timestamp":"1754323659","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bd0558dd-2232-5658-af32-0bf785b9b8e4","type":"url","category":"Network activity","to_ids":true,"value":"http://carabinero.cl","comment":"https://x.com/1ZRR4H/status/1952427944741126494","timestamp":"1754330071","distribution":"5"},{"uuid":"97c2dbcf-f98d-5046-9c99-4296d96cc2c0","type":"domain","category":"Network activity","to_ids":true,"value":"carabinero.cl","comment":"https://x.com/1ZRR4H/status/1952427944741126494","timestamp":"1754330071","distribution":"5"},{"uuid":"9cc71fa7-61a2-541a-a4d2-6d0a21d14b55","type":"url","category":"Network activity","to_ids":true,"value":"http://soportetecnicobanconestado.cl","comment":"https://x.com/1ZRR4H/status/1952427944741126494","timestamp":"1754330071","distribution":"5"},{"uuid":"7688e9c2-486d-5ad1-af0d-7a02bfa4e24c","type":"domain","category":"Network activity","to_ids":true,"value":"soportetecnicobanconestado.cl","comment":"https://x.com/1ZRR4H/status/1952427944741126494","timestamp":"1754330071","distribution":"5"},{"uuid":"2e0a6214-3686-522e-9014-2fdda2e87156","type":"domain","category":"Network activity","to_ids":true,"value":"gytujfshmtyxkif.weebly.com","comment":"https://x.com/urldna_bot/status/1952429352957739160","timestamp":"1754330406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"640f0c2a-8ef4-57f6-aca6-c952757cbe30","type":"url","category":"Network activity","to_ids":true,"value":"https://gytujfshmtyxkif.weebly.com","comment":"https://x.com/urldna_bot/status/1952429352957739160","timestamp":"1754330406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cec5725d-09a3-5557-b7e7-e2e9def8bdae","type":"domain","category":"Network activity","to_ids":true,"value":"blackhillscbnklogln.weebly.com","comment":"https://x.com/urldna_bot/status/1952459552814690629","timestamp":"1754337606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b98a64f3-ac23-5471-9588-9858ce01ff9f","type":"url","category":"Network activity","to_ids":true,"value":"https://blackhillscbnklogln.weebly.com","comment":"https://x.com/urldna_bot/status/1952459552814690629","timestamp":"1754337606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e7555736-fcc5-5c36-9846-397fdd8f22a9","type":"url","category":"Network activity","to_ids":true,"value":"http://85.98.101.193","comment":"https://x.com/threatquery/status/1952474639055171979","timestamp":"1754341203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2cf0c68d-c1b3-5bbd-96f8-e7c087732ba4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.98.101.193","comment":"https://x.com/threatquery/status/1952474639055171979","timestamp":"1754341203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d8726028-3861-53ae-8184-dcba5c98b287","type":"url","category":"Network activity","to_ids":true,"value":"http://35.161.154.247","comment":"https://x.com/threatquery/status/1952474641034829929","timestamp":"1754341204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"7fbf1353-acc2-5392-b050-8d8fc7a9f3fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.161.154.247","comment":"https://x.com/threatquery/status/1952474641034829929","timestamp":"1754341204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"23c464f6-15da-599a-a06b-0b9ebac33466","type":"url","category":"Network activity","to_ids":true,"value":"http://3.33.183.94","comment":"https://x.com/threatquery/status/1952474642783879324","timestamp":"1754341204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"0a56b1d1-5448-5c37-a276-9d725988df04","type":"md5","category":"Payload delivery","to_ids":true,"value":"be71ca996011e34fea985a0cf674657e","comment":"https://x.com/skocherhan/status/1952483131732422726","timestamp":"1754343228","distribution":"5"},{"uuid":"cba5ec32-f66f-5ed2-a545-c0f104138f6d","type":"md5","category":"Payload delivery","to_ids":true,"value":"755dd7144d75c8fc7447cf1343ed5258","comment":"https://x.com/skocherhan/status/1952483131732422726","timestamp":"1754343228","distribution":"5"},{"uuid":"a42febc7-d32f-5045-ae71-048cd9095a71","type":"sha256","category":"Payload delivery","to_ids":true,"value":"292903ee4c41e1bec8299f2f8dfaa831aa94a5dc93aab2685f59f4f128950fc5","comment":"https://x.com/skocherhan/status/1952483131732422726","timestamp":"1754343228","distribution":"5"},{"uuid":"3241eccd-0b45-5936-ac75-3e0f10133748","type":"domain","category":"Network activity","to_ids":true,"value":"hcmct.edu.vn","comment":"https://x.com/skocherhan/status/1952484894044836054","timestamp":"1754343648","distribution":"5"},{"uuid":"e7479ff6-af5c-5583-aa35-fdf756e76406","type":"url","category":"Network activity","to_ids":true,"value":"http://hcmct.edu.vn","comment":"https://x.com/skocherhan/status/1952484894044836054","timestamp":"1754343648","distribution":"5"},{"uuid":"e37c12b2-f474-5fdd-b714-206ea78b6eab","type":"md5","category":"Payload delivery","to_ids":true,"value":"8d776e70955435e0d43b51c922adfeae","comment":"https://x.com/skocherhan/status/1952485871279853989","timestamp":"1754343881","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"c196909c-2b9b-53f0-89be-922b45444a5f","type":"domain","category":"Network activity","to_ids":true,"value":"Trojan.Dropper.Agent.XYZ","comment":"https://x.com/skocherhan/status/1952486006365757530","timestamp":"1754343914","distribution":"5"},{"uuid":"b5f06657-b819-594e-ade3-e9f1904b0fc2","type":"url","category":"Network activity","to_ids":true,"value":"http://Trojan.Dropper.Agent.XYZ","comment":"https://x.com/skocherhan/status/1952486006365757530","timestamp":"1754343914","distribution":"5"},{"uuid":"d13439a9-825c-5801-9e58-6d2bcaff894f","type":"url","category":"Network activity","to_ids":true,"value":"http://96.9.124.209:8080/getcmd","comment":"https://x.com/skocherhan/status/1952486268518240349","timestamp":"1754343976","distribution":"5"},{"uuid":"eee06627-a142-5345-b60c-f3a9750f4cd6","type":"url","category":"Network activity","to_ids":true,"value":"http://64.7.198.123/win.ps1","comment":"https://x.com/skocherhan/status/1952486268518240349","timestamp":"1754343976","distribution":"5"},{"uuid":"1cf72490-d503-595c-9a51-6ef77d50e6f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.7.198.123","comment":"https://x.com/skocherhan/status/1952486268518240349","timestamp":"1754343976","distribution":"5"},{"uuid":"2d84063e-00c2-5dac-8869-dbd04b09abab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"96.9.124.209","comment":"https://x.com/skocherhan/status/1952486268518240349","timestamp":"1754343976","distribution":"5"},{"uuid":"e842a079-48ee-5be5-848d-9bbc41bc3998","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.103.204","comment":"https://x.com/1ZRR4H/status/1952495584730071482","timestamp":"1754346197","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"79bd83e6-4a80-5faa-ae2c-be26e403dca0","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.103.204/optimization/ExplOpt.exe","comment":"https://x.com/1ZRR4H/status/1952495584730071482","timestamp":"1754346197","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"846c31ae-ae0a-53b6-adef-79b1dd38e162","type":"sha256","category":"Payload delivery","to_ids":true,"value":"aa23f21bae3d3bbe722bcd03aaf8c440bede9a5ec01d3840f87567ea41925c98","comment":"https://x.com/1ZRR4H/status/1952495584730071482","timestamp":"1754346197","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"60b259d3-8e51-58b5-bc44-91ca04d037cb","type":"domain","category":"Network activity","to_ids":true,"value":"mypage-ocn.1x8zry.top","comment":"https://x.com/masaomi346/status/1952503157931770254","timestamp":"1754348003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00b590a8-0ab5-5eeb-8d03-be9cbbe9a362","type":"url","category":"Network activity","to_ids":true,"value":"https://mypage-ocn.1x8zry.top","comment":"https://x.com/masaomi346/status/1952503157931770254","timestamp":"1754348003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e423e67b-5d33-572e-abc1-579b7e74dce0","type":"domain","category":"Network activity","to_ids":true,"value":"mypage-ocn.jd8zkl.top","comment":"https://x.com/masaomi346/status/1952503157931770254","timestamp":"1754348003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"586556b7-4c10-5df5-b9f5-426a96363404","type":"url","category":"Network activity","to_ids":true,"value":"https://mypage-ocn.jd8zkl.top","comment":"https://x.com/masaomi346/status/1952503157931770254","timestamp":"1754348003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0994126d-b4d3-5d0f-8bfc-1df597869ddd","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.26:26089","comment":"https://x.com/SarlackLab/status/1952520002541637801","timestamp":"1754352019","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"66081af1-e197-52bf-b119-ffa55167ae72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.26","comment":"https://x.com/SarlackLab/status/1952520002541637801","timestamp":"1754352019","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"771e8bed-783e-5708-a721-81a742accb44","type":"domain","category":"Network activity","to_ids":true,"value":"updatedemployeemanual.weebly.com","comment":"https://x.com/urldna_bot/status/1952550147373535398","timestamp":"1754359206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fd79673d-0a9f-5e49-b2db-91f3b245b470","type":"url","category":"Network activity","to_ids":true,"value":"https://updatedemployeemanual.weebly.com","comment":"https://x.com/urldna_bot/status/1952550147373535398","timestamp":"1754359206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e4ccb8de-0b30-5a6f-8cd8-70be6eac481a","type":"domain","category":"Network activity","to_ids":true,"value":"indiandefenceforce.link","comment":"https://x.com/TIntel2255/status/1952603397536010609","timestamp":"1754371902","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e9da0987-037f-594d-b283-8f849365b8f8","type":"url","category":"Network activity","to_ids":true,"value":"http://indiandefenceforce.link","comment":"https://x.com/TIntel2255/status/1952603397536010609","timestamp":"1754371902","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f009223-d8c8-599d-8d10-4f14d7a6256f","type":"url","category":"Network activity","to_ids":true,"value":"https://mariner.okta-ssl.com","comment":"https://x.com/urldna_bot/status/1952610547322482776","timestamp":"1754373606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3b9405e8-2200-5b2c-af59-9dc5882afa05","type":"domain","category":"Network activity","to_ids":true,"value":"mariner.okta-ssl.com","comment":"https://x.com/urldna_bot/status/1952610547322482776","timestamp":"1754373606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e7555736-fcc5-5c36-9846-397fdd8f22a9","type":"url","category":"Network activity","to_ids":true,"value":"http://85.98.101.193","comment":"https://x.com/onuroktay/status/1952620317152579946","timestamp":"1754375936","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"2cf0c68d-c1b3-5bbd-96f8-e7c087732ba4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.98.101.193","comment":"https://x.com/onuroktay/status/1952620317152579946","timestamp":"1754375936","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"969ff5bc-1a5b-560a-b889-6c7646b726b3","type":"domain","category":"Network activity","to_ids":true,"value":"11sq1.weebly.com","comment":"https://x.com/urldna_bot/status/1952640746432958956","timestamp":"1754380806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b9198c4d-e92e-577f-9944-4b6db3fac9f0","type":"url","category":"Network activity","to_ids":true,"value":"https://11sq1.weebly.com","comment":"https://x.com/urldna_bot/status/1952640746432958956","timestamp":"1754380806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"44de64d6-961e-5cfd-b24b-33c9b23489b2","type":"domain","category":"Network activity","to_ids":true,"value":"shodan.world","comment":"https://x.com/c9lab_soc/status/1952647524243882293","timestamp":"1754382422","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"857833b7-d9d7-58d9-87d1-6df34fb8538b","type":"url","category":"Network activity","to_ids":true,"value":"http://google-business-profil.com","comment":"https://x.com/c9lab_soc/status/1952647524243882293","timestamp":"1754382422","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9bf7b677-8454-5c23-8410-ac8dbf67a1b4","type":"domain","category":"Network activity","to_ids":true,"value":"google-business-profil.com","comment":"https://x.com/c9lab_soc/status/1952647524243882293","timestamp":"1754382422","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"79e0f0aa-b6fb-5934-a0a6-dc456fc31545","type":"url","category":"Network activity","to_ids":true,"value":"http://shodan.world","comment":"https://x.com/c9lab_soc/status/1952647524243882293","timestamp":"1754382422","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"623df30c-9f95-5399-853b-3006e52f8f02","type":"url","category":"Network activity","to_ids":true,"value":"https://www.sonicwall.com/blog/threat-actors-modify-and-re-create-commercial-software-to-steal-users-information","comment":"https://x.com/skocherhan/status/1952657484134367518","timestamp":"1754384797","distribution":"5"},{"uuid":"5a969f82-dfd7-5c72-8a36-d1017f9af886","type":"domain","category":"Network activity","to_ids":true,"value":"sonicwall.com","comment":"https://x.com/skocherhan/status/1952657484134367518","timestamp":"1754384797","distribution":"5"},{"uuid":"e137a356-5b8c-5220-bc40-71ca209764fe","type":"domain","category":"Network activity","to_ids":true,"value":"rollededpack.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"8debb7cc-ec22-5614-b2ee-a81401b94537","type":"url","category":"Network activity","to_ids":true,"value":"http://chartsbezorgd.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"65141a16-9c90-5ef0-828f-4a823cbece98","type":"url","category":"Network activity","to_ids":true,"value":"http://visionglobale.site","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"600d80c8-8952-50d0-8870-02cbd264427b","type":"domain","category":"Network activity","to_ids":true,"value":"visionglobale.site","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"ad96045a-8b98-5b32-bb61-e87a3eefc7cf","type":"url","category":"Network activity","to_ids":true,"value":"http://playserzapp.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"91042742-bca1-5f6a-b7cf-efe894775a5b","type":"domain","category":"Network activity","to_ids":true,"value":"chartsbezorgd.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"1382f42f-c302-51d5-8ea8-0f3769059ff6","type":"url","category":"Network activity","to_ids":true,"value":"http://appzserv.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"f4ca03dd-4eb8-5929-9209-1d42a1106d7f","type":"domain","category":"Network activity","to_ids":true,"value":"appzserv.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"1884653a-4d7c-5b0c-8c81-256868179eb9","type":"url","category":"Network activity","to_ids":true,"value":"http://rollededpack.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"e5a5f4cf-7740-50ce-a991-59cbf984d53a","type":"domain","category":"Network activity","to_ids":true,"value":"playserzapp.info","comment":"https://x.com/ShadowChasing1/status/1952658618349920607","timestamp":"1754385067","distribution":"5"},{"uuid":"00757694-3547-53ca-ad41-3d51857709ca","type":"sha256","category":"Payload delivery","to_ids":true,"value":"469939b626e8d9d383b8dd3bd98103ca36f5dae31be8e4e245da126731bf73aa","comment":"https://x.com/ShadowChasing1/status/1952658657801564225","timestamp":"1754385077","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fd438870-d377-53d9-bcd0-61bc57f6c737","type":"domain","category":"Network activity","to_ids":true,"value":"collinscu.weebly.com","comment":"https://x.com/urldna_bot/status/1952670946906492957","timestamp":"1754388007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5adadffa-e5ef-5f4e-85f3-0e2fc45e7457","type":"url","category":"Network activity","to_ids":true,"value":"https://collinscu.weebly.com","comment":"https://x.com/urldna_bot/status/1952670946906492957","timestamp":"1754388007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e35d4a5a-1311-577c-8ad2-2047e7cf108f","type":"domain","category":"Network activity","to_ids":true,"value":"sds.jpbdselangor.gov.my","comment":"https://x.com/skocherhan/status/1952671280349462802","timestamp":"1754388086","distribution":"5"},{"uuid":"f08f2ae2-f76e-57c6-835d-4ef011869ea6","type":"url","category":"Network activity","to_ids":true,"value":"https://sds.jpbdselangor.gov.my/pwn.htm","comment":"https://x.com/skocherhan/status/1952671280349462802","timestamp":"1754388086","distribution":"5"},{"uuid":"bd0558dd-2232-5658-af32-0bf785b9b8e4","type":"url","category":"Network activity","to_ids":true,"value":"http://carabinero.cl","comment":"https://x.com/skocherhan/status/1952671951236833529","timestamp":"1754388246","distribution":"5"},{"uuid":"97c2dbcf-f98d-5046-9c99-4296d96cc2c0","type":"domain","category":"Network activity","to_ids":true,"value":"carabinero.cl","comment":"https://x.com/skocherhan/status/1952671951236833529","timestamp":"1754388246","distribution":"5"},{"uuid":"7688e9c2-486d-5ad1-af0d-7a02bfa4e24c","type":"domain","category":"Network activity","to_ids":true,"value":"soportetecnicobanconestado.cl","comment":"https://x.com/skocherhan/status/1952671951236833529","timestamp":"1754388246","distribution":"5"},{"uuid":"9cc71fa7-61a2-541a-a4d2-6d0a21d14b55","type":"url","category":"Network activity","to_ids":true,"value":"http://soportetecnicobanconestado.cl","comment":"https://x.com/skocherhan/status/1952671951236833529","timestamp":"1754388246","distribution":"5"},{"uuid":"7052650c-4228-55c8-9de3-be5a4d4bd766","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud.coremailcloud.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"58fd00e3-b6ae-5d65-9585-a5ffc0b199a4","type":"domain","category":"Network activity","to_ids":true,"value":"cloud.coremailcloud.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"5795e265-8c54-5284-acd6-0df0e75409eb","type":"url","category":"Network activity","to_ids":true,"value":"http://vistavue.shop","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"0285562c-3dd4-5366-b2c1-67f562befa84","type":"domain","category":"Network activity","to_ids":true,"value":"vistavue.shop","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"cc1973cc-e191-5a40-bc70-e8ed80770c8b","type":"domain","category":"Network activity","to_ids":true,"value":"oilplus1td.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"429c3a2b-1186-51d4-9676-9c22b258f19a","type":"url","category":"Network activity","to_ids":true,"value":"http://oilplus1td.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"900466a8-3376-5396-bfe6-f4a9e9a7535a","type":"domain","category":"Network activity","to_ids":true,"value":"mailcloucl.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"01ca2f8a-a5a9-5d48-a4db-d18a8d7c0ef3","type":"url","category":"Network activity","to_ids":true,"value":"http://demsflygerxamy.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"7b4195f5-c867-55ee-b164-a51ca5c72f06","type":"domain","category":"Network activity","to_ids":true,"value":"demsflygerxamy.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"0aa8bdb1-aab7-52a0-beeb-32edf21fef81","type":"url","category":"Network activity","to_ids":true,"value":"http://coremailcloud.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"6d5323e3-2da3-5484-9a54-d99f3c1f098d","type":"domain","category":"Network activity","to_ids":true,"value":"coremailcloud.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"8336ccaa-a819-5566-b220-7b286c48d81e","type":"url","category":"Network activity","to_ids":true,"value":"http://mailcloucl.com","comment":"https://x.com/skocherhan/status/1952677794791506298","timestamp":"1754389639","distribution":"5"},{"uuid":"0a637190-9777-56d4-8304-23c503d19d65","type":"md5","category":"Payload delivery","to_ids":true,"value":"93875e6dcc6e306c6910c810dd3e9808","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"daf40ec5-d68a-56d7-b1c6-bde44a18a995","type":"md5","category":"Payload delivery","to_ids":true,"value":"7dd7a25a6ae7caeb4f7ad9a89d96f7ec","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"ac3c17a8-2656-513a-8460-774f37d2fa31","type":"md5","category":"Payload delivery","to_ids":true,"value":"51ac5f4bcffd208899ebe778c1725579","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"f0f48fc1-cc86-574a-9d4d-e0996413d5d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.247.176.126","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"420162dd-5f95-5413-a63f-da8a9bfc076d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.102.152.50","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"ea1f39c3-55c2-5160-bd82-631a1b2fd174","type":"url","category":"Network activity","to_ids":true,"value":"http://swachbharat.xyz","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"e7342860-70f0-5ad4-8629-468776b58bec","type":"domain","category":"Network activity","to_ids":true,"value":"swachbharat.xyz","comment":"https://x.com/PrakkiSathwik/status/1952682759555776979","timestamp":"1754390823","distribution":"5","Tag":[{"name":"C2"},{"name":"phishing"},{"name":"APT"}]},{"uuid":"483e951c-e944-5f4b-b6c0-754bff327030","type":"domain","category":"Network activity","to_ids":true,"value":"dhhhllll.weebly.com","comment":"https://x.com/urldna_bot/status/1952701151427649952","timestamp":"1754395208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d14a6122-8243-509c-8e82-173d42a31609","type":"url","category":"Network activity","to_ids":true,"value":"https://dhhhllll.weebly.com","comment":"https://x.com/urldna_bot/status/1952701151427649952","timestamp":"1754395208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4a8fc8ed-caab-5e79-8fe1-e4ffc667b137","type":"domain","category":"Network activity","to_ids":true,"value":"ccltdcn.org","comment":"https://x.com/suyog41/status/1952709606297227414","timestamp":"1754397224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e151bf32-2580-586d-bd35-9d2bc4fb9be9","type":"url","category":"Network activity","to_ids":true,"value":"http://ccltdcn.org","comment":"https://x.com/suyog41/status/1952709606297227414","timestamp":"1754397224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c0bfaf6e-73d8-568a-acc4-4afd58a3a1f3","type":"md5","category":"Payload delivery","to_ids":true,"value":"3f5bbba1d885e2a120dc93a4d8a7b59d","comment":"https://x.com/suyog41/status/1952709606297227414","timestamp":"1754397224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"988c4f87-d8dc-5661-ac07-f38afb5d7896","type":"md5","category":"Payload delivery","to_ids":true,"value":"cf5d60617ad12c3e480c9d69326a53eb","comment":"https://x.com/suyog41/status/1952709606297227414","timestamp":"1754397224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"3dc0cdf0-c5c7-5ecf-9e0f-0adfc27afec0","type":"md5","category":"Payload delivery","to_ids":true,"value":"eba2a543352ab5333a0aa369834278c8","comment":"https://x.com/skocherhan/status/1952710832623624388","timestamp":"1754397516","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"441f4fc1-424b-5303-a32b-8c90c93e5978","type":"url","category":"Network activity","to_ids":true,"value":"https://salat.cn/login/","comment":"https://x.com/abuse_ch/status/1952720761472373029","timestamp":"1754399883","distribution":"5"},{"uuid":"c56de68f-ed4f-5b1f-82e1-d2dc2df1bea6","type":"url","category":"Network activity","to_ids":true,"value":"https://artpeace.gallery/riattivazione-del/contoInG/client/login.php","comment":"https://x.com/JAMESWT_WT/status/1952725589074272698","timestamp":"1754401034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53aac260-261a-5018-8ce5-e40f4ca28d8a","type":"domain","category":"Network activity","to_ids":true,"value":"artpeace.gallery","comment":"https://x.com/JAMESWT_WT/status/1952725589074272698","timestamp":"1754401034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2712040b-ecba-5032-9f9c-bbdd195cbd7e","type":"url","category":"Network activity","to_ids":true,"value":"https://desoracks.com.mx/camel","comment":"https://x.com/JAMESWT_WT/status/1952725589074272698","timestamp":"1754401034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a88c5ae9-1bf9-5fd3-8fdd-08d0040c316f","type":"domain","category":"Network activity","to_ids":true,"value":"desoracks.com.mx","comment":"https://x.com/JAMESWT_WT/status/1952725589074272698","timestamp":"1754401034","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e71339e-7657-5061-b9ed-a387a6ca7245","type":"url","category":"Network activity","to_ids":true,"value":"http://185.102.115.108:4000/photo/74cbea88/get-photo?f=1&token=511bcf75-fa0b-4b0c-a6ee-191616855b0f","comment":"https://x.com/JAMESWT_WT/status/1952729228975153388","timestamp":"1754401902","distribution":"5"},{"uuid":"f6cd178d-9e79-540e-85c5-86b7b13309a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.102.115.108","comment":"https://x.com/JAMESWT_WT/status/1952729228975153388","timestamp":"1754401902","distribution":"5"},{"uuid":"a23f8e2c-fe97-522a-8e4c-1d92440d81a7","type":"domain","category":"Network activity","to_ids":true,"value":"online-taxies.web.app","comment":"https://x.com/urldna_bot/status/1952731359979454700","timestamp":"1754402410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"24b1c122-79ba-5726-ac3f-aa2774301ef3","type":"url","category":"Network activity","to_ids":true,"value":"https://online-taxies.web.app","comment":"https://x.com/urldna_bot/status/1952731359979454700","timestamp":"1754402410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"289a0c66-ecb1-5164-a592-fc8075f1f494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.206.158.190","comment":"https://x.com/1ZRR4H/status/1952753043088252945","timestamp":"1754407580","distribution":"5","Tag":[{"name":"Remcos"},{"name":"opendir"},{"name":"Dcrat"}]},{"uuid":"56707928-a8c6-5a3e-84e0-0dcfd3d6a5aa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"dd36ccb034444d9c94afba45ff1f14b3852c12390820be810dc3bbe46abcf0be","comment":"https://x.com/1ZRR4H/status/1952753043088252945","timestamp":"1754407580","distribution":"5","Tag":[{"name":"Remcos"},{"name":"opendir"},{"name":"Dcrat"}]},{"uuid":"f765ab92-1a75-58a8-8fd8-74b1890542b0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.91.111:443","comment":"https://x.com/drb_ra/status/1952757881989652495","timestamp":"1754408734","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3787806e-053d-531b-9df8-d9d039c8f6dd","type":"domain","category":"Network activity","to_ids":true,"value":"server-cd2.bipewi2747.workers.dev","comment":"https://x.com/drb_ra/status/1952758024172392480","timestamp":"1754408768","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4b555f84-8f92-5a6f-b912-226806bce36e","type":"url","category":"Network activity","to_ids":true,"value":"http://server-cd2.bipewi2747.workers.dev","comment":"https://x.com/drb_ra/status/1952758024172392480","timestamp":"1754408768","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"975175b2-3bee-5d4e-a3ef-6df0019ec5fe","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.91.111:80","comment":"https://x.com/drb_ra/status/1952758024172392480","timestamp":"1754408768","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c46250d8-558c-5180-a70f-5e77be5e1bfd","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.229.117:8080","comment":"https://x.com/drb_ra/status/1952758165784658264","timestamp":"1754408801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"59fb2258-df8e-52ea-8eb1-dc7af996ad99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.229.117","comment":"https://x.com/drb_ra/status/1952758165784658264","timestamp":"1754408801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2012ee41-b9fc-5971-af2e-04294a4afedc","type":"domain","category":"Network activity","to_ids":true,"value":"chinagasholdings.space","comment":"https://x.com/drb_ra/status/1952758165784658264","timestamp":"1754408801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"91ff1318-02c5-5546-94ce-1410bc56be72","type":"url","category":"Network activity","to_ids":true,"value":"https://www.chinagasholdings.space/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1952758165784658264","timestamp":"1754408801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3563712-59e8-5d83-b58a-7d025b2bbb23","type":"domain","category":"Network activity","to_ids":true,"value":"cdn-88.org","comment":"https://x.com/drb_ra/status/1952758305652183401","timestamp":"1754408835","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"175fbc67-62b3-5b4b-b517-8845cad069d4","type":"url","category":"Network activity","to_ids":true,"value":"https://cdn-88.org/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1952758305652183401","timestamp":"1754408835","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ae56052e-dd9b-5c19-b3e4-aec780691aa8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.32.250.246:443","comment":"https://x.com/drb_ra/status/1952758305652183401","timestamp":"1754408835","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8867df1f-8f12-55e3-9686-a579fd4b1db3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.32.250.246","comment":"https://x.com/drb_ra/status/1952758305652183401","timestamp":"1754408835","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eb3f5aa9-7aab-5050-9feb-eec7c01153a1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.230.163.146:443","comment":"https://x.com/drb_ra/status/1952758446761160718","timestamp":"1754408868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3846da50-0691-5c2c-94e6-cb3be5a7c307","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.230.163.146","comment":"https://x.com/drb_ra/status/1952758446761160718","timestamp":"1754408868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e2dd44d8-7dce-59ab-ab8b-4638d983dffc","type":"url","category":"Network activity","to_ids":true,"value":"https://43.230.163.146/siie=utf-8&f=8&rsv_bp=1&rsv_idx=1&ch=&tn=baidu&bar=&wd=","comment":"https://x.com/drb_ra/status/1952758446761160718","timestamp":"1754408868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e0fe362-3fd0-5616-badd-925784fb4d6e","type":"url","category":"Network activity","to_ids":true,"value":"https://45.156.87.173/push","comment":"https://x.com/drb_ra/status/1952758585710022941","timestamp":"1754408901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fa783016-c2ff-5c8d-8390-d1afb1bcd160","type":"url","category":"Network activity","to_ids":true,"value":"http://45.156.87.173:443","comment":"https://x.com/drb_ra/status/1952758585710022941","timestamp":"1754408901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"099bb429-ed25-595f-989f-3a51ca82309b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.156.87.173","comment":"https://x.com/drb_ra/status/1952758585710022941","timestamp":"1754408901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8f9709e8-af69-52bf-8b7e-aec226b0ac77","type":"url","category":"Network activity","to_ids":true,"value":"https://47.105.36.109/siie=utf-8&f=8&rsv_bp=1&rsv_idx=1&ch=&tn=baidu&bar=&wd=","comment":"https://x.com/drb_ra/status/1952758729281020221","timestamp":"1754408936","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"55855eb4-9802-5c0e-8bed-ff5de4b8f5e6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.105.36.109:443","comment":"https://x.com/drb_ra/status/1952758729281020221","timestamp":"1754408936","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eb1e596d-2db1-5c8a-9ea2-1ebaf694b90e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.105.36.109","comment":"https://x.com/drb_ra/status/1952758729281020221","timestamp":"1754408936","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"53c4fae9-1b28-52dd-b867-68a2ae7004f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.152.46","comment":"https://x.com/drb_ra/status/1952758869484077275","timestamp":"1754408969","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2bdc9379-cc35-51a6-b82a-837d91d71041","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.152.46:443","comment":"https://x.com/drb_ra/status/1952758869484077275","timestamp":"1754408969","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e12cb01-922b-5e71-abf1-cbbd6ce2a7d2","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.103.204:443","comment":"https://x.com/drb_ra/status/1952759008650985551","timestamp":"1754409002","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e842a079-48ee-5be5-848d-9bbc41bc3998","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.103.204","comment":"https://x.com/drb_ra/status/1952759008650985551","timestamp":"1754409002","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0f61a63d-89fb-5b24-8df9-f78cf5ce5c4a","type":"url","category":"Network activity","to_ids":true,"value":"https://144.91.103.204/load","comment":"https://x.com/drb_ra/status/1952759008650985551","timestamp":"1754409002","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0964785b-1026-5d4c-b6f8-af84be852a8d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.92.182.94:443","comment":"https://x.com/drb_ra/status/1952759147742531871","timestamp":"1754409035","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0148612d-7d38-5132-9104-318ca3f37f9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.92.182.94","comment":"https://x.com/drb_ra/status/1952759147742531871","timestamp":"1754409035","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"61f3bcd3-a158-57ef-9142-c64f5428abbc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.8.68:443","comment":"https://x.com/drb_ra/status/1952759285902897303","timestamp":"1754409068","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"12a235c5-8cfb-5189-96a7-b0578bbe1a98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.8.68","comment":"https://x.com/drb_ra/status/1952759285902897303","timestamp":"1754409068","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"58ce3cb6-5375-5b50-a392-9d3cd5cdf983","type":"url","category":"Network activity","to_ids":true,"value":"http://85.239.53.66:80","comment":"https://x.com/drb_ra/status/1952759425451557372","timestamp":"1754409102","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"59aa3354-340f-5aaf-93df-3567321514c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.239.53.66","comment":"https://x.com/drb_ra/status/1952759425451557372","timestamp":"1754409102","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"97ec19c9-613e-5158-b425-61ae7e983e76","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.222.96.108","comment":"https://x.com/drb_ra/status/1952759563679158336","timestamp":"1754409135","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"09d3c4ac-09ed-56fd-9062-dc5f15be42e0","type":"url","category":"Network activity","to_ids":true,"value":"http://51.222.96.108:80","comment":"https://x.com/drb_ra/status/1952759563679158336","timestamp":"1754409135","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f990980a-be41-5387-8a6d-67a8085da30a","type":"url","category":"Network activity","to_ids":true,"value":"http://194.59.30.187:443","comment":"https://x.com/drb_ra/status/1952759702107963570","timestamp":"1754409168","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"076bc91e-7618-5de8-a441-3fb3d7c6051b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.59.30.187","comment":"https://x.com/drb_ra/status/1952759702107963570","timestamp":"1754409168","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ca51addd-0f72-5fda-bd17-551a659aefc4","type":"url","category":"Network activity","to_ids":true,"value":"http://194.59.30.11:443","comment":"https://x.com/drb_ra/status/1952759839899238744","timestamp":"1754409201","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5036af9f-a81e-5b19-a224-a0cf3045ce63","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.59.30.11","comment":"https://x.com/drb_ra/status/1952759839899238744","timestamp":"1754409201","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"254f276d-4004-5799-8ebf-2259bffb9d54","type":"url","category":"Network activity","to_ids":true,"value":"http://142.202.188.223:8888","comment":"https://x.com/drb_ra/status/1952759978185437238","timestamp":"1754409233","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"46eb82e9-1f6d-572e-b977-4f7bcf1b83d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.202.188.223","comment":"https://x.com/drb_ra/status/1952759978185437238","timestamp":"1754409233","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"61a3897b-2030-572b-b95f-1018252e0ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.240:5671","comment":"https://x.com/drb_ra/status/1952760116131881268","timestamp":"1754409266","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"12b36d7e-dcb8-5d10-9583-7d2a5f006ef9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.240","comment":"https://x.com/drb_ra/status/1952760116131881268","timestamp":"1754409266","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2218afc1-d6fe-5e45-a1af-2b121701dafd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.54","comment":"https://x.com/drb_ra/status/1952760254044741923","timestamp":"1754409299","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0c72f149-2901-5825-86e6-3f9def8a7f87","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.54:2404","comment":"https://x.com/drb_ra/status/1952760254044741923","timestamp":"1754409299","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ba9f3ac6-76a4-50b1-85a5-da5f6ad55dfc","type":"url","category":"Network activity","to_ids":true,"value":"http://118.107.44.162:2096","comment":"https://x.com/drb_ra/status/1952760393798959513","timestamp":"1754409333","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"792b67fb-270a-5f88-bb37-7b00675d18ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.107.44.162","comment":"https://x.com/drb_ra/status/1952760393798959513","timestamp":"1754409333","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"463ec512-21d6-5317-8e9b-0143d1476ff7","type":"url","category":"Network activity","to_ids":true,"value":"http://3.25.136.196:44817","comment":"https://x.com/drb_ra/status/1952760532550746281","timestamp":"1754409366","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cd670c4d-2fd9-5f66-a088-d407bf394a6a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.34.252.229:59514","comment":"https://x.com/drb_ra/status/1952760671277343162","timestamp":"1754409399","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d0221862-614d-5121-9109-d1d2a8a930fd","type":"url","category":"Network activity","to_ids":true,"value":"http://13.211.80.141:49152","comment":"https://x.com/drb_ra/status/1952760812319240321","timestamp":"1754409432","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c6e8ce8a-dac1-5f91-8a9c-d9c9c02d1994","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.211.80.141","comment":"https://x.com/drb_ra/status/1952760812319240321","timestamp":"1754409432","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3c0933d8-ef40-5804-a77f-e09f08a66723","type":"url","category":"Network activity","to_ids":true,"value":"http://43.200.254.110:9600","comment":"https://x.com/drb_ra/status/1952760951427510623","timestamp":"1754409466","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"390b628b-9132-552b-92a4-2f4a41de3b06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.200.254.110","comment":"https://x.com/drb_ra/status/1952760951427510623","timestamp":"1754409466","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2ef805e2-dcd0-52a7-a205-0580c8ccce06","type":"url","category":"Network activity","to_ids":true,"value":"http://3.148.197.135:9601","comment":"https://x.com/drb_ra/status/1952761089977913589","timestamp":"1754409499","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"18139419-daba-506d-9d71-79c801b00463","type":"url","category":"Network activity","to_ids":true,"value":"http://16.26.92.78:40338","comment":"https://x.com/drb_ra/status/1952761228712870304","timestamp":"1754409532","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0cee2091-62a1-5ca5-b466-c0580972083a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.26.92.78","comment":"https://x.com/drb_ra/status/1952761228712870304","timestamp":"1754409532","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ccc4dd12-f6f2-54cc-b06f-19e0e20b53ab","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.107.169:443","comment":"https://x.com/drb_ra/status/1952761366298661360","timestamp":"1754409564","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5cabda2d-4f45-5120-857f-40e5cc0fb400","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.107.169:80","comment":"https://x.com/drb_ra/status/1952761504635179384","timestamp":"1754409597","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4baebd17-0247-5ad3-b5ae-1fcc87f64b30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.107.169","comment":"https://x.com/drb_ra/status/1952761504635179384","timestamp":"1754409597","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"03d1354d-25a1-5ec7-b14f-1a4e401bbbd3","type":"url","category":"Network activity","to_ids":true,"value":"https://material-badge.surge.sh","comment":"https://x.com/urldna_bot/status/1952761544388837866","timestamp":"1754409607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9163c2bd-9eda-53db-bc3c-6a9b3edc1b85","type":"domain","category":"Network activity","to_ids":true,"value":"material-badge.surge.sh","comment":"https://x.com/urldna_bot/status/1952761544388837866","timestamp":"1754409607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"30dda89d-78ee-51b7-a7c3-1be5c7b6d4de","type":"url","category":"Network activity","to_ids":true,"value":"http://23.239.13.64:587","comment":"https://x.com/drb_ra/status/1952761644402032773","timestamp":"1754409631","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6f9f2813-6f14-511a-b1ba-7dffe4669713","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.239.13.64","comment":"https://x.com/drb_ra/status/1952761784412131734","timestamp":"1754409664","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9f6f7e7e-86c3-57f4-ab6a-8dbf652eedb4","type":"url","category":"Network activity","to_ids":true,"value":"http://23.239.13.64:25","comment":"https://x.com/drb_ra/status/1952761784412131734","timestamp":"1754409664","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0ace83d0-b4a4-5d92-bd47-a70644502e79","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.122.195:8888","comment":"https://x.com/drb_ra/status/1952761923570663781","timestamp":"1754409697","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"89af0c01-802f-5623-9c12-b14a9a45e2bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.122.195","comment":"https://x.com/drb_ra/status/1952761923570663781","timestamp":"1754409697","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"1ecd0abe-c08a-5fff-9a11-b3c05a43e486","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.98.219.36","comment":"https://x.com/drb_ra/status/1952762063203295315","timestamp":"1754409731","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d7053667-5f08-5bf1-b5ba-937c400a4acf","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.36:443","comment":"https://x.com/drb_ra/status/1952762063203295315","timestamp":"1754409731","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"6c18696e-3b1d-5098-b8d5-9a14ec2b8bb3","type":"url","category":"Network activity","to_ids":true,"value":"http://206.190.236.171:443","comment":"https://x.com/drb_ra/status/1952762201812443300","timestamp":"1754409764","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6f69dceb-8bd9-5166-8904-eec72a7082bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.190.236.171","comment":"https://x.com/drb_ra/status/1952762201812443300","timestamp":"1754409764","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bf56ab81-2a46-5cd2-bb59-1a7e2b947de0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.128.136.39","comment":"https://x.com/drb_ra/status/1952762339788222968","timestamp":"1754409797","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ea889450-601e-5d05-945b-0536170fbc90","type":"url","category":"Network activity","to_ids":true,"value":"http://216.128.136.39:443","comment":"https://x.com/drb_ra/status/1952762339788222968","timestamp":"1754409797","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"448686e3-a3d3-50d4-8194-732ca5711e4b","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.191:443","comment":"https://x.com/drb_ra/status/1952762477176889514","timestamp":"1754409829","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d2c12816-427b-5508-897c-951bbcfe255c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.191","comment":"https://x.com/drb_ra/status/1952762477176889514","timestamp":"1754409829","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"0492a98d-986e-57ab-8a8c-70b71e8c0f8d","type":"url","category":"Network activity","to_ids":true,"value":"http://20.119.77.135:443","comment":"https://x.com/drb_ra/status/1952762615387558000","timestamp":"1754409862","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b84cc1e4-2eda-5987-afe9-3ae7de275743","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.119.77.135","comment":"https://x.com/drb_ra/status/1952762615387558000","timestamp":"1754409862","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"440f168e-60b7-5975-95b9-74ec2503e4e9","type":"url","category":"Network activity","to_ids":true,"value":"http://178.189.213.251:443","comment":"https://x.com/drb_ra/status/1952762754244215115","timestamp":"1754409895","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"acb71e27-ee58-587c-af12-a130b25a09df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.189.213.251","comment":"https://x.com/drb_ra/status/1952762754244215115","timestamp":"1754409895","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5a2bb9d6-7d29-5dec-a5fa-bff9f1806500","type":"url","category":"Network activity","to_ids":true,"value":"http://15.200.201.8:443","comment":"https://x.com/drb_ra/status/1952762893302182255","timestamp":"1754409929","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3439120d-3152-5068-8cd3-7cc901b73cf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.200.201.8","comment":"https://x.com/drb_ra/status/1952762893302182255","timestamp":"1754409929","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"923df51c-ee4f-58ce-a85c-6eee04d0e5a3","type":"url","category":"Network activity","to_ids":true,"value":"http://75.2.77.241:443","comment":"https://x.com/drb_ra/status/1952763032016142630","timestamp":"1754409962","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b9c7cee6-6958-51e4-a762-3e4988e0ef27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.2.77.241","comment":"https://x.com/drb_ra/status/1952763032016142630","timestamp":"1754409962","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"30229e35-2c86-5995-a4ae-6e94ebbe7268","type":"url","category":"Network activity","to_ids":true,"value":"http://34.93.222.90:443","comment":"https://x.com/drb_ra/status/1952763170365321540","timestamp":"1754409995","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3ce5c3ed-48a1-5fcb-9391-3bdc4a746059","type":"url","category":"Network activity","to_ids":true,"value":"http://112.19.5.20:4506","comment":"https://x.com/drb_ra/status/1952763311528845590","timestamp":"1754410028","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"2b6a50d1-0b66-5113-bfbf-dca5614a75ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.19.5.20","comment":"https://x.com/drb_ra/status/1952763311528845590","timestamp":"1754410028","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8487c29d-567d-51e8-9c96-6c69565784b3","type":"url","category":"Network activity","to_ids":true,"value":"http://34.59.29.91:7443","comment":"https://x.com/drb_ra/status/1952763449617830124","timestamp":"1754410061","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"ebde2dfd-0b7c-5bba-b228-31c89834118f","type":"url","category":"Network activity","to_ids":true,"value":"http://51.75.38.2:7443","comment":"https://x.com/drb_ra/status/1952763587417522608","timestamp":"1754410094","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"893c42dc-244c-5f9d-8099-b8d13fbfcc28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.75.38.2","comment":"https://x.com/drb_ra/status/1952763587417522608","timestamp":"1754410094","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"86ffff23-defd-5d59-9e25-2f8b44d87887","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.173:31337","comment":"https://x.com/drb_ra/status/1952763725233987791","timestamp":"1754410127","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"52daa1a8-f89f-5932-a2a8-50b017a0bf7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.173","comment":"https://x.com/drb_ra/status/1952763725233987791","timestamp":"1754410127","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e2c76385-371c-5925-b1c8-84304fd5e7bc","type":"url","category":"Network activity","to_ids":true,"value":"http://202.61.137.217:443","comment":"https://x.com/drb_ra/status/1952763863998271517","timestamp":"1754410160","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3f98e656-9beb-51e8-ab60-bb4e2cbccd6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.61.137.217","comment":"https://x.com/drb_ra/status/1952763863998271517","timestamp":"1754410160","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"978f96e6-a7ff-57d8-b81f-d3af26d35fa3","type":"url","category":"Network activity","to_ids":true,"value":"http://165.232.124.182:31337","comment":"https://x.com/drb_ra/status/1952764002980782244","timestamp":"1754410193","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1044b306-0934-5e61-8b3b-e4c880fd5b5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.232.124.182","comment":"https://x.com/drb_ra/status/1952764002980782244","timestamp":"1754410193","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4be47e07-d1b9-56ef-8ebb-95f87a450fee","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.139.201:31337","comment":"https://x.com/drb_ra/status/1952764142558818414","timestamp":"1754410226","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"43eee9ee-70ad-52ad-9fc7-ed14c5bf0fe6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.233.139.201","comment":"https://x.com/drb_ra/status/1952764142558818414","timestamp":"1754410226","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2cc97b55-da07-5fc7-8a8e-16f27d5e9fb9","type":"url","category":"Network activity","to_ids":true,"value":"http://116.202.108.76:443","comment":"https://x.com/drb_ra/status/1952764280916353356","timestamp":"1754410259","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e2bd4e39-ad59-58dd-b09a-f93ba1c5c2be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.202.108.76","comment":"https://x.com/drb_ra/status/1952764280916353356","timestamp":"1754410259","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2980e0e2-ff41-529e-b6f7-e3e2c56ab15b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.193.57.188","comment":"https://x.com/drb_ra/status/1952764419429048826","timestamp":"1754410292","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"399d815b-810e-5412-9369-745e5748be47","type":"url","category":"Network activity","to_ids":true,"value":"http://212.193.57.188:31337","comment":"https://x.com/drb_ra/status/1952764419429048826","timestamp":"1754410292","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b653baf7-1a16-5c84-90a5-4da5c8273a4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"205.198.78.177","comment":"https://x.com/drb_ra/status/1952764559422333179","timestamp":"1754410326","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"6bf18241-cb57-5dd3-941b-dc1570953964","type":"url","category":"Network activity","to_ids":true,"value":"http://205.198.78.177:31337","comment":"https://x.com/drb_ra/status/1952764559422333179","timestamp":"1754410326","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8a29603c-9800-5c32-87b5-694661811dc9","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.242.13:8888","comment":"https://x.com/drb_ra/status/1952764698429919714","timestamp":"1754410359","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3fe1b39d-9dd0-577e-bd51-ca46f4796cb3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.242.13","comment":"https://x.com/drb_ra/status/1952764698429919714","timestamp":"1754410359","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1e7a389a-5da9-53a4-902e-d9c0387bc747","type":"url","category":"Network activity","to_ids":true,"value":"https://45.86.153.106/owa/Q5gPb76xgLDlTkoqBUCBXJ1J6gf-sk5Veh5","comment":"https://x.com/drb_ra/status/1952764839207575737","timestamp":"1754410392","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0792631a-0765-598b-a7c5-c6bd8d606566","type":"url","category":"Network activity","to_ids":true,"value":"http://45.86.153.106:21451","comment":"https://x.com/drb_ra/status/1952764839207575737","timestamp":"1754410392","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c55e46bd-d348-55a4-a154-56349ba05857","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.153.106","comment":"https://x.com/drb_ra/status/1952764839207575737","timestamp":"1754410392","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a1214444-9d3f-567b-b87e-f2b77a05370b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.105.24.242:80","comment":"https://x.com/drb_ra/status/1952764978861121725","timestamp":"1754410426","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ec413a0d-4978-5e9b-af7c-59e4f2732e16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.105.24.242","comment":"https://x.com/drb_ra/status/1952764978861121725","timestamp":"1754410426","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"94690758-de7d-5b10-9160-22a975622a04","type":"url","category":"Network activity","to_ids":true,"value":"http://113.250.188.15:8887","comment":"https://x.com/drb_ra/status/1952765118850212070","timestamp":"1754410459","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9f6854f4-05b3-5bea-a684-6d2311e478d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.250.188.15","comment":"https://x.com/drb_ra/status/1952765118850212070","timestamp":"1754410459","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ed39001-643c-5e10-a4e1-f0f4a2a293f9","type":"url","category":"Network activity","to_ids":true,"value":"http://39.102.209.244:8848","comment":"https://x.com/drb_ra/status/1952765257144758363","timestamp":"1754410492","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"92f972de-51a8-5b0f-9864-7309771b4179","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.102.209.244","comment":"https://x.com/drb_ra/status/1952765257144758363","timestamp":"1754410492","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e1f37b54-9b55-5d7a-90ca-d49b9c3b929d","type":"url","category":"Network activity","to_ids":true,"value":"https://39.102.209.244/match","comment":"https://x.com/drb_ra/status/1952765257144758363","timestamp":"1754410492","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9c04279a-6d82-506b-a4a3-3bdab0a6194f","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.94.35:9180","comment":"https://x.com/drb_ra/status/1952765396018204829","timestamp":"1754410525","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a09433a-259b-5f61-bc08-f508e062911b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.94.35","comment":"https://x.com/drb_ra/status/1952765396018204829","timestamp":"1754410525","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6a899c56-3089-56fc-a2dc-15022c5e87d1","type":"url","category":"Network activity","to_ids":true,"value":"http://185.233.166.124:443","comment":"https://x.com/drb_ra/status/1952765536170823733","timestamp":"1754410559","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"53734e22-2476-5f97-8cdf-515223387639","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.233.166.124","comment":"https://x.com/drb_ra/status/1952765675874795543","timestamp":"1754410592","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"04247f5b-c077-5a80-b1c7-96931122af67","type":"url","category":"Network activity","to_ids":true,"value":"http://185.233.166.124:9702","comment":"https://x.com/drb_ra/status/1952765675874795543","timestamp":"1754410592","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0e60e8fc-43af-58ea-8bc7-3bf021aa644f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.244.224.69","comment":"https://x.com/drb_ra/status/1952765815259812291","timestamp":"1754410625","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"426ce3bf-205a-525a-8172-8171dcf70cb8","type":"url","category":"Network activity","to_ids":true,"value":"http://198.244.224.69:80","comment":"https://x.com/drb_ra/status/1952765815259812291","timestamp":"1754410625","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c5970687-b834-51b1-b183-7eb9b009bc9b","type":"url","category":"Network activity","to_ids":true,"value":"http://77.238.241.9:80","comment":"https://x.com/drb_ra/status/1952765953994793118","timestamp":"1754410658","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b2acbf7e-7c7b-54f9-ac94-a8af5c464cab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.238.241.9","comment":"https://x.com/drb_ra/status/1952765953994793118","timestamp":"1754410658","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fa11a74d-5bf3-51c5-9555-0b33e1275d2e","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.85.144:5000","comment":"https://x.com/drb_ra/status/1952766091958047141","timestamp":"1754410691","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"67df498a-ae8f-5aec-91a1-60c0890803e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.85.144","comment":"https://x.com/drb_ra/status/1952766091958047141","timestamp":"1754410691","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2618cc89-c627-5c55-b681-ed2caa7b002b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.117.188:2404","comment":"https://x.com/drb_ra/status/1952766230663733558","timestamp":"1754410724","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5219af76-92ac-579d-9f37-e6674f9b679e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.117.188","comment":"https://x.com/drb_ra/status/1952766230663733558","timestamp":"1754410724","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a59b0337-71fd-5e2a-ad90-569503df0ea7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.132.238.147","comment":"https://x.com/drb_ra/status/1952766369482559563","timestamp":"1754410757","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"be461f1b-fcc0-5ba3-b250-d5e5aa984bc4","type":"url","category":"Network activity","to_ids":true,"value":"http://45.132.238.147:2404","comment":"https://x.com/drb_ra/status/1952766369482559563","timestamp":"1754410757","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5ead3a10-70e6-5f57-b6ad-a1d9ddd0a812","type":"url","category":"Network activity","to_ids":true,"value":"http://54.219.39.97:10001","comment":"https://x.com/drb_ra/status/1952766508960022840","timestamp":"1754410791","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8ed89f29-4a66-5586-9ff5-63a1fdfa1981","type":"url","category":"Network activity","to_ids":true,"value":"http://54.219.39.97:3001","comment":"https://x.com/drb_ra/status/1952766648290627672","timestamp":"1754410824","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"31826f70-82fb-5530-afc0-6bb4b9a41b2e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.219.39.97","comment":"https://x.com/drb_ra/status/1952766648290627672","timestamp":"1754410824","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fb9cbb2c-54cf-5261-9aa8-12dd42020256","type":"url","category":"Network activity","to_ids":true,"value":"http://13.201.10.7:2795","comment":"https://x.com/drb_ra/status/1952766786757128287","timestamp":"1754410857","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8e64dd43-3e3a-5063-8c36-216f59d15b13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.201.10.7","comment":"https://x.com/drb_ra/status/1952766786757128287","timestamp":"1754410857","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f1a26667-6bea-5531-8a8c-8e0ea881ad50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.163.196.135","comment":"https://x.com/drb_ra/status/1952766925609611676","timestamp":"1754410890","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0ad9e90d-9d4d-5170-b860-e24379b5f037","type":"url","category":"Network activity","to_ids":true,"value":"http://18.163.196.135:3086","comment":"https://x.com/drb_ra/status/1952766925609611676","timestamp":"1754410890","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c1117359-6c5b-5f25-ad82-c05df367e876","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.244.64.198","comment":"https://x.com/drb_ra/status/1952767064575258725","timestamp":"1754410923","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"58893219-1ef5-51bf-b0e7-831e5041e8df","type":"url","category":"Network activity","to_ids":true,"value":"http://13.244.64.198:2454","comment":"https://x.com/drb_ra/status/1952767064575258725","timestamp":"1754410923","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"334ed4c9-cf0a-564b-9db8-4e9bf7d9230d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.250.69.149:443","comment":"https://x.com/drb_ra/status/1952767202953740585","timestamp":"1754410956","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d99ff845-97fe-51f2-ba4d-2fa36e9dcf68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.250.69.149","comment":"https://x.com/drb_ra/status/1952767202953740585","timestamp":"1754410956","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"75520045-dc3e-559d-a1bf-54646d3d38fb","type":"url","category":"Network activity","to_ids":true,"value":"http://111.90.151.72:2850","comment":"https://x.com/drb_ra/status/1952767342691168541","timestamp":"1754410989","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"6a5180c2-5797-502c-9577-d1c2fab1983f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.90.151.72","comment":"https://x.com/drb_ra/status/1952767342691168541","timestamp":"1754410989","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"d33378aa-5885-5f1e-86c4-2668ad8a876e","type":"url","category":"Network activity","to_ids":true,"value":"http://85.98.101.193:443","comment":"https://x.com/drb_ra/status/1952767480079737174","timestamp":"1754411022","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"0e1d9dcf-edd1-54c3-b260-b977c23337ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.75.228.75","comment":"https://x.com/drb_ra/status/1952767617346728083","timestamp":"1754411055","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a2f2c683-5fd5-526b-8b1b-b1e1c713acb2","type":"url","category":"Network activity","to_ids":true,"value":"http://35.75.228.75:443","comment":"https://x.com/drb_ra/status/1952767617346728083","timestamp":"1754411055","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"643fbc7b-db1b-5d40-be80-8c6891ae9c28","type":"url","category":"Network activity","to_ids":true,"value":"http://35.161.154.247:443","comment":"https://x.com/drb_ra/status/1952767755565847013","timestamp":"1754411088","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7fbf1353-acc2-5392-b050-8d8fc7a9f3fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.161.154.247","comment":"https://x.com/drb_ra/status/1952767755565847013","timestamp":"1754411088","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6dee9ca2-af3a-5c9f-a2b7-5192c16831df","type":"url","category":"Network activity","to_ids":true,"value":"http://3.33.183.94:443","comment":"https://x.com/drb_ra/status/1952767893000622540","timestamp":"1754411121","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"706b29e0-0eb8-57e9-9c97-7ef4a93bb52c","type":"url","category":"Network activity","to_ids":true,"value":"http://107.23.227.249:443","comment":"https://x.com/drb_ra/status/1952768031433576531","timestamp":"1754411154","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b77c990a-50c8-5bf8-88f8-4806c599fedf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.23.227.249","comment":"https://x.com/drb_ra/status/1952768031433576531","timestamp":"1754411154","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"99e1affa-f9dc-5896-8123-203db92d1e1d","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.103.204:8080","comment":"https://x.com/drb_ra/status/1952768170688675858","timestamp":"1754411187","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"b75083ce-da48-534c-a94c-940b3ddcba16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.0.254.101","comment":"https://x.com/drb_ra/status/1952768452143308928","timestamp":"1754411254","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8cd4b903-7fdd-58c6-a7c9-3f7156a0a0f0","type":"url","category":"Network activity","to_ids":true,"value":"http://49.0.254.101:10000","comment":"https://x.com/drb_ra/status/1952768452143308928","timestamp":"1754411254","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3bad5a40-d58a-51c6-a6d3-5f32481f1895","type":"domain","category":"Network activity","to_ids":true,"value":"qlchacha.top","comment":"https://x.com/drb_ra/status/1952768452143308928","timestamp":"1754411254","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c0916e27-b0ad-5096-b570-312a74cf9d6e","type":"url","category":"Network activity","to_ids":true,"value":"https://www.qlchacha.top/wc/58462514417","comment":"https://x.com/drb_ra/status/1952768452143308928","timestamp":"1754411254","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e83a5f33-0848-55ea-be80-b047b26e54f4","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.139.175:80","comment":"https://x.com/drb_ra/status/1952768591855599634","timestamp":"1754411287","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eac84f14-a0e5-532b-8d83-7c5f23cd17a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.139.175","comment":"https://x.com/drb_ra/status/1952768591855599634","timestamp":"1754411287","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c39fc9c7-155c-5519-bce5-dcf00a3af132","type":"url","category":"Network activity","to_ids":true,"value":"http://139.224.54.133:8333","comment":"https://x.com/drb_ra/status/1952768731559440548","timestamp":"1754411320","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6d4720c6-1206-515e-9841-ed2f99bed9e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.224.54.133","comment":"https://x.com/drb_ra/status/1952768731559440548","timestamp":"1754411320","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"92599e69-421e-59bd-841d-c8c8df3f9bec","type":"url","category":"Network activity","to_ids":true,"value":"https://93.152.230.6/pixel.gif","comment":"https://x.com/drb_ra/status/1952768870269219284","timestamp":"1754411354","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4b94a412-f5e1-5569-a1fd-7bdb65b786c5","type":"url","category":"Network activity","to_ids":true,"value":"http://93.152.230.6:9443","comment":"https://x.com/drb_ra/status/1952768870269219284","timestamp":"1754411354","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"14e8dcca-b88c-5874-8a40-797708d67322","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.152.230.6","comment":"https://x.com/drb_ra/status/1952768870269219284","timestamp":"1754411354","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"672c6a9f-aa60-58c1-834b-c21c6dcab83b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.9.57:80","comment":"https://x.com/drb_ra/status/1952769009192964445","timestamp":"1754411387","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aee674e5-78b5-5b56-ae85-ed7f7e06d41c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.9.57","comment":"https://x.com/drb_ra/status/1952769009192964445","timestamp":"1754411387","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"041181d6-e32d-543a-b9ab-8e5e2a673e68","type":"url","category":"Network activity","to_ids":true,"value":"https://43.134.9.57/j.ad","comment":"https://x.com/drb_ra/status/1952769009192964445","timestamp":"1754411387","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7ce6944c-ab9e-50b3-9490-c3d8ee6de88d","type":"url","category":"Network activity","to_ids":true,"value":"https://39.106.144.162/load","comment":"https://x.com/drb_ra/status/1952769148628480166","timestamp":"1754411420","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"87c8a401-b3f3-55e1-85a0-9d3faa22f303","type":"url","category":"Network activity","to_ids":true,"value":"http://39.106.144.162:80","comment":"https://x.com/drb_ra/status/1952769148628480166","timestamp":"1754411420","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4ad08a9a-439e-5ba4-b3a6-e6234cbe4a3b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.106.144.162","comment":"https://x.com/drb_ra/status/1952769148628480166","timestamp":"1754411420","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"62704355-bc73-505b-9e39-ab86303264fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.76.184","comment":"https://x.com/drb_ra/status/1952769287476629627","timestamp":"1754411453","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d6d09923-d1da-5335-b43b-e3f5a1ca9bc1","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.76.184:443","comment":"https://x.com/drb_ra/status/1952769287476629627","timestamp":"1754411453","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2999bd0b-ecc2-565d-99f9-c8f2cc32747f","type":"url","category":"Network activity","to_ids":true,"value":"http://47.97.118.238:8888","comment":"https://x.com/drb_ra/status/1952769426631147540","timestamp":"1754411486","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c35ac6d0-2189-5eb9-8af4-57f2973164cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.97.118.238","comment":"https://x.com/drb_ra/status/1952769426631147540","timestamp":"1754411486","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a996a8f-2f46-58e8-995e-2863ea12c5b6","type":"url","category":"Network activity","to_ids":true,"value":"http://38.47.120.26:443","comment":"https://x.com/drb_ra/status/1952769567203172365","timestamp":"1754411520","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"caf0dda3-871b-5f3a-848f-f9bd4ee344e2","type":"url","category":"Network activity","to_ids":true,"value":"http://206.119.172.150:80","comment":"https://x.com/drb_ra/status/1952769707288715555","timestamp":"1754411553","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d110743f-02c7-593f-b257-da940303a853","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.119.172.150","comment":"https://x.com/drb_ra/status/1952769707288715555","timestamp":"1754411553","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1aa2e2b0-ccbb-527a-86af-53e2aec6d2d8","type":"domain","category":"Network activity","to_ids":true,"value":"api.teemaaby.dpdns.org","comment":"https://x.com/drb_ra/status/1952769847244312828","timestamp":"1754411586","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d08bffc7-b7e2-57eb-bbb5-509baa81d6b2","type":"url","category":"Network activity","to_ids":true,"value":"https://api.teemaaby.dpdns.org/cryptapi/v2/status","comment":"https://x.com/drb_ra/status/1952769847244312828","timestamp":"1754411586","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"df976212-b084-57d5-8d3a-6b0ac73641f6","type":"url","category":"Network activity","to_ids":true,"value":"http://38.47.120.26:80","comment":"https://x.com/drb_ra/status/1952769847244312828","timestamp":"1754411586","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c94de241-26d4-54e8-9f2b-d1c04f3859d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.47.120.26","comment":"https://x.com/drb_ra/status/1952769847244312828","timestamp":"1754411586","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8e6b0462-8d87-5df4-a7dd-ecda8b623a4c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.221.64.72:21","comment":"https://x.com/drb_ra/status/1952769985580777851","timestamp":"1754411619","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"666c19f4-f46f-5271-86e6-b4195b2bcefc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.221.64.72","comment":"https://x.com/drb_ra/status/1952769985580777851","timestamp":"1754411619","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ad53bc62-66b3-5d5b-9248-785e55d8a17c","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.148.101:2404","comment":"https://x.com/drb_ra/status/1952770123753755008","timestamp":"1754411652","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2e4b1f9f-2fbe-554c-af20-02a601c77919","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.148.101","comment":"https://x.com/drb_ra/status/1952770123753755008","timestamp":"1754411652","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"10383ef3-a4f5-5bb3-958d-f866dc467de0","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.49:33862","comment":"https://x.com/drb_ra/status/1952770261813547483","timestamp":"1754411685","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"406f7537-88cd-534b-b885-545824317793","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.49","comment":"https://x.com/drb_ra/status/1952770261813547483","timestamp":"1754411685","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ddee8781-3485-50a3-a136-5e0c02a01564","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.80.158.63","comment":"https://x.com/drb_ra/status/1952770400263303402","timestamp":"1754411718","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"84a879f2-f680-5b5d-aced-27318f159e95","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.63:2404","comment":"https://x.com/drb_ra/status/1952770400263303402","timestamp":"1754411718","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"af2220fc-3b21-50b8-8c69-f594c77ea0f1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.90:5999","comment":"https://x.com/drb_ra/status/1952770538104934608","timestamp":"1754411751","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"cdec57b3-4fa3-532c-8398-8a4e6ff169e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.90","comment":"https://x.com/drb_ra/status/1952770538104934608","timestamp":"1754411751","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3ad1ff8e-bad0-5ffe-9e39-e7214fa2c338","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.45:2404","comment":"https://x.com/drb_ra/status/1952770677443895412","timestamp":"1754411784","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e4008afb-18f0-5449-a389-da6614f72c6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.45","comment":"https://x.com/drb_ra/status/1952770677443895412","timestamp":"1754411784","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"73f79241-6698-5875-aea7-36bc37656d0d","type":"url","category":"Network activity","to_ids":true,"value":"http://99.30.61.197:2427","comment":"https://x.com/drb_ra/status/1952770828589768994","timestamp":"1754411820","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3b7ab735-0e09-5b2a-bc36-a0e0c4de9f0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.30.61.197","comment":"https://x.com/drb_ra/status/1952770828589768994","timestamp":"1754411820","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6da19fd7-cc0b-5744-8791-89f228033129","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.49.232:3232","comment":"https://x.com/drb_ra/status/1952770967693840690","timestamp":"1754411854","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"353cc948-0c76-56ac-b91f-25ecfe555b6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.49.232","comment":"https://x.com/drb_ra/status/1952770967693840690","timestamp":"1754411854","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"8a708872-9bf0-510d-b3cf-7bcdcf772735","type":"url","category":"Network activity","to_ids":true,"value":"http://181.235.10.10:8020","comment":"https://x.com/drb_ra/status/1952771106999300205","timestamp":"1754411887","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b70b32ed-786f-51f4-9666-69623a435858","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.235.10.10","comment":"https://x.com/drb_ra/status/1952771106999300205","timestamp":"1754411887","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b3adc774-75df-5c25-84a9-12c55c1f1e4e","type":"url","category":"Network activity","to_ids":true,"value":"http://173.249.194.227:80","comment":"https://x.com/drb_ra/status/1952771246069801374","timestamp":"1754411920","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"06494167-fb4e-5b99-9ca0-eb24d8148d9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.249.194.227","comment":"https://x.com/drb_ra/status/1952771246069801374","timestamp":"1754411920","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"243ceca6-21c9-5212-acd9-826ac814f7af","type":"url","category":"Network activity","to_ids":true,"value":"http://5.101.84.173:443","comment":"https://x.com/drb_ra/status/1952771524852674991","timestamp":"1754411986","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"d83e06c0-eb54-507e-b70f-79be2896439c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.59.125.26:443","comment":"https://x.com/drb_ra/status/1952771663147237714","timestamp":"1754412019","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4e91b5d4-476e-58f2-b9a5-82ea2261cfbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.59.125.26","comment":"https://x.com/drb_ra/status/1952771663147237714","timestamp":"1754412019","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f79b601d-0ffc-5d7d-805a-814b079b2e84","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.139.175:443","comment":"https://x.com/drb_ra/status/1952773192038207606","timestamp":"1754412384","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"baa736a4-c29e-55b1-adb3-30df719c7056","type":"url","category":"Network activity","to_ids":true,"value":"http://47.107.249.31:50000","comment":"https://x.com/drb_ra/status/1952773331549130855","timestamp":"1754412417","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"75025538-188b-5c10-9fe7-1993f7df38be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.107.249.31","comment":"https://x.com/drb_ra/status/1952773331549130855","timestamp":"1754412417","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"009a58db-a00a-5825-a775-81c5fa2fb129","type":"url","category":"Network activity","to_ids":true,"value":"https://81.71.249.93/omp/api/micro_app/get_org_app","comment":"https://x.com/drb_ra/status/1952773471852781961","timestamp":"1754412451","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"70a55408-c016-58e6-b593-ad9c414c25f4","type":"url","category":"Network activity","to_ids":true,"value":"http://81.71.249.93:443","comment":"https://x.com/drb_ra/status/1952773471852781961","timestamp":"1754412451","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"663c809b-9a54-5c3b-92f2-a4a393940f77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.249.93","comment":"https://x.com/drb_ra/status/1952773471852781961","timestamp":"1754412451","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7f4127fb-8e20-5a64-bc6f-340d0b030c4b","type":"url","category":"Network activity","to_ids":true,"value":"http://84.154.183.163:81","comment":"https://x.com/drb_ra/status/1952774163493540088","timestamp":"1754412616","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"01b08ae6-0d3f-562c-8565-3f527847d599","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.154.183.163","comment":"https://x.com/drb_ra/status/1952774163493540088","timestamp":"1754412616","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0c72131d-2f28-5ff6-b394-f6b0e717c1d2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.228.192.59:2096","comment":"https://x.com/drb_ra/status/1952774301918110186","timestamp":"1754412649","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"89d135b6-62b9-52fa-879b-efd3f59b37b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.228.192.59","comment":"https://x.com/drb_ra/status/1952774301918110186","timestamp":"1754412649","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b0b340a2-f28f-5065-b4f8-4fbd63710438","type":"url","category":"Network activity","to_ids":true,"value":"http://18.230.11.233:636","comment":"https://x.com/drb_ra/status/1952774439818477838","timestamp":"1754412681","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1b3ab66e-172e-5017-b955-82f4da3efc6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.230.11.233","comment":"https://x.com/drb_ra/status/1952774439818477838","timestamp":"1754412681","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"cf61c2e3-cd46-563f-ab70-ddcbbcdef3d3","type":"url","category":"Network activity","to_ids":true,"value":"http://35.152.141.253:8636","comment":"https://x.com/drb_ra/status/1952774578524098846","timestamp":"1754412714","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a2019997-e7d6-5bf7-be40-067247ea1adc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.152.141.253","comment":"https://x.com/drb_ra/status/1952774578524098846","timestamp":"1754412714","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e9d0a8ff-6e0a-52dd-afe2-11ef631974ac","type":"url","category":"Network activity","to_ids":true,"value":"http://88.80.17.177:80","comment":"https://x.com/drb_ra/status/1952774994552881562","timestamp":"1754412814","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b0ba99f5-49bf-57e0-ae0c-52e5b69e3218","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.80.17.177","comment":"https://x.com/drb_ra/status/1952774994552881562","timestamp":"1754412814","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"606ffd16-efdf-5881-8a21-61c75f0a736c","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.254.153:80","comment":"https://x.com/drb_ra/status/1952775133124252090","timestamp":"1754412847","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d12aeeaf-33df-575b-a1ac-d0daca0dd014","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.254.153","comment":"https://x.com/drb_ra/status/1952775133124252090","timestamp":"1754412847","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2d59d027-8b9e-5953-997d-ec89def3c047","type":"url","category":"Network activity","to_ids":true,"value":"http://34.96.165.237:8888","comment":"https://x.com/drb_ra/status/1952775272010317827","timestamp":"1754412880","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"776843c6-edc1-5744-b238-ccf739083618","type":"url","category":"Network activity","to_ids":true,"value":"http://44.237.77.82:443","comment":"https://x.com/drb_ra/status/1952775410170638660","timestamp":"1754412913","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"cbf7b62e-823f-523f-a419-1734d8743005","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.237.77.82","comment":"https://x.com/drb_ra/status/1952775410170638660","timestamp":"1754412913","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"29d9fb6d-9932-5281-a49d-1991ec712ca5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.82.165.200:443","comment":"https://x.com/drb_ra/status/1952775548737933330","timestamp":"1754412946","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"43bdb6d3-38ec-57df-9702-2646d6a88d3e","type":"url","category":"Network activity","to_ids":true,"value":"http://23.23.249.235:443","comment":"https://x.com/drb_ra/status/1952775686554275861","timestamp":"1754412979","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"cf5d338f-00af-5efb-8c97-f2a2a0358d9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.23.249.235","comment":"https://x.com/drb_ra/status/1952775686554275861","timestamp":"1754412979","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6e62bb16-2b1e-54ad-ae12-0e5f34970795","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.75.252:3566","comment":"https://x.com/drb_ra/status/1952775825507381675","timestamp":"1754413012","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"131a5558-07f4-578e-abdd-75d728e18300","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.75.252","comment":"https://x.com/drb_ra/status/1952775825507381675","timestamp":"1754413012","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3e2b8856-1e3c-5bd1-83b1-953c38bedfe6","type":"url","category":"Network activity","to_ids":true,"value":"http://52.27.181.0:443","comment":"https://x.com/drb_ra/status/1952775962979877216","timestamp":"1754413045","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1a73427d-f5b8-5ab8-a681-4cf6c7a65ef7","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.173.73:7443","comment":"https://x.com/drb_ra/status/1952776100808970509","timestamp":"1754413077","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"014f68f6-be29-5a3d-aec4-ed288ab29413","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.173.73","comment":"https://x.com/drb_ra/status/1952776100808970509","timestamp":"1754413077","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bc3113aa-ab2d-5ea0-802e-811c64399def","type":"url","category":"Network activity","to_ids":true,"value":"http://139.177.201.16:7443","comment":"https://x.com/drb_ra/status/1952776239464267960","timestamp":"1754413110","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"ee92572a-ebda-5c2f-8bb1-8954b517e12b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.177.201.16","comment":"https://x.com/drb_ra/status/1952776239464267960","timestamp":"1754413110","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b371d89f-3f56-5119-aff1-7b1b2b741066","type":"url","category":"Network activity","to_ids":true,"value":"http://65.20.99.39:7443","comment":"https://x.com/drb_ra/status/1952776376928321796","timestamp":"1754413143","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9ba4f37f-e4c4-5f33-a83c-19c7881f4ee4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.20.99.39","comment":"https://x.com/drb_ra/status/1952776376928321796","timestamp":"1754413143","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"6e02ac13-51f0-5095-8044-6b281031d779","type":"url","category":"Network activity","to_ids":true,"value":"http://194.116.214.53:7443","comment":"https://x.com/drb_ra/status/1952776515604582780","timestamp":"1754413176","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"e417ebdd-bced-5993-a775-7e162f31256c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.116.214.53","comment":"https://x.com/drb_ra/status/1952776515604582780","timestamp":"1754413176","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"4ab7691c-da77-5855-b05f-3d957b4f2c9f","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.228.89:8443","comment":"https://x.com/drb_ra/status/1952776654188638684","timestamp":"1754413209","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9cda555a-af1e-54cc-93f7-36ea6e334cba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.236.228.89","comment":"https://x.com/drb_ra/status/1952776654188638684","timestamp":"1754413209","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"35376feb-2c09-55ff-89f1-c005e0bdbea9","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.112.227:31337","comment":"https://x.com/drb_ra/status/1952776793070379133","timestamp":"1754413242","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8cf2d66d-c8fe-5cfc-b209-85b2140d410d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.112.227","comment":"https://x.com/drb_ra/status/1952776793070379133","timestamp":"1754413242","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e1455c44-0111-58ec-ad6c-0da91701d392","type":"url","category":"Network activity","to_ids":true,"value":"http://47.95.209.123:9999","comment":"https://x.com/drb_ra/status/1952776932648460425","timestamp":"1754413276","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8db461be-60cb-5259-a7d3-a2f73509128f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.95.209.123","comment":"https://x.com/drb_ra/status/1952776932648460425","timestamp":"1754413276","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e36954c2-63f1-5dff-9ffa-182b9fa34355","type":"url","category":"Network activity","to_ids":true,"value":"https://43.248.78.104/fwlink","comment":"https://x.com/drb_ra/status/1952777071068909680","timestamp":"1754413309","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78d35c43-23ff-54b6-b727-4cc34c0dd372","type":"url","category":"Network activity","to_ids":true,"value":"http://43.248.78.104:4444","comment":"https://x.com/drb_ra/status/1952777071068909680","timestamp":"1754413309","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"57ef63a2-3383-5e0e-9c53-d1fde9f03c06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.248.78.104","comment":"https://x.com/drb_ra/status/1952777071068909680","timestamp":"1754413309","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a10dcaa5-508a-51cf-ba4b-2b0e43173cf9","type":"url","category":"Network activity","to_ids":true,"value":"http://47.237.120.206:8443","comment":"https://x.com/drb_ra/status/1952777210185523442","timestamp":"1754413342","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"27456407-3237-5693-ae4e-56052c914a0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.237.120.206","comment":"https://x.com/drb_ra/status/1952777210185523442","timestamp":"1754413342","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"03233da6-dd71-5c29-94b1-6dbd26f52b6c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.59.125.43:443","comment":"https://x.com/drb_ra/status/1952777350191411675","timestamp":"1754413375","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8f3e5215-fe7c-54f6-bc53-508c7ca38a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.59.125.43","comment":"https://x.com/drb_ra/status/1952777350191411675","timestamp":"1754413375","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f388c9b3-ec9f-5390-b805-5500c31f3f1d","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.246.91:4848","comment":"https://x.com/drb_ra/status/1952777488456699912","timestamp":"1754413408","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ef67b382-739e-545d-8c53-ce514c604212","type":"url","category":"Network activity","to_ids":true,"value":"http://113.45.177.81:8899","comment":"https://x.com/drb_ra/status/1952777627996951009","timestamp":"1754413442","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2aa3b396-befe-5aba-8e5a-b478450c30c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.45.177.81","comment":"https://x.com/drb_ra/status/1952777627996951009","timestamp":"1754413442","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"559344ae-84b9-552e-9de7-2112a4c2dad3","type":"url","category":"Network activity","to_ids":true,"value":"http://111.231.23.22:55321","comment":"https://x.com/drb_ra/status/1952777907115339923","timestamp":"1754413508","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f6c6a21d-978b-5a46-9a3b-98953632d725","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.231.23.22","comment":"https://x.com/drb_ra/status/1952777907115339923","timestamp":"1754413508","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"97edd9d9-04b3-5509-be9a-340f6ad42ed6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.105.65.102:4567","comment":"https://x.com/drb_ra/status/1952778046152270132","timestamp":"1754413541","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8235dfc7-c552-5597-80a2-a8e77c50c79a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.105.65.102","comment":"https://x.com/drb_ra/status/1952778046152270132","timestamp":"1754413541","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bb0f29fa-9728-53f9-81b8-4cf41675c467","type":"url","category":"Network activity","to_ids":true,"value":"http://135.125.241.45:80","comment":"https://x.com/drb_ra/status/1952778183968714940","timestamp":"1754413574","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9b63c14c-dc97-5631-9c6c-525d02755f5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"135.125.241.45","comment":"https://x.com/drb_ra/status/1952778183968714940","timestamp":"1754413574","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e750335a-474c-5b42-b438-ddec181dc96f","type":"url","category":"Network activity","to_ids":true,"value":"http://83.136.250.251:443","comment":"https://x.com/drb_ra/status/1952778322422751455","timestamp":"1754413607","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"166c242a-3a0f-5263-bb88-a5c6c35bc0ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.136.250.251","comment":"https://x.com/drb_ra/status/1952778322422751455","timestamp":"1754413607","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2efd4209-31f5-5dd0-b09d-8e923d2df925","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.217.107:1521","comment":"https://x.com/drb_ra/status/1952778460297830533","timestamp":"1754413640","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e6d396ac-2a50-54bd-94e9-220a0f37aa3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.217.107","comment":"https://x.com/drb_ra/status/1952778460297830533","timestamp":"1754413640","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"92e962f5-0501-55f2-9332-ba9bdf994c48","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.176:2404","comment":"https://x.com/drb_ra/status/1952778599221604740","timestamp":"1754413673","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"67c5b626-c031-5b41-a21d-bf4530fa4a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.176","comment":"https://x.com/drb_ra/status/1952778599221604740","timestamp":"1754413673","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"54583b82-9021-572b-a3fe-06923e974a9b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.88.91.136:2404","comment":"https://x.com/drb_ra/status/1952778737402962416","timestamp":"1754413706","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d703cc89-29a0-552c-9a16-f30fbc5de128","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.88.91.136","comment":"https://x.com/drb_ra/status/1952778737402962416","timestamp":"1754413706","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3a87111b-16e2-5830-bf55-6eb05243bf6a","type":"url","category":"Network activity","to_ids":true,"value":"http://216.70.72.152:2404","comment":"https://x.com/drb_ra/status/1952778876016316505","timestamp":"1754413739","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e18a096a-1317-5bc9-a8d7-60b4b43fda50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.70.72.152","comment":"https://x.com/drb_ra/status/1952778876016316505","timestamp":"1754413739","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"403d5a6f-5b95-5c58-9ef4-1db071e207d6","type":"url","category":"Network activity","to_ids":true,"value":"http://45.83.31.159:9322","comment":"https://x.com/drb_ra/status/1952779014558318794","timestamp":"1754413772","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"fc7e2539-a97d-53ef-91db-fcf03db4d20b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.83.31.159","comment":"https://x.com/drb_ra/status/1952779014558318794","timestamp":"1754413772","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e73d240a-6640-5277-a65d-3f41b05a5f75","type":"url","category":"Network activity","to_ids":true,"value":"http://16.162.4.4:3232","comment":"https://x.com/drb_ra/status/1952779152605532219","timestamp":"1754413805","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"87d083a5-7db4-59fa-bbfe-77c126f021b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.162.4.4","comment":"https://x.com/drb_ra/status/1952779152605532219","timestamp":"1754413805","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"3ac8e383-c5b4-561f-a814-4fe4255a286e","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.9.57:3232","comment":"https://x.com/drb_ra/status/1952779291327889878","timestamp":"1754413838","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"59579c9f-9ff8-5a69-87fa-dc4ffcbb6ab2","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.221.58:3232","comment":"https://x.com/drb_ra/status/1952779430415200761","timestamp":"1754413871","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"0ed8c222-c39c-5b87-a266-0b2bfd46e93e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.221.58","comment":"https://x.com/drb_ra/status/1952779430415200761","timestamp":"1754413871","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"db8f9048-826e-5148-857d-9b73b9077135","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.235.5:8080","comment":"https://x.com/drb_ra/status/1952779569468932448","timestamp":"1754413904","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"05a43abc-165b-598b-af1a-1620bf152666","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.235.5","comment":"https://x.com/drb_ra/status/1952779569468932448","timestamp":"1754413904","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9f0fd3c8-1ff2-5de6-a9da-852a5b386a2a","type":"url","category":"Network activity","to_ids":true,"value":"http://8.139.4.122:47486","comment":"https://x.com/drb_ra/status/1952779707058893117","timestamp":"1754413937","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f151f13e-2541-5689-abf3-a0951f129b1e","type":"url","category":"Network activity","to_ids":true,"value":"http://54.207.216.190:2080","comment":"https://x.com/drb_ra/status/1952779845634535806","timestamp":"1754413970","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"25870b0b-d5f3-594a-9225-02b305fc63f3","type":"url","category":"Network activity","to_ids":true,"value":"http://54.207.216.190:830","comment":"https://x.com/drb_ra/status/1952779985216766024","timestamp":"1754414004","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"36a7e5d5-4ba2-55cf-b248-f459aeb367ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.207.216.190","comment":"https://x.com/drb_ra/status/1952779985216766024","timestamp":"1754414004","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"234442ec-4ff3-5627-8045-81f8f6a31ca7","type":"url","category":"Network activity","to_ids":true,"value":"http://40.192.99.189:102","comment":"https://x.com/drb_ra/status/1952780124190822558","timestamp":"1754414037","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c511c0c3-4a4e-50af-b866-d3a6d984557e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.192.99.189","comment":"https://x.com/drb_ra/status/1952780124190822558","timestamp":"1754414037","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"54a0e8e3-6ad5-5a81-9885-c103aaf6affe","type":"url","category":"Network activity","to_ids":true,"value":"http://16.52.85.16:9999","comment":"https://x.com/drb_ra/status/1952780263458537524","timestamp":"1754414070","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c8e30a2d-bb0f-5430-bae3-f44cabfb28bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.52.85.16","comment":"https://x.com/drb_ra/status/1952780263458537524","timestamp":"1754414070","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a0c756be-14b2-590d-87dc-0766845da728","type":"url","category":"Network activity","to_ids":true,"value":"http://51.94.31.130:8883","comment":"https://x.com/drb_ra/status/1952780403661574475","timestamp":"1754414103","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a4924a54-69f9-5735-99f6-cf729047341e","type":"url","category":"Network activity","to_ids":true,"value":"http://51.94.31.130:1433","comment":"https://x.com/drb_ra/status/1952780541910004099","timestamp":"1754414136","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"34ad1e45-4d84-51ba-8f3c-0072f0c3544b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.94.31.130","comment":"https://x.com/drb_ra/status/1952780541910004099","timestamp":"1754414136","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"60875d5a-fc60-5c87-9d07-e4825b61b3a7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.78.64.124:2181","comment":"https://x.com/drb_ra/status/1952780680221384714","timestamp":"1754414169","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"224e91aa-6d9d-516d-bd72-01f2df8c4fe2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.78.64.124","comment":"https://x.com/drb_ra/status/1952780680221384714","timestamp":"1754414169","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8471894c-a98b-54e7-a47d-14942e965fac","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.229.8:587","comment":"https://x.com/drb_ra/status/1952780818398531872","timestamp":"1754414202","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"66783c35-188a-598e-aa11-f398625516f8","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.229.8:465","comment":"https://x.com/drb_ra/status/1952780957284438209","timestamp":"1754414235","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dc6e2377-f7c4-5f16-9b89-aa6436034fc7","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.229.8:443","comment":"https://x.com/drb_ra/status/1952781095730115047","timestamp":"1754414268","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d9fd1e1b-e906-5cd3-82c6-e25918ec5d7d","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.229.8:80","comment":"https://x.com/drb_ra/status/1952781234800615772","timestamp":"1754414301","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0a9b16a3-287c-5d8b-b9b4-ad70c923799d","type":"url","category":"Network activity","to_ids":true,"value":"http://147.182.229.8:25","comment":"https://x.com/drb_ra/status/1952781380225527874","timestamp":"1754414336","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6fc4461f-f447-5946-a462-996fc0719618","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.182.229.8","comment":"https://x.com/drb_ra/status/1952781380225527874","timestamp":"1754414336","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b983f77b-5ded-54e1-bbc3-70e492f95e60","type":"url","category":"Network activity","to_ids":true,"value":"http://46.62.163.19:25","comment":"https://x.com/drb_ra/status/1952781518713024860","timestamp":"1754414369","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8917145c-216f-5d4e-a269-3677c268392c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.62.163.19","comment":"https://x.com/drb_ra/status/1952781518713024860","timestamp":"1754414369","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"300d5411-6c66-5615-a53f-46104119e8fd","type":"url","category":"Network activity","to_ids":true,"value":"http://168.231.116.87:25","comment":"https://x.com/drb_ra/status/1952781658647650330","timestamp":"1754414403","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8cc3e89d-979e-53f7-bf94-daa72ea06175","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.231.116.87","comment":"https://x.com/drb_ra/status/1952781658647650330","timestamp":"1754414403","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"59ef445a-35b2-51cf-bd70-4d371eee359c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.110.51.222:18088","comment":"https://x.com/drb_ra/status/1952781797772644793","timestamp":"1754414436","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"8581ad2d-887c-5f4c-8dde-66a559c70bf9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.110.51.222","comment":"https://x.com/drb_ra/status/1952781797772644793","timestamp":"1754414436","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"e247cfdb-b479-5342-b35d-00bd5d6b4647","type":"url","category":"Network activity","to_ids":true,"value":"http://54.163.75.207:443","comment":"https://x.com/drb_ra/status/1952781936377700364","timestamp":"1754414469","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ce6a6c36-06b9-5fbf-ad12-8069938566eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.163.75.207","comment":"https://x.com/drb_ra/status/1952781936377700364","timestamp":"1754414469","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"e0f63273-a39c-5399-b04c-5526349c7842","type":"url","category":"Network activity","to_ids":true,"value":"http://52.204.245.211:443","comment":"https://x.com/drb_ra/status/1952782076580659494","timestamp":"1754414502","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"27f370b6-8a04-5295-be2f-a8fb6b916961","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.204.245.211","comment":"https://x.com/drb_ra/status/1952782076580659494","timestamp":"1754414502","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fe6f8b29-cfce-586a-9a77-6dfb7638b5f1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.224.153.87:55560","comment":"https://x.com/drb_ra/status/1952782215428837561","timestamp":"1754414535","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"52f7d69a-a1c0-5e25-95f4-2f78ccd341e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.224.153.87","comment":"https://x.com/drb_ra/status/1952782215428837561","timestamp":"1754414535","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1271b05e-7378-5e8d-859a-4d2950862b84","type":"url","category":"Network activity","to_ids":true,"value":"http://173.184.240.29:631","comment":"https://x.com/drb_ra/status/1952782353731862883","timestamp":"1754414568","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f520bb6d-ca6f-5c6f-8c0a-a308f7b22016","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.184.240.29","comment":"https://x.com/drb_ra/status/1952782353731862883","timestamp":"1754414568","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"05dbbb9b-039d-51cc-9e7d-bde11dec86c5","type":"url","category":"Network activity","to_ids":true,"value":"http://45.156.27.209:7443","comment":"https://x.com/drb_ra/status/1952782492336820646","timestamp":"1754414601","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"54b3ddf8-f66c-573c-b6fd-93f9ba73b328","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.156.27.209","comment":"https://x.com/drb_ra/status/1952782492336820646","timestamp":"1754414601","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"2cf8ef6e-a726-569c-83e4-c838dcf7dd50","type":"url","category":"Network activity","to_ids":true,"value":"http://52.194.178.241:80","comment":"https://x.com/drb_ra/status/1952782630937665541","timestamp":"1754414634","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"1bc321d8-f288-59e9-b668-26d60bcd5d27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.194.178.241","comment":"https://x.com/drb_ra/status/1952782630937665541","timestamp":"1754414634","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"9515fe9a-3ff6-5b7e-bbc0-df2d39a21683","type":"url","category":"Network activity","to_ids":true,"value":"http://106.12.174.164:31337","comment":"https://x.com/drb_ra/status/1952782770591142375","timestamp":"1754414668","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"60e8db3a-8ae6-52a1-85d2-452122d84c8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.12.174.164","comment":"https://x.com/drb_ra/status/1952782770591142375","timestamp":"1754414668","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"968607a0-ede2-5aa9-89ae-8190d32ee40f","type":"domain","category":"Network activity","to_ids":true,"value":"cnm.mom","comment":"https://x.com/drb_ra/status/1952782910790009170","timestamp":"1754414701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b835f9f7-eb6a-508b-b026-11bd0feaaff8","type":"url","category":"Network activity","to_ids":true,"value":"https://cnm.mom/wc/58462514417","comment":"https://x.com/drb_ra/status/1952782910790009170","timestamp":"1754414701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"787130a2-052f-5686-9c23-e4dbc500775b","type":"url","category":"Network activity","to_ids":true,"value":"http://137.131.24.201:8081","comment":"https://x.com/drb_ra/status/1952782910790009170","timestamp":"1754414701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"666d4eb6-b270-56fd-b4ac-b7e143ba8722","type":"url","category":"Network activity","to_ids":true,"value":"http://120.46.72.74:666","comment":"https://x.com/drb_ra/status/1952783050011537761","timestamp":"1754414734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"084054f1-ad0e-5840-8359-a70d6fc45322","type":"url","category":"Network activity","to_ids":true,"value":"https://120.46.72.74/dot.gif","comment":"https://x.com/drb_ra/status/1952783050011537761","timestamp":"1754414734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ecc0fc3d-8bf2-5d06-8976-55911ca1e60f","type":"url","category":"Network activity","to_ids":true,"value":"http://146.56.225.103:80","comment":"https://x.com/drb_ra/status/1952783188629004465","timestamp":"1754414767","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fd8829b0-3f0c-5c73-8f5d-056d8521edb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.56.225.103","comment":"https://x.com/drb_ra/status/1952783188629004465","timestamp":"1754414767","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a88901ce-3681-5614-b8e8-e755bbbf5fc7","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.187.223:8088","comment":"https://x.com/drb_ra/status/1952783327422738488","timestamp":"1754414800","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8b3dbe4c-3796-5211-b4e1-681bb2bcde32","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.187.223","comment":"https://x.com/drb_ra/status/1952783327422738488","timestamp":"1754414800","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2bea1ba0-3606-51c5-84d6-685f4edae71c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.242.129.79:2083","comment":"https://x.com/drb_ra/status/1952783469320307018","timestamp":"1754414834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bb8fbeba-28a0-587b-a158-2055fe29f8f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.242.129.79","comment":"https://x.com/drb_ra/status/1952783469320307018","timestamp":"1754414834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3632b2c9-b235-54d7-b1f1-87ebb20a1738","type":"url","category":"Network activity","to_ids":true,"value":"http://120.46.72.74:4444","comment":"https://x.com/drb_ra/status/1952783610555023455","timestamp":"1754414868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d682ba0b-1b04-50ae-9653-60719c843db4","type":"url","category":"Network activity","to_ids":true,"value":"http://89.187.25.171:30233","comment":"https://x.com/drb_ra/status/1952783750099501155","timestamp":"1754414901","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b6e40821-d0a7-54b2-aaa2-0956b5cb7b97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.187.25.171","comment":"https://x.com/drb_ra/status/1952783750099501155","timestamp":"1754414901","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8567a39e-6627-5839-8f04-447298bea7c0","type":"url","category":"Network activity","to_ids":true,"value":"http://69.5.189.18:2404","comment":"https://x.com/drb_ra/status/1952783889337844174","timestamp":"1754414934","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"54ebc52d-7158-5734-9c5a-578a8fe54807","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.189.18","comment":"https://x.com/drb_ra/status/1952783889337844174","timestamp":"1754414934","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"73260414-4db1-58f9-b422-9592a72ac7f8","type":"url","category":"Network activity","to_ids":true,"value":"http://177.255.89.53:2404","comment":"https://x.com/drb_ra/status/1952784028525871527","timestamp":"1754414968","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8b688934-d31a-5dda-b61d-a8275cf47a7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"177.255.89.53","comment":"https://x.com/drb_ra/status/1952784028525871527","timestamp":"1754414968","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0703b5ae-1dcb-5ba5-b6f7-941eb5d05a2c","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.101.98:2404","comment":"https://x.com/drb_ra/status/1952784168653361305","timestamp":"1754415001","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"62f73f01-9af8-5769-93fe-03c5f622b1d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.101.98","comment":"https://x.com/drb_ra/status/1952784168653361305","timestamp":"1754415001","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"90a3a98f-4bda-5533-a4f6-7fba623d4276","type":"url","category":"Network activity","to_ids":true,"value":"http://43.230.163.205:2096","comment":"https://x.com/drb_ra/status/1952784308785021109","timestamp":"1754415034","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"3d3653fc-ca0c-5cc7-a50b-8c1f8e9e1878","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.230.163.205","comment":"https://x.com/drb_ra/status/1952784308785021109","timestamp":"1754415034","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f274e248-eb7f-5887-8b66-d60633d1d706","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.115.244:8808","comment":"https://x.com/drb_ra/status/1952784447553642731","timestamp":"1754415067","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"84853da5-83e1-576d-9f57-0f2368d1a1fc","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.115.244:80","comment":"https://x.com/drb_ra/status/1952784586573754589","timestamp":"1754415101","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"24f15b55-f37b-526d-a50c-03f7f1067307","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.115.244","comment":"https://x.com/drb_ra/status/1952784586573754589","timestamp":"1754415101","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9a345f54-c9e9-5dae-afbf-f2f2630a1b4c","type":"url","category":"Network activity","to_ids":true,"value":"http://171.250.25.56:8808","comment":"https://x.com/drb_ra/status/1952784725321437583","timestamp":"1754415134","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"abb377e3-f534-58f2-ae87-c6bbc2c73453","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.250.25.56","comment":"https://x.com/drb_ra/status/1952784725321437583","timestamp":"1754415134","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6ef05965-7323-56fb-a2b8-02bc6cd39c0c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.167.61.249:8808","comment":"https://x.com/drb_ra/status/1952784863204925742","timestamp":"1754415167","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a0064a80-3bae-5aa0-a859-4a8a87f14408","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.167.61.249","comment":"https://x.com/drb_ra/status/1952784863204925742","timestamp":"1754415167","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"1aaab790-a533-55f5-8f80-3c9deb3d6b27","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.72.103:8808","comment":"https://x.com/drb_ra/status/1952785002661281906","timestamp":"1754415200","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c26e1468-a3df-5dcd-8559-ae71dc63f497","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.72.103","comment":"https://x.com/drb_ra/status/1952785002661281906","timestamp":"1754415200","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"df53af55-423e-58f7-ac94-a49b95cbf59e","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.53.88:443","comment":"https://x.com/drb_ra/status/1952785141849379137","timestamp":"1754415233","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"be52e2d8-f713-5aa8-968f-03b43c177698","type":"url","category":"Network activity","to_ids":true,"value":"http://13.248.198.19:443","comment":"https://x.com/drb_ra/status/1952785280437518614","timestamp":"1754415266","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ceb4b217-ad38-50b0-9842-989e13f6bbd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.248.198.19","comment":"https://x.com/drb_ra/status/1952785280437518614","timestamp":"1754415266","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1e91bb13-9df1-5a62-bfbb-44572a96e407","type":"url","category":"Network activity","to_ids":true,"value":"http://63.40.48.152:50040","comment":"https://x.com/drb_ra/status/1952785418543395070","timestamp":"1754415299","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"29517287-8f9a-5998-b022-6fd8e88a40d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.40.48.152","comment":"https://x.com/drb_ra/status/1952785418543395070","timestamp":"1754415299","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f123d242-f78e-552b-b794-12e6db374c82","type":"url","category":"Network activity","to_ids":true,"value":"http://194.34.97.38:8443","comment":"https://x.com/drb_ra/status/1952785557110612313","timestamp":"1754415332","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"51f268c6-eb78-516c-b24e-bc990f10e608","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.34.97.38","comment":"https://x.com/drb_ra/status/1952785557110612313","timestamp":"1754415332","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b534bbe1-5690-5e9d-8b1e-f3ac4483b9d8","type":"url","category":"Network activity","to_ids":true,"value":"http://34.249.83.124:443","comment":"https://x.com/drb_ra/status/1952785700580933840","timestamp":"1754415366","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8f921a0a-849a-55a1-be6c-39312d8daafd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.249.83.124","comment":"https://x.com/drb_ra/status/1952785700580933840","timestamp":"1754415366","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"faeac6f5-9c76-504d-8998-6574726ce874","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.30.177:80","comment":"https://x.com/drb_ra/status/1952785842247815620","timestamp":"1754415400","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"76e53759-dec0-5a4e-8be6-9884852e592c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.30.177","comment":"https://x.com/drb_ra/status/1952785842247815620","timestamp":"1754415400","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b388e4d4-cac3-5bef-a7f9-72cbdab0c5e6","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.97.81:53","comment":"https://x.com/drb_ra/status/1952785983314760171","timestamp":"1754415434","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"620aa712-c46d-55d1-b4a8-747ea8185d3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.89.97.81","comment":"https://x.com/drb_ra/status/1952785983314760171","timestamp":"1754415434","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"19b23076-af3b-56d5-82d8-1589a4b60108","type":"url","category":"Network activity","to_ids":true,"value":"http://120.46.72.74:8080","comment":"https://x.com/drb_ra/status/1952786122754478576","timestamp":"1754415467","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"95ea1c07-1f93-5203-a444-03a0f6cff83a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.46.72.74","comment":"https://x.com/drb_ra/status/1952786122754478576","timestamp":"1754415467","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e8abff7a-bcd6-51b8-9b27-2288d0c4a009","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.131.115:8080","comment":"https://x.com/drb_ra/status/1952786263494283703","timestamp":"1754415500","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d77a9591-ee1d-5dd6-a405-78b270d00de0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.131.115","comment":"https://x.com/drb_ra/status/1952786263494283703","timestamp":"1754415500","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38e5995b-7628-5aa1-832a-387eab62f02a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.103.62.252","comment":"https://x.com/drb_ra/status/1952786263494283703","timestamp":"1754415500","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"80c15bb5-6289-524b-b758-e881c2f7912d","type":"url","category":"Network activity","to_ids":true,"value":"https://39.103.62.252/admin/sub/Server/shell/API/0TK1L8I7WECP58B","comment":"https://x.com/drb_ra/status/1952786263494283703","timestamp":"1754415500","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c1aac890-7b12-5ba0-a782-d8aba91afccb","type":"url","category":"Network activity","to_ids":true,"value":"https://137.131.24.201/s/58462514417","comment":"https://x.com/drb_ra/status/1952786403672162571","timestamp":"1754415534","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a06b84b3-695b-556f-a4c7-19e5f6a8b793","type":"url","category":"Network activity","to_ids":true,"value":"http://137.131.24.201:8080","comment":"https://x.com/drb_ra/status/1952786403672162571","timestamp":"1754415534","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"55ed7f4f-4271-52d4-a202-9b5dd61f8612","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.131.24.201","comment":"https://x.com/drb_ra/status/1952786403672162571","timestamp":"1754415534","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"869cf2a4-1923-516b-92c4-4ad5b7cec3a5","type":"url","category":"Network activity","to_ids":true,"value":"https://cnm.mom/s/58462514417","comment":"https://x.com/drb_ra/status/1952786403672162571","timestamp":"1754415534","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"95b1f658-9632-503e-a972-7478f6006599","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.94.41:80","comment":"https://x.com/drb_ra/status/1952786542700757289","timestamp":"1754415567","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"37a6b0a8-ec65-5c1a-bfea-cca5572be712","type":"url","category":"Network activity","to_ids":true,"value":"https://47.99.94.41/pixel","comment":"https://x.com/drb_ra/status/1952786542700757289","timestamp":"1754415567","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"84f88458-5355-5da1-bb6b-9f7afff5f91f","type":"url","category":"Network activity","to_ids":true,"value":"https://156.238.233.49/pixel.gif","comment":"https://x.com/drb_ra/status/1952786685827109192","timestamp":"1754415601","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a26139e8-35f5-5502-8274-e880b28c55a1","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.233.49:8000","comment":"https://x.com/drb_ra/status/1952786685827109192","timestamp":"1754415601","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c5196b2e-036a-54b4-b23f-9a93277654f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.233.49","comment":"https://x.com/drb_ra/status/1952786685827109192","timestamp":"1754415601","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d1046cbd-4bbd-513f-9dcf-62406dc24e93","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.94.41:443","comment":"https://x.com/drb_ra/status/1952786826109874300","timestamp":"1754415635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"df577594-d9dc-5a9e-b3ca-0b3f5f72137f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.94.41","comment":"https://x.com/drb_ra/status/1952786826109874300","timestamp":"1754415635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7a8364cf-b080-58af-b9b8-4d6f4a88030d","type":"url","category":"Network activity","to_ids":true,"value":"http://174.138.33.113:8080","comment":"https://x.com/drb_ra/status/1952786966040170569","timestamp":"1754415668","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"af9fbaba-6f4e-5d02-8e14-6fb3aa8bf60a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"174.138.33.113","comment":"https://x.com/drb_ra/status/1952786966040170569","timestamp":"1754415668","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"f2c9f719-c774-5703-a08f-96a93e321d21","type":"url","category":"Network activity","to_ids":true,"value":"http://209.151.154.121:443","comment":"https://x.com/drb_ra/status/1952787107417624801","timestamp":"1754415702","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6f440eb1-5ad6-59f9-be2b-4012bbbad87d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.151.154.121","comment":"https://x.com/drb_ra/status/1952787107417624801","timestamp":"1754415702","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f5fbc8e4-0830-5890-a854-b876e5ba4915","type":"url","category":"Network activity","to_ids":true,"value":"http://155.2.192.215:2404","comment":"https://x.com/drb_ra/status/1952787247364784246","timestamp":"1754415735","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"53a19fea-b327-59de-bfe8-634cb4cfb4e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.2.192.215","comment":"https://x.com/drb_ra/status/1952787247364784246","timestamp":"1754415735","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d3cbaa31-8e92-5b49-80aa-d4bc25747348","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.81.31:2404","comment":"https://x.com/drb_ra/status/1952787386410156055","timestamp":"1754415768","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c41b5f08-b4b3-5d29-8427-7e19e6c710a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.81.31","comment":"https://x.com/drb_ra/status/1952787386410156055","timestamp":"1754415768","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8610fad0-ba78-5119-a4ee-6d4bbb4de956","type":"url","category":"Network activity","to_ids":true,"value":"http://109.248.144.169:8088","comment":"https://x.com/drb_ra/status/1952787524109115453","timestamp":"1754415801","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3d96d843-fb2c-503c-b13d-18c3fc835296","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.248.144.169","comment":"https://x.com/drb_ra/status/1952787524109115453","timestamp":"1754415801","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"5a519e8f-d24e-5496-99df-35b4a36b7d72","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.36:5000","comment":"https://x.com/drb_ra/status/1952787662324040015","timestamp":"1754415834","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7e292ba2-6122-5d1c-bf37-8dfa195db48c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.36","comment":"https://x.com/drb_ra/status/1952787662324040015","timestamp":"1754415834","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0c98bc47-60a5-515f-82af-42a4a544f89a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.208.14:2404","comment":"https://x.com/drb_ra/status/1952787801369387336","timestamp":"1754415867","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8bae213a-3a37-5fc1-a654-044245fe0963","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.208.14","comment":"https://x.com/drb_ra/status/1952787801369387336","timestamp":"1754415867","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"649329d2-0f10-58f8-bdff-f5ea8baca9c2","type":"url","category":"Network activity","to_ids":true,"value":"http://166.88.132.69:2404","comment":"https://x.com/drb_ra/status/1952787940691603908","timestamp":"1754415900","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ede4dc00-4b58-5457-abbe-decc397eec73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.88.132.69","comment":"https://x.com/drb_ra/status/1952787940691603908","timestamp":"1754415900","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e5510ec2-47ea-5a71-8124-e66b5543ee9d","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.190.11:16547","comment":"https://x.com/drb_ra/status/1952788078965240243","timestamp":"1754415933","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e85e1295-ff3a-5ef4-b107-90db4abc675a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.190.11","comment":"https://x.com/drb_ra/status/1952788078965240243","timestamp":"1754415933","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1c771ff0-8109-5d96-ae72-30e5ba223e9a","type":"url","category":"Network activity","to_ids":true,"value":"http://46.183.222.118:4477","comment":"https://x.com/drb_ra/status/1952788218237141417","timestamp":"1754415966","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"db4364f8-98d0-5c66-b970-383d70493ead","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.183.222.118","comment":"https://x.com/drb_ra/status/1952788218237141417","timestamp":"1754415966","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"33fa22d3-f23e-5c3b-b52a-ad49810397c7","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.151.38:3232","comment":"https://x.com/drb_ra/status/1952788357349528047","timestamp":"1754416000","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"cedda20f-68d6-5b8d-a5b1-9dbe0f9624ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.151.38","comment":"https://x.com/drb_ra/status/1952788357349528047","timestamp":"1754416000","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"991e32c8-47af-545d-ae68-4ef8fc5c2430","type":"url","category":"Network activity","to_ids":true,"value":"http://45.63.20.155:8080","comment":"https://x.com/drb_ra/status/1952788495858110844","timestamp":"1754416033","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a733cb7a-a3cc-5450-9918-b7d6335badbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.63.20.155","comment":"https://x.com/drb_ra/status/1952788495858110844","timestamp":"1754416033","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ef00c290-84d4-5e57-af9c-53095f08e49d","type":"url","category":"Network activity","to_ids":true,"value":"http://13.208.190.18:5061","comment":"https://x.com/drb_ra/status/1952788634311995635","timestamp":"1754416066","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b385c94c-8869-5d9e-af77-dbbcec4617de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.208.190.18","comment":"https://x.com/drb_ra/status/1952788634311995635","timestamp":"1754416066","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"972e9c97-aa9e-5ec0-a25e-e05cfbdbfddc","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.71.245:8808","comment":"https://x.com/drb_ra/status/1952788772241715295","timestamp":"1754416099","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"224d9c34-c913-5cd8-a2f0-5302f5b0e967","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.71.245","comment":"https://x.com/drb_ra/status/1952788772241715295","timestamp":"1754416099","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c77dd287-1cb1-5a03-b36c-b5a06357cead","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.48.221:7645","comment":"https://x.com/drb_ra/status/1952788911077441806","timestamp":"1754416132","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"73cf89a6-0655-5393-8668-8d014bd0c6f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.48.221","comment":"https://x.com/drb_ra/status/1952788911077441806","timestamp":"1754416132","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"0c6d4bfd-77a1-592e-935e-21fb6d91fd6d","type":"url","category":"Network activity","to_ids":true,"value":"http://77.233.222.37:443","comment":"https://x.com/drb_ra/status/1952789049032220821","timestamp":"1754416165","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d02d2a98-5ed1-5c59-bc57-f12a6723e147","type":"url","category":"Network activity","to_ids":true,"value":"http://77.233.222.37:80","comment":"https://x.com/drb_ra/status/1952789187083595903","timestamp":"1754416197","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ab1f80bd-9781-507c-bcc3-79d7a61808bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.233.222.37","comment":"https://x.com/drb_ra/status/1952789187083595903","timestamp":"1754416197","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"822ed81e-54f0-556d-bceb-bcd8d2b9d3ea","type":"url","category":"Network activity","to_ids":true,"value":"http://3.73.36.139:443","comment":"https://x.com/drb_ra/status/1952789324543504833","timestamp":"1754416230","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7691be1b-5f63-5fde-9205-ec71276fd5d8","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.128.81:80","comment":"https://x.com/drb_ra/status/1952789464142504285","timestamp":"1754416263","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"c45c577a-887d-56cd-8136-72de6557ad87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.128.81","comment":"https://x.com/drb_ra/status/1952789464142504285","timestamp":"1754416263","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"eb639c52-e523-5260-b043-d1acc58d530e","type":"url","category":"Network activity","to_ids":true,"value":"http://35.171.186.126:80","comment":"https://x.com/drb_ra/status/1952789604362576326","timestamp":"1754416297","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"824b5c52-7255-5fc8-b48c-430e76d34489","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.171.186.126","comment":"https://x.com/drb_ra/status/1952789604362576326","timestamp":"1754416297","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"216a86e2-6d62-5575-b38d-59d2e59e81bd","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.77.155:8888","comment":"https://x.com/drb_ra/status/1952789742023520641","timestamp":"1754416330","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"bf39b25f-8370-55f7-a054-923378791bec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.77.155","comment":"https://x.com/drb_ra/status/1952789742023520641","timestamp":"1754416330","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"842333b7-c7b4-545b-9342-d033fa1b2c22","type":"url","category":"Network activity","to_ids":true,"value":"http://186.105.118.38:443","comment":"https://x.com/drb_ra/status/1952789881111064863","timestamp":"1754416363","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"41010be5-d31d-525d-b153-4d2fd4d1f4a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.105.118.38","comment":"https://x.com/drb_ra/status/1952789881111064863","timestamp":"1754416363","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"82204fdd-a6f9-5792-bd96-b96b44fdd2ad","type":"url","category":"Network activity","to_ids":true,"value":"http://13.39.23.222:443","comment":"https://x.com/drb_ra/status/1952790019443442116","timestamp":"1754416396","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"68ed9240-6cdc-5af9-8cf0-4dea0dbc3d12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.39.23.222","comment":"https://x.com/drb_ra/status/1952790019443442116","timestamp":"1754416396","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"53f5ac51-b83d-5bac-8873-2e816b3c46c7","type":"url","category":"Network activity","to_ids":true,"value":"http://15.207.240.147:443","comment":"https://x.com/drb_ra/status/1952790157415072101","timestamp":"1754416429","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b6537296-c046-5777-a906-649c0894a6d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.207.240.147","comment":"https://x.com/drb_ra/status/1952790157415072101","timestamp":"1754416429","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"17b61de8-7397-56c9-9e63-d68c142b9e94","type":"url","category":"Network activity","to_ids":true,"value":"http://43.141.131.169:10250","comment":"https://x.com/drb_ra/status/1952790295487115453","timestamp":"1754416462","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c531f4d4-7f43-5a4c-9943-968ae1dda666","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.141.131.169","comment":"https://x.com/drb_ra/status/1952790295487115453","timestamp":"1754416462","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a2cecfc4-cf32-58db-96a7-fad024699219","type":"url","category":"Network activity","to_ids":true,"value":"http://194.87.82.8:7443","comment":"https://x.com/drb_ra/status/1952790434524348722","timestamp":"1754416495","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c8eed30a-c262-50c9-a375-7fe1d772b0ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.87.82.8","comment":"https://x.com/drb_ra/status/1952790434524348722","timestamp":"1754416495","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"31752fb2-18fc-54fd-8b3d-353a20af4362","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.185.9:8443","comment":"https://x.com/drb_ra/status/1952790574563819923","timestamp":"1754416528","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"5d26eab8-72be-5009-8f62-05b17ece6941","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.185.9","comment":"https://x.com/drb_ra/status/1952790574563819923","timestamp":"1754416528","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"d678c6b9-6733-5fee-bf6a-7b1d10160f51","type":"url","category":"Network activity","to_ids":true,"value":"http://109.172.91.231:443","comment":"https://x.com/drb_ra/status/1952790712807993503","timestamp":"1754416561","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"59fa1bcb-2b05-59b1-b365-4d9dab884895","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.172.91.231","comment":"https://x.com/drb_ra/status/1952790712807993503","timestamp":"1754416561","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"6ef1dcaf-dd25-5b40-a1ab-53e2eccb64e6","type":"url","category":"Network activity","to_ids":true,"value":"http://192.241.138.75:31337","comment":"https://x.com/drb_ra/status/1952790853434654755","timestamp":"1754416595","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"25e9f05a-0615-5256-93d7-118f4b7fafb8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.241.138.75","comment":"https://x.com/drb_ra/status/1952790853434654755","timestamp":"1754416595","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8cd4a350-6a00-5106-bba1-4e9b0f5a69ec","type":"url","category":"Network activity","to_ids":true,"value":"http://64.227.26.223:443","comment":"https://x.com/drb_ra/status/1952790992320679995","timestamp":"1754416628","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bb91ff42-f40e-529a-ac41-f75ae26dff81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.227.26.223","comment":"https://x.com/drb_ra/status/1952790992320679995","timestamp":"1754416628","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"deb4ab0e-f537-58cd-ade7-1c96f10669b6","type":"url","category":"Network activity","to_ids":true,"value":"http://185.177.239.56:31337","comment":"https://x.com/drb_ra/status/1952791130179027164","timestamp":"1754416661","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5a4b7cfe-13b8-5ed5-b9d2-ff63f33350dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.177.239.56","comment":"https://x.com/drb_ra/status/1952791130179027164","timestamp":"1754416661","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ceb142a2-0f51-52f8-b5bf-5ee29e99581d","type":"url","category":"Network activity","to_ids":true,"value":"http://192.159.99.71:8888","comment":"https://x.com/drb_ra/status/1952791269660586491","timestamp":"1754416694","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b28b52d5-91ec-55c4-85f7-0925aceff6dc","type":"url","category":"Network activity","to_ids":true,"value":"http://192.159.99.71:31337","comment":"https://x.com/drb_ra/status/1952791407925838019","timestamp":"1754416727","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ab517ca6-5f38-5790-a9e6-53d0a34d23bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.159.99.71","comment":"https://x.com/drb_ra/status/1952791407925838019","timestamp":"1754416727","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b4a4ac10-8fd3-5365-9bec-7335a3ffc117","type":"domain","category":"Network activity","to_ids":true,"value":"trth13r.weebly.com","comment":"https://x.com/urldna_bot/status/1952791746821206376","timestamp":"1754416808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c6167a09-4079-5b57-acce-634b714d4dad","type":"url","category":"Network activity","to_ids":true,"value":"https://trth13r.weebly.com","comment":"https://x.com/urldna_bot/status/1952791746821206376","timestamp":"1754416808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f8584174-0098-5320-a9ca-24c71b339322","type":"url","category":"Network activity","to_ids":true,"value":"http://47.121.219.193:80","comment":"https://x.com/drb_ra/status/1952803712692289814","timestamp":"1754419661","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"00fbf463-7382-5266-b324-4d19ae6f559a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.219.193","comment":"https://x.com/drb_ra/status/1952803712692289814","timestamp":"1754419661","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7e4012d0-1a2e-53cb-8a6f-3d213be04358","type":"url","category":"Network activity","to_ids":true,"value":"http://134.199.189.198:587","comment":"https://x.com/drb_ra/status/1952803851448311851","timestamp":"1754419694","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"707451f7-3832-5e3e-8ba1-cd816debe372","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.199.189.198","comment":"https://x.com/drb_ra/status/1952803851448311851","timestamp":"1754419694","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d26e574a-23ed-52bd-bb79-3368a0787a4b","type":"url","category":"Network activity","to_ids":true,"value":"http://54.250.245.179:80","comment":"https://x.com/drb_ra/status/1952803989294055705","timestamp":"1754419727","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"eb716678-49ab-5ec6-8b5a-70ad1f0fe608","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.250.245.179","comment":"https://x.com/drb_ra/status/1952803989294055705","timestamp":"1754419727","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b58efd10-e1be-577e-9619-78ad5c32ca1b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.221.64.110:80","comment":"https://x.com/drb_ra/status/1952804127848779906","timestamp":"1754419760","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"77dd52ce-8c74-54b7-ab79-8a54595738f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.221.64.110","comment":"https://x.com/drb_ra/status/1952804127848779906","timestamp":"1754419760","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"81ebb68b-6804-5fcb-8edd-08127d0698b2","type":"url","category":"Network activity","to_ids":true,"value":"http://191.91.178.101:8081","comment":"https://x.com/drb_ra/status/1952804265338012035","timestamp":"1754419792","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"6ccb16d5-f43c-5901-a99b-8c03583d4238","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.91.178.101","comment":"https://x.com/drb_ra/status/1952804265338012035","timestamp":"1754419792","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"535ca50a-f799-5a5e-8007-b388dca88d1a","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.72.203:443","comment":"https://x.com/drb_ra/status/1952804404496638045","timestamp":"1754419826","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2aac4321-a49e-5331-b845-ca4aa7efb329","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.118.27:443","comment":"https://x.com/drb_ra/status/1952804542870892716","timestamp":"1754419859","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"49c419b6-8b50-501c-afd7-e2520e8e8ecc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.118.27","comment":"https://x.com/drb_ra/status/1952804542870892716","timestamp":"1754419859","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a6cc5f85-9f6d-5849-ad2b-7b55589c69e4","type":"url","category":"Network activity","to_ids":true,"value":"http://98.86.138.98:443","comment":"https://x.com/drb_ra/status/1952804681832644957","timestamp":"1754419892","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"228519ad-027a-5aa9-bba6-03deb95375da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.86.138.98","comment":"https://x.com/drb_ra/status/1952804681832644957","timestamp":"1754419892","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4c44079e-9f1a-5a2a-8399-467f6726fe86","type":"url","category":"Network activity","to_ids":true,"value":"http://51.20.53.225:443","comment":"https://x.com/drb_ra/status/1952804819032318053","timestamp":"1754419924","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f10a71b0-cea2-594f-9ecd-ae96abbcf668","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.20.53.225","comment":"https://x.com/drb_ra/status/1952804819032318053","timestamp":"1754419924","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7c25597f-29bd-5d82-900e-425f4440aeb6","type":"url","category":"Network activity","to_ids":true,"value":"http://107.23.225.159:443","comment":"https://x.com/drb_ra/status/1952804957507248241","timestamp":"1754419957","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c7bdc06c-5520-5a60-b61b-24f13df5406a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.23.225.159","comment":"https://x.com/drb_ra/status/1952804957507248241","timestamp":"1754419957","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"06fb9f93-d60f-5458-8113-51ba1672a9e4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.229.59.84:443","comment":"https://x.com/drb_ra/status/1952805095864774871","timestamp":"1754419990","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"d09511b8-bb0d-5d3e-b0c9-9046c1b5cb3e","type":"url","category":"Network activity","to_ids":true,"value":"http://213.163.201.241:7443","comment":"https://x.com/drb_ra/status/1952805237808636219","timestamp":"1754420024","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"51dcbc7f-50a6-5e73-bea2-13a5d71f6aa6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.163.201.241","comment":"https://x.com/drb_ra/status/1952805237808636219","timestamp":"1754420024","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"98e74611-410c-5616-8e5e-c8b16f253ade","type":"url","category":"Network activity","to_ids":true,"value":"http://129.212.184.123:7443","comment":"https://x.com/drb_ra/status/1952805377482850738","timestamp":"1754420058","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e8321d4d-2133-52a6-baf1-479de84d68ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.212.184.123","comment":"https://x.com/drb_ra/status/1952805377482850738","timestamp":"1754420058","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"804b45c9-9db8-523d-a8f4-ec61e5470ee6","type":"url","category":"Network activity","to_ids":true,"value":"http://65.38.121.223:7443","comment":"https://x.com/drb_ra/status/1952805515630653942","timestamp":"1754420090","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f0b7d39e-7131-52ce-bbad-886bdd6494ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.38.121.223","comment":"https://x.com/drb_ra/status/1952805515630653942","timestamp":"1754420090","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0bdf41ec-abfc-5f06-9c6b-3fcfa7487718","type":"url","category":"Network activity","to_ids":true,"value":"http://176.9.181.194:4443","comment":"https://x.com/drb_ra/status/1952806161692148132","timestamp":"1754420244","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5732f84f-3a7e-5b4b-b3c3-e9ad48acd745","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.9.181.194","comment":"https://x.com/drb_ra/status/1952806161692148132","timestamp":"1754420244","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0770a826-421e-5e75-bdec-805448ddaad2","type":"url","category":"Network activity","to_ids":true,"value":"http://15.204.9.214:11601","comment":"https://x.com/drb_ra/status/1952806299286024645","timestamp":"1754420277","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"463ea546-04c6-5f70-aeee-f2bb2c59f0c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.204.9.214","comment":"https://x.com/drb_ra/status/1952806299286024645","timestamp":"1754420277","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ac926bb3-f5b2-531e-a9de-51a1d9a63ce1","type":"url","category":"Network activity","to_ids":true,"value":"http://15.236.226.221:443","comment":"https://x.com/drb_ra/status/1952806438390383041","timestamp":"1754420310","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3a139566-3a44-500a-9f2a-ef4d59fec204","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.236.226.221","comment":"https://x.com/drb_ra/status/1952806438390383041","timestamp":"1754420310","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cfcd5116-a57d-5ee5-ac1b-aede1960cf0d","type":"url","category":"Network activity","to_ids":true,"value":"http://92.118.56.54:7799","comment":"https://x.com/drb_ra/status/1952806576479453333","timestamp":"1754420343","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"494996b2-d720-5188-a64a-ef856605c567","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.118.56.54","comment":"https://x.com/drb_ra/status/1952806576479453333","timestamp":"1754420343","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"97f01e83-f6a4-5ccb-a9ef-1c160545c55d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.221.64.12:443","comment":"https://x.com/drb_ra/status/1952806715704959196","timestamp":"1754420377","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"04d8e0d7-b203-5b2b-a48a-5f1b7a3fa21a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.221.64.12","comment":"https://x.com/drb_ra/status/1952806715704959196","timestamp":"1754420377","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e7209cc5-2706-5721-b101-c4d213efd8b7","type":"url","category":"Network activity","to_ids":true,"value":"http://45.132.238.150:2404","comment":"https://x.com/drb_ra/status/1952806853450014792","timestamp":"1754420409","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4ecb0e5e-7f0e-58b5-9d05-b9b3b1685943","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.132.238.150","comment":"https://x.com/drb_ra/status/1952806853450014792","timestamp":"1754420409","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"fe03b823-1394-50ad-9731-048dd0a2cc50","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.33.3:2404","comment":"https://x.com/drb_ra/status/1952806992868708740","timestamp":"1754420443","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"59786980-3624-5765-b15a-b0ab26023873","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.33.3","comment":"https://x.com/drb_ra/status/1952806992868708740","timestamp":"1754420443","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ed594254-4da0-5382-9dab-7603c6d7bf6a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.40.86.43:99","comment":"https://x.com/drb_ra/status/1952807132790673848","timestamp":"1754420476","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3d37de4a-8589-5417-a55d-7440d73a9dd0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.40.86.43","comment":"https://x.com/drb_ra/status/1952807132790673848","timestamp":"1754420476","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ff80989a-3e8a-5b15-bea0-ef9fbff2849b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.195.251:11300","comment":"https://x.com/drb_ra/status/1952807270930170132","timestamp":"1754420509","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e6d1f327-76cf-50d9-bb90-264e7240ca4b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.195.251:2000","comment":"https://x.com/drb_ra/status/1952807408826253425","timestamp":"1754420542","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"712c2a74-f0f7-506a-b7e4-6ca58e37b50f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.195.251","comment":"https://x.com/drb_ra/status/1952807408826253425","timestamp":"1754420542","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"bc14d9b8-e435-5670-a7af-51b957715c3a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.191.235.136:54505","comment":"https://x.com/drb_ra/status/1952807547104063828","timestamp":"1754420575","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f616b44f-0e78-51c3-98cb-ee7711ab5398","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.191.235.136","comment":"https://x.com/drb_ra/status/1952807547104063828","timestamp":"1754420575","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1548fa46-505e-5175-8c71-e2021862b72f","type":"url","category":"Network activity","to_ids":true,"value":"http://18.222.117.10:4841","comment":"https://x.com/drb_ra/status/1952807685478387864","timestamp":"1754420608","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6148d2ba-d19a-541d-86ac-7dd6f36138a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.222.117.10","comment":"https://x.com/drb_ra/status/1952807685478387864","timestamp":"1754420608","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6fdba9cc-84ac-5ab2-ad6a-ec86bf149ae9","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.159.208:3000","comment":"https://x.com/drb_ra/status/1952807824473637025","timestamp":"1754420641","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e2d62a40-681c-53d3-a9a6-89cf07c11949","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.159.208","comment":"https://x.com/drb_ra/status/1952807824473637025","timestamp":"1754420641","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e077e521-8f62-5223-94f0-75cefe4086d9","type":"url","category":"Network activity","to_ids":true,"value":"http://54.38.79.160:443","comment":"https://x.com/drb_ra/status/1952807963795595337","timestamp":"1754420674","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bb1f12ff-797b-577a-a4cc-817afc35663e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.38.79.160","comment":"https://x.com/drb_ra/status/1952807963795595337","timestamp":"1754420674","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"51ae19cd-519e-57ba-87d8-8eef8fd1d0e8","type":"url","category":"Network activity","to_ids":true,"value":"http://104.36.229.147","comment":"https://x.com/threatquery/status/1952837027583381988","timestamp":"1754427603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"b5f86ada-ef89-56d2-8ab9-6a352940949a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.36.229.147","comment":"https://x.com/threatquery/status/1952837027583381988","timestamp":"1754427603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"690cbde1-766d-5993-a789-5e5e248069bd","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.195.251","comment":"https://x.com/threatquery/status/1952837031018590567","timestamp":"1754427604","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"},{"name":"malware"}]},{"uuid":"698d0ed9-f176-5496-980b-7c97fb1ae90f","type":"url","category":"Network activity","to_ids":true,"value":"http://91.237.249.86","comment":"https://x.com/threatquery/status/1952837029353439702","timestamp":"1754427604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"2643fc53-f693-55b2-9d6c-0461f35102f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.237.249.86","comment":"https://x.com/threatquery/status/1952837029353439702","timestamp":"1754427604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"641e7f9c-9788-5692-b94c-1eff5ecbb334","type":"domain","category":"Network activity","to_ids":true,"value":"ayintappalet.com","comment":"https://x.com/skocherhan/status/1952851041558446422","timestamp":"1754430945","distribution":"5"},{"uuid":"4ee82d60-35eb-58a2-b28d-bedfcf8f4e47","type":"url","category":"Network activity","to_ids":true,"value":"https://ayintappalet.com/panel/api.php","comment":"https://x.com/skocherhan/status/1952851041558446422","timestamp":"1754430945","distribution":"5"},{"uuid":"4315dea3-ff4f-58eb-bff3-b1b3d82bbca0","type":"url","category":"Network activity","to_ids":true,"value":"https://t.me/snakecrypterr","comment":"https://x.com/skocherhan/status/1952851041558446422","timestamp":"1754430945","distribution":"5"},{"uuid":"b066b302-265e-59b9-91cc-435b9a41c926","type":"sha256","category":"Payload delivery","to_ids":true,"value":"84bc9007228073f4d73f4e6f7a05f920cd9317033d67d4c0cd375bbb95f13c70","comment":"https://x.com/skocherhan/status/1952851229446730125","timestamp":"1754430989","distribution":"5"},{"uuid":"5a6183ad-cd7c-578d-af7e-d313a0beeba9","type":"domain","category":"Network activity","to_ids":true,"value":"coinbase-chrome-exxtension.typedream.app","comment":"https://x.com/urldna_bot/status/1952852143582466372","timestamp":"1754431207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"58011403-f6a0-5719-84b8-ab658dbcbd71","type":"url","category":"Network activity","to_ids":true,"value":"http://coinbase-chrome-exxtension.typedream.app","comment":"https://x.com/urldna_bot/status/1952852143582466372","timestamp":"1754431207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9e306d5e-f9a0-5e89-b728-b1a909351a33","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.171.202:9650","comment":"https://x.com/skocherhan/status/1952852362256892276","timestamp":"1754431260","distribution":"5"},{"uuid":"09092e25-d4bd-5d5b-9ce7-525e0674cc59","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.171.202:9750","comment":"https://x.com/skocherhan/status/1952852362256892276","timestamp":"1754431260","distribution":"5"},{"uuid":"5fe2ceec-ef69-5c7b-beac-44ce7894a430","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.171.202:9850","comment":"https://x.com/skocherhan/status/1952852362256892276","timestamp":"1754431260","distribution":"5"},{"uuid":"b5697795-eb0d-5c9c-8262-d0f6ac706dc7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.171.202","comment":"https://x.com/skocherhan/status/1952852362256892276","timestamp":"1754431260","distribution":"5"},{"uuid":"414103c2-f52c-5cae-9f1a-1d10b1bccff4","type":"domain","category":"Network activity","to_ids":true,"value":"peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion","comment":"https://x.com/fbgwls245/status/1952868323840147538","timestamp":"1754435065","distribution":"5"},{"uuid":"0772bfa8-def7-5edd-8407-71d04f2eb25c","type":"url","category":"Network activity","to_ids":true,"value":"http://peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion","comment":"https://x.com/fbgwls245/status/1952868323840147538","timestamp":"1754435065","distribution":"5"},{"uuid":"016ca98e-15e9-500a-b4bb-d9ce78305390","type":"domain","category":"Network activity","to_ids":true,"value":"8v4fkx.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bcccff1d-57ed-5495-80c1-1a37e827c171","type":"url","category":"Network activity","to_ids":true,"value":"https://8v4fkx.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c334f249-4bb0-5847-b591-a45ef459c7e0","type":"domain","category":"Network activity","to_ids":true,"value":"960ybz.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7a03ab3-ee24-51e8-9db4-ed966b88a973","type":"url","category":"Network activity","to_ids":true,"value":"https://960ybz.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a182ab8-b40f-5e1f-830c-a23032600131","type":"domain","category":"Network activity","to_ids":true,"value":"c2lmo3.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4928bb79-c42f-5f69-9f26-45f8339f9ca9","type":"url","category":"Network activity","to_ids":true,"value":"https://c2lmo3.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bd53b86-2fc5-53f7-a3ac-80bbd1ad0198","type":"domain","category":"Network activity","to_ids":true,"value":"l6ngod.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e451e314-a193-525c-8ef9-9c256a073b92","type":"url","category":"Network activity","to_ids":true,"value":"https://l6ngod.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8b17aac-a3e6-5fbe-800d-439caf4cd50d","type":"domain","category":"Network activity","to_ids":true,"value":"lfwnb4.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef2b2aff-9c93-56b1-8caa-a215db52ca7a","type":"url","category":"Network activity","to_ids":true,"value":"https://lfwnb4.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"66eb030a-3722-58af-ae30-ccfe7a46da34","type":"domain","category":"Network activity","to_ids":true,"value":"qr7mpl.top","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2c20b812-a052-58a3-b713-73575c07e957","type":"url","category":"Network activity","to_ids":true,"value":"https://qr7mpl.top/KSDvDjZYR/","comment":"https://x.com/masaomi346/status/1952872271657550092","timestamp":"1754436006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a8fc8ed-caab-5e79-8fe1-e4ffc667b137","type":"domain","category":"Network activity","to_ids":true,"value":"ccltdcn.org","comment":"https://x.com/ShadowChasing1/status/1952896123871666364","timestamp":"1754441693","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e151bf32-2580-586d-bd35-9d2bc4fb9be9","type":"url","category":"Network activity","to_ids":true,"value":"http://ccltdcn.org","comment":"https://x.com/ShadowChasing1/status/1952896123871666364","timestamp":"1754441693","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c0bfaf6e-73d8-568a-acc4-4afd58a3a1f3","type":"md5","category":"Payload delivery","to_ids":true,"value":"3f5bbba1d885e2a120dc93a4d8a7b59d","comment":"https://x.com/ShadowChasing1/status/1952896123871666364","timestamp":"1754441693","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"988c4f87-d8dc-5661-ac07-f38afb5d7896","type":"md5","category":"Payload delivery","to_ids":true,"value":"cf5d60617ad12c3e480c9d69326a53eb","comment":"https://x.com/ShadowChasing1/status/1952896123871666364","timestamp":"1754441693","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0a2180ba-0d49-5f99-ac4d-ce9a1d0abf97","type":"domain","category":"Network activity","to_ids":true,"value":"jp-driectjebnkos01-04.com","comment":"https://x.com/harugasumi/status/1952908449354047807","timestamp":"1754444632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0cb48e20-8bee-590a-93fc-175af34d2276","type":"url","category":"Network activity","to_ids":true,"value":"https://jp-driectjebnkos01-04.com","comment":"https://x.com/harugasumi/status/1952908449354047807","timestamp":"1754444632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87c087a9-a121-5536-9bea-2f00e9ea656c","type":"domain","category":"Network activity","to_ids":true,"value":"jp-driectjebnkos00.com","comment":"https://x.com/harugasumi/status/1952908449354047807","timestamp":"1754444632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"397f8d21-041c-5c4a-9d64-3237243ab79f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.182.168.20","comment":"https://x.com/harugasumi/status/1952908449354047807","timestamp":"1754444632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f9d72b7c-9b30-5a9e-8edb-7fa24b6ad586","type":"url","category":"Network activity","to_ids":true,"value":"https://jp-driectjebnkos00.com/cash/driect/client/anti/3210000/","comment":"https://x.com/harugasumi/status/1952908449354047807","timestamp":"1754444632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2fcd723b-812e-5b8f-9837-0a94062bec6d","type":"domain","category":"Network activity","to_ids":true,"value":"dfgjhklhlfghjnk.weebly.com","comment":"https://x.com/urldna_bot/status/1952912549994741818","timestamp":"1754445609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9902fb5a-76f3-5a8f-86c7-1b3d4e4e4f70","type":"url","category":"Network activity","to_ids":true,"value":"https://dfgjhklhlfghjnk.weebly.com","comment":"https://x.com/urldna_bot/status/1952912549994741818","timestamp":"1754445609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4e28f24b-e5ce-5b85-9fde-e0f405feb81e","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-liedom.dtceji.cn/netservice/login/","comment":"https://x.com/harugasumi/status/1952915539002834983","timestamp":"1754446322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee19121e-04e6-5e6e-8a05-28fdd8b7e92f","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-liedom.dtceji.cn","comment":"https://x.com/harugasumi/status/1952915539002834983","timestamp":"1754446322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c39c5e9e-44e6-527c-9307-4c011711eccd","type":"url","category":"Network activity","to_ids":true,"value":"https://hwbgtnqegfp.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1952942739789631550","timestamp":"1754452807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f7fd0588-96bf-556c-baf6-5fec9607cc54","type":"domain","category":"Network activity","to_ids":true,"value":"hwbgtnqegfp.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1952942739789631550","timestamp":"1754452807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d0054953-c0b2-5e82-ade8-39453ff9c4df","type":"md5","category":"Payload delivery","to_ids":true,"value":"f0246943f8fd24a7e5df9aa1776849d0","comment":"https://x.com/ShadowChasing1/status/1952968010580500607","timestamp":"1754458832","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"34f5e2c2-eee5-57d5-ac4a-986d69e76540","type":"md5","category":"Payload delivery","to_ids":true,"value":"4e87283dcc6b2e22edba7bc8aab290cf","comment":"https://x.com/ShadowChasing1/status/1952968010580500607","timestamp":"1754458832","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4d6e51a7-cac7-5c71-a1ec-1df7fcf0e337","type":"domain","category":"Network activity","to_ids":true,"value":"glamormusicwave.com","comment":"https://x.com/ShadowChasing1/status/1952968010580500607","timestamp":"1754458832","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"958cd804-7cde-5f02-9bb1-5cb31d084d0f","type":"url","category":"Network activity","to_ids":true,"value":"https://glamormusicwave.com","comment":"https://x.com/ShadowChasing1/status/1952968010580500607","timestamp":"1754458832","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"faadbe20-5c80-5d91-9252-6dfa7ebadd60","type":"md5","category":"Payload delivery","to_ids":true,"value":"040934d7822be17e74725a6166d074ed","comment":"https://x.com/ReBensk/status/1952971148054151342","timestamp":"1754459580","distribution":"5","Tag":[{"name":"malware"},{"name":"Trojan"},{"name":"Android"}]},{"uuid":"5ab657cc-e3fc-5b63-b7f7-860f225f49f6","type":"url","category":"Network activity","to_ids":true,"value":"https://bltdl.weebly.com","comment":"https://x.com/urldna_bot/status/1952972935544610927","timestamp":"1754460006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d4622010-886b-5237-9e43-89f5de30df36","type":"domain","category":"Network activity","to_ids":true,"value":"bltdl.weebly.com","comment":"https://x.com/urldna_bot/status/1952972935544610927","timestamp":"1754460006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a586dc98-bb90-5883-a45f-c7edbd916fba","type":"domain","category":"Network activity","to_ids":true,"value":"koliwooclients.com","comment":"https://x.com/suyog41/status/1952990924210094369","timestamp":"1754464295","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d0097fc7-806b-5c37-9d1c-df75c140c0d0","type":"url","category":"Network activity","to_ids":true,"value":"http://koliwooclients.com","comment":"https://x.com/suyog41/status/1952990924210094369","timestamp":"1754464295","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"804cf7e3-772e-559a-ad75-66cf4e46787e","type":"md5","category":"Payload delivery","to_ids":true,"value":"ccc92e27b9b01e6623b25c3bfd0bf59e","comment":"https://x.com/suyog41/status/1952990924210094369","timestamp":"1754464295","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fcfe6d9f-4dde-520d-951a-9e6f60c55061","type":"url","category":"Network activity","to_ids":true,"value":"https://uctacza.weebly.com","comment":"https://x.com/urldna_bot/status/1953003137993703643","timestamp":"1754467207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f7d9823c-1d3b-5b0a-aa4d-0a50e41822c1","type":"domain","category":"Network activity","to_ids":true,"value":"uctacza.weebly.com","comment":"https://x.com/urldna_bot/status/1953003137993703643","timestamp":"1754467207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dfddc40e-db3f-5d23-9f43-50c194f1e05c","type":"url","category":"Network activity","to_ids":true,"value":"http://EnerHomeConsulting.ca","comment":"https://x.com/skocherhan/status/1953012800273494045","timestamp":"1754469511","distribution":"5"},{"uuid":"afb67d1e-4cd5-53d0-ae9f-733cf252e1e9","type":"domain","category":"Network activity","to_ids":true,"value":"EnerHomeConsulting.ca","comment":"https://x.com/skocherhan/status/1953012800273494045","timestamp":"1754469511","distribution":"5"},{"uuid":"57db94a2-a73f-51db-84cf-662dee93ec7a","type":"domain","category":"Network activity","to_ids":true,"value":"enerhomeconsulting.ca","comment":"https://x.com/skocherhan/status/1953012800273494045","timestamp":"1754469511","distribution":"5"},{"uuid":"3825c70e-dee8-5f2f-b8da-d3749da052c3","type":"url","category":"Network activity","to_ids":true,"value":"http://enerhomeconsulting.ca","comment":"https://x.com/skocherhan/status/1953012800273494045","timestamp":"1754469511","distribution":"5"},{"uuid":"8d7e0f8e-a6bb-5bca-8ab9-23a2df5b0a66","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-ingaccount-sistema.mixcatering.nl/it/client/login.php","comment":"https://x.com/JAMESWT_WT/status/1953014474551570888","timestamp":"1754469910","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2dc316a9-513f-596e-9962-a31d46db34ec","type":"domain","category":"Network activity","to_ids":true,"value":"sso-ingaccount-sistema.mixcatering.nl","comment":"https://x.com/JAMESWT_WT/status/1953014474551570888","timestamp":"1754469910","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dd482f0f-3250-5480-b935-5cb2e86f06b4","type":"domain","category":"Network activity","to_ids":true,"value":"sestima-ingsing.s3.eu-north-1.amazonaws.com","comment":"https://x.com/JAMESWT_WT/status/1953014474551570888","timestamp":"1754469910","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41f21cf9-8df9-5e34-bcac-6981b96fc532","type":"url","category":"Network activity","to_ids":true,"value":"https://sestima-ingsing.s3.eu-north-1.amazonaws.com/index.html","comment":"https://x.com/JAMESWT_WT/status/1953014474551570888","timestamp":"1754469910","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e6b0462-8d87-5df4-a7dd-ecda8b623a4c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.221.64.72:21","comment":"https://x.com/skocherhan/status/1953021298113753579","timestamp":"1754471537","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"666c19f4-f46f-5271-86e6-b4195b2bcefc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.221.64.72","comment":"https://x.com/skocherhan/status/1953021298113753579","timestamp":"1754471537","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"56707928-a8c6-5a3e-84e0-0dcfd3d6a5aa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"dd36ccb034444d9c94afba45ff1f14b3852c12390820be810dc3bbe46abcf0be","comment":"https://x.com/JAMESWT_WT/status/1953024117227086294","timestamp":"1754472209","distribution":"5","Tag":[{"name":"Remcos"},{"name":"opendir"},{"name":"Dcrat"}]},{"uuid":"289a0c66-ecb1-5164-a592-fc8075f1f494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.206.158.190","comment":"https://x.com/JAMESWT_WT/status/1953024117227086294","timestamp":"1754472209","distribution":"5","Tag":[{"name":"Remcos"},{"name":"opendir"},{"name":"Dcrat"}]},{"uuid":"ded313e8-be23-592c-9dbd-0ef9e14019a1","type":"url","category":"Network activity","to_ids":true,"value":"https://b45020.com/promo","comment":"https://x.com/urldna_bot/status/1953033337695563954","timestamp":"1754474407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"229fcefd-ef79-53db-8278-92d0bb84613a","type":"domain","category":"Network activity","to_ids":true,"value":"b45020.com","comment":"https://x.com/urldna_bot/status/1953033337695563954","timestamp":"1754474407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ff992690-1798-5008-a6ea-ca265531db83","type":"url","category":"Network activity","to_ids":true,"value":"https://contratosdetaxasdaconta.com","comment":"https://x.com/Coolcarlos17/status/1953042113941078266","timestamp":"1754476500","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0adf8e9f-f93a-53f5-9b27-13fead950882","type":"domain","category":"Network activity","to_ids":true,"value":"contratosdetaxasdaconta.com","comment":"https://x.com/Coolcarlos17/status/1953042113941078266","timestamp":"1754476500","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"06121f3a-81cd-542e-bda2-93ad98a21711","type":"domain","category":"Network activity","to_ids":true,"value":"growthsuplementosecommerce.myshopify.com","comment":"https://x.com/Coolcarlos17/status/1953042291586678998","timestamp":"1754476542","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a46f9779-ddc3-59f1-b748-0b4025d31ef1","type":"url","category":"Network activity","to_ids":true,"value":"https://growthsuplementosecommerce.myshopify.com/collections/frontpage/","comment":"https://x.com/Coolcarlos17/status/1953042291586678998","timestamp":"1754476542","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cd55bf2d-f7a0-5df7-924f-12a71dae31dc","type":"url","category":"Network activity","to_ids":true,"value":"https://seguroclientehavan.myshopify.com","comment":"https://x.com/Coolcarlos17/status/1953042470117294163","timestamp":"1754476585","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"33790930-b558-50c6-afa8-8a39b9d73b6b","type":"domain","category":"Network activity","to_ids":true,"value":"seguroclientehavan.myshopify.com","comment":"https://x.com/Coolcarlos17/status/1953042470117294163","timestamp":"1754476585","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3d8aecab-518d-5691-9315-1983b1300f2e","type":"domain","category":"Network activity","to_ids":true,"value":"havanbrasil-oficial.com","comment":"https://x.com/Coolcarlos17/status/1953042679907885377","timestamp":"1754476635","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e10bc11f-3bb0-53f5-a1f5-ac4beb329aab","type":"url","category":"Network activity","to_ids":true,"value":"https://havanbrasil-oficial.com","comment":"https://x.com/Coolcarlos17/status/1953042679907885377","timestamp":"1754476635","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"414103c2-f52c-5cae-9f1a-1d10b1bccff4","type":"domain","category":"Network activity","to_ids":true,"value":"peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion","comment":"https://x.com/skocherhan/status/1953042837576020353","timestamp":"1754476672","distribution":"5"},{"uuid":"0772bfa8-def7-5edd-8407-71d04f2eb25c","type":"url","category":"Network activity","to_ids":true,"value":"http://peargxn3oki34c4savcbcfqofjjwjnnyrlrbszfv6ujlx36mhrh57did.onion","comment":"https://x.com/skocherhan/status/1953042837576020353","timestamp":"1754476672","distribution":"5"},{"uuid":"c5f096d9-e2f7-5468-a265-79642f5c6a8a","type":"url","category":"Network activity","to_ids":true,"value":"https://pay.pague-processamento.click","comment":"https://x.com/Coolcarlos17/status/1953042913224433901","timestamp":"1754476690","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0f2c1be3-3fa5-5bf2-906e-a9787fa74a51","type":"domain","category":"Network activity","to_ids":true,"value":"pay.pague-processamento.click","comment":"https://x.com/Coolcarlos17/status/1953042913224433901","timestamp":"1754476690","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0a637190-9777-56d4-8304-23c503d19d65","type":"md5","category":"Payload delivery","to_ids":true,"value":"93875e6dcc6e306c6910c810dd3e9808","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"f0f48fc1-cc86-574a-9d4d-e0996413d5d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.247.176.126","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"ac3c17a8-2656-513a-8460-774f37d2fa31","type":"md5","category":"Payload delivery","to_ids":true,"value":"51ac5f4bcffd208899ebe778c1725579","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"ea1f39c3-55c2-5160-bd82-631a1b2fd174","type":"url","category":"Network activity","to_ids":true,"value":"http://swachbharat.xyz","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"e7342860-70f0-5ad4-8629-468776b58bec","type":"domain","category":"Network activity","to_ids":true,"value":"swachbharat.xyz","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"420162dd-5f95-5413-a63f-da8a9bfc076d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.102.152.50","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"daf40ec5-d68a-56d7-b1c6-bde44a18a995","type":"md5","category":"Payload delivery","to_ids":true,"value":"7dd7a25a6ae7caeb4f7ad9a89d96f7ec","comment":"https://x.com/ShadowChasing1/status/1953046142272586046","timestamp":"1754477460","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"},{"name":"C2"}]},{"uuid":"d9bd6897-60f0-54d3-8d22-1036ae066c06","type":"md5","category":"Payload delivery","to_ids":true,"value":"2c7e224c4c1b341f18904e2f0faacc19","comment":"https://x.com/skocherhan/status/1953055908117782979","timestamp":"1754479789","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"9676face-f6f1-5845-bbbd-0c60a11ab7af","type":"domain","category":"Network activity","to_ids":true,"value":"octet-stream.zip","comment":"https://x.com/skocherhan/status/1953055908117782979","timestamp":"1754479789","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"9b46b73f-5ee0-54f7-a05f-393cd91d6a8b","type":"md5","category":"Payload delivery","to_ids":true,"value":"ae80b28988df45de5a94305d3aa6e9a3","comment":"https://x.com/skocherhan/status/1953055908117782979","timestamp":"1754479789","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"3d0779cc-68df-531c-8c91-10c721f31563","type":"md5","category":"Payload delivery","to_ids":true,"value":"44e1edd99474520df9e5bfa04094d949","comment":"https://x.com/skocherhan/status/1953055908117782979","timestamp":"1754479789","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"8665e51e-a2fb-543c-8812-8e61483d0126","type":"url","category":"Network activity","to_ids":true,"value":"http://octet-stream.zip","comment":"https://x.com/skocherhan/status/1953055908117782979","timestamp":"1754479789","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"34baf28e-6f9e-5104-b1e3-fb43bcb68bd1","type":"domain","category":"Network activity","to_ids":true,"value":"bet73027.com","comment":"https://x.com/urldna_bot/status/1953063533689593992","timestamp":"1754481607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aed3b7ef-60be-5d3a-b92f-9ae933bf0f06","type":"url","category":"Network activity","to_ids":true,"value":"https://bet73027.com/fish/172","comment":"https://x.com/urldna_bot/status/1953063533689593992","timestamp":"1754481607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c5239ac2-28ed-5aa7-8fde-b877a33945dc","type":"domain","category":"Network activity","to_ids":true,"value":"capacitacionseguro.cl","comment":"https://x.com/1ZRR4H/status/1953082229304771016","timestamp":"1754486064","distribution":"5"},{"uuid":"21fe9186-4af1-5d1c-b2e1-fbf46dd10012","type":"url","category":"Network activity","to_ids":true,"value":"http://capacitacionseguro.cl","comment":"https://x.com/1ZRR4H/status/1953082229304771016","timestamp":"1754486064","distribution":"5"},{"uuid":"4b6a24b8-00c2-5585-b8df-b6b962c6a0b5","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46/zyxic/login.php","comment":"https://x.com/ViriBack/status/1953082805136605440","timestamp":"1754486201","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/ViriBack/status/1953082805136605440","timestamp":"1754486201","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6777f3f2-3a45-50ab-ad40-e6042be27906","type":"url","category":"Network activity","to_ids":true,"value":"http://arfzs.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"cb55fab8-30df-560a-a112-d6659ab67dec","type":"url","category":"Network activity","to_ids":true,"value":"http://brossdeli.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"4efcd949-fd27-50c5-9a94-9ec358185529","type":"url","category":"Network activity","to_ids":true,"value":"http://aspotan.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"b78c6d99-02cb-5261-83f5-1bfddf04fc26","type":"domain","category":"Network activity","to_ids":true,"value":"ajoyfulbear.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"6241b0b2-f5de-5a95-bc29-30254ab12cea","type":"domain","category":"Network activity","to_ids":true,"value":"arfzs.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"ed24bec6-92b9-54ce-9f6f-92b804446428","type":"domain","category":"Network activity","to_ids":true,"value":"aspotan.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"126cb105-ecee-57ff-b56a-2a8b262a67b7","type":"domain","category":"Network activity","to_ids":true,"value":"brossdeli.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"35056c42-2942-5d7d-b96a-613f906edf29","type":"domain","category":"Network activity","to_ids":true,"value":"avamkwilson.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"6583b89c-76a6-51b6-be56-4c61482ff273","type":"url","category":"Network activity","to_ids":true,"value":"http://avamkwilson.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"fdef8f77-e685-5334-91d6-23539b5f9996","type":"domain","category":"Network activity","to_ids":true,"value":"bomdog.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"56765ee1-3fc2-5723-ad89-5a90a4eb29b3","type":"url","category":"Network activity","to_ids":true,"value":"http://bomdog.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"fe8d5bd5-b5d9-5e64-a768-43da76ed7ebe","type":"url","category":"Network activity","to_ids":true,"value":"http://ajoyfulbear.com","comment":"https://x.com/JAMESWT_WT/status/1953084353518403606","timestamp":"1754486571","distribution":"5"},{"uuid":"4ba64d89-6467-5605-9af5-9f8cc28ac2ce","type":"domain","category":"Network activity","to_ids":true,"value":"docsreveiwingmain.z19.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1953093730749001765","timestamp":"1754488806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bd5de64c-1734-5983-a7a9-0b6a9cd64d34","type":"url","category":"Network activity","to_ids":true,"value":"https://docsreveiwingmain.z19.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1953093730749001765","timestamp":"1754488806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4af28799-339e-5232-8bf6-fbf24f78734c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.29","comment":"https://x.com/SarlackLab/status/1953094016293081582","timestamp":"1754488874","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"31ce1aa9-dae5-5e45-bd62-f7ad790b7e6d","type":"url","category":"Network activity","to_ids":true,"value":"http://getting-formed.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1953094016293081582","timestamp":"1754488874","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"0af19740-742d-582b-9878-a69db443f490","type":"domain","category":"Network activity","to_ids":true,"value":"getting-formed.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1953094016293081582","timestamp":"1754488874","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"d11f01d0-3669-5ca8-a17f-a7e00d5ac96e","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.29:22135","comment":"https://x.com/SarlackLab/status/1953094016293081582","timestamp":"1754488874","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"15a4a0d4-aa25-5008-b7b9-431e75e59c48","type":"domain","category":"Network activity","to_ids":true,"value":"Offrs.zip","comment":"https://x.com/PrakkiSathwik/status/1953098366025408911","timestamp":"1754489911","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"83f7a065-7d08-5af1-bd13-705d9d883cf7","type":"url","category":"Network activity","to_ids":true,"value":"http://Offrs.zip","comment":"https://x.com/PrakkiSathwik/status/1953098366025408911","timestamp":"1754489911","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"c64fdd67-bac4-5c19-9213-6745030b1082","type":"md5","category":"Payload delivery","to_ids":true,"value":"b12b503ba0519bfcd8824ceeffa8e6df","comment":"https://x.com/PrakkiSathwik/status/1953098366025408911","timestamp":"1754489911","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"692f5563-fc13-50a2-938d-1d17273a3e76","type":"md5","category":"Payload delivery","to_ids":true,"value":"6c75152fc5f3a919f9f62929557b76bc","comment":"https://x.com/PrakkiSathwik/status/1953098366025408911","timestamp":"1754489911","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"441f4fc1-424b-5303-a32b-8c90c93e5978","type":"url","category":"Network activity","to_ids":true,"value":"https://salat.cn/login/","comment":"https://x.com/ViriBack/status/1953104036795752654","timestamp":"1754491263","distribution":"5"},{"uuid":"2eabe06b-e05d-5090-a708-744115c7f4ef","type":"domain","category":"Network activity","to_ids":true,"value":"salat.cn","comment":"https://x.com/ViriBack/status/1953104036795752654","timestamp":"1754491263","distribution":"5"},{"uuid":"b4a65b23-b6ac-573c-862a-3cf4b1825f99","type":"url","category":"Network activity","to_ids":true,"value":"http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953108738266808478","timestamp":"1754492384","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d94aeb44-f38e-5cab-824f-93e0a1af696b","type":"domain","category":"Network activity","to_ids":true,"value":"ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953108738266808478","timestamp":"1754492384","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"1280c836-4059-589a-9d6e-67898410223f","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/BlackNevas","comment":"https://x.com/fbgwls245/status/1953108738266808478","timestamp":"1754492384","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"04a4f297-8bd1-5e6f-a561-3a817ae71d40","type":"domain","category":"Network activity","to_ids":true,"value":"comcastxxxxxxxlogin124.weebly.com","comment":"https://x.com/s3curetheweb/status/1953110039620657485","timestamp":"1754492695","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf50228a-1265-5bca-9683-c145dd10c7e6","type":"url","category":"Network activity","to_ids":true,"value":"https://comcastxxxxxxxlogin124.weebly.com","comment":"https://x.com/s3curetheweb/status/1953110039620657485","timestamp":"1754492695","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04cb2dc2-daf2-538c-ac96-d3a5772e98f0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"03c398435549f8a49bbff977ebee805abae6ac607fed890184f205146047e458","comment":"https://x.com/s3curetheweb/status/1953110039620657485","timestamp":"1754492695","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30f42c52-405e-5f26-a61d-2ac2367fac6e","type":"url","category":"Network activity","to_ids":true,"value":"https://132.226.105.28/s/58462514417","comment":"https://x.com/drb_ra/status/1953115817723253099","timestamp":"1754494072","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f4555b30-33f9-5957-95c1-7dc1e27a7b54","type":"url","category":"Network activity","to_ids":true,"value":"http://132.226.105.28:28080","comment":"https://x.com/drb_ra/status/1953115817723253099","timestamp":"1754494072","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d3bf5b1-b676-5552-a01b-74bd2cd64708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"132.226.105.28","comment":"https://x.com/drb_ra/status/1953115817723253099","timestamp":"1754494072","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d2c87015-36ed-5933-9908-9f31079d46f0","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.229.117:443","comment":"https://x.com/drb_ra/status/1953115958156947624","timestamp":"1754494106","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4e1972e9-d30f-53d0-83b5-b41c896e18e1","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.229.117:8443","comment":"https://x.com/drb_ra/status/1953116097927954546","timestamp":"1754494139","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"59fb2258-df8e-52ea-8eb1-dc7af996ad99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.229.117","comment":"https://x.com/drb_ra/status/1953116097927954546","timestamp":"1754494139","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e8ea1ee7-71ef-530d-968b-1111c1a8151d","type":"url","category":"Network activity","to_ids":true,"value":"http://124.70.100.149:7979","comment":"https://x.com/drb_ra/status/1953116237094953431","timestamp":"1754494172","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aa06d140-a134-566e-aa7a-77d930910ca4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.70.100.149","comment":"https://x.com/drb_ra/status/1953116237094953431","timestamp":"1754494172","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"12a235c5-8cfb-5189-96a7-b0578bbe1a98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.8.68","comment":"https://x.com/drb_ra/status/1953116376677167340","timestamp":"1754494206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c855c4e3-3d99-568f-aca0-08b4d47aa48c","type":"url","category":"Network activity","to_ids":true,"value":"https://47.83.8.68/s/58462514417","comment":"https://x.com/drb_ra/status/1953116376677167340","timestamp":"1754494206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"951a1734-32b4-5718-a7d2-9ae1823c1d49","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.8.68:8008","comment":"https://x.com/drb_ra/status/1953116376677167340","timestamp":"1754494206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"995a59fb-48ef-5251-86fd-ca8665d4584c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.107.44.136:443","comment":"https://x.com/drb_ra/status/1953116515705741616","timestamp":"1754494239","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"de11758d-7046-5961-a979-5d2e80dbb129","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.107.44.136","comment":"https://x.com/drb_ra/status/1953116515705741616","timestamp":"1754494239","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0d2fc073-9adc-52c9-8e14-eb4a511b3ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.78.242:8080","comment":"https://x.com/drb_ra/status/1953116656122642921","timestamp":"1754494272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b86b44fc-3301-50bc-857a-6b74eb4e9ad7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.78.242","comment":"https://x.com/drb_ra/status/1953116656122642921","timestamp":"1754494272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b287ec0b-e610-51d9-9313-d87da2b5fda8","type":"url","category":"Network activity","to_ids":true,"value":"http://194.165.16.29:80","comment":"https://x.com/drb_ra/status/1953116797864915107","timestamp":"1754494306","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"53aec415-79a0-5660-8753-4cca7e654421","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.165.16.29","comment":"https://x.com/drb_ra/status/1953116797864915107","timestamp":"1754494306","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a6ea9c93-7cb3-5324-bbb5-e726db46d6e4","type":"url","category":"Network activity","to_ids":true,"value":"https://dsswew.website/wc/58462514417","comment":"https://x.com/drb_ra/status/1953116937845617131","timestamp":"1754494339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"375ecd5e-12b2-5e1a-8247-62ad194ca911","type":"url","category":"Network activity","to_ids":true,"value":"http://206.119.172.150:443","comment":"https://x.com/drb_ra/status/1953116937845617131","timestamp":"1754494339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d110743f-02c7-593f-b257-da940303a853","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.119.172.150","comment":"https://x.com/drb_ra/status/1953116937845617131","timestamp":"1754494339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e6e80d1a-2d9a-526d-9b81-c1e97a1ad731","type":"domain","category":"Network activity","to_ids":true,"value":"dsswew.website","comment":"https://x.com/drb_ra/status/1953116937845617131","timestamp":"1754494339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"01e65cbe-4026-5712-a4b4-868c0e481b4d","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.112.85/pixel","comment":"https://x.com/drb_ra/status/1953117079143391465","timestamp":"1754494373","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2ab27103-d9ae-50b9-b60a-a2ce64b8b938","type":"url","category":"Network activity","to_ids":true,"value":"http://172.87.28.47:80","comment":"https://x.com/drb_ra/status/1953117079143391465","timestamp":"1754494373","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"290f0b5b-d5ee-5105-8a6d-601e12305752","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.87.28.47","comment":"https://x.com/drb_ra/status/1953117079143391465","timestamp":"1754494373","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3eac230f-99f7-5b66-b21d-36a2adc404d3","type":"url","category":"Network activity","to_ids":true,"value":"https://120.26.39.204/wc/58462514417","comment":"https://x.com/drb_ra/status/1953117219736474044","timestamp":"1754494407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"140b357c-905b-55e8-9712-6b0eac013132","type":"url","category":"Network activity","to_ids":true,"value":"http://120.26.39.103:8443","comment":"https://x.com/drb_ra/status/1953117219736474044","timestamp":"1754494407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d8d349c6-84cc-5847-96dc-74ba8b4fbf79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.26.39.103","comment":"https://x.com/drb_ra/status/1953117219736474044","timestamp":"1754494407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"92966f3b-cc49-51f8-b2d3-ed50ae262f7d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.26.39.204","comment":"https://x.com/drb_ra/status/1953117219736474044","timestamp":"1754494407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17089ec1-bcfa-567c-81d7-5bdd1b8618dc","type":"url","category":"Network activity","to_ids":true,"value":"http://8.136.3.219:80","comment":"https://x.com/drb_ra/status/1953117360514126314","timestamp":"1754494440","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4059eb8a-b18f-56a0-8876-2642b1c47fee","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.209.44:81","comment":"https://x.com/drb_ra/status/1953117500498940178","timestamp":"1754494473","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88d9389f-9ae3-575c-b7e2-02f80172ae1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.209.44","comment":"https://x.com/drb_ra/status/1953117500498940178","timestamp":"1754494473","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f9a92320-f571-51b6-a487-2e6b8f1d35d6","type":"url","category":"Network activity","to_ids":true,"value":"http://120.24.64.74:8080","comment":"https://x.com/drb_ra/status/1953117639477166131","timestamp":"1754494507","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9c1524aa-35b0-588a-b277-36116ffb6fa2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.24.64.74","comment":"https://x.com/drb_ra/status/1953117639477166131","timestamp":"1754494507","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"099bb429-ed25-595f-989f-3a51ca82309b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.156.87.173","comment":"https://x.com/drb_ra/status/1953117778661048618","timestamp":"1754494540","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cbc30736-2f0e-5339-bca8-925f1ddc30fe","type":"url","category":"Network activity","to_ids":true,"value":"http://45.156.87.173:80","comment":"https://x.com/drb_ra/status/1953117778661048618","timestamp":"1754494540","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c309f523-4c72-5c22-b32f-43160d31d6e3","type":"domain","category":"Network activity","to_ids":true,"value":"img.sboxm.top","comment":"https://x.com/drb_ra/status/1953117918209650840","timestamp":"1754494573","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bd207bd3-365e-5fb3-a609-38f83d9414b1","type":"url","category":"Network activity","to_ids":true,"value":"https://img.sboxm.top/updates","comment":"https://x.com/drb_ra/status/1953117918209650840","timestamp":"1754494573","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0d1854f3-7abe-58ad-a702-c20d2ab8b588","type":"url","category":"Network activity","to_ids":true,"value":"http://8.219.76.168:443","comment":"https://x.com/drb_ra/status/1953117918209650840","timestamp":"1754494573","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b9576273-26b0-5d76-88ec-0f0d42b0b52a","type":"url","category":"Network activity","to_ids":true,"value":"https://14.103.138.13/admin/Remove/Server/sc/API/5LQ7AIA5SQWO9VB","comment":"https://x.com/drb_ra/status/1953118059457118541","timestamp":"1754494607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4498242-df4d-5ccd-8e49-708e7dfcd0c1","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.126:3389","comment":"https://x.com/drb_ra/status/1953118059457118541","timestamp":"1754494607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3bb3b3b5-4881-50c8-9fdd-9198ab11f1f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.126","comment":"https://x.com/drb_ra/status/1953118059457118541","timestamp":"1754494607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"588fbaa9-e3eb-59c1-8934-8e0b21979a92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.103.138.13","comment":"https://x.com/drb_ra/status/1953118059457118541","timestamp":"1754494607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3b42a642-8586-5b5c-b406-b5ef96b0ba64","type":"url","category":"Network activity","to_ids":true,"value":"http://191.93.118.254","comment":"https://x.com/1ZRR4H/status/1953119193185812508","timestamp":"1754494877","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"1f792d01-dc16-5d98-abae-65c544e9e57d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.93.118.254","comment":"https://x.com/1ZRR4H/status/1953119193185812508","timestamp":"1754494877","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"ea427537-1f9a-5e5d-bbc4-b70a01e7e341","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.57.231.137","comment":"https://x.com/drb_ra/status/1953119716819575037","timestamp":"1754495002","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2cdd5d58-bcc0-57b7-860a-b4d89ae30d59","type":"url","category":"Network activity","to_ids":true,"value":"http://13.57.231.137:58467","comment":"https://x.com/drb_ra/status/1953119716819575037","timestamp":"1754495002","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1abb3306-a33e-5897-b410-5c356c530c1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.155.28.140","comment":"https://x.com/drb_ra/status/1953119854162030709","timestamp":"1754495035","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"20cc7ae3-3e3a-5246-9468-0a2c63042a56","type":"url","category":"Network activity","to_ids":true,"value":"http://56.155.28.140:2004","comment":"https://x.com/drb_ra/status/1953119854162030709","timestamp":"1754495035","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a218afad-80d0-577d-901f-f51d6ccca4ac","type":"url","category":"Network activity","to_ids":true,"value":"http://43.203.193.29:2281","comment":"https://x.com/drb_ra/status/1953119992808960055","timestamp":"1754495068","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2070c7e6-1076-5868-a792-094d5453fec5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.203.193.29","comment":"https://x.com/drb_ra/status/1953119992808960055","timestamp":"1754495068","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ce89424f-b294-5d05-995d-253317e32ed8","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:8088","comment":"https://x.com/drb_ra/status/1953121514456285537","timestamp":"1754495430","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"3b0c6bdd-7dc1-5e33-9277-8411a1233bb5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1963","comment":"https://x.com/drb_ra/status/1953121652247605629","timestamp":"1754495463","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e6d15e3e-1aaa-5d0e-926b-8b0d5c4d43c2","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:636","comment":"https://x.com/drb_ra/status/1953121790730858810","timestamp":"1754495496","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"dc0ca670-1af5-5ed5-ad9c-2bbef5a99939","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:427","comment":"https://x.com/drb_ra/status/1953121928396280150","timestamp":"1754495529","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"5d13b4e7-482e-5978-90eb-b69c68d9f43b","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:32296","comment":"https://x.com/drb_ra/status/1953122066124652866","timestamp":"1754495562","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"6829e9fa-2d58-586a-b208-ff80d06f5c89","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:12851","comment":"https://x.com/drb_ra/status/1953122204134117718","timestamp":"1754495595","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"20534546-4f0e-5d3b-9d77-346900ed83b5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:10274","comment":"https://x.com/drb_ra/status/1953122341413671000","timestamp":"1754495628","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"a471ed0c-3720-5b74-bc63-ec240bcee6f9","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:59709","comment":"https://x.com/drb_ra/status/1953122480765223366","timestamp":"1754495661","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"77080a17-fb65-573a-90b7-2d01cc9901a8","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:52736","comment":"https://x.com/drb_ra/status/1953122617734427081","timestamp":"1754495693","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"086c20c4-13e5-521b-b6da-dc6dae2912f8","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:9300","comment":"https://x.com/drb_ra/status/1953122755508887610","timestamp":"1754495726","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"248a6071-14ee-574d-ad9b-8fe7efd38319","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:3389","comment":"https://x.com/drb_ra/status/1953122892700381591","timestamp":"1754495759","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ae391ef2-bd27-5b20-be47-0d553e526839","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1961","comment":"https://x.com/drb_ra/status/1953123031074652548","timestamp":"1754495792","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"d5ca1190-7a4d-5827-89bd-629acff4de08","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:53335","comment":"https://x.com/drb_ra/status/1953123169578934369","timestamp":"1754495825","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"69bfc5e6-8562-509b-a59c-3ec1e4743243","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:39397","comment":"https://x.com/drb_ra/status/1953123307437371786","timestamp":"1754495858","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9ad6c908-107a-5782-957a-2eab02379eed","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:12412","comment":"https://x.com/drb_ra/status/1953123445249565119","timestamp":"1754495891","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"941a43a8-c2ed-5424-af05-a965d1361ac3","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:5901","comment":"https://x.com/drb_ra/status/1953123582948647257","timestamp":"1754495924","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"741eb7a0-9648-56a3-8e55-0247509495e7","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:6007","comment":"https://x.com/drb_ra/status/1953123720425349358","timestamp":"1754495956","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"2e877887-3d62-5085-8d09-4b3060bddc0a","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:5986","comment":"https://x.com/drb_ra/status/1953123858619232731","timestamp":"1754495989","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"dcec09cc-115e-5337-afff-65b95ecd2f07","type":"domain","category":"Network activity","to_ids":true,"value":"repermaiec.weebly.com","comment":"https://x.com/urldna_bot/status/1953123931201716241","timestamp":"1754496007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"701a7049-acff-5235-bce7-149aab6de1cd","type":"url","category":"Network activity","to_ids":true,"value":"https://repermaiec.weebly.com","comment":"https://x.com/urldna_bot/status/1953123931201716241","timestamp":"1754496007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"087a9fa7-ae6b-5359-be41-976752328641","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:27017","comment":"https://x.com/drb_ra/status/1953123996242755807","timestamp":"1754496022","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"6ad1f2e2-48c2-5823-bef4-ace80cb5d00c","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:16992","comment":"https://x.com/drb_ra/status/1953124134575112577","timestamp":"1754496055","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"86e3bb14-f1c2-57cd-b6b3-37774ed348a4","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:9305","comment":"https://x.com/drb_ra/status/1953124272211108034","timestamp":"1754496088","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"93c59e4d-fc5b-5323-b243-616678a74075","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:28003","comment":"https://x.com/drb_ra/status/1953124410983919980","timestamp":"1754496121","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b2b522ab-a47e-5a1e-915e-8485c40737f7","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:23046","comment":"https://x.com/drb_ra/status/1953124548523520506","timestamp":"1754496154","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e99f89a9-56a2-52e7-96bb-902cb6f346fb","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:20528","comment":"https://x.com/drb_ra/status/1953124686683922484","timestamp":"1754496187","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"47d0c7f3-c56d-5721-ab58-e3383bf25942","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1311","comment":"https://x.com/drb_ra/status/1953124824303194454","timestamp":"1754496220","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"010bcbfc-83b9-582d-9516-6bc7210872fa","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1194","comment":"https://x.com/drb_ra/status/1953124962945892501","timestamp":"1754496253","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"03354de6-adf9-58e8-ad48-50e4f9d894e0","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:51767","comment":"https://x.com/drb_ra/status/1953125100540117086","timestamp":"1754496285","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"02f827bc-64b2-5a01-a1e2-469ea73d7606","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:37979","comment":"https://x.com/drb_ra/status/1953125238411001946","timestamp":"1754496318","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"287a5945-37a5-56cd-afa2-1b456551c912","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:18246","comment":"https://x.com/drb_ra/status/1953125375791268032","timestamp":"1754496351","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"41d39933-4369-5983-aef7-64f852697e6a","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:12979","comment":"https://x.com/drb_ra/status/1953125513897103460","timestamp":"1754496384","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"034a8809-7485-5343-a1c9-fdb0bd988ec5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:10259","comment":"https://x.com/drb_ra/status/1953125651008954662","timestamp":"1754496417","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e8e11b56-0506-52d8-b3af-826375bc1246","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:33931","comment":"https://x.com/drb_ra/status/1953125788913377609","timestamp":"1754496450","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"72c66dd3-8df4-5832-a76a-0f8d5559447d","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:18012","comment":"https://x.com/drb_ra/status/1953125926520098855","timestamp":"1754496482","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"dc5e7a9a-92b7-5ee5-b1bb-9922c6f20672","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:6836","comment":"https://x.com/drb_ra/status/1953126064340849137","timestamp":"1754496515","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"cc279214-ba56-580b-bf28-a97bbec6a451","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:4445","comment":"https://x.com/drb_ra/status/1953126202396287051","timestamp":"1754496548","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1e32de42-81e7-5a5f-ab6e-1c7356b9da76","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:995","comment":"https://x.com/drb_ra/status/1953126340607062023","timestamp":"1754496581","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f205162f-1c0e-5099-a19b-f4ed3752af24","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:51050","comment":"https://x.com/drb_ra/status/1953126479031595264","timestamp":"1754496614","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"58569917-3762-5f26-9319-aa680ead32e5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:32446","comment":"https://x.com/drb_ra/status/1953126616839733685","timestamp":"1754496647","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ab5a9685-e66d-5012-a452-2353de642dde","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:28555","comment":"https://x.com/drb_ra/status/1953126754345714032","timestamp":"1754496680","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9cefcd5b-a4d6-58ab-abf1-a327fe4e28ac","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:9201","comment":"https://x.com/drb_ra/status/1953126894326391029","timestamp":"1754496713","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"bad98b1f-c56f-5f8c-af36-bcbb7fb4c769","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1962","comment":"https://x.com/drb_ra/status/1953127032138739925","timestamp":"1754496746","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ef51d973-47ae-53dd-9dd0-1835a5ffb318","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1200","comment":"https://x.com/drb_ra/status/1953127170584268892","timestamp":"1754496779","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"94e3b231-7da1-5d68-b181-724e83b85972","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:60190","comment":"https://x.com/drb_ra/status/1953127308744683564","timestamp":"1754496812","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"6f9d967c-803d-569f-a8da-c2495354111e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.14.19.106","comment":"https://x.com/drb_ra/status/1953127308744683564","timestamp":"1754496812","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b94f8c50-1a71-542f-bd8b-da7e3dd34eec","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:46093","comment":"https://x.com/drb_ra/status/1953127447005720692","timestamp":"1754496845","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"89f9df98-215b-57f7-9442-9cbe48bed4b8","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:50791","comment":"https://x.com/drb_ra/status/1953127587787493601","timestamp":"1754496878","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"728792e9-b02b-5953-983b-fb89cf44166c","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:2628","comment":"https://x.com/drb_ra/status/1953127726505750725","timestamp":"1754496912","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"10d33938-cde3-5c79-8afd-2595a4b782da","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1224","comment":"https://x.com/drb_ra/status/1953127863999250820","timestamp":"1754496944","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"d5cc2bc8-21d8-5d61-b51d-4ce43cfb2ed5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:6854","comment":"https://x.com/drb_ra/status/1953128002948153764","timestamp":"1754496977","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ae502f5b-f72e-538f-a06b-c2b36e94d46d","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:3299","comment":"https://x.com/drb_ra/status/1953128140366078058","timestamp":"1754497010","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e5bdcfb3-f25e-5d38-9e4a-aa0df6a84afc","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:2762","comment":"https://x.com/drb_ra/status/1953128278266454274","timestamp":"1754497043","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1bd89f8b-1dfa-5d99-956a-12bdaabfa1c6","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:1801","comment":"https://x.com/drb_ra/status/1953128415449563293","timestamp":"1754497076","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1f1747c2-f717-5574-819a-40154dfe03fe","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:102","comment":"https://x.com/drb_ra/status/1953128553135882595","timestamp":"1754497109","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"24e5d816-2015-5ff9-a3d1-3ff3fb2acaa5","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:13197","comment":"https://x.com/drb_ra/status/1953128691178914256","timestamp":"1754497142","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"668ca7c6-9660-5212-890b-62fd1cbd3542","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:8888","comment":"https://x.com/drb_ra/status/1953128829272137979","timestamp":"1754497174","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e811218e-3941-56c9-a17d-4bd900db7781","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:38608","comment":"https://x.com/drb_ra/status/1953128966660731247","timestamp":"1754497207","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8048478f-ce0a-58fd-9343-6f4f78a411e7","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:31659","comment":"https://x.com/drb_ra/status/1953129105211211852","timestamp":"1754497240","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"71a8e4dd-9644-5b11-9870-491a7f559749","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:10803","comment":"https://x.com/drb_ra/status/1953129242734043612","timestamp":"1754497273","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"13b6517f-fca5-5a38-859a-b8dd646589f4","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:5938","comment":"https://x.com/drb_ra/status/1953129381259252148","timestamp":"1754497306","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e92e75ba-41a9-5fba-8f3d-b1b5250cd835","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:789","comment":"https://x.com/drb_ra/status/1953129518400512019","timestamp":"1754497339","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"431e5072-83fa-522d-998d-9d55e03b7467","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:65135","comment":"https://x.com/drb_ra/status/1953129656284057731","timestamp":"1754497372","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e8f325b3-a7c0-50a8-8897-38cd7952f999","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:57416","comment":"https://x.com/drb_ra/status/1953129793622352172","timestamp":"1754497404","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e67509fc-4730-5488-994b-c4860e988e9e","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:62857","comment":"https://x.com/drb_ra/status/1953129931048636517","timestamp":"1754497437","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8474bbe9-12a0-576a-aa08-f0a4e0cf418c","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:631","comment":"https://x.com/drb_ra/status/1953130069028667590","timestamp":"1754497470","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e494b536-86db-58db-bb24-b11fda426946","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:10001","comment":"https://x.com/drb_ra/status/1953130206740324468","timestamp":"1754497503","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"c029720b-8e26-556e-80a8-c48533910b4d","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:9000","comment":"https://x.com/drb_ra/status/1953130344963592658","timestamp":"1754497536","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"63d90cac-d360-5d6a-94a1-3aec58f0427a","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:5222","comment":"https://x.com/drb_ra/status/1953130482985476590","timestamp":"1754497569","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1f4a4032-34e6-588a-adb3-40597eda01c3","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:2403","comment":"https://x.com/drb_ra/status/1953130621397549323","timestamp":"1754497602","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e73bbcdc-854d-516a-afeb-ea348ea82b0c","type":"url","category":"Network activity","to_ids":true,"value":"http://201.14.19.106:587","comment":"https://x.com/drb_ra/status/1953130759637606546","timestamp":"1754497635","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"152bde86-5af9-570f-942e-f418af64755e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.153.34.148","comment":"https://x.com/drb_ra/status/1953130897101750347","timestamp":"1754497667","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"aeedc431-4221-58ab-b71e-40328975fd97","type":"url","category":"Network activity","to_ids":true,"value":"http://45.153.34.148:8808","comment":"https://x.com/drb_ra/status/1953130897101750347","timestamp":"1754497667","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"af0c37fd-0fbd-5763-8140-c864571d918f","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.84.133:8808","comment":"https://x.com/drb_ra/status/1953131035417301389","timestamp":"1754497700","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b59125d5-b0db-5e70-96f8-7a4eaeb67f9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.84.133","comment":"https://x.com/drb_ra/status/1953131035417301389","timestamp":"1754497700","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9e8e5a69-636a-56e5-9d36-f163144ebe58","type":"url","category":"Network activity","to_ids":true,"value":"http://64.62.195.154:587","comment":"https://x.com/drb_ra/status/1953131172935971207","timestamp":"1754497733","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9ae0df30-0c25-5e19-b39d-65f0fc78d4cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.62.195.154","comment":"https://x.com/drb_ra/status/1953131172935971207","timestamp":"1754497733","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7745a912-af09-5895-9707-cf1ccfe686c8","type":"url","category":"Network activity","to_ids":true,"value":"http://128.199.11.74:80","comment":"https://x.com/drb_ra/status/1953131311893250145","timestamp":"1754497766","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a000db5c-e1bc-561b-8618-77ff21d3aed3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.199.11.74","comment":"https://x.com/drb_ra/status/1953131311893250145","timestamp":"1754497766","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"25f5019b-f84c-580f-975c-1d2f6b27f39a","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.42.4:7000","comment":"https://x.com/drb_ra/status/1953131450363957534","timestamp":"1754497799","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"5a9e541b-1063-598d-bdd7-f97d15f39e4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.42.4","comment":"https://x.com/drb_ra/status/1953131450363957534","timestamp":"1754497799","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"f0016a18-1235-5b01-ab28-191fdc0fd662","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.158.54:8848","comment":"https://x.com/drb_ra/status/1953131590357241952","timestamp":"1754497833","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"51c6245f-7f4c-5958-89c2-84f8a12b8979","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.158.54","comment":"https://x.com/drb_ra/status/1953131590357241952","timestamp":"1754497833","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"4fd95a8e-52ac-58d6-9712-62d6dc4a41b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.199.80.166","comment":"https://x.com/drb_ra/status/1953131728794419234","timestamp":"1754497866","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"4eb124ba-56d2-5b94-b560-8767954fa9e8","type":"url","category":"Network activity","to_ids":true,"value":"http://20.199.80.166:1024","comment":"https://x.com/drb_ra/status/1953131728794419234","timestamp":"1754497866","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"4e29e1d4-031a-5cd4-9ee0-3d0a3baf6286","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.92.85:445","comment":"https://x.com/drb_ra/status/1953131867063844986","timestamp":"1754497899","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"be791fdd-83f4-541b-a669-9585fb322de7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.92.85","comment":"https://x.com/drb_ra/status/1953131867063844986","timestamp":"1754497899","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5a72be2d-86a7-575d-81a8-de77b70736ef","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.155.2:80","comment":"https://x.com/drb_ra/status/1953132005597581776","timestamp":"1754497932","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"d8bb5e98-ef1b-541d-bb5f-f24f28985a96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.155.2","comment":"https://x.com/drb_ra/status/1953132005597581776","timestamp":"1754497932","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"6b99c85d-5c46-5dd9-9c56-afa331853632","type":"url","category":"Network activity","to_ids":true,"value":"http://172.190.147.123:8443","comment":"https://x.com/drb_ra/status/1953132144559091764","timestamp":"1754497965","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"ce6f4cb9-2234-59b0-9bea-127063093558","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.190.147.123","comment":"https://x.com/drb_ra/status/1953132144559091764","timestamp":"1754497965","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"19993ee1-7a82-508a-9f1a-7af88e3dce39","type":"url","category":"Network activity","to_ids":true,"value":"http://166.1.22.248:443","comment":"https://x.com/drb_ra/status/1953132283839344864","timestamp":"1754497998","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c5e73dd7-d0c1-588d-9035-de6b3a2aae4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.1.22.248","comment":"https://x.com/drb_ra/status/1953132283839344864","timestamp":"1754497998","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"60b103e3-ae7f-5b33-96f7-14409add65c8","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.206.129:7443","comment":"https://x.com/drb_ra/status/1953132423786496309","timestamp":"1754498031","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"9f0a4475-41f7-5b1e-befd-8cf20195d80b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.206.129","comment":"https://x.com/drb_ra/status/1953132423786496309","timestamp":"1754498031","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"686257cf-fe69-5d02-8ab2-25c937553a44","type":"url","category":"Network activity","to_ids":true,"value":"http://213.165.60.13:7443","comment":"https://x.com/drb_ra/status/1953132562043273642","timestamp":"1754498064","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"aec1bd07-cf67-5e08-baa5-8b926bd6e61b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.165.60.13","comment":"https://x.com/drb_ra/status/1953132562043273642","timestamp":"1754498064","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bdb741fc-68e2-59f6-b8e5-1aacea4ae514","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.219.16.8","comment":"https://x.com/drb_ra/status/1953132700849582193","timestamp":"1754498097","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"1a053318-ab90-5fa2-bdf7-ad8641965aa2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.219.16.8:7443","comment":"https://x.com/drb_ra/status/1953132700849582193","timestamp":"1754498097","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8302f97e-25d3-5c33-851c-efe2d7f188ee","type":"url","category":"Network activity","to_ids":true,"value":"http://83.229.83.138:7443","comment":"https://x.com/drb_ra/status/1953132838477263178","timestamp":"1754498130","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"2d9f50b4-3775-56cc-8668-8bfccda5c0e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.229.83.138","comment":"https://x.com/drb_ra/status/1953132838477263178","timestamp":"1754498130","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"ce9ec07a-2b11-5cfb-8988-ae0d200b839a","type":"url","category":"Network activity","to_ids":true,"value":"http://77.105.161.230:31337","comment":"https://x.com/drb_ra/status/1953132977354879129","timestamp":"1754498163","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8c711f0e-87bb-5496-a20d-fa1a7e23462e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.105.161.230","comment":"https://x.com/drb_ra/status/1953132977354879129","timestamp":"1754498163","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"cbd3618a-c406-5fe0-a3b8-2e8ae75ba9d2","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.56.23:31337","comment":"https://x.com/drb_ra/status/1953133115032863194","timestamp":"1754498196","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f4599337-69d3-5716-b6a2-f2948b501f4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.56.23","comment":"https://x.com/drb_ra/status/1953133115032863194","timestamp":"1754498196","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3865673b-04ef-5650-bbda-f0003b951518","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.45:31337","comment":"https://x.com/drb_ra/status/1953133253348540642","timestamp":"1754498229","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e029d97d-59ec-5e57-be3a-742f6f23adf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.45","comment":"https://x.com/drb_ra/status/1953133253348540642","timestamp":"1754498229","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8cd4b903-7fdd-58c6-a7c9-3f7156a0a0f0","type":"url","category":"Network activity","to_ids":true,"value":"http://49.0.254.101:10000","comment":"https://x.com/drb_ra/status/1953133392985198856","timestamp":"1754498263","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b75083ce-da48-534c-a94c-940b3ddcba16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.0.254.101","comment":"https://x.com/drb_ra/status/1953133533473517622","timestamp":"1754498296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"874ab885-dee6-55e5-9b3f-4d3f0ea95490","type":"url","category":"Network activity","to_ids":true,"value":"http://49.0.254.101:443","comment":"https://x.com/drb_ra/status/1953133533473517622","timestamp":"1754498296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3bad5a40-d58a-51c6-a6d3-5f32481f1895","type":"domain","category":"Network activity","to_ids":true,"value":"qlchacha.top","comment":"https://x.com/drb_ra/status/1953133533473517622","timestamp":"1754498296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a0c4ddd0-37ed-5bd9-b3c2-6587398e2337","type":"url","category":"Network activity","to_ids":true,"value":"https://www.qlchacha.top/s/58462514417","comment":"https://x.com/drb_ra/status/1953133533473517622","timestamp":"1754498296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"caf0dda3-871b-5f3a-848f-f9bd4ee344e2","type":"url","category":"Network activity","to_ids":true,"value":"http://206.119.172.150:80","comment":"https://x.com/drb_ra/status/1953133672351080943","timestamp":"1754498329","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"86dc41e8-4614-56dd-b41e-696542fe8b14","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.74.112:8843","comment":"https://x.com/drb_ra/status/1953133811429966307","timestamp":"1754498362","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ef5f574e-ee95-53d6-98f5-395cd26799c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.74.112","comment":"https://x.com/drb_ra/status/1953133811429966307","timestamp":"1754498362","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"853a55ef-928a-56a8-a806-4e82833640b7","type":"url","category":"Network activity","to_ids":true,"value":"http://47.102.87.217:80","comment":"https://x.com/drb_ra/status/1953133949779136756","timestamp":"1754498395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d19a4ccc-b571-5430-aadd-ebd298d0fcef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.102.87.217","comment":"https://x.com/drb_ra/status/1953133949779136756","timestamp":"1754498395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"968607a0-ede2-5aa9-89ae-8190d32ee40f","type":"domain","category":"Network activity","to_ids":true,"value":"cnm.mom","comment":"https://x.com/drb_ra/status/1953134090179235948","timestamp":"1754498429","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b835f9f7-eb6a-508b-b026-11bd0feaaff8","type":"url","category":"Network activity","to_ids":true,"value":"https://cnm.mom/wc/58462514417","comment":"https://x.com/drb_ra/status/1953134090179235948","timestamp":"1754498429","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"48d33628-9205-5aab-91fb-fc883678e9fc","type":"url","category":"Network activity","to_ids":true,"value":"http://61.184.13.207:443","comment":"https://x.com/drb_ra/status/1953134231112044605","timestamp":"1754498462","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e51f658b-69c1-5c36-b3a5-8217cd09ff6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.184.13.207","comment":"https://x.com/drb_ra/status/1953134231112044605","timestamp":"1754498462","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b287e654-23ea-5872-b67d-3e2c8a727d2f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.218.179","comment":"https://x.com/drb_ra/status/1953134370925023398","timestamp":"1754498496","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03d85a2e-ec8c-5f26-b67d-83974be4ac9b","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.218.179:803","comment":"https://x.com/drb_ra/status/1953134370925023398","timestamp":"1754498496","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c0922b9-bc63-5aac-9278-cd53119b3f9d","type":"url","category":"Network activity","to_ids":true,"value":"https://42.192.40.142/activity","comment":"https://x.com/drb_ra/status/1953134509106286686","timestamp":"1754498529","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4d202f4a-76f6-5310-b228-ae482cbef7a1","type":"url","category":"Network activity","to_ids":true,"value":"http://42.192.40.142:80","comment":"https://x.com/drb_ra/status/1953134509106286686","timestamp":"1754498529","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7edc0433-8935-5a25-8783-b495ff579dce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.192.40.142","comment":"https://x.com/drb_ra/status/1953134509106286686","timestamp":"1754498529","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0849b463-c9cb-5435-9cca-0d52dc9db7ab","type":"url","category":"Network activity","to_ids":true,"value":"http://42.51.34.56:8010","comment":"https://x.com/drb_ra/status/1953134647946191221","timestamp":"1754498562","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a4922f3a-c039-5150-a51b-795629fa8ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.51.34.56","comment":"https://x.com/drb_ra/status/1953134647946191221","timestamp":"1754498562","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b0a82fd5-83dd-584f-9116-7304810ba0c4","type":"url","category":"Network activity","to_ids":true,"value":"http://172.105.24.242:443","comment":"https://x.com/drb_ra/status/1953134786668646692","timestamp":"1754498595","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ec413a0d-4978-5e9b-af7c-59e4f2732e16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.105.24.242","comment":"https://x.com/drb_ra/status/1953134786668646692","timestamp":"1754498595","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"16f76bcc-37f2-5983-be2a-b436496af9e7","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.28.208:8888","comment":"https://x.com/drb_ra/status/1953134927358087575","timestamp":"1754498628","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"58c652df-c485-549d-add8-7aedde17e620","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.28.208","comment":"https://x.com/drb_ra/status/1953134927358087575","timestamp":"1754498628","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e1ec7992-4747-5d58-b3a2-d88a27a13ade","type":"url","category":"Network activity","to_ids":true,"value":"https://121.43.28.208/ga.js","comment":"https://x.com/drb_ra/status/1953134927358087575","timestamp":"1754498628","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f6aad5f-5c21-5159-a131-794a103c9dac","type":"url","category":"Network activity","to_ids":true,"value":"http://118.31.173.19:80","comment":"https://x.com/drb_ra/status/1953135065950490799","timestamp":"1754498661","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b211c5d6-7dd3-5d4d-a8c5-a5dba73f00a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.31.173.19","comment":"https://x.com/drb_ra/status/1953135065950490799","timestamp":"1754498661","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6891ef9d-0d96-522d-b85e-6b358eca4a43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.222.84","comment":"https://x.com/drb_ra/status/1953135204702318913","timestamp":"1754498694","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a36676ba-2e36-5e4a-a3df-be01298204ea","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.222.84:80","comment":"https://x.com/drb_ra/status/1953135204702318913","timestamp":"1754498694","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"42ad2960-077d-59d2-affc-3d8d38fd641a","type":"domain","category":"Network activity","to_ids":true,"value":"c95f137f-7f36-4b18-964c-56d0d113b143-00-dc5usg4e8pkl.kirk.replit.dev","comment":"https://x.com/drb_ra/status/1953135345022689429","timestamp":"1754498728","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e7bf95fd-58b6-5705-b46f-e5db5395ccb1","type":"url","category":"Network activity","to_ids":true,"value":"https://c95f137f-7f36-4b18-964c-56d0d113b143-00-dc5usg4e8pkl.kirk.replit.dev/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1953135345022689429","timestamp":"1754498728","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b4e9f5c2-a7d4-5225-a0bc-93a34a10bec2","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.158.87:443","comment":"https://x.com/drb_ra/status/1953135345022689429","timestamp":"1754498728","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9265aa66-5ee9-5918-8a42-fd9cfa3c1554","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.158.87","comment":"https://x.com/drb_ra/status/1953135345022689429","timestamp":"1754498728","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"374aca38-1851-54dc-a470-865e377dd262","type":"url","category":"Network activity","to_ids":true,"value":"http://47.102.21.22:9999","comment":"https://x.com/drb_ra/status/1953135484835713432","timestamp":"1754498761","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"75519fed-9296-591a-a225-35bbe24e8775","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.102.21.22","comment":"https://x.com/drb_ra/status/1953135484835713432","timestamp":"1754498761","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"101848eb-5b49-57db-8ad2-8040355fb6c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.143.14","comment":"https://x.com/drb_ra/status/1953135623105073176","timestamp":"1754498794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4d275910-5242-56a2-b781-71d3fe36c52b","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.143.14:80","comment":"https://x.com/drb_ra/status/1953135623105073176","timestamp":"1754498794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"377e57ed-1c83-5b6c-9454-4cf4921ad892","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.98.136.161","comment":"https://x.com/drb_ra/status/1953135764683833563","timestamp":"1754498828","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d52ef5a-190f-5ae0-a522-0dd439257eaa","type":"url","category":"Network activity","to_ids":true,"value":"https://47.98.136.161/activity","comment":"https://x.com/drb_ra/status/1953135764683833563","timestamp":"1754498828","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eaa3861c-008b-5058-9164-1bd54aa22e3c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.98.136.161:80","comment":"https://x.com/drb_ra/status/1953135764683833563","timestamp":"1754498828","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7cb00cb5-fccd-5ef0-ba31-f11368dd3e4e","type":"url","category":"Network activity","to_ids":true,"value":"https://43.134.9.57/updates.rss","comment":"https://x.com/drb_ra/status/1953135903448203489","timestamp":"1754498861","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2fda8501-28e9-5718-8f6b-f974d1e9c33d","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.9.57:4444","comment":"https://x.com/drb_ra/status/1953135903448203489","timestamp":"1754498861","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aee674e5-78b5-5b56-ae85-ed7f7e06d41c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.9.57","comment":"https://x.com/drb_ra/status/1953135903448203489","timestamp":"1754498861","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f102ec53-3ab7-5f44-baef-9a5fad7a71a2","type":"url","category":"Network activity","to_ids":true,"value":"http://154.44.25.248:80","comment":"https://x.com/drb_ra/status/1953136042854285694","timestamp":"1754498894","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"45be3eb1-8062-5c1b-b426-7279a7d02983","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.44.25.248","comment":"https://x.com/drb_ra/status/1953136042854285694","timestamp":"1754498894","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"08c63b8d-aa79-58cc-be1c-64b6b5dfb85d","type":"url","category":"Network activity","to_ids":true,"value":"http://47.97.118.238:80","comment":"https://x.com/drb_ra/status/1953136181698302398","timestamp":"1754498927","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c35ac6d0-2189-5eb9-8af4-57f2973164cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.97.118.238","comment":"https://x.com/drb_ra/status/1953136181698302398","timestamp":"1754498927","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"280b9f5e-71f8-504d-8a08-647ac556d414","type":"url","category":"Network activity","to_ids":true,"value":"http://151.80.25.10:88","comment":"https://x.com/drb_ra/status/1953136320391307671","timestamp":"1754498960","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"07d1dc0c-1952-5bcc-bf5a-8ffdd64c6840","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.80.25.10","comment":"https://x.com/drb_ra/status/1953136320391307671","timestamp":"1754498960","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"37d5f4f0-bd5a-5103-9f86-76df4235b351","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.143.1.216","comment":"https://x.com/smica83/status/1953145010351640685","timestamp":"1754501032","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"189f3b23-a4d6-5abc-9884-6b845c1ccca4","type":"url","category":"Network activity","to_ids":true,"value":"http://193.143.1.216:443","comment":"https://x.com/smica83/status/1953145010351640685","timestamp":"1754501032","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"5e692011-efaa-5c7a-9ab7-0a5555de3e03","type":"domain","category":"Network activity","to_ids":true,"value":"ffrtunv.weebly.com","comment":"https://x.com/urldna_bot/status/1953154130379252209","timestamp":"1754503207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0b5dc24a-4487-5214-a5f2-6d574cebe33c","type":"url","category":"Network activity","to_ids":true,"value":"https://ffrtunv.weebly.com","comment":"https://x.com/urldna_bot/status/1953154130379252209","timestamp":"1754503207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eea54aea-4cc7-50ad-856a-85fb200cb253","type":"url","category":"Network activity","to_ids":true,"value":"http://159.223.171.199:8443","comment":"https://x.com/drb_ra/status/1953165871112753379","timestamp":"1754506006","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0df4395d-2314-5ad4-a9e6-95a0f1dd277e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.223.171.199","comment":"https://x.com/drb_ra/status/1953165871112753379","timestamp":"1754506006","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"49ef1bfd-bdce-5222-af01-c9347edbb0fb","type":"url","category":"Network activity","to_ids":true,"value":"http://51.83.137.148:7443","comment":"https://x.com/drb_ra/status/1953166008551710855","timestamp":"1754506039","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c430abf2-8228-5c1a-8d28-b5eaf0d0edbf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.83.137.148","comment":"https://x.com/drb_ra/status/1953166008551710855","timestamp":"1754506039","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"128b54f7-6333-58d4-9495-176f746acf5a","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.44.149:7443","comment":"https://x.com/drb_ra/status/1953166146607145360","timestamp":"1754506072","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"68b2719c-38e0-5f72-92a9-e668d6cca79b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.44.149","comment":"https://x.com/drb_ra/status/1953166146607145360","timestamp":"1754506072","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c47b177a-bcf0-5b23-9b3f-03505eed2e98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.71.38.123","comment":"https://x.com/drb_ra/status/1953166284280971563","timestamp":"1754506104","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"adc3ef24-64e0-5c17-b02c-2bdcb513dbc3","type":"url","category":"Network activity","to_ids":true,"value":"http://167.71.38.123:443","comment":"https://x.com/drb_ra/status/1953166284280971563","timestamp":"1754506104","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1939ae28-05d5-52c7-86a9-adba58cf6d41","type":"url","category":"Network activity","to_ids":true,"value":"http://212.132.117.5:443","comment":"https://x.com/drb_ra/status/1953166422026149925","timestamp":"1754506137","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cbbcfb0a-19e3-521c-b11d-d7deb200ee14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.132.117.5","comment":"https://x.com/drb_ra/status/1953166422026149925","timestamp":"1754506137","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"74e36920-df14-5105-93e5-23c217d312ee","type":"url","category":"Network activity","to_ids":true,"value":"http://146.103.118.40:443","comment":"https://x.com/drb_ra/status/1953166559620345885","timestamp":"1754506170","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bb422361-1780-5c92-aca0-bfb8f422c872","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.103.118.40","comment":"https://x.com/drb_ra/status/1953166559620345885","timestamp":"1754506170","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"315e5f7e-cc30-54f9-8ea4-1bd85d1457fd","type":"url","category":"Network activity","to_ids":true,"value":"http://104.131.190.132:443","comment":"https://x.com/drb_ra/status/1953167205220098276","timestamp":"1754506324","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0a8ee84f-dc23-52c5-be56-03c8ea32eb15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.131.190.132","comment":"https://x.com/drb_ra/status/1953167205220098276","timestamp":"1754506324","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2b267388-9833-528d-bc35-3352325d4acc","type":"url","category":"Network activity","to_ids":true,"value":"http://18.176.93.76:80","comment":"https://x.com/drb_ra/status/1953167343397339212","timestamp":"1754506357","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e0d4449d-7e5a-581a-95ad-29324790ad1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.176.93.76","comment":"https://x.com/drb_ra/status/1953167343397339212","timestamp":"1754506357","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"48e2c050-dc0e-5b43-9b25-f6e82d99bee6","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.66:2404","comment":"https://x.com/drb_ra/status/1953167482555961689","timestamp":"1754506390","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3ca1da92-a210-5286-9914-7d525c7b4bfa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.66","comment":"https://x.com/drb_ra/status/1953167482555961689","timestamp":"1754506390","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7cd43567-539d-512b-a11e-bd83457d0816","type":"url","category":"Network activity","to_ids":true,"value":"http://166.1.209.157:2404","comment":"https://x.com/drb_ra/status/1953167620653433130","timestamp":"1754506423","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"34a81e87-587e-5252-8585-5c95d60e2872","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.1.209.157","comment":"https://x.com/drb_ra/status/1953167620653433130","timestamp":"1754506423","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ba75d1db-bcf1-52f6-9a91-16ad96a65783","type":"url","category":"Network activity","to_ids":true,"value":"http://2.57.241.6:3232","comment":"https://x.com/drb_ra/status/1953167762035265880","timestamp":"1754506457","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"03c3e896-1942-5e6e-9072-d05ab9a45ea0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.201.25.169","comment":"https://x.com/drb_ra/status/1953167900413456516","timestamp":"1754506490","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d063b0c4-f337-51d7-b319-7c47401c0e7f","type":"url","category":"Network activity","to_ids":true,"value":"http://13.201.25.169:28951","comment":"https://x.com/drb_ra/status/1953167900413456516","timestamp":"1754506490","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e6ee8341-3fe3-505d-9e4c-fdf2b8f743ee","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.167.247:60000","comment":"https://x.com/drb_ra/status/1953168038183719129","timestamp":"1754506523","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c715d161-74ab-58ff-b41d-d025ca615b43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.167.247","comment":"https://x.com/drb_ra/status/1953168038183719129","timestamp":"1754506523","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"da1064e4-904e-53fe-92e1-0c3781e4919b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.167.247:4400","comment":"https://x.com/drb_ra/status/1953168176189202771","timestamp":"1754506555","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e50f1a1b-4204-5b1f-bb5a-e16dbc99b1c5","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.167.247:1200","comment":"https://x.com/drb_ra/status/1953168314458394707","timestamp":"1754506588","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"193d10b5-0032-5e5d-bcad-dcdab3ad69e8","type":"url","category":"Network activity","to_ids":true,"value":"http://51.16.46.172:15616","comment":"https://x.com/drb_ra/status/1953168452551643183","timestamp":"1754506621","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3fd59542-887a-514e-ab39-11f017a593ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.16.46.172","comment":"https://x.com/drb_ra/status/1953168452551643183","timestamp":"1754506621","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dc470dba-43ba-5e23-bba3-6c8f2b655bad","type":"url","category":"Network activity","to_ids":true,"value":"http://51.112.51.159:47080","comment":"https://x.com/drb_ra/status/1953168591152443783","timestamp":"1754506654","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"53a750a3-2987-5422-821a-13ce47374e73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.112.51.159","comment":"https://x.com/drb_ra/status/1953168591152443783","timestamp":"1754506654","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6d8a9b8d-9c11-50bc-bf1d-84d25d223b32","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.49.224:8020","comment":"https://x.com/drb_ra/status/1953168730537771139","timestamp":"1754506688","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"dc9fa545-39ac-59db-90c6-93ce2fa785d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.49.224","comment":"https://x.com/drb_ra/status/1953168730537771139","timestamp":"1754506688","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5d57c301-a3c4-5481-a491-fa21dfe1d17f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.54.184.177:80","comment":"https://x.com/drb_ra/status/1953169006589817222","timestamp":"1754506753","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bcfe50ca-04d1-5f26-8760-4b3aeae19335","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.54.184.177","comment":"https://x.com/drb_ra/status/1953169006589817222","timestamp":"1754506753","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"aa74b5cf-59fb-5897-9cf3-1a2f0dcfe143","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.208.158.155","comment":"https://x.com/drb_ra/status/1953169145312493868","timestamp":"1754506787","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"589730b7-100a-57e8-a3a0-9433ffbbe28f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.208.158.155:80","comment":"https://x.com/drb_ra/status/1953169145312493868","timestamp":"1754506787","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4d397662-8745-5fa0-ba70-09b537f260cd","type":"domain","category":"Network activity","to_ids":true,"value":"l1z4sn.webwave.dev","comment":"https://x.com/urldna_bot/status/1953184344094200018","timestamp":"1754510410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c94a7cbc-f6ef-5f79-9d69-d2a917177286","type":"url","category":"Network activity","to_ids":true,"value":"https://l1z4sn.webwave.dev","comment":"https://x.com/urldna_bot/status/1953184344094200018","timestamp":"1754510410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"758f0bf0-4798-5fab-96af-5232960c9a5f","type":"domain","category":"Network activity","to_ids":true,"value":"myaccountsgoggle.netlify.app","comment":"https://x.com/s3curetheweb/status/1953187856526037159","timestamp":"1754511248","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcdd734e-4e07-5ae5-9f9e-4189b8873a72","type":"url","category":"Network activity","to_ids":true,"value":"https://myaccountsgoggle.netlify.app","comment":"https://x.com/s3curetheweb/status/1953187856526037159","timestamp":"1754511248","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1257b13-762a-5e84-904f-45560a806c95","type":"md5","category":"Payload delivery","to_ids":true,"value":"0c86dbee026608e560f542dae150aaf1","comment":"https://x.com/petikvx/status/1953189805388386509","timestamp":"1754511712","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"21606426-6f5e-5622-bb85-5eff46edd6e2","type":"url","category":"Network activity","to_ids":true,"value":"http://sti-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ecc056f2-dcc1-515e-baf1-e9c63cc3ad97","type":"url","category":"Network activity","to_ids":true,"value":"http://ravinads.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1df59841-2057-58f7-b6ca-bcf9048e4073","type":"domain","category":"Network activity","to_ids":true,"value":"ravinads.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0026936e-12c1-583d-bb96-59fb04fcc81b","type":"url","category":"Network activity","to_ids":true,"value":"http://hgame33.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e3f16b11-7c39-5454-a389-5dee26f9beec","type":"domain","category":"Network activity","to_ids":true,"value":"hgame33.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6998d8aa-b55f-54ac-be49-b370aa7ab845","type":"url","category":"Network activity","to_ids":true,"value":"http://audit-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"987c4121-cbf3-5aa2-9489-f54660088ec2","type":"domain","category":"Network activity","to_ids":true,"value":"audit-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"32e18a57-2e15-597d-8dc6-31f65c1739cf","type":"domain","category":"Network activity","to_ids":true,"value":"sti-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6eba56f5-69dc-5d7b-825e-caa30a356a40","type":"domain","category":"Network activity","to_ids":true,"value":"kg.sti-salyk.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1a91954a-9c51-5563-a328-70597ad669c2","type":"domain","category":"Network activity","to_ids":true,"value":"kgauditcheck.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7d37effe-5236-51ab-a09c-99971fbe423e","type":"url","category":"Network activity","to_ids":true,"value":"http://kg.sti-salyk.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fd13df0e-aa44-5cb0-927c-3e5bb0a65708","type":"url","category":"Network activity","to_ids":true,"value":"http://proauditkg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0e8e314b-a038-54bd-be02-cbad68230232","type":"domain","category":"Network activity","to_ids":true,"value":"proauditkg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8eee5072-3d66-5ab7-b4e8-69d3a48f5411","type":"url","category":"Network activity","to_ids":true,"value":"http://minjust-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"364c0607-4990-5492-8c70-aecdc2e5012a","type":"domain","category":"Network activity","to_ids":true,"value":"minjust-kg.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3b7a28a5-a913-5d4a-922f-79b42b8ae30e","type":"url","category":"Network activity","to_ids":true,"value":"http://kgauditcheck.com","comment":"https://x.com/askardyuss/status/1953192440980189423","timestamp":"1754512341","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"52ca6fe8-b132-5f4f-a51a-793a6ce599bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.132","comment":"https://x.com/threatquery/status/1953199415943991656","timestamp":"1754514004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"df191cd0-971a-5fe2-8578-d1ff980f7e88","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.132","comment":"https://x.com/threatquery/status/1953199415943991656","timestamp":"1754514004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"8fa7d23d-d1b8-5795-97e5-626c270acbcc","type":"url","category":"Network activity","to_ids":true,"value":"http://193.143.1.216","comment":"https://x.com/threatquery/status/1953199417726550335","timestamp":"1754514004","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"},{"name":"malware"}]},{"uuid":"38d3c457-8fc3-5d3f-b585-678fd7370fc5","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.56","comment":"https://x.com/threatquery/status/1953199419483947245","timestamp":"1754514004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"691ab457-398d-5cab-832e-d265b338ef5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.56","comment":"https://x.com/threatquery/status/1953199419483947245","timestamp":"1754514004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"cd2760c2-5128-52f5-81f0-9cab0c80776f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.107.255","comment":"https://x.com/drb_ra/status/1953199736007344474","timestamp":"1754514080","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"162ffcc9-1182-5110-b1d9-b3d769cc1959","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.107.255:80","comment":"https://x.com/drb_ra/status/1953199736007344474","timestamp":"1754514080","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f1628601-4d4b-5548-a743-4261748366aa","type":"domain","category":"Network activity","to_ids":true,"value":"go.georgiansurgeries.com","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2784c380-b761-53f6-a0b0-8f36965b627e","type":"domain","category":"Network activity","to_ids":true,"value":"challenge.upnetdns.com","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e84c9470-735a-5d5e-b4a3-8683d1466217","type":"url","category":"Network activity","to_ids":true,"value":"https://challenge.upnetdns.com/success/success/","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b11e6ef9-e5cf-5bef-8947-06a845124af2","type":"domain","category":"Network activity","to_ids":true,"value":"georgiansurgeries.com","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92c5715e-00e6-5f54-a33a-861f480d8f7c","type":"url","category":"Network activity","to_ids":true,"value":"http://georgiansurgeries.com","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff82adea-6ba4-513a-bde6-f1c493a9dd2d","type":"url","category":"Network activity","to_ids":true,"value":"http://go.georgiansurgeries.com","comment":"https://x.com/WifiRumHam/status/1953202660078961013","timestamp":"1754514777","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7208087e-85f0-59f5-a33a-09f4225fb5b7","type":"md5","category":"Payload delivery","to_ids":true,"value":"e1b4572ea0780c963043819016f4c7a8","comment":"https://x.com/skocherhan/status/1953207486518890574","timestamp":"1754515928","distribution":"5"},{"uuid":"ed221f1d-4c24-5896-b912-c929b63806cd","type":"sha256","category":"Payload delivery","to_ids":true,"value":"499f16ed2def90b3d4c0de5ca22d8c8080c26a1a405b4078e262a0a34bcb1e31","comment":"https://x.com/skocherhan/status/1953207486518890574","timestamp":"1754515928","distribution":"5"},{"uuid":"935849b7-e601-55d4-ac0e-cc699b54d21d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8ca1ffbd3cd22b9bead766ebd2a0f7b2d195b03d533bacf0cb8e1b1887af5636","comment":"https://x.com/skocherhan/status/1953209413478633957","timestamp":"1754516387","distribution":"5"},{"uuid":"a42da86e-3abe-5ba9-9f8a-0c38c32ab092","type":"domain","category":"Network activity","to_ids":true,"value":"andrefelipedonascime1753562407700.0461178.meusitehostgator.com.br","comment":"https://x.com/skocherhan/status/1953213741081792627","timestamp":"1754517419","distribution":"5"},{"uuid":"a3215cd9-c922-5996-91af-cd9047b722b5","type":"url","category":"Network activity","to_ids":true,"value":"https://andrefelipedonascime1753562407700.0461178.meusitehostgator.com.br/vTHqZccREw_04/03.txt","comment":"https://x.com/skocherhan/status/1953213741081792627","timestamp":"1754517419","distribution":"5"},{"uuid":"51f49d17-fb54-5811-ab26-e52c4d71d743","type":"domain","category":"Network activity","to_ids":true,"value":"garazeuhriste.webzdarma.cz","comment":"https://x.com/urldna_bot/status/1953214530382594075","timestamp":"1754517607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2ff6e361-3b0c-5599-8d3b-cbc8bf4d32b3","type":"url","category":"Network activity","to_ids":true,"value":"https://garazeuhriste.webzdarma.cz/am/infospage.php","comment":"https://x.com/urldna_bot/status/1953214530382594075","timestamp":"1754517607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"15efbc99-167d-5513-8360-baafa6ce5d9f","type":"domain","category":"Network activity","to_ids":true,"value":"297d4064-b529-4934-af6f-b3f266e64f8a-00-316tm8g12nc9a.riker.replit.dev","comment":"https://x.com/drb_ra/status/1953229799993770427","timestamp":"1754521248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"76f67487-8704-5ec6-ac33-1581eea4d283","type":"url","category":"Network activity","to_ids":true,"value":"https://297d4064-b529-4934-af6f-b3f266e64f8a-00-316tm8g12nc9a.riker.replit.dev/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1953229799993770427","timestamp":"1754521248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b39edcec-611f-50b1-a67b-f96feabcaba6","type":"url","category":"Network activity","to_ids":true,"value":"http://154.219.109.205:443","comment":"https://x.com/drb_ra/status/1953229799993770427","timestamp":"1754521248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e874d916-e8c0-53b2-9af1-a5d9e72e7d35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.219.109.205","comment":"https://x.com/drb_ra/status/1953229799993770427","timestamp":"1754521248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"68f93997-565c-5464-b86a-f71e9df88995","type":"url","category":"Network activity","to_ids":true,"value":"http://54.89.193.82:443","comment":"https://x.com/drb_ra/status/1953229939215613978","timestamp":"1754521281","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e4d79943-5eb4-5607-8f5e-44cdb76f8b12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.89.193.82","comment":"https://x.com/drb_ra/status/1953229939215613978","timestamp":"1754521281","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3b43fdda-e5a4-517b-8c09-3704c781ae69","type":"url","category":"Network activity","to_ids":true,"value":"https://54.89.193.82/pixel.gif","comment":"https://x.com/drb_ra/status/1953229939215613978","timestamp":"1754521281","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ab884d94-6348-596f-8977-d8d94797f7eb","type":"url","category":"Network activity","to_ids":true,"value":"http://156.239.238.94:80","comment":"https://x.com/drb_ra/status/1953230587856027846","timestamp":"1754521436","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bc8d8bc6-4129-52d9-a84d-c08ef17c86b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.239.238.94","comment":"https://x.com/drb_ra/status/1953230587856027846","timestamp":"1754521436","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a26f4712-0fbf-554b-8404-f18c78cc9876","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.51.235.217","comment":"https://x.com/drb_ra/status/1953230587856027846","timestamp":"1754521436","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c07dca8-c2a7-521f-9a7c-9e6cb36e6727","type":"url","category":"Network activity","to_ids":true,"value":"http://120.26.39.204:8443","comment":"https://x.com/drb_ra/status/1953230726599692732","timestamp":"1754521469","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"482186aa-b577-545b-b8dd-4d49c9b94f30","type":"url","category":"Network activity","to_ids":true,"value":"https://1.94.134.161/dpixel","comment":"https://x.com/drb_ra/status/1953230866286821674","timestamp":"1754521502","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5ad4ab54-22a2-5832-b1f7-585aaf7c8c00","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.134.161:8099","comment":"https://x.com/drb_ra/status/1953230866286821674","timestamp":"1754521502","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6276f865-1205-5478-aa55-48cfcca93dad","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.179.233:8000","comment":"https://x.com/drb_ra/status/1953231005516517656","timestamp":"1754521535","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4d5baaf8-2e01-555e-87f8-ab4e2453ad67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.179.233","comment":"https://x.com/drb_ra/status/1953231005516517656","timestamp":"1754521535","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"28022583-ea12-5450-ac16-0a8b6c38f5cc","type":"url","category":"Network activity","to_ids":true,"value":"https://134.175.236.240/load","comment":"https://x.com/drb_ra/status/1953231146621251662","timestamp":"1754521569","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ac2e734d-9924-5686-8dea-8087706f2645","type":"url","category":"Network activity","to_ids":true,"value":"http://134.175.236.240:8011","comment":"https://x.com/drb_ra/status/1953231146621251662","timestamp":"1754521569","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"319007f0-9f14-5c1f-95b8-e0bd07f9a0ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.175.236.240","comment":"https://x.com/drb_ra/status/1953231146621251662","timestamp":"1754521569","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4bb6983a-5128-54d5-ba24-c23e19874950","type":"url","category":"Network activity","to_ids":true,"value":"http://118.68.64.227:4444","comment":"https://x.com/drb_ra/status/1953231285394010203","timestamp":"1754521602","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1e727d95-5cea-5c1f-9910-a42b28896bf6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.68.64.227","comment":"https://x.com/drb_ra/status/1953231285394010203","timestamp":"1754521602","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0a9b6df5-3fb8-5b02-bac7-0eda392a9ec5","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-atmost.qimaibao.cn","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7f716a0-4cf0-5570-8ece-4dea985336b4","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-atmost.qimaibao.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee1ba869-2a45-59c8-8ad5-f1420e125d72","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-osficat.peopledao.cn","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93c0862b-b4d0-5045-bd2d-b5c4c4f0a66d","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-osficat.peopledao.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00457406-13b2-592a-aa12-14354b1d7916","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-zation.qipenyou.cn","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ef915ef-c79a-5ecf-9217-11395701476b","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-zation.qipenyou.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1953231399345111335","timestamp":"1754521629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1296f57a-db45-5f86-93b8-e920e748352b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.229.153.123:2004","comment":"https://x.com/drb_ra/status/1953231424200266099","timestamp":"1754521635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e9c87591-f0ce-5ea5-897c-f749ccccdf54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.229.153.123","comment":"https://x.com/drb_ra/status/1953231424200266099","timestamp":"1754521635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8b35ba97-02f1-518b-a883-6c25e543eb70","type":"url","category":"Network activity","to_ids":true,"value":"http://43.229.153.122:2004","comment":"https://x.com/drb_ra/status/1953231563212419259","timestamp":"1754521668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"27fc8e1f-d701-5421-8372-d5755a891549","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.229.153.122","comment":"https://x.com/drb_ra/status/1953231563212419259","timestamp":"1754521668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc754300-cce0-5fd5-ab88-a387c9ab46a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.229.153.124","comment":"https://x.com/drb_ra/status/1953231563212419259","timestamp":"1754521668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e2dd44d8-7dce-59ab-ab8b-4638d983dffc","type":"url","category":"Network activity","to_ids":true,"value":"https://43.230.163.146/siie=utf-8&f=8&rsv_bp=1&rsv_idx=1&ch=&tn=baidu&bar=&wd=","comment":"https://x.com/drb_ra/status/1953231702823678337","timestamp":"1754521701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"98f835b8-5308-5a12-be32-a61c024f857c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.230.163.146:1433","comment":"https://x.com/drb_ra/status/1953231702823678337","timestamp":"1754521701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3846da50-0691-5c2c-94e6-cb3be5a7c307","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.230.163.146","comment":"https://x.com/drb_ra/status/1953231702823678337","timestamp":"1754521701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6415c832-144d-5075-a82b-d605b6c07e73","type":"url","category":"Network activity","to_ids":true,"value":"https://43.160.252.15:443","comment":"https://x.com/drb_ra/status/1953232348885205497","timestamp":"1754521855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"02e87eef-4582-5fa5-9d0c-2a43afd82ccb","type":"url","category":"Network activity","to_ids":true,"value":"http://43.160.252.15:443","comment":"https://x.com/drb_ra/status/1953232348885205497","timestamp":"1754521855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d81b0070-f022-54f9-af22-1ec730c18312","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.252.15","comment":"https://x.com/drb_ra/status/1953232348885205497","timestamp":"1754521855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a5e58667-957f-58a4-8446-d9482e54a0d8","type":"domain","category":"Network activity","to_ids":true,"value":"785949794.weebly.com","comment":"https://x.com/urldna_bot/status/1953244730571022563","timestamp":"1754524807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cbaab545-a28e-5f0a-9b70-d7fc49f2e000","type":"url","category":"Network activity","to_ids":true,"value":"https://785949794.weebly.com","comment":"https://x.com/urldna_bot/status/1953244730571022563","timestamp":"1754524807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f61df742-de1e-5d5c-b090-98402596bef0","type":"domain","category":"Network activity","to_ids":true,"value":"lizventure.com","comment":"https://x.com/ShadowChasing1/status/1953245945459818795","timestamp":"1754525097","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"11123fee-8f52-5c24-9654-d68aaba99da2","type":"url","category":"Network activity","to_ids":true,"value":"https://lizventure.com/wp-includes/js/common/src/list.php","comment":"https://x.com/ShadowChasing1/status/1953245945459818795","timestamp":"1754525097","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"32ee9f39-43a0-5b53-982d-8cb2451f9415","type":"sha256","category":"Payload delivery","to_ids":true,"value":"0375a1e1f558d436de7e93570aa15f9554210d52f724d1189d65c809d31c04cf","comment":"https://x.com/ShadowChasing1/status/1953245945459818795","timestamp":"1754525097","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"15a4a0d4-aa25-5008-b7b9-431e75e59c48","type":"domain","category":"Network activity","to_ids":true,"value":"Offrs.zip","comment":"https://x.com/ShadowChasing1/status/1953245961373007973","timestamp":"1754525101","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"83f7a065-7d08-5af1-bd13-705d9d883cf7","type":"url","category":"Network activity","to_ids":true,"value":"http://Offrs.zip","comment":"https://x.com/ShadowChasing1/status/1953245961373007973","timestamp":"1754525101","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"c64fdd67-bac4-5c19-9213-6745030b1082","type":"md5","category":"Payload delivery","to_ids":true,"value":"b12b503ba0519bfcd8824ceeffa8e6df","comment":"https://x.com/ShadowChasing1/status/1953245961373007973","timestamp":"1754525101","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"692f5563-fc13-50a2-938d-1d17273a3e76","type":"md5","category":"Payload delivery","to_ids":true,"value":"6c75152fc5f3a919f9f62929557b76bc","comment":"https://x.com/ShadowChasing1/status/1953245961373007973","timestamp":"1754525101","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"663c809b-9a54-5c3b-92f2-a4a393940f77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.249.93","comment":"https://x.com/drb_ra/status/1953271022389707053","timestamp":"1754531076","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"97f8216b-fbda-52e2-8879-7fd0d1ef6c6a","type":"url","category":"Network activity","to_ids":true,"value":"http://159.75.177.25:443","comment":"https://x.com/drb_ra/status/1953271022389707053","timestamp":"1754531076","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6a780dbc-e749-5739-9090-f5eade98f91f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.75.177.25","comment":"https://x.com/drb_ra/status/1953271022389707053","timestamp":"1754531076","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ccebee34-c8f7-5431-b615-291ea76168cb","type":"domain","category":"Network activity","to_ids":true,"value":"rondd4.weebly.com","comment":"https://x.com/urldna_bot/status/1953274924098809973","timestamp":"1754532006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"68d93095-3ff0-53ca-9ab2-d2a91ca6c588","type":"url","category":"Network activity","to_ids":true,"value":"https://rondd4.weebly.com","comment":"https://x.com/urldna_bot/status/1953274924098809973","timestamp":"1754532006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1280c836-4059-589a-9d6e-67898410223f","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/BlackNevas","comment":"https://x.com/fbgwls245/status/1953294468041376203","timestamp":"1754536666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d94aeb44-f38e-5cab-824f-93e0a1af696b","type":"domain","category":"Network activity","to_ids":true,"value":"ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953294468041376203","timestamp":"1754536666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"b4a65b23-b6ac-573c-862a-3cf4b1825f99","type":"url","category":"Network activity","to_ids":true,"value":"http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953294468041376203","timestamp":"1754536666","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"53559c43-8799-53a1-b16a-0d6f61351497","type":"url","category":"Network activity","to_ids":true,"value":"http://dimerco.com","comment":"https://x.com/SaptangLabs/status/1953301071700373835","timestamp":"1754538240","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"9e1eb694-d148-5a60-9a2b-e65c693ecc18","type":"domain","category":"Network activity","to_ids":true,"value":"dimerco.com","comment":"https://x.com/SaptangLabs/status/1953301071700373835","timestamp":"1754538240","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a213a049-a054-501c-b170-f03ff39c4a99","type":"url","category":"Network activity","to_ids":true,"value":"https://qbtwaltesue.weebly.com","comment":"https://x.com/urldna_bot/status/1953305136035447290","timestamp":"1754539209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"00153f45-7f2e-5692-852b-cbe2a9c6de10","type":"domain","category":"Network activity","to_ids":true,"value":"qbtwaltesue.weebly.com","comment":"https://x.com/urldna_bot/status/1953305136035447290","timestamp":"1754539209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ca55f227-a38b-5902-9913-a99052e5223b","type":"domain","category":"Network activity","to_ids":true,"value":"spersonas-apps-bancolombia.com","comment":"https://x.com/urldna_bot/status/1953335335816962063","timestamp":"1754546409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6dbd3cbd-8d6f-5168-ba5f-5216a6a84e4a","type":"url","category":"Network activity","to_ids":true,"value":"https://spersonas-apps-bancolombia.com","comment":"https://x.com/urldna_bot/status/1953335335816962063","timestamp":"1754546409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5f381586-4f9b-51dc-84e2-6174f34e245e","type":"md5","category":"Payload delivery","to_ids":true,"value":"a574edc7072b5ac0c16cb5b10cffa6e2","comment":"https://x.com/suyog41/status/1953340569163579584","timestamp":"1754547657","distribution":"5"},{"uuid":"26976a77-66e9-5b79-a414-7e9f08cc4d11","type":"md5","category":"Payload delivery","to_ids":true,"value":"63a82c70d13a37befe4525a3c3d1b464","comment":"https://x.com/suyog41/status/1953340569163579584","timestamp":"1754547657","distribution":"5"},{"uuid":"b4e8cc19-2495-5096-84e1-ef0119b54203","type":"md5","category":"Payload delivery","to_ids":true,"value":"89b417b8c5d1999336d569f4fe2b74ed","comment":"https://x.com/suyog41/status/1953340569163579584","timestamp":"1754547657","distribution":"5"},{"uuid":"addbabdb-8a77-53c9-9584-6247dfabf255","type":"md5","category":"Payload delivery","to_ids":true,"value":"613616a130c278f9644fe76952469c88","comment":"https://x.com/suyog41/status/1953340569163579584","timestamp":"1754547657","distribution":"5"},{"uuid":"64cb3777-a217-55b5-a369-97ced3e97f6c","type":"md5","category":"Payload delivery","to_ids":true,"value":"1ae31a9f8a8840acf4c7e14941c6b229","comment":"https://x.com/suyog41/status/1953340569163579584","timestamp":"1754547657","distribution":"5"},{"uuid":"bab3e114-264d-5c1d-b4d4-e06479405b5c","type":"url","category":"Network activity","to_ids":true,"value":"http://31.44.5.30:443","comment":"https://x.com/drb_ra/status/1953346714691084407","timestamp":"1754549122","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d80f343f-aa35-51aa-9e09-9d05eccd3453","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.44.5.30","comment":"https://x.com/drb_ra/status/1953346714691084407","timestamp":"1754549122","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ee890c26-8e61-5af5-aedf-188130df5793","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.241.108.34","comment":"https://x.com/drb_ra/status/1953347359934489007","timestamp":"1754549276","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6c7c47b9-e3bc-5aa5-ac00-9aa36ddd8a35","type":"url","category":"Network activity","to_ids":true,"value":"http://79.241.108.34:81","comment":"https://x.com/drb_ra/status/1953347359934489007","timestamp":"1754549276","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ce97e68f-accf-5563-8970-0df12071bf97","type":"url","category":"Network activity","to_ids":true,"value":"http://15.161.246.69:36177","comment":"https://x.com/drb_ra/status/1953347497629298896","timestamp":"1754549309","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f82bd91a-3ac3-5ab7-9a9e-123f2a7ce399","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.161.246.69","comment":"https://x.com/drb_ra/status/1953347497629298896","timestamp":"1754549309","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e05a0863-d4cd-5b28-8ffb-ef53900f2cdf","type":"url","category":"Network activity","to_ids":true,"value":"http://44.243.107.60:20201","comment":"https://x.com/drb_ra/status/1953347636188102873","timestamp":"1754549342","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e82358e1-3759-5317-bbd2-b90313bb213c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.243.107.60","comment":"https://x.com/drb_ra/status/1953347636188102873","timestamp":"1754549342","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3f559ba3-8229-580b-85dd-708435b003d2","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.194:8808","comment":"https://x.com/drb_ra/status/1953347774704988359","timestamp":"1754549375","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"58fffb33-88c2-52d6-83c4-0a645f2d3281","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.194","comment":"https://x.com/drb_ra/status/1953347774704988359","timestamp":"1754549375","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"e3fe6acf-e18e-51d0-8be6-381f2112943a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.193.127.77:25","comment":"https://x.com/drb_ra/status/1953347912513044731","timestamp":"1754549408","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"591a3460-858f-59c1-8469-6a9ea1ec96ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.193.127.77","comment":"https://x.com/drb_ra/status/1953347912513044731","timestamp":"1754549408","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f3aaae5e-dba1-58f5-96c4-f89993fb0777","type":"url","category":"Network activity","to_ids":true,"value":"http://95.237.69.58:587","comment":"https://x.com/drb_ra/status/1953348050140774474","timestamp":"1754549441","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c1ba7e4c-2ac8-56da-9281-12b264754027","type":"url","category":"Network activity","to_ids":true,"value":"http://95.237.69.58:25","comment":"https://x.com/drb_ra/status/1953348187650916556","timestamp":"1754549474","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f8281892-6cba-5969-ad33-ff3dc4a9e667","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.237.69.58","comment":"https://x.com/drb_ra/status/1953348187650916556","timestamp":"1754549474","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7dbe4e89-707a-548e-a01f-4932683601f8","type":"url","category":"Network activity","to_ids":true,"value":"http://67.205.132.154:25","comment":"https://x.com/drb_ra/status/1953348325672898640","timestamp":"1754549506","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"680dfd11-e851-5761-bc54-adafb09bbe0c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.205.132.154","comment":"https://x.com/drb_ra/status/1953348325672898640","timestamp":"1754549506","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"66106133-9295-5434-9ae4-ee6eac13d4f4","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.125.254:8888","comment":"https://x.com/drb_ra/status/1953348464458215908","timestamp":"1754549540","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"d340c5e5-172c-5c62-bb18-a28833d2e0b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.125.254","comment":"https://x.com/drb_ra/status/1953348464458215908","timestamp":"1754549540","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"855962aa-b847-5bcd-9b03-7ace2b72ebf9","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.147.29:7000","comment":"https://x.com/drb_ra/status/1953348602354389037","timestamp":"1754549572","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b0da27f1-c2d3-5491-9346-e512c177e808","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.147.29","comment":"https://x.com/drb_ra/status/1953348602354389037","timestamp":"1754549572","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"33db139f-42d2-560a-9023-c4df5c531c2c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.211.240.61","comment":"https://x.com/drb_ra/status/1953348740036559032","timestamp":"1754549605","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e5e6cfa7-99c1-5cb6-8c25-2fae127cfd00","type":"url","category":"Network activity","to_ids":true,"value":"http://44.211.240.61:445","comment":"https://x.com/drb_ra/status/1953348740036559032","timestamp":"1754549605","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8c10f09e-4630-56ba-b689-da9b8a9c655f","type":"url","category":"Network activity","to_ids":true,"value":"http://109.248.161.146:8080","comment":"https://x.com/drb_ra/status/1953348877907587111","timestamp":"1754549638","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"8152e675-6c72-5791-a381-d431aa07eda1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.248.161.146","comment":"https://x.com/drb_ra/status/1953348877907587111","timestamp":"1754549638","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"cc750264-e95d-5e56-8598-7c81ee52e11d","type":"url","category":"Network activity","to_ids":true,"value":"http://54.210.244.114:443","comment":"https://x.com/drb_ra/status/1953349016114114762","timestamp":"1754549671","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6bac17f4-7ed2-53b5-8820-fda3b8f3472f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.210.244.114","comment":"https://x.com/drb_ra/status/1953349016114114762","timestamp":"1754549671","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"79317ec8-3022-586c-a86b-71a8fba64948","type":"url","category":"Network activity","to_ids":true,"value":"http://216.221.95.47:631","comment":"https://x.com/drb_ra/status/1953349153993421107","timestamp":"1754549704","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3c759b83-eaf2-5be5-bb49-ceeadb5505b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.221.95.47","comment":"https://x.com/drb_ra/status/1953349153993421107","timestamp":"1754549704","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a44ec1f2-7f03-5acd-a8a3-21210352c1e4","type":"url","category":"Network activity","to_ids":true,"value":"http://185.100.168.112:7443","comment":"https://x.com/drb_ra/status/1953349292556538066","timestamp":"1754549737","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3488c8f3-dec6-5b40-a2d3-6fe4227d35e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.100.168.112","comment":"https://x.com/drb_ra/status/1953349292556538066","timestamp":"1754549737","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0c5e11c3-1010-56c4-81a8-510a24edf745","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.112.146.100","comment":"https://x.com/drb_ra/status/1953349430477803752","timestamp":"1754549770","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bb5ae08c-7509-5f6a-988d-ec79a9a13bb3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.112.146.100:31337","comment":"https://x.com/drb_ra/status/1953349430477803752","timestamp":"1754549770","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2a3840a6-6feb-5d1c-9fff-6158a3705adf","type":"url","category":"Network activity","to_ids":true,"value":"http://212.34.145.146:4321","comment":"https://x.com/drb_ra/status/1953350076115321282","timestamp":"1754549924","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0119113d-013b-53f7-8488-988be049b0af","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.34.145.146","comment":"https://x.com/drb_ra/status/1953350076115321282","timestamp":"1754549924","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0e6b276d-7990-5f7d-a3f8-ef49c077f877","type":"url","category":"Network activity","to_ids":true,"value":"http://209.151.146.193:443","comment":"https://x.com/drb_ra/status/1953350214816813238","timestamp":"1754549957","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"467b7ff7-ce01-5c1e-abcc-2dd9ee9731f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.151.146.193","comment":"https://x.com/drb_ra/status/1953350214816813238","timestamp":"1754549957","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a91eff05-87c5-5198-be60-5c05818f4f41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.224.31.144:2404","comment":"https://x.com/drb_ra/status/1953350352838766716","timestamp":"1754549990","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"49e9a65b-9d9b-57de-a703-d5d8dba8a047","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.224.31.144","comment":"https://x.com/drb_ra/status/1953350352838766716","timestamp":"1754549990","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2f4b0d0e-0ab1-561c-b2ab-5070a6dedf48","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.228:5671","comment":"https://x.com/drb_ra/status/1953350491150196874","timestamp":"1754550023","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6e8021ba-95f9-5e11-9484-4e08fb950550","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.228","comment":"https://x.com/drb_ra/status/1953350491150196874","timestamp":"1754550023","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8190c026-9d2a-5cb2-81bd-6d8d4411814c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.232.82","comment":"https://x.com/drb_ra/status/1953350629063041358","timestamp":"1754550056","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5b51a63d-b299-5115-9fc7-eae2dbb69b61","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.232.82:2404","comment":"https://x.com/drb_ra/status/1953350629063041358","timestamp":"1754550056","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"450f8af1-bddb-5c42-8a36-42ce353df00b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.113:2404","comment":"https://x.com/drb_ra/status/1953350772206252455","timestamp":"1754550090","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ca22a6fd-27e6-5deb-8174-cff9a099b32d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.113","comment":"https://x.com/drb_ra/status/1953350772206252455","timestamp":"1754550090","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"915e06f8-320c-565f-87ab-5c7532889a16","type":"url","category":"Network activity","to_ids":true,"value":"http://198.244.148.183:8085","comment":"https://x.com/drb_ra/status/1953350910958080003","timestamp":"1754550123","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fabcdb77-fd34-5880-923a-2decaa1eddd5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.244.148.183","comment":"https://x.com/drb_ra/status/1953350910958080003","timestamp":"1754550123","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d2bd8c08-2e4d-5cc7-ae6d-918335d7f6d4","type":"domain","category":"Network activity","to_ids":true,"value":"webmailsupporthelpdesk.weebly.com","comment":"https://x.com/urldna_bot/status/1953365523376312404","timestamp":"1754553607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"28f1b5e1-c5e2-5804-88c3-af2a528c13cf","type":"url","category":"Network activity","to_ids":true,"value":"https://webmailsupporthelpdesk.weebly.com","comment":"https://x.com/urldna_bot/status/1953365523376312404","timestamp":"1754553607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e3766de6-b350-588d-8750-258950b41ab1","type":"url","category":"Network activity","to_ids":true,"value":"https://talibu.com.br/tambor/byp/artic/?zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1953366908331311146","timestamp":"1754553937","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35b26491-706f-5636-b7ee-f22a4c8df2d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.167.168.57","comment":"https://x.com/romonlyht/status/1953366908331311146","timestamp":"1754553937","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31d64b6f-5f85-5136-9fb2-88b33dba048a","type":"url","category":"Network activity","to_ids":true,"value":"https://talibu.com.br/tambor/byp/artic/system.php?praga=9c5d9ef67a82dcab89b597194222bc35&pid=9c5d9ef67a82dcab89b597194222bc35&framework9c5d9ef67a82dcab89b597194222bc35=9c5d9ef67a82dcab89b597194222bc35&zonealldom=aaaa@example.jp&","comment":"https://x.com/romonlyht/status/1953366910982295610","timestamp":"1754553938","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e7a5dd2-57fb-5b99-982b-2b8fa6aaa1d2","type":"md5","category":"Payload delivery","to_ids":true,"value":"9c5d9ef67a82dcab89b597194222bc35","comment":"https://x.com/romonlyht/status/1953366913037254787","timestamp":"1754553938","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12cad697-f5d0-5521-a807-6d6c420784ef","type":"url","category":"Network activity","to_ids":true,"value":"https://talibu.com.br/tambor/byp/artic/auth.php","comment":"https://x.com/romonlyht/status/1953366913037254787","timestamp":"1754553938","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ef334f9-cb49-5dc6-8618-1c65690ac57f","type":"domain","category":"Network activity","to_ids":true,"value":"talibu.com.br","comment":"https://x.com/romonlyht/status/1953366913037254787","timestamp":"1754553938","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9fc1d5b7-b2a9-5a3f-9b23-63c499e48376","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.204.119.129","comment":"https://x.com/abuse_ch/status/1953367346854129697","timestamp":"1754554041","distribution":"5"},{"uuid":"0b0eb73e-6a53-550e-80e9-abd51eabadbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.101.138","comment":"https://x.com/hkayaeu/status/1953383182725795931","timestamp":"1754557817","distribution":"5","Tag":[{"name":"phishing"},{"name":"malware"}]},{"uuid":"645df5e5-e983-568b-b551-380239b06b5c","type":"domain","category":"Network activity","to_ids":true,"value":"mwebcozawebmail-sigin.weebly.com","comment":"https://x.com/urldna_bot/status/1953395726202941545","timestamp":"1754560808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"16aa6d6b-5611-501c-a27f-364a70999ecc","type":"url","category":"Network activity","to_ids":true,"value":"https://mwebcozawebmail-sigin.weebly.com","comment":"https://x.com/urldna_bot/status/1953395726202941545","timestamp":"1754560808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ffbe89d8-4897-52a8-b935-8a383086da23","type":"url","category":"Network activity","to_ids":true,"value":"http://67yao4.oss-cn-qingdao.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"03777b7c-2234-50f9-9d8d-20e925d57cb8","type":"url","category":"Network activity","to_ids":true,"value":"http://2ao2my.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"c1d76d91-ec18-541a-8fbc-72b563918464","type":"domain","category":"Network activity","to_ids":true,"value":"2ao2my.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"a379ecfc-ee64-578d-8151-53b573c7dc45","type":"url","category":"Network activity","to_ids":true,"value":"http://25nm.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"60073f92-a697-5d86-8c46-28df74adda81","type":"domain","category":"Network activity","to_ids":true,"value":"25nm.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"5a3d012e-7a62-5493-a231-f479f1a7c2eb","type":"domain","category":"Network activity","to_ids":true,"value":"67yao4.oss-cn-qingdao.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"246cb2ff-76e3-5e4a-b6e8-a2238946a6ad","type":"domain","category":"Network activity","to_ids":true,"value":"2025so.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"dd2d2802-aa97-55e3-94a0-1aee15d67ee5","type":"url","category":"Network activity","to_ids":true,"value":"http://8ae6tt.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"82c0a66a-28a1-5c7f-b191-3a20fa8474f8","type":"domain","category":"Network activity","to_ids":true,"value":"8ae6tt.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"071a280f-4e4d-5ff2-8f7a-e635aa0cd733","type":"url","category":"Network activity","to_ids":true,"value":"http://nm25.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"c611258a-fc97-5825-8421-a17ff345dddc","type":"domain","category":"Network activity","to_ids":true,"value":"nm25.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"78fdf6ab-bfc5-555f-889a-1553210c9c04","type":"url","category":"Network activity","to_ids":true,"value":"http://2025so.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953399063354728558","timestamp":"1754561603","distribution":"5"},{"uuid":"1971e9e6-c50c-5cbe-ab86-89b83299ea29","type":"url","category":"Network activity","to_ids":true,"value":"http://8.210.41.205:7036","comment":"https://x.com/skocherhan/status/1953404159157264701","timestamp":"1754562818","distribution":"5"},{"uuid":"dc1dc452-8248-5d4d-aa5b-ef2ec342c7e4","type":"url","category":"Network activity","to_ids":true,"value":"http://47.239.99.114:8379","comment":"https://x.com/skocherhan/status/1953404159157264701","timestamp":"1754562818","distribution":"5"},{"uuid":"a172aa7e-d07c-5bfa-b9ce-d07a8ccdd5df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.239.99.114","comment":"https://x.com/skocherhan/status/1953404159157264701","timestamp":"1754562818","distribution":"5"},{"uuid":"193fc7f1-6e9f-5072-9a0b-6dc88bae7609","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.206.178.219","comment":"https://x.com/drb_ra/status/1953404312027115870","timestamp":"1754562855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c7e1b066-427d-5c30-9de6-678cf09b8abd","type":"url","category":"Network activity","to_ids":true,"value":"http://91.206.178.219:4444","comment":"https://x.com/drb_ra/status/1953404312027115870","timestamp":"1754562855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8d76f4b9-3146-5642-91ba-4c3b315d1896","type":"url","category":"Network activity","to_ids":true,"value":"http://upitem.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"70155956-0638-595e-afff-90dd9505154c","type":"domain","category":"Network activity","to_ids":true,"value":"upitem.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"e85f7070-4297-57e2-9574-7cee813445ff","type":"domain","category":"Network activity","to_ids":true,"value":"oss3333.oss-cn-shanghai.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"852a3f88-f31a-53d3-a480-7127efcad9db","type":"url","category":"Network activity","to_ids":true,"value":"http://lldwt-oss.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"d50ca566-41b8-5cfb-91b0-ccb5cfe0ac4f","type":"domain","category":"Network activity","to_ids":true,"value":"lldwt-oss.oss-cn-beijing.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"0b2e5718-ed8a-5ec3-8ac5-2d9a49591734","type":"url","category":"Network activity","to_ids":true,"value":"http://5oss.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"98bdcd97-4145-50ab-8399-c879f3e654f5","type":"domain","category":"Network activity","to_ids":true,"value":"5oss.oss-cn-hangzhou.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"ec33d4cb-737b-5803-a823-539e0c468b58","type":"url","category":"Network activity","to_ids":true,"value":"http://iualef.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"c4626bab-e180-5d6e-80fe-2da8c30409a8","type":"domain","category":"Network activity","to_ids":true,"value":"iualef.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"65f45508-8408-5d4a-92a6-5b1f2d099ec0","type":"url","category":"Network activity","to_ids":true,"value":"http://oss3333.oss-cn-shanghai.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"24d6e0c7-8d20-5f23-94a3-9c24c6e92d93","type":"domain","category":"Network activity","to_ids":true,"value":"feetifu.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"3ffe81a3-c8fe-58e8-9fdc-7ff40e24d773","type":"domain","category":"Network activity","to_ids":true,"value":"uyahcn.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"50e6cb07-4edf-5f11-a421-a0c28ce91d75","type":"url","category":"Network activity","to_ids":true,"value":"http://uyahcn.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"66f3ec74-12ec-5aab-b85e-f964a0827b8e","type":"domain","category":"Network activity","to_ids":true,"value":"osuyet.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"08b991b6-7030-5f18-95c8-9d7c709d2eb5","type":"url","category":"Network activity","to_ids":true,"value":"http://osuyet.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"d2e9a990-e828-50c1-a516-8939774daab0","type":"url","category":"Network activity","to_ids":true,"value":"http://feetifu.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"612b81bc-fc2c-5bc5-bad0-057359b23323","type":"url","category":"Network activity","to_ids":true,"value":"http://poaeur.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"b76f9711-e995-540b-84cd-6b471eda58e8","type":"domain","category":"Network activity","to_ids":true,"value":"poaeur.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"a5e3decb-d69d-53ab-9ed4-bf6ca5ca335d","type":"domain","category":"Network activity","to_ids":true,"value":"yuwesq.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"ed7b2678-b1b9-578c-b4b3-750f084a33fd","type":"url","category":"Network activity","to_ids":true,"value":"http://yuwesq.net","comment":"https://x.com/skocherhan/status/1953409215537598851","timestamp":"1754564024","distribution":"5"},{"uuid":"d19a4ccc-b571-5430-aadd-ebd298d0fcef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.102.87.217","comment":"https://x.com/drb_ra/status/1953411548040270098","timestamp":"1754564580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"853a55ef-928a-56a8-a806-4e82833640b7","type":"url","category":"Network activity","to_ids":true,"value":"http://47.102.87.217:80","comment":"https://x.com/drb_ra/status/1953411548040270098","timestamp":"1754564580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db9f2e87-46d9-5292-b3b2-b4fa57e5d0bb","type":"url","category":"Network activity","to_ids":true,"value":"http://54.89.193.82:80","comment":"https://x.com/drb_ra/status/1953411686360125803","timestamp":"1754564613","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e4d79943-5eb4-5607-8f5e-44cdb76f8b12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.89.193.82","comment":"https://x.com/drb_ra/status/1953411686360125803","timestamp":"1754564613","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"61040426-c302-5928-8c65-ddcfea70625e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.226.90.183","comment":"https://x.com/drb_ra/status/1953411825439006752","timestamp":"1754564646","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"91af38ba-3698-5a29-9013-ecafdd753bdb","type":"url","category":"Network activity","to_ids":true,"value":"http://129.226.90.183:10001","comment":"https://x.com/drb_ra/status/1953411825439006752","timestamp":"1754564646","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"865fd27e-a784-50fb-8f9b-263b24603f0c","type":"url","category":"Network activity","to_ids":true,"value":"https://31.57.63.237/dpixel","comment":"https://x.com/drb_ra/status/1953411964727624063","timestamp":"1754564679","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"75608552-0ea7-514c-a314-cb03a8412559","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.63.237:443","comment":"https://x.com/drb_ra/status/1953411964727624063","timestamp":"1754564679","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4fc01a24-2545-545d-8c8b-b99d45e1e117","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.63.237","comment":"https://x.com/drb_ra/status/1953411964727624063","timestamp":"1754564679","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a953ce37-6e42-5f94-ae6a-14c8fe57ea97","type":"url","category":"Network activity","to_ids":true,"value":"http://39.108.114.127:443","comment":"https://x.com/drb_ra/status/1953412103051575591","timestamp":"1754564712","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f81f821-be8d-52e9-adf9-65f047313705","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.108.114.127","comment":"https://x.com/drb_ra/status/1953412103051575591","timestamp":"1754564712","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7c79698-ba3b-5227-bd2c-9d4467a11161","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.41.101.90","comment":"https://x.com/drb_ra/status/1953412103051575591","timestamp":"1754564712","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b6c556a0-160d-5fa4-a496-efe7085d25ee","type":"url","category":"Network activity","to_ids":true,"value":"http://8.130.134.66:80","comment":"https://x.com/drb_ra/status/1953412241044177123","timestamp":"1754564745","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5d9f80e4-8cd2-5c8a-9e88-55604cf6661d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.32.44.199","comment":"https://x.com/drb_ra/status/1953412381490434559","timestamp":"1754564779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"452a8f5a-d2d1-59b8-8a7b-0705e1532e38","type":"url","category":"Network activity","to_ids":true,"value":"http://84.32.44.199:80","comment":"https://x.com/drb_ra/status/1953412381490434559","timestamp":"1754564779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"79ab387d-c83f-500c-b2b4-c436c9bf5992","type":"url","category":"Network activity","to_ids":true,"value":"http://45.156.87.173:4443","comment":"https://x.com/drb_ra/status/1953412519269195826","timestamp":"1754564811","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"099bb429-ed25-595f-989f-3a51ca82309b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.156.87.173","comment":"https://x.com/drb_ra/status/1953412519269195826","timestamp":"1754564811","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b4c1e4be-a2c1-5da0-8422-ebe73319d9a3","type":"url","category":"Network activity","to_ids":true,"value":"https://nginx.myneath.top/__utm.gif","comment":"https://x.com/drb_ra/status/1953412658897596652","timestamp":"1754564845","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"47d40a5c-81e6-5726-8b60-da5595733b6e","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.51.114:8443","comment":"https://x.com/drb_ra/status/1953412658897596652","timestamp":"1754564845","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"79bb3bb3-634a-5015-97c1-a84d3b5cd785","type":"domain","category":"Network activity","to_ids":true,"value":"nginx.myneath.top","comment":"https://x.com/drb_ra/status/1953412798106472881","timestamp":"1754564878","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e460bc24-ef32-520d-89ce-c74defab48a9","type":"url","category":"Network activity","to_ids":true,"value":"https://nginx.myneath.top/dot.gif","comment":"https://x.com/drb_ra/status/1953412798106472881","timestamp":"1754564878","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c9bc30d5-d191-5b21-9adb-09d9873f91ad","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.51.114:2052","comment":"https://x.com/drb_ra/status/1953412798106472881","timestamp":"1754564878","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"289a0c66-ecb1-5164-a592-fc8075f1f494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.206.158.190","comment":"https://x.com/skocherhan/status/1953412922689937677","timestamp":"1754564908","distribution":"5","Tag":[{"name":"opendir"},{"name":"Remcos"},{"name":"Dcrat"}]},{"uuid":"56707928-a8c6-5a3e-84e0-0dcfd3d6a5aa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"dd36ccb034444d9c94afba45ff1f14b3852c12390820be810dc3bbe46abcf0be","comment":"https://x.com/skocherhan/status/1953412922689937677","timestamp":"1754564908","distribution":"5","Tag":[{"name":"Remcos"},{"name":"Dcrat"},{"name":"opendir"}]},{"uuid":"15d8d099-2061-5e0c-928c-d6ce8a5b5399","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.51.114:80","comment":"https://x.com/drb_ra/status/1953412936950534148","timestamp":"1754564911","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1d579793-546e-5907-a643-5cdac15ff4c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.51.114","comment":"https://x.com/drb_ra/status/1953412936950534148","timestamp":"1754564911","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9fd272b5-9546-57d2-9b8b-0a8dadc09716","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.94.40.139","comment":"https://x.com/drb_ra/status/1953413075115106698","timestamp":"1754564944","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"938275ab-fa4b-52e0-bfac-5558c836e997","type":"url","category":"Network activity","to_ids":true,"value":"http://47.94.40.139:80","comment":"https://x.com/drb_ra/status/1953413075115106698","timestamp":"1754564944","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"44d5e2ce-e816-55b7-ac8a-dcc004f61638","type":"url","category":"Network activity","to_ids":true,"value":"http://111.229.151.200:8888","comment":"https://x.com/drb_ra/status/1953413720744366449","timestamp":"1754565098","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bd81d58c-b452-56a4-995e-a736b946fe6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.229.151.200","comment":"https://x.com/drb_ra/status/1953413720744366449","timestamp":"1754565098","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0d2fc073-9adc-52c9-8e14-eb4a511b3ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.78.242:8080","comment":"https://x.com/drb_ra/status/1953413861031190669","timestamp":"1754565131","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b86b44fc-3301-50bc-857a-6b74eb4e9ad7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.78.242","comment":"https://x.com/drb_ra/status/1953413861031190669","timestamp":"1754565131","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"35cd1f29-a9fe-5483-81be-49324fe565b7","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.225.146:8000","comment":"https://x.com/drb_ra/status/1953413999137079366","timestamp":"1754565164","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be97f943-5906-588a-8a1a-4d8c2bce31df","type":"domain","category":"Network activity","to_ids":true,"value":"mypage-ocn.6gepij.top","comment":"https://x.com/masaomi346/status/1953420033184731397","timestamp":"1754566603","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"231b3b6d-7e29-559b-a274-88d7db0d78d5","type":"url","category":"Network activity","to_ids":true,"value":"https://mypage-ocn.6gepij.top","comment":"https://x.com/masaomi346/status/1953420033184731397","timestamp":"1754566603","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88487f5b-28a0-5cab-88f2-d97d86ad65d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.96.172.173","comment":"https://x.com/JAMESWT_WT/status/1953422275220283774","timestamp":"1754567137","distribution":"5"},{"uuid":"2d117278-dcb8-5ec3-9b92-a50e3eb1b7bb","type":"domain","category":"Network activity","to_ids":true,"value":"hdfcbank.speedynet.in","comment":"https://x.com/urldna_bot/status/1953425921756553537","timestamp":"1754568007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"03e935d8-06ff-50e0-bf08-7bec8899cc9e","type":"url","category":"Network activity","to_ids":true,"value":"http://www.hdfcbank.speedynet.in/index.php","comment":"https://x.com/urldna_bot/status/1953425921756553537","timestamp":"1754568007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c6a95313-9cb4-54a1-8c90-fe8a3dc6e4d8","type":"domain","category":"Network activity","to_ids":true,"value":"pagos-misfacturasenergia.com","comment":"https://x.com/mbec03/status/1953452954872144128","timestamp":"1754574452","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd0b0fd5-5a28-5c54-9da3-16cb6b05fb67","type":"url","category":"Network activity","to_ids":true,"value":"https://pagos-misfacturasenergia.com","comment":"https://x.com/mbec03/status/1953452954872144128","timestamp":"1754574452","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8283f62e-8f22-5e9f-ae58-8db25281f802","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.133.1.1","comment":"https://x.com/mbec03/status/1953452954872144128","timestamp":"1754574452","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73a8a167-033c-55ed-aabe-7eea4b189544","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.215.249:443","comment":"https://x.com/drb_ra/status/1953454194272149582","timestamp":"1754574747","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3787806e-053d-531b-9df8-d9d039c8f6dd","type":"domain","category":"Network activity","to_ids":true,"value":"server-cd2.bipewi2747.workers.dev","comment":"https://x.com/drb_ra/status/1953454334378713563","timestamp":"1754574781","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4b555f84-8f92-5a6f-b912-226806bce36e","type":"url","category":"Network activity","to_ids":true,"value":"http://server-cd2.bipewi2747.workers.dev","comment":"https://x.com/drb_ra/status/1953454334378713563","timestamp":"1754574781","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5607c9f2-6b02-5839-8ed6-52e12b2d9c56","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.215.249:80","comment":"https://x.com/drb_ra/status/1953454334378713563","timestamp":"1754574781","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"22136e55-3040-5625-9f14-40e1db149c89","type":"domain","category":"Network activity","to_ids":true,"value":"1111365wz.cc","comment":"https://x.com/urldna_bot/status/1953456137619005730","timestamp":"1754575211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"569b0cc4-d429-5752-8f8b-5043f0efe375","type":"url","category":"Network activity","to_ids":true,"value":"https://1111365wz.cc","comment":"https://x.com/urldna_bot/status/1953456137619005730","timestamp":"1754575211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7676bdca-2861-5476-9b1b-4bd309ed17a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.47","comment":"https://x.com/banthisguy9349/status/1953468461566324767","timestamp":"1754578149","distribution":"5"},{"uuid":"bc7c27c7-24ec-529f-a9bc-5b115617fc88","type":"domain","category":"Network activity","to_ids":true,"value":"asmails.weebly.com","comment":"https://x.com/urldna_bot/status/1953486319247577412","timestamp":"1754582407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2396a363-6a46-5a14-b167-9a4d7c64bd69","type":"url","category":"Network activity","to_ids":true,"value":"https://asmails.weebly.com","comment":"https://x.com/urldna_bot/status/1953486319247577412","timestamp":"1754582407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fb42d16c-ac8f-504d-bcd8-42c7de5e7805","type":"url","category":"Network activity","to_ids":true,"value":"http://196.119.0.113:10000","comment":"https://x.com/SarlackLab/status/1953486405859959203","timestamp":"1754582427","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"90502830-6cc1-5f05-bfe1-2c730c132050","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.119.0.113","comment":"https://x.com/SarlackLab/status/1953486405859959203","timestamp":"1754582427","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"d472119d-21fa-5d00-af5d-53b12a8d337d","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:56013","comment":"https://x.com/SarlackLab/status/1953486510205911324","timestamp":"1754582452","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"14fbea8c-6090-5524-b1b6-de7a26c46b8b","type":"domain","category":"Network activity","to_ids":true,"value":"send-deferred.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1953486510205911324","timestamp":"1754582452","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"3b954a05-0074-524c-93d4-000d5339cbbf","type":"url","category":"Network activity","to_ids":true,"value":"http://send-deferred.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1953486510205911324","timestamp":"1754582452","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1953486510205911324","timestamp":"1754582452","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"868c6c04-9c9a-52fe-ada1-2ff47cbd9ab1","type":"domain","category":"Network activity","to_ids":true,"value":"metamask.tasheeltheqa.com","comment":"https://x.com/urldna_bot/status/1953516519482114524","timestamp":"1754589607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eb30286e-95c2-5306-968f-de3dae6eee39","type":"url","category":"Network activity","to_ids":true,"value":"http://metamask.tasheeltheqa.com","comment":"https://x.com/urldna_bot/status/1953516519482114524","timestamp":"1754589607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"600b030c-76ff-5476-8239-030a16865a46","type":"url","category":"Network activity","to_ids":true,"value":"http://140.238.30.216:8443","comment":"https://x.com/drb_ra/status/1953527993327890767","timestamp":"1754592343","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4ff5634f-9b70-5e67-a918-e76efc223e9f","type":"url","category":"Network activity","to_ids":true,"value":"http://140.238.30.216:8080","comment":"https://x.com/drb_ra/status/1953528131765064025","timestamp":"1754592376","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"73aca11f-c5cc-5f8e-8462-f2376771e2c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.238.30.216","comment":"https://x.com/drb_ra/status/1953528131765064025","timestamp":"1754592376","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2664adeb-726a-5915-96f9-6d4d08a801b3","type":"url","category":"Network activity","to_ids":true,"value":"http://13.201.239.120:443","comment":"https://x.com/drb_ra/status/1953528269183012977","timestamp":"1754592408","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"aec80927-8a19-5426-8a38-28dc9f08021e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.201.239.120","comment":"https://x.com/drb_ra/status/1953528269183012977","timestamp":"1754592408","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4227fbdf-2cb2-5a70-9ad3-ac11b24c2bf2","type":"url","category":"Network activity","to_ids":true,"value":"http://188.166.220.207:443","comment":"https://x.com/drb_ra/status/1953528407876157730","timestamp":"1754592441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"00ed90fa-271f-5dd3-97f3-deb1b556abf5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.166.220.207","comment":"https://x.com/drb_ra/status/1953528407876157730","timestamp":"1754592441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9de2b95a-97e7-5191-beae-2f3774977435","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.70.160:2404","comment":"https://x.com/drb_ra/status/1953529054239301877","timestamp":"1754592596","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f9013589-1a22-560f-a5d2-a68938b09adc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.70.160","comment":"https://x.com/drb_ra/status/1953529054239301877","timestamp":"1754592596","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"aee6e991-d89b-592e-a2ae-ccac53d4d20f","type":"url","category":"Network activity","to_ids":true,"value":"http://109.248.151.75:5888","comment":"https://x.com/drb_ra/status/1953529191976026509","timestamp":"1754592628","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"fa743fec-20c9-59d1-8aec-c42445db7e96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.248.151.75","comment":"https://x.com/drb_ra/status/1953529191976026509","timestamp":"1754592628","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d311fb5f-ef85-5910-80c8-e3e93fadea5d","type":"url","category":"Network activity","to_ids":true,"value":"http://91.219.239.222:2404","comment":"https://x.com/drb_ra/status/1953529331268915293","timestamp":"1754592662","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0a204698-841b-5a65-98fa-340640e4fa74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.219.239.222","comment":"https://x.com/drb_ra/status/1953529331268915293","timestamp":"1754592662","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"981456b4-6cd6-58ec-b434-e149e10c0d3e","type":"url","category":"Network activity","to_ids":true,"value":"http://146.185.239.28:2404","comment":"https://x.com/drb_ra/status/1953529470045839726","timestamp":"1754592695","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b7602e5d-4c67-54fa-bbe1-8c0f46032d6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.185.239.28","comment":"https://x.com/drb_ra/status/1953529470045839726","timestamp":"1754592695","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8643c96c-b645-5b61-aa84-cf5bb576479e","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.191:2404","comment":"https://x.com/drb_ra/status/1953529607547666806","timestamp":"1754592727","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e7f4c6e8-874a-5921-b771-b25fc241de05","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.191","comment":"https://x.com/drb_ra/status/1953529607547666806","timestamp":"1754592727","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"49c58c91-92d0-5ada-95c7-e11b3dcd000c","type":"url","category":"Network activity","to_ids":true,"value":"http://13.124.82.166:10261","comment":"https://x.com/drb_ra/status/1953529746739925152","timestamp":"1754592761","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c3584365-a939-50de-b019-89e83c3434b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.124.82.166","comment":"https://x.com/drb_ra/status/1953529746739925152","timestamp":"1754592761","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"da081bdb-008a-5e3a-9120-59b6d07ed071","type":"url","category":"Network activity","to_ids":true,"value":"http://203.159.90.52:8808","comment":"https://x.com/drb_ra/status/1953529884988322231","timestamp":"1754592794","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"bc5bf344-bcb9-544e-850d-cd2572449e14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.159.90.52","comment":"https://x.com/drb_ra/status/1953529884988322231","timestamp":"1754592794","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"eba4656d-00ab-553b-87e2-928de2e32878","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.90:8808","comment":"https://x.com/drb_ra/status/1953530023270301998","timestamp":"1754592827","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"94760a0e-0941-5e18-b566-86f32b8fa51d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.90","comment":"https://x.com/drb_ra/status/1953530023270301998","timestamp":"1754592827","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"915a005c-bca9-5da9-be31-dcf8053e3b87","type":"url","category":"Network activity","to_ids":true,"value":"http://120.55.48.248:443","comment":"https://x.com/drb_ra/status/1953530161279676745","timestamp":"1754592859","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e1858795-0edf-5e4b-b8ea-b1f3d0bdde9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.55.48.248","comment":"https://x.com/drb_ra/status/1953530161279676745","timestamp":"1754592859","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"417644df-0f24-59b3-98e3-d055ef3ea526","type":"url","category":"Network activity","to_ids":true,"value":"http://144.126.211.233:587","comment":"https://x.com/drb_ra/status/1953530299498782772","timestamp":"1754592892","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c8fcb33a-9ef1-5f3a-8937-1ea3a01c1b19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.126.211.233","comment":"https://x.com/drb_ra/status/1953530299498782772","timestamp":"1754592892","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b80200c4-05bf-5f71-a5f3-e1fe794d4b81","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.72.53:80","comment":"https://x.com/drb_ra/status/1953530440817545506","timestamp":"1754592926","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"27fde70e-f958-52b8-a612-eb5e0d3657b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.72.53","comment":"https://x.com/drb_ra/status/1953530440817545506","timestamp":"1754592926","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"586b5f92-57b9-513b-80aa-ac104606891f","type":"url","category":"Network activity","to_ids":true,"value":"http://46.101.93.233:3333","comment":"https://x.com/drb_ra/status/1953530580043198910","timestamp":"1754592959","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"4fe4fb1c-3d3d-555e-8fe2-c2c2f7471400","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.101.93.233","comment":"https://x.com/drb_ra/status/1953530580043198910","timestamp":"1754592959","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"9eb3656a-c5cc-56db-8149-4aa6cf977ce9","type":"url","category":"Network activity","to_ids":true,"value":"http://39.40.133.150:995","comment":"https://x.com/drb_ra/status/1953530718551695456","timestamp":"1754592992","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"970b0c87-4205-5a20-aec6-fe86740e6b6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.40.133.150","comment":"https://x.com/drb_ra/status/1953530718551695456","timestamp":"1754592992","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"291d1c93-2ba7-5550-a8ec-82b573f3d80f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.104.142.143:443","comment":"https://x.com/drb_ra/status/1953530857190195234","timestamp":"1754593025","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"d078de9a-807a-51d4-84f5-58f67d07d303","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.104.142.143","comment":"https://x.com/drb_ra/status/1953530857190195234","timestamp":"1754593025","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"7ca2cb88-65a1-55cc-b5ba-1719dd47120b","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.25.174:443","comment":"https://x.com/drb_ra/status/1953530995602334085","timestamp":"1754593058","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"3f86f688-fd90-523d-8378-108d02cd3d15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.25.174","comment":"https://x.com/drb_ra/status/1953530995602334085","timestamp":"1754593058","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"47d80f00-3ff8-52c0-a378-b9d67da4a74a","type":"url","category":"Network activity","to_ids":true,"value":"http://89.35.131.62:443","comment":"https://x.com/drb_ra/status/1953531136283455987","timestamp":"1754593092","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"4b466657-8888-5b13-a7b5-0667b1c5c387","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.35.131.62","comment":"https://x.com/drb_ra/status/1953531136283455987","timestamp":"1754593092","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"0d7138b3-023b-5382-a2e0-0144bab5078b","type":"url","category":"Network activity","to_ids":true,"value":"http://162.33.179.148:443","comment":"https://x.com/drb_ra/status/1953531275177857273","timestamp":"1754593125","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"9fe6addc-1282-591b-b400-6d3ae9650d20","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.33.179.148","comment":"https://x.com/drb_ra/status/1953531275177857273","timestamp":"1754593125","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"a77b09e7-0446-58e9-9796-89d956139f7e","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.116.57:443","comment":"https://x.com/drb_ra/status/1953531413422072254","timestamp":"1754593158","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"26f6272b-5f11-5a87-81de-0f8b71156c07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.223.116.57","comment":"https://x.com/drb_ra/status/1953531413422072254","timestamp":"1754593158","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"d28f364e-6ffd-5ae8-93c8-4ab349908a7e","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.202.242:443","comment":"https://x.com/drb_ra/status/1953531552668819501","timestamp":"1754593191","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"bdf50512-d1c1-55fe-b3cb-7eb8407a7299","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.83.202.242","comment":"https://x.com/drb_ra/status/1953531552668819501","timestamp":"1754593191","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"62f27d5a-f535-5e82-b25d-cb7457cc6798","type":"url","category":"Network activity","to_ids":true,"value":"http://3.93.203.100:443","comment":"https://x.com/drb_ra/status/1953531690753638574","timestamp":"1754593224","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"171714f5-b222-5884-bfb3-953403f327bb","type":"url","category":"Network activity","to_ids":true,"value":"http://34.99.199.235:443","comment":"https://x.com/drb_ra/status/1953531828997955700","timestamp":"1754593257","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"07fcccb2-5777-53b2-a3ba-f3f250ea03e9","type":"url","category":"Network activity","to_ids":true,"value":"http://66.42.48.169:7443","comment":"https://x.com/drb_ra/status/1953531967196029401","timestamp":"1754593290","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ba37462c-72f4-50ce-ab71-167b2231626d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.42.48.169","comment":"https://x.com/drb_ra/status/1953531967196029401","timestamp":"1754593290","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e3da5270-36af-5749-84a7-d923c45af76f","type":"url","category":"Network activity","to_ids":true,"value":"http://185.253.117.61:4443","comment":"https://x.com/drb_ra/status/1953532615211798786","timestamp":"1754593445","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"aa4386f2-335b-52cb-beda-ee998118afdf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.253.117.61","comment":"https://x.com/drb_ra/status/1953532615211798786","timestamp":"1754593445","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3b8e9414-7c9a-5fc0-9681-47cc98fcd2f2","type":"url","category":"Network activity","to_ids":true,"value":"http://213.109.162.38:443","comment":"https://x.com/drb_ra/status/1953532753569288297","timestamp":"1754593477","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"ba47bca2-15ee-580a-afd2-6b4c6b23f5e5","type":"url","category":"Network activity","to_ids":true,"value":"http://213.109.162.38:80","comment":"https://x.com/drb_ra/status/1953532894128804151","timestamp":"1754593511","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"62da1c4d-bdb5-5dda-8705-8bd38bf82ac5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.109.162.38","comment":"https://x.com/drb_ra/status/1953532894128804151","timestamp":"1754593511","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"48b5ae90-c24d-5139-a3ad-8c762807a60c","type":"url","category":"Network activity","to_ids":true,"value":"http://5.188.118.251:11601","comment":"https://x.com/drb_ra/status/1953533172911612415","timestamp":"1754593577","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1003b4bd-d839-57ba-805e-982889f33303","type":"url","category":"Network activity","to_ids":true,"value":"http://93.51.52.232:80","comment":"https://x.com/drb_ra/status/1953533311092936832","timestamp":"1754593610","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cc9b58ac-76a4-5ff1-b5e1-aa7c4de74318","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.51.52.232","comment":"https://x.com/drb_ra/status/1953533311092936832","timestamp":"1754593610","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"20fd7473-b8b0-5b9f-a641-e92720fc1743","type":"url","category":"Network activity","to_ids":true,"value":"http://85.9.192.132:443","comment":"https://x.com/drb_ra/status/1953533450721370266","timestamp":"1754593644","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d7ce5de9-b151-5f81-b2c1-3c9cb3e01b47","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.9.192.132","comment":"https://x.com/drb_ra/status/1953533450721370266","timestamp":"1754593644","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"19817b82-8248-5447-85cf-1dd9ee1e5c8e","type":"url","category":"Network activity","to_ids":true,"value":"http://216.250.249.221:8443","comment":"https://x.com/drb_ra/status/1953533589095592296","timestamp":"1754593677","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6bc28df3-4d34-5939-a43c-918f73dbed43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.250.249.221","comment":"https://x.com/drb_ra/status/1953533589095592296","timestamp":"1754593677","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8d2d5da1-9e71-5f44-8c9e-150058b663b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.229.0.18","comment":"https://x.com/UK_Daniel_Card/status/1953539281089126720","timestamp":"1754595034","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"0be1c01d-6bc5-50aa-896d-b8071225a5de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.27.168.31","comment":"https://x.com/UK_Daniel_Card/status/1953539281089126720","timestamp":"1754595034","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"b9ed4799-1967-570e-b7dc-ac2e8c44c4c0","type":"url","category":"Network activity","to_ids":true,"value":"http://191.233.1.72/352/","comment":"https://x.com/jcarndt/status/1953540544887439514","timestamp":"1754595335","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"fe6f135d-a1f3-5d4f-96cb-53cf9146a2c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.233.1.72","comment":"https://x.com/jcarndt/status/1953540544887439514","timestamp":"1754595335","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"ee015b66-15f2-5c27-84c4-3aa7672205a4","type":"url","category":"Network activity","to_ids":true,"value":"https://113.44.45.197:443","comment":"https://x.com/drb_ra/status/1953558073098088599","timestamp":"1754599514","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6034632c-effa-51e0-b4f6-5a8343c61bf2","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.45.197:443","comment":"https://x.com/drb_ra/status/1953558073098088599","timestamp":"1754599514","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f5726fae-6edd-5081-9f0c-def76c922127","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.45.197","comment":"https://x.com/drb_ra/status/1953558073098088599","timestamp":"1754599514","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2f63e55a-3225-5013-b2d9-5cace343aab1","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.202.242","comment":"https://x.com/threatquery/status/1953561802668753142","timestamp":"1754600403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"78e34462-86b8-57e7-baf8-60641987ec0d","type":"url","category":"Network activity","to_ids":true,"value":"http://39.40.133.150","comment":"https://x.com/threatquery/status/1953561806049329580","timestamp":"1754600404","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"a0bfacc1-0c46-570e-89f0-1924a685fffc","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.116.57","comment":"https://x.com/threatquery/status/1953561804325470356","timestamp":"1754600404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"e8abff7a-bcd6-51b8-9b27-2288d0c4a009","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.131.115:8080","comment":"https://x.com/drb_ra/status/1953567859910881340","timestamp":"1754601847","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d77a9591-ee1d-5dd6-a405-78b270d00de0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.131.115","comment":"https://x.com/drb_ra/status/1953567859910881340","timestamp":"1754601847","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"970bce0a-feb8-54a9-b407-c2baefd254bb","type":"domain","category":"Network activity","to_ids":true,"value":"shifilkb.github.io","comment":"https://x.com/urldna_bot/status/1953576919657545743","timestamp":"1754604008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fc383511-188f-584e-8698-8e2356411239","type":"url","category":"Network activity","to_ids":true,"value":"https://shifilkb.github.io/nerflix.in/","comment":"https://x.com/urldna_bot/status/1953576919657545743","timestamp":"1754604008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"438830d3-3ec4-5a06-b758-f20fc6e97e11","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.216.194:5552","comment":"https://x.com/SarlackLab/status/1953592071488479294","timestamp":"1754607620","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"d6fef082-8b2e-512c-a5e8-e906356a97fe","type":"domain","category":"Network activity","to_ids":true,"value":"1453.mywire.org","comment":"https://x.com/SarlackLab/status/1953592071488479294","timestamp":"1754607620","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"323d9938-c359-5841-99ec-0e19c41f49d7","type":"url","category":"Network activity","to_ids":true,"value":"http://1453.mywire.org","comment":"https://x.com/SarlackLab/status/1953592071488479294","timestamp":"1754607620","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"51243544-5edb-54c3-9049-0bfeebd02b75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.216.194","comment":"https://x.com/SarlackLab/status/1953592071488479294","timestamp":"1754607620","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"ae281de9-728f-5af8-badc-325375f6f65d","type":"url","category":"Network activity","to_ids":true,"value":"http://192.119.110.162","comment":"https://x.com/skocherhan/status/1953592239260840152","timestamp":"1754607660","distribution":"5","Tag":[{"name":"BlueNoroff"}]},{"uuid":"1f9614ea-1e84-58c3-bdfc-bb754118ccf7","type":"url","category":"Network activity","to_ids":true,"value":"http://192.119.111.21","comment":"https://x.com/skocherhan/status/1953592239260840152","timestamp":"1754607660","distribution":"5","Tag":[{"name":"BlueNoroff"}]},{"uuid":"3d1be922-4166-5113-b68b-154f9b0a61d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.119.110.162","comment":"https://x.com/skocherhan/status/1953592239260840152","timestamp":"1754607660","distribution":"5","Tag":[{"name":"BlueNoroff"}]},{"uuid":"918d59a8-7408-503d-b5c3-b29f72fed482","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.119.111.21","comment":"https://x.com/skocherhan/status/1953592239260840152","timestamp":"1754607660","distribution":"5","Tag":[{"name":"BlueNoroff"}]},{"uuid":"71f250e7-a243-5136-875c-581f72859b53","type":"url","category":"Network activity","to_ids":true,"value":"http://98.142.241.234:60020","comment":"https://x.com/drb_ra/status/1953594381757485399","timestamp":"1754608171","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4aaae700-0fff-5837-b4e9-bebff3b58f6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.142.241.234","comment":"https://x.com/drb_ra/status/1953594381757485399","timestamp":"1754608171","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a2950fac-1d39-5b22-b884-834181de078a","type":"url","category":"Network activity","to_ids":true,"value":"https://127.0.0.1/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1953594381757485399","timestamp":"1754608171","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b3bece7a-3191-5b07-847b-050395af711e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.43.18.10:80","comment":"https://x.com/drb_ra/status/1953594660326453560","timestamp":"1754608237","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2ab08d28-1924-5e80-aaed-42adcb8edb98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.43.18.10","comment":"https://x.com/drb_ra/status/1953594660326453560","timestamp":"1754608237","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1b9c2571-9511-5983-941e-6f78a4634e2e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.106:8080","comment":"https://x.com/drb_ra/status/1953594800076468644","timestamp":"1754608271","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6c387410-717b-5c9f-acc1-1ea2dc623a72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.106","comment":"https://x.com/drb_ra/status/1953594800076468644","timestamp":"1754608271","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e14cfe88-c839-5d29-bb2d-d4637295af84","type":"url","category":"Network activity","to_ids":true,"value":"http://103.214.172.184:8080","comment":"https://x.com/drb_ra/status/1953594939788697880","timestamp":"1754608304","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e46c4332-823b-5ac0-bbba-10a8d448b443","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.214.172.184","comment":"https://x.com/drb_ra/status/1953594939788697880","timestamp":"1754608304","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"94d2c10f-0bd3-5709-89fe-aa6fdd00ff57","type":"domain","category":"Network activity","to_ids":true,"value":"abcdef.886802.xyz","comment":"https://x.com/drb_ra/status/1953594939788697880","timestamp":"1754608304","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"59accadc-14b2-5f83-a541-dd8ceb12fa65","type":"url","category":"Network activity","to_ids":true,"value":"https://abcdef.886802.xyz/ga.js","comment":"https://x.com/drb_ra/status/1953594939788697880","timestamp":"1754608304","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c5822ba6-35cb-5b59-b98c-c2b67f7d4ced","type":"url","category":"Network activity","to_ids":true,"value":"http://222.186.41.86:11443","comment":"https://x.com/drb_ra/status/1953595078624391279","timestamp":"1754608337","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ceb627c4-6b66-5cf3-a3cc-8d5cae764358","type":"ip-dst","category":"Network activity","to_ids":true,"value":"222.186.41.86","comment":"https://x.com/drb_ra/status/1953595078624391279","timestamp":"1754608337","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e4f8e053-1ee6-5f11-9372-638684ab04b7","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.pis-8257375.top","comment":"https://x.com/urldna_bot/status/1953607138195931647","timestamp":"1754611212","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"34173fea-8dda-54a1-aa3b-ae8dbd705d7b","type":"url","category":"Network activity","to_ids":true,"value":"https://allegrolokalnie.pis-8257375.top","comment":"https://x.com/urldna_bot/status/1953607138195931647","timestamp":"1754611212","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"10f1a654-f3fb-5bc2-8bfc-2c96110bfceb","type":"domain","category":"Network activity","to_ids":true,"value":"saleo-gomel.by","comment":"https://x.com/skocherhan/status/1953617689445810415","timestamp":"1754613728","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"6b036ba3-b396-5faf-bd14-c54771f857de","type":"url","category":"Network activity","to_ids":true,"value":"http://saleo-gomel.by","comment":"https://x.com/skocherhan/status/1953617689445810415","timestamp":"1754613728","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"18b08f21-fa4e-5690-a463-0c2e993179ed","type":"md5","category":"Payload delivery","to_ids":true,"value":"f3660df9dcb44a390ddb514b76069bc4","comment":"https://x.com/skocherhan/status/1953617689445810415","timestamp":"1754613728","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"ed1bdd8d-a257-594c-85c5-66791dead587","type":"domain","category":"Network activity","to_ids":true,"value":"senkar.com.tr","comment":"https://x.com/skocherhan/status/1953621673573261550","timestamp":"1754614678","distribution":"5"},{"uuid":"a44fa58d-a999-54d8-a8ea-c64de17f7f13","type":"url","category":"Network activity","to_ids":true,"value":"http://senkar.com.tr","comment":"https://x.com/skocherhan/status/1953621673573261550","timestamp":"1754614678","distribution":"5"},{"uuid":"6d094fda-af09-5816-bf73-c14472e3c3f1","type":"md5","category":"Payload delivery","to_ids":true,"value":"e9ec4a29ee8e1e68cf0bd3ff77e74dfd","comment":"https://x.com/skocherhan/status/1953621673573261550","timestamp":"1754614678","distribution":"5"},{"uuid":"54fdb7bc-1a8d-591b-867a-1a1382511665","type":"md5","category":"Payload delivery","to_ids":true,"value":"05d0ddfc999a185a974cf5c3a3dbd0c2","comment":"https://x.com/skocherhan/status/1953622662107836561","timestamp":"1754614913","distribution":"5"},{"uuid":"6e29716f-1abc-5ccb-874f-859a3dbf8785","type":"url","category":"Network activity","to_ids":true,"value":"http://deltainox.com.br","comment":"https://x.com/skocherhan/status/1953622662107836561","timestamp":"1754614913","distribution":"5"},{"uuid":"b25a10bf-9ca3-5360-9be0-e15e5b396189","type":"domain","category":"Network activity","to_ids":true,"value":"deltainox.com.br","comment":"https://x.com/skocherhan/status/1953622662107836561","timestamp":"1754614913","distribution":"5"},{"uuid":"beae78ed-d575-5c35-b0e8-422372c5eb6c","type":"url","category":"Network activity","to_ids":true,"value":"https://www2hotmail-japanhoax.mhajg.shop","comment":"https://x.com/masaomi346/status/1953626693580861925","timestamp":"1754615875","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eda2976a-4f18-5241-a9e1-7a32e48e495b","type":"domain","category":"Network activity","to_ids":true,"value":"www2hotmail-japanhoax.mhajg.shop","comment":"https://x.com/masaomi346/status/1953626693580861925","timestamp":"1754615875","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58e84df6-f5c2-5476-9621-c0fad9de878a","type":"domain","category":"Network activity","to_ids":true,"value":"www2hotmail-japanhoax.gu4dj.shop","comment":"https://x.com/masaomi346/status/1953626693580861925","timestamp":"1754615875","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f5ef8fd-2ebf-57c8-8a34-b9bacb1d5953","type":"url","category":"Network activity","to_ids":true,"value":"https://www2hotmail-japanhoax.gu4dj.shop","comment":"https://x.com/masaomi346/status/1953626693580861925","timestamp":"1754615875","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"66fe7f87-c1a1-53b6-9aa0-0ee0ec1f83e8","type":"domain","category":"Network activity","to_ids":true,"value":"www2hotmail-japanhoax.nn7c9.shop","comment":"https://x.com/masaomi346/status/1953626795389157550","timestamp":"1754615899","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32e409a5-ff9f-56a5-b688-4b45378b6aad","type":"url","category":"Network activity","to_ids":true,"value":"https://www2hotmail-japanhoax.nn7c9.shop","comment":"https://x.com/masaomi346/status/1953626795389157550","timestamp":"1754615899","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29a9236e-61c9-574d-a639-1955f1188ce3","type":"domain","category":"Network activity","to_ids":true,"value":"www2hotmail-japanhoax.t4j0z.shop","comment":"https://x.com/masaomi346/status/1953626795389157550","timestamp":"1754615899","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df90cacb-427a-5a2e-8577-6477c345f4b7","type":"url","category":"Network activity","to_ids":true,"value":"https://www2hotmail-japanhoax.t4j0z.shop","comment":"https://x.com/masaomi346/status/1953626795389157550","timestamp":"1754615899","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb8effaa-7e58-50ae-acc8-0cbf5ca487ac","type":"url","category":"Network activity","to_ids":true,"value":"https://larstore11.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1953637328901038468","timestamp":"1754618410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d0152777-c9ac-5e1f-9d9a-1dd064529892","type":"domain","category":"Network activity","to_ids":true,"value":"larstore11.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1953637328901038468","timestamp":"1754618410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"88487f5b-28a0-5cab-88f2-d97d86ad65d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.96.172.173","comment":"https://x.com/skocherhan/status/1953644381614780520","timestamp":"1754620092","distribution":"5"},{"uuid":"c4ca6abd-6a61-507d-b076-81fde9e8eaa4","type":"domain","category":"Network activity","to_ids":true,"value":"resoacard-since.cvdojx.cn","comment":"https://x.com/harugasumi/status/1953647990964699496","timestamp":"1754620952","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57eab29b-07b3-51e2-98a5-e859697a9d3f","type":"url","category":"Network activity","to_ids":true,"value":"https://resoacard-since.cvdojx.cn/welcomeSCR.do/","comment":"https://x.com/harugasumi/status/1953647990964699496","timestamp":"1754620952","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f39eb61c-f611-521d-bcd1-72cb74aaa663","type":"url","category":"Network activity","to_ids":true,"value":"https://open-monex.baitingwang.com/support/","comment":"https://x.com/harugasumi/status/1953652364566835443","timestamp":"1754621995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"edac6d9f-e25e-58e4-990f-6a853715d359","type":"domain","category":"Network activity","to_ids":true,"value":"open-monex.baitingwang.com","comment":"https://x.com/harugasumi/status/1953652364566835443","timestamp":"1754621995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b3f6e059-3a82-525b-bdf4-45b2cd6ab908","type":"url","category":"Network activity","to_ids":true,"value":"http://pub-0ed5a1f263894eab8341e034994e9627.r2.dev/park.html","comment":"https://x.com/urldna_bot/status/1953667529143906391","timestamp":"1754625610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f584749d-1ccc-5cc0-acba-93cb26156382","type":"md5","category":"Payload delivery","to_ids":true,"value":"0ed5a1f263894eab8341e034994e9627","comment":"https://x.com/urldna_bot/status/1953667529143906391","timestamp":"1754625610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0f0fa80b-5d9a-5722-86c3-9a9a42c2edde","type":"domain","category":"Network activity","to_ids":true,"value":"pub-0ed5a1f263894eab8341e034994e9627.r2.dev","comment":"https://x.com/urldna_bot/status/1953667529143906391","timestamp":"1754625610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8b2ab6b6-72fb-59ba-b627-1e4803e072b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.67.17.91","comment":"https://x.com/SarlackLab/status/1953667599138476398","timestamp":"1754625627","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"d6e5e325-df32-513d-9947-da112ca3a370","type":"url","category":"Network activity","to_ids":true,"value":"http://212.67.17.91:1912","comment":"https://x.com/SarlackLab/status/1953667599138476398","timestamp":"1754625627","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"12031dc7-498f-5134-b493-48127457bf8d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.99.199.235","comment":"https://x.com/askardyuss/status/1953667751006154756","timestamp":"1754625663","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"8bc95b2b-f3ad-5157-9bdb-afcd35d5cb04","type":"domain","category":"Network activity","to_ids":true,"value":"m-google-play.info","comment":"https://x.com/c9lab_soc/status/1953677808816853276","timestamp":"1754628061","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0cb47c4b-c01b-5b10-bf87-4128a18dc495","type":"url","category":"Network activity","to_ids":true,"value":"http://m-google-play.info","comment":"https://x.com/c9lab_soc/status/1953677808816853276","timestamp":"1754628061","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"36be3edf-53c9-51db-9d34-a718a28513e9","type":"domain","category":"Network activity","to_ids":true,"value":"union-live.com","comment":"https://x.com/c9lab_soc/status/1953677808816853276","timestamp":"1754628061","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1d35788f-053e-58b8-be33-27e6e507ba76","type":"url","category":"Network activity","to_ids":true,"value":"http://union-live.com","comment":"https://x.com/c9lab_soc/status/1953677808816853276","timestamp":"1754628061","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ea3276a4-d650-5ed2-b186-027cb9036a47","type":"domain","category":"Network activity","to_ids":true,"value":"stephmf.top","comment":"https://x.com/K_N1kolenko/status/1953692245904838774","timestamp":"1754631503","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"e6d5242c-031d-5908-ab9a-dde489a8a857","type":"url","category":"Network activity","to_ids":true,"value":"http://stephmf.top/kiit","comment":"https://x.com/K_N1kolenko/status/1953692245904838774","timestamp":"1754631503","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"3ab6f594-8b38-5a44-9b1c-e1c90ef2a3f4","type":"url","category":"Network activity","to_ids":true,"value":"https://cbrightonuk.weebly.com","comment":"https://x.com/urldna_bot/status/1953697711510720653","timestamp":"1754632807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d269e220-0567-5e03-86b3-1b2f6c502aa0","type":"domain","category":"Network activity","to_ids":true,"value":"cbrightonuk.weebly.com","comment":"https://x.com/urldna_bot/status/1953697711510720653","timestamp":"1754632807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3f983a6d-4f52-5a97-ad69-9a94e20ee7bb","type":"md5","category":"Payload delivery","to_ids":true,"value":"cc9ac6e1293f390e0bdce1f55ea36df7","comment":"https://x.com/suyog41/status/1953702813562966291","timestamp":"1754634023","distribution":"5"},{"uuid":"843d0030-cdee-5f7c-9679-918cc96cdc14","type":"url","category":"Network activity","to_ids":true,"value":"https://39.103.62.252/admin/Quit/Server/v10.23/API/IV9OWQWXGT9","comment":"https://x.com/drb_ra/status/1953703725983293675","timestamp":"1754634240","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bb5168c-54d5-5fdc-8dab-f7c29c8d58b5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.106:3389","comment":"https://x.com/drb_ra/status/1953703725983293675","timestamp":"1754634240","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6c387410-717b-5c9f-acc1-1ea2dc623a72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.106","comment":"https://x.com/drb_ra/status/1953703725983293675","timestamp":"1754634240","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"38e5995b-7628-5aa1-832a-387eab62f02a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.103.62.252","comment":"https://x.com/drb_ra/status/1953703725983293675","timestamp":"1754634240","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5bc75634-a005-5c6f-9aef-468c11a813eb","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.8.68:80","comment":"https://x.com/drb_ra/status/1953704375550980112","timestamp":"1754634395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"12a235c5-8cfb-5189-96a7-b0578bbe1a98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.8.68","comment":"https://x.com/drb_ra/status/1953704375550980112","timestamp":"1754634395","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97543a37-291f-50b0-a1d4-7379d881a393","type":"url","category":"Network activity","to_ids":true,"value":"http://20.3.128.36:31337","comment":"https://x.com/drb_ra/status/1953709076703003047","timestamp":"1754635516","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0294c00c-3eb6-575e-8a8c-828760dfb870","type":"url","category":"Network activity","to_ids":true,"value":"http://20.3.128.36:8888","comment":"https://x.com/drb_ra/status/1953709217300590704","timestamp":"1754635550","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"fe2d3761-adf0-52dc-ace8-6fa40e57bcb3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.3.128.36","comment":"https://x.com/drb_ra/status/1953709217300590704","timestamp":"1754635550","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"db588ce7-660a-5396-833b-4352d2a68a88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.133.251.1","comment":"https://x.com/drb_ra/status/1953709863588048935","timestamp":"1754635704","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"ee298a5f-9678-54cc-a561-826ea6a98a50","type":"url","category":"Network activity","to_ids":true,"value":"http://45.133.251.1:80","comment":"https://x.com/drb_ra/status/1953709863588048935","timestamp":"1754635704","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"bf962d34-59f3-59e5-97fd-7a05e8162c65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.121.150.114","comment":"https://x.com/drb_ra/status/1953710001723171011","timestamp":"1754635737","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"203b96c4-3c13-57fd-bc22-f181094f7228","type":"url","category":"Network activity","to_ids":true,"value":"http://74.121.150.114:8888","comment":"https://x.com/drb_ra/status/1953710001723171011","timestamp":"1754635737","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"f3e782f7-aaec-5914-8f94-a2addc17262a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.61.154","comment":"https://x.com/drb_ra/status/1953710141238358022","timestamp":"1754635770","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"13d213f2-c2d9-5510-8b8d-3d96ae5ede92","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.61.154:443","comment":"https://x.com/drb_ra/status/1953710141238358022","timestamp":"1754635770","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"6a33af74-04b7-559d-afb7-9d29bcb0ab5a","type":"url","category":"Network activity","to_ids":true,"value":"http://187.170.136.171:995","comment":"https://x.com/drb_ra/status/1953710281294524438","timestamp":"1754635803","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"cc342bc2-2a02-50cf-b49c-aed7f9fe7d54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"187.170.136.171","comment":"https://x.com/drb_ra/status/1953710281294524438","timestamp":"1754635803","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"00233f3b-03e2-5a63-95ea-0a303754302a","type":"url","category":"Network activity","to_ids":true,"value":"http://70.31.125.7:2222","comment":"https://x.com/drb_ra/status/1953710419714953603","timestamp":"1754635836","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"7c3b1a65-11a9-5f62-8880-aab34cee3f06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.31.125.7","comment":"https://x.com/drb_ra/status/1953710419714953603","timestamp":"1754635836","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"a322e12e-136e-5a45-b77b-66cdaf887ebc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.197.208","comment":"https://x.com/drb_ra/status/1953710559326544210","timestamp":"1754635870","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"922d3af6-a236-589a-b31a-69e921463884","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.197.208:443","comment":"https://x.com/drb_ra/status/1953710559326544210","timestamp":"1754635870","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b3c4078a-10eb-5987-9a69-b1cbbc2aec6e","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.253.163:443","comment":"https://x.com/drb_ra/status/1953710697570787478","timestamp":"1754635903","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"238947df-2090-54e0-88ef-76ba5c26528d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.253.163","comment":"https://x.com/drb_ra/status/1953710697570787478","timestamp":"1754635903","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"39e3ef1c-6eba-5fa4-a665-23613fc7989b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.9.232.178:40056","comment":"https://x.com/drb_ra/status/1953710836771352704","timestamp":"1754635936","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"89a375ea-8a13-5111-90ba-4eb87ab74ea5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.9.232.178","comment":"https://x.com/drb_ra/status/1953710836771352704","timestamp":"1754635936","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6210e6ad-c9c4-53d8-ad76-8dfdd8054eb9","type":"url","category":"Network activity","to_ids":true,"value":"http://213.109.147.181:443","comment":"https://x.com/drb_ra/status/1953710974956876089","timestamp":"1754635969","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4a58d42c-f54e-5082-a641-80daf2d6b1c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.109.147.181","comment":"https://x.com/drb_ra/status/1953710974956876089","timestamp":"1754635969","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"2efd0c21-1245-511e-b814-3a3c3078e70d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.126.237.188","comment":"https://x.com/drb_ra/status/1953711114182697327","timestamp":"1754636002","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d272790d-cf7f-5796-9235-3b80ab1084d9","type":"url","category":"Network activity","to_ids":true,"value":"http://185.126.237.188:443","comment":"https://x.com/drb_ra/status/1953711114182697327","timestamp":"1754636002","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4c8706ba-82fe-5c03-9747-ae70c854deaf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.198.50.31","comment":"https://x.com/drb_ra/status/1953711252485652508","timestamp":"1754636035","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"8048a545-8555-5ca3-993b-7269fb058876","type":"url","category":"Network activity","to_ids":true,"value":"http://143.198.50.31:443","comment":"https://x.com/drb_ra/status/1953711252485652508","timestamp":"1754636035","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"20ca0931-4436-564e-b047-26995572bb32","type":"url","category":"Network activity","to_ids":true,"value":"http://107.158.128.36:80","comment":"https://x.com/drb_ra/status/1953711390599897110","timestamp":"1754636068","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"5b68a112-ee3d-5a27-9453-6779f9e14593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.158.128.36","comment":"https://x.com/drb_ra/status/1953711390599897110","timestamp":"1754636068","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"1605e76f-f646-5f07-bab1-ba5af2d840cf","type":"url","category":"Network activity","to_ids":true,"value":"http://54.243.109.14:443","comment":"https://x.com/drb_ra/status/1953711529032905045","timestamp":"1754636101","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a6c4fc10-7a76-5a22-845f-aeabf6e3a0df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.243.109.14","comment":"https://x.com/drb_ra/status/1953711529032905045","timestamp":"1754636101","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"592ec2ef-b0bd-53e0-bd83-4d7fe65e3bc4","type":"url","category":"Network activity","to_ids":true,"value":"http://84.200.205.101:31337","comment":"https://x.com/drb_ra/status/1953711667784651080","timestamp":"1754636134","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d1caeee4-99ac-5752-8340-fa72ac72b37a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.200.205.101","comment":"https://x.com/drb_ra/status/1953711667784651080","timestamp":"1754636134","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f2e0900a-ae4a-50ac-9cb9-7e1dff13fa92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.199.165.22","comment":"https://x.com/drb_ra/status/1953711805680755178","timestamp":"1754636167","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b10df990-ac62-560c-ad14-fb02e92c5444","type":"url","category":"Network activity","to_ids":true,"value":"http://128.199.165.22:31337","comment":"https://x.com/drb_ra/status/1953711805680755178","timestamp":"1754636167","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1f334951-7735-5436-b018-1202c28698c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.15.192.7","comment":"https://x.com/drb_ra/status/1953711943950209253","timestamp":"1754636200","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c65b1453-be04-545e-ba8b-3c5f27cd9c1a","type":"url","category":"Network activity","to_ids":true,"value":"http://106.15.192.7:31337","comment":"https://x.com/drb_ra/status/1953711943950209253","timestamp":"1754636200","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"90fa68cd-eca9-5289-b018-6b64e5b4384d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.22.109.63","comment":"https://x.com/drb_ra/status/1953712082349617256","timestamp":"1754636233","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"df908dfc-6456-547b-8690-86d3edadcf83","type":"url","category":"Network activity","to_ids":true,"value":"http://165.22.109.63:31337","comment":"https://x.com/drb_ra/status/1953712082349617256","timestamp":"1754636233","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3a2c86ce-fe38-5db0-bce9-5d1c7b686e5c","type":"url","category":"Network activity","to_ids":true,"value":"http://206.237.127.70:31337","comment":"https://x.com/drb_ra/status/1953712220308640157","timestamp":"1754636266","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ce8ddedb-82d1-5804-be34-61948e977642","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.237.127.70","comment":"https://x.com/drb_ra/status/1953712220308640157","timestamp":"1754636266","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d6b65dc8-bfcf-5a40-870a-8da65fa14679","type":"url","category":"Network activity","to_ids":true,"value":"http://93.127.132.182:31337","comment":"https://x.com/drb_ra/status/1953712358792032468","timestamp":"1754636299","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"136a0048-8800-5d10-a3d7-07b3a3a49d52","type":"url","category":"Network activity","to_ids":true,"value":"http://93.127.132.182:443","comment":"https://x.com/drb_ra/status/1953712496977584512","timestamp":"1754636332","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"031b6847-f163-5837-9103-199336787690","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.127.132.182","comment":"https://x.com/drb_ra/status/1953712496977584512","timestamp":"1754636332","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e426a377-accf-54cd-94ac-7883869b07ed","type":"url","category":"Network activity","to_ids":true,"value":"http://47.97.125.50:2404","comment":"https://x.com/drb_ra/status/1953713142451544399","timestamp":"1754636486","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c31e1db6-750f-5dfa-9385-adea1036052e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.97.125.50","comment":"https://x.com/drb_ra/status/1953713142451544399","timestamp":"1754636486","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0d6e37c6-6018-5706-a2b6-a45f0f73e2d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.219.132","comment":"https://x.com/drb_ra/status/1953713419305029931","timestamp":"1754636552","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"71375183-1513-56dc-8f52-7c061ef88bc9","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.219.132:2828","comment":"https://x.com/drb_ra/status/1953713419305029931","timestamp":"1754636552","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cbf32df5-74e3-5c89-9a02-62a20063bc3c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.44.29.210:443","comment":"https://x.com/drb_ra/status/1953713557972893890","timestamp":"1754636585","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1ac88a26-a054-59d3-8657-5ba4867823f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.44.29.210","comment":"https://x.com/drb_ra/status/1953713557972893890","timestamp":"1754636585","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"db860638-9218-57a5-9fd5-7d0e7c1fbf0b","type":"url","category":"Network activity","to_ids":true,"value":"http://109.134.250.129:2404","comment":"https://x.com/drb_ra/status/1953713695827100051","timestamp":"1754636617","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a45099bc-d17d-5868-bfaf-5da55c7aa99c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.134.250.129","comment":"https://x.com/drb_ra/status/1953713695827100051","timestamp":"1754636617","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"151d548c-8d27-598e-b8a3-a00a8b2bad66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.88.72","comment":"https://x.com/drb_ra/status/1953713834457542717","timestamp":"1754636651","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cfb5c229-abd8-5d65-91d0-584611f8c93e","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.88.72:5000","comment":"https://x.com/drb_ra/status/1953713834457542717","timestamp":"1754636651","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8645a165-d582-5694-b4f3-490b83b0e935","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.125.254:3232","comment":"https://x.com/drb_ra/status/1953713973079024126","timestamp":"1754636684","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"d340c5e5-172c-5c62-bb18-a28833d2e0b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.125.254","comment":"https://x.com/drb_ra/status/1953713973079024126","timestamp":"1754636684","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"a3d55252-844b-522a-af78-0e0b0a1517be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.143.120.85","comment":"https://x.com/drb_ra/status/1953714113504284825","timestamp":"1754636717","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cdcaaf5f-b3fd-5413-b6db-7be2fcb00d31","type":"url","category":"Network activity","to_ids":true,"value":"http://93.143.120.85:8080","comment":"https://x.com/drb_ra/status/1953714113504284825","timestamp":"1754636717","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f7162279-3609-5661-a596-3a11d3ef663d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.26.78.124:6362","comment":"https://x.com/drb_ra/status/1953714252008611960","timestamp":"1754636750","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f992cdad-6709-5523-8c8d-68de2c007b1a","type":"url","category":"Network activity","to_ids":true,"value":"http://13.231.207.37:40000","comment":"https://x.com/drb_ra/status/1953714390248657093","timestamp":"1754636783","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0ff52931-1f55-50ac-8ba5-e75dd7734c05","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.231.207.37","comment":"https://x.com/drb_ra/status/1953714390248657093","timestamp":"1754636783","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"376b8a91-9f92-5269-8087-48b9e0178305","type":"url","category":"Network activity","to_ids":true,"value":"http://18.231.123.165:16992","comment":"https://x.com/drb_ra/status/1953714528555798680","timestamp":"1754636816","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"226c1581-b160-5b8c-b05b-8b35daa4e235","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.231.123.165","comment":"https://x.com/drb_ra/status/1953714528555798680","timestamp":"1754636816","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9b1379c4-30be-5a22-9a45-ae52caed33bb","type":"url","category":"Network activity","to_ids":true,"value":"http://157.245.216.214:465","comment":"https://x.com/drb_ra/status/1953714667169120259","timestamp":"1754636849","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0dd080a3-917a-5a66-af89-86d5ff55cbbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.245.216.214","comment":"https://x.com/drb_ra/status/1953714806168728003","timestamp":"1754636882","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"61f4f2a6-e4f7-5ffb-bbbf-22f3650cccb8","type":"url","category":"Network activity","to_ids":true,"value":"http://157.245.216.214:25","comment":"https://x.com/drb_ra/status/1953714806168728003","timestamp":"1754636882","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"465c5206-2d7b-5588-a5da-256292e6745d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.0.251.172:25","comment":"https://x.com/drb_ra/status/1953714944014258379","timestamp":"1754636915","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a24e46c2-2675-57b7-a0dc-7454329b0692","type":"url","category":"Network activity","to_ids":true,"value":"https://janusods1.weebly.com","comment":"https://x.com/urldna_bot/status/1953727923648623090","timestamp":"1754640010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"91723cf5-0f12-5719-b85a-8cd774ef0384","type":"domain","category":"Network activity","to_ids":true,"value":"janusods1.weebly.com","comment":"https://x.com/urldna_bot/status/1953727923648623090","timestamp":"1754640010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c2ab9cff-dbe7-5d2f-be6f-843cca1f0ec0","type":"domain","category":"Network activity","to_ids":true,"value":"ionoss-sand.vercel.app","comment":"https://x.com/urldna_bot/status/1953758113707782372","timestamp":"1754647208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5151ad40-cc22-5603-a468-1d5fb5a83989","type":"url","category":"Network activity","to_ids":true,"value":"https://ionoss-sand.vercel.app","comment":"https://x.com/urldna_bot/status/1953758113707782372","timestamp":"1754647208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1e51565b-2e2d-55f1-9e41-9263ed851867","type":"domain","category":"Network activity","to_ids":true,"value":"kingyouneverloss.com","comment":"https://x.com/suyog41/status/1953762402127991174","timestamp":"1754648230","distribution":"5"},{"uuid":"b61d295d-e93a-586b-87f0-2b8cf8108516","type":"url","category":"Network activity","to_ids":true,"value":"http://kingyouneverloss.com","comment":"https://x.com/suyog41/status/1953762402127991174","timestamp":"1754648230","distribution":"5"},{"uuid":"def0559a-9ad8-5013-8030-9ab2e397b42b","type":"md5","category":"Payload delivery","to_ids":true,"value":"b3e1e55fafa2b7d8e91510d0833c973c","comment":"https://x.com/suyog41/status/1953762402127991174","timestamp":"1754648230","distribution":"5"},{"uuid":"dba7b47d-c740-5d01-9088-ad790256165f","type":"url","category":"Network activity","to_ids":true,"value":"http://47.106.229.212:8031","comment":"https://x.com/drb_ra/status/1953773422711881941","timestamp":"1754650857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6b6f8c10-b4f6-5dd8-ae24-4912b29ba593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.106.229.212","comment":"https://x.com/drb_ra/status/1953773422711881941","timestamp":"1754650857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f705174-c078-5029-ab11-0514d49b155a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.162.118.119","comment":"https://x.com/drb_ra/status/1953774069448335736","timestamp":"1754651012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"814593d5-08d2-591b-92e7-ac29194d8066","type":"url","category":"Network activity","to_ids":true,"value":"http://8.153.97.202:1433","comment":"https://x.com/drb_ra/status/1953774069448335736","timestamp":"1754651012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c4a4a83c-df9e-5ddc-84ef-d0c37eff76dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.114.202","comment":"https://x.com/drb_ra/status/1953774208099439072","timestamp":"1754651045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0ef506c8-8987-5a18-973e-2db8c9f422b4","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.114.202:8888","comment":"https://x.com/drb_ra/status/1953774208099439072","timestamp":"1754651045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a6d859b0-58b9-51fe-9835-049171351ab5","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.185:80","comment":"https://x.com/drb_ra/status/1953774348008919072","timestamp":"1754651078","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a6c23100-110c-5157-b73c-e8c97813fcd5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.185","comment":"https://x.com/drb_ra/status/1953774348008919072","timestamp":"1754651078","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bc04435b-5160-5583-b6e7-27798084672e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.214.172.80:8080","comment":"https://x.com/drb_ra/status/1953774489969340761","timestamp":"1754651112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7d57810c-8ea0-5b0c-a979-a396d6e7224d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.214.172.80","comment":"https://x.com/drb_ra/status/1953774489969340761","timestamp":"1754651112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"80538abb-2d96-5508-ba82-6beeeab588d0","type":"domain","category":"Network activity","to_ids":true,"value":"Maps.lt","comment":"https://x.com/FalconFeedsio/status/1953775721517900178","timestamp":"1754651406","distribution":"5"},{"uuid":"3837fd65-4a89-54a1-9def-90490c7ef21c","type":"url","category":"Network activity","to_ids":true,"value":"http://Maps.lt","comment":"https://x.com/FalconFeedsio/status/1953775721517900178","timestamp":"1754651406","distribution":"5"},{"uuid":"ed526033-37e5-5651-b1a1-3092b85f660e","type":"domain","category":"Network activity","to_ids":true,"value":"Sveikatosnaujienos.lt","comment":"https://x.com/FalconFeedsio/status/1953775721517900178","timestamp":"1754651406","distribution":"5"},{"uuid":"5def0ccb-6953-582b-9ecd-f608eee166ac","type":"url","category":"Network activity","to_ids":true,"value":"http://Sveikatosnaujienos.lt","comment":"https://x.com/FalconFeedsio/status/1953775721517900178","timestamp":"1754651406","distribution":"5"},{"uuid":"0ff67afd-afcc-50a8-932b-6cfc40477c92","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.105.246:8888","comment":"https://x.com/drb_ra/status/1953778180159873528","timestamp":"1754651992","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"61040426-c302-5928-8c65-ddcfea70625e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.226.90.183","comment":"https://x.com/drb_ra/status/1953778319414976585","timestamp":"1754652025","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e456d917-0d20-5c2f-aef0-7f03b42dbb36","type":"url","category":"Network activity","to_ids":true,"value":"http://129.226.90.183:10002","comment":"https://x.com/drb_ra/status/1953778319414976585","timestamp":"1754652025","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4c54d21f-f44e-5b56-b0c3-eaf0bb421f1a","type":"url","category":"Network activity","to_ids":true,"value":"https://193.36.117.67/msdownload/update/2022/04/windows6.1-kb98218-v3-x86_0c754.psf","comment":"https://x.com/drb_ra/status/1953778461215989886","timestamp":"1754652059","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f2254ca-61de-5407-8b5e-3c6c8c54a7b1","type":"url","category":"Network activity","to_ids":true,"value":"http://193.36.117.67:80","comment":"https://x.com/drb_ra/status/1953778461215989886","timestamp":"1754652059","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7e7d418d-034f-5272-9088-316181341e21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.36.117.67","comment":"https://x.com/drb_ra/status/1953778461215989886","timestamp":"1754652059","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4cf3d219-c8d1-5270-a3af-2c7d24fd9281","type":"url","category":"Network activity","to_ids":true,"value":"http://106.54.239.134:80","comment":"https://x.com/drb_ra/status/1953779109210812786","timestamp":"1754652213","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b54121e6-15b2-5f57-97b0-49eba984a759","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.54.239.134","comment":"https://x.com/drb_ra/status/1953779109210812786","timestamp":"1754652213","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cc676dc8-3995-5ab0-ae09-e94adb91071b","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.3.217/__utm.gif","comment":"https://x.com/drb_ra/status/1953779247912222909","timestamp":"1754652246","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b2d28cf2-c680-5f36-9974-ea2b68189059","type":"url","category":"Network activity","to_ids":true,"value":"http://47.122.121.212:80","comment":"https://x.com/drb_ra/status/1953779247912222909","timestamp":"1754652246","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a56b6050-e0cf-52b5-9da9-f8aa9de93ef8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.121.212","comment":"https://x.com/drb_ra/status/1953779247912222909","timestamp":"1754652246","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9cb554fd-ed38-56d4-a1bb-08ccc264e593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.170.22.213","comment":"https://x.com/drb_ra/status/1953785470996959370","timestamp":"1754653730","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"36b0a515-5ff2-5adf-8d2c-2479bf018b56","type":"url","category":"Network activity","to_ids":true,"value":"https://31.170.22.213:443","comment":"https://x.com/drb_ra/status/1953785470996959370","timestamp":"1754653730","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6e45b4a1-97d7-5db4-9ecb-44ac57d2deb6","type":"url","category":"Network activity","to_ids":true,"value":"http://31.170.22.213:443","comment":"https://x.com/drb_ra/status/1953785470996959370","timestamp":"1754653730","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"64767b39-5b72-50ea-b5c6-1c1daa68ebe6","type":"url","category":"Network activity","to_ids":true,"value":"https://54.161.92.58:4444","comment":"https://x.com/drb_ra/status/1953785609127915520","timestamp":"1754653763","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"af87c0e1-1601-55a3-9e0f-043c51ee94c6","type":"url","category":"Network activity","to_ids":true,"value":"http://54.161.92.58:4444","comment":"https://x.com/drb_ra/status/1953785609127915520","timestamp":"1754653763","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3bbec1c6-c27a-53af-88a7-9831f5527776","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.161.92.58","comment":"https://x.com/drb_ra/status/1953785609127915520","timestamp":"1754653763","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3ebac768-52d2-5277-9f56-cc3b84023fc6","type":"url","category":"Network activity","to_ids":true,"value":"https://sites.google.com/walletconnect-web3.com/walletconnect/home","comment":"https://x.com/urldna_bot/status/1953788309370495253","timestamp":"1754654407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"17f32f24-83ac-50c1-86e4-ee93ae75d260","type":"md5","category":"Payload delivery","to_ids":true,"value":"6d11cf9af14295e8ceec2bb16b4b172a","comment":"https://x.com/suyog41/status/1953803002621702618","timestamp":"1754657910","distribution":"5"},{"uuid":"27d438ed-74d3-5fbb-a9f6-67652750d4fe","type":"md5","category":"Payload delivery","to_ids":true,"value":"2fca428ddd6cfc3af1d8f4ae80a9a206","comment":"https://x.com/suyog41/status/1953803002621702618","timestamp":"1754657910","distribution":"5"},{"uuid":"adf72a4c-6710-53c9-a9e8-7496963da825","type":"md5","category":"Payload delivery","to_ids":true,"value":"729e57fb0feda99240ee13d348530f65","comment":"https://x.com/suyog41/status/1953803002621702618","timestamp":"1754657910","distribution":"5"},{"uuid":"0f17dfd3-b05b-5818-a3bd-453d778d6d88","type":"md5","category":"Payload delivery","to_ids":true,"value":"75b7b69d7ad8353a1d13d59b29896e34","comment":"https://x.com/suyog41/status/1953803002621702618","timestamp":"1754657910","distribution":"5"},{"uuid":"3de2b5f4-b171-5f6c-9b92-2319554b8844","type":"md5","category":"Payload delivery","to_ids":true,"value":"6696a14077ac3def16f137748749f9fa","comment":"https://x.com/suyog41/status/1953803002621702618","timestamp":"1754657910","distribution":"5"},{"uuid":"6b7e2751-b781-5b11-9688-80fffd9e6da4","type":"domain","category":"Network activity","to_ids":true,"value":"wmieventlogonlinehelp.ydns.eu","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"c17891b9-979b-5da4-84f8-5a835773983a","type":"url","category":"Network activity","to_ids":true,"value":"http://wmieventlogonlinehelp.ydns.eu","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"e988c70f-db58-59e6-be10-511d943b875b","type":"domain","category":"Network activity","to_ids":true,"value":"updatedrvier.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"6152bffe-ad1d-5c18-af6a-3541d0b47c9a","type":"url","category":"Network activity","to_ids":true,"value":"http://systemcopilotdriver.ydns.eu","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"e42e6c95-de31-5527-be4f-75e3c8b56e54","type":"domain","category":"Network activity","to_ids":true,"value":"actwindowdsdriver.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"845d517b-b564-5c08-b18c-34ff16964813","type":"url","category":"Network activity","to_ids":true,"value":"http://actwindowdsdriver.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"b29606fb-f76e-5488-910b-d1176f80eb7c","type":"url","category":"Network activity","to_ids":true,"value":"http://updatedrvier.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"c6117af9-7b76-566d-889e-d5a0c77478a9","type":"domain","category":"Network activity","to_ids":true,"value":"systemcopilotdriver.ydns.eu","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"ce72fc20-5624-58b7-b4dc-614bd559cbf3","type":"domain","category":"Network activity","to_ids":true,"value":"cooempresassss.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"fe457352-ae07-5b58-81fa-810f751c10bf","type":"url","category":"Network activity","to_ids":true,"value":"http://cooempresassss.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"cf38654f-97dd-56a7-beca-59539db780c0","type":"url","category":"Network activity","to_ids":true,"value":"http://random.tbtt.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"fd577384-354b-5928-b90e-987666e54d9d","type":"domain","category":"Network activity","to_ids":true,"value":"random.tbtt.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"38ff95fe-bc77-59c3-93c3-95af78c638b3","type":"url","category":"Network activity","to_ids":true,"value":"http://securityhealthmonitorgiize.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"9d1daf23-9154-577d-85da-d8c4e74c1130","type":"domain","category":"Network activity","to_ids":true,"value":"securityhealthmonitorgiize.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"d5988a04-fcff-563e-beb0-ca1e1a16726c","type":"url","category":"Network activity","to_ids":true,"value":"http://pasar09enero.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"f2f9cb05-c305-5f40-97a2-a56c7de13c57","type":"domain","category":"Network activity","to_ids":true,"value":"pasar09enero.duckdns.org","comment":"https://x.com/skocherhan/status/1953804700433760569","timestamp":"1754658315","distribution":"5"},{"uuid":"d8b91a7f-7e10-5158-9313-d07b68b73e2a","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.25.254:4449","comment":"https://x.com/skocherhan/status/1953806051431662007","timestamp":"1754658637","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"401f6bd2-b775-584b-a240-8c9ef74ac9e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.98.25.254","comment":"https://x.com/skocherhan/status/1953806051431662007","timestamp":"1754658637","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"07ed1f6e-f540-5f6e-bf7f-4451a6cf0e9c","type":"md5","category":"Payload delivery","to_ids":true,"value":"e981cad34b79104cead6bf56d9e314bc","comment":"https://x.com/skocherhan/status/1953814437262958750","timestamp":"1754660636","distribution":"5"},{"uuid":"5fb20ef5-c46d-5dc3-aabc-e0de4d51a781","type":"url","category":"Network activity","to_ids":true,"value":"http://sdghwsfehjtrr-1368385699.cos.accelerate.myqcloud.com/ca.bin","comment":"https://x.com/skocherhan/status/1953814437262958750","timestamp":"1754660636","distribution":"5"},{"uuid":"607225b2-7b01-578a-8019-73ca5e880643","type":"domain","category":"Network activity","to_ids":true,"value":"sdghwsfehjtrr-1368385699.cos.accelerate.myqcloud.com","comment":"https://x.com/skocherhan/status/1953814437262958750","timestamp":"1754660636","distribution":"5"},{"uuid":"4dc99d85-797c-5f07-a429-63c501cf4080","type":"domain","category":"Network activity","to_ids":true,"value":"uprankk.in","comment":"https://x.com/urldna_bot/status/1953818508782871020","timestamp":"1754661607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9e5b8d08-ffa2-5243-adc8-9fc923e08755","type":"url","category":"Network activity","to_ids":true,"value":"http://www.uprankk.in/thoo/chinaMail%20Fud2023_done/china/","comment":"https://x.com/urldna_bot/status/1953818508782871020","timestamp":"1754661607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1112df63-5b45-5c4e-90c4-2dac59186a91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.38.87.154","comment":"https://x.com/skocherhan/status/1953826517139489250","timestamp":"1754663516","distribution":"5"},{"uuid":"5ff3b015-3a35-50de-97cb-7abdde18a8b3","type":"domain","category":"Network activity","to_ids":true,"value":"cuotasfabalelle.icu","comment":"https://x.com/1ZRR4H/status/1953836962294411438","timestamp":"1754666007","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6f98af49-9469-56f4-af85-c4e6de59f64e","type":"url","category":"Network activity","to_ids":true,"value":"https://cuotasfabalelle.icu","comment":"https://x.com/1ZRR4H/status/1953836962294411438","timestamp":"1754666007","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d958aec8-a403-537a-950c-3b400296c2a6","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.194:1912","comment":"https://x.com/SarlackLab/status/1953848778319908981","timestamp":"1754668824","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"0db4bdf1-07da-5493-9139-22e26470e2b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.194","comment":"https://x.com/SarlackLab/status/1953848778319908981","timestamp":"1754668824","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"c3dc1db6-9e2b-59d2-a68c-5005d8d3e400","type":"url","category":"Network activity","to_ids":true,"value":"http://129.226.90.183:443","comment":"https://x.com/drb_ra/status/1953854203027214636","timestamp":"1754670117","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d94aeb44-f38e-5cab-824f-93e0a1af696b","type":"domain","category":"Network activity","to_ids":true,"value":"ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953855793721196838","timestamp":"1754670496","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"b4a65b23-b6ac-573c-862a-3cf4b1825f99","type":"url","category":"Network activity","to_ids":true,"value":"http://ctyfftrjgtwdjzlgqh4avbd35sqrs6tde4oyam2ufbjch6oqpqtkdtid.onion","comment":"https://x.com/fbgwls245/status/1953855793721196838","timestamp":"1754670496","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"1280c836-4059-589a-9d6e-67898410223f","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/BlackNevas","comment":"https://x.com/fbgwls245/status/1953855793721196838","timestamp":"1754670496","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"b9ed4799-1967-570e-b7dc-ac2e8c44c4c0","type":"url","category":"Network activity","to_ids":true,"value":"http://191.233.1.72/352/","comment":"https://x.com/skocherhan/status/1953856164581577121","timestamp":"1754670585","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"fe6f135d-a1f3-5d4f-96cb-53cf9146a2c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.233.1.72","comment":"https://x.com/skocherhan/status/1953856164581577121","timestamp":"1754670585","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"1886c71e-78c3-5132-9af7-d5703181ad7e","type":"md5","category":"Payload delivery","to_ids":true,"value":"851C6B405E024BFA765E48C8FA24C30B","comment":"https://x.com/fbgwls245/status/1953866587888562669","timestamp":"1754673070","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3ed9d47b-118d-50d5-8f02-ffdba81efc98","type":"url","category":"Network activity","to_ids":true,"value":"http://14.103.234.180","comment":"https://x.com/midnight_comms/status/1953867642315436130","timestamp":"1754673321","distribution":"5"},{"uuid":"ab1c68a4-33f3-519b-ba07-cac39287ac20","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.103.234.180","comment":"https://x.com/midnight_comms/status/1953867642315436130","timestamp":"1754673321","distribution":"5"},{"uuid":"6d0fca88-c20c-5df0-99e6-f9359b774303","type":"domain","category":"Network activity","to_ids":true,"value":"database-manage-local-git8412579601.vercel.app","comment":"https://x.com/urldna_bot/status/1953878921180528912","timestamp":"1754676010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a1c9cb7f-1e33-58ce-938b-ea94644359a3","type":"url","category":"Network activity","to_ids":true,"value":"https://database-manage-local-git8412579601.vercel.app/hhkruu.html","comment":"https://x.com/urldna_bot/status/1953878921180528912","timestamp":"1754676010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1e850ec1-80c1-5212-8cb7-31e88a91c082","type":"url","category":"Network activity","to_ids":true,"value":"http://colascore.com","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"68f1ad9d-a2ea-57a9-b76b-9841022aaa44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.197.148.33","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"f34589f5-10fa-52ce-a4fa-0e198032a000","type":"url","category":"Network activity","to_ids":true,"value":"http://15.197.148.33","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"782004f8-307f-5960-92eb-a257e7f543fb","type":"url","category":"Network activity","to_ids":true,"value":"http://3.33.130.190","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"7627039a-000f-587c-828b-6aa0300a3e71","type":"url","category":"Network activity","to_ids":true,"value":"http://vsbet170.com","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"88430f1f-be64-5c00-a05c-5b7f21e1d95e","type":"url","category":"Network activity","to_ids":true,"value":"http://VSBET.COM","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"89f286f7-3010-545b-aafa-987675dadfcb","type":"domain","category":"Network activity","to_ids":true,"value":"colascore.com","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"7542193b-b256-5199-876b-1530110ac783","type":"domain","category":"Network activity","to_ids":true,"value":"VSBET.COM","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"6fddab78-530e-5778-a0fc-e9eac7b07006","type":"domain","category":"Network activity","to_ids":true,"value":"vsbet170.com","comment":"https://x.com/skocherhan/status/1953881437653877245","timestamp":"1754676610","distribution":"5"},{"uuid":"4b61362f-c1d3-5b0b-a26d-96c2761a4c0c","type":"url","category":"Network activity","to_ids":true,"value":"http://51.91.56.54:31337","comment":"https://x.com/drb_ra/status/1953890337786933694","timestamp":"1754678732","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d04afb6e-6f5b-5fe3-abad-90446124a484","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.91.56.54","comment":"https://x.com/drb_ra/status/1953890337786933694","timestamp":"1754678732","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9445620b-a1ef-5142-8b3a-74826804bc6b","type":"url","category":"Network activity","to_ids":true,"value":"http://77.90.16.122:443","comment":"https://x.com/drb_ra/status/1953890984896708620","timestamp":"1754678886","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8a81a8e6-e406-528f-ad98-238d8b254d71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.90.16.122","comment":"https://x.com/drb_ra/status/1953890984896708620","timestamp":"1754678886","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f87684d5-c40c-51eb-aaca-fd7a4c1a4f3a","type":"url","category":"Network activity","to_ids":true,"value":"http://165.22.238.206:465","comment":"https://x.com/drb_ra/status/1953891121664602287","timestamp":"1754678919","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c83f8357-b222-5293-8c2d-456d5e8a4718","type":"url","category":"Network activity","to_ids":true,"value":"http://165.22.238.206:443","comment":"https://x.com/drb_ra/status/1953891261431394619","timestamp":"1754678952","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fea1185e-3d8c-59e7-991e-3f9ed8d7af97","type":"url","category":"Network activity","to_ids":true,"value":"http://165.22.238.206:80","comment":"https://x.com/drb_ra/status/1953891397972705773","timestamp":"1754678985","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cbd7bf04-cbcf-5a00-81ff-abfcb26af580","type":"url","category":"Network activity","to_ids":true,"value":"http://165.22.238.206:25","comment":"https://x.com/drb_ra/status/1953891536569249907","timestamp":"1754679018","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f1a441b9-ea4f-5120-aea4-bab994a5500d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.22.238.206","comment":"https://x.com/drb_ra/status/1953891536569249907","timestamp":"1754679018","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b1e65002-1102-5109-92d5-a87fc6ec1220","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.1.22.212","comment":"https://x.com/drb_ra/status/1953891677757739174","timestamp":"1754679052","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"8dfb1004-3a14-5d39-8fe3-fa411fd3407a","type":"url","category":"Network activity","to_ids":true,"value":"http://62.1.22.212:995","comment":"https://x.com/drb_ra/status/1953891677757739174","timestamp":"1754679052","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"f7c0e612-86ac-5a90-bb67-8da7273254bc","type":"url","category":"Network activity","to_ids":true,"value":"http://51.211.212.16:995","comment":"https://x.com/drb_ra/status/1953891812982300980","timestamp":"1754679084","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"7e5ad68f-2577-5359-9108-82a5ed49ed6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.211.212.16","comment":"https://x.com/drb_ra/status/1953891812982300980","timestamp":"1754679084","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"0915da74-ccd9-51ad-9d99-ce98e746657d","type":"url","category":"Network activity","to_ids":true,"value":"http://78.141.230.133:443","comment":"https://x.com/drb_ra/status/1953891950329029008","timestamp":"1754679117","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b745a36f-bce2-5503-ac3b-d07807fcca42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.141.230.133","comment":"https://x.com/drb_ra/status/1953891950329029008","timestamp":"1754679117","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f81f6edd-b41c-5ecd-8eb6-b1db2bc9a61c","type":"url","category":"Network activity","to_ids":true,"value":"http://18.231.126.146:443","comment":"https://x.com/drb_ra/status/1953892087356608578","timestamp":"1754679149","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"6d94e0a7-d539-5f55-bcac-fa88c00644c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.231.126.146","comment":"https://x.com/drb_ra/status/1953892087356608578","timestamp":"1754679149","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"02eab34d-49cf-5438-b633-8a2cd926b947","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.164.55.75","comment":"https://x.com/drb_ra/status/1953892226209079321","timestamp":"1754679182","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f17538c0-f89b-55d1-9a6d-7c1a5e554f2d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.164.55.75:443","comment":"https://x.com/drb_ra/status/1953892226209079321","timestamp":"1754679182","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"53a96565-e874-53a9-97c3-e4bb541898b8","type":"url","category":"Network activity","to_ids":true,"value":"http://207.254.22.248:7443","comment":"https://x.com/drb_ra/status/1953892502559174996","timestamp":"1754679248","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"5d83ecf4-5024-5184-a860-64a955af8dd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.254.22.248","comment":"https://x.com/drb_ra/status/1953892502559174996","timestamp":"1754679248","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a95621f6-7a29-549f-b7b5-524859272786","type":"url","category":"Network activity","to_ids":true,"value":"http://51.178.207.65:443","comment":"https://x.com/drb_ra/status/1953893147701924201","timestamp":"1754679402","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"57a6a2fb-251d-56c0-98d5-b95428b84d28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.178.207.65","comment":"https://x.com/drb_ra/status/1953893147701924201","timestamp":"1754679402","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"76ca906e-3781-54ba-a526-095d54ab1b1a","type":"url","category":"Network activity","to_ids":true,"value":"http://52.204.152.121:8080","comment":"https://x.com/drb_ra/status/1953893285748986045","timestamp":"1754679435","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"60fa3415-2983-5efc-9b8f-e0a89caf9f6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.204.152.121","comment":"https://x.com/drb_ra/status/1953893285748986045","timestamp":"1754679435","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"ecb36d96-569d-5828-a714-446f3e75887c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.59.16","comment":"https://x.com/drb_ra/status/1953893424370966610","timestamp":"1754679468","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"98b5c3df-0f3b-5376-9551-fea01abf5d4a","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.59.16:443","comment":"https://x.com/drb_ra/status/1953893424370966610","timestamp":"1754679468","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b512846e-51a3-533c-9b81-b01e266e8b4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.103.199","comment":"https://x.com/drb_ra/status/1953893563017695676","timestamp":"1754679501","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c61f438f-f67f-52d4-aed5-d87eb203959d","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.103.199:5000","comment":"https://x.com/drb_ra/status/1953893563017695676","timestamp":"1754679501","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6a495fea-9365-5342-abef-773a4cec10a1","type":"url","category":"Network activity","to_ids":true,"value":"http://185.243.5.79:4405","comment":"https://x.com/drb_ra/status/1953893701341589962","timestamp":"1754679534","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c177f233-d9ef-5c10-b360-719d74e7edd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.243.5.79","comment":"https://x.com/drb_ra/status/1953893701341589962","timestamp":"1754679534","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9f8ff0ac-0d57-5b62-841f-dcf3cdc34335","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.70.227:2404","comment":"https://x.com/drb_ra/status/1953893840328302862","timestamp":"1754679567","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"68b61458-b531-5f31-a9fa-34e29a8ea452","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.70.227","comment":"https://x.com/drb_ra/status/1953893840328302862","timestamp":"1754679567","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4173dbfb-decc-5754-bc85-c1bd4bc19e9c","type":"url","category":"Network activity","to_ids":true,"value":"http://18.167.134.167:8082","comment":"https://x.com/drb_ra/status/1953893979403301197","timestamp":"1754679600","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2d941c2f-df43-51e8-a123-e620ecf0acf6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.167.134.167","comment":"https://x.com/drb_ra/status/1953893979403301197","timestamp":"1754679600","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f1730ab6-86f6-5d8f-81d5-e7ee71c14d52","type":"url","category":"Network activity","to_ids":true,"value":"http://13.124.101.174:20201","comment":"https://x.com/drb_ra/status/1953894118020534669","timestamp":"1754679633","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b8becfd0-a94d-5af9-aea0-94f475be833e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.124.101.174","comment":"https://x.com/drb_ra/status/1953894118020534669","timestamp":"1754679633","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"fa6aa486-48fd-5a19-8757-a5288c38101f","type":"url","category":"Network activity","to_ids":true,"value":"http://13.112.193.216:43469","comment":"https://x.com/drb_ra/status/1953894256629702773","timestamp":"1754679667","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2bb7c2de-36e0-5ba8-82ae-580736cb9a93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.112.193.216","comment":"https://x.com/drb_ra/status/1953894256629702773","timestamp":"1754679667","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5af4d448-36ee-5b64-bcb1-9b10def2f848","type":"url","category":"Network activity","to_ids":true,"value":"http://2.58.56.233:2005","comment":"https://x.com/drb_ra/status/1953894395495035060","timestamp":"1754679700","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5fbc5ca0-d973-56b0-85e6-6aac6a46fad6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.74.1.163","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"5d33a623-c070-5b8a-8022-169aaf0aaa55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.74.1.40","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"45801619-ccb9-5327-8ee1-167e7f5bca41","type":"url","category":"Network activity","to_ids":true,"value":"http://dsxgjjpg.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"4f776880-d1db-5e69-8866-8e9fc89b6fd0","type":"domain","category":"Network activity","to_ids":true,"value":"dsxgjjpg.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"26d62cd6-e7dd-5d0c-b813-dfc3c61743e7","type":"url","category":"Network activity","to_ids":true,"value":"http://ae86dr.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"d11ad03f-a2dc-5801-9a1b-4a97222b3856","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.74.1.150","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"dd5704f0-05e6-536b-bc71-3a007220696a","type":"url","category":"Network activity","to_ids":true,"value":"http://shop2025-oss.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"ea296089-52ec-5811-a1b2-f3b951479880","type":"domain","category":"Network activity","to_ids":true,"value":"shop2025-oss.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"9f18fd8b-0085-5bed-8675-1fdbc3b77861","type":"url","category":"Network activity","to_ids":true,"value":"http://112.74.1.150","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"d8422559-bc97-5f87-91cc-13eb59a00b33","type":"url","category":"Network activity","to_ids":true,"value":"http://112.74.1.163","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"f53b462d-d2d4-5d6e-a6bc-e3fae1f82eaa","type":"url","category":"Network activity","to_ids":true,"value":"http://112.74.1.40","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"d4227421-685e-516d-b68c-8f171eb40a17","type":"domain","category":"Network activity","to_ids":true,"value":"ae86dr.oss-cn-shenzhen.aliyuncs.com","comment":"https://x.com/skocherhan/status/1953898136759394310","timestamp":"1754680592","distribution":"5"},{"uuid":"f2c8191d-9e53-52e7-aecf-fed1373ce609","type":"url","category":"Network activity","to_ids":true,"value":"http://47.243.94.194:7000","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e90703ab-9133-5943-8e9e-11e6ffd11190","type":"url","category":"Network activity","to_ids":true,"value":"http://47.76.176.211:7000","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a2c7bbe3-6dd0-529d-8f47-7ac58f978d00","type":"url","category":"Network activity","to_ids":true,"value":"http://47.76.192.251:7000","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f2ec461f-7d3e-5e7f-8a56-1aff52ac5a21","type":"url","category":"Network activity","to_ids":true,"value":"http://8.217.146.60:7000","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"69163215-a9ff-5a34-9be7-4986075c4034","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.243.94.194","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"60d4b8b3-6960-533b-b326-3f2924a9e5d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.176.211","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4c06c027-e510-537e-b259-a805c7754fb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.76.192.251","comment":"https://x.com/skocherhan/status/1953901108986097944","timestamp":"1754681300","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"98ea027a-7d32-52fe-8389-937ee8e72d5c","type":"url","category":"Network activity","to_ids":true,"value":"http://shadow.steelpanman.com","comment":"https://x.com/skocherhan/status/1953905907219259767","timestamp":"1754682444","distribution":"5"},{"uuid":"7cb2aeb9-af46-5609-9f03-6f00780fdb6e","type":"domain","category":"Network activity","to_ids":true,"value":"shadow.steelpanman.com","comment":"https://x.com/skocherhan/status/1953905907219259767","timestamp":"1754682444","distribution":"5"},{"uuid":"96082001-204e-5694-abca-d3e8c292ae80","type":"url","category":"Network activity","to_ids":true,"value":"http://5.101.81.65","comment":"https://x.com/skocherhan/status/1953905907219259767","timestamp":"1754682444","distribution":"5"},{"uuid":"19d88cc3-b58e-51cc-930a-4ba979a159e0","type":"domain","category":"Network activity","to_ids":true,"value":"arch.wfc-steel.com","comment":"https://x.com/skocherhan/status/1953905907219259767","timestamp":"1754682444","distribution":"5"},{"uuid":"d714d30a-3724-5f7c-89c5-3139ed05abd1","type":"url","category":"Network activity","to_ids":true,"value":"http://arch.wfc-steel.com","comment":"https://x.com/skocherhan/status/1953905907219259767","timestamp":"1754682444","distribution":"5"},{"uuid":"188d9279-fa9c-5128-89af-1f7ffa02b9d0","type":"domain","category":"Network activity","to_ids":true,"value":"mail-mfagov.weebly.com","comment":"https://x.com/urldna_bot/status/1953909115693957184","timestamp":"1754683209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7a1d50c0-3cde-55df-a733-cedc2cc69912","type":"url","category":"Network activity","to_ids":true,"value":"https://mail-mfagov.weebly.com","comment":"https://x.com/urldna_bot/status/1953909115693957184","timestamp":"1754683209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"865212f8-3932-5d5f-a567-3a0188c051fd","type":"url","category":"Network activity","to_ids":true,"value":"http://wealthybillionaireman007.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"e964b16c-58a7-5ef6-a9da-c60d8edc0b7b","type":"url","category":"Network activity","to_ids":true,"value":"http://dart23.ddns.net","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"84d5e7c6-8b95-5aa7-9797-bfd927346b1c","type":"domain","category":"Network activity","to_ids":true,"value":"dart23.ddns.net","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"7dc70811-4281-59c6-b4db-c2ce8265be51","type":"url","category":"Network activity","to_ids":true,"value":"http://sphayer66jugaru2.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"af6da245-1250-56a0-8423-3b63eeb8f7a1","type":"domain","category":"Network activity","to_ids":true,"value":"sphayer66jugaru2.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"ce37e100-ea2c-59f5-a337-4fa9b6cf2ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://sphayer66jugaru1.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"836ee6d6-d090-5429-8fa2-5d90f0a88f6b","type":"domain","category":"Network activity","to_ids":true,"value":"sphayer66jugaru1.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"6187a0b1-be99-5270-8147-a2b87b004dd1","type":"domain","category":"Network activity","to_ids":true,"value":"wealthybillionaireman007.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"af8eda12-857a-5a8e-bce0-0f2f8e21cd6f","type":"domain","category":"Network activity","to_ids":true,"value":"janbours92harbubreakthroughs.loseyourip.com","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"cf8491c9-4ba4-511a-bb3d-39220ba954f6","type":"domain","category":"Network activity","to_ids":true,"value":"wealthismine.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"c64a0e35-2835-5bfd-b11a-5edf3c05cdbe","type":"url","category":"Network activity","to_ids":true,"value":"http://starefer8jabour3.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"14f1b3ab-838e-5a6b-a3cf-c67201e8c71e","type":"domain","category":"Network activity","to_ids":true,"value":"starefer8jabour3.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"8a9c7aa2-b600-5234-85e9-f2e4b146e36b","type":"url","category":"Network activity","to_ids":true,"value":"http://janbours92harbubreakthroughs.loseyourip.com","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"2363464e-b5bd-5498-b69e-71ff00029e92","type":"url","category":"Network activity","to_ids":true,"value":"http://gftrefer8jabour1.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"657532e2-a398-5b60-8043-054975b31717","type":"domain","category":"Network activity","to_ids":true,"value":"gftrefer8jabour1.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"fe86d57d-d27c-5b32-96a7-32d8f36aea33","type":"url","category":"Network activity","to_ids":true,"value":"http://wealthismine.duckdns.org","comment":"https://x.com/skocherhan/status/1953909703752208873","timestamp":"1754683349","distribution":"5"},{"uuid":"2ab554fd-b119-58bf-932b-5751487b3f73","type":"md5","category":"Payload delivery","to_ids":true,"value":"2aea0f20f5160383e276380a3eaa7ab7","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"18a24460-25a5-58b9-8ef4-3100940dd20c","type":"url","category":"Network activity","to_ids":true,"value":"http://ns1.docs-efile-eprotectd.top","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"7481178e-abbe-565e-bf15-d44044bcd9fb","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.docs-efile-eprotectd.top","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"d241f54e-87b2-5179-979b-7d90dea13c78","type":"url","category":"Network activity","to_ids":true,"value":"http://newdayplss.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"0c1896ad-f7b9-5d39-ae6a-208e54dcf6d3","type":"domain","category":"Network activity","to_ids":true,"value":"newdayplss.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"59946f8c-2ef4-5e91-9cb2-51454cfbd944","type":"url","category":"Network activity","to_ids":true,"value":"http://wedemkioa.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"941375b5-ad20-5b34-824d-8842d3519d2e","type":"domain","category":"Network activity","to_ids":true,"value":"wedemkioa.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"3acdf4b3-fa53-5dc1-9072-f3210e6a279c","type":"domain","category":"Network activity","to_ids":true,"value":"osetigolumdede.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"e7188cfc-0651-5a66-b8c9-2eae3786d173","type":"url","category":"Network activity","to_ids":true,"value":"http://osetigolumdede.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"28db5fdb-5f61-5376-a048-959b28841d63","type":"domain","category":"Network activity","to_ids":true,"value":"uwammunachimso.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"1fb6b12d-83c2-5a15-8977-63f9874bdda9","type":"url","category":"Network activity","to_ids":true,"value":"http://bediokoloaa.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"edc8743c-7b99-5faf-ae44-bb4da5cda1cf","type":"domain","category":"Network activity","to_ids":true,"value":"bediokoloaa.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"984a7c6e-994b-5fa5-849e-4f9faa6754b9","type":"url","category":"Network activity","to_ids":true,"value":"http://vietololm.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"bbb300cc-245b-59b1-ac8e-ffc870eb21ad","type":"domain","category":"Network activity","to_ids":true,"value":"vietololm.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"21fb076c-edba-5311-b8ac-f62d4864b328","type":"url","category":"Network activity","to_ids":true,"value":"http://windeckoloko.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"c425a1a8-65ab-5add-94fe-bafa41571996","type":"domain","category":"Network activity","to_ids":true,"value":"windeckoloko.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"abca73e0-a174-5f34-b0a2-fbcc254af0a9","type":"url","category":"Network activity","to_ids":true,"value":"http://uwammunachimso.duckdns.org","comment":"https://x.com/skocherhan/status/1953912132673974680","timestamp":"1754683929","distribution":"5"},{"uuid":"d664d845-ea69-55d1-9daa-1721b593dcde","type":"ip-dst","category":"Network activity","to_ids":true,"value":"70.31.125.73","comment":"https://x.com/threatquery/status/1953924193688428795","timestamp":"1754686804","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"2a0bc971-5314-5af5-9e2f-df560d0435d1","type":"url","category":"Network activity","to_ids":true,"value":"http://78.141.230.133","comment":"https://x.com/threatquery/status/1953924191977095227","timestamp":"1754686804","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"},{"name":"malware"}]},{"uuid":"31819982-a4c1-5109-8c04-11671ba2e3f9","type":"url","category":"Network activity","to_ids":true,"value":"http://70.31.125.73","comment":"https://x.com/threatquery/status/1953924193688428795","timestamp":"1754686804","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"0a784293-2df7-5796-9254-318e8b9d49ed","type":"url","category":"Network activity","to_ids":true,"value":"http://62.1.22.212","comment":"https://x.com/threatquery/status/1953924196037214328","timestamp":"1754686805","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"b1c02a8f-51ed-59a6-a46e-be56b18af7f9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"03c730d400e9726040987c19acbb7b91aeacf4924332dbadd3b6534558709d62","comment":"https://x.com/petikvx/status/1953924784930058387","timestamp":"1754686945","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"4d2bab86-8d89-58f2-8b4b-5c5539c6bf6a","type":"url","category":"Network activity","to_ids":true,"value":"http://156.245.198.160:80","comment":"https://x.com/drb_ra/status/1953931047915397220","timestamp":"1754688438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"342acb41-f6a2-538a-8f8c-2430a87eb5e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.245.198.160","comment":"https://x.com/drb_ra/status/1953931047915397220","timestamp":"1754688438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a5ed5cfa-130c-536f-9ca5-bb0f4ecbf8ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.165.16.89","comment":"https://x.com/drb_ra/status/1953931694458667410","timestamp":"1754688592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc6d0fca-16e1-55ee-a920-a7fdf5ab375c","type":"url","category":"Network activity","to_ids":true,"value":"https://194.165.16.89/v1/heartbeat","comment":"https://x.com/drb_ra/status/1953931694458667410","timestamp":"1754688592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a66acec1-d581-5b2a-b6b5-70ff325e8196","type":"url","category":"Network activity","to_ids":true,"value":"http://194.165.16.89:80","comment":"https://x.com/drb_ra/status/1953931694458667410","timestamp":"1754688592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"569e25f4-af30-5f80-8bab-bcf4bcddb554","type":"domain","category":"Network activity","to_ids":true,"value":"lq.bybitglob.com","comment":"https://x.com/urldna_bot/status/1953939315450425503","timestamp":"1754690409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"30a7f754-b100-5fc5-abc5-5a2dd3414898","type":"url","category":"Network activity","to_ids":true,"value":"https://lq.bybitglob.com","comment":"https://x.com/urldna_bot/status/1953939315450425503","timestamp":"1754690409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0e91e579-c835-5e1e-afa7-c563371fac31","type":"domain","category":"Network activity","to_ids":true,"value":"nsfcoatings.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"4fc76acc-8afb-57e0-acc4-420070b25428","type":"url","category":"Network activity","to_ids":true,"value":"http://nsfcoatings.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"22627dd1-c97b-589c-be37-52027d91d0e5","type":"domain","category":"Network activity","to_ids":true,"value":"hyteras.org","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"724f882b-1810-5ac2-afd6-411b6091f958","type":"url","category":"Network activity","to_ids":true,"value":"http://hyteras.org","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"e3a11c0a-9521-502d-8c13-730d98b8b98e","type":"domain","category":"Network activity","to_ids":true,"value":"webdevs.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"6b8e0dda-5afd-596e-a202-2dc98bea5f8d","type":"url","category":"Network activity","to_ids":true,"value":"http://webdevs.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"08a501a0-e0c8-5745-9602-08044a57cc1d","type":"domain","category":"Network activity","to_ids":true,"value":"mdnsserver.com","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"4508a481-c50d-594c-8c42-07302086e36c","type":"url","category":"Network activity","to_ids":true,"value":"http://mdnsserver.com","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"5398722b-5082-5121-8e78-e48fb673cede","type":"domain","category":"Network activity","to_ids":true,"value":"cestfinidns.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"bc7299bb-17a6-5d94-8c35-5e3ac0bd2c04","type":"url","category":"Network activity","to_ids":true,"value":"http://cestfinidns.vip","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"d54958cd-929a-5b60-96cc-cc177fb24d42","type":"domain","category":"Network activity","to_ids":true,"value":"consways.com","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"2d746da9-234d-55bf-88dd-7b2841c76c7c","type":"url","category":"Network activity","to_ids":true,"value":"http://consways.com","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"aea9d149-7fbe-5576-9bc9-6b1c55e0307c","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.166","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"14f028dd-4c6c-542b-947d-957ca22dda28","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.80","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"7a00a913-42cb-54e3-a623-a5526d76eefe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.166","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"a800ec2d-f706-5856-9e7e-c93e4b87a692","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.80","comment":"https://x.com/skocherhan/status/1953943651966738648","timestamp":"1754691443","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"89557695-2b58-5ac9-b864-73b3f02d4118","type":"domain","category":"Network activity","to_ids":true,"value":"smkcaroaatrhajp.pics","comment":"https://x.com/masaomi346/status/1953954681337917905","timestamp":"1754694073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cff010e6-7f16-5ec3-8d87-5a7c5c11639d","type":"url","category":"Network activity","to_ids":true,"value":"https://smkcaroaatrhajp.pics/KRVhOa/","comment":"https://x.com/masaomi346/status/1953954681337917905","timestamp":"1754694073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"47c553a6-ea23-5227-8b56-8dbe93dc3f57","type":"url","category":"Network activity","to_ids":true,"value":"http://198.46.159.243:443","comment":"https://x.com/drb_ra/status/1953955159601819862","timestamp":"1754694187","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"695c15dd-4403-54f2-a75c-b8ed2129ee87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.46.159.243","comment":"https://x.com/drb_ra/status/1953955159601819862","timestamp":"1754694187","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ad284833-b5d6-5f76-8e2d-f6ad62408aef","type":"url","category":"Network activity","to_ids":true,"value":"http://156.244.56.89:443","comment":"https://x.com/drb_ra/status/1953955299087593557","timestamp":"1754694220","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a07c26be-7a28-5267-bb5c-329b9d1682b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.244.56.89","comment":"https://x.com/drb_ra/status/1953955299087593557","timestamp":"1754694220","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e1422bea-8d58-5b62-ad03-3362321bcd96","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.22.53:443","comment":"https://x.com/drb_ra/status/1953955437998436407","timestamp":"1754694253","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7663bc3d-3d6c-5c51-9dcf-17be2dfcffc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.22.53","comment":"https://x.com/drb_ra/status/1953955437998436407","timestamp":"1754694253","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3f128d1-a021-574f-8e5f-42ae7c21d68f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.150.25.150","comment":"https://x.com/drb_ra/status/1953955437998436407","timestamp":"1754694253","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"591bcd76-0a22-5671-b435-ea81ba15438a","type":"domain","category":"Network activity","to_ids":true,"value":"4535.weebly.com","comment":"https://x.com/urldna_bot/status/1953969508445483287","timestamp":"1754697608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b8343c2b-eaaa-587a-872b-93bdcb2bd8da","type":"url","category":"Network activity","to_ids":true,"value":"https://4535.weebly.com","comment":"https://x.com/urldna_bot/status/1953969508445483287","timestamp":"1754697608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"18692634-9acd-5e39-a646-8874a45416b3","type":"domain","category":"Network activity","to_ids":true,"value":"liansdj9.shop","comment":"https://x.com/romonlyht/status/1953975616136773691","timestamp":"1754699064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e7adf56-7448-574e-bfad-d4976b6b1e12","type":"url","category":"Network activity","to_ids":true,"value":"https://liansdj9.shop/pany","comment":"https://x.com/romonlyht/status/1953975616136773691","timestamp":"1754699064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39657c87-e814-5327-9cc8-3dd601795dc9","type":"url","category":"Network activity","to_ids":true,"value":"https://liansdj9.shop/pany/","comment":"https://x.com/romonlyht/status/1953975616136773691","timestamp":"1754699064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e408436-3537-52aa-aec8-56c9d5d7941d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.129.74","comment":"https://x.com/romonlyht/status/1953975616136773691","timestamp":"1754699064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9ee6576-c75d-5fdd-b213-fe3b0adac35e","type":"domain","category":"Network activity","to_ids":true,"value":"orico.index.co.jp.poakjma7.shop","comment":"https://x.com/romonlyht/status/1953975965451006119","timestamp":"1754699147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffed3ecd-d731-572b-8546-4b9fb1c34d63","type":"url","category":"Network activity","to_ids":true,"value":"https://orico.index.co.jp.poakjma7.shop/pany/","comment":"https://x.com/romonlyht/status/1953975965451006119","timestamp":"1754699147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53450c08-593b-5bfc-860d-0b56c09ca5f1","type":"url","category":"Network activity","to_ids":true,"value":"https://orico.index.co.jp.poakjma7.shop/pany","comment":"https://x.com/romonlyht/status/1953975961931923888","timestamp":"1754699147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1f2fdeb-9b60-5b4e-beef-5f2fa6097919","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.129.243","comment":"https://x.com/romonlyht/status/1953975961931923888","timestamp":"1754699147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db88c85c-aeb2-5d29-943a-c9f5feb74626","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.32.146.52","comment":"https://x.com/romonlyht/status/1953975961931923888","timestamp":"1754699147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11a1ac9b-4ef4-5a7e-9b3e-d388d9b8effe","type":"url","category":"Network activity","to_ids":true,"value":"https://smlcbrocctrhcjp.pics/57g0UK","comment":"https://x.com/romonlyht/status/1953978757020295322","timestamp":"1754699813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ddc28e4-861b-51bf-86c2-b521d425ea4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.189.114.130","comment":"https://x.com/romonlyht/status/1953978757020295322","timestamp":"1754699813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cff010e6-7f16-5ec3-8d87-5a7c5c11639d","type":"url","category":"Network activity","to_ids":true,"value":"https://smkcaroaatrhajp.pics/KRVhOa/","comment":"https://x.com/romonlyht/status/1953978761411801297","timestamp":"1754699814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f46cf3c4-f91b-5f97-a9c4-f1928a953b4d","type":"url","category":"Network activity","to_ids":true,"value":"https://smkcaroaatrhajp.pics/KRVhOa","comment":"https://x.com/romonlyht/status/1953978761411801297","timestamp":"1754699814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef6ec027-d2d3-54fb-ba34-aa331d6aacf2","type":"url","category":"Network activity","to_ids":true,"value":"https://smlcbrocctrhcjp.pics/57g0UK/","comment":"https://x.com/romonlyht/status/1953978761411801297","timestamp":"1754699814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bbefa61e-346a-5d00-b626-269f2a66e13d","type":"domain","category":"Network activity","to_ids":true,"value":"smlcbrocctrhcjp.pics","comment":"https://x.com/romonlyht/status/1953978761411801297","timestamp":"1754699814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89557695-2b58-5ac9-b864-73b3f02d4118","type":"domain","category":"Network activity","to_ids":true,"value":"smkcaroaatrhajp.pics","comment":"https://x.com/romonlyht/status/1953978761411801297","timestamp":"1754699814","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39bedc3b-3073-57e6-b9a9-d7661816eab5","type":"domain","category":"Network activity","to_ids":true,"value":"www3hotmail-japanhoax.xcwwg.shop","comment":"https://x.com/romonlyht/status/1953982835083423805","timestamp":"1754700785","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"339e0571-7dc6-527c-8fc3-958c10ee31df","type":"url","category":"Network activity","to_ids":true,"value":"https://www3hotmail-japanhoax.xcwwg.shop/%F0%9D%99%B0%F0%9D%9A","comment":"https://x.com/romonlyht/status/1953982835083423805","timestamp":"1754700785","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e01cd63-45e9-565b-b132-ad0e989dd60f","type":"url","category":"Network activity","to_ids":true,"value":"https://www3hotmail-japanhoax.xcwwg.shop/%F0%9D%99%B0%F0%9D%9A%9E%F0%9D%99%BF%F0%9D%9A%98%F0%9D%9A%92%F0","comment":"https://x.com/romonlyht/status/1953982832373817389","timestamp":"1754700785","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6dd6f30f-1d94-5d7f-af91-9e7299bde5d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.129.43","comment":"https://x.com/romonlyht/status/1953982832373817389","timestamp":"1754700785","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0447938c-2c3c-5c87-8f9a-c2f1d49be990","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.129.178","comment":"https://x.com/romonlyht/status/1953983433283449330","timestamp":"1754700928","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09c73505-5fad-50bf-9b08-95b006862908","type":"url","category":"Network activity","to_ids":true,"value":"https://www3hotmail-japanhoax.mm9vn.shop/%F0%9D%99%B0%F0%9D%9A%9E%F0%9D%99%BF%F0%9D%9A%98","comment":"https://x.com/romonlyht/status/1953983433283449330","timestamp":"1754700928","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02d0b701-d185-534a-944a-e305f2c5dd51","type":"url","category":"Network activity","to_ids":true,"value":"https://www3hotmail-japanhoax.mm9vn.shop/%F0%9D","comment":"https://x.com/romonlyht/status/1953983435888111685","timestamp":"1754700929","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85820fb8-930e-5015-bfb9-0313ce84bffb","type":"domain","category":"Network activity","to_ids":true,"value":"www3hotmail-japanhoax.mm9vn.shop","comment":"https://x.com/romonlyht/status/1953983435888111685","timestamp":"1754700929","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5778d8e7-e66d-594d-b8d7-5afee713d122","type":"domain","category":"Network activity","to_ids":true,"value":"nillsantos.com.br","comment":"https://x.com/skocherhan/status/1953984534543818857","timestamp":"1754701190","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b79a0a02-7227-5e7d-b1f3-e9d8b0884596","type":"url","category":"Network activity","to_ids":true,"value":"http://nillsantos.com.br/ffff/wrfytr/qewttddsd/web/authen.php","comment":"https://x.com/skocherhan/status/1953984534543818857","timestamp":"1754701190","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b2fc0f82-dbea-5e97-80df-3cd8d76acfcb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.74.244.178","comment":"https://x.com/romonlyht/status/1953987825118167195","timestamp":"1754701975","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"288bcf92-207f-5a14-8ce4-9a2a1591c93f","type":"domain","category":"Network activity","to_ids":true,"value":"tianjiyun.net","comment":"https://x.com/romonlyht/status/1953987827408285844","timestamp":"1754701976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3cb263c-223b-5734-bed5-4b02d7ebabcf","type":"url","category":"Network activity","to_ids":true,"value":"https://tianjiyun.net/joiqwaz","comment":"https://x.com/romonlyht/status/1953987827408285844","timestamp":"1754701976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44370606-30da-55da-8e7c-e7bdc6ccaba3","type":"domain","category":"Network activity","to_ids":true,"value":"youxingjia.com","comment":"https://x.com/romonlyht/status/1953987827408285844","timestamp":"1754701976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0a082c3-960d-5059-a0a7-ca91bc9c8710","type":"url","category":"Network activity","to_ids":true,"value":"http://youxingjia.com","comment":"https://x.com/romonlyht/status/1953987827408285844","timestamp":"1754701976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f53b942-0f4b-5275-93ca-60f1f9744aff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.165.103.218","comment":"https://x.com/romonlyht/status/1953992355469832230","timestamp":"1754703055","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3449d78-e83f-5375-bd37-d02fee0ce26f","type":"url","category":"Network activity","to_ids":true,"value":"https://s1hy79.top/login=taOdOW4eyM/aipf/tra/flolw/aputh","comment":"https://x.com/romonlyht/status/1953992355469832230","timestamp":"1754703055","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11808728-8e64-5d24-accd-00bda2ee1aee","type":"domain","category":"Network activity","to_ids":true,"value":"s1hy79.top","comment":"https://x.com/romonlyht/status/1953992355469832230","timestamp":"1754703055","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43e25f98-7513-5506-8620-fa7dd43cd41d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.57.60.218","comment":"https://x.com/romonlyht/status/1953992524957458792","timestamp":"1754703096","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9438f68c-913a-5eba-88cb-f3bf5fc72163","type":"domain","category":"Network activity","to_ids":true,"value":"qxk2ut.top","comment":"https://x.com/romonlyht/status/1953992524957458792","timestamp":"1754703096","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c167dad-b4cb-51ef-a7e2-d30daa6b9a32","type":"url","category":"Network activity","to_ids":true,"value":"https://qxk2ut.top/login=taOdOW4eyM/aipf/tra/flolw/aputh","comment":"https://x.com/romonlyht/status/1953992524957458792","timestamp":"1754703096","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc2fa22f-7225-5763-ad4c-ab8f086439ff","type":"domain","category":"Network activity","to_ids":true,"value":"8kkz4dx9.top","comment":"https://x.com/romonlyht/status/1953992668339744996","timestamp":"1754703130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"785af829-0c87-5803-a0ad-ee1d6d6ecca6","type":"url","category":"Network activity","to_ids":true,"value":"https://8kkz4dx9.top/login=taOdOW4eyM/aipf/tra/flolw/aputh","comment":"https://x.com/romonlyht/status/1953992668339744996","timestamp":"1754703130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19a193ac-e9a4-5df7-9506-e222c69a6c28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"177.74.73.80","comment":"https://x.com/romonlyht/status/1953992668339744996","timestamp":"1754703130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f61956fe-e531-52cb-9cc4-fade9338d502","type":"ip-dst","category":"Network activity","to_ids":true,"value":"187.85.95.18","comment":"https://x.com/romonlyht/status/1953992814624485707","timestamp":"1754703165","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbf5aed6-def0-543d-8a6e-ca4e648d93ad","type":"url","category":"Network activity","to_ids":true,"value":"https://nk6ol1.top/login=taOdOW4eyM/aipf/tra/flolw/aputh","comment":"https://x.com/romonlyht/status/1953992814624485707","timestamp":"1754703165","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c0ef5416-0025-5db2-abf3-745ee09ac3b4","type":"domain","category":"Network activity","to_ids":true,"value":"nk6ol1.top","comment":"https://x.com/romonlyht/status/1953992814624485707","timestamp":"1754703165","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e585b0d6-1898-5515-b119-77cefd7f015a","type":"domain","category":"Network activity","to_ids":true,"value":"guardadvancedsafeshield.autos","comment":"https://x.com/skocherhan/status/1953995633796558923","timestamp":"1754703837","distribution":"5"},{"uuid":"c191f4cf-503c-518f-b398-6e2a90c7ca07","type":"url","category":"Network activity","to_ids":true,"value":"http://www.guardadvancedsafeshield.autos/1j267ogpe/l?btd=dHJrLmluZm9ybWF0aW9uLWRpc2NvdmVyLXRob3VnaC1maW5kLnJ1bg&exptoken=MTc1NDcwMzY3MDA0MA%3D%3D&lang=en&lid=de4fefff-f0da-48e6-8da7-860ede31b596<d=dHJrLnBsYW5ldC1lYXJsaWVyLXNlYXQtb2xkLnJ1bg&pd2q=YTE9ZGU0ZmVmZmYtZjBkYS00OGU2LThkYTct","comment":"https://x.com/skocherhan/status/1953995633796558923","timestamp":"1754703837","distribution":"5"},{"uuid":"66446096-403e-595a-ac29-760e07d89d6d","type":"url","category":"Network activity","to_ids":true,"value":"http://nemdag.com","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5b7cfe31-e9c5-5abe-9a39-60f9b69cc73c","type":"domain","category":"Network activity","to_ids":true,"value":"smart-reliable-advanced-guard.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"378b0dd2-5024-56ab-8740-969157b6c747","type":"domain","category":"Network activity","to_ids":true,"value":"nemdag.com","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c5e74ac-ff42-50e6-8556-446be2c4be62","type":"domain","category":"Network activity","to_ids":true,"value":"cyber-accurate-defense-proactive.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b2b4669f-1e74-5998-911d-305d66c1726e","type":"url","category":"Network activity","to_ids":true,"value":"http://cyber-accurate-defense-proactive.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20530dbc-7753-50af-a24d-6516bed9b019","type":"url","category":"Network activity","to_ids":true,"value":"http://lightweightcyberguardsmart.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"21b53e0b-3aa9-5e24-ab52-8aebf4c4b884","type":"domain","category":"Network activity","to_ids":true,"value":"lightweightcyberguardsmart.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"07d256bf-c1b9-57b7-bc71-3646745334e7","type":"domain","category":"Network activity","to_ids":true,"value":"privacynetworksafeproven.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98602835-1d16-568c-a237-c8be0f87b608","type":"url","category":"Network activity","to_ids":true,"value":"http://privacynetworksafeproven.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9c2a5ce-0121-537b-b084-208219816b83","type":"domain","category":"Network activity","to_ids":true,"value":"onboardtra4fficusavg.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa5da54e-81b9-5667-9794-9b04cdbf91bd","type":"url","category":"Network activity","to_ids":true,"value":"http://onboardtra4fficusavg.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2678ba55-f688-5a06-910a-b2eadeb552c2","type":"url","category":"Network activity","to_ids":true,"value":"http://rot-f2f-digital-analytics.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a081ba5-591f-53fc-ac21-7ddb1d53f8cf","type":"domain","category":"Network activity","to_ids":true,"value":"rot-f2f-digital-analytics.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"755377ad-ce47-52a2-a413-7b4e222dbe61","type":"url","category":"Network activity","to_ids":true,"value":"http://smart-reliable-advanced-guard.autos","comment":"https://x.com/skocherhan/status/1953996979433865412","timestamp":"1754704158","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"393a0622-b695-54ac-93c5-f73c698c6508","type":"url","category":"Network activity","to_ids":true,"value":"https://av-0-cat-secu33.jecool.net/01.02.html","comment":"https://x.com/urldna_bot/status/1953999699427406224","timestamp":"1754704806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f4731973-63e9-5d24-b149-ebc5c63db7c2","type":"domain","category":"Network activity","to_ids":true,"value":"av-0-cat-secu33.jecool.net","comment":"https://x.com/urldna_bot/status/1953999699427406224","timestamp":"1754704806","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dfb3b9e3-bfab-5161-a303-4f91292eb7f8","type":"url","category":"Network activity","to_ids":true,"value":"https://hm8723j-com.translate.goog/verify?_x_tr_sl=auto&_x_tr_tl=ja&_x_tr_hl=ja&_x_tr_pto=wapp","comment":"https://x.com/romonlyht/status/1953999879342346728","timestamp":"1754704849","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3a6447f-a7ad-5612-bb3f-6d56ebb95341","type":"domain","category":"Network activity","to_ids":true,"value":"hm8723j-com.translate.goog","comment":"https://x.com/romonlyht/status/1953999879342346728","timestamp":"1754704849","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15962aee-ae14-5fcb-9b54-f9f597152bcd","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-qj7kk9.kzl1qn.us/ap/uuus?page=signin&from=%2Facx","comment":"https://x.com/romonlyht/status/1953999884954349679","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1548989b-ef97-5fb2-b528-4b37702deeab","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-qj7kk9.kzl1qn.us/acx","comment":"https://x.com/romonlyht/status/1953999884954349679","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7464ad6d-1c36-58f1-a0aa-a2ebc8e627c4","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-qj7kk9.kzl1qn.us/process_form.php","comment":"https://x.com/romonlyht/status/1953999882093834443","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d40def75-77db-595b-95ab-8160390ec7a5","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-qj7kk9.kzl1qn.us/qwe?from=%2Fprocess_form.php","comment":"https://x.com/romonlyht/status/1953999882093834443","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f14532e-f53f-5fd6-8509-79c2072e9807","type":"domain","category":"Network activity","to_ids":true,"value":"amazon-qj7kk9.kzl1qn.us","comment":"https://x.com/romonlyht/status/1953999884954349679","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ab1c6f5-5d8c-5329-b512-98809c268903","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-qj7kk9.kzl1qn.us/tuoouffdd?06GbSEMKf2IiOBuo4qYEnqPXnZ","comment":"https://x.com/romonlyht/status/1953999882093834443","timestamp":"1754704850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"42929a0a-6ac4-59e3-8c4e-3c9c8f7abb38","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-rzkd2.sf658j.us/process_form.php","comment":"https://x.com/romonlyht/status/1954000522366877830","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3121f2e4-ced8-5eb4-8db8-f01bffd10b4b","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-rzkd2.sf658j.us/qwe?from=%2Fprocess_form.php","comment":"https://x.com/romonlyht/status/1954000522366877830","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af6cd551-fdf5-536b-be59-9315b7d081e9","type":"domain","category":"Network activity","to_ids":true,"value":"sx8o9qb-com.translate.goog","comment":"https://x.com/romonlyht/status/1954000519183413384","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efa756e5-a6ff-5f0b-b8a8-aa0da44860ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.24.177.75","comment":"https://x.com/romonlyht/status/1954000519183413384","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"866e1007-a906-575d-bd94-e52eb2d6b866","type":"url","category":"Network activity","to_ids":true,"value":"https://sx8o9qb-com.translate.goog/verify?_x_tr_sl=auto&_x_tr_tl=ja&_x_tr_hl=ja&_x_tr_pto=wapp","comment":"https://x.com/romonlyht/status/1954000519183413384","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73fa2ad6-3291-5b23-9c27-d644ada1b7b2","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-rzkd2.sf658j.us/tuoouffdd?meZtkl3rpxRB4kSyvWb","comment":"https://x.com/romonlyht/status/1954000522366877830","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f49ecf5-5fcf-5dfd-9e34-d4a3fc5a496f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.163.219.84","comment":"https://x.com/romonlyht/status/1954000522366877830","timestamp":"1754705002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44324868-d04d-55a0-94d6-6d30b9b5ee4b","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-rzkd2.sf658j.us/acx","comment":"https://x.com/romonlyht/status/1954000525915304129","timestamp":"1754705003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3968608-cb9f-5668-9a11-53e430996f2b","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-rzkd2.sf658j.us/ap/uuus?page=signin&from=%2Facx","comment":"https://x.com/romonlyht/status/1954000525915304129","timestamp":"1754705003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11b23ac6-0868-5083-a27b-9ca0ec0e2c17","type":"domain","category":"Network activity","to_ids":true,"value":"amazon-rzkd2.sf658j.us","comment":"https://x.com/romonlyht/status/1954000525915304129","timestamp":"1754705003","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f0d04f1-0296-5358-a9e3-46f4f2cd3c6c","type":"domain","category":"Network activity","to_ids":true,"value":"jump.syzimei.com","comment":"https://x.com/romonlyht/status/1954001035246354529","timestamp":"1754705125","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce99ebc9-0d84-501c-9854-27a73c6dd6e5","type":"url","category":"Network activity","to_ids":true,"value":"https://jump.syzimei.com/VWdePdeN?www.amazon.co.jp/amazon_update","comment":"https://x.com/romonlyht/status/1954001035246354529","timestamp":"1754705125","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3266e25a-56cb-5287-bfb7-e6c576aed037","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.51.16.47","comment":"https://x.com/romonlyht/status/1954001035246354529","timestamp":"1754705125","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5778aadc-eb74-5884-9847-0ee170ab1341","type":"domain","category":"Network activity","to_ids":true,"value":"amozon.co.jp.idstep.top","comment":"https://x.com/romonlyht/status/1954001039520338123","timestamp":"1754705126","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc3501a3-e155-55d3-9050-18b466381842","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.146.34","comment":"https://x.com/romonlyht/status/1954001039520338123","timestamp":"1754705126","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"61c5450b-ca4b-5b12-bcac-5a821fcb5853","type":"url","category":"Network activity","to_ids":true,"value":"https://amozon.co.jp.idstep.top/amzon_update/","comment":"https://x.com/romonlyht/status/1954001039520338123","timestamp":"1754705126","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56ceaa87-d2a8-506e-9a00-3d64b712ed4b","type":"url","category":"Network activity","to_ids":true,"value":"https://amozon.co.jp.idstep.top/amzon_update","comment":"https://x.com/romonlyht/status/1954001039520338123","timestamp":"1754705126","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f463d9e0-1a94-5bfc-9456-192000622760","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:4444","comment":"https://x.com/drb_ra/status/1954004700413800539","timestamp":"1754705998","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"edb7adeb-6040-5cb8-af37-0d50dae75ca7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.129","comment":"https://x.com/drb_ra/status/1954004700413800539","timestamp":"1754705998","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f29bd160-b969-5ae9-b8d9-7f6efe74611f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.brateix.info/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"815483ab-2904-5f1b-82e6-c4cbd4c0221d","type":"domain","category":"Network activity","to_ids":true,"value":"brateix.info","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"7a7a3756-b751-5d5a-9322-c95fe53241fb","type":"domain","category":"Network activity","to_ids":true,"value":"buddygay.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"72d42251-8e04-5c8c-a382-2faa6f140d63","type":"domain","category":"Network activity","to_ids":true,"value":"alodebana.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"84c3687f-8ea5-5ebc-9d6a-2551ca3e01cf","type":"domain","category":"Network activity","to_ids":true,"value":"car-surgeons.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8fe9a752-2cde-533e-aae3-6e138bc7536b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.alodebana.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"280fa92e-9931-5a79-8105-50ca10fcfe0b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.buddygay.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3aaf4bd5-69d8-5826-804a-44f204aefb30","type":"url","category":"Network activity","to_ids":true,"value":"http://www.car-surgeons.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"283162b5-b1ec-50ed-b4bb-586b2d9c9c7f","type":"domain","category":"Network activity","to_ids":true,"value":"foodvroom.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d696736a-3057-5705-8a10-e67b037946fc","type":"url","category":"Network activity","to_ids":true,"value":"http://www.chennaiprintshop.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"4943c6a4-5af6-5845-b899-37079123bf84","type":"domain","category":"Network activity","to_ids":true,"value":"computerservicetn.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d9f4d2ea-79fa-5e1a-ad86-bbb43f24f939","type":"url","category":"Network activity","to_ids":true,"value":"http://www.computerservicetn.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"82898305-ed84-576f-b575-2ae1437bd1e9","type":"domain","category":"Network activity","to_ids":true,"value":"earthmovingcompany.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3c813533-c1a6-53d3-89c2-b299fa44699c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.foodvroom.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"0ca7db46-d017-538d-b735-44ebe7d6b60a","type":"domain","category":"Network activity","to_ids":true,"value":"chennaiprintshop.com","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6af37171-6257-5142-a0eb-95b57852b02b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.earthmovingcompany.com/a0ce/","comment":"https://x.com/skocherhan/status/1954014628486250964","timestamp":"1754708365","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"0b9b43a3-cbc4-5b48-ba17-60ff245b787c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.92","comment":"https://x.com/romonlyht/status/1954019092027085116","timestamp":"1754709430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c0f33dc2-a9f8-55fc-8713-e26196021eb4","type":"url","category":"Network activity","to_ids":true,"value":"https://meraku-tenco.shop/index-e.html/","comment":"https://x.com/romonlyht/status/1954019092027085116","timestamp":"1754709430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"749bece1-99bc-51cf-8be7-7dd26b693348","type":"url","category":"Network activity","to_ids":true,"value":"https://meraku-tenco.shop/index-e.html","comment":"https://x.com/romonlyht/status/1954019092027085116","timestamp":"1754709430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e571ef35-927b-50e4-9924-7530e6fd1125","type":"domain","category":"Network activity","to_ids":true,"value":"meraku-tenco.shop","comment":"https://x.com/romonlyht/status/1954019092027085116","timestamp":"1754709430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57f82eab-0c78-5f6f-8044-7aad6a4e6ace","type":"url","category":"Network activity","to_ids":true,"value":"https://myraku-tenco.shop/index-e.html/","comment":"https://x.com/romonlyht/status/1954019357979554155","timestamp":"1754709493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a02ecb1-d9ca-54f8-a1d6-578bf7a2ca21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.216","comment":"https://x.com/romonlyht/status/1954019357979554155","timestamp":"1754709493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6076a18a-c906-59fc-81ef-fc9d2fd83168","type":"url","category":"Network activity","to_ids":true,"value":"https://myraku-tenco.shop/index-e.html","comment":"https://x.com/romonlyht/status/1954019357979554155","timestamp":"1754709493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cea0559d-ec75-5be5-81ea-5092050f2d23","type":"domain","category":"Network activity","to_ids":true,"value":"myraku-tenco.shop","comment":"https://x.com/romonlyht/status/1954019357979554155","timestamp":"1754709493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"347fed67-4081-53d4-85a1-948e5966c15e","type":"domain","category":"Network activity","to_ids":true,"value":"173901.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"8d2e393f-2fee-545d-b71d-47b246f41f30","type":"url","category":"Network activity","to_ids":true,"value":"http://www.0w3jy.com/rdc9/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"92cf17bc-d7bf-56ec-8547-cdbdbde4d5f2","type":"url","category":"Network activity","to_ids":true,"value":"http://www.2463.org/dhxt/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c610a21d-57b7-5e9e-99ba-2bd1e79672d3","type":"url","category":"Network activity","to_ids":true,"value":"http://www.2463.org/hcoz/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5f242474-fce5-5d05-987e-dab941b7f1a7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.173901.com/czni/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b953b6bc-041b-54d2-ac61-121b91400025","type":"domain","category":"Network activity","to_ids":true,"value":"2463.org","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d70f2039-6561-5142-aa2c-255daadef162","type":"domain","category":"Network activity","to_ids":true,"value":"0w3jy.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c304b4ea-9380-512b-98d9-1ce9078c335c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.0w3jy.com/dhxt/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"53b2b660-0639-55cf-83e5-b070a5d963cc","type":"url","category":"Network activity","to_ids":true,"value":"http://www.44yyds.com/czni/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"d1743591-b6aa-590e-84e5-c6a9dfe30967","type":"url","category":"Network activity","to_ids":true,"value":"http://www.2463.org/ndce/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"6985ced1-0c8e-5dc0-9b65-85596e718ea2","type":"url","category":"Network activity","to_ids":true,"value":"http://www.342010.com/ndce/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"b52fb097-9c96-5802-8de4-aa4533d01847","type":"domain","category":"Network activity","to_ids":true,"value":"4023458.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"c74a92cb-277c-5afb-87e4-0d3b4a5f8fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://www.4023458.com/ndce/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"47160d9d-ff36-5ea0-a35f-10b779da7f13","type":"domain","category":"Network activity","to_ids":true,"value":"44yyds.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"0f9b4663-0657-5070-9b50-634922345ee0","type":"url","category":"Network activity","to_ids":true,"value":"http://www.3169d.com/v08v/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"e29ad586-47ed-5a48-b03e-7b334740bc13","type":"domain","category":"Network activity","to_ids":true,"value":"44ibkzx.cfd","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"a434848d-674d-58cf-a99e-2a00de1da78a","type":"domain","category":"Network activity","to_ids":true,"value":"3169d.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"5a74426b-f401-563e-883b-472b7b299799","type":"url","category":"Network activity","to_ids":true,"value":"http://www.44ibkzx.cfd/o0i7/","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"3c88c24b-27c7-59c2-a446-f8e67cc0ecc2","type":"domain","category":"Network activity","to_ids":true,"value":"342010.com","comment":"https://x.com/skocherhan/status/1954028589428404616","timestamp":"1754711694","distribution":"5","Tag":[{"name":"Formbook"}]},{"uuid":"cca76ab7-5c3c-59bd-8d23-55ed3ae0afb8","type":"url","category":"Network activity","to_ids":true,"value":"https://promotion2025.z7.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1954029898814685326","timestamp":"1754712006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"546337d2-6947-55c0-a8bd-c9b6873989c1","type":"domain","category":"Network activity","to_ids":true,"value":"promotion2025.z7.web.core.windows.net","comment":"https://x.com/urldna_bot/status/1954029898814685326","timestamp":"1754712006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"59c3fad9-2825-5ad7-b49c-96999d68116d","type":"domain","category":"Network activity","to_ids":true,"value":"yahoo.co.jp%2Fconfig%2Ftdp%2Ftakeuchishingofan867%23tr0@yzqmmva.zhongcaijing.com","comment":"https://x.com/romonlyht/status/1954031418159640678","timestamp":"1754712368","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a924c898-e56b-5190-ae07-f693f01b7626","type":"url","category":"Network activity","to_ids":true,"value":"https://yahoo.co.jp%2Fconfig%2Ftdp%2Ftakeuchishingofan867%23tr0@yzqmmva.zhongcaijing.com","comment":"https://x.com/romonlyht/status/1954031418159640678","timestamp":"1754712368","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d8314b60-c8bb-504b-b380-1b729f11fedc","type":"domain","category":"Network activity","to_ids":true,"value":"yzqmmva.zhongcaijing.com","comment":"https://x.com/romonlyht/status/1954031418159640678","timestamp":"1754712368","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f5724e8-ae4e-5d55-aeb0-30c631da2989","type":"url","category":"Network activity","to_ids":true,"value":"http://yzqmmva.zhongcaijing.com","comment":"https://x.com/romonlyht/status/1954031418159640678","timestamp":"1754712368","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8633ec9a-65e4-524d-8649-6960f8d9e6b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.92.77.122","comment":"https://x.com/romonlyht/status/1954031418159640678","timestamp":"1754712368","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db31f686-3e09-5d6e-a943-f14c4890c608","type":"domain","category":"Network activity","to_ids":true,"value":"hnddzt.net","comment":"https://x.com/romonlyht/status/1954031423268254114","timestamp":"1754712370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b695a2fb-3d32-5c15-9bb9-c8e6379fcdb0","type":"domain","category":"Network activity","to_ids":true,"value":"saasadmin.net","comment":"https://x.com/romonlyht/status/1954031423268254114","timestamp":"1754712370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84654f62-4266-5dcc-bd10-5584f889c926","type":"url","category":"Network activity","to_ids":true,"value":"https://saasadmin.net/chaoshi/","comment":"https://x.com/romonlyht/status/1954031423268254114","timestamp":"1754712370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cf9d420-024c-5b22-99ca-b5c7604369c1","type":"url","category":"Network activity","to_ids":true,"value":"https://hnddzt.net/chaoshi","comment":"https://x.com/romonlyht/status/1954031423268254114","timestamp":"1754712370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1a4103d-2c5b-5f61-8eb1-8c30b9165d04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.183.100","comment":"https://x.com/romonlyht/status/1954031423268254114","timestamp":"1754712370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bab6f80-a41f-56cb-8f48-35b750313923","type":"domain","category":"Network activity","to_ids":true,"value":"hotrocce.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"707a05bb-7ec3-5f2c-954b-722a86a6283c","type":"domain","category":"Network activity","to_ids":true,"value":"apothfya.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"cd8d7389-e3cf-5e42-a101-de3c6d40f644","type":"url","category":"Network activity","to_ids":true,"value":"http://pursyme.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9a8103a1-16c9-5f89-9673-5c925836417f","type":"domain","category":"Network activity","to_ids":true,"value":"pursyme.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"88122d25-5bbb-516d-a120-0892de874354","type":"url","category":"Network activity","to_ids":true,"value":"http://annalqut.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7d71cda3-8884-5789-8c05-aa12f599c322","type":"domain","category":"Network activity","to_ids":true,"value":"fruiunp.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c3f2eea2-11f1-5caf-a780-e236aa5965af","type":"domain","category":"Network activity","to_ids":true,"value":"brunsmmv.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"50052018-df2c-5588-8974-7b35c38e0688","type":"domain","category":"Network activity","to_ids":true,"value":"excalcf.top","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4813c7da-8889-5e14-8723-cd03443f8edb","type":"url","category":"Network activity","to_ids":true,"value":"http://citriadn.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7f90b18b-ffbe-5b7f-9fe3-970026ae46de","type":"domain","category":"Network activity","to_ids":true,"value":"annalqut.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3e8b3d60-b185-5bf7-b400-1ef863d52372","type":"url","category":"Network activity","to_ids":true,"value":"http://brunsmmv.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7aa403b6-1668-58b4-9d08-a2f8ba60d114","type":"url","category":"Network activity","to_ids":true,"value":"http://fruiunp.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"98b697de-89a0-524d-a895-f6dc680746c9","type":"url","category":"Network activity","to_ids":true,"value":"http://hotrocce.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"fa32e951-8c11-5964-8296-e55b0ed8d56a","type":"url","category":"Network activity","to_ids":true,"value":"http://excalcf.top","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6519efdc-1fdb-5dc7-ac61-809ac830283a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.86.89.51","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a28eeb42-6936-5a06-878e-c5ce33ec9ea4","type":"url","category":"Network activity","to_ids":true,"value":"http://apothfya.qpon","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d7d32492-b18f-591d-80eb-7d6ffc045aa5","type":"url","category":"Network activity","to_ids":true,"value":"http://bowmzf.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7b18df64-d6ee-5718-8db2-c64e752f1d9b","type":"domain","category":"Network activity","to_ids":true,"value":"frustreghm.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6386fb89-ddf9-5aab-9519-f85d25a50554","type":"url","category":"Network activity","to_ids":true,"value":"http://frustreghm.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"fe588456-6f87-5683-a7e4-f9ad7019bd8b","type":"domain","category":"Network activity","to_ids":true,"value":"bowmzf.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3a210429-b15c-5490-87cf-5796f6d76d0f","type":"url","category":"Network activity","to_ids":true,"value":"http://herwxtx.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8f9361fa-3004-587c-9604-0f878acf7490","type":"url","category":"Network activity","to_ids":true,"value":"http://lasbmt.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"754cdf35-452c-5545-a40e-f88001789698","type":"domain","category":"Network activity","to_ids":true,"value":"cemeepv.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"11c5729b-8b1e-5e45-8641-fa5ff71bd995","type":"domain","category":"Network activity","to_ids":true,"value":"lasbmt.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"cb7843b1-f32b-579a-94c3-379802ab7e54","type":"domain","category":"Network activity","to_ids":true,"value":"herwxtx.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"881853f7-156d-545d-81da-789343ca81d3","type":"domain","category":"Network activity","to_ids":true,"value":"citriadn.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"491599a7-3ea9-5e85-b1ed-b2a909e89efe","type":"url","category":"Network activity","to_ids":true,"value":"http://censukpy.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3d0a3437-6590-504d-8f43-e7fafe06cac6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.86.89.51","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4f0f4ba2-aa8d-5873-8311-0b5b336fded5","type":"domain","category":"Network activity","to_ids":true,"value":"leojbl.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0e5ba785-0b71-55b2-8686-2ed5b9d71e0e","type":"url","category":"Network activity","to_ids":true,"value":"http://cemeepv.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"10c17f9d-896e-516f-8b52-3a4d172e13c7","type":"url","category":"Network activity","to_ids":true,"value":"http://leojbl.xin","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b41e5593-3a89-5e44-a946-18a2390f34ba","type":"domain","category":"Network activity","to_ids":true,"value":"censukpy.xyz","comment":"https://x.com/skocherhan/status/1954044312007647293","timestamp":"1754715443","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"13bff8ef-10dd-5163-b249-171dd7e6c550","type":"domain","category":"Network activity","to_ids":true,"value":"onlineaccessment.weebly.com","comment":"https://x.com/urldna_bot/status/1954060112772968585","timestamp":"1754719210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4d6a1a26-a0e2-5246-8973-6dfc7ed2f92f","type":"url","category":"Network activity","to_ids":true,"value":"https://onlineaccessment.weebly.com","comment":"https://x.com/urldna_bot/status/1954060112772968585","timestamp":"1754719210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b09d57a4-1939-5a43-ab00-e17e0046f0e3","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.84.186:443","comment":"https://x.com/drb_ra/status/1954071775685320807","timestamp":"1754721990","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"fe09c5d8-199a-57a2-a6d5-d975fafffb9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.84.186","comment":"https://x.com/drb_ra/status/1954071775685320807","timestamp":"1754721990","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"21739f71-864b-5bd3-8979-fb7d9a22a014","type":"url","category":"Network activity","to_ids":true,"value":"http://3.221.126.230:443","comment":"https://x.com/drb_ra/status/1954071913761759342","timestamp":"1754722023","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f431b482-78f1-513a-aa53-28c49d90e438","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.158.42.85","comment":"https://x.com/drb_ra/status/1954072052966564002","timestamp":"1754722056","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"ba47273a-71b6-50b7-84a2-31296527e63d","type":"url","category":"Network activity","to_ids":true,"value":"http://75.158.42.85:3000","comment":"https://x.com/drb_ra/status/1954072052966564002","timestamp":"1754722056","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"5dd43128-4ed4-56b7-a2ea-f456feb2b11a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.238.45.243","comment":"https://x.com/drb_ra/status/1954072192083194113","timestamp":"1754722090","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"3efaa57a-4e4f-55c1-af75-35826920a951","type":"url","category":"Network activity","to_ids":true,"value":"http://54.238.45.243:80","comment":"https://x.com/drb_ra/status/1954072192083194113","timestamp":"1754722090","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"30506b2f-5467-504d-a0a3-523560e1645e","type":"url","category":"Network activity","to_ids":true,"value":"http://72.18.200.97:443","comment":"https://x.com/drb_ra/status/1954072330298097979","timestamp":"1754722123","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ba74607a-56b0-5e17-a6a6-750d3012cfc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.18.200.97","comment":"https://x.com/drb_ra/status/1954072469557453156","timestamp":"1754722156","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"357a8d8f-60da-5e77-8d8b-bdfb3dea59d7","type":"url","category":"Network activity","to_ids":true,"value":"http://72.18.200.97:31337","comment":"https://x.com/drb_ra/status/1954072469557453156","timestamp":"1754722156","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8e7bda63-f85c-5d2b-8a03-73770e369a3d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.93.6.114","comment":"https://x.com/drb_ra/status/1954072608640491854","timestamp":"1754722189","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2f627374-3127-53f7-b1f0-2bf87301cc52","type":"url","category":"Network activity","to_ids":true,"value":"http://147.93.6.114:31337","comment":"https://x.com/drb_ra/status/1954072608640491854","timestamp":"1754722189","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"799794e7-7392-563e-9353-ccf71ef5a9d3","type":"url","category":"Network activity","to_ids":true,"value":"http://194.76.217.146:31337","comment":"https://x.com/drb_ra/status/1954072749334536394","timestamp":"1754722223","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8c16c5d5-1283-59c1-a92c-e2c3275b2009","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.76.217.146","comment":"https://x.com/drb_ra/status/1954072749334536394","timestamp":"1754722223","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3e89386b-ba04-5dbd-92b9-91efe4aa7199","type":"url","category":"Network activity","to_ids":true,"value":"http://45.61.135.83:9443","comment":"https://x.com/drb_ra/status/1954073395030610343","timestamp":"1754722376","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ca2fe1a1-3011-5d32-bbe6-930190568c07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.61.135.83","comment":"https://x.com/drb_ra/status/1954073395030610343","timestamp":"1754722376","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9c744328-060f-598b-a468-4a96cc86a081","type":"url","category":"Network activity","to_ids":true,"value":"http://65.109.32.118:8080","comment":"https://x.com/drb_ra/status/1954073534323401148","timestamp":"1754722410","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"a398f2b0-9fb7-5f8c-8d2a-4978113e0c21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.109.32.118","comment":"https://x.com/drb_ra/status/1954073534323401148","timestamp":"1754722410","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"7475098e-8232-5e94-95ac-555261d86525","type":"url","category":"Network activity","to_ids":true,"value":"http://2.83.28.150:443","comment":"https://x.com/drb_ra/status/1954073673356198311","timestamp":"1754722443","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"45511d25-c1cd-52ef-9dc1-8ac319b4db93","type":"url","category":"Network activity","to_ids":true,"value":"http://35.221.185.218:8080","comment":"https://x.com/drb_ra/status/1954073812141576258","timestamp":"1754722476","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3f69ec66-e1a2-53de-b579-5cd611d7985b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.221.185.218","comment":"https://x.com/drb_ra/status/1954073812141576258","timestamp":"1754722476","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a5ed5cfa-130c-536f-9ca5-bb0f4ecbf8ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.165.16.89","comment":"https://x.com/drb_ra/status/1954073951761571884","timestamp":"1754722509","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"80487e5a-b5fc-522c-b892-6908d6a9f400","type":"url","category":"Network activity","to_ids":true,"value":"http://194.165.16.89:2404","comment":"https://x.com/drb_ra/status/1954073951761571884","timestamp":"1754722509","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0008c27f-f863-5f59-b7b7-10cb130eeb27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.19","comment":"https://x.com/drb_ra/status/1954074090467172643","timestamp":"1754722542","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"91173678-5f7f-57a0-8326-eee3564e01a0","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.19:8888","comment":"https://x.com/drb_ra/status/1954074090467172643","timestamp":"1754722542","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"db1c4df2-e412-57d9-a921-873f15699fcf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.113.74","comment":"https://x.com/drb_ra/status/1954074228573315533","timestamp":"1754722575","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b0d702aa-0e37-5588-a3c4-349e74910723","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.113.74:2404","comment":"https://x.com/drb_ra/status/1954074228573315533","timestamp":"1754722575","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1aad6b01-c750-522f-a230-1ed75ad9cdd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.158.37.41","comment":"https://x.com/drb_ra/status/1954074368016830610","timestamp":"1754722608","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"5b30667e-cecf-5fe0-a39d-ac01479fd8ad","type":"url","category":"Network activity","to_ids":true,"value":"http://103.158.37.41:3232","comment":"https://x.com/drb_ra/status/1954074368016830610","timestamp":"1754722608","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"bd450997-5d4f-5d2b-a331-65918f3080d4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.145.178.209:31746","comment":"https://x.com/drb_ra/status/1954074506193981721","timestamp":"1754722641","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4c4a103a-4321-515a-8ab9-dac46e78a930","type":"url","category":"Network activity","to_ids":true,"value":"http://3.145.178.209:2096","comment":"https://x.com/drb_ra/status/1954074644778004958","timestamp":"1754722674","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f9e992da-6b35-5bf6-be1d-e30857ae0661","type":"url","category":"Network activity","to_ids":true,"value":"http://13.246.240.58:46558","comment":"https://x.com/drb_ra/status/1954074783173243226","timestamp":"1754722707","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"33a51422-0c2d-535d-b9cd-37823d9cea55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.246.240.58","comment":"https://x.com/drb_ra/status/1954074921879187661","timestamp":"1754722740","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1cc80fb2-6119-5075-90f0-b132ee610e25","type":"url","category":"Network activity","to_ids":true,"value":"http://13.246.240.58:7908","comment":"https://x.com/drb_ra/status/1954074921879187661","timestamp":"1754722740","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"149c5a31-2b63-5a4b-9424-3929b7fe4112","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.81.45.64","comment":"https://x.com/drb_ra/status/1954075059586277626","timestamp":"1754722773","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"65778169-cd1f-5dc2-8a3d-f20bb222a7a9","type":"url","category":"Network activity","to_ids":true,"value":"http://74.81.45.64:8080","comment":"https://x.com/drb_ra/status/1954075059586277626","timestamp":"1754722773","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5921f8f7-8973-5abc-9356-814b4ac82f9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.198.75.225","comment":"https://x.com/drb_ra/status/1954075197889556522","timestamp":"1754722806","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ccb3b803-a546-597b-9deb-88e47c1667e1","type":"url","category":"Network activity","to_ids":true,"value":"http://159.198.75.225:25","comment":"https://x.com/drb_ra/status/1954075197889556522","timestamp":"1754722806","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"eee17240-25a1-5094-9895-20062e1432c5","type":"url","category":"Network activity","to_ids":true,"value":"http://111.90.151.129:2850","comment":"https://x.com/drb_ra/status/1954075338025164829","timestamp":"1754722840","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"59ad5a0d-fd86-596b-be8e-3e61b39caccf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.90.151.129","comment":"https://x.com/drb_ra/status/1954075338025164829","timestamp":"1754722840","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"62dbab11-1be1-5dc3-9385-775b6f94aea1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.75.75","comment":"https://x.com/drb_ra/status/1954075476944879760","timestamp":"1754722873","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"819a08dc-1afe-5af8-866e-7a0889b90c1d","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.75.75:8888","comment":"https://x.com/drb_ra/status/1954075476944879760","timestamp":"1754722873","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"c0475375-9383-5b90-90fc-d2214c27a159","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.182.85.28","comment":"https://x.com/drb_ra/status/1954075615339893205","timestamp":"1754722906","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d5846ef3-4634-5175-805d-a4615b346af7","type":"url","category":"Network activity","to_ids":true,"value":"http://194.182.85.28:443","comment":"https://x.com/drb_ra/status/1954075615339893205","timestamp":"1754722906","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"2a5a6a4c-a097-5cb8-9643-8b8174ecec6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.16","comment":"https://x.com/Fact_Finder03/status/1954088600779317606","timestamp":"1754726002","distribution":"5","Tag":[{"name":"Hookbot"}]},{"uuid":"d5cc7c57-7bd8-554b-89e0-6446e3b9ba03","type":"url","category":"Network activity","to_ids":true,"value":"https://vfygfcoastonl.weebly.com","comment":"https://x.com/urldna_bot/status/1954090310289531338","timestamp":"1754726409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e57e9424-8903-5b4a-ac9d-860e7ce3cb51","type":"domain","category":"Network activity","to_ids":true,"value":"vfygfcoastonl.weebly.com","comment":"https://x.com/urldna_bot/status/1954090310289531338","timestamp":"1754726409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"82a559d5-62c5-58b6-b701-75f0a444eba6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.22.82.36","comment":"https://x.com/skocherhan/status/1954116572244492706","timestamp":"1754732671","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"ba6badd7-fe21-529c-9333-306fa8636dba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.164","comment":"https://x.com/skocherhan/status/1954116572244492706","timestamp":"1754732671","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"2e77ef6b-4692-5b7a-8f1d-72f2828c551c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.160.161.247","comment":"https://x.com/skocherhan/status/1954116607426396555","timestamp":"1754732679","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"15d7e58c-20a9-5ae9-951a-f55201b31eea","type":"url","category":"Network activity","to_ids":true,"value":"http://167.160.161.247:8595","comment":"https://x.com/skocherhan/status/1954116607426396555","timestamp":"1754732679","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"caec12fc-688c-5942-89df-c03668464aa4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.227.236.210","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"cff01f7d-736b-5ac3-81d2-798081c99004","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.189.20.81","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"c4e23e43-8672-5154-9db8-99f4c95fe672","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.110.49.104","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"f3da67da-6a3d-594f-830f-c5cb672f32e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.122.38.193","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"eb3d525e-4f55-5761-bac7-00f8521572f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.118.146.156","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"80cf0442-8b34-57ee-9ef0-d00558dc965e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.26.28","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"097a2144-14ed-5f7e-9deb-242ec243c3e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.130.231.213","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"07979767-3005-5ce0-b827-efcf6daa5bbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.26.199","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"f93d4be1-436d-52eb-94d9-2adc5d4dff2e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.228.72.104","comment":"https://x.com/skocherhan/status/1954116753723715810","timestamp":"1754732714","distribution":"5","Tag":[{"name":"Xworm"},{"name":"RAT"}]},{"uuid":"86b9a59b-86f9-53d0-ba03-d505b28babc7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.94.47.145","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"cfe88e6a-eb7a-5be9-9457-8c061996b11e","type":"domain","category":"Network activity","to_ids":true,"value":"stanpriston.com","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"181568ac-cd3c-54c9-974c-c6a2470bddc7","type":"domain","category":"Network activity","to_ids":true,"value":"carmenzo.com","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"d4e67aaf-e2f0-56d2-bdbe-2697ad07211b","type":"url","category":"Network activity","to_ids":true,"value":"http://stanpriston.com","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"53453054-64b7-5f87-9e14-4e2e7e9d4fb3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.94.47.145","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"5a47d94b-e576-578a-9ea4-3e161f7676ae","type":"url","category":"Network activity","to_ids":true,"value":"http://carmenzo.com","comment":"https://x.com/skocherhan/status/1954120432426062236","timestamp":"1754733591","distribution":"5"},{"uuid":"0eab7116-36d5-5f09-adb4-00312219dfab","type":"domain","category":"Network activity","to_ids":true,"value":"customerserviceattcurrently.weebly.com","comment":"https://x.com/urldna_bot/status/1954120496661889517","timestamp":"1754733606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ac5f3cc9-20ec-563d-8c22-b6c472c096b8","type":"url","category":"Network activity","to_ids":true,"value":"https://customerserviceattcurrently.weebly.com","comment":"https://x.com/urldna_bot/status/1954120496661889517","timestamp":"1754733606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7743c273-639d-5cfb-9df6-f939e7c18362","type":"domain","category":"Network activity","to_ids":true,"value":"evesaglik.online","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"d3a8e988-8cca-585c-ae88-b74214b43552","type":"url","category":"Network activity","to_ids":true,"value":"http://www.wmrfast.com/k49j/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"348af089-55c3-5fe7-985d-ee226b9ef783","type":"md5","category":"Payload delivery","to_ids":true,"value":"f67e36a5c2aab9908124126f8a8b4353","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"ca2f910c-9b75-5c75-9c11-25a8ae549da7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.kopisodor2.click/uqnk/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"3b0e9cf7-9720-5df2-9bd7-4efb815a8819","type":"domain","category":"Network activity","to_ids":true,"value":"kopisodor2.click","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"cb571973-7baf-5b91-b657-6290336e1018","type":"domain","category":"Network activity","to_ids":true,"value":"wmrfast.com","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"21ee10ce-7e6f-5da1-b989-c10e5a57ec00","type":"md5","category":"Payload delivery","to_ids":true,"value":"9642ad5905a7c9b8e80d91089af44822","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"372770ad-a01c-5398-a048-3e2bd678c221","type":"domain","category":"Network activity","to_ids":true,"value":"937851.org","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"18ca7f47-e8cc-5cdc-82ad-95dcb4239872","type":"domain","category":"Network activity","to_ids":true,"value":"royal-bet-king.xyz","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"b57f8c87-1aff-5e6a-abfb-92270553e39b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.evesaglik.online/b6dr/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"286789df-0d89-5c37-9f33-808d51737de5","type":"domain","category":"Network activity","to_ids":true,"value":"drux.live","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"3b3b7e9b-6741-5316-affb-0e0b176291e4","type":"url","category":"Network activity","to_ids":true,"value":"http://www.89iyeb.vip/ga2t/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"92c211e1-be47-5fea-9d27-aab1fc03e4ce","type":"url","category":"Network activity","to_ids":true,"value":"http://www.937851.org/qvyi/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"d808cf1f-64ab-5450-b81b-62696cd5c00f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.royal-bet-king.xyz/az4p/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"55ed551f-2dea-5d32-a79f-742064fd6481","type":"url","category":"Network activity","to_ids":true,"value":"http://www.drux.live/wre9/","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"e1e837b0-5996-5eeb-819d-fb5ca94c97d4","type":"domain","category":"Network activity","to_ids":true,"value":"89iyeb.vip","comment":"https://x.com/skocherhan/status/1954126136704696452","timestamp":"1754734951","distribution":"5"},{"uuid":"e8fa4991-26da-56ce-8cf3-7788076a3048","type":"url","category":"Network activity","to_ids":true,"value":"http://45.83.28.115:7432","comment":"https://x.com/skocherhan/status/1954128603521650927","timestamp":"1754735539","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"0f620cc8-9f10-5361-98de-4d42707cf7ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.83.28.115","comment":"https://x.com/skocherhan/status/1954128603521650927","timestamp":"1754735539","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"cad560a8-518a-5ff6-93d5-69c73c4755e5","type":"url","category":"Network activity","to_ids":true,"value":"http://47.95.9.181:80","comment":"https://x.com/drb_ra/status/1954135604452614234","timestamp":"1754737208","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"27ad7d67-1533-5b6c-84f0-20e6f17eb4b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.95.9.181","comment":"https://x.com/drb_ra/status/1954135604452614234","timestamp":"1754737208","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"626a5619-02e6-54ae-84ad-50f6628cac5b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.229.153.124:2004","comment":"https://x.com/drb_ra/status/1954135744093573269","timestamp":"1754737242","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc754300-cce0-5fd5-ab88-a387c9ab46a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.229.153.124","comment":"https://x.com/drb_ra/status/1954135744093573269","timestamp":"1754737242","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e355dd68-a9bc-5bda-8632-5c026eabdb64","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.156.3.170","comment":"https://x.com/drb_ra/status/1954135884741149102","timestamp":"1754737275","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4ddddd03-9e12-5a25-9637-b2f676479bb8","type":"url","category":"Network activity","to_ids":true,"value":"https://82.156.3.170/admin/devise/Server/msn/API/4YS9TD9YYEF","comment":"https://x.com/drb_ra/status/1954135884741149102","timestamp":"1754737275","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bb5168c-54d5-5fdc-8dab-f7c29c8d58b5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.106:3389","comment":"https://x.com/drb_ra/status/1954135884741149102","timestamp":"1754737275","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c387410-717b-5c9f-acc1-1ea2dc623a72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.106","comment":"https://x.com/drb_ra/status/1954135884741149102","timestamp":"1754737275","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"06a7b960-bbb4-542f-aca0-f2660f9b7d30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.36","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"13b0b828-9de7-56f5-beb0-626f7561d889","type":"url","category":"Network activity","to_ids":true,"value":"http://janarch.duckdns.org","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"bec72d62-3a31-5b19-819e-6fb3ee9f0698","type":"url","category":"Network activity","to_ids":true,"value":"http://fsankmas.it.com","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"adcc3bdc-a0e7-52ee-a962-623bb3833d1d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.36","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"86aed680-8a49-599b-a46a-7dd37093e8b9","type":"domain","category":"Network activity","to_ids":true,"value":"janarch.duckdns.org","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"264ade4c-6c13-528c-b938-04e308cddd4e","type":"url","category":"Network activity","to_ids":true,"value":"http://fsankmas.xyz","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"bf6d0b03-cbaa-5ee8-a046-53ec7a59cf09","type":"domain","category":"Network activity","to_ids":true,"value":"fsankmas.xyz","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"c28ad76e-aca9-5bdf-adc7-ebc5de493402","type":"domain","category":"Network activity","to_ids":true,"value":"fsankmas.it.com","comment":"https://x.com/skocherhan/status/1954143620291797214","timestamp":"1754739119","distribution":"5"},{"uuid":"a7414645-0801-5e4f-9f08-ebe3fc010d9f","type":"url","category":"Network activity","to_ids":true,"value":"http://homoney177.duckdns.org","comment":"https://x.com/skocherhan/status/1954144459634946274","timestamp":"1754739320","distribution":"5"},{"uuid":"d50b3c75-7180-51e2-b5c2-81b9f1845b3f","type":"domain","category":"Network activity","to_ids":true,"value":"homoney177.duckdns.org","comment":"https://x.com/skocherhan/status/1954144459634946274","timestamp":"1754739320","distribution":"5"},{"uuid":"ca3c2ac4-feba-56a1-8970-f2f08eca6154","type":"domain","category":"Network activity","to_ids":true,"value":"cpanel-webmail-v0ja0uvosq.pages.dev","comment":"https://x.com/urldna_bot/status/1954180893574111501","timestamp":"1754748006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3c3151c7-74f9-5ee9-975d-482236f70bbf","type":"url","category":"Network activity","to_ids":true,"value":"https://cpanel-webmail-v0ja0uvosq.pages.dev","comment":"https://x.com/urldna_bot/status/1954180893574111501","timestamp":"1754748006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5729388b-a1a0-5c31-8397-9cd631504cb4","type":"md5","category":"Payload delivery","to_ids":true,"value":"DA1C4D9C9762F9755EB52259CBD74316","comment":"https://x.com/fbgwls245/status/1954187839060492399","timestamp":"1754749662","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"7f250139-8fc9-5f46-8504-1a04fb76de3b","type":"url","category":"Network activity","to_ids":true,"value":"https://flaskproxy-fedg.onrender.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954214111434232160","timestamp":"1754755926","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b205acca-51bc-5250-bd2f-a1b71cca62eb","type":"domain","category":"Network activity","to_ids":true,"value":"flaskproxy-fedg.onrender.com","comment":"https://x.com/drb_ra/status/1954214111434232160","timestamp":"1754755926","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"15efbc99-167d-5513-8360-baafa6ce5d9f","type":"domain","category":"Network activity","to_ids":true,"value":"297d4064-b529-4934-af6f-b3f266e64f8a-00-316tm8g12nc9a.riker.replit.dev","comment":"https://x.com/drb_ra/status/1954214251377156101","timestamp":"1754755959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"76f67487-8704-5ec6-ac33-1581eea4d283","type":"url","category":"Network activity","to_ids":true,"value":"https://297d4064-b529-4934-af6f-b3f266e64f8a-00-316tm8g12nc9a.riker.replit.dev/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954214251377156101","timestamp":"1754755959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b39edcec-611f-50b1-a67b-f96feabcaba6","type":"url","category":"Network activity","to_ids":true,"value":"http://154.219.109.205:443","comment":"https://x.com/drb_ra/status/1954214251377156101","timestamp":"1754755959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e874d916-e8c0-53b2-9af1-a5d9e72e7d35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.219.109.205","comment":"https://x.com/drb_ra/status/1954214251377156101","timestamp":"1754755959","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3619f8b5-d77e-5bda-a149-4b8feba753b9","type":"domain","category":"Network activity","to_ids":true,"value":"wgrbq.e-scurefiles.net","comment":"https://x.com/urldna_bot/status/1954241304071729245","timestamp":"1754762409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"198e26fd-c746-5613-ab56-1bf32320672f","type":"url","category":"Network activity","to_ids":true,"value":"https://wgrbq.e-scurefiles.net","comment":"https://x.com/urldna_bot/status/1954241304071729245","timestamp":"1754762409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"adb5a1a8-8b26-51c9-966a-63c468c765d8","type":"url","category":"Network activity","to_ids":true,"value":"http://44.228.145.96:443","comment":"https://x.com/drb_ra/status/1954252918095532361","timestamp":"1754765178","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"33504af6-d293-50d6-9e95-154ee95b2824","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.228.145.96","comment":"https://x.com/drb_ra/status/1954252918095532361","timestamp":"1754765178","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"d3e470d7-bb5e-5578-a53f-c66492b50fc3","type":"url","category":"Network activity","to_ids":true,"value":"http://23.105.201.248:9876","comment":"https://x.com/drb_ra/status/1954253055727390842","timestamp":"1754765211","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"202f4608-7a85-5afa-9d4f-1377328ebbbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.105.201.248","comment":"https://x.com/drb_ra/status/1954253055727390842","timestamp":"1754765211","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fd3a5280-c59a-5233-ba01-83f58b07fbc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.57.137.150","comment":"https://x.com/drb_ra/status/1954253194525393106","timestamp":"1754765244","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"031552bc-ac76-51d8-bf77-3fe760137ded","type":"url","category":"Network activity","to_ids":true,"value":"http://20.57.137.150:31337","comment":"https://x.com/drb_ra/status/1954253194525393106","timestamp":"1754765244","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cb9c8c7d-c3db-519c-84a9-aea08e27908a","type":"url","category":"Network activity","to_ids":true,"value":"http://84.32.230.122:31337","comment":"https://x.com/drb_ra/status/1954253332970926368","timestamp":"1754765277","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"da49432b-c08b-5686-8352-96dea6dfc9aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.32.230.122","comment":"https://x.com/drb_ra/status/1954253332970926368","timestamp":"1754765277","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2f683121-3651-5d24-91ad-4b3be40a76a2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.136.29.64:4321","comment":"https://x.com/drb_ra/status/1954253977681354994","timestamp":"1754765431","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e8ad72f5-b3a9-5fd7-954c-b09dc3e449ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.136.29.64","comment":"https://x.com/drb_ra/status/1954253977681354994","timestamp":"1754765431","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"722efd30-197e-53e0-ac90-cef8fd310538","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.117.194:19863","comment":"https://x.com/drb_ra/status/1954254115644624949","timestamp":"1754765464","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d5791b15-90bc-5cf2-8c2c-ae8caaae6725","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.117.194","comment":"https://x.com/drb_ra/status/1954254115644624949","timestamp":"1754765464","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1cc760a2-b7a1-51b0-9774-7a63882ed396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.117.170","comment":"https://x.com/drb_ra/status/1954254253301920213","timestamp":"1754765496","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"504ce90c-6aa8-5d9c-9340-69c3e0333bd2","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.117.170:2404","comment":"https://x.com/drb_ra/status/1954254253301920213","timestamp":"1754765496","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"34600d55-8caf-55c0-8732-674e05a3a7ae","type":"url","category":"Network activity","to_ids":true,"value":"http://54.183.190.75:8080","comment":"https://x.com/drb_ra/status/1954254391848182178","timestamp":"1754765529","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e7f92408-e91b-5ec7-a552-8ba0d846c391","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.183.190.75","comment":"https://x.com/drb_ra/status/1954254391848182178","timestamp":"1754765529","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b6afc418-3020-56e6-af26-50d1e8299b44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.215.208","comment":"https://x.com/drb_ra/status/1954254530255663228","timestamp":"1754765562","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8cdf72e4-ffb3-5466-a31e-d1028b4b024d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.215.208:8808","comment":"https://x.com/drb_ra/status/1954254530255663228","timestamp":"1754765562","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"05b3922a-0502-51a2-a8bd-8ab6df5caf09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.220.96.15","comment":"https://x.com/drb_ra/status/1954254668370182490","timestamp":"1754765595","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"343abedf-f489-5de5-a19d-131bfc290d72","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.96.15:3318","comment":"https://x.com/drb_ra/status/1954254668370182490","timestamp":"1754765595","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"21666215-4415-5d96-95c2-c3271efb7dad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.237.245.48","comment":"https://x.com/drb_ra/status/1954254806195011834","timestamp":"1754765628","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d5b9678f-44a6-5296-bba4-fc79adc02c74","type":"url","category":"Network activity","to_ids":true,"value":"http://77.237.245.48:80","comment":"https://x.com/drb_ra/status/1954254806195011834","timestamp":"1754765628","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bc3d66aa-23a1-52be-b0a6-33a01a5710dc","type":"url","category":"Network activity","to_ids":true,"value":"http://103.194.107.72:8888","comment":"https://x.com/drb_ra/status/1954254945969897647","timestamp":"1754765662","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"4bd5346d-4e36-5b88-93bf-1d2bcdb10158","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.194.107.72","comment":"https://x.com/drb_ra/status/1954254945969897647","timestamp":"1754765662","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"26c04537-0f09-53be-9333-755870075a81","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.135:443","comment":"https://x.com/drb_ra/status/1954255084961013960","timestamp":"1754765695","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"413e6698-0722-58de-8cd2-123ec1b02a03","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.98.219.135","comment":"https://x.com/drb_ra/status/1954255084961013960","timestamp":"1754765695","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"9d4038d2-3128-54c0-992c-372a52146c7e","type":"domain","category":"Network activity","to_ids":true,"value":"defensesafeproactivecyber.autos","comment":"https://x.com/skocherhan/status/1954255120369381577","timestamp":"1754765703","distribution":"5"},{"uuid":"1c9614d7-f531-5658-9170-6f05fee73279","type":"url","category":"Network activity","to_ids":true,"value":"http://www.defensesafeproactivecyber.autos/1j282qd7u/l?btd=dHJrLmluZm9ybWF0aW9uLWRpc2NvdmVyLXRob3VnaC1maW5kLnJ1bg&exptoken=MTc1NDc2NTU5ODM0NQ%3D%3D&lang=en&lid=de4fefff-f0da-48e6-8da7-860ede31b596<d=dHJrLmh1bnRlci1wYWxhY2UtYmFzZWJhbGwtYWlyLnJ1bg&pd2q=YTE9ZGU0ZmVmZmYtZjBkYS00OGU2LT","comment":"https://x.com/skocherhan/status/1954255120369381577","timestamp":"1754765703","distribution":"5"},{"uuid":"f97ac931-d167-51a2-895c-c39fb3f098a3","type":"url","category":"Network activity","to_ids":true,"value":"http://85.9.207.6:445","comment":"https://x.com/drb_ra/status/1954255222962032822","timestamp":"1754765728","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"12cf5074-1dde-5e7c-9ff0-45b1b2727396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.9.207.6","comment":"https://x.com/drb_ra/status/1954255222962032822","timestamp":"1754765728","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cfce4353-4b6e-575e-9606-a75a8af1b3d1","type":"url","category":"Network activity","to_ids":true,"value":"http://170.130.55.204:37908","comment":"https://x.com/drb_ra/status/1954255360979787815","timestamp":"1754765761","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5207fa87-2a2f-54ca-8fe1-56c3786b81cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.130.55.204","comment":"https://x.com/drb_ra/status/1954255360979787815","timestamp":"1754765761","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5b7ae309-ad66-5cbb-9ad8-7fc927c2f50d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.37.220.47","comment":"https://x.com/drb_ra/status/1954255499072778336","timestamp":"1754765793","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"43ec3710-3ed6-56e7-87e4-4473feb5926a","type":"url","category":"Network activity","to_ids":true,"value":"http://13.37.220.47:443","comment":"https://x.com/drb_ra/status/1954255499072778336","timestamp":"1754765793","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"613521c1-5ea8-5654-9175-8b53571eb308","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.171.159.253","comment":"https://x.com/drb_ra/status/1954255636742508634","timestamp":"1754765826","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"97272844-851b-5830-93ca-9bc7cf2a0873","type":"url","category":"Network activity","to_ids":true,"value":"http://16.171.159.253:443","comment":"https://x.com/drb_ra/status/1954255636742508634","timestamp":"1754765826","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"621d6dfc-8815-59f3-b9d6-90ec7e26bc68","type":"url","category":"Network activity","to_ids":true,"value":"http://129.212.180.89:443","comment":"https://x.com/drb_ra/status/1954255775620006020","timestamp":"1754765859","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"3739e725-db91-508d-a3b3-6077734fbc18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.212.180.89","comment":"https://x.com/drb_ra/status/1954255775620006020","timestamp":"1754765859","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"3a75414c-1728-56a7-a1da-08d18ac47715","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.187.17.5","comment":"https://x.com/FalconFeedsio/status/1954260021447188771","timestamp":"1754766872","distribution":"5"},{"uuid":"131d50bb-fdfd-54ad-85d2-3b8d819ac212","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.47.212.241","comment":"https://x.com/FalconFeedsio/status/1954260021447188771","timestamp":"1754766872","distribution":"5"},{"uuid":"67058e3f-954b-553c-9121-93e280c8070f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.209.7.231","comment":"https://x.com/FalconFeedsio/status/1954260021447188771","timestamp":"1754766872","distribution":"5"},{"uuid":"6f92eca8-d3e6-58ea-a326-e2fe7da6f9bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.88.158.194","comment":"https://x.com/FalconFeedsio/status/1954260021447188771","timestamp":"1754766872","distribution":"5"},{"uuid":"b46b1f11-bf00-5319-ac8e-ff4911397770","type":"url","category":"Network activity","to_ids":true,"value":"http://loan-consider.gl.at.ply.gg:49409","comment":"https://x.com/skocherhan/status/1954261527273312505","timestamp":"1754767231","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"ded901da-c855-50a9-97c3-f169d3d4e46f","type":"domain","category":"Network activity","to_ids":true,"value":"loan-consider.gl.at.ply.gg:49409","comment":"https://x.com/skocherhan/status/1954261527273312505","timestamp":"1754767231","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"6407b9fe-1931-5eac-8a1f-261118c6cbae","type":"url","category":"Network activity","to_ids":true,"value":"http://185.91.127.173:505","comment":"https://x.com/skocherhan/status/1954261527273312505","timestamp":"1754767231","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"944278ac-7362-510a-938f-88be503288c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.91.127.173","comment":"https://x.com/skocherhan/status/1954261527273312505","timestamp":"1754767231","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"fbd337ad-2f92-5198-8910-7718973dd941","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/76bh","comment":"https://x.com/skocherhan/status/1954261527273312505","timestamp":"1754767231","distribution":"5","Tag":[{"name":"Xworm"},{"name":"AsyncRAT"}]},{"uuid":"722a5759-0584-5d19-96c2-4c630cc3539b","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/KERMOSINIUS","comment":"https://x.com/skocherhan/status/1954263261739675952","timestamp":"1754767644","distribution":"5"},{"uuid":"89753f25-8636-55f6-8a62-001c714fa6b8","type":"url","category":"Network activity","to_ids":true,"value":"http://93.183.72.95:8080","comment":"https://x.com/skocherhan/status/1954265530312818734","timestamp":"1754768185","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"7cfc4743-78cf-57da-9bb4-a72600bb3f2b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.183.72.95","comment":"https://x.com/skocherhan/status/1954265530312818734","timestamp":"1754768185","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"596930f9-148d-51f0-a15b-029c712988d6","type":"domain","category":"Network activity","to_ids":true,"value":"tonygalley.com","comment":"https://x.com/skocherhan/status/1954270209092604382","timestamp":"1754769301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0c9eab9-1425-5989-a09a-bb309dbeb6f0","type":"url","category":"Network activity","to_ids":true,"value":"http://tonygalley.com","comment":"https://x.com/skocherhan/status/1954270209092604382","timestamp":"1754769301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"addf3c61-c7eb-5424-8a68-4a15e69557b3","type":"domain","category":"Network activity","to_ids":true,"value":"hopfenhotel.germany-confirmed1902.com","comment":"https://x.com/skocherhan/status/1954270209092604382","timestamp":"1754769301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"10fd1a87-16dd-52d0-a1d6-2883f3e79c8c","type":"url","category":"Network activity","to_ids":true,"value":"http://hopfenhotel.germany-confirmed1902.com/zngw0g0","comment":"https://x.com/skocherhan/status/1954270209092604382","timestamp":"1754769301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02665a1a-f267-536e-9ebc-f43b268f0bb2","type":"url","category":"Network activity","to_ids":true,"value":"http://detailshotel.world","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9146a01-30e3-533f-953f-475d1bfcb937","type":"domain","category":"Network activity","to_ids":true,"value":"detailshotel.world","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e61203f-5c15-51ac-b162-28d964b85426","type":"domain","category":"Network activity","to_ids":true,"value":"confirm-reservation-traveltechnologies.world","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a881ff8c-f1a1-5f38-964b-3f61a915caeb","type":"url","category":"Network activity","to_ids":true,"value":"http://confirm-reservation-traveltechnologies.world","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe07c407-078c-5571-9c1b-9392d0751d14","type":"domain","category":"Network activity","to_ids":true,"value":"hotel1.resrv-complete8421.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df9d7d7a-84e4-5d84-aeb1-ec9afef64d7e","type":"domain","category":"Network activity","to_ids":true,"value":"hotelalba.confirm-id8542.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf463444-76c5-5f79-b233-e97b944bf31d","type":"url","category":"Network activity","to_ids":true,"value":"http://hotelalba.confirm-id8542.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d59bad28-27e2-5e3f-82ba-b4b035299227","type":"url","category":"Network activity","to_ids":true,"value":"http://hotel1.resrv-complete8421.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2effe690-880e-51b9-879d-cadc508934c8","type":"url","category":"Network activity","to_ids":true,"value":"http://abcompany.germany-confirmed1902.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4c5d8ec-4ae2-5837-9e8d-c4bf305e4e17","type":"domain","category":"Network activity","to_ids":true,"value":"hotelmare.confirm-id8542.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6bb93528-ccfc-5037-83f0-e5723f794653","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.wmm-hotel.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c572f278-a57c-5541-8633-5d136990c423","type":"url","category":"Network activity","to_ids":true,"value":"http://hotelmare.confirm-id8542.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c79c4b7a-1f3a-5f08-a72b-09d11c6c4ef9","type":"domain","category":"Network activity","to_ids":true,"value":"reservation-wmm-hotel.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3898725e-07ee-569f-a2dc-4d6987cfa315","type":"url","category":"Network activity","to_ids":true,"value":"http://reservation-wmm-hotel.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f14b5855-2cd8-5a5f-94d1-68c93e3a20a1","type":"domain","category":"Network activity","to_ids":true,"value":"abcompany.germany-confirmed1902.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"856d4f70-c650-56a0-8e1d-10110488d610","type":"domain","category":"Network activity","to_ids":true,"value":"booking.wmm-hotel.com","comment":"https://x.com/skocherhan/status/1954271268397547823","timestamp":"1754769553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f2e143f-26e2-5a9b-9cb4-0ee18626df19","type":"url","category":"Network activity","to_ids":true,"value":"https://3147459c.92ea2438071f378d2627edbe.workers.dev","comment":"https://x.com/urldna_bot/status/1954271507309289957","timestamp":"1754769610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f2cfd3a3-e14d-53f0-89fb-83531f57eb59","type":"domain","category":"Network activity","to_ids":true,"value":"3147459c.92ea2438071f378d2627edbe.workers.dev","comment":"https://x.com/urldna_bot/status/1954271507309289957","timestamp":"1754769610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0cf5e635-9c5d-598d-a92f-34f66a5d5ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.161.193.99","comment":"https://x.com/SarlackLab/status/1954271589756805591","timestamp":"1754769630","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"6413914f-c689-5d7a-9e1a-8e81285dced4","type":"url","category":"Network activity","to_ids":true,"value":"http://nexhall1221-41820.portmap.host","comment":"https://x.com/SarlackLab/status/1954271589756805591","timestamp":"1754769630","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2c6d4c8a-f189-55a5-a9a5-ec7b02bf41c7","type":"url","category":"Network activity","to_ids":true,"value":"http://193.161.193.99:41820","comment":"https://x.com/SarlackLab/status/1954271589756805591","timestamp":"1754769630","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"d0b82a93-e480-5936-9bae-463e6e30463a","type":"domain","category":"Network activity","to_ids":true,"value":"nexhall1221-41820.portmap.host","comment":"https://x.com/SarlackLab/status/1954271589756805591","timestamp":"1754769630","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"561c3c90-0531-546b-ab3b-2948294aa11c","type":"url","category":"Network activity","to_ids":true,"value":"http://zakaz-71131.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"24a99ff1-d876-5dd9-a8dc-a2cd7ad1aec0","type":"url","category":"Network activity","to_ids":true,"value":"http://nmc23.ru","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f8fbb03-ef53-57ef-990a-89d3b7e13aa3","type":"domain","category":"Network activity","to_ids":true,"value":"nmc23.ru","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0b283ac-9b9b-5581-ac8e-50311ec0d569","type":"url","category":"Network activity","to_ids":true,"value":"http://order-8la.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"823cbe30-509c-511c-8391-134f89e87185","type":"domain","category":"Network activity","to_ids":true,"value":"order-8la.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65b28599-a2cb-570a-8a21-afb24c9bb627","type":"domain","category":"Network activity","to_ids":true,"value":"youla.ord-id71004.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6512c664-b021-55af-8155-59423f9411e2","type":"domain","category":"Network activity","to_ids":true,"value":"zakaz-0345.art","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3af026b-5118-523a-914a-19d0a9350924","type":"url","category":"Network activity","to_ids":true,"value":"http://order-skdjvia.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19eab9ed-a7c3-5f02-b727-d45f7061c13c","type":"domain","category":"Network activity","to_ids":true,"value":"order-skdjvia.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4100cf80-a6e8-5093-86a5-bef44c56e6a0","type":"domain","category":"Network activity","to_ids":true,"value":"zakaz-1125.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9dfb2cf4-e0b5-5787-8f80-3a9c31a82c04","type":"url","category":"Network activity","to_ids":true,"value":"http://zakaz-0345.art","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf7568a8-bbac-56b8-952d-50fba1a316f8","type":"url","category":"Network activity","to_ids":true,"value":"http://zakaz-1125.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a39f5e11-a325-56a5-98b7-e5099bedfc42","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.zakaz-12394.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"303063e0-d60f-573c-8a59-9df32147da4f","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.zakaz-24441.com","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7830e6c7-16af-56a9-9581-41d7fd19d3fe","type":"domain","category":"Network activity","to_ids":true,"value":"youla.zakaz-12394.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b40aac50-e05a-563c-a0f3-bf517d452158","type":"domain","category":"Network activity","to_ids":true,"value":"youla.zakaz-24441.com","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43e1cc3d-3858-5f25-9cc7-52103e40c069","type":"domain","category":"Network activity","to_ids":true,"value":"youla.orders-21309.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34291287-fba7-55b4-ba6a-aecfefc4c5ac","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.orders-21309.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cdfb42f2-1880-5896-8daf-c88b98a056e6","type":"domain","category":"Network activity","to_ids":true,"value":"youla.fnm-7.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57d52687-8423-5f36-a7c0-a049b672c65a","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.fnm-7.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8aa2d78-8b63-5b0c-b9b0-56674b8ba5ea","type":"domain","category":"Network activity","to_ids":true,"value":"youla.id22991.site","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a38eecbf-2325-59ba-914f-2092fd9be12b","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.id22991.site","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1b37792-4dd8-5ee6-9977-c33c2102b52d","type":"url","category":"Network activity","to_ids":true,"value":"http://youla.ord-id71004.info","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e1468a6-c217-58e2-aa7f-0495398d24ff","type":"domain","category":"Network activity","to_ids":true,"value":"zakaz-71131.pro","comment":"https://x.com/skocherhan/status/1954275423845532029","timestamp":"1754770544","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db7a847c-2648-5aab-800e-d30132df7971","type":"domain","category":"Network activity","to_ids":true,"value":"indiascihub.cc","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"a2c2e995-dc6e-5e1e-8cd3-b952cf3f29f8","type":"url","category":"Network activity","to_ids":true,"value":"http://indiaifscente.com","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"c0744759-a4e4-5942-91d6-8c359a1b5619","type":"url","category":"Network activity","to_ids":true,"value":"http://indiascihub.cc","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"70f1f8b7-d4f2-5bec-b430-76db4f0e5546","type":"domain","category":"Network activity","to_ids":true,"value":"indiaifscente.com","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"8456e273-dfa1-5af0-a9ed-9e0033eb0977","type":"domain","category":"Network activity","to_ids":true,"value":"indiascihubxs.com","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"dc0ca26a-46d0-5242-87aa-1099d4e6097d","type":"url","category":"Network activity","to_ids":true,"value":"http://indiascihubxs.com","comment":"https://x.com/skocherhan/status/1954280853372064033","timestamp":"1754771838","distribution":"5"},{"uuid":"7e1308c0-9e35-50a0-8b36-4a0ad9694382","type":"domain","category":"Network activity","to_ids":true,"value":"mcafee-activate.us.com","comment":"https://x.com/skocherhan/status/1954281930951631352","timestamp":"1754772095","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f402a77e-cf49-5396-ab8a-65c5c0898953","type":"url","category":"Network activity","to_ids":true,"value":"http://mcafee-activate.us.com","comment":"https://x.com/skocherhan/status/1954281930951631352","timestamp":"1754772095","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c7707c6-f7e6-5f4a-a73d-b24b293ddc10","type":"domain","category":"Network activity","to_ids":true,"value":"cntdportal.com","comment":"https://x.com/skocherhan/status/1954283715187941610","timestamp":"1754772521","distribution":"5"},{"uuid":"fff097f4-1f74-57ff-9c36-e13b3b895fb7","type":"url","category":"Network activity","to_ids":true,"value":"http://cntdportal.com","comment":"https://x.com/skocherhan/status/1954283715187941610","timestamp":"1754772521","distribution":"5"},{"uuid":"17d5e138-65ca-5018-ba2e-058bc71cbf1d","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.135","comment":"https://x.com/threatquery/status/1954286578492215653","timestamp":"1754773203","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"malware"},{"name":"C2"}]},{"uuid":"ef29d4c9-0b9f-5f11-9da7-319b3703a74c","type":"url","category":"Network activity","to_ids":true,"value":"http://23.105.201.248","comment":"https://x.com/threatquery/status/1954286582342557719","timestamp":"1754773204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"fb638022-cd66-5a03-92c9-db2df7d8e397","type":"url","category":"Network activity","to_ids":true,"value":"http://44.228.145.96","comment":"https://x.com/threatquery/status/1954286580350239023","timestamp":"1754773204","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"b745a36f-bce2-5503-ac3b-d07807fcca42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.141.230.133","comment":"https://x.com/skocherhan/status/1954287343919087757","timestamp":"1754773386","distribution":"5"},{"uuid":"2a0bc971-5314-5af5-9e2f-df560d0435d1","type":"url","category":"Network activity","to_ids":true,"value":"http://78.141.230.133","comment":"https://x.com/skocherhan/status/1954287343919087757","timestamp":"1754773386","distribution":"5"},{"uuid":"89cd8eb9-c164-5c32-9779-412531008328","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-captcha-properties-095908403.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"df7a6cd4-4e46-5a32-92e5-8cefb8d1d112","type":"domain","category":"Network activity","to_ids":true,"value":"qmabkngserccaptura.org","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"e21176f5-e0b9-5067-903d-997d8a8862f0","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-extranetrsvrv-cstmrq.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"87a52a5f-5fbb-5ad9-8606-70c14fa14f61","type":"domain","category":"Network activity","to_ids":true,"value":"bkngpropadm.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"172ad5c8-26ba-5cda-9f0a-691699ffad2b","type":"url","category":"Network activity","to_ids":true,"value":"http://qmabkngserccaptura.org","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"ef57b1df-5a90-50c4-9da7-6c9bc70c8d18","type":"domain","category":"Network activity","to_ids":true,"value":"admin-extranetrsvrv-captcha.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"ec02f625-dfc8-5c57-b9b5-82ba0ed5ced4","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-extranetrsvrv-captcha.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"3781775b-74ee-5a36-bf24-f5439d72b48a","type":"domain","category":"Network activity","to_ids":true,"value":"admin-extranetrsvrv-cstmrq.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"3915aadb-54e9-50ac-b90a-c12407dc2725","type":"domain","category":"Network activity","to_ids":true,"value":"admin-captcha-properties-09118403.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"c98b09c0-85c9-5471-bc5d-b5b279f31a10","type":"url","category":"Network activity","to_ids":true,"value":"http://extranet-admin-reservations2951.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"c3e4676d-56b8-5610-8d9f-0af75ad3f618","type":"domain","category":"Network activity","to_ids":true,"value":"extranet-admin-reservations2951.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"d40261ed-387b-5540-a048-8f169d5ef7b5","type":"url","category":"Network activity","to_ids":true,"value":"http://bkngpropadm.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"ec2e014b-c1f3-58ee-9b9c-1080e14719e8","type":"domain","category":"Network activity","to_ids":true,"value":"givememy.world","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"86d8faa1-5f14-53cf-80a2-87ab930d5cb9","type":"domain","category":"Network activity","to_ids":true,"value":"admin-captcha-properties-095908403.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"8b701709-b4b3-5474-b7f5-3dd74c068d65","type":"md5","category":"Payload delivery","to_ids":true,"value":"f9de4e403cb8986b73479a20bf5a967f","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"1ca35b25-6087-524b-b6ad-62a441dec91e","type":"url","category":"Network activity","to_ids":true,"value":"http://admin-captcha-properties-09118403.com","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"3a59bc5e-327e-5ef6-ab5b-937ca049da88","type":"url","category":"Network activity","to_ids":true,"value":"http://givememy.world","comment":"https://x.com/skocherhan/status/1954289100120351065","timestamp":"1754773805","distribution":"5"},{"uuid":"3f3c9e97-6af7-5f3d-a5f5-9450a5bf4033","type":"domain","category":"Network activity","to_ids":true,"value":"booking.confirmation-id4481.world","comment":"https://x.com/skocherhan/status/1954289560935870756","timestamp":"1754773914","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"95b32a65-2934-5ce2-b468-2aa88c43e4b4","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.confirmation-id4481.world/TR13GYZL2","comment":"https://x.com/skocherhan/status/1954289560935870756","timestamp":"1754773914","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73e51c93-debf-525e-8c81-7f25feffbb94","type":"domain","category":"Network activity","to_ids":true,"value":"booking.confirmation-id1231.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"2962392c-3e56-58f0-8725-1940414a17fd","type":"domain","category":"Network activity","to_ids":true,"value":"brokenmommah.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"b8f9a79e-62c8-54a2-8604-1ea1746225ce","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.229","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"a44b1e6d-7877-5d4b-beb3-f5091b05fc70","type":"url","category":"Network activity","to_ids":true,"value":"http://filllrooominfo.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"8fa8fd7f-704d-5825-b48f-ddcdacb730c8","type":"domain","category":"Network activity","to_ids":true,"value":"cardverify927-booking.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"eb883243-9f7a-588c-aa07-9fd8f17fbf9c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.229","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"25c78282-bd32-5f45-95e0-0327e01866a2","type":"url","category":"Network activity","to_ids":true,"value":"http://cardverify887-booking.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"b2fb50d0-3625-5512-8409-16e049a5f91b","type":"domain","category":"Network activity","to_ids":true,"value":"cardverify887-booking.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"5cc0628a-7bb1-5c07-bdc6-ea7b63eadf90","type":"domain","category":"Network activity","to_ids":true,"value":"filllrooominfo.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"1e937b06-53d8-58f3-bccd-423adf597b7e","type":"url","category":"Network activity","to_ids":true,"value":"http://brokenmommah.com/7fiy","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"be25efbb-7b73-5a4a-9563-62a55d7aaad7","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.confirmation-id1231.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"fb267e41-d751-590d-9087-8e3e13b8a4dc","type":"url","category":"Network activity","to_ids":true,"value":"http://cardverify927-booking.com","comment":"https://x.com/skocherhan/status/1954291568539521168","timestamp":"1754774393","distribution":"5"},{"uuid":"c09e979f-2fd9-5fb0-b3f6-a2e481f84e3a","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:8880","comment":"https://x.com/drb_ra/status/1954292936058810867","timestamp":"1754774719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ca0534f3-076f-516c-8417-6aaed32ae1b5","type":"url","category":"Network activity","to_ids":true,"value":"https://xxcaocs.556688.eu.org/en_US/all.js","comment":"https://x.com/drb_ra/status/1954292936058810867","timestamp":"1754774719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"519bd2e5-130c-5d3e-9b70-ea9ae19f69e6","type":"domain","category":"Network activity","to_ids":true,"value":"xxcaocs.556688.eu.org","comment":"https://x.com/drb_ra/status/1954292936058810867","timestamp":"1754774719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"54129fb5-4903-5900-af6d-37b80b2c8830","type":"url","category":"Network activity","to_ids":true,"value":"https://onlgpfcu.weebly.com","comment":"https://x.com/urldna_bot/status/1954301690456256722","timestamp":"1754776806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b6ed420c-232e-5a13-9508-5b821fdac072","type":"domain","category":"Network activity","to_ids":true,"value":"onlgpfcu.weebly.com","comment":"https://x.com/urldna_bot/status/1954301690456256722","timestamp":"1754776806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7695c4ed-170d-58bc-a87d-e0710c4755d9","type":"url","category":"Network activity","to_ids":true,"value":"http://58.187.162.82:4444","comment":"https://x.com/drb_ra/status/1954316922067333276","timestamp":"1754780438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1c9af487-dd83-5622-8870-fd0f82650f8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"58.187.162.82","comment":"https://x.com/drb_ra/status/1954316922067333276","timestamp":"1754780438","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d3f07d10-0206-5732-b5dd-c1a7c7f1376e","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.209.44:18443","comment":"https://x.com/drb_ra/status/1954317061070655730","timestamp":"1754780471","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"88d9389f-9ae3-575c-b7e2-02f80172ae1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.209.44","comment":"https://x.com/drb_ra/status/1954317061070655730","timestamp":"1754780471","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0b8fb994-0231-5f60-bcc5-e50d8a5b4b92","type":"url","category":"Network activity","to_ids":true,"value":"http://39.100.85.99:8443","comment":"https://x.com/drb_ra/status/1954317200644505958","timestamp":"1754780504","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"350d4528-698e-5ad8-a509-e06914ab7821","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.100.85.99","comment":"https://x.com/drb_ra/status/1954317200644505958","timestamp":"1754780504","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f73bb7d-7cf0-5298-8cce-40148d70480a","type":"url","category":"Network activity","to_ids":true,"value":"https://39.100.85.99/assets/login_guide.js","comment":"https://x.com/drb_ra/status/1954317200644505958","timestamp":"1754780504","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7317897-3e19-56d7-8e5c-6bb2d63c6886","type":"url","category":"Network activity","to_ids":true,"value":"http://121.36.223.94:4090","comment":"https://x.com/drb_ra/status/1954317339190845652","timestamp":"1754780537","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bf45fecd-eb16-5955-b2d4-ec6d5ca1679c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.36.223.94","comment":"https://x.com/drb_ra/status/1954317339190845652","timestamp":"1754780537","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c6a9ada3-2cab-5438-b5f0-45cca66a9822","type":"url","category":"Network activity","to_ids":true,"value":"http://194.36.188.38:443","comment":"https://x.com/drb_ra/status/1954317986027753771","timestamp":"1754780691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ec95a29-7936-5618-9c17-6441256717a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.36.188.38","comment":"https://x.com/drb_ra/status/1954317986027753771","timestamp":"1754780691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9d2871b4-e375-5e38-b643-30052dded32f","type":"domain","category":"Network activity","to_ids":true,"value":"client.hosthlior.com","comment":"https://x.com/drb_ra/status/1954317986027753771","timestamp":"1754780691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"40c641f9-7806-5e79-91b9-07111169ad3d","type":"url","category":"Network activity","to_ids":true,"value":"https://client.hosthlior.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954317986027753771","timestamp":"1754780691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6bcdc3cb-96c4-5630-b023-5e1ef0dac7b8","type":"domain","category":"Network activity","to_ids":true,"value":"band-jester-3188.typedream.app","comment":"https://x.com/urldna_bot/status/1954331894058787289","timestamp":"1754784007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7089b04f-6081-5168-8b21-2a489d2765d2","type":"url","category":"Network activity","to_ids":true,"value":"https://band-jester-3188.typedream.app","comment":"https://x.com/urldna_bot/status/1954331894058787289","timestamp":"1754784007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5dd43128-4ed4-56b7-a2ea-f456feb2b11a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.238.45.243","comment":"https://x.com/FalconFeedsio/status/1954340028546679003","timestamp":"1754785947","distribution":"5"},{"uuid":"be119c8d-a6c1-53a2-b5bf-095b2d10dc87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.113.151.133","comment":"https://x.com/FalconFeedsio/status/1954340028546679003","timestamp":"1754785947","distribution":"5"},{"uuid":"233892e7-8c3b-5264-934b-55f386388f13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.131.195","comment":"https://x.com/FalconFeedsio/status/1954340028546679003","timestamp":"1754785947","distribution":"5"},{"uuid":"5729388b-a1a0-5c31-8397-9cd631504cb4","type":"md5","category":"Payload delivery","to_ids":true,"value":"DA1C4D9C9762F9755EB52259CBD74316","comment":"https://x.com/fbgwls245/status/1954373943021707658","timestamp":"1754794033","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"c7a00660-c684-5095-a33d-cbe0e3eb8eb2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.142.81.166:10984","comment":"https://x.com/SarlackLab/status/1954377294056751340","timestamp":"1754794832","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"f40fe02c-5ac1-5d7e-8f3b-688903a6f72a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.142.129.56:10984","comment":"https://x.com/SarlackLab/status/1954377294056751340","timestamp":"1754794832","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2a805a98-c1cf-5f19-81db-7fdc520e29de","type":"url","category":"Network activity","to_ids":true,"value":"https://heavyacy.haiyaobei.cn/welcome1SCR.do/","comment":"https://x.com/harugasumi/status/1954378974060216516","timestamp":"1754795232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7307dc25-cd71-586d-8fa6-86b81fd7f219","type":"domain","category":"Network activity","to_ids":true,"value":"heavyacy.haiyaobei.cn","comment":"https://x.com/harugasumi/status/1954378974060216516","timestamp":"1754795232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bae438a4-89d9-5459-ac98-c4042bb8fe16","type":"url","category":"Network activity","to_ids":true,"value":"https://vergaire.hjzfmil.cn/welcomeSCR.do/","comment":"https://x.com/harugasumi/status/1954378974060216516","timestamp":"1754795232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9135ef8f-ebb7-5a0b-b6ce-2ceb2cf164c9","type":"domain","category":"Network activity","to_ids":true,"value":"vergaire.hjzfmil.cn","comment":"https://x.com/harugasumi/status/1954378974060216516","timestamp":"1754795232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15a4be6e-f202-5d9f-815c-10fa8d8b1d92","type":"domain","category":"Network activity","to_ids":true,"value":"punctar.jotaam.cn","comment":"https://x.com/harugasumi/status/1954379551116812666","timestamp":"1754795370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"228928c2-c5c1-5547-af6e-bdd8e053dd3a","type":"url","category":"Network activity","to_ids":true,"value":"https://punctar.jotaam.cn/welcomeSCR.do/","comment":"https://x.com/harugasumi/status/1954379551116812666","timestamp":"1754795370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9dc15cbf-c293-51fa-bf54-b646d0f455d8","type":"domain","category":"Network activity","to_ids":true,"value":"attserverupadte.weebly.com","comment":"https://x.com/urldna_bot/status/1954392292011208743","timestamp":"1754798407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d3662428-afdf-5b39-91fa-daff224584a0","type":"url","category":"Network activity","to_ids":true,"value":"https://attserverupadte.weebly.com","comment":"https://x.com/urldna_bot/status/1954392292011208743","timestamp":"1754798407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d821ddb1-7cae-5f74-b56d-46f9ebca15db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.77.241.176","comment":"https://x.com/Fact_Finder03/status/1954403465339273596","timestamp":"1754801071","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bf5ab4e3-373e-59e3-9cb8-7a6ad9935b62","type":"url","category":"Network activity","to_ids":true,"value":"http://103.77.241.176","comment":"https://x.com/Fact_Finder03/status/1954403465339273596","timestamp":"1754801071","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dc900b97-772d-5733-866a-6a0372a9191f","type":"url","category":"Network activity","to_ids":true,"value":"http://coin-team.com","comment":"https://x.com/djay_scott_/status/1954403790087495986","timestamp":"1754801149","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"453c28d7-9f4a-54b3-b51e-84e17d6482e6","type":"domain","category":"Network activity","to_ids":true,"value":"coin-team.com","comment":"https://x.com/djay_scott_/status/1954403790087495986","timestamp":"1754801149","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"151d548c-8d27-598e-b8a3-a00a8b2bad66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.88.72","comment":"https://x.com/FalconFeedsio/status/1954410780927094985","timestamp":"1754802816","distribution":"5"},{"uuid":"4b5bc8e3-ee56-5cdd-8d67-fccc77ea9c08","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.68.120.30","comment":"https://x.com/FalconFeedsio/status/1954410780927094985","timestamp":"1754802816","distribution":"5"},{"uuid":"4b07a552-53b9-5dcd-b4b3-0cc61f056c3f","type":"md5","category":"Payload delivery","to_ids":true,"value":"fbcda14164fbbf9e287321fa314422bd","comment":"https://x.com/ReBensk/status/1954412651951362430","timestamp":"1754803262","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"14357248-48f3-5385-b567-eeafded3a685","type":"domain","category":"Network activity","to_ids":true,"value":"rutefree.com.ng","comment":"https://x.com/urldna_bot/status/1954422506627998096","timestamp":"1754805611","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7138dc36-1ccd-502d-9887-5625a8952f00","type":"url","category":"Network activity","to_ids":true,"value":"https://rutefree.com.ng","comment":"https://x.com/urldna_bot/status/1954422506627998096","timestamp":"1754805611","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c4f71c07-3684-58e0-8036-ab78acadb3c5","type":"url","category":"Network activity","to_ids":true,"value":"http://52.86.155.242:443","comment":"https://x.com/drb_ra/status/1954434235214840268","timestamp":"1754808407","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a7bd71e7-1c2e-5f60-9f2e-18bc412db7d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.86.155.242","comment":"https://x.com/drb_ra/status/1954434372926374337","timestamp":"1754808440","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b64973c8-c95a-55f1-ab25-edc2f859b96d","type":"url","category":"Network activity","to_ids":true,"value":"http://52.86.155.242:80","comment":"https://x.com/drb_ra/status/1954434372926374337","timestamp":"1754808440","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"508c8079-c073-597c-bec2-2d6c0118de06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.89.150","comment":"https://x.com/drb_ra/status/1954434510684033467","timestamp":"1754808473","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"112c411d-c885-51fe-85d6-6cbdcd6c810b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.89.150:80","comment":"https://x.com/drb_ra/status/1954434510684033467","timestamp":"1754808473","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dfebf9a1-5440-5673-815d-7102ccf58065","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.103.204:8443","comment":"https://x.com/drb_ra/status/1954434647875633570","timestamp":"1754808506","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e842a079-48ee-5be5-848d-9bbc41bc3998","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.103.204","comment":"https://x.com/drb_ra/status/1954434647875633570","timestamp":"1754808506","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"db19928b-e356-5499-8061-654e43e9f2c5","type":"url","category":"Network activity","to_ids":true,"value":"http://158.69.197.228:443","comment":"https://x.com/drb_ra/status/1954434785385775290","timestamp":"1754808539","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"3ae918fc-7e31-5d65-b179-253d0da50460","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.69.197.228","comment":"https://x.com/drb_ra/status/1954434785385775290","timestamp":"1754808539","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4cb5c9c1-b708-517a-859d-e50474847a1f","type":"url","category":"Network activity","to_ids":true,"value":"http://85.120.81.84:80","comment":"https://x.com/drb_ra/status/1954434923575562744","timestamp":"1754808572","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"186409df-c943-50d0-9a5f-0cb0aa040c71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.120.81.84","comment":"https://x.com/drb_ra/status/1954434923575562744","timestamp":"1754808572","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"03356a1b-237d-5751-9114-6cfe18839056","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.142.142.196","comment":"https://x.com/drb_ra/status/1954435061673025757","timestamp":"1754808605","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b341486d-f71a-5a54-bbab-27d5b52f92bb","type":"url","category":"Network activity","to_ids":true,"value":"http://98.142.142.196:443","comment":"https://x.com/drb_ra/status/1954435061673025757","timestamp":"1754808605","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a0e0c683-64f3-5e64-9f25-fe3a5bc5f5b1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.200.27.161:443","comment":"https://x.com/drb_ra/status/1954435199569166585","timestamp":"1754808637","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"bb8b06b5-ea38-594f-a750-b565400b68ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.200.27.161","comment":"https://x.com/drb_ra/status/1954435199569166585","timestamp":"1754808637","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"02b9d738-249b-525c-a526-bfd1cc12206a","type":"url","category":"Network activity","to_ids":true,"value":"http://165.232.41.180:7443","comment":"https://x.com/drb_ra/status/1954435337746272597","timestamp":"1754808670","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0bf94fb6-9185-5b72-9574-7bebfc695821","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.232.41.180","comment":"https://x.com/drb_ra/status/1954435337746272597","timestamp":"1754808670","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"835e7781-c952-5596-bbc2-d09de7988af2","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.174.51:7443","comment":"https://x.com/drb_ra/status/1954435476196139181","timestamp":"1754808703","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"538d9071-42b8-56b2-8c2a-e00d211f246c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.174.51","comment":"https://x.com/drb_ra/status/1954435476196139181","timestamp":"1754808703","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cf77e1d3-1638-506d-bac9-39fb4f17eb4a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.95.36.98:80","comment":"https://x.com/drb_ra/status/1954435615128273137","timestamp":"1754808736","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"8c69dbe0-cb4c-5c1a-9e31-dd1e0d1e8b57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.95.36.98","comment":"https://x.com/drb_ra/status/1954435615128273137","timestamp":"1754808736","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"7895d440-53dd-563e-aaf4-158c98d3d094","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.83.207.173","comment":"https://x.com/drb_ra/status/1954435752776901048","timestamp":"1754808769","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d26385a8-0551-5858-8848-002f05584ed1","type":"url","category":"Network activity","to_ids":true,"value":"http://77.83.207.173:31337","comment":"https://x.com/drb_ra/status/1954435752776901048","timestamp":"1754808769","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8cf54257-1518-56a9-90dd-9316d90d1728","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.133.1.120","comment":"https://x.com/drb_ra/status/1954436398062215306","timestamp":"1754808923","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4c9acb3e-5bb5-5b8e-b4aa-d348ea7d4acd","type":"url","category":"Network activity","to_ids":true,"value":"http://195.133.1.120:4321","comment":"https://x.com/drb_ra/status/1954436398062215306","timestamp":"1754808923","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"659ac6f7-4854-568a-a3ae-eda15dc5fdfd","type":"url","category":"Network activity","to_ids":true,"value":"http://46.137.225.200:443","comment":"https://x.com/drb_ra/status/1954436535740150052","timestamp":"1754808956","distribution":"5","Tag":[{"name":"C2"},{"name":"SocGholish"}]},{"uuid":"531ad97d-f87d-509e-b3ae-34d48785285e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.137.225.200","comment":"https://x.com/drb_ra/status/1954436535740150052","timestamp":"1754808956","distribution":"5","Tag":[{"name":"C2"},{"name":"SocGholish"}]},{"uuid":"b9ddfe0a-5b2b-5457-8ac2-6cb8452a1570","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.57.113:36154","comment":"https://x.com/drb_ra/status/1954436677243437373","timestamp":"1754808990","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"e178638d-ce3a-5901-91ac-0aa21d2452fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.57.113","comment":"https://x.com/drb_ra/status/1954436677243437373","timestamp":"1754808990","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"28c8b92f-c212-5f4e-a424-7bbb307bcdec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.11.162.63","comment":"https://x.com/drb_ra/status/1954436818008461562","timestamp":"1754809023","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"9c34dc3a-b787-54bf-a13b-b39ab9bce2e0","type":"url","category":"Network activity","to_ids":true,"value":"http://123.11.162.63:3232","comment":"https://x.com/drb_ra/status/1954436818008461562","timestamp":"1754809023","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"bf962d34-59f3-59e5-97fd-7a05e8162c65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.121.150.114","comment":"https://x.com/drb_ra/status/1954436958333157710","timestamp":"1754809057","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"6928764d-e13d-5964-b36f-23acd10aa6e6","type":"url","category":"Network activity","to_ids":true,"value":"http://74.121.150.114:3232","comment":"https://x.com/drb_ra/status/1954436958333157710","timestamp":"1754809057","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"d9ed9a1d-cca4-51c7-a820-cb0ca96677a7","type":"url","category":"Network activity","to_ids":true,"value":"http://16.50.41.216:3260","comment":"https://x.com/drb_ra/status/1954437096745189870","timestamp":"1754809090","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"80e735d0-aedb-5d7f-bd07-92bb72cb210c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.50.41.216","comment":"https://x.com/drb_ra/status/1954437096745189870","timestamp":"1754809090","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c08df7e3-8c24-5c30-adbe-769ca033a304","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.204.30.122","comment":"https://x.com/drb_ra/status/1954437234624541066","timestamp":"1754809123","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"03c9c04a-ab5e-545b-a304-433283da2275","type":"url","category":"Network activity","to_ids":true,"value":"http://43.204.30.122:48591","comment":"https://x.com/drb_ra/status/1954437234624541066","timestamp":"1754809123","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ac41d5e8-10c7-50a4-8412-4ee6c2d15864","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.120.22.121","comment":"https://x.com/drb_ra/status/1954437511209513359","timestamp":"1754809189","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6bbdc54f-e86f-56c8-a8c2-fa1b4a03f808","type":"url","category":"Network activity","to_ids":true,"value":"http://196.120.22.121:443","comment":"https://x.com/drb_ra/status/1954437511209513359","timestamp":"1754809189","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"969dcba2-fdfc-5226-b969-603e8420fb44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.127.128.145","comment":"https://x.com/drb_ra/status/1954437649445401029","timestamp":"1754809221","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e86135a9-92e9-5e62-883b-5194b1b2f616","type":"url","category":"Network activity","to_ids":true,"value":"http://93.127.128.145:80","comment":"https://x.com/drb_ra/status/1954437649445401029","timestamp":"1754809221","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9b4e3463-17b0-564e-9fc0-5fcc219a77de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.198.131.211","comment":"https://x.com/drb_ra/status/1954437787869942250","timestamp":"1754809254","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"219c8d96-c0d3-5cb7-b951-0c86c45f46b6","type":"url","category":"Network activity","to_ids":true,"value":"http://143.198.131.211:465","comment":"https://x.com/drb_ra/status/1954437787869942250","timestamp":"1754809254","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e289ea20-bd1e-52e8-a966-428ac43adb7f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.28.191:25","comment":"https://x.com/drb_ra/status/1954437926089072959","timestamp":"1754809287","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e6b644e5-5cb8-5c72-85e1-67fa42c2640b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.28.191:587","comment":"https://x.com/drb_ra/status/1954438195241730550","timestamp":"1754809352","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"387e5920-a9fa-5422-95ac-f1bb10c245ae","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.28.191:465","comment":"https://x.com/drb_ra/status/1954439420632858865","timestamp":"1754809644","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"59ac55d1-91d8-50e1-804b-21d1f7872e4f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.28.191:80","comment":"https://x.com/drb_ra/status/1954439559204212882","timestamp":"1754809677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"71fe822e-418c-58e6-b03b-aacf05e802fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.233.28.191","comment":"https://x.com/drb_ra/status/1954439559204212882","timestamp":"1754809677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1adaa718-efb7-5130-870a-6a9ca7485bd6","type":"url","category":"Network activity","to_ids":true,"value":"https://ban1k-cyprus.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1954452707877572708","timestamp":"1754812812","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"780beaac-57d4-5bde-9d69-b1f96cf41693","type":"domain","category":"Network activity","to_ids":true,"value":"ban1k-cyprus.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1954452707877572708","timestamp":"1754812812","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3bb7328c-2d33-5d49-bb35-6b18c9b98be5","type":"url","category":"Network activity","to_ids":true,"value":"https://carot-mate-sp-trxk.vercel.app/change-profile/Notifications.fb.com-help_1005165994166600.html","comment":"https://x.com/urldna_bot/status/1954482887685714297","timestamp":"1754820007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"30d81c44-0c1d-5840-9742-c94b89ae2807","type":"domain","category":"Network activity","to_ids":true,"value":"carot-mate-sp-trxk.vercel.app","comment":"https://x.com/urldna_bot/status/1954482887685714297","timestamp":"1754820007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ed202c8b-8367-58cb-b4ba-96df31b3a6da","type":"domain","category":"Network activity","to_ids":true,"value":"fsankmas.it.com:7432","comment":"https://x.com/skocherhan/status/1954498268538257820","timestamp":"1754823674","distribution":"5"},{"uuid":"88ce252c-5acf-5527-9a51-a46bb42758e2","type":"url","category":"Network activity","to_ids":true,"value":"http://fsankmas.it.com:7432","comment":"https://x.com/skocherhan/status/1954498268538257820","timestamp":"1754823674","distribution":"5"},{"uuid":"180b61cc-fdf6-58ea-bb46-da3d86ae5a43","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.230.144:443","comment":"https://x.com/drb_ra/status/1954499034971852816","timestamp":"1754823857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8e2baaf6-fe62-5a29-bb3f-2c7f2d42c493","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.230.144","comment":"https://x.com/drb_ra/status/1954499034971852816","timestamp":"1754823857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"15606d58-9e55-5806-a9bc-f4aaac022905","type":"domain","category":"Network activity","to_ids":true,"value":"gqwy.net","comment":"https://x.com/drb_ra/status/1954499034971852816","timestamp":"1754823857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"be51b9c4-7bd0-5f72-b9e2-7cef9ff448ad","type":"url","category":"Network activity","to_ids":true,"value":"https://gqwy.net/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954499034971852816","timestamp":"1754823857","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f17e2d6-3e06-5ea5-9c4c-7319caef2765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.36.125.58","comment":"https://x.com/drb_ra/status/1954499173530644561","timestamp":"1754823890","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8be28af6-11c8-5d38-bfb5-f94a03082c71","type":"url","category":"Network activity","to_ids":true,"value":"http://101.36.125.58:443","comment":"https://x.com/drb_ra/status/1954499173530644561","timestamp":"1754823890","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5ef9ab6c-6647-5820-a67f-224e181c15c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.221.4","comment":"https://x.com/drb_ra/status/1954499311229673902","timestamp":"1754823923","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"16ccbc31-dce9-5a9d-b8ad-49704feace2c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.221.4:4443","comment":"https://x.com/drb_ra/status/1954499311229673902","timestamp":"1754823923","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"588fbaa9-e3eb-59c1-8934-8e0b21979a92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.103.138.13","comment":"https://x.com/drb_ra/status/1954499451982147982","timestamp":"1754823956","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3bb3b3b5-4881-50c8-9fdd-9198ab11f1f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.199.106.126","comment":"https://x.com/drb_ra/status/1954499451982147982","timestamp":"1754823956","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a824e42-5fa2-57ab-99a8-feedad19d19c","type":"url","category":"Network activity","to_ids":true,"value":"https://14.103.138.13/admin/compute/Server/v4.04/API/IX36ML5FCM5ES","comment":"https://x.com/drb_ra/status/1954499451982147982","timestamp":"1754823956","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d4498242-df4d-5ccd-8e49-708e7dfcd0c1","type":"url","category":"Network activity","to_ids":true,"value":"http://103.199.106.126:3389","comment":"https://x.com/drb_ra/status/1954499451982147982","timestamp":"1754823956","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c2bcda94-6321-540c-a0af-157049053eb4","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e8cafd32f61d2f4dc1775b3b491c2ae67dc99eafab5e65d82228fc1d9cabbb9e","comment":"https://x.com/skocherhan/status/1954506072426725718","timestamp":"1754825535","distribution":"5"},{"uuid":"e7e64d37-7af7-5fd7-a27f-4b89025f053c","type":"md5","category":"Payload delivery","to_ids":true,"value":"bd9b33d87c168387b1d3532266c8cce1","comment":"https://x.com/skocherhan/status/1954506072426725718","timestamp":"1754825535","distribution":"5"},{"uuid":"a144a6cb-e0f2-521e-85e6-a23482facd6d","type":"url","category":"Network activity","to_ids":true,"value":"http://megosk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"23fa557f-7f04-5e9f-8dc7-17990ed7010c","type":"url","category":"Network activity","to_ids":true,"value":"http://sdxbos.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"f5acdfe7-7ae3-5576-9e99-3aa8968dbbad","type":"domain","category":"Network activity","to_ids":true,"value":"sdxbos.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"3483ebb8-925e-5e42-bf17-3a07db72cb55","type":"domain","category":"Network activity","to_ids":true,"value":"gomesc.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2d27a523-a5c2-5d5e-ae3a-4e37958dea9c","type":"url","category":"Network activity","to_ids":true,"value":"http://gomesc.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"8b2caba4-40ad-5a1e-accc-49a4be91d6a3","type":"domain","category":"Network activity","to_ids":true,"value":"stoclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"e94cd7e2-5374-5c22-ae29-394be3b069ed","type":"url","category":"Network activity","to_ids":true,"value":"http://gsoclk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"0ff110b7-c2eb-538e-a34b-a09effc9f07d","type":"domain","category":"Network activity","to_ids":true,"value":"scolob.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"871de074-2c7f-53dd-b09d-16ed2e16a4f4","type":"domain","category":"Network activity","to_ids":true,"value":"vgsonx.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"ac25b289-bd0c-5138-8107-e7c224b0dbfe","type":"url","category":"Network activity","to_ids":true,"value":"http://versob.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"eb36b2dd-cfc0-5469-b038-c2df31e1670b","type":"url","category":"Network activity","to_ids":true,"value":"http://vgsonx.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2c1d6622-d37f-58a8-9155-116cdf08253e","type":"domain","category":"Network activity","to_ids":true,"value":"vebolo.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2e8c1ce5-9795-56c2-bd2d-9541e21d9930","type":"url","category":"Network activity","to_ids":true,"value":"http://vebolo.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"8ed0c52c-ea46-5206-8696-5e7dc5ef86f3","type":"domain","category":"Network activity","to_ids":true,"value":"megosk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"5522aca6-ad1f-5af0-9a2a-82850b632bf3","type":"url","category":"Network activity","to_ids":true,"value":"http://wsclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"7e4f0988-ef1b-59f3-a290-5882fc983be0","type":"domain","category":"Network activity","to_ids":true,"value":"versob.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"59be4036-4402-54c4-a912-bc9ea1c2b246","type":"domain","category":"Network activity","to_ids":true,"value":"gsoclk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2f04a575-c6f2-55c7-957d-b5f6a69515ce","type":"url","category":"Network activity","to_ids":true,"value":"http://scolob.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"ba802f1e-a019-5ea5-adb2-28395c4920e1","type":"domain","category":"Network activity","to_ids":true,"value":"vesbclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"7ab740e9-b8fe-5bbd-9551-94ff43ac543d","type":"url","category":"Network activity","to_ids":true,"value":"http://stoclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"a9e98cf6-da91-5818-824c-b2440f9413a1","type":"domain","category":"Network activity","to_ids":true,"value":"axoclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"a0b61fb8-72be-558c-b4bf-0197299e97b1","type":"url","category":"Network activity","to_ids":true,"value":"http://axoclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"1b326096-24c1-5eaf-afc3-11d66bbebd8b","type":"domain","category":"Network activity","to_ids":true,"value":"trckox.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2e5660eb-aaaa-5c3c-bd0f-fdd55c5d3ec2","type":"url","category":"Network activity","to_ids":true,"value":"http://trckox.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"00ab0983-738a-59a9-b4b5-887144b76665","type":"domain","category":"Network activity","to_ids":true,"value":"trosvk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2e87af3d-4b6a-5fef-beb2-892b37f95005","type":"url","category":"Network activity","to_ids":true,"value":"http://abvtrk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"72440820-3cac-50ba-ad2f-76021953af28","type":"domain","category":"Network activity","to_ids":true,"value":"bsotrck.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"ecea5165-78b7-58f6-ab8c-c35252352622","type":"url","category":"Network activity","to_ids":true,"value":"http://vesbclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"2161aa55-b60f-514c-b582-0c83621934cf","type":"domain","category":"Network activity","to_ids":true,"value":"abvtrk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"667ab5f4-d961-50c2-9f97-878e1d58fbcb","type":"url","category":"Network activity","to_ids":true,"value":"http://bsotrck.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"fb044b23-caa5-5ff0-9b17-764ac4d1ee60","type":"domain","category":"Network activity","to_ids":true,"value":"xsotrk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"5c155b88-841d-5229-a734-9be903039e35","type":"url","category":"Network activity","to_ids":true,"value":"http://xsotrk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"18ece87b-eaca-59c0-8ed3-28067e3bd533","type":"domain","category":"Network activity","to_ids":true,"value":"brusvs.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"0e4695ad-f5b4-50ae-aac2-29123cfeb506","type":"domain","category":"Network activity","to_ids":true,"value":"wsclick.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"37070c54-b81d-5345-8d5b-891c06102fba","type":"url","category":"Network activity","to_ids":true,"value":"http://trosvk.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"79dbdbfc-8f57-5d28-9d38-f6b4d3eecf56","type":"url","category":"Network activity","to_ids":true,"value":"http://brusvs.com","comment":"https://x.com/skocherhan/status/1954508431768895566","timestamp":"1754826097","distribution":"5"},{"uuid":"7a7e53ad-d8ed-5938-86d0-c6f66e121832","type":"domain","category":"Network activity","to_ids":true,"value":"dianecadei8.wixsite.com","comment":"https://x.com/urldna_bot/status/1954513084451631542","timestamp":"1754827207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a0dfe15e-ca95-56fe-9b87-95d975e4c01e","type":"url","category":"Network activity","to_ids":true,"value":"http://dianecadei8.wixsite.com/my-site-1","comment":"https://x.com/urldna_bot/status/1954513084451631542","timestamp":"1754827207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"52bff1c1-4cad-520c-8a68-b5e3609e08dd","type":"md5","category":"Payload delivery","to_ids":true,"value":"963bc156f51d17f24dd51eccfbf2919b","comment":"https://x.com/skocherhan/status/1954513648933634058","timestamp":"1754827341","distribution":"5"},{"uuid":"ee74c9ba-bee1-51a8-9e73-6d7a1d8de21e","type":"url","category":"Network activity","to_ids":true,"value":"http://oh-my-oh.my/Stb/PokerFace/init.php?id=o6wIHWjMGAygt","comment":"https://x.com/skocherhan/status/1954517710424957292","timestamp":"1754828310","distribution":"5"},{"uuid":"99f23ab2-b6fa-5e28-89c5-b9a0da342200","type":"domain","category":"Network activity","to_ids":true,"value":"oh-my-oh.my","comment":"https://x.com/skocherhan/status/1954517710424957292","timestamp":"1754828310","distribution":"5"},{"uuid":"62b18987-6671-52af-b6b4-7b97d3aa65c7","type":"md5","category":"Payload delivery","to_ids":true,"value":"626521c1cfee892f240561fa4a7c4177","comment":"https://x.com/skocherhan/status/1954517710424957292","timestamp":"1754828310","distribution":"5"},{"uuid":"1196a8f1-d642-51a3-9e80-d327bf1dd1a2","type":"url","category":"Network activity","to_ids":true,"value":"http://hhpfresh.com","comment":"https://x.com/skocherhan/status/1954519511538835642","timestamp":"1754828739","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"c1f38973-18d0-56fa-895a-8684a7f33ed1","type":"domain","category":"Network activity","to_ids":true,"value":"hhpfresh.com","comment":"https://x.com/skocherhan/status/1954519511538835642","timestamp":"1754828739","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"9d4c30bc-605e-5c7d-bdd7-70538e432a98","type":"md5","category":"Payload delivery","to_ids":true,"value":"c81ad51852058a3696244a37f3e8152c","comment":"https://x.com/skocherhan/status/1954519511538835642","timestamp":"1754828739","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"b957c367-d9e2-50e2-a554-2efe27e9c80c","type":"domain","category":"Network activity","to_ids":true,"value":"mail.hhpfresh.com","comment":"https://x.com/skocherhan/status/1954519511538835642","timestamp":"1754828739","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"8cdda516-2067-5d5c-9e1f-59d3b5503d01","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.hhpfresh.com","comment":"https://x.com/skocherhan/status/1954519511538835642","timestamp":"1754828739","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"46f03d9e-da5a-53c5-aacf-f2bcf6c4fd30","type":"md5","category":"Payload delivery","to_ids":true,"value":"fd1c8dd8f87aedd8be39a7f611a5317e","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"c2b968b7-55fd-5f11-b22f-159b856e392a","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.fgiltd.com.pk","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"ad13cf65-f60f-501f-b14c-1549ed392b67","type":"domain","category":"Network activity","to_ids":true,"value":"mail.fgiltd.com.pk","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"e6c329b2-e7d0-5305-9e38-b3297c02eac7","type":"domain","category":"Network activity","to_ids":true,"value":"fgiltd.com.pk","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"747a7a23-7b83-5a9a-ac63-c69f9d2e1cb7","type":"url","category":"Network activity","to_ids":true,"value":"http://onionmail.org","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"0559fd50-90d6-5364-ae5b-f181bace829a","type":"domain","category":"Network activity","to_ids":true,"value":"onionmail.org","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"de52ab19-5b92-5bf4-ac0f-fbec612d5f3a","type":"url","category":"Network activity","to_ids":true,"value":"http://fgiltd.com.pk","comment":"https://x.com/skocherhan/status/1954522213303939518","timestamp":"1754829383","distribution":"5"},{"uuid":"6d2a57bf-69d8-5274-a51e-e10d39dc0fe7","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.v5infotech.com","comment":"https://x.com/skocherhan/status/1954523830115856658","timestamp":"1754829769","distribution":"5"},{"uuid":"9a6a1ab1-67b8-5678-84fb-2bb56ef4f127","type":"domain","category":"Network activity","to_ids":true,"value":"v5infotech.com","comment":"https://x.com/skocherhan/status/1954523830115856658","timestamp":"1754829769","distribution":"5"},{"uuid":"e47f5232-8ab2-5953-98b5-df079b4fdd6c","type":"url","category":"Network activity","to_ids":true,"value":"http://v5infotech.com","comment":"https://x.com/skocherhan/status/1954523830115856658","timestamp":"1754829769","distribution":"5"},{"uuid":"7b76e773-6575-59ab-b145-ddea514d45a0","type":"domain","category":"Network activity","to_ids":true,"value":"mail.v5infotech.com","comment":"https://x.com/skocherhan/status/1954523830115856658","timestamp":"1754829769","distribution":"5"},{"uuid":"2cc0661f-38d1-5b62-b931-a4560fdd0758","type":"md5","category":"Payload delivery","to_ids":true,"value":"a7f94c1c466bd19f01ca9c354be773d6","comment":"https://x.com/skocherhan/status/1954523830115856658","timestamp":"1754829769","distribution":"5"},{"uuid":"0404440e-a69d-5ed2-8240-2895a3be6662","type":"domain","category":"Network activity","to_ids":true,"value":"akberinxchtaingasioad.cfolks.pl","comment":"https://x.com/AddressIntel/status/1954528180372418763","timestamp":"1754830806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"896b822d-c027-5977-931b-28c55767fbf6","type":"url","category":"Network activity","to_ids":true,"value":"https://akberinxchtaingasioad.cfolks.pl/ae/","comment":"https://x.com/AddressIntel/status/1954528180372418763","timestamp":"1754830806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0849b87e-bb1e-52ac-87e9-099af2cc6041","type":"domain","category":"Network activity","to_ids":true,"value":"updateweekslawfirm.weebly.com","comment":"https://x.com/urldna_bot/status/1954543282924523864","timestamp":"1754834406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b142f40f-183f-559f-92e9-485dc6c1eca9","type":"url","category":"Network activity","to_ids":true,"value":"https://updateweekslawfirm.weebly.com","comment":"https://x.com/urldna_bot/status/1954543282924523864","timestamp":"1754834406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8abdf419-2955-54a7-8fcf-62aed87d7a25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.80.150.20","comment":"https://x.com/FalconFeedsio/status/1954546836133589459","timestamp":"1754835254","distribution":"5"},{"uuid":"842f5b97-f9f5-5218-905c-a1b5f50a487f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.224.166.163","comment":"https://x.com/FalconFeedsio/status/1954546836133589459","timestamp":"1754835254","distribution":"5"},{"uuid":"7f411be2-5adb-5eff-8a3c-be7559ecebce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.224.141.87","comment":"https://x.com/FalconFeedsio/status/1954546836133589459","timestamp":"1754835254","distribution":"5"},{"uuid":"5925a803-8980-56b9-a8a7-662dd90515d4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.73.105:8888/Yek4","comment":"https://x.com/skocherhan/status/1954550882470666385","timestamp":"1754836218","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"2459fbcd-b44b-53d4-8fd9-a288bafb7adf","type":"md5","category":"Payload delivery","to_ids":true,"value":"41221308d9a42d8806fc5b01c8294b74","comment":"https://x.com/skocherhan/status/1954550882470666385","timestamp":"1754836218","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"7b57a099-2759-5f1c-ba1d-b2770ee727df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.150.159","comment":"https://x.com/skocherhan/status/1954551532914909503","timestamp":"1754836373","distribution":"5"},{"uuid":"d7c0c52b-f6c5-5db4-944e-f461e627e60c","type":"md5","category":"Payload delivery","to_ids":true,"value":"58baec37e77f6f7f4339b4557ce9cc57","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"d5474b68-316a-52e0-ac79-edc1127ffdb0","type":"url","category":"Network activity","to_ids":true,"value":"http://50.16.27.236","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"6629fb98-9bc9-5b4d-9fdb-51df7c0a7295","type":"url","category":"Network activity","to_ids":true,"value":"http://18.206.193.214","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"4c95ec63-152a-56ce-9014-c6f41e8e527c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.16.27.236","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"6e4da31e-11fb-5427-998b-4a90a9e5b9c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.206.193.214","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"bd38478e-a9a1-5024-91c5-9d179aa3eebe","type":"md5","category":"Payload delivery","to_ids":true,"value":"f46e75eb89214e2fbb850b9d29b9f515","comment":"https://x.com/skocherhan/status/1954559167345107439","timestamp":"1754838194","distribution":"5"},{"uuid":"f533f652-5f57-5072-80a1-6f89de5c1992","type":"domain","category":"Network activity","to_ids":true,"value":"Railway.app","comment":"https://x.com/volrant136/status/1954575077359698237","timestamp":"1754841987","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"7df2be3e-ac5e-5ef8-8332-a59b11aab45c","type":"url","category":"Network activity","to_ids":true,"value":"http://Railway.app","comment":"https://x.com/volrant136/status/1954575077359698237","timestamp":"1754841987","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"9d83afa5-b4c9-50b9-a19c-38497f9d7575","type":"domain","category":"Network activity","to_ids":true,"value":"b4a.run","comment":"https://x.com/volrant136/status/1954575077359698237","timestamp":"1754841987","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"6f8e5bf1-ea8f-5edc-8ca1-2cf19cc27507","type":"url","category":"Network activity","to_ids":true,"value":"http://b4a.run","comment":"https://x.com/volrant136/status/1954575077359698237","timestamp":"1754841987","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"212895b9-2b24-5493-91de-49dc49c83f11","type":"url","category":"Network activity","to_ids":true,"value":"http://ipfs.io/ipfs/bafkreiewieynqaoei4caalqxekavydaubxjmvt3pzhwc3m7onqbmgt7kra","comment":"https://x.com/skocherhan/status/1954577737516998922","timestamp":"1754842621","distribution":"5"},{"uuid":"e4f112c5-6276-59fa-ada4-b50bb0c404e9","type":"url","category":"Network activity","to_ids":true,"value":"http://ipfs.io/ipfs/bafkreif5db4anetxsnviuz2iisapfrrvrkbgg643r2uizpok3nw3el4zi4","comment":"https://x.com/skocherhan/status/1954578752546971741","timestamp":"1754842863","distribution":"5"},{"uuid":"25dc4f44-7b2e-591d-abec-e9c16b6d2bc2","type":"domain","category":"Network activity","to_ids":true,"value":"fab-gov-pk-account.pages.dev","comment":"https://x.com/skocherhan/status/1954580204350820851","timestamp":"1754843209","distribution":"5"},{"uuid":"cd0f340c-037b-54b0-b36c-492343bd709b","type":"url","category":"Network activity","to_ids":true,"value":"http://fab-gov-pk-account.pages.dev","comment":"https://x.com/skocherhan/status/1954580204350820851","timestamp":"1754843209","distribution":"5"},{"uuid":"62a391be-da26-519b-8c76-bda2927e1f50","type":"domain","category":"Network activity","to_ids":true,"value":"peakauthorization.pages.dev","comment":"https://x.com/skocherhan/status/1954581154406813744","timestamp":"1754843436","distribution":"5"},{"uuid":"488be058-b3be-54a0-ad58-040a4902f0f5","type":"url","category":"Network activity","to_ids":true,"value":"http://peakauthorization.pages.dev/peak.org","comment":"https://x.com/skocherhan/status/1954581154406813744","timestamp":"1754843436","distribution":"5"},{"uuid":"442fa3c0-6462-5558-9ada-39d3e9674b9f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/skocherhan/status/1954582153389293867","timestamp":"1754843674","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1230548a-f34f-5a82-a83d-8693531e998a","type":"url","category":"Network activity","to_ids":true,"value":"http://mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/skocherhan/status/1954582153389293867","timestamp":"1754843674","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"6ff6fea3-7318-5d62-a75e-be3fc3ad60f1","type":"url","category":"Network activity","to_ids":true,"value":"http://sapt-com-pk-account-login.pages.dev","comment":"https://x.com/skocherhan/status/1954582650150154396","timestamp":"1754843792","distribution":"5"},{"uuid":"400bd5ba-c3f9-5e9c-9502-93c3b18348f1","type":"domain","category":"Network activity","to_ids":true,"value":"sapt-com-pk-account-login.pages.dev","comment":"https://x.com/skocherhan/status/1954582650150154396","timestamp":"1754843792","distribution":"5"},{"uuid":"faa0ec2a-9b81-540f-9256-9265dfa0ec91","type":"domain","category":"Network activity","to_ids":true,"value":"mail-ntc-net-pk.netlify.app","comment":"https://x.com/skocherhan/status/1954583251101569191","timestamp":"1754843936","distribution":"5"},{"uuid":"6732378a-7956-5853-83b9-4ac6d319db69","type":"url","category":"Network activity","to_ids":true,"value":"http://mail-ntc-net-pk.netlify.app","comment":"https://x.com/skocherhan/status/1954583251101569191","timestamp":"1754843936","distribution":"5"},{"uuid":"35b37b4c-601d-54a4-b4ec-3a76759434e3","type":"domain","category":"Network activity","to_ids":true,"value":"user-auth-apply-to-visit-stay-in-the-uk-homeoffice-gov-uk.com","comment":"https://x.com/skocherhan/status/1954587563076825524","timestamp":"1754844964","distribution":"5"},{"uuid":"b64f05e7-b205-5d21-ad06-a1bd681fcef4","type":"url","category":"Network activity","to_ids":true,"value":"http://user-auth-apply-to-visit-stay-in-the-uk-homeoffice-gov-uk.com","comment":"https://x.com/skocherhan/status/1954587563076825524","timestamp":"1754844964","distribution":"5"},{"uuid":"3e9df9e3-aed7-544a-a130-9cf353ffc7fc","type":"md5","category":"Payload delivery","to_ids":true,"value":"04e6de5d41b5dec201286490bf56de9a","comment":"https://x.com/ReBensk/status/1954589142861705611","timestamp":"1754845340","distribution":"5","Tag":[{"name":"malware"},{"name":"Trojan"},{"name":"Android"}]},{"uuid":"397fba28-8a17-5ffe-9c6c-6b60864c9190","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.163.134.250","comment":"https://x.com/FalconFeedsio/status/1954604139272626580","timestamp":"1754848916","distribution":"5"},{"uuid":"7547bd5d-b867-5e07-8d67-d4d19bd3402d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.23.97.97","comment":"https://x.com/FalconFeedsio/status/1954604139272626580","timestamp":"1754848916","distribution":"5"},{"uuid":"be576e87-68d7-5c9c-b75b-9d9637c7c9c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.99.126.52","comment":"https://x.com/drb_ra/status/1954615194195464601","timestamp":"1754851551","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"799f361a-884d-5c26-8d84-0d94295bc5d6","type":"url","category":"Network activity","to_ids":true,"value":"http://167.99.126.52:443","comment":"https://x.com/drb_ra/status/1954615194195464601","timestamp":"1754851551","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"03eded8b-9833-5062-9684-c0ae9911e97e","type":"url","category":"Network activity","to_ids":true,"value":"http://94.156.232.202:443","comment":"https://x.com/drb_ra/status/1954615839732179007","timestamp":"1754851705","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8654b7f4-b9a0-5220-9c37-1982eae0f645","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.156.232.202","comment":"https://x.com/drb_ra/status/1954615839732179007","timestamp":"1754851705","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"25c766de-e53e-57b9-8637-32c8ee842349","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.213.72:53105","comment":"https://x.com/drb_ra/status/1954615978245116124","timestamp":"1754851738","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ba206a7d-d48c-59d8-baf2-833fbba43500","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.213.72","comment":"https://x.com/drb_ra/status/1954615978245116124","timestamp":"1754851738","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"5b3efac3-19e6-51b9-bd27-a1f8b74b71ff","type":"url","category":"Network activity","to_ids":true,"value":"http://5.231.1.70:8080","comment":"https://x.com/drb_ra/status/1954616116896268436","timestamp":"1754851771","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7a0a033e-87dd-58ba-ad17-15492fd63338","type":"url","category":"Network activity","to_ids":true,"value":"http://51.17.5.111:4443","comment":"https://x.com/drb_ra/status/1954616255387730082","timestamp":"1754851804","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"739c88e8-aa63-5a3a-9c4c-3c8cf5a57069","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.17.5.111","comment":"https://x.com/drb_ra/status/1954616255387730082","timestamp":"1754851804","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e21ee36e-8880-5926-816d-c1d13e871dd3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.232.253.158","comment":"https://x.com/drb_ra/status/1954616394470863285","timestamp":"1754851838","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3e3b2752-ed8a-555e-b611-e85a29ccd612","type":"url","category":"Network activity","to_ids":true,"value":"http://13.232.253.158:18138","comment":"https://x.com/drb_ra/status/1954616394470863285","timestamp":"1754851838","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ef998554-3f28-574b-b694-b5b61289ee99","type":"url","category":"Network activity","to_ids":true,"value":"http://47.129.120.1:28234","comment":"https://x.com/drb_ra/status/1954616535076479054","timestamp":"1754851871","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a8f07f9e-dd2b-5be4-992e-7449d28e4c4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.129.120.1","comment":"https://x.com/drb_ra/status/1954616535076479054","timestamp":"1754851871","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1ea77b9f-a3ea-5817-bac2-ae112ac91f36","type":"url","category":"Network activity","to_ids":true,"value":"http://43.209.3.178:6443","comment":"https://x.com/drb_ra/status/1954616674428256744","timestamp":"1754851904","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2674dcc2-b308-5e28-9600-e6e4f2b21480","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.209.3.178","comment":"https://x.com/drb_ra/status/1954616674428256744","timestamp":"1754851904","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"eca8e05a-2492-51ab-bb53-cd5bf11ebde0","type":"url","category":"Network activity","to_ids":true,"value":"http://51.79.188.35:2222","comment":"https://x.com/drb_ra/status/1954616812169200023","timestamp":"1754851937","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"c4df7c27-aba7-5d93-8125-841b3d968f54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.79.188.35","comment":"https://x.com/drb_ra/status/1954616812169200023","timestamp":"1754851937","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"978fde4f-9dec-538d-ba3a-5fca2e045ad9","type":"domain","category":"Network activity","to_ids":true,"value":"3-4px.pages.dev","comment":"https://x.com/skocherhan/status/1954616835753513399","timestamp":"1754851943","distribution":"5"},{"uuid":"c3553dd5-8b01-5020-910b-cc5f7e418897","type":"url","category":"Network activity","to_ids":true,"value":"https://3-4px.pages.dev/A.ps1","comment":"https://x.com/skocherhan/status/1954616835753513399","timestamp":"1754851943","distribution":"5"},{"uuid":"d0f1e101-5ae8-584b-bc2d-3ed14298ea3e","type":"url","category":"Network activity","to_ids":true,"value":"http://5.75.173.91:587","comment":"https://x.com/drb_ra/status/1954616951009124383","timestamp":"1754851970","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"502f0e39-6eaa-5234-bb8e-70e9905d1be0","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.32:80","comment":"https://x.com/drb_ra/status/1954617089353810331","timestamp":"1754852003","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"b1e22160-3380-54f3-b2d9-0f61754d201c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.32","comment":"https://x.com/drb_ra/status/1954617089353810331","timestamp":"1754852003","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"4e72176c-8ea0-5a41-b24a-11e2bdc54378","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.95.53","comment":"https://x.com/FalconFeedsio/status/1954617200289193988","timestamp":"1754852030","distribution":"5"},{"uuid":"9d675609-dc3c-519b-963f-1d1ce4498803","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.255.243.112","comment":"https://x.com/FalconFeedsio/status/1954617200289193988","timestamp":"1754852030","distribution":"5"},{"uuid":"5281b2a5-4b90-57e8-960a-dad462d612d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.83.183","comment":"https://x.com/FalconFeedsio/status/1954617200289193988","timestamp":"1754852030","distribution":"5"},{"uuid":"6d088b92-e1ff-5691-b9cb-5cd5adb39fc9","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.74.156:443","comment":"https://x.com/drb_ra/status/1954617228696973637","timestamp":"1754852037","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"4deb7409-4d54-53ec-ba0c-c2619f0ee2f6","type":"url","category":"Network activity","to_ids":true,"value":"http://45.137.70.250:7443","comment":"https://x.com/drb_ra/status/1954617366274351356","timestamp":"1754852069","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"473c8160-e7e9-5ef4-b665-365fe7097551","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.137.70.250","comment":"https://x.com/drb_ra/status/1954617366274351356","timestamp":"1754852069","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b78f3255-c7d5-518f-893d-45fbf65e6e7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.132.49.230","comment":"https://x.com/drb_ra/status/1954618013069476239","timestamp":"1754852224","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"1c1bc5c3-74aa-5014-a0d5-0dd994243d3d","type":"url","category":"Network activity","to_ids":true,"value":"http://78.132.49.230:8080","comment":"https://x.com/drb_ra/status/1954618013069476239","timestamp":"1754852224","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"f692569d-b2b9-53fb-9b3c-9737d0b0a30e","type":"url","category":"Network activity","to_ids":true,"value":"http://50.114.115.74:2404","comment":"https://x.com/drb_ra/status/1954618151271817596","timestamp":"1754852256","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8bb077e1-1262-598a-a710-734d3bb73d13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.114.115.74","comment":"https://x.com/drb_ra/status/1954618151271817596","timestamp":"1754852256","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d44410e5-334b-59cb-a51c-6d02be0e80d4","type":"md5","category":"Payload delivery","to_ids":true,"value":"a9909f7cbf6e776028934f24fb4c23ee","comment":"https://x.com/skocherhan/status/1954622105741558184","timestamp":"1754853199","distribution":"5"},{"uuid":"f4d28746-fc64-5c01-83ac-eb42e8b4603f","type":"domain","category":"Network activity","to_ids":true,"value":"immigrationstatuschecks.com","comment":"https://x.com/skocherhan/status/1954628817277911548","timestamp":"1754854799","distribution":"5"},{"uuid":"3f3abcb3-d158-528b-af88-d9a2875e3c35","type":"url","category":"Network activity","to_ids":true,"value":"http://www.immigrationstatuschecks.com/signin-pages/index.html","comment":"https://x.com/skocherhan/status/1954628817277911548","timestamp":"1754854799","distribution":"5"},{"uuid":"f1f2f3cd-cd89-5769-be42-19935c0f9e84","type":"domain","category":"Network activity","to_ids":true,"value":"mail-account-data.github.io","comment":"https://x.com/skocherhan/status/1954633203228066172","timestamp":"1754855845","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df86ee2f-3654-527e-b660-92596dcb7663","type":"url","category":"Network activity","to_ids":true,"value":"http://mail-account-data.github.io/baec-invitation-tender/beac/error.html","comment":"https://x.com/skocherhan/status/1954633203228066172","timestamp":"1754855845","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad752636-3fc7-55bf-a55e-dcbd78221520","type":"domain","category":"Network activity","to_ids":true,"value":"com-certify.info","comment":"https://x.com/urldna_bot/status/1954633880129896761","timestamp":"1754856007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0d804073-1e96-59e7-b64e-962ba13f3658","type":"url","category":"Network activity","to_ids":true,"value":"https://com-certify.info","comment":"https://x.com/urldna_bot/status/1954633880129896761","timestamp":"1754856007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"960c6709-7088-5464-b565-35331a615a4e","type":"url","category":"Network activity","to_ids":true,"value":"http://194.5.65.9:8080","comment":"https://x.com/SarlackLab/status/1954633922245005775","timestamp":"1754856017","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"20b1b408-883b-587b-b1d8-945d657b490d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.5.65.9","comment":"https://x.com/SarlackLab/status/1954633922245005775","timestamp":"1754856017","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"46cfb400-0d5d-5279-953f-86c3e2b3a97f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.2.192.209","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"016836e5-dc9e-5671-a947-13887b7bef23","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.156.123.93","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"fdda475e-e9b2-5784-a042-377a39da84b9","type":"url","category":"Network activity","to_ids":true,"value":"http://fewafef-56170.portmap.host","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"86f99586-ba02-5178-8bf1-601b54cab9f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.184.10.92","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"8b469eea-b250-5e57-8440-6ac0dbbf56bc","type":"url","category":"Network activity","to_ids":true,"value":"http://meet-festivals.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"9b9651d9-783e-5ed9-bc09-691860611bd1","type":"domain","category":"Network activity","to_ids":true,"value":"meet-festivals.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"7df66354-887d-5398-9708-20256a6985b1","type":"domain","category":"Network activity","to_ids":true,"value":"fewafef-56170.portmap.host","comment":"https://x.com/FalconFeedsio/status/1954643372179955923","timestamp":"1754858270","distribution":"5"},{"uuid":"ee4e681b-fb96-514b-b113-c258f44ca8dd","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.74.156","comment":"https://x.com/threatquery/status/1954648965959291238","timestamp":"1754859603","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"e4d6f3c4-77be-5489-9e34-77aa9c3b3936","type":"url","category":"Network activity","to_ids":true,"value":"http://154.211.37.162","comment":"https://x.com/threatquery/status/1954648969285427550","timestamp":"1754859604","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f9c18cf8-e9d5-518d-8309-58a700331424","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.211.37.162","comment":"https://x.com/threatquery/status/1954648969285427550","timestamp":"1754859604","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"c6f3165b-3e2b-5dfa-a418-bfb91dde952d","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.5.90","comment":"https://x.com/threatquery/status/1954648967553155362","timestamp":"1754859604","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"1f8eb92c-e99b-5d15-b689-77e79f69c2a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.5.90","comment":"https://x.com/threatquery/status/1954648967553155362","timestamp":"1754859604","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"6c3724f0-6147-519a-936c-e69d90f7ce6a","type":"url","category":"Network activity","to_ids":true,"value":"http://110.40.58.204:9696","comment":"https://x.com/drb_ra/status/1954655317444505750","timestamp":"1754861118","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4239d158-a3e7-5afd-a5d9-a8c81f6466f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.40.58.204","comment":"https://x.com/drb_ra/status/1954655317444505750","timestamp":"1754861118","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f3117025-d013-5e01-97a0-0602506ee40d","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.168.28:50080","comment":"https://x.com/drb_ra/status/1954655458632868337","timestamp":"1754861151","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"19bf6a25-3d4d-566e-a3fe-67758b3a2f23","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.168.28","comment":"https://x.com/drb_ra/status/1954655458632868337","timestamp":"1754861151","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a1a20ee9-cef3-51d7-bd2c-c1556cc6558e","type":"url","category":"Network activity","to_ids":true,"value":"http://115.187.17.5:8080","comment":"https://x.com/drb_ra/status/1954655599234617511","timestamp":"1754861185","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a75414c-1728-56a7-a1da-08d18ac47715","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.187.17.5","comment":"https://x.com/drb_ra/status/1954655599234617511","timestamp":"1754861185","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0287107c-65bf-5cf4-94d0-f5155a7e83e4","type":"domain","category":"Network activity","to_ids":true,"value":"videotroncens.weebly.com","comment":"https://x.com/urldna_bot/status/1954664075348128055","timestamp":"1754863206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6dd84270-0215-55ed-82f6-ccba084717ed","type":"url","category":"Network activity","to_ids":true,"value":"https://videotroncens.weebly.com","comment":"https://x.com/urldna_bot/status/1954664075348128055","timestamp":"1754863206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"09de85ae-8e73-535e-af98-38e823a1e49e","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.168.28","comment":"https://x.com/FalconFeedsio/status/1954666696498889129","timestamp":"1754863831","distribution":"5"},{"uuid":"f3b3d741-0764-5870-b159-4dda2b0e787a","type":"url","category":"Network activity","to_ids":true,"value":"http://191.101.131.21","comment":"https://x.com/FalconFeedsio/status/1954666696498889129","timestamp":"1754863831","distribution":"5"},{"uuid":"8cac8395-b937-5952-a95e-f5d1c55a3e86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.101.131.21","comment":"https://x.com/FalconFeedsio/status/1954666696498889129","timestamp":"1754863831","distribution":"5"},{"uuid":"c60a89b8-87b7-5403-98d6-4f052fd7279b","type":"domain","category":"Network activity","to_ids":true,"value":"i777777o676f76o756bz.oszar.com","comment":"https://x.com/skocherhan/status/1954672686300344378","timestamp":"1754865259","distribution":"5"},{"uuid":"15e153ab-6574-506e-aa49-426072532f6d","type":"url","category":"Network activity","to_ids":true,"value":"http://i777777o676f76o756bz.oszar.com","comment":"https://x.com/skocherhan/status/1954672686300344378","timestamp":"1754865259","distribution":"5"},{"uuid":"6fedd6f4-5717-5f3c-b074-765ab68b28a0","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.214.215:443","comment":"https://x.com/drb_ra/status/1954678557621338494","timestamp":"1754866658","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fdf04d95-b258-530c-a5d8-b94fa69165a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.214.215","comment":"https://x.com/drb_ra/status/1954678557621338494","timestamp":"1754866658","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"256c4222-5e3d-5cbb-b8fe-0fa37297232b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.108.72.176:443","comment":"https://x.com/drb_ra/status/1954678695932858600","timestamp":"1754866691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e6df244c-e292-5e2d-ac4e-6582675cb715","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.108.72.176","comment":"https://x.com/drb_ra/status/1954678695932858600","timestamp":"1754866691","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b13a2a9c-e4b8-5e8e-a11e-3cbe6f3f11b7","type":"domain","category":"Network activity","to_ids":true,"value":"phswwbjk4.com","comment":"https://x.com/masaomi346/status/1954686341750702480","timestamp":"1754868514","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eead0b9a-86c7-54d2-a046-8cb9bc0259a4","type":"url","category":"Network activity","to_ids":true,"value":"https://phswwbjk4.com/KjlJBs/","comment":"https://x.com/masaomi346/status/1954686341750702480","timestamp":"1754868514","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a739b0be-085d-53e2-a1fa-1ba52092ee3a","type":"domain","category":"Network activity","to_ids":true,"value":"kotipointf1.weebly.com","comment":"https://x.com/urldna_bot/status/1954694276392043000","timestamp":"1754870406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9b0ad480-c724-599b-adcf-48ae8ac93b84","type":"url","category":"Network activity","to_ids":true,"value":"https://kotipointf1.weebly.com","comment":"https://x.com/urldna_bot/status/1954694276392043000","timestamp":"1754870406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"43e87a7b-011a-57e4-81ca-5dd635b2a543","type":"domain","category":"Network activity","to_ids":true,"value":"karabaglarbel.weebly.com","comment":"https://x.com/urldna_bot/status/1954724488278380771","timestamp":"1754877609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f756a393-177f-5cf8-9af4-1c09d3e81bec","type":"url","category":"Network activity","to_ids":true,"value":"https://karabaglarbel.weebly.com","comment":"https://x.com/urldna_bot/status/1954724488278380771","timestamp":"1754877609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"86b47936-c0cf-5ee8-b5f7-ab6fefd3cedd","type":"domain","category":"Network activity","to_ids":true,"value":"cpsupport.live","comment":"https://x.com/skocherhan/status/1954736913186955700","timestamp":"1754880572","distribution":"5"},{"uuid":"ee7b6eea-773c-5d5f-9e98-04f415e6f2be","type":"url","category":"Network activity","to_ids":true,"value":"http://cpsupport.live","comment":"https://x.com/skocherhan/status/1954736913186955700","timestamp":"1754880572","distribution":"5"},{"uuid":"79f90e4f-c55e-5149-a86d-af7418dd62e1","type":"domain","category":"Network activity","to_ids":true,"value":"bi-qa.jimpike.com.au","comment":"https://x.com/urldna_bot/status/1954754688634544160","timestamp":"1754884810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e41675fb-3d71-51b9-8612-4292ed62a828","type":"url","category":"Network activity","to_ids":true,"value":"https://www.bi-qa.jimpike.com.au/mobile/front/","comment":"https://x.com/urldna_bot/status/1954754688634544160","timestamp":"1754884810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"048f6a66-4dc4-52d7-9b01-c0efde1a2ff6","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.8.118","comment":"https://x.com/skocherhan/status/1954759898937409841","timestamp":"1754886052","distribution":"5"},{"uuid":"7d2b6b89-5207-550e-a833-43a9726bfc29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.8.118","comment":"https://x.com/skocherhan/status/1954759898937409841","timestamp":"1754886052","distribution":"5"},{"uuid":"b09bb8f1-bed9-5038-985b-b640379d3bbb","type":"domain","category":"Network activity","to_ids":true,"value":"wbarenux.pro","comment":"https://x.com/skocherhan/status/1954759898937409841","timestamp":"1754886052","distribution":"5"},{"uuid":"88bc07a2-5062-5109-a45c-8081ee43f1bc","type":"url","category":"Network activity","to_ids":true,"value":"https://wbarenux.pro/webpanel/panel/login.php","comment":"https://x.com/skocherhan/status/1954759898937409841","timestamp":"1754886052","distribution":"5"},{"uuid":"2f06dd17-fba0-5c38-bf9d-62687f04b2b4","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.104.121","comment":"https://x.com/skocherhan/status/1954774818542195066","timestamp":"1754889609","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"fe30215c-a44d-5f13-8e54-a693fb8d55cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.104.121","comment":"https://x.com/skocherhan/status/1954774818542195066","timestamp":"1754889609","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"7da56436-44a6-5f40-a9a7-974e0df132e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.130.55.203","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"0b3e05f4-2006-5cad-beed-a2cd8a54e3e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.115.223.236","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"8d8e4db4-7728-50a8-bb40-f62b2fb89255","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.89.107.105","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"55913f3b-0c80-5839-8cc3-89949f5d05e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.197.74.58","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"82b69131-7cad-5258-a35c-8860d5e82008","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.214.157.35","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"8d4a03d2-01e1-5b53-868b-9f3f0ddc5e72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.115.223.134","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"1ed602c1-2ab2-59af-90dd-f2016d5646ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.66.88.55","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"4ba6bdde-ebfa-5779-bc3a-bdbe3d2c042e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.0.234.17","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"cb92eea5-fe03-5116-b35c-46d82d5d2617","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.24.123.37","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"6ce0423b-8a67-5018-9bbf-2a401a7f2798","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.130.165.177","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"7301fe0f-402f-59b9-a460-c7fb0cc34d84","type":"url","category":"Network activity","to_ids":true,"value":"http://31.214.157.35:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"282e7587-82cb-5390-b787-e9d508dbc67f","type":"url","category":"Network activity","to_ids":true,"value":"http://51.89.107.105:9191","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"89f152a5-f51c-5b31-af63-9612b5e881a4","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.223.236:2011","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"e5a53582-08f1-5cde-8699-f7fd2f361361","type":"url","category":"Network activity","to_ids":true,"value":"http://170.130.55.203:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"1e2b597e-eb38-519e-964e-a88288dcd7ea","type":"url","category":"Network activity","to_ids":true,"value":"http://193.24.123.37:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"d10ec56f-dbc2-595a-a2f6-f24185d82632","type":"url","category":"Network activity","to_ids":true,"value":"http://194.0.234.17:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"5e4054a0-d4c2-53ec-99e3-8fe2139ec01a","type":"url","category":"Network activity","to_ids":true,"value":"http://170.130.165.177:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"b89daa65-ca82-5ac8-b85b-51bc24bbd29e","type":"url","category":"Network activity","to_ids":true,"value":"http://80.66.88.55:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"017e0067-3569-5566-bac8-b6dc566e39a4","type":"url","category":"Network activity","to_ids":true,"value":"http://82.115.223.134:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"942cc02b-f8b1-5db1-8afc-e4846dc2da66","type":"url","category":"Network activity","to_ids":true,"value":"http://185.197.74.58:5531","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"62282efd-6def-536f-8ab0-dd89235dc63d","type":"url","category":"Network activity","to_ids":true,"value":"http://5.252.178.104:443","comment":"https://x.com/skocherhan/status/1954780410652582049","timestamp":"1754890942","distribution":"5"},{"uuid":"57e8f53a-8a30-5f66-8e6e-ac8b11d045a9","type":"domain","category":"Network activity","to_ids":true,"value":"bell-service-upgrade.weebly.com","comment":"https://x.com/urldna_bot/status/1954784876143522138","timestamp":"1754892007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e878058d-9276-5e34-900b-07bf43224d4a","type":"url","category":"Network activity","to_ids":true,"value":"https://bell-service-upgrade.weebly.com","comment":"https://x.com/urldna_bot/status/1954784876143522138","timestamp":"1754892007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dc00bb5e-42b5-5c0e-a77a-0414e516dad2","type":"url","category":"Network activity","to_ids":true,"value":"http://ilovemybeer.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"752ace07-0b99-55fa-bf77-9f6483306931","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.222.190.174","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"a32e0ead-52b0-5a7c-835a-4d7c8ca94a62","type":"url","category":"Network activity","to_ids":true,"value":"http://83.222.190.174","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"3ce12ea5-84c4-53ce-89a5-dfdb34012a1e","type":"url","category":"Network activity","to_ids":true,"value":"http://thankyoumykio.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"a067c7d2-7898-53c1-a864-32c0cdaafb71","type":"url","category":"Network activity","to_ids":true,"value":"http://losiposithankyou.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"708c7246-ee21-5274-8c79-683160fe08ee","type":"domain","category":"Network activity","to_ids":true,"value":"losiposithankyou.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"cb4aa036-4706-5510-b70d-082b12f0e07c","type":"domain","category":"Network activity","to_ids":true,"value":"ilovemybeer.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"6d19c67d-b29e-5509-bf57-0fe026702a67","type":"domain","category":"Network activity","to_ids":true,"value":"thankyoumykio.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"d4027bb4-98df-5333-8f1e-45bd7572e729","type":"domain","category":"Network activity","to_ids":true,"value":"ifmekissyoub.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"776b4ed5-2d19-5afe-9930-90c9739330dc","type":"url","category":"Network activity","to_ids":true,"value":"http://dontlikebeer.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"539511b0-5c4e-5eed-8d0c-d681cd02fcb2","type":"domain","category":"Network activity","to_ids":true,"value":"dontlikebeer.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"9dd212c2-bcb0-5dc8-a6ce-4fd24d15cc51","type":"url","category":"Network activity","to_ids":true,"value":"http://deepholeintheworld.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"eede96d8-5cea-59d1-9c6f-5e051eefef65","type":"url","category":"Network activity","to_ids":true,"value":"http://ifmekissyoub.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"a79a5069-70db-5a46-a27e-89cb96063ffb","type":"domain","category":"Network activity","to_ids":true,"value":"deepholeintheworld.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"54292394-e03a-5803-a463-357de66e4c12","type":"url","category":"Network activity","to_ids":true,"value":"http://dasdajklsdkaksldkjd.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"40cdd76f-3eec-5648-92e2-bedec1cbf998","type":"domain","category":"Network activity","to_ids":true,"value":"dasdajklsdkaksldkjd.com","comment":"https://x.com/skocherhan/status/1954790059686707472","timestamp":"1754893243","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"15d05e08-9709-5060-b818-ff8c67309e53","type":"url","category":"Network activity","to_ids":true,"value":"http://16.171.5.39:443","comment":"https://x.com/drb_ra/status/1954796459536052563","timestamp":"1754894768","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"fc1b4ec2-0c50-5064-a549-dde428e3377e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.171.5.39","comment":"https://x.com/drb_ra/status/1954796459536052563","timestamp":"1754894768","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"560a1fc5-578d-52c4-a152-2c24181519f5","type":"url","category":"Network activity","to_ids":true,"value":"http://95.164.87.88:443","comment":"https://x.com/drb_ra/status/1954796598417854803","timestamp":"1754894802","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6d2166c1-33a2-54d8-8ac4-cfde2e8dc8c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.164.87.88","comment":"https://x.com/drb_ra/status/1954796598417854803","timestamp":"1754894802","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"bf5acdb9-433d-5186-9438-2eab833697f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.57.135.51","comment":"https://x.com/drb_ra/status/1954796737085739414","timestamp":"1754894835","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"20ec76ec-9dd1-5b24-890e-9f0194b4bdae","type":"url","category":"Network activity","to_ids":true,"value":"http://20.57.135.51:31337","comment":"https://x.com/drb_ra/status/1954796737085739414","timestamp":"1754894835","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5df7235f-1ddd-53e2-918c-fcf110212f10","type":"url","category":"Network activity","to_ids":true,"value":"http://138.197.48.134:443","comment":"https://x.com/drb_ra/status/1954796874990281139","timestamp":"1754894868","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9735f2b5-92a1-50ca-a42a-d9b873b755c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.197.48.134","comment":"https://x.com/drb_ra/status/1954796874990281139","timestamp":"1754894868","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7c47aaea-8fa3-568b-978c-bf3d1d5c0655","type":"url","category":"Network activity","to_ids":true,"value":"http://38.132.122.180:43212","comment":"https://x.com/drb_ra/status/1954797520405647867","timestamp":"1754895021","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"68f2b698-bbea-5535-a1e2-fd9342cb8a19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.132.122.180","comment":"https://x.com/drb_ra/status/1954797520405647867","timestamp":"1754895021","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"db1d913b-c52a-5001-94b5-2a209584d1fc","type":"url","category":"Network activity","to_ids":true,"value":"http://184.162.20.200:443","comment":"https://x.com/drb_ra/status/1954797659098636551","timestamp":"1754895054","distribution":"5","Tag":[{"name":"C2"},{"name":"SocGholish"}]},{"uuid":"ea11b967-dfe0-5ea2-9b3d-2ab49981a325","type":"ip-dst","category":"Network activity","to_ids":true,"value":"184.162.20.200","comment":"https://x.com/drb_ra/status/1954797659098636551","timestamp":"1754895054","distribution":"5","Tag":[{"name":"C2"},{"name":"SocGholish"}]},{"uuid":"ae172cc3-37ac-5fea-b0ea-66d0f05e8a65","type":"url","category":"Network activity","to_ids":true,"value":"http://183.77.176.244:80","comment":"https://x.com/drb_ra/status/1954797797737124176","timestamp":"1754895088","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dcb651fe-4404-5907-a2e6-1548f314682e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"183.77.176.244","comment":"https://x.com/drb_ra/status/1954797797737124176","timestamp":"1754895088","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dd401bf4-e648-5666-9ad6-8313dd28a227","type":"url","category":"Network activity","to_ids":true,"value":"http://101.99.75.37:2405","comment":"https://x.com/drb_ra/status/1954797936799277131","timestamp":"1754895121","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1a9d4b57-e504-570d-9dbc-dc41e02d8f93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.99.75.37","comment":"https://x.com/drb_ra/status/1954797936799277131","timestamp":"1754895121","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c611e1cf-064a-527a-bc42-ae7bd012609d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.142.115.8:1001","comment":"https://x.com/drb_ra/status/1954798075764986103","timestamp":"1754895154","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d1eff70c-b1cd-56fd-b334-1285a9c03b29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.142.115.8","comment":"https://x.com/drb_ra/status/1954798075764986103","timestamp":"1754895154","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7f0b0f48-1296-5620-ac76-c5150591fc1f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.142.183.179","comment":"https://x.com/drb_ra/status/1954798213736591403","timestamp":"1754895187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5d1c9043-dd87-52da-812e-4bec6acb3bcb","type":"url","category":"Network activity","to_ids":true,"value":"http://46.142.183.179:51821","comment":"https://x.com/drb_ra/status/1954798213736591403","timestamp":"1754895187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f41fcdf7-3309-5770-9a6c-dbb4887ecf7d","type":"url","category":"Network activity","to_ids":true,"value":"http://192.145.124.4:60736","comment":"https://x.com/skocherhan/status/1954798232971755681","timestamp":"1754895191","distribution":"5"},{"uuid":"ef961ddc-43b6-5868-8f66-044d276d16f2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.149.220:18080","comment":"https://x.com/drb_ra/status/1954798352870113457","timestamp":"1754895220","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"914c869f-7db9-5e09-9c14-acd5c39dbfe4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.171.149.220","comment":"https://x.com/drb_ra/status/1954798352870113457","timestamp":"1754895220","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"346e66e5-5740-5c21-b252-c49a07764bd5","type":"url","category":"Network activity","to_ids":true,"value":"http://101.108.108.68:7443","comment":"https://x.com/drb_ra/status/1954798491860926866","timestamp":"1754895253","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b0d0b034-e479-562f-aa3a-8954836dd0a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.108.108.68","comment":"https://x.com/drb_ra/status/1954798491860926866","timestamp":"1754895253","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d76eab30-4e17-5b7e-9d92-7099d425e3aa","type":"url","category":"Network activity","to_ids":true,"value":"http://13.55.37.74:8159","comment":"https://x.com/drb_ra/status/1954798630163869881","timestamp":"1754895286","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ff9715de-489c-5f8e-bec4-f2a3d1d8a9db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.55.37.74","comment":"https://x.com/drb_ra/status/1954798630163869881","timestamp":"1754895286","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"49cc6fc2-6e5f-56d8-b0d7-57160ff2ccf4","type":"url","category":"Network activity","to_ids":true,"value":"http://43.204.38.39:38783","comment":"https://x.com/drb_ra/status/1954798768550752684","timestamp":"1754895319","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8fc0e714-ed65-5f8a-ada1-f4a01673246a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.204.38.39","comment":"https://x.com/drb_ra/status/1954798768550752684","timestamp":"1754895319","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3c6aedb9-4447-5703-9036-f6e6f4b9e49c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.234.36.60:4000","comment":"https://x.com/drb_ra/status/1954798906937581886","timestamp":"1754895352","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"8952f727-def1-571e-9fae-8b4b775b1b4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.234.36.60","comment":"https://x.com/drb_ra/status/1954798906937581886","timestamp":"1754895352","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"15c3ef45-335d-574a-9609-ed71489efcc1","type":"md5","category":"Payload delivery","to_ids":true,"value":"f1b8db131099a3d89261346f580661b7","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"70fbe8ab-562a-50f2-a596-23cf214ddf4e","type":"md5","category":"Payload delivery","to_ids":true,"value":"a27a67eb59190ce4362b4c12902c2b92","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"79836d10-98b2-52a9-b536-137e88567435","type":"md5","category":"Payload delivery","to_ids":true,"value":"22eea701c5e33c85e8101c1a3bdcc2fd","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"36b6a1f8-33fd-53e0-b2b1-a40766dd0082","type":"md5","category":"Payload delivery","to_ids":true,"value":"4d43e95215c71f2a94794ac8df1560b0","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"29227d55-059c-5966-b21f-6bc3e8efee79","type":"md5","category":"Payload delivery","to_ids":true,"value":"b1326b50f45630cdeb360bcac844cc3b","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"8ae3b2fc-f88a-5290-9230-daf774956eb5","type":"md5","category":"Payload delivery","to_ids":true,"value":"74db9400e08a97797d795ae1bea32ce6","comment":"https://x.com/suyog41/status/1954798911518036395","timestamp":"1754895353","distribution":"5"},{"uuid":"bafd5c41-4d81-5241-9553-894ba99b842e","type":"url","category":"Network activity","to_ids":true,"value":"http://wormoni.lms-austria.com","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"71c48523-7462-535c-888d-4208eb68ddb9","type":"url","category":"Network activity","to_ids":true,"value":"http://mannieha246.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"5e865a13-2987-5804-9608-d0618021f303","type":"domain","category":"Network activity","to_ids":true,"value":"mannieha246.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"22ca5b2b-5525-5939-aec7-ceb5ce205c82","type":"domain","category":"Network activity","to_ids":true,"value":"wormoni.lms-austria.com","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"dc83a1eb-5409-59d9-873e-99fc5804137c","type":"url","category":"Network activity","to_ids":true,"value":"http://192.145.124.4","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"363ecccd-f321-5b7a-ada5-2e4ff1e6f9f7","type":"domain","category":"Network activity","to_ids":true,"value":"lms-austria.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"695a52c5-ee94-5b25-9628-3097ddacfc40","type":"url","category":"Network activity","to_ids":true,"value":"http://averolucas.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"d4d41c5a-e0ab-5f8a-9f03-627314eff169","type":"domain","category":"Network activity","to_ids":true,"value":"averolucas.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"0d4975a1-c58b-51bd-902b-4df271a58977","type":"url","category":"Network activity","to_ids":true,"value":"http://lms-austria.duckdns.org","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"6db94c6a-33c8-530f-8c80-03713aec4389","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.145.124.4","comment":"https://x.com/skocherhan/status/1954798986520297515","timestamp":"1754895371","distribution":"5"},{"uuid":"f09e3b22-300d-589a-81ed-934f081812fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.55.195.59","comment":"https://x.com/drb_ra/status/1954799044649234864","timestamp":"1754895385","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"7b7edbb6-129a-5348-9a4d-fad62b2751ef","type":"url","category":"Network activity","to_ids":true,"value":"http://162.55.195.59:8888","comment":"https://x.com/drb_ra/status/1954799044649234864","timestamp":"1754895385","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"be3387f4-59d1-5a8e-abe1-25e995180de6","type":"url","category":"Network activity","to_ids":true,"value":"http://92.59.62.40:2222","comment":"https://x.com/drb_ra/status/1954799182230827310","timestamp":"1754895418","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"287349b2-bc44-5488-9d15-24fe42f4dfce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.59.62.40","comment":"https://x.com/drb_ra/status/1954799182230827310","timestamp":"1754895418","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"3dbaebd7-bbe5-5565-80a7-ba76498b7830","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.11:443","comment":"https://x.com/drb_ra/status/1954799320894431499","timestamp":"1754895451","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"372a6547-5540-5bf4-99a0-f358c4cecb8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.98.219.11","comment":"https://x.com/drb_ra/status/1954799320894431499","timestamp":"1754895451","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"575e9283-12f3-5e84-ae16-585b96733a2b","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.153.31:443","comment":"https://x.com/drb_ra/status/1954799459155562698","timestamp":"1754895484","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6ed6d304-6f00-529e-83e7-fe4d37122e9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.153.31","comment":"https://x.com/drb_ra/status/1954799459155562698","timestamp":"1754895484","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a3939bdf-7642-56f8-b527-ff9ab0758753","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.219.109:443","comment":"https://x.com/drb_ra/status/1954799596913267164","timestamp":"1754895516","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"5cb13010-3075-5bae-aaf5-97ad8f82e911","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.219.109","comment":"https://x.com/drb_ra/status/1954799596913267164","timestamp":"1754895516","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"bca3217b-9929-53da-ba61-529c262450a3","type":"url","category":"Network activity","to_ids":true,"value":"http://nexarystorms.ch","comment":"https://x.com/skocherhan/status/1954803672895873086","timestamp":"1754896488","distribution":"5"},{"uuid":"1fc0992c-27af-5864-bb87-59f251182ff9","type":"domain","category":"Network activity","to_ids":true,"value":"nexarystorms.ch","comment":"https://x.com/skocherhan/status/1954803672895873086","timestamp":"1754896488","distribution":"5"},{"uuid":"3cb0f8e0-9b6c-5d05-bbaa-ce6e7857a7c2","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.nexarystorms.ch","comment":"https://x.com/skocherhan/status/1954803672895873086","timestamp":"1754896488","distribution":"5"},{"uuid":"bafc79a1-c225-5499-8328-6271dc8e7966","type":"domain","category":"Network activity","to_ids":true,"value":"mail.nexarystorms.ch","comment":"https://x.com/skocherhan/status/1954803672895873086","timestamp":"1754896488","distribution":"5"},{"uuid":"b1dfd288-793f-5f21-be84-6e4851eba08d","type":"md5","category":"Payload delivery","to_ids":true,"value":"161caabb7a3f502abe6b1f64a47802e5","comment":"https://x.com/suyog41/status/1954807824229282260","timestamp":"1754897478","distribution":"5"},{"uuid":"0fdfe93a-1b08-5038-95a2-7827504a1d25","type":"domain","category":"Network activity","to_ids":true,"value":"mail.9kyd.com","comment":"https://x.com/ShadowChasing1/status/1954814349840683500","timestamp":"1754899034","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"57360fbc-5f40-561e-a827-e096623a58b3","type":"url","category":"Network activity","to_ids":true,"value":"https://mail.9kyd.com/skins/js/xn7.php","comment":"https://x.com/ShadowChasing1/status/1954814349840683500","timestamp":"1754899034","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"228aebfb-ab88-5b74-bf5c-d8a493d82c8f","type":"md5","category":"Payload delivery","to_ids":true,"value":"80c509309f1826776b58b1199517e561","comment":"https://x.com/ShadowChasing1/status/1954814349840683500","timestamp":"1754899034","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4d45a915-18d6-593c-8add-079872d20da4","type":"domain","category":"Network activity","to_ids":true,"value":"uminac.weebly.com","comment":"https://x.com/urldna_bot/status/1954815072292700446","timestamp":"1754899206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9d19f50e-db91-5820-986f-ed880cdcba74","type":"url","category":"Network activity","to_ids":true,"value":"https://uminac.weebly.com","comment":"https://x.com/urldna_bot/status/1954815072292700446","timestamp":"1754899206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7676bdca-2861-5476-9b1b-4bd309ed17a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.47","comment":"https://x.com/FalconFeedsio/status/1954825599991849209","timestamp":"1754901716","distribution":"5"},{"uuid":"b3cfc199-4c38-584a-a3b1-bfd3e2b25759","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.132.53.216","comment":"https://x.com/FalconFeedsio/status/1954825599991849209","timestamp":"1754901716","distribution":"5"},{"uuid":"46089e88-50d3-58dc-9460-4ea2d7b375be","type":"url","category":"Network activity","to_ids":true,"value":"http://185.132.53.216","comment":"https://x.com/FalconFeedsio/status/1954825599991849209","timestamp":"1754901716","distribution":"5"},{"uuid":"0d5bb8f6-8982-5f7a-adc4-d3588b0aeeaf","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.47","comment":"https://x.com/FalconFeedsio/status/1954825599991849209","timestamp":"1754901716","distribution":"5"},{"uuid":"8970b869-ce0f-55ae-a3af-0d5ad7df38ac","type":"domain","category":"Network activity","to_ids":true,"value":"myglacler-acc.weebly.com","comment":"https://x.com/urldna_bot/status/1954845273873666315","timestamp":"1754906407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9259f2e9-fc64-5448-a805-2e67b1d658e9","type":"url","category":"Network activity","to_ids":true,"value":"https://myglacler-acc.weebly.com","comment":"https://x.com/urldna_bot/status/1954845273873666315","timestamp":"1754906407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"22506453-4243-5e81-bd45-462f3161f64e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:1080","comment":"https://x.com/drb_ra/status/1954861742858625124","timestamp":"1754910333","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"edb7adeb-6040-5cb8-af37-0d50dae75ca7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.129","comment":"https://x.com/drb_ra/status/1954861742858625124","timestamp":"1754910333","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3e36e5d9-f3b3-504f-ae71-8d8bf9bb746c","type":"url","category":"Network activity","to_ids":true,"value":"http://129.211.31.181:4433","comment":"https://x.com/drb_ra/status/1954861881576812696","timestamp":"1754910366","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"870b4ed2-e43d-590c-bc30-76b2c38bb846","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.211.31.181","comment":"https://x.com/drb_ra/status/1954861881576812696","timestamp":"1754910366","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4a9cbea5-8d02-5b2d-b892-be698186ac81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.47.83","comment":"https://x.com/drb_ra/status/1954862019951096097","timestamp":"1754910399","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d1e73510-97db-571a-a2e3-d9e3d61064cc","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.47.83:80","comment":"https://x.com/drb_ra/status/1954862019951096097","timestamp":"1754910399","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8867df1f-8f12-55e3-9686-a579fd4b1db3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.32.250.246","comment":"https://x.com/drb_ra/status/1954862159197851942","timestamp":"1754910432","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ae56052e-dd9b-5c19-b3e4-aec780691aa8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.32.250.246:443","comment":"https://x.com/drb_ra/status/1954862159197851942","timestamp":"1754910432","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"974720d2-3fc7-59b0-8034-e0b0274adf28","type":"domain","category":"Network activity","to_ids":true,"value":"cdnli.com","comment":"https://x.com/drb_ra/status/1954862159197851942","timestamp":"1754910432","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f3d73aac-6a2a-5ed1-8d26-c4b4e3a7d17f","type":"url","category":"Network activity","to_ids":true,"value":"https://cdnli.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954862159197851942","timestamp":"1754910432","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b6bfc981-25bf-5f4e-a2af-96781aa7955b","type":"url","category":"Network activity","to_ids":true,"value":"https://100.103.49.40/cm","comment":"https://x.com/drb_ra/status/1954866354567172372","timestamp":"1754911433","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"25fbdc57-2a2f-598e-9bbc-e7e81c3cd0cf","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:80","comment":"https://x.com/drb_ra/status/1954866354567172372","timestamp":"1754911433","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1954866494178771032","timestamp":"1754911466","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5f361576-dbd0-5555-94de-bec7bd665ed6","type":"url","category":"Network activity","to_ids":true,"value":"https://100.103.49.40/ga.js","comment":"https://x.com/drb_ra/status/1954866494178771032","timestamp":"1754911466","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f3402d08-446e-5da5-bb33-73051781e2cd","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:443","comment":"https://x.com/drb_ra/status/1954866494178771032","timestamp":"1754911466","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"820f7558-8aa0-5820-8fa5-da0ba1cc0dc4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"100.103.49.40","comment":"https://x.com/drb_ra/status/1954866494178771032","timestamp":"1754911466","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"86ae76d6-3623-572f-abe5-cc1cc96e819f","type":"domain","category":"Network activity","to_ids":true,"value":"thanhtp.webi.com.vn","comment":"https://x.com/skocherhan/status/1954871667320127573","timestamp":"1754912699","distribution":"5"},{"uuid":"236bd559-4afd-533a-8907-2958a2afea85","type":"url","category":"Network activity","to_ids":true,"value":"http://thanhtp.webi.com.vn","comment":"https://x.com/skocherhan/status/1954871667320127573","timestamp":"1754912699","distribution":"5"},{"uuid":"5156485c-59c3-5c92-83f7-4d88e753a0c7","type":"domain","category":"Network activity","to_ids":true,"value":"user-auth-apply-to-visit-or-stay-in-the-uk-homeoffice-gov-uk.com","comment":"https://x.com/skocherhan/status/1954871667320127573","timestamp":"1754912699","distribution":"5"},{"uuid":"ea35fc2b-3e25-52e3-8273-e176446dcbc3","type":"url","category":"Network activity","to_ids":true,"value":"http://user-auth-apply-to-visit-or-stay-in-the-uk-homeoffice-gov-uk.com","comment":"https://x.com/skocherhan/status/1954871667320127573","timestamp":"1754912699","distribution":"5"},{"uuid":"fe7c1280-aa4d-527a-8836-e4cba44f2737","type":"domain","category":"Network activity","to_ids":true,"value":"fstvll25.my.id","comment":"https://x.com/urldna_bot/status/1954875471805469063","timestamp":"1754913606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f9b6e0eb-38f2-5289-9661-4c01f85b5497","type":"url","category":"Network activity","to_ids":true,"value":"https://www.fstvll25.my.id","comment":"https://x.com/urldna_bot/status/1954875471805469063","timestamp":"1754913606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aad04ddf-12ed-5524-bbb2-5bd2b91c8593","type":"domain","category":"Network activity","to_ids":true,"value":"abntvw.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"29e89d28-4b7e-567c-a482-7937893c0ee0","type":"url","category":"Network activity","to_ids":true,"value":"http://opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"1e507eb8-535a-5ba8-b987-a1bef56862f5","type":"url","category":"Network activity","to_ids":true,"value":"http://ccvkxjcxv.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"6275a265-1f16-5767-9c9e-192cb0021a37","type":"domain","category":"Network activity","to_ids":true,"value":"ccvkxjcxv.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"6472bdfa-c005-5ade-a01d-75e95ef12a1d","type":"url","category":"Network activity","to_ids":true,"value":"http://cakyp.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"c80b7aa9-7bea-5089-91e7-2bb28c7fdaec","type":"domain","category":"Network activity","to_ids":true,"value":"cakyp.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"55ce0d83-59bb-5959-91f1-856ba9596766","type":"url","category":"Network activity","to_ids":true,"value":"http://bumkmutuc.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"e97ff38d-4f61-5352-9251-3fbc1efab134","type":"domain","category":"Network activity","to_ids":true,"value":"bumkmutuc.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"73f64daa-334b-5145-af22-941cdc40e605","type":"url","category":"Network activity","to_ids":true,"value":"http://bhovcqnis.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"96784718-ddc2-5c2c-a2ec-5a3749bc47eb","type":"domain","category":"Network activity","to_ids":true,"value":"bhovcqnis.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"3c3178d7-4e87-5b00-a16d-e5930b1cd9c1","type":"url","category":"Network activity","to_ids":true,"value":"http://bbpq.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"a482bce7-4477-5af0-a68f-71636ba254de","type":"domain","category":"Network activity","to_ids":true,"value":"amrhep.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"ec332061-40a6-55a4-b44f-44a1046af4c0","type":"url","category":"Network activity","to_ids":true,"value":"http://bbpgl.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"4d009603-9622-5d51-8ae0-1cc220649aaa","type":"domain","category":"Network activity","to_ids":true,"value":"bbpgl.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"29e64f8c-545e-55ec-9333-0c463e1944c6","type":"url","category":"Network activity","to_ids":true,"value":"http://auxifpy.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"acdfd212-0cf7-50d6-b306-1fda2422ed3a","type":"domain","category":"Network activity","to_ids":true,"value":"auxifpy.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"4a5457f1-5990-54c3-a14c-e3c656cfdf3c","type":"url","category":"Network activity","to_ids":true,"value":"http://aptkz.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"bd2eb5e7-0ab6-5847-b9aa-7b152b1a3553","type":"domain","category":"Network activity","to_ids":true,"value":"aptkz.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"6df7a8c0-e88b-594c-af29-7a07e11083c4","type":"url","category":"Network activity","to_ids":true,"value":"http://amrhep.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"bfac3849-061b-506f-83ec-ad8de6abc82c","type":"domain","category":"Network activity","to_ids":true,"value":"opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"4dd0b274-6985-58fe-b86f-41419048c87f","type":"url","category":"Network activity","to_ids":true,"value":"http://abntvw.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"a2450dde-978b-5845-a369-9c54aa4c78ab","type":"url","category":"Network activity","to_ids":true,"value":"http://alhksryaqv.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"de534fd1-e37e-5664-81b0-cfaef32c2a74","type":"domain","category":"Network activity","to_ids":true,"value":"alhksryaqv.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"6f650ba3-06c6-5b41-bb96-a547a20801d6","type":"domain","category":"Network activity","to_ids":true,"value":"bbpq.opezdol.org","comment":"https://x.com/skocherhan/status/1954875868880552389","timestamp":"1754913701","distribution":"5"},{"uuid":"c04e85d1-1351-5684-a1b2-1c1e5f348f7a","type":"domain","category":"Network activity","to_ids":true,"value":"admin.pegasus-tech.org","comment":"https://x.com/P4nd3m1cb0y/status/1954877056036089953","timestamp":"1754913984","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"b4470716-4565-5c49-8fd9-d4b946faeabf","type":"url","category":"Network activity","to_ids":true,"value":"https://admin.pegasus-tech.org","comment":"https://x.com/P4nd3m1cb0y/status/1954877056036089953","timestamp":"1754913984","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"}]},{"uuid":"cf4560d6-edae-51a5-81a4-c2d32626fdc3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.169.163:5552","comment":"https://x.com/SarlackLab/status/1954890616606703774","timestamp":"1754917217","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e6d22e69-d41d-5d89-a86c-bc4640da8f0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.169.163","comment":"https://x.com/SarlackLab/status/1954890616606703774","timestamp":"1754917217","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"50717dd8-d4a1-5927-96fe-2a32fcababeb","type":"md5","category":"Payload delivery","to_ids":true,"value":"a192140b3a785480d5f10aab6f54108b","comment":"https://x.com/PrakkiSathwik/status/1954892768431813119","timestamp":"1754917730","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"},{"name":"C2"}]},{"uuid":"8428d302-22d9-52b6-95ea-e154ba6febf0","type":"md5","category":"Payload delivery","to_ids":true,"value":"960da720bdbdda25fa45c8bc9aa63dd1","comment":"https://x.com/PrakkiSathwik/status/1954892768431813119","timestamp":"1754917730","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"},{"name":"C2"}]},{"uuid":"b954cb52-b295-53f0-a7e3-9da942908ab6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.127.142.140","comment":"https://x.com/PrakkiSathwik/status/1954892768431813119","timestamp":"1754917730","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"},{"name":"C2"}]},{"uuid":"ba814ca6-9ad8-5737-9574-aa94d9bc125a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5962EE57B0049EB7546D236321F92960","comment":"https://x.com/PrakkiSathwik/status/1954892768431813119","timestamp":"1754917730","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"},{"name":"C2"}]},{"uuid":"3c530443-1060-59a8-b373-f648eab65ed2","type":"md5","category":"Payload delivery","to_ids":true,"value":"0e5025bebf549ce078a7f221fb9f1058","comment":"https://x.com/PrakkiSathwik/status/1954892768431813119","timestamp":"1754917730","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"},{"name":"C2"}]},{"uuid":"725d196d-26fe-5a0c-8f11-6cb627ebf4c6","type":"domain","category":"Network activity","to_ids":true,"value":"loginfreegames.weebly.com","comment":"https://x.com/urldna_bot/status/1954905668613271894","timestamp":"1754920806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ddd788f4-9c29-5365-851c-8b209cb7d02c","type":"url","category":"Network activity","to_ids":true,"value":"https://loginfreegames.weebly.com","comment":"https://x.com/urldna_bot/status/1954905668613271894","timestamp":"1754920806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"19737eab-5dd5-5140-8356-8b530eef3414","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.111.75.156","comment":"https://x.com/marcandrebeaul1/status/1954906344965959912","timestamp":"1754920967","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9fbfdcc2-93d6-5115-9c12-9e2d14db4232","type":"domain","category":"Network activity","to_ids":true,"value":"server-on.net","comment":"https://x.com/skocherhan/status/1954907590078443860","timestamp":"1754921264","distribution":"5"},{"uuid":"7c005f8c-e353-5de5-9d7b-2abfa25201cd","type":"url","category":"Network activity","to_ids":true,"value":"http://server-on.net","comment":"https://x.com/skocherhan/status/1954907590078443860","timestamp":"1754921264","distribution":"5"},{"uuid":"2397a34e-242b-596e-b226-46384d270ccd","type":"domain","category":"Network activity","to_ids":true,"value":"docu.thunder.com.de","comment":"https://x.com/ShadowOpCode/status/1954918726915998112","timestamp":"1754923919","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7d39685-a1ff-5403-af18-9b7fa941d4a3","type":"url","category":"Network activity","to_ids":true,"value":"https://docu.thunder.com.de/sJXtJ/","comment":"https://x.com/ShadowOpCode/status/1954918726915998112","timestamp":"1754923919","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea099ff0-e4ac-55cf-b29e-d2a18e4ac091","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.119.69.99","comment":"https://x.com/SarlackLab/status/1954920859736387819","timestamp":"1754924428","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"7f4cf639-4943-5fd3-a8fe-dca003a3be01","type":"url","category":"Network activity","to_ids":true,"value":"http://196.119.69.99:10000","comment":"https://x.com/SarlackLab/status/1954920859736387819","timestamp":"1754924428","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"8d690b69-38bb-53a6-a56a-1c7dfa60aeb8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.149.177.18","comment":"https://x.com/FalconFeedsio/status/1954921466115530814","timestamp":"1754924572","distribution":"5"},{"uuid":"b1d5f95d-e955-5845-b6f5-ae7e231f5eb5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.149.177.18","comment":"https://x.com/FalconFeedsio/status/1954921466115530814","timestamp":"1754924572","distribution":"5"},{"uuid":"7f250139-8fc9-5f46-8504-1a04fb76de3b","type":"url","category":"Network activity","to_ids":true,"value":"https://flaskproxy-fedg.onrender.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1954940673460961383","timestamp":"1754929152","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b39edcec-611f-50b1-a67b-f96feabcaba6","type":"url","category":"Network activity","to_ids":true,"value":"http://154.219.109.205:443","comment":"https://x.com/drb_ra/status/1954940673460961383","timestamp":"1754929152","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b205acca-51bc-5250-bd2f-a1b71cca62eb","type":"domain","category":"Network activity","to_ids":true,"value":"flaskproxy-fedg.onrender.com","comment":"https://x.com/drb_ra/status/1954940673460961383","timestamp":"1754929152","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e874d916-e8c0-53b2-9af1-a5d9e72e7d35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.219.109.205","comment":"https://x.com/drb_ra/status/1954940673460961383","timestamp":"1754929152","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"91308a9f-2633-52ce-82c3-05e03a09af9a","type":"url","category":"Network activity","to_ids":true,"value":"https://8.219.76.168/updates","comment":"https://x.com/drb_ra/status/1954943346998387145","timestamp":"1754929789","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0d1854f3-7abe-58ad-a702-c20d2ab8b588","type":"url","category":"Network activity","to_ids":true,"value":"http://8.219.76.168:443","comment":"https://x.com/drb_ra/status/1954943346998387145","timestamp":"1754929789","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e698bbcb-14f8-511a-b964-3da1281a0d48","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.243.112:8080","comment":"https://x.com/drb_ra/status/1954943491047293358","timestamp":"1754929824","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9d675609-dc3c-519b-963f-1d1ce4498803","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.255.243.112","comment":"https://x.com/drb_ra/status/1954943491047293358","timestamp":"1754929824","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c04718e-08b1-5bfd-bbe4-057325bee150","type":"domain","category":"Network activity","to_ids":true,"value":"t-tonliner.weebly.com","comment":"https://x.com/urldna_bot/status/1954966066527912019","timestamp":"1754935206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8afbd7aa-ed93-59a6-977b-856f25b88d2e","type":"url","category":"Network activity","to_ids":true,"value":"https://t-tonliner.weebly.com","comment":"https://x.com/urldna_bot/status/1954966066527912019","timestamp":"1754935206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3e89b7e3-41e1-5d75-9a96-4cec40493486","type":"url","category":"Network activity","to_ids":true,"value":"http://18.169.47.41:443","comment":"https://x.com/drb_ra/status/1954977601182699578","timestamp":"1754937956","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c622d574-e541-576f-8947-7436bed5539c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.169.47.41","comment":"https://x.com/drb_ra/status/1954977601182699578","timestamp":"1754937956","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e938f0ab-071e-544b-b29d-67a2adc5f170","type":"url","category":"Network activity","to_ids":true,"value":"http://54.83.65.155:443","comment":"https://x.com/drb_ra/status/1954977739087258082","timestamp":"1754937989","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f94565c1-6ad6-5b41-bd64-e58a5706b5e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.83.65.155","comment":"https://x.com/drb_ra/status/1954977739087258082","timestamp":"1754937989","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f4ed6fbd-77bb-5993-97c8-4e7e65c53e14","type":"url","category":"Network activity","to_ids":true,"value":"http://129.212.189.231:7443","comment":"https://x.com/drb_ra/status/1954977878875287947","timestamp":"1754938022","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"1739b034-1dac-5be5-b924-5c0408d79be2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.212.189.231","comment":"https://x.com/drb_ra/status/1954977878875287947","timestamp":"1754938022","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"bcc0fe51-8d92-557c-9088-686db4e5a073","type":"url","category":"Network activity","to_ids":true,"value":"http://45.61.137.89:443","comment":"https://x.com/drb_ra/status/1954978015374610541","timestamp":"1754938055","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a74d8690-ebd0-545e-87e3-37b5d02dac4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.61.137.89","comment":"https://x.com/drb_ra/status/1954978015374610541","timestamp":"1754938055","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c83d8450-3032-580f-bccb-de2abd2807e3","type":"url","category":"Network activity","to_ids":true,"value":"http://5.22.215.171:443","comment":"https://x.com/drb_ra/status/1954978661305602219","timestamp":"1754938209","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a05410df-ed33-555e-bb31-210fd4397fba","type":"url","category":"Network activity","to_ids":true,"value":"http://52.10.110.75:25314","comment":"https://x.com/drb_ra/status/1954978800078672272","timestamp":"1754938242","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8e8f39e3-83e0-56c2-a5f6-2ea937a1282f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.10.110.75","comment":"https://x.com/drb_ra/status/1954978800078672272","timestamp":"1754938242","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"fe807afe-70ab-581f-a685-39f89681d462","type":"url","category":"Network activity","to_ids":true,"value":"http://35.87.176.246:2376","comment":"https://x.com/drb_ra/status/1954978938456781279","timestamp":"1754938275","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"182fef1c-d191-5316-b7a4-ebb3355bf526","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.87.176.246","comment":"https://x.com/drb_ra/status/1954978938456781279","timestamp":"1754938275","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dec51f82-574e-5bfc-916e-306f4c334ce0","type":"url","category":"Network activity","to_ids":true,"value":"http://35.168.62.4:443","comment":"https://x.com/drb_ra/status/1954979076978118686","timestamp":"1754938308","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9157ae3d-bb14-537e-b52d-5e1348799747","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.168.62.4","comment":"https://x.com/drb_ra/status/1954979076978118686","timestamp":"1754938308","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0a0d5958-5409-5657-9984-e6c180ed08a9","type":"url","category":"Network activity","to_ids":true,"value":"http://52.215.205.238:80","comment":"https://x.com/drb_ra/status/1954979215729889353","timestamp":"1754938341","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"32f18bde-2530-5cc9-9e59-8c0fb7bc5435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.215.205.238","comment":"https://x.com/drb_ra/status/1954979215729889353","timestamp":"1754938341","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"af28851a-2b88-54d4-9cb3-10c03ab8d41b","type":"url","category":"Network activity","to_ids":true,"value":"http://88.232.102.158:443","comment":"https://x.com/drb_ra/status/1954979351985787256","timestamp":"1754938373","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"64658382-4423-5ff2-be68-832dc190402a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.232.102.158","comment":"https://x.com/drb_ra/status/1954979351985787256","timestamp":"1754938373","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"a6757fd2-a0f5-5375-ad96-54d8ffb5a44b","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.120.247:995","comment":"https://x.com/drb_ra/status/1954979490884620721","timestamp":"1754938407","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"11675225-2043-525c-a39d-1838ff6ece20","type":"url","category":"Network activity","to_ids":true,"value":"http://209.250.227.127:443","comment":"https://x.com/drb_ra/status/1954979631318069414","timestamp":"1754938440","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e39c9a71-2f7a-57c4-85a0-a12c83333a26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.250.227.127","comment":"https://x.com/drb_ra/status/1954979631318069414","timestamp":"1754938440","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"77074a77-aed2-564e-a459-eb654cbd55fe","type":"sha256","category":"Payload delivery","to_ids":true,"value":"7e05b76b877e2cf8d191877c490daee1030c75d8fc1bb1428f78e8880890e046","comment":"https://x.com/g0njxa/status/1954986348370334179","timestamp":"1754940041","distribution":"5"},{"uuid":"cd863599-eaac-5bd5-91ba-81cc15e5b0f6","type":"domain","category":"Network activity","to_ids":true,"value":"btcomms.daftpage.com","comment":"https://x.com/urldna_bot/status/1954996267173425347","timestamp":"1754942406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"64ce475a-5074-5d69-adc7-0065130f1de9","type":"url","category":"Network activity","to_ids":true,"value":"http://btcomms.daftpage.com","comment":"https://x.com/urldna_bot/status/1954996267173425347","timestamp":"1754942406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a3e1dd5e-eb5b-524d-bf9a-81c6b46d64ab","type":"url","category":"Network activity","to_ids":true,"value":"http://172.211.240.210","comment":"https://x.com/threatquery/status/1955011353778811258","timestamp":"1754946003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"3fa5f03f-fd9b-5345-8ad0-3324e6a82e62","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.211.240.210","comment":"https://x.com/threatquery/status/1955011353778811258","timestamp":"1754946003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"7e68c0ad-c062-5848-965f-036de7ea0b81","type":"url","category":"Network activity","to_ids":true,"value":"http://121.147.19.2","comment":"https://x.com/threatquery/status/1955011352117825536","timestamp":"1754946003","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"},{"name":"malware"}]},{"uuid":"c7bf8904-f744-51ab-a34e-9bce628906cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.147.19.2","comment":"https://x.com/threatquery/status/1955011352117825536","timestamp":"1754946003","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"},{"name":"malware"}]},{"uuid":"1ef7c01c-271d-57a3-a37d-c5787a686fb3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.167.79","comment":"https://x.com/threatquery/status/1955011355703947292","timestamp":"1754946004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"77a65dd3-4728-597c-9c49-6a1adfdf86e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.143.167.79","comment":"https://x.com/threatquery/status/1955011355703947292","timestamp":"1754946004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"defcd9d6-4f5e-591b-8a6f-67d9f80c0fb6","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.83.183:4444","comment":"https://x.com/drb_ra/status/1955016291204386985","timestamp":"1754947180","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5281b2a5-4b90-57e8-960a-dad462d612d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.83.183","comment":"https://x.com/drb_ra/status/1955016291204386985","timestamp":"1754947180","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8631e944-050d-5b78-a47c-5c4a28c4fdc8","type":"url","category":"Network activity","to_ids":true,"value":"http://185.243.41.252:443","comment":"https://x.com/drb_ra/status/1955016429633220813","timestamp":"1754947213","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4c88098-f53e-5998-ab7b-6b8a7a5215db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.243.41.252","comment":"https://x.com/drb_ra/status/1955016429633220813","timestamp":"1754947213","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7fcc1120-87ba-5738-b265-2a37ac5ca327","type":"url","category":"Network activity","to_ids":true,"value":"https://18.209.31.252/ga.js","comment":"https://x.com/drb_ra/status/1955017076118081684","timestamp":"1754947368","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"362924b8-7793-5aaf-bf09-9e7309a9ce0a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.209.31.252:80","comment":"https://x.com/drb_ra/status/1955017076118081684","timestamp":"1754947368","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cc6e2b9e-91cc-53ec-84f1-1a62fb44d5ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.209.31.252","comment":"https://x.com/drb_ra/status/1955017076118081684","timestamp":"1754947368","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fd024cee-9ba6-51da-a235-8ae54189e24c","type":"domain","category":"Network activity","to_ids":true,"value":"awtitipies.fasters.fun","comment":"https://x.com/drb_ra/status/1955017216652644772","timestamp":"1754947401","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"274540a9-2b07-5ad7-a5ac-cc831c82f67c","type":"url","category":"Network activity","to_ids":true,"value":"https://awtitipies.fasters.fun/ca","comment":"https://x.com/drb_ra/status/1955017216652644772","timestamp":"1754947401","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"73f8438a-92fb-5791-a6fc-bce54a174a5e","type":"url","category":"Network activity","to_ids":true,"value":"http://5.181.187.243:443","comment":"https://x.com/drb_ra/status/1955017216652644772","timestamp":"1754947401","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a0d04b52-25f1-58fb-a209-44ab6ddc165b","type":"url","category":"Network activity","to_ids":true,"value":"http://74.48.223.225:51235","comment":"https://x.com/drb_ra/status/1955017354846371960","timestamp":"1754947434","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c8dccc24-9031-538e-b508-f627e9995cbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.48.223.225","comment":"https://x.com/drb_ra/status/1955017354846371960","timestamp":"1754947434","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"533e0441-66a7-5e09-bf38-2c3e48f2c4a6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.95.16:80","comment":"https://x.com/drb_ra/status/1955017494684368908","timestamp":"1754947467","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f2dfc49-21fc-547c-bcfc-6ce26f2f4889","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.95.16","comment":"https://x.com/drb_ra/status/1955017494684368908","timestamp":"1754947467","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e0b7546e-1c04-5434-a4a5-8135a49c1498","type":"url","category":"Network activity","to_ids":true,"value":"https://69.5.189.69/wc/58462514417","comment":"https://x.com/drb_ra/status/1955017635499999691","timestamp":"1754947501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"12ba9f9f-ee46-5656-9e37-389a7417ea1f","type":"url","category":"Network activity","to_ids":true,"value":"http://69.5.189.69:80","comment":"https://x.com/drb_ra/status/1955017635499999691","timestamp":"1754947501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"05a9399c-f9d8-584a-803e-b6d8bb99e1cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.189.69","comment":"https://x.com/drb_ra/status/1955017635499999691","timestamp":"1754947501","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0cab571e-f864-58b2-bb3b-326df66ecfea","type":"domain","category":"Network activity","to_ids":true,"value":"hibmarket.help","comment":"https://x.com/drb_ra/status/1955017778319991065","timestamp":"1754947535","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2a96ea94-7ca5-5aa7-a88f-35c84c162a85","type":"url","category":"Network activity","to_ids":true,"value":"https://hibmarket.help/api/v1/get","comment":"https://x.com/drb_ra/status/1955017778319991065","timestamp":"1754947535","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ffbcfbbd-6b1a-5378-994e-91f84793af36","type":"url","category":"Network activity","to_ids":true,"value":"http://150.158.119.242:8443","comment":"https://x.com/drb_ra/status/1955017778319991065","timestamp":"1754947535","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"00bd1dff-1184-5cef-be43-7c1d77675b1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.158.119.242","comment":"https://x.com/drb_ra/status/1955017778319991065","timestamp":"1754947535","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"37159d80-b953-5f51-bd08-3f3277314f4a","type":"url","category":"Network activity","to_ids":true,"value":"http://120.46.128.236:9696","comment":"https://x.com/drb_ra/status/1955017924512760237","timestamp":"1754947570","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9494b2ef-229e-5586-991c-b423a6ff048a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.46.128.236","comment":"https://x.com/drb_ra/status/1955017924512760237","timestamp":"1754947570","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"178726fd-73f2-5847-8f05-04e86da2e023","type":"domain","category":"Network activity","to_ids":true,"value":"jsanalytic.cloud","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"ff663fe9-2b43-5396-ae22-0fbebdfc9f24","type":"url","category":"Network activity","to_ids":true,"value":"http://jsanalytic.cloud","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"69fc53b9-d6df-5dca-8d1c-252d063a218e","type":"domain","category":"Network activity","to_ids":true,"value":"jsstat.cloud","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"e78c6671-6405-57da-a392-b839ba59ff3e","type":"url","category":"Network activity","to_ids":true,"value":"http://jsstat.cloud","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"e5200262-c056-5cbc-82dd-178e73292a19","type":"domain","category":"Network activity","to_ids":true,"value":"neritetarnerbi.xyz","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"7e05793e-64d3-57c5-87a3-9f4a72a3a6b2","type":"url","category":"Network activity","to_ids":true,"value":"http://neritetarnerbi.xyz","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"8e028953-9eea-5de3-ba0b-de704c019fa0","type":"domain","category":"Network activity","to_ids":true,"value":"ppheaimondon.site","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"7e6f9685-da59-553b-98b5-8a8731ea9041","type":"url","category":"Network activity","to_ids":true,"value":"http://ppheaimondon.site","comment":"https://x.com/skocherhan/status/1955018865597092266","timestamp":"1754947794","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"6efe1ee5-bacf-51cd-9adb-9220e5713a04","type":"domain","category":"Network activity","to_ids":true,"value":"driverservices.store","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"b84f1570-41e4-5bcd-9aa6-f92d0eb6f544","type":"url","category":"Network activity","to_ids":true,"value":"https://driverservices.store/visiodrive/nvidiaRelease.zip","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"155e0aaf-352e-5d95-af2f-674170acc410","type":"url","category":"Network activity","to_ids":true,"value":"http://45.159.248.110","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"cf1f18e7-7c0a-5ac6-a955-8f5aa01512d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.159.248.110","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"95fc2f8f-6a5f-5d60-9a72-73c267c06535","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.231.75.101","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"d607348e-e6c0-547e-9f3f-5d412fa010e8","type":"md5","category":"Payload delivery","to_ids":true,"value":"f9e18687a38e968811b93351e9fca089","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"f3b7b9de-9100-5f8d-b87f-87dfeacfa974","type":"md5","category":"Payload delivery","to_ids":true,"value":"a4e58b91531d199f268c5ea02c7bf456","comment":"https://x.com/skocherhan/status/1955019197945205241","timestamp":"1754947873","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"5f7e78f2-d524-585a-9ee0-9677f714d03c","type":"url","category":"Network activity","to_ids":true,"value":"http://213.18.198.227","comment":"https://x.com/executemalware/status/1955025968034103446","timestamp":"1754949488","distribution":"5"},{"uuid":"5c545122-4ac3-503b-bf4b-09ff84bfecbd","type":"domain","category":"Network activity","to_ids":true,"value":"cloudflare.blazing-cloud.com","comment":"https://x.com/executemalware/status/1955025968034103446","timestamp":"1754949488","distribution":"5"},{"uuid":"7a5b8b42-c05a-55f3-b206-be03e922db28","type":"url","category":"Network activity","to_ids":true,"value":"http://cloudflare.blazing-cloud.com/linux/verify/captcha/1yh3okbzqs4i","comment":"https://x.com/executemalware/status/1955025968034103446","timestamp":"1754949488","distribution":"5"},{"uuid":"6fe2e22b-e7cd-5037-af61-ea157831782c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.18.198.227","comment":"https://x.com/executemalware/status/1955025968034103446","timestamp":"1754949488","distribution":"5"},{"uuid":"be00b094-ed8d-5db6-9872-94fc96ff7d34","type":"domain","category":"Network activity","to_ids":true,"value":"home480att.weebly.com","comment":"https://x.com/urldna_bot/status/1955026470935335394","timestamp":"1754949607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b34a73e5-f3b8-5d90-bbf6-a87f9fb8b3f6","type":"url","category":"Network activity","to_ids":true,"value":"http://home480att.weebly.com","comment":"https://x.com/urldna_bot/status/1955026470935335394","timestamp":"1754949607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a25f31e9-ca03-5f64-8a84-316698e0ee1f","type":"domain","category":"Network activity","to_ids":true,"value":"vuelaviajero.com","comment":"https://x.com/skocherhan/status/1955035736895311995","timestamp":"1754951817","distribution":"5"},{"uuid":"635fa40b-007a-50ac-9253-8506b042b046","type":"url","category":"Network activity","to_ids":true,"value":"http://www.vuelaviajero.com/wp-includes/images/sd2.ps1","comment":"https://x.com/skocherhan/status/1955035736895311995","timestamp":"1754951817","distribution":"5"},{"uuid":"e044d700-e205-5a9b-87f7-98bbbc63caaf","type":"domain","category":"Network activity","to_ids":true,"value":"jerseymz.shop","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"9bb79124-b5c7-519d-a7ca-11df0b0ebf10","type":"url","category":"Network activity","to_ids":true,"value":"http://jerseymz.shop","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"8c105d0f-06a8-5ee0-87d5-ee05bcfe3802","type":"domain","category":"Network activity","to_ids":true,"value":"jerseymz.com","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"964a5abc-1531-5101-9a78-9830d2c5686c","type":"url","category":"Network activity","to_ids":true,"value":"http://jerseymz.com","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"f2e59e87-f0fc-5e82-ac7e-ae01c7ffab8f","type":"domain","category":"Network activity","to_ids":true,"value":"mufter.ro","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"8e28eca8-6b2a-5756-8572-03f4602b020f","type":"url","category":"Network activity","to_ids":true,"value":"http://mufter.ro","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"cface82f-e050-581a-a95a-f9f22e0b6be7","type":"url","category":"Network activity","to_ids":true,"value":"http://94.156.152.5/defatigate.php","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"c13b1811-9f4f-5e3b-a7cf-38a81e6c1ff6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.156.152.5","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"2326ab50-b910-52a4-b683-1851d969de10","type":"md5","category":"Payload delivery","to_ids":true,"value":"0a6a49ab9e622e7575b088a4298aee90","comment":"https://x.com/skocherhan/status/1955037646327288261","timestamp":"1754952272","distribution":"5"},{"uuid":"a7e02153-e392-5d98-890e-b4ac35499dbb","type":"domain","category":"Network activity","to_ids":true,"value":"puttyssh.run","comment":"https://x.com/skocherhan/status/1955039589892231469","timestamp":"1754952735","distribution":"5"},{"uuid":"9bbbc2d8-4b87-5fdf-beeb-d7ab1545e335","type":"url","category":"Network activity","to_ids":true,"value":"http://puttyssh.run/files/Putty-Setup_v1.23.exe","comment":"https://x.com/skocherhan/status/1955039589892231469","timestamp":"1754952735","distribution":"5"},{"uuid":"d3c5bdd8-86b1-512a-8679-6a8fbb137d15","type":"domain","category":"Network activity","to_ids":true,"value":"funkyfirmware.com","comment":"https://x.com/skocherhan/status/1955039589892231469","timestamp":"1754952735","distribution":"5"},{"uuid":"643b602c-84f8-528e-b7f8-2c591e6113ff","type":"url","category":"Network activity","to_ids":true,"value":"http://funkyfirmware.com","comment":"https://x.com/skocherhan/status/1955039589892231469","timestamp":"1754952735","distribution":"5"},{"uuid":"86130c60-0861-597b-8647-92d68490dc0f","type":"md5","category":"Payload delivery","to_ids":true,"value":"5144c68a496d3b138d847c1508ee2b3b","comment":"https://x.com/skocherhan/status/1955039589892231469","timestamp":"1754952735","distribution":"5"},{"uuid":"9eacece4-b9ea-5d45-9281-51a913c5f08e","type":"url","category":"Network activity","to_ids":true,"value":"http://185.243.41.252:80","comment":"https://x.com/drb_ra/status/1955040379645960639","timestamp":"1754952924","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fd6b5765-302e-54dc-b32a-4ec3f6e78e71","type":"url","category":"Network activity","to_ids":true,"value":"http://38.38.250.99:5800","comment":"https://x.com/drb_ra/status/1955040519253528706","timestamp":"1754952957","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3ea82d17-44f8-5585-b05f-69a162a6cda6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.38.250.99","comment":"https://x.com/drb_ra/status/1955040519253528706","timestamp":"1754952957","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a158785-ce2c-5f78-abd3-0091d4601fd1","type":"url","category":"Network activity","to_ids":true,"value":"http://118.31.173.19:443","comment":"https://x.com/drb_ra/status/1955040657535541642","timestamp":"1754952990","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b211c5d6-7dd3-5d4d-a8c5-a5dba73f00a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.31.173.19","comment":"https://x.com/drb_ra/status/1955040657535541642","timestamp":"1754952990","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"94612fca-f8f8-5808-9620-7e5cf3c51fb5","type":"url","category":"Network activity","to_ids":true,"value":"http://119.45.120.228:443","comment":"https://x.com/drb_ra/status/1955040796736098641","timestamp":"1754953023","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"27aa4d55-fd2b-53cf-b3fc-1af9f962efbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.45.120.228","comment":"https://x.com/drb_ra/status/1955040796736098641","timestamp":"1754953023","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2485d6a4-dea9-51ab-b867-9b8432d121fe","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.83.183:80","comment":"https://x.com/drb_ra/status/1955040937656123891","timestamp":"1754953057","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"04ce30e6-45c9-57ca-b952-295cc319b5f9","type":"domain","category":"Network activity","to_ids":true,"value":"textbin.net","comment":"https://x.com/skocherhan/status/1955042132051497088","timestamp":"1754953341","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"1394c5a5-bcb2-5333-afbe-89e267179ac0","type":"url","category":"Network activity","to_ids":true,"value":"http://textbin.net/raw/jktip2kh0u","comment":"https://x.com/skocherhan/status/1955042132051497088","timestamp":"1754953341","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"433b25e9-ac10-52c2-8ee3-4ac2ca463cdc","type":"md5","category":"Payload delivery","to_ids":true,"value":"b5468c048c8874b8c615f03e304570ba","comment":"https://x.com/skocherhan/status/1955042132051497088","timestamp":"1754953341","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"608389dd-ca3f-5ce6-bdd3-9431771e6c22","type":"domain","category":"Network activity","to_ids":true,"value":"trabe-smcuikukoki.com","comment":"https://x.com/masaomi346/status/1955043082698887572","timestamp":"1754953568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"977139be-dc16-5988-9c73-b1dc8be92441","type":"url","category":"Network activity","to_ids":true,"value":"https://trabe-smcuikukoki.com","comment":"https://x.com/masaomi346/status/1955043082698887572","timestamp":"1754953568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1741d4c0-b35e-58e5-ad3c-6d9192bbe515","type":"domain","category":"Network activity","to_ids":true,"value":"adminsecuremyinfuzefcudata.weebly.com","comment":"https://x.com/urldna_bot/status/1955056667747352955","timestamp":"1754956807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5418d30d-9973-523f-bbfc-360c6092c274","type":"url","category":"Network activity","to_ids":true,"value":"https://adminsecuremyinfuzefcudata.weebly.com","comment":"https://x.com/urldna_bot/status/1955056667747352955","timestamp":"1754956807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6efe1ee5-bacf-51cd-9adb-9220e5713a04","type":"domain","category":"Network activity","to_ids":true,"value":"driverservices.store","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"b84f1570-41e4-5bcd-9aa6-f92d0eb6f544","type":"url","category":"Network activity","to_ids":true,"value":"https://driverservices.store/visiodrive/nvidiaRelease.zip","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"155e0aaf-352e-5d95-af2f-674170acc410","type":"url","category":"Network activity","to_ids":true,"value":"http://45.159.248.110","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"cf1f18e7-7c0a-5ac6-a955-8f5aa01512d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.159.248.110","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"95fc2f8f-6a5f-5d60-9a72-73c267c06535","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.231.75.101","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"d607348e-e6c0-547e-9f3f-5d412fa010e8","type":"md5","category":"Payload delivery","to_ids":true,"value":"f9e18687a38e968811b93351e9fca089","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"f3b7b9de-9100-5f8d-b87f-87dfeacfa974","type":"md5","category":"Payload delivery","to_ids":true,"value":"a4e58b91531d199f268c5ea02c7bf456","comment":"https://x.com/ShadowChasing1/status/1955063673573216727","timestamp":"1754958477","distribution":"5","Tag":[{"name":"Lazarus"},{"name":"APT"}]},{"uuid":"af66f3b8-8a58-5b49-8aa4-ef8f1b205203","type":"url","category":"Network activity","to_ids":true,"value":"https://xyzverse-in.web.app","comment":"https://x.com/AmberMille78556/status/1955064323665170600","timestamp":"1754958632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4498dbd3-6b88-5997-8738-f939f3863549","type":"domain","category":"Network activity","to_ids":true,"value":"xyzverse-in.web.app","comment":"https://x.com/AmberMille78556/status/1955064323665170600","timestamp":"1754958632","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"702c0229-e044-59b9-9ab4-3e2a9ce4ef16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.52.44","comment":"https://x.com/skocherhan/status/1955075348275544328","timestamp":"1754961261","distribution":"5"},{"uuid":"826a3745-1454-51fd-beb2-8ae931a170b2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.52.44","comment":"https://x.com/skocherhan/status/1955075348275544328","timestamp":"1754961261","distribution":"5"},{"uuid":"bafd1efe-9fa3-566b-ac4f-131529a47229","type":"sha256","category":"Payload delivery","to_ids":true,"value":"50e98a8ec61ce25022236c6e635a062e3e3bd14a3024092d5fb6b918981c7f21","comment":"https://x.com/skocherhan/status/1955083817980440893","timestamp":"1754963280","distribution":"5"},{"uuid":"442fa3c0-6462-5558-9ada-39d3e9674b9f","type":"domain","category":"Network activity","to_ids":true,"value":"mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/ShadowChasing1/status/1955085333739290626","timestamp":"1754963641","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1230548a-f34f-5a82-a83d-8693531e998a","type":"url","category":"Network activity","to_ids":true,"value":"http://mail-modp-gov-pk-view.netlify.app","comment":"https://x.com/ShadowChasing1/status/1955085333739290626","timestamp":"1754963641","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"adedb29d-7bb3-5a5f-a8c8-7a7d12b17337","type":"domain","category":"Network activity","to_ids":true,"value":"gikgf43.weebly.com","comment":"https://x.com/urldna_bot/status/1955086867063296305","timestamp":"1754964007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f6f57e84-1c93-5814-b469-94baf244fa1c","type":"url","category":"Network activity","to_ids":true,"value":"https://gikgf43.weebly.com","comment":"https://x.com/urldna_bot/status/1955086867063296305","timestamp":"1754964007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"eaa47bbd-e224-571b-843a-31661bb4a6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.130.243.180","comment":"https://x.com/romonlyht/status/1955088583637037328","timestamp":"1754964416","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be6abd5b-e4cd-565d-a1b5-619daef11945","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.20.4","comment":"https://x.com/romonlyht/status/1955088583637037328","timestamp":"1754964416","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fa778ac6-4e29-54cf-9f64-75386882c489","type":"url","category":"Network activity","to_ids":true,"value":"https://smbc.zyfzno.cn/ktDEoR","comment":"https://x.com/romonlyht/status/1955088583637037328","timestamp":"1754964416","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9469075-0467-5e1b-848c-869a4300ff38","type":"domain","category":"Network activity","to_ids":true,"value":"smbc.zyfzno.cn","comment":"https://x.com/romonlyht/status/1955088587277680932","timestamp":"1754964417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e18c3fde-6358-5c6a-8230-e76434e50cae","type":"url","category":"Network activity","to_ids":true,"value":"https://smbc.zyfzno.cn/ktDEoR/","comment":"https://x.com/romonlyht/status/1955088587277680932","timestamp":"1754964417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03d145b0-6871-5243-8bfc-ea5fc66150f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.225.92.51","comment":"https://x.com/romonlyht/status/1955090342178591155","timestamp":"1754964836","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a534bc94-d999-5ae3-b966-cf1ad00e6bc6","type":"url","category":"Network activity","to_ids":true,"value":"https://pay.youngplat.com","comment":"https://x.com/romonlyht/status/1955090342178591155","timestamp":"1754964836","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dccff5b7-8b9b-5275-b4e0-265d63888c4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.110.209.83","comment":"https://x.com/romonlyht/status/1955090342178591155","timestamp":"1754964836","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"63a3bc66-2659-5d7a-9f77-79cb9b5c4d4a","type":"domain","category":"Network activity","to_ids":true,"value":"pay.youngplat.com","comment":"https://x.com/romonlyht/status/1955090347748466889","timestamp":"1754964837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9c632e5-76e0-506f-99b4-30d564d63e97","type":"url","category":"Network activity","to_ids":true,"value":"https://pay.youngplat.com/login","comment":"https://x.com/romonlyht/status/1955090347748466889","timestamp":"1754964837","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02dd74ff-ee67-5468-98f4-c3a3550dc356","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.97.138.238","comment":"https://x.com/drb_ra/status/1955090773541568579","timestamp":"1754964938","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"46189959-eeff-5161-946c-0055adae1c9c","type":"url","category":"Network activity","to_ids":true,"value":"http://161.97.138.238:80","comment":"https://x.com/drb_ra/status/1955090773541568579","timestamp":"1754964938","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97371c1b-cc7c-5b46-a0b8-dca290154fa2","type":"domain","category":"Network activity","to_ids":true,"value":"moverakutonco.shop","comment":"https://x.com/romonlyht/status/1955093698741424262","timestamp":"1754965636","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a3b10e7-e779-561e-b199-31345effdf28","type":"url","category":"Network activity","to_ids":true,"value":"https://moverakutonco.shop/index-e.html","comment":"https://x.com/romonlyht/status/1955093698741424262","timestamp":"1754965636","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0d31ce7-a7fb-5183-85f0-ec1961744891","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.197","comment":"https://x.com/romonlyht/status/1955093698741424262","timestamp":"1754965636","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db88c85c-aeb2-5d29-943a-c9f5feb74626","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.32.146.52","comment":"https://x.com/romonlyht/status/1955093859236761765","timestamp":"1754965674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f431c87-771a-59cd-9074-56e407d3fe8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.237","comment":"https://x.com/romonlyht/status/1955093859236761765","timestamp":"1754965674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ded4bc15-d825-510f-8db2-0ea991283b69","type":"domain","category":"Network activity","to_ids":true,"value":"rakutoncardsco.shop","comment":"https://x.com/romonlyht/status/1955093859236761765","timestamp":"1754965674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91e0ea68-dce3-5573-81db-50f97dc13a26","type":"url","category":"Network activity","to_ids":true,"value":"https://rakutoncardsco.shop/index-e.html","comment":"https://x.com/romonlyht/status/1955093859236761765","timestamp":"1754965674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d39fab8-1c21-58fc-a76a-7d0a01844e45","type":"url","category":"Network activity","to_ids":true,"value":"https://verify-jp.12397qe.com/ETGate/","comment":"https://x.com/romonlyht/status/1955097677429084368","timestamp":"1754966584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49f6e492-de7f-5c2e-9144-9976fab86037","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.200.143.92","comment":"https://x.com/romonlyht/status/1955097677429084368","timestamp":"1754966584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98026376-ecad-5821-aad7-1bb4be8e5db0","type":"url","category":"Network activity","to_ids":true,"value":"https://verify-jp.12397qe.com/ETGate","comment":"https://x.com/romonlyht/status/1955097677429084368","timestamp":"1754966584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce24c633-a245-59cc-9f5f-1358e73b063c","type":"domain","category":"Network activity","to_ids":true,"value":"verify-jp.12397qe.com","comment":"https://x.com/romonlyht/status/1955097677429084368","timestamp":"1754966584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93e4b31c-4eb9-501d-82cf-db2f9b0f6667","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-jp.hairzanity.com/ETGate/","comment":"https://x.com/romonlyht/status/1955097682575495628","timestamp":"1754966586","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c4f5bf8a-7650-5a33-8ee1-8ccc0809d930","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-jp.hairzanity.com","comment":"https://x.com/romonlyht/status/1955097682575495628","timestamp":"1754966586","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e79672b2-3a0c-5bf5-b69e-ac767847e87c","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-jp.hairzanity.com/ETGate","comment":"https://x.com/romonlyht/status/1955097682575495628","timestamp":"1754966586","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"22fb6a7e-8bc6-5291-8566-e5dfefb72be7","type":"url","category":"Network activity","to_ids":true,"value":"https://myaupay-kddico.shop/au/uqmobile","comment":"https://x.com/romonlyht/status/1955106034151985613","timestamp":"1754968577","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"421bfc03-614b-5d02-b474-7b517c453acf","type":"domain","category":"Network activity","to_ids":true,"value":"myaupay-kddico.shop","comment":"https://x.com/romonlyht/status/1955106034151985613","timestamp":"1754968577","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1931e34-4f6a-5ff5-98d0-b25ab43a21f5","type":"url","category":"Network activity","to_ids":true,"value":"https://myaupay-kddico.shop/au/uqmobile/","comment":"https://x.com/romonlyht/status/1955106034151985613","timestamp":"1754968577","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ef5dd41-e900-5fce-966e-4af3e0136f73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.61","comment":"https://x.com/romonlyht/status/1955106034151985613","timestamp":"1754968577","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6c85211f-9cf0-5ceb-a093-4e16c8da69f9","type":"domain","category":"Network activity","to_ids":true,"value":"crystalglobalwealth.com","comment":"https://x.com/AmberMille78556/status/1955111047406190831","timestamp":"1754969772","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e460553-4e3c-5c0e-b586-a946693aa977","type":"url","category":"Network activity","to_ids":true,"value":"https://crystalglobalwealth.com","comment":"https://x.com/AmberMille78556/status/1955111047406190831","timestamp":"1754969772","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54a8753d-06c0-5645-ace6-74b4bb3b2582","type":"url","category":"Network activity","to_ids":true,"value":"https://we288.cn/?ex_m=meils&se_aaaa@examplejp&html_x&lock_pfIQpDmBIfUNLkzlDSU","comment":"https://x.com/romonlyht/status/1955116069217075709","timestamp":"1754970969","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cd36b14d-490e-5088-9f09-f3a69353d870","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.113.47.122","comment":"https://x.com/romonlyht/status/1955116069217075709","timestamp":"1754970969","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56c696b7-fd04-58f3-beab-f104b20cee9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.120.34.172","comment":"https://x.com/romonlyht/status/1955116069217075709","timestamp":"1754970969","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d0b2d32-dbbd-5245-9aeb-70820c946edd","type":"url","category":"Network activity","to_ids":true,"value":"https://we288.cn/?ex_m=meils&se_aaaa%40examplejp=&html_x=&lock_pfIQpDmBIfUNLkzlDSU=&tz=Asia%2FTokyo&lang=ja&ts=1754970592614&confuse=1Y2l4yGCWbIU7lK0TrSWtonoKDqjqkpT","comment":"https://x.com/romonlyht/status/1955116071460954391","timestamp":"1754970970","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4833d4d4-2dce-5f4d-8331-deee3772b2c2","type":"domain","category":"Network activity","to_ids":true,"value":"we288.cn","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6b1817ad-420a-5668-801f-05c8779c7d51","type":"url","category":"Network activity","to_ids":true,"value":"https://we288.cn/gateway.php?token=c6072e2328f71168f377224de7126d8e4e00dc2b6ff06077c3558ce573b86671","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ff90b86-817c-5b6c-9bf3-d0298bef97b2","type":"domain","category":"Network activity","to_ids":true,"value":"tp7717.com","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"702cc424-69e9-5cdd-a1b8-d4ede3efb4ea","type":"url","category":"Network activity","to_ids":true,"value":"https://tp7717.com/4n1tTJ","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08eee552-0f6f-5f9f-a362-e09a72a2822f","type":"url","category":"Network activity","to_ids":true,"value":"https://tp7717.com/4n1tTJ/","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c2b4a23-35d7-5337-84a7-175c0b1bcbf6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c6072e2328f71168f377224de7126d8e4e00dc2b6ff06077c3558ce573b86671","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab4d0e81-8271-5ee7-a531-84166d119ba9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.213.174.227","comment":"https://x.com/romonlyht/status/1955116074464133436","timestamp":"1754970971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cf3d971-2c02-57c7-944b-e879ac92a757","type":"domain","category":"Network activity","to_ids":true,"value":"mwebucuonlinhml00adlog0naccesss.weebly.com","comment":"https://x.com/urldna_bot/status/1955117060205187348","timestamp":"1754971206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"69275363-6151-52db-9083-826cb6788bda","type":"url","category":"Network activity","to_ids":true,"value":"https://mwebucuonlinhml00adlog0naccesss.weebly.com","comment":"https://x.com/urldna_bot/status/1955117060205187348","timestamp":"1754971206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cfa76e9c-a667-5817-b9d1-cdbaee5a843e","type":"domain","category":"Network activity","to_ids":true,"value":"5sgwxf.com","comment":"https://x.com/romonlyht/status/1955119776528994326","timestamp":"1754971853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f1053d59-3373-543f-bbd2-7c36bdefcf49","type":"url","category":"Network activity","to_ids":true,"value":"https://5sgwxf.com/bbdzktg/ackywnqhw/_w-BvWJ1JfbJcSiWYFzi_dQpBjI6ao4kP1lpE4iCM_U.pdf","comment":"https://x.com/romonlyht/status/1955119776528994326","timestamp":"1754971853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0516e33-546e-5395-aaf4-2e1b0a80989d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.227.125.176","comment":"https://x.com/romonlyht/status/1955119776528994326","timestamp":"1754971853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5be0d3d6-ba3b-5b40-bba1-9b01da94b3f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.238.73.57","comment":"https://x.com/romonlyht/status/1955119776528994326","timestamp":"1754971853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d87e923-a70b-5c5d-9948-b8f5068ee1de","type":"url","category":"Network activity","to_ids":true,"value":"https://geojexi.com/1arZkr","comment":"https://x.com/romonlyht/status/1955119781138534573","timestamp":"1754971854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"403a8011-7e9a-5af8-a9d2-f3a1d8e75047","type":"domain","category":"Network activity","to_ids":true,"value":"geojexi.com","comment":"https://x.com/romonlyht/status/1955119781138534573","timestamp":"1754971854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41b026a7-cd36-546b-8b88-c9d960195731","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.91.85.224","comment":"https://x.com/romonlyht/status/1955119781138534573","timestamp":"1754971854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0e30896-7020-5d99-9d8a-16b18982604d","type":"url","category":"Network activity","to_ids":true,"value":"https://geojexi.com/1arZkr/","comment":"https://x.com/romonlyht/status/1955119781138534573","timestamp":"1754971854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e73e4bd2-339d-5842-b12f-f461ed8e613a","type":"domain","category":"Network activity","to_ids":true,"value":"marclobk.com","comment":"https://x.com/AmberMille78556/status/1955120128900644886","timestamp":"1754971937","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e97e3889-f521-5272-bf1b-a24e744bf1d2","type":"url","category":"Network activity","to_ids":true,"value":"https://marclobk.com","comment":"https://x.com/AmberMille78556/status/1955120128900644886","timestamp":"1754971937","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a0d5b69-30f1-5829-881c-c99563dd1ceb","type":"domain","category":"Network activity","to_ids":true,"value":"hsbc.host","comment":"https://x.com/c9lab_soc/status/1955122188740149377","timestamp":"1754972428","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3a79273c-1898-522a-a061-6bd21cc4646c","type":"domain","category":"Network activity","to_ids":true,"value":"proton.video","comment":"https://x.com/c9lab_soc/status/1955122188740149377","timestamp":"1754972428","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"32eee7be-9687-591f-b2f2-dd1ccc80caa7","type":"url","category":"Network activity","to_ids":true,"value":"http://proton.video","comment":"https://x.com/c9lab_soc/status/1955122188740149377","timestamp":"1754972428","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4ab5b680-1fab-5673-989d-c3a28bac7b1e","type":"url","category":"Network activity","to_ids":true,"value":"http://hsbc.host","comment":"https://x.com/c9lab_soc/status/1955122188740149377","timestamp":"1754972428","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4b6c881a-8e3e-59d0-a9b5-3ef96102d7ff","type":"url","category":"Network activity","to_ids":true,"value":"https://www.binanceltr.com","comment":"https://x.com/AddressIntel/status/1955132156767817948","timestamp":"1754974805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"963289b2-0db6-572e-bc07-f644feb4b4aa","type":"domain","category":"Network activity","to_ids":true,"value":"binanceltr.com","comment":"https://x.com/AddressIntel/status/1955132156767817948","timestamp":"1754974805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6fff904-7c3a-5a26-ad52-aa90d96507b5","type":"url","category":"Network activity","to_ids":true,"value":"http://bodyflexbdgym.com/bO1FLv","comment":"https://x.com/romonlyht/status/1955139004011053185","timestamp":"1754976437","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f7f46f57-e1a1-5cd9-8ebc-597943257df4","type":"url","category":"Network activity","to_ids":true,"value":"https://paypay.co.jp%N1D1PJWLU%klf3x9vbk%oOSBuAo0@bodyflexbdgym.com/bO1FLv","comment":"https://x.com/romonlyht/status/1955139004011053185","timestamp":"1754976437","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93480f70-f508-5ffd-a48a-62f72166e468","type":"url","category":"Network activity","to_ids":true,"value":"https://mkvyhcu.top/Tnm2K6/","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b83b5164-9e85-5d84-a335-b7e7b3acd625","type":"url","category":"Network activity","to_ids":true,"value":"https://mkvyhcu.top/Tnm2K6","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b300b69-56e3-5ff3-af05-5741c7646bc6","type":"domain","category":"Network activity","to_ids":true,"value":"bodyflexbdgym.com","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dae14179-c747-5334-8e76-3361f9b10104","type":"url","category":"Network activity","to_ids":true,"value":"https://paypay.co.jp%N1D1PJWLU%klf3x9vbk%oOSBuAo0@bodyflexbdgym.com/bO1FLv/","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b98530d9-d0c7-5c47-af15-b67571127490","type":"domain","category":"Network activity","to_ids":true,"value":"paypay.co.jp%N1D1PJWLU%klf3x9vbk%oOSBuAo0@bodyflexbdgym.com","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a702da3-cf4d-588a-8f08-f68c08282b3e","type":"domain","category":"Network activity","to_ids":true,"value":"mkvyhcu.top","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c8c724e2-87b9-5467-9c22-415049f79d01","type":"url","category":"Network activity","to_ids":true,"value":"http://bodyflexbdgym.com/bO1FLv/","comment":"https://x.com/romonlyht/status/1955139007932682287","timestamp":"1754976438","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a3cb140-19ed-5fbb-95fb-d6c84cedb64e","type":"domain","category":"Network activity","to_ids":true,"value":"www2.mylx888.com","comment":"https://x.com/romonlyht/status/1955143898541723803","timestamp":"1754977604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b385ca2-45a6-5c2d-865d-f9b7353e7049","type":"url","category":"Network activity","to_ids":true,"value":"https://medauth.cfd/fy5g8J","comment":"https://x.com/romonlyht/status/1955143898541723803","timestamp":"1754977604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d43c1243-ec01-522b-9405-a794c7472ac4","type":"url","category":"Network activity","to_ids":true,"value":"https://www2.mylx888.com/DJrecard/","comment":"https://x.com/romonlyht/status/1955143898541723803","timestamp":"1754977604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e910c042-c83b-5802-8303-58697f05f395","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.14.147","comment":"https://x.com/romonlyht/status/1955143898541723803","timestamp":"1754977604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f82eb74d-cdf6-53de-8e81-9abf41c02c98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.22","comment":"https://x.com/romonlyht/status/1955143898541723803","timestamp":"1754977604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a2f12a1-6335-52f4-991d-0cf8f01a2612","type":"domain","category":"Network activity","to_ids":true,"value":"medauth.cfd","comment":"https://x.com/romonlyht/status/1955143900940980385","timestamp":"1754977605","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d244c8e4-b7a2-58df-8513-be8207154ebe","type":"url","category":"Network activity","to_ids":true,"value":"https://medauth.cfd/fy5g8J/","comment":"https://x.com/romonlyht/status/1955143900940980385","timestamp":"1754977605","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ddeb327-7be7-5b19-8fbf-9d140325c66c","type":"url","category":"Network activity","to_ids":true,"value":"https://kskyzvrcwbfx.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1955147260838166856","timestamp":"1754978406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"158800cc-c80c-52ee-bda2-8087a5598e86","type":"domain","category":"Network activity","to_ids":true,"value":"kskyzvrcwbfx.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1955147260838166856","timestamp":"1754978406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4394ddaf-877d-5150-84c0-30ab57bde541","type":"url","category":"Network activity","to_ids":true,"value":"http://116.198.37.5:443","comment":"https://x.com/drb_ra/status/1955148205357711861","timestamp":"1754978631","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8c47b9fd-bbbe-5d0f-9482-41d4a14192f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.198.37.5","comment":"https://x.com/drb_ra/status/1955148343950106821","timestamp":"1754978664","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db022b28-a13d-5fa6-bc3e-b2502121b071","type":"url","category":"Network activity","to_ids":true,"value":"http://116.198.37.5:80","comment":"https://x.com/drb_ra/status/1955148343950106821","timestamp":"1754978664","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fa3fc868-de53-53ab-ad38-e62d56bfb877","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.80.55","comment":"https://x.com/drb_ra/status/1955159126675239292","timestamp":"1754981235","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"4e5071a5-5984-5464-9068-045123d209b7","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.80.55:4000","comment":"https://x.com/drb_ra/status/1955159126675239292","timestamp":"1754981235","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f688945f-a203-5408-9c8b-8306734024e6","type":"url","category":"Network activity","to_ids":true,"value":"http://89.23.113.207:80","comment":"https://x.com/drb_ra/status/1955159264927863037","timestamp":"1754981268","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"eedb75f6-f031-5168-9170-bde57ebfcb6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.23.113.207","comment":"https://x.com/drb_ra/status/1955159264927863037","timestamp":"1754981268","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ce573eaa-ead3-5598-b668-042881ff8f35","type":"url","category":"Network activity","to_ids":true,"value":"http://35.174.117.208:80","comment":"https://x.com/drb_ra/status/1955159403297964393","timestamp":"1754981301","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6288e06e-b81d-5f24-8cdd-16213184e9dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.174.117.208","comment":"https://x.com/drb_ra/status/1955159403297964393","timestamp":"1754981301","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"636189d8-bd4c-5f55-bf12-30126f99c672","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.34.216:443","comment":"https://x.com/drb_ra/status/1955159541361897587","timestamp":"1754981334","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"aba4e9c0-e34e-5da0-a891-7b6c031d9ac7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.34.216","comment":"https://x.com/drb_ra/status/1955159541361897587","timestamp":"1754981334","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d62d2089-6d89-5e9d-8c9a-776c9b4c7dae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.196.4","comment":"https://x.com/drb_ra/status/1955159679962661214","timestamp":"1754981367","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"32688058-624e-5e81-a346-60b2b235460e","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.196.4:443","comment":"https://x.com/drb_ra/status/1955159679962661214","timestamp":"1754981367","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"c452c442-1d4f-58d9-be29-0c7d5edda58a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.231.210.114:445","comment":"https://x.com/drb_ra/status/1955159819322605986","timestamp":"1754981400","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"51468e8f-d596-57a0-a71e-77d71c937a1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.180.222.41","comment":"https://x.com/drb_ra/status/1955159957927518712","timestamp":"1754981433","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"5c6f8083-b6f9-54ad-911f-ae624ebe5c91","type":"url","category":"Network activity","to_ids":true,"value":"http://139.180.222.41:443","comment":"https://x.com/drb_ra/status/1955159957927518712","timestamp":"1754981433","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"624c809f-358d-5163-a743-120ec3130153","type":"url","category":"Network activity","to_ids":true,"value":"http://204.12.233.125:40000","comment":"https://x.com/drb_ra/status/1955160096226300092","timestamp":"1754981466","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"16e301b3-a809-562a-9c9f-e597abd17a3d","type":"url","category":"Network activity","to_ids":true,"value":"http://204.12.233.125:443","comment":"https://x.com/drb_ra/status/1955160234013401134","timestamp":"1754981499","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"216b18b6-f3a8-5e3f-b030-cbfb5c2b5470","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.12.233.125","comment":"https://x.com/drb_ra/status/1955160234013401134","timestamp":"1754981499","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"786f4f9d-f391-55bc-a7f9-872eaa92d4a2","type":"url","category":"Network activity","to_ids":true,"value":"http://54.158.22.124:443","comment":"https://x.com/drb_ra/status/1955160372299583508","timestamp":"1754981532","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f989d3d6-b884-5f26-8d24-78b7cbc32680","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.158.22.124","comment":"https://x.com/drb_ra/status/1955160372299583508","timestamp":"1754981532","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"45a3a092-cab4-51e7-a285-84fbc0fbdbf4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.220.124.6","comment":"https://x.com/drb_ra/status/1955160510799725029","timestamp":"1754981565","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f6195294-0eb9-5beb-b047-9abe855c97a4","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.124.6:8443","comment":"https://x.com/drb_ra/status/1955160510799725029","timestamp":"1754981565","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6aacd552-089e-5a19-b7b3-9a54aed5270f","type":"url","category":"Network activity","to_ids":true,"value":"http://158.69.197.228:7443","comment":"https://x.com/drb_ra/status/1955160649392099735","timestamp":"1754981598","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3ae918fc-7e31-5d65-b179-253d0da50460","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.69.197.228","comment":"https://x.com/drb_ra/status/1955160649392099735","timestamp":"1754981598","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3790cbde-238e-509e-9699-a5e72a4b8b19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.233.127.71","comment":"https://x.com/drb_ra/status/1955160787863146994","timestamp":"1754981631","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"f8f055d7-81c9-5920-9a05-33e3bdfb5a3c","type":"url","category":"Network activity","to_ids":true,"value":"http://193.233.127.71:7443","comment":"https://x.com/drb_ra/status/1955160787863146994","timestamp":"1754981631","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"8ab735e7-20de-5a65-a0f7-d48065edfa31","type":"url","category":"Network activity","to_ids":true,"value":"http://137.184.83.210:7443","comment":"https://x.com/drb_ra/status/1955160924836221377","timestamp":"1754981664","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a5d550ed-4a4f-5137-a256-b01b602fb1a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.184.83.210","comment":"https://x.com/drb_ra/status/1955160924836221377","timestamp":"1754981664","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"becc7d55-1f31-56ce-9d6e-4df20d63b387","type":"url","category":"Network activity","to_ids":true,"value":"http://69.5.189.15:4321","comment":"https://x.com/drb_ra/status/1955161571044257991","timestamp":"1754981818","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8e91cc65-2001-52a3-b68b-7de0a663af02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.189.15","comment":"https://x.com/drb_ra/status/1955161571044257991","timestamp":"1754981818","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"22f12880-d1ae-564d-a98c-cc392f4764aa","type":"url","category":"Network activity","to_ids":true,"value":"http://69.195.132.4:8081","comment":"https://x.com/drb_ra/status/1955161709821194726","timestamp":"1754981851","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"0393fc7c-1f62-5d4b-89f3-8a772609e576","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.195.132.4","comment":"https://x.com/drb_ra/status/1955161709821194726","timestamp":"1754981851","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"6c87c848-b506-5240-94ba-26d2def10b42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.176.9.135","comment":"https://x.com/drb_ra/status/1955161847356633367","timestamp":"1754981884","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1eb31428-af8d-5bbc-91f8-793ab13f0b78","type":"url","category":"Network activity","to_ids":true,"value":"http://64.176.9.135:8080","comment":"https://x.com/drb_ra/status/1955161847356633367","timestamp":"1754981884","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"71930412-6fda-5044-a357-58bccd04531c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.179","comment":"https://x.com/drb_ra/status/1955161985160507547","timestamp":"1754981917","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d97b405c-43de-5e6c-a034-e1fca537a29a","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.179:2404","comment":"https://x.com/drb_ra/status/1955161985160507547","timestamp":"1754981917","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1e1d79ff-4ed8-57cf-811d-207077a728a0","type":"url","category":"Network activity","to_ids":true,"value":"http://3.141.103.103:443","comment":"https://x.com/drb_ra/status/1955162122519753076","timestamp":"1754981949","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6bb76484-5685-53b0-a94d-dbc0c362a374","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.122.201.113","comment":"https://x.com/drb_ra/status/1955162260394922492","timestamp":"1754981982","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"25ce40cf-bba6-58ef-b9e7-2c8479d41cc5","type":"url","category":"Network activity","to_ids":true,"value":"http://109.122.201.113:443","comment":"https://x.com/drb_ra/status/1955162260394922492","timestamp":"1754981982","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e91818e5-02a9-5053-8346-699c1894da9f","type":"url","category":"Network activity","to_ids":true,"value":"http://38.47.108.160:8080","comment":"https://x.com/drb_ra/status/1955162398836326634","timestamp":"1754982015","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"139e55ed-3972-58ef-9a64-dfb4a3cf0ecd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.47.108.160","comment":"https://x.com/drb_ra/status/1955162398836326634","timestamp":"1754982015","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5b681456-610e-58b2-ad94-cee70a874f78","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.189.193","comment":"https://x.com/drb_ra/status/1955162536535277876","timestamp":"1754982048","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"fee5480a-fd05-5238-99c1-1d06263c2e29","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.189.193:443","comment":"https://x.com/drb_ra/status/1955162536535277876","timestamp":"1754982048","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"92871de7-f723-5071-adfa-3f44fae90a2c","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.158.109:8020","comment":"https://x.com/drb_ra/status/1955162674557272249","timestamp":"1754982081","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3f2aa47b-899d-593b-9757-9cbe0a14f676","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.158.109","comment":"https://x.com/drb_ra/status/1955162674557272249","timestamp":"1754982081","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f8467588-28f4-5292-bf72-f689ac53f03c","type":"url","category":"Network activity","to_ids":true,"value":"http://201.235.123.146:5603","comment":"https://x.com/drb_ra/status/1955162812843450419","timestamp":"1754982114","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"24e6a08c-d382-5118-9a3e-230007ca5bc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.235.123.146","comment":"https://x.com/drb_ra/status/1955162812843450419","timestamp":"1754982114","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d63a0277-eecb-5b96-849b-4362cb4bfc24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.50.94.54","comment":"https://x.com/drb_ra/status/1955162950332805616","timestamp":"1754982147","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"50b04d2b-d9ca-5e00-9927-8e599542c3b8","type":"url","category":"Network activity","to_ids":true,"value":"http://74.50.94.54:8808","comment":"https://x.com/drb_ra/status/1955162950332805616","timestamp":"1754982147","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"60b0ce54-188d-53b5-b4f9-cca9578297fe","type":"domain","category":"Network activity","to_ids":true,"value":"jo-loagm00.com","comment":"https://x.com/harugasumi/status/1955163806184902921","timestamp":"1754982351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0221e80-9ae4-5702-8014-81faedb17d80","type":"url","category":"Network activity","to_ids":true,"value":"https://jo-loagm00.com/cash/driect/client/anti/3210000/","comment":"https://x.com/harugasumi/status/1955163806184902921","timestamp":"1754982351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44b6dc66-260c-58cf-b06a-09e3e9711576","type":"url","category":"Network activity","to_ids":true,"value":"https://jo-loagm01-08.com","comment":"https://x.com/harugasumi/status/1955163806184902921","timestamp":"1754982351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c2f0319-4e78-59d9-81b6-b74bcc2fcd14","type":"domain","category":"Network activity","to_ids":true,"value":"jo-loagm01-08.com","comment":"https://x.com/harugasumi/status/1955163806184902921","timestamp":"1754982351","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80e8aca3-4bf7-526f-9825-41c20ed481c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.147.140.165","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"f217c5e9-e6bd-5bc7-84cc-2c4f6223b69d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.216.24:443","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"d1e73510-97db-571a-a2e3-d9e3d61064cc","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.47.83:80","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"9b2985ce-6156-5665-bd69-cc031eef1226","type":"url","category":"Network activity","to_ids":true,"value":"http://194.147.140.165:1604","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"7fe8c71a-0911-5a3d-ab19-74b72a02a619","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.216.24","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"4a9cbea5-8d02-5b2d-b892-be698186ac81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.47.83","comment":"https://x.com/FalconFeedsio/status/1955166371979071677","timestamp":"1754982962","distribution":"5"},{"uuid":"d4dbb923-2126-53c8-b9f6-048a5eaeaa70","type":"url","category":"Network activity","to_ids":true,"value":"https://t-piaticket.jp/jp.php?access_key=","comment":"https://x.com/harugasumi/status/1955174324991934643","timestamp":"1754984859","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a80218c7-ec6d-52b2-93d7-b3c271c442f1","type":"domain","category":"Network activity","to_ids":true,"value":"t-piaticket.jp","comment":"https://x.com/harugasumi/status/1955174324991934643","timestamp":"1754984859","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"86219925-31e7-5e1c-bb88-1124fef052db","type":"domain","category":"Network activity","to_ids":true,"value":"securemapsonlinecu.weebly.com","comment":"https://x.com/urldna_bot/status/1955177473374634413","timestamp":"1754985609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e2164154-e843-553c-a597-1f46a7be795d","type":"url","category":"Network activity","to_ids":true,"value":"https://securemapsonlinecu.weebly.com","comment":"https://x.com/urldna_bot/status/1955177473374634413","timestamp":"1754985609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"262722d8-cee4-5781-816f-c170e26459d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.95.78","comment":"https://x.com/RakeshKrish12/status/1955177905065181388","timestamp":"1754985712","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"9a507eae-7740-58b5-a8ce-a8d1d89bc77d","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.95.78","comment":"https://x.com/RakeshKrish12/status/1955177905065181388","timestamp":"1754985712","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"d4bf9c19-59b0-5ac6-8d57-c57779312252","type":"url","category":"Network activity","to_ids":true,"value":"http://138.68.182.42:53","comment":"https://x.com/drb_ra/status/1955196048994914334","timestamp":"1754990038","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5d03c4c8-9f9a-5322-9a5a-c3c1f60be8ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.68.182.42","comment":"https://x.com/drb_ra/status/1955196048994914334","timestamp":"1754990038","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a6e17052-eab3-5ae2-a220-fe2486c0dfff","type":"url","category":"Network activity","to_ids":true,"value":"http://101.32.203.53:53","comment":"https://x.com/drb_ra/status/1955196188468084988","timestamp":"1754990071","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7d313474-f8b9-5aa6-b75e-373aa844c5c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.32.203.53","comment":"https://x.com/drb_ra/status/1955196188468084988","timestamp":"1754990071","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f83f215d-3d5a-53cc-8543-b721dcd80617","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.115.43","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d30620f8-e80e-5386-9ffe-39475a55e033","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.115.43:53","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8f374aec-1dc0-590e-9a23-cb5f2d4b9526","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.hostwps.cn/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a07f8086-2e2f-5224-b3a7-77622eb3e24e","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.hostwps.cn","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6eab359e-5d63-561e-92a6-4bd92cade4d3","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.hostwps.cn/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7973dad4-6123-5b9f-9eb2-86ef39f642fd","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.hostwps.cn","comment":"https://x.com/drb_ra/status/1955196330424377539","timestamp":"1754990105","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2760e469-a7d4-5cde-93bd-d255067cdf0c","type":"url","category":"Network activity","to_ids":true,"value":"https://mymtsmailhelp.weebly.com","comment":"https://x.com/urldna_bot/status/1955207673357418790","timestamp":"1754992809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b4d94500-8999-5b92-af02-bb862aa3b501","type":"domain","category":"Network activity","to_ids":true,"value":"mymtsmailhelp.weebly.com","comment":"https://x.com/urldna_bot/status/1955207673357418790","timestamp":"1754992809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7858bc67-0e52-5143-b7a0-35ebd3f79266","type":"md5","category":"Payload delivery","to_ids":true,"value":"c0ce37b096179a06c4dd060140eb5004","comment":"https://x.com/suyog41/status/1955213818021413115","timestamp":"1754994274","distribution":"5","Tag":[{"name":"ransomware"},{"name":"stealer"}]},{"uuid":"48152b35-a27f-5703-a31d-e3319a1851b2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.81.209.231:443","comment":"https://x.com/drb_ra/status/1955214727837094396","timestamp":"1754994491","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e31e0bcd-d266-5be2-af1d-fa76adb31c6c","type":"url","category":"Network activity","to_ids":true,"value":"https://3.81.209.231:443","comment":"https://x.com/drb_ra/status/1955214727837094396","timestamp":"1754994491","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f463d9e0-1a94-5bfc-9456-192000622760","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:4444","comment":"https://x.com/drb_ra/status/1955223488513364059","timestamp":"1754996580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"edb7adeb-6040-5cb8-af37-0d50dae75ca7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.129","comment":"https://x.com/drb_ra/status/1955224134880804944","timestamp":"1754996734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22506453-4243-5e81-bd45-462f3161f64e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:1080","comment":"https://x.com/drb_ra/status/1955224134880804944","timestamp":"1754996734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83c67740-41e3-50d4-9f55-b782fdf24a88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.147.170.91","comment":"https://x.com/drb_ra/status/1955224274538545585","timestamp":"1754996768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"67aee0ca-1228-526e-9923-6dfa970af151","type":"url","category":"Network activity","to_ids":true,"value":"http://38.147.170.91:9999","comment":"https://x.com/drb_ra/status/1955224274538545585","timestamp":"1754996768","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"04389526-2efb-545d-a24b-21604a298f0c","type":"domain","category":"Network activity","to_ids":true,"value":"neonhush.cipherdrift.qzz.io","comment":"https://x.com/drb_ra/status/1955224415806832985","timestamp":"1754996801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e68bdd45-3a83-5822-b8bc-a83afad51de7","type":"url","category":"Network activity","to_ids":true,"value":"https://neonhush.cipherdrift.qzz.io/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955224415806832985","timestamp":"1754996801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"42575004-4610-595c-a1b7-1eb79ea78a87","type":"url","category":"Network activity","to_ids":true,"value":"http://101.36.125.58:8443","comment":"https://x.com/drb_ra/status/1955224415806832985","timestamp":"1754996801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6f17e2d6-3e06-5ea5-9c4c-7319caef2765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.36.125.58","comment":"https://x.com/drb_ra/status/1955224415806832985","timestamp":"1754996801","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a6836e41-47c0-51ed-bb98-814b6908e60d","type":"domain","category":"Network activity","to_ids":true,"value":"yanzu.top","comment":"https://x.com/drb_ra/status/1955224555003261398","timestamp":"1754996834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1e1bf417-9550-5de4-95ed-d65ee5793f85","type":"url","category":"Network activity","to_ids":true,"value":"https://yanzu.top/activity","comment":"https://x.com/drb_ra/status/1955224555003261398","timestamp":"1754996834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"feb51c1c-0b74-5a61-b6e9-3d89513df373","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.31.73:443","comment":"https://x.com/drb_ra/status/1955224555003261398","timestamp":"1754996834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1574c241-eca5-54b6-b551-3b4e30c8f8ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.31.73","comment":"https://x.com/drb_ra/status/1955224555003261398","timestamp":"1754996834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c279d11-8ac1-55f7-a656-69a6293e07b8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.137.60:7566","comment":"https://x.com/drb_ra/status/1955224694421901757","timestamp":"1754996868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a16fcab5-0f7b-5d51-a0ef-5cfe1636d5ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.137.60","comment":"https://x.com/drb_ra/status/1955224694421901757","timestamp":"1754996868","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"42fd411a-76d3-5a0e-a8c9-41c1c58c9800","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.198.180.255","comment":"https://x.com/drb_ra/status/1955224832938852562","timestamp":"1754996901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fff95f0c-3102-55a9-b4cb-4ef58493ec58","type":"url","category":"Network activity","to_ids":true,"value":"https://143.198.180.255/activity","comment":"https://x.com/drb_ra/status/1955224832938852562","timestamp":"1754996901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0df74837-9275-574b-9d80-99998fc6946c","type":"url","category":"Network activity","to_ids":true,"value":"http://143.198.180.255:443","comment":"https://x.com/drb_ra/status/1955224832938852562","timestamp":"1754996901","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03cbd9b0-61cd-53de-a48b-7c6ec15e39c2","type":"domain","category":"Network activity","to_ids":true,"value":"1258922563-2333n6dmlx.ap-guangzhou.tencentscf.com","comment":"https://x.com/drb_ra/status/1955225986976325845","timestamp":"1754997176","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"07a2b25e-542f-56a6-a24f-f7a5e44f8225","type":"url","category":"Network activity","to_ids":true,"value":"https://1258922563-2333n6dmlx.ap-guangzhou.tencentscf.com/Test/protect/JZJ8DALCUB","comment":"https://x.com/drb_ra/status/1955225986976325845","timestamp":"1754997176","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7a4680c5-4d9d-5328-82d5-2aedb3ce8f76","type":"url","category":"Network activity","to_ids":true,"value":"http://43.139.50.42:443","comment":"https://x.com/drb_ra/status/1955225986976325845","timestamp":"1754997176","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a9a3c483-5f66-5d5f-adb6-09971016d391","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.139.50.42","comment":"https://x.com/drb_ra/status/1955225986976325845","timestamp":"1754997176","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ac21e174-0024-5d3c-8f68-e672bf7cac64","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.63:80","comment":"https://x.com/drb_ra/status/1955226126420193523","timestamp":"1754997209","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"068087dd-5091-5b2b-bcef-b79e587d2435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.63","comment":"https://x.com/drb_ra/status/1955226126420193523","timestamp":"1754997209","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fcfc0d31-0291-5b66-ab99-723fa6c28c09","type":"md5","category":"Payload delivery","to_ids":true,"value":"e5e0f14dc65e78b1b38c6527833685bc","comment":"https://x.com/suyog41/status/1955230145691971602","timestamp":"1754998167","distribution":"5"},{"uuid":"5e6aa006-c937-5f82-8432-4ac0f9dd5ec2","type":"md5","category":"Payload delivery","to_ids":true,"value":"51b30f02b078ef57ccee4601a6cc3612","comment":"https://x.com/suyog41/status/1955230145691971602","timestamp":"1754998167","distribution":"5"},{"uuid":"38da454d-37fa-5b21-9a6b-2f50406d8db1","type":"md5","category":"Payload delivery","to_ids":true,"value":"f7989bca8f64f76e566c85b0ff19f1e5","comment":"https://x.com/suyog41/status/1955230145691971602","timestamp":"1754998167","distribution":"5"},{"uuid":"2c50614d-7c6a-5822-a354-e564f5f941f3","type":"md5","category":"Payload delivery","to_ids":true,"value":"13771bbd141b0520c5b0c6ea6bca5f7b","comment":"https://x.com/suyog41/status/1955230145691971602","timestamp":"1754998167","distribution":"5"},{"uuid":"452f0998-722f-5920-89a0-e91467b20a50","type":"md5","category":"Payload delivery","to_ids":true,"value":"b80ca6c09f53fbba92c64f5a10939514","comment":"https://x.com/suyog41/status/1955230145691971602","timestamp":"1754998167","distribution":"5"},{"uuid":"1e86d144-6be8-5f33-bb81-7ec037938373","type":"domain","category":"Network activity","to_ids":true,"value":"hjdnshu.wixsite.com","comment":"https://x.com/urldna_bot/status/1955237856437207263","timestamp":"1755000006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a3fec880-9a29-5d60-a201-11d38f4abac2","type":"url","category":"Network activity","to_ids":true,"value":"https://hjdnshu.wixsite.com/my-site","comment":"https://x.com/urldna_bot/status/1955237856437207263","timestamp":"1755000006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"251e3a5a-899c-5328-88ea-e8cac4d56c3e","type":"domain","category":"Network activity","to_ids":true,"value":"signon1-mail-posteo-authid-oauth2onepass-ou3bvgrrhrw0qd1.weebly.com","comment":"https://x.com/urldna_bot/status/1955268071955853620","timestamp":"1755007210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9bea3662-b854-530c-9557-9ba315a33683","type":"url","category":"Network activity","to_ids":true,"value":"https://signon1-mail-posteo-authid-oauth2onepass-ou3bvgrrhrw0qd1.weebly.com","comment":"https://x.com/urldna_bot/status/1955268071955853620","timestamp":"1755007210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f4c13069-6711-52be-9f5e-95e98e969f12","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:60000","comment":"https://x.com/SarlackLab/status/1955283206984364333","timestamp":"1755010818","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1955283206984364333","timestamp":"1755010818","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"44f190e0-b346-535f-b4f0-03620b1b5192","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.73.249:6522","comment":"https://x.com/SarlackLab/status/1955283237443453323","timestamp":"1755010825","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"7812dee4-525d-5157-abb1-76e5644b1bce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.249","comment":"https://x.com/SarlackLab/status/1955283237443453323","timestamp":"1755010825","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"84a2fc4b-25af-5c4c-a2d4-0b5ea6d3f91a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.253.251.138","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"9b6f2e78-7670-5a24-8884-b8defb8a7572","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.243.64","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"49d7c937-ad31-5319-8fe8-cca237ef12c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.243.5","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"f0a800d8-27e4-5ad9-8a6e-663f9819c44f","type":"url","category":"Network activity","to_ids":true,"value":"http://80.253.251.138","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"af316e7e-4de2-5011-93b9-66bdc5a2f5fb","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.243.64","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"67f30bbc-c0d4-5be0-a463-4e61989f76fb","type":"domain","category":"Network activity","to_ids":true,"value":"ue29ognhUGjiQc.com","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"18127c2b-5915-5688-a194-f1e6df95c9ad","type":"url","category":"Network activity","to_ids":true,"value":"http://r2uvdV8HqEZ2Xu.com","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"22434cd7-cc55-55f4-a5b9-be65ee4ae324","type":"domain","category":"Network activity","to_ids":true,"value":"r2uvdV8HqEZ2Xu.com","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"7e4fcb29-f602-54da-919d-f0cf66d02b75","type":"url","category":"Network activity","to_ids":true,"value":"http://ue29ognhUGjiQc.com","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"534d5bbb-c538-5a4d-969c-b212d16c9c92","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.243.5","comment":"https://x.com/naumovax/status/1955297617492975951","timestamp":"1755014254","distribution":"5"},{"uuid":"303a7ae6-df99-51c7-a76f-3518a0c699d6","type":"url","category":"Network activity","to_ids":true,"value":"http://13.37.132.128:443","comment":"https://x.com/FalconFeedsio/status/1955299120509575535","timestamp":"1755014612","distribution":"5"},{"uuid":"ee520f41-4297-5ac5-af44-51aa31509642","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.37.132.128","comment":"https://x.com/FalconFeedsio/status/1955299120509575535","timestamp":"1755014612","distribution":"5"},{"uuid":"10c6c40a-fd9d-54f1-9174-86d7d4738afb","type":"url","category":"Network activity","to_ids":true,"value":"https://quadshipxpress.com.bitravfpro.com","comment":"https://x.com/AmberMille78556/status/1955304042353115387","timestamp":"1755015786","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45b24849-e762-58de-b84b-a6cfc6586060","type":"domain","category":"Network activity","to_ids":true,"value":"quadshipxpress.com.bitravfpro.com","comment":"https://x.com/AmberMille78556/status/1955304042353115387","timestamp":"1755015786","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e10288cb-b5d3-5cfc-b2d7-6c6b875a590e","type":"url","category":"Network activity","to_ids":true,"value":"https://103.146.158.129/cx","comment":"https://x.com/drb_ra/status/1955306925135892885","timestamp":"1755016473","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c09e979f-2fd9-5fb0-b3f6-a2e481f84e3a","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:8880","comment":"https://x.com/drb_ra/status/1955306925135892885","timestamp":"1755016473","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2de92cc6-ae4a-5057-9fde-b256e2a4fce5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.117.80.93","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"20ac91bf-fcd1-5c3f-afca-970d6614f491","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.74.105.147","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"5de02135-1808-51f9-b720-8dbce24356d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.236.76.20","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"0629f8bb-b8ec-52bd-949d-b5f4f3fce719","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.82.76.10","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"f89f65fb-e701-59e9-897f-47c50503c042","type":"url","category":"Network activity","to_ids":true,"value":"http://103.74.105.147","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"ec819cfb-8909-574e-8887-5e7b7c94b445","type":"url","category":"Network activity","to_ids":true,"value":"http://154.82.76.10","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"1e49b2cd-91bc-5bf2-8f03-a79fc49d7d69","type":"url","category":"Network activity","to_ids":true,"value":"http://185.236.76.20","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"9ae19438-68ad-5832-acf7-112420985e36","type":"url","category":"Network activity","to_ids":true,"value":"http://45.117.80.93","comment":"https://x.com/FalconFeedsio/status/1955308537682522170","timestamp":"1755016857","distribution":"5"},{"uuid":"c54d409b-1d95-573a-b5a8-393bc392d4f6","type":"url","category":"Network activity","to_ids":true,"value":"http://213.209.150.84:1664","comment":"https://x.com/SarlackLab/status/1955313399161586121","timestamp":"1755018016","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"0706b858-c4b1-5ca4-bc75-ae9355a47290","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.150.84","comment":"https://x.com/SarlackLab/status/1955313399161586121","timestamp":"1755018016","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"29b325c2-55c5-5ddc-916a-b5d8135ed144","type":"url","category":"Network activity","to_ids":true,"value":"http://18.212.58.139","comment":"https://x.com/spacesub54/status/1955321246674997417","timestamp":"1755019887","distribution":"5","Tag":[{"name":"RedLine"},{"name":"stealer"},{"name":"malware"}]},{"uuid":"4e9d8e9c-54c2-5c84-8a4a-9f0493be6051","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.212.58.139","comment":"https://x.com/spacesub54/status/1955321246674997417","timestamp":"1755019887","distribution":"5","Tag":[{"name":"RedLine"},{"name":"stealer"},{"name":"malware"}]},{"uuid":"33367d4f-e301-53d5-b1e2-9e8b57f14b1b","type":"url","category":"Network activity","to_ids":true,"value":"https://fran33.weebly.com","comment":"https://x.com/urldna_bot/status/1955328459204419966","timestamp":"1755021607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7d46602b-0b24-59ee-bb10-3cea8fc3e3cd","type":"domain","category":"Network activity","to_ids":true,"value":"fran33.weebly.com","comment":"https://x.com/urldna_bot/status/1955328459204419966","timestamp":"1755021607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1fb1b9e9-317d-53b8-afb3-32fcabd86dc1","type":"url","category":"Network activity","to_ids":true,"value":"http://extranet-manage.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"02f34ea1-31d1-5883-8627-e66951412514","type":"domain","category":"Network activity","to_ids":true,"value":"extranet-manage.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"299a34ba-f668-5369-9868-a0816b61c1a9","type":"url","category":"Network activity","to_ids":true,"value":"http://formcomplaint-id8173.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"9c7215a8-cfbc-54c1-92a1-d8000cb11204","type":"domain","category":"Network activity","to_ids":true,"value":"formcomplaint-id8173.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"7198728c-f175-5b26-b36a-18045eae189d","type":"url","category":"Network activity","to_ids":true,"value":"http://complaintform-id9205.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"f4a929dd-a306-5eb4-8cea-61294294b61d","type":"url","category":"Network activity","to_ids":true,"value":"http://reservation-id129245.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"5f1f9a83-dada-5620-926d-6a95818cc5d6","type":"url","category":"Network activity","to_ids":true,"value":"http://visitor952816.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"9280b0da-3165-55ce-af13-6c1579d0b8ae","type":"domain","category":"Network activity","to_ids":true,"value":"visitor952816.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"2d3caf7d-1df3-59bc-b876-7a24e733ed32","type":"domain","category":"Network activity","to_ids":true,"value":"reservation-id129245.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"3a20b7b1-db7d-5cb7-86ed-c14105aafb97","type":"domain","category":"Network activity","to_ids":true,"value":"complaintform-id9205.help","comment":"https://x.com/ValidinLLC/status/1955336311918956865","timestamp":"1755023479","distribution":"5"},{"uuid":"0b48436e-c165-596d-8f32-c5f92b4538e6","type":"url","category":"Network activity","to_ids":true,"value":"http://141.164.57.28:53","comment":"https://x.com/drb_ra/status/1955336609710153986","timestamp":"1755023550","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7025684-11f2-5f20-8e7a-6fe764fcb8f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.164.57.28","comment":"https://x.com/drb_ra/status/1955336609710153986","timestamp":"1755023550","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"54186925-ca63-541d-baf7-51cef5b4fe95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.105.48.75","comment":"https://x.com/drb_ra/status/1955340298483093843","timestamp":"1755024430","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"45548997-67ba-5550-9787-d26fd618be9d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.105.48.75:443","comment":"https://x.com/drb_ra/status/1955340298483093843","timestamp":"1755024430","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"3f639b8c-efe0-5162-9c01-d78c32c07b84","type":"url","category":"Network activity","to_ids":true,"value":"http://95.216.191.29:444","comment":"https://x.com/drb_ra/status/1955340436563726642","timestamp":"1755024463","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"04e8eef8-d212-567c-b27a-20ebf595496b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.216.191.29","comment":"https://x.com/drb_ra/status/1955340436563726642","timestamp":"1755024463","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a7ef343e-4832-531d-a532-292a29618bdb","type":"url","category":"Network activity","to_ids":true,"value":"http://8.222.237.70:443","comment":"https://x.com/drb_ra/status/1955340574749495317","timestamp":"1755024496","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"e0e0de38-ab5b-57cc-a6d6-524f157dbc13","type":"url","category":"Network activity","to_ids":true,"value":"http://13.48.106.87:443","comment":"https://x.com/drb_ra/status/1955340712381124734","timestamp":"1755024528","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d7017eff-d7e8-56a1-a4b5-b59767d55b3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.48.106.87","comment":"https://x.com/drb_ra/status/1955340712381124734","timestamp":"1755024528","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"be2a229c-9f72-56aa-929c-eeaff39b5606","type":"url","category":"Network activity","to_ids":true,"value":"http://54.243.230.216:443","comment":"https://x.com/drb_ra/status/1955340852051718382","timestamp":"1755024562","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"816d7416-b207-50c0-9432-94de8ef5b674","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.243.230.216","comment":"https://x.com/drb_ra/status/1955340852051718382","timestamp":"1755024562","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"e7c557e1-be9a-531d-a04a-48030dbb31eb","type":"url","category":"Network activity","to_ids":true,"value":"http://163.181.35.106:4506","comment":"https://x.com/drb_ra/status/1955340988718731554","timestamp":"1755024594","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"e454e726-eac1-523f-b9de-5eb673247c19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.181.35.106","comment":"https://x.com/drb_ra/status/1955340988718731554","timestamp":"1755024594","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"edd8a84e-dadc-5b15-bec8-c9d3cb1c1021","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.222.4.175","comment":"https://x.com/drb_ra/status/1955341127365624084","timestamp":"1755024627","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"31c0636d-a8ba-5e10-9e85-60dc884a789b","type":"url","category":"Network activity","to_ids":true,"value":"http://209.222.4.175:3000","comment":"https://x.com/drb_ra/status/1955341127365624084","timestamp":"1755024627","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"5d009c74-502e-547d-be19-a2713452db67","type":"url","category":"Network activity","to_ids":true,"value":"http://68.183.217.161:7443","comment":"https://x.com/drb_ra/status/1955341265454665930","timestamp":"1755024660","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"23d3a1ce-55f5-5c04-ade8-8151be113f96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.183.217.161","comment":"https://x.com/drb_ra/status/1955341265454665930","timestamp":"1755024660","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"3a91acc3-7308-5fb8-98e9-a7536f04ccf9","type":"url","category":"Network activity","to_ids":true,"value":"http://185.117.91.141:7443","comment":"https://x.com/drb_ra/status/1955341403631829210","timestamp":"1755024693","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"d11e6883-85c7-5c3d-8bb4-ce956b33ca31","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.117.91.141","comment":"https://x.com/drb_ra/status/1955341403631829210","timestamp":"1755024693","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"12b98218-5ac6-5b13-8e4d-0dc5768b7367","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.160.58:7443","comment":"https://x.com/drb_ra/status/1955341541691547950","timestamp":"1755024726","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b6435def-3f03-51b0-83b9-35f977663768","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.160.58","comment":"https://x.com/drb_ra/status/1955341541691547950","timestamp":"1755024726","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b17a4504-8ba9-5cc2-a165-ca6dd193f52a","type":"url","category":"Network activity","to_ids":true,"value":"http://37.32.9.150:7443","comment":"https://x.com/drb_ra/status/1955341679541485698","timestamp":"1755024759","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"78f8bc77-6d85-5164-b4db-8fdf0250fec5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.32.9.150","comment":"https://x.com/drb_ra/status/1955341679541485698","timestamp":"1755024759","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bc6dcfdb-c85b-58f2-bf04-79d459c9bdc5","type":"url","category":"Network activity","to_ids":true,"value":"http://150.109.45.120:7443","comment":"https://x.com/drb_ra/status/1955341818754679117","timestamp":"1755024792","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cb5d1314-da39-5a0a-9809-eda1a0921bf7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.109.45.120","comment":"https://x.com/drb_ra/status/1955341818754679117","timestamp":"1755024792","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"2398b169-6d76-5ef8-8665-24adc6b0ae65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.31.178","comment":"https://x.com/drb_ra/status/1955341956243943800","timestamp":"1755024825","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f4846d6e-d4e0-568c-8963-92145379036b","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.31.178:7443","comment":"https://x.com/drb_ra/status/1955341956243943800","timestamp":"1755024825","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c1c976a2-4b45-5181-be22-913609f43026","type":"url","category":"Network activity","to_ids":true,"value":"http://207.180.216.244:8443","comment":"https://x.com/drb_ra/status/1955342093796192599","timestamp":"1755024858","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"182eb7b6-fae2-51aa-92de-095d07819180","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.180.216.244","comment":"https://x.com/drb_ra/status/1955342093796192599","timestamp":"1755024858","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"f5ad5ad0-e744-5ce2-94b7-de0d58b58b59","type":"url","category":"Network activity","to_ids":true,"value":"http://4.210.216.20:443","comment":"https://x.com/drb_ra/status/1955342231574831577","timestamp":"1755024891","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"73106f93-0c83-57a9-945c-ae83225204b3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.9.147.41:443","comment":"https://x.com/drb_ra/status/1955342369097761041","timestamp":"1755024923","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cfdea0e9-a140-5de6-9f2c-114a04d166d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.9.147.41","comment":"https://x.com/drb_ra/status/1955342369097761041","timestamp":"1755024923","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bf1630f5-6b3c-550c-a4a2-e22eb41715e7","type":"url","category":"Network activity","to_ids":true,"value":"http://150.109.45.120:4567","comment":"https://x.com/drb_ra/status/1955342507081945554","timestamp":"1755024956","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8bcf2567-bb3a-55cc-bcba-78d88b0f5000","type":"url","category":"Network activity","to_ids":true,"value":"http://93.115.203.87:8443","comment":"https://x.com/drb_ra/status/1955343151989727308","timestamp":"1755025110","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"81f987f0-c582-529c-b96b-56195ea47d89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.115.203.87","comment":"https://x.com/drb_ra/status/1955343151989727308","timestamp":"1755025110","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"98304bde-70c2-5a73-ba5d-5b815fc72a30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.22.173.65","comment":"https://x.com/drb_ra/status/1955343290284359792","timestamp":"1755025143","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a0e40798-43c2-5f02-adcf-add231fcaa0e","type":"url","category":"Network activity","to_ids":true,"value":"http://89.22.173.65:11601","comment":"https://x.com/drb_ra/status/1955343290284359792","timestamp":"1755025143","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"981eb21e-f2d4-5735-91a2-4b3f72b299cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.199.233.192","comment":"https://x.com/drb_ra/status/1955343428104974434","timestamp":"1755025176","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7434e7e0-9d59-5608-abe3-791262ccb935","type":"url","category":"Network activity","to_ids":true,"value":"http://128.199.233.192:11601","comment":"https://x.com/drb_ra/status/1955343428104974434","timestamp":"1755025176","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9bf17dcf-848e-5e3c-82e3-1542d72e1693","type":"url","category":"Network activity","to_ids":true,"value":"http://86.38.225.117:2404","comment":"https://x.com/drb_ra/status/1955343567372628256","timestamp":"1755025209","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"78d1e52c-19a1-5c1a-b0a5-fe81c3a3fce5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.38.225.117","comment":"https://x.com/drb_ra/status/1955343567372628256","timestamp":"1755025209","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cab9cfe1-4019-5588-af8f-dfcae516f6fb","type":"url","category":"Network activity","to_ids":true,"value":"http://45.15.140.99:443","comment":"https://x.com/drb_ra/status/1955343704731877861","timestamp":"1755025242","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"83f388da-a4f4-5a83-b2a7-f381485e3db1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.15.140.99","comment":"https://x.com/drb_ra/status/1955343704731877861","timestamp":"1755025242","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b079c0bf-2c9c-5392-8284-4ea54bb25466","type":"url","category":"Network activity","to_ids":true,"value":"http://46.142.183.241:51821","comment":"https://x.com/drb_ra/status/1955343842930049151","timestamp":"1755025275","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5ee2013a-c1d8-5f34-b365-179587704994","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.142.183.241","comment":"https://x.com/drb_ra/status/1955343842930049151","timestamp":"1755025275","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4bb6fc65-617d-5070-ac19-d7dc88435742","type":"url","category":"Network activity","to_ids":true,"value":"http://162.55.195.59:3232","comment":"https://x.com/drb_ra/status/1955343980893175992","timestamp":"1755025308","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"f09e3b22-300d-589a-81ed-934f081812fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.55.195.59","comment":"https://x.com/drb_ra/status/1955343980893175992","timestamp":"1755025308","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"05584dc2-e928-51f5-a61e-bb0e4d5e4156","type":"url","category":"Network activity","to_ids":true,"value":"http://45.78.29.98:3232","comment":"https://x.com/drb_ra/status/1955344119523385351","timestamp":"1755025341","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"654eb5b1-f621-5658-ad15-0c2f1425d98c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.14.135.71:2083","comment":"https://x.com/drb_ra/status/1955344257318850803","timestamp":"1755025374","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"af8cf918-fdbb-5518-9f8a-f33610686f05","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.149.120","comment":"https://x.com/drb_ra/status/1955344395491848391","timestamp":"1755025407","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5ccc4ffd-fc85-5084-88e5-080f3ff1fa38","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.149.120:8159","comment":"https://x.com/drb_ra/status/1955344395491848391","timestamp":"1755025407","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"952c9cc3-d06c-5cd0-8443-fcc0725c9b3a","type":"url","category":"Network activity","to_ids":true,"value":"http://79.241.104.139:81","comment":"https://x.com/drb_ra/status/1955344533543162116","timestamp":"1755025439","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"62aae4cf-8213-5ed7-96fa-bea53f380e7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.241.104.139","comment":"https://x.com/drb_ra/status/1955344533543162116","timestamp":"1755025439","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"99f3fdc0-b188-5e6a-812e-526b30943e1d","type":"url","category":"Network activity","to_ids":true,"value":"http://18.119.172.78:788","comment":"https://x.com/drb_ra/status/1955344671829340213","timestamp":"1755025472","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"58375ae5-90e1-5b5e-af63-da5674d6d2a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.119.172.78","comment":"https://x.com/drb_ra/status/1955344671829340213","timestamp":"1755025472","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"86aa1b40-4a6a-5aab-9439-13d6baa2fd73","type":"url","category":"Network activity","to_ids":true,"value":"http://13.211.214.125:38896","comment":"https://x.com/drb_ra/status/1955344813273829613","timestamp":"1755025506","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b7e66d05-5387-557c-817c-887805ff33c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.211.214.125","comment":"https://x.com/drb_ra/status/1955344813273829613","timestamp":"1755025506","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c182a361-52f2-5801-bc26-785b45b9a5ec","type":"url","category":"Network activity","to_ids":true,"value":"http://142.202.189.89:6677","comment":"https://x.com/drb_ra/status/1955344952579256796","timestamp":"1755025539","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"cc236013-d0dc-58a1-a06c-a6c7d7306c85","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.202.189.89","comment":"https://x.com/drb_ra/status/1955344952579256796","timestamp":"1755025539","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"954c817f-1329-5e84-b88e-e57f75b46db7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.73.218.3:2703","comment":"https://x.com/drb_ra/status/1955345091964572129","timestamp":"1755025573","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5f5b793b-8fd6-5060-a888-770e34ba39e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.73.218.3","comment":"https://x.com/drb_ra/status/1955345091964572129","timestamp":"1755025573","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6c3769b2-32ec-5121-920f-91d6459483ad","type":"url","category":"Network activity","to_ids":true,"value":"http://1.95.142.214:25","comment":"https://x.com/drb_ra/status/1955345228832854440","timestamp":"1755025605","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c7ee55d9-6fab-5c98-851a-d1f3f6868c14","type":"url","category":"Network activity","to_ids":true,"value":"http://74.161.160.173:443","comment":"https://x.com/drb_ra/status/1955345366922023122","timestamp":"1755025638","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4ba431e4-1219-594e-9ee8-5ccd3bdf6c5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.161.160.173","comment":"https://x.com/drb_ra/status/1955345366922023122","timestamp":"1755025638","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0bea3aaa-945e-5aed-89ca-2d56ac110617","type":"url","category":"Network activity","to_ids":true,"value":"http://141.11.182.194:8080","comment":"https://x.com/drb_ra/status/1955345504897839396","timestamp":"1755025671","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e07289c5-26ef-560a-bce6-902d62c1e754","type":"url","category":"Network activity","to_ids":true,"value":"http://141.11.182.194:25","comment":"https://x.com/drb_ra/status/1955345642840097211","timestamp":"1755025704","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dc28745f-47a1-57b9-b0ad-8111965da411","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.11.182.194","comment":"https://x.com/drb_ra/status/1955345642840097211","timestamp":"1755025704","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5f6b08cc-cdd4-5909-ae9b-5869ae01538e","type":"url","category":"Network activity","to_ids":true,"value":"http://130.162.185.249:587","comment":"https://x.com/drb_ra/status/1955345781067583857","timestamp":"1755025737","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2723d672-0992-550f-9641-f62f2a3d9540","type":"url","category":"Network activity","to_ids":true,"value":"http://130.162.185.249:443","comment":"https://x.com/drb_ra/status/1955345919466946632","timestamp":"1755025770","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5e7564f9-8d43-5a85-86e1-66e249bae9a0","type":"url","category":"Network activity","to_ids":true,"value":"http://130.162.185.249:80","comment":"https://x.com/drb_ra/status/1955346057623158879","timestamp":"1755025803","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"653c6f21-8e12-557a-8455-a411d245be14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"130.162.185.249","comment":"https://x.com/drb_ra/status/1955346057623158879","timestamp":"1755025803","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2a167502-e100-593c-ae31-fb3e3b203562","type":"url","category":"Network activity","to_ids":true,"value":"http://35.75.17.147:443","comment":"https://x.com/drb_ra/status/1955346195791937688","timestamp":"1755025836","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"53f4b1c4-126f-5ef9-8f5f-ffc7492b86da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.75.17.147","comment":"https://x.com/drb_ra/status/1955346333801308201","timestamp":"1755025869","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"047b18a5-d190-50f8-86e3-5b1839d9a7d4","type":"url","category":"Network activity","to_ids":true,"value":"http://35.75.17.147:80","comment":"https://x.com/drb_ra/status/1955346333801308201","timestamp":"1755025869","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6a2be1e4-9e29-5ca8-8e54-e1bd86b910a9","type":"url","category":"Network activity","to_ids":true,"value":"http://54.153.88.83:80","comment":"https://x.com/drb_ra/status/1955346471726813672","timestamp":"1755025902","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"a99c9757-d2cf-5f47-937a-827fe645259c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.153.88.83","comment":"https://x.com/drb_ra/status/1955346471726813672","timestamp":"1755025902","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"8fad3abb-0560-5aac-805d-3bf73f98863c","type":"url","category":"Network activity","to_ids":true,"value":"http://119.8.239.80:8888","comment":"https://x.com/drb_ra/status/1955346611246080037","timestamp":"1755025935","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"b15c0dad-5861-5bcd-9acd-709201979840","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.8.239.80","comment":"https://x.com/drb_ra/status/1955346611246080037","timestamp":"1755025935","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ca9eded4-74aa-57da-8bdf-86a71ac43162","type":"url","category":"Network activity","to_ids":true,"value":"http://45.78.29.98:8888","comment":"https://x.com/drb_ra/status/1955346750404743240","timestamp":"1755025968","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"d1c69470-fce3-50a4-a131-e905499a859e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.78.29.98","comment":"https://x.com/drb_ra/status/1955346750404743240","timestamp":"1755025968","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ed266fbc-1d67-5c3a-8ba7-be3dee424191","type":"url","category":"Network activity","to_ids":true,"value":"http://188.49.119.146:443","comment":"https://x.com/drb_ra/status/1955346888883851624","timestamp":"1755026001","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d27a70ef-3309-54ea-8bfe-87819605b3bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.49.119.146","comment":"https://x.com/drb_ra/status/1955346888883851624","timestamp":"1755026001","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"f63e6e36-233c-5a8f-8a10-a476f44f86eb","type":"domain","category":"Network activity","to_ids":true,"value":"best-displayed.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1955358716737241565","timestamp":"1755028821","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ab455cbd-7d2f-5874-83db-37ffbf365410","type":"url","category":"Network activity","to_ids":true,"value":"http://best-displayed.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1955358716737241565","timestamp":"1755028821","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"4ba6bdde-ebfa-5779-bc3a-bdbe3d2c042e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.0.234.17","comment":"https://x.com/FalconFeedsio/status/1955369043554340878","timestamp":"1755031283","distribution":"5"},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/FalconFeedsio/status/1955369043554340878","timestamp":"1755031283","distribution":"5"},{"uuid":"81e890d5-5c32-574a-b913-0b7d4757fdb7","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46/diamo/login.php","comment":"https://x.com/FalconFeedsio/status/1955369043554340878","timestamp":"1755031283","distribution":"5"},{"uuid":"d10ec56f-dbc2-595a-a2f6-f24185d82632","type":"url","category":"Network activity","to_ids":true,"value":"http://194.0.234.17:443","comment":"https://x.com/FalconFeedsio/status/1955369043554340878","timestamp":"1755031283","distribution":"5"},{"uuid":"20340a2b-8854-5a28-a3ca-2383bc5528d9","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.70","comment":"https://x.com/threatquery/status/1955373739022921837","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"eda3530c-8799-5783-97a1-33abed8b3101","type":"url","category":"Network activity","to_ids":true,"value":"http://178.250.187.92","comment":"https://x.com/threatquery/status/1955373740797157488","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"31a978e2-61ac-59d5-9095-376456f2ba5d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.250.187.92","comment":"https://x.com/threatquery/status/1955373740797157488","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"ba4e0f12-b23e-51bf-856d-5d80af237e45","type":"url","category":"Network activity","to_ids":true,"value":"http://104.214.168.71","comment":"https://x.com/threatquery/status/1955373742403555752","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"},{"name":"malware"}]},{"uuid":"63f5cd3f-6277-571e-b068-ba0e20063f8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.214.168.71","comment":"https://x.com/threatquery/status/1955373742403555752","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"},{"name":"malware"}]},{"uuid":"53e35a68-67e5-5f41-bb4e-33fd0f13a6ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.70","comment":"https://x.com/threatquery/status/1955373739022921837","timestamp":"1755032403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"2d0dc8e0-591a-5b6a-9d26-9b3b08d2e715","type":"url","category":"Network activity","to_ids":true,"value":"https://103.146.158.129/ptj","comment":"https://x.com/drb_ra/status/1955378997413790135","timestamp":"1755033656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7cb680d9-2e41-5fa8-bd44-dc25b5879858","type":"domain","category":"Network activity","to_ids":true,"value":"aslcagliariit.weebly.com","comment":"https://x.com/urldna_bot/status/1955388853960790377","timestamp":"1755036006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e2180c0e-1ecd-5bf3-9bd9-d0878fccab15","type":"url","category":"Network activity","to_ids":true,"value":"https://aslcagliariit.weebly.com","comment":"https://x.com/urldna_bot/status/1955388853960790377","timestamp":"1755036006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cc9127a6-762a-5abc-bd74-ffc3ddb9b140","type":"domain","category":"Network activity","to_ids":true,"value":"ophira-crest-flow.pro","comment":"https://x.com/skocherhan/status/1955389360289014084","timestamp":"1755036127","distribution":"5"},{"uuid":"2e30086a-afd9-56e2-bf55-55b543cc1ce3","type":"url","category":"Network activity","to_ids":true,"value":"http://ophira-crest-flow.pro","comment":"https://x.com/skocherhan/status/1955389360289014084","timestamp":"1755036127","distribution":"5"},{"uuid":"d8899b35-e2ba-5224-927c-cda773311585","type":"url","category":"Network activity","to_ids":true,"value":"http://95.164.53.214:5554/Zangraedshoong.nx","comment":"https://x.com/skocherhan/status/1955389360289014084","timestamp":"1755036127","distribution":"5"},{"uuid":"c3916398-ec3e-5f40-a1be-c9be4b381cf5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.164.53.214","comment":"https://x.com/skocherhan/status/1955389360289014084","timestamp":"1755036127","distribution":"5"},{"uuid":"5be8c6c5-7101-5899-8cf7-e01e95faadc9","type":"md5","category":"Payload delivery","to_ids":true,"value":"7c290a8c89e176cd3a71dc21259794fc","comment":"https://x.com/skocherhan/status/1955389360289014084","timestamp":"1755036127","distribution":"5"},{"uuid":"d9fd9825-e9b2-527e-b7c5-a9a6ef0de29d","type":"domain","category":"Network activity","to_ids":true,"value":"corepulsesync.ydns.eu:1000","comment":"https://x.com/skocherhan/status/1955397764449439983","timestamp":"1755038131","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"bef7a466-9758-5e22-9eee-a61acd1199cf","type":"url","category":"Network activity","to_ids":true,"value":"http://corepulsesync.ydns.eu:1000","comment":"https://x.com/skocherhan/status/1955397764449439983","timestamp":"1755038131","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"174f1504-cd9c-5d89-8d15-01d8fb46b5c8","type":"domain","category":"Network activity","to_ids":true,"value":"rakuten-8filh.j2i3whw.com","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83dd9d87-0360-58f1-a942-91724d61a3df","type":"url","category":"Network activity","to_ids":true,"value":"https://rakuten-8filh.j2i3whw.com/sso/","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e5999921-9c3e-57ed-b059-21c31f3bcea7","type":"domain","category":"Network activity","to_ids":true,"value":"rakuten-d5u4ewz.apdbsxs.com","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1a64245-2830-5374-82e4-05844eed2102","type":"url","category":"Network activity","to_ids":true,"value":"https://rakuten-d5u4ewz.apdbsxs.com/sso/","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"384d0cfd-2191-5a9c-b00b-f7e55b11376b","type":"domain","category":"Network activity","to_ids":true,"value":"rakuten-epr7i.36c2yj3.com","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02eb0886-91e1-51f8-beba-9d385f30e67d","type":"url","category":"Network activity","to_ids":true,"value":"https://rakuten-epr7i.36c2yj3.com/sso/","comment":"https://x.com/masaomi346/status/1955404023236006367","timestamp":"1755039623","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aff9f2db-b5eb-5594-82f5-7fe8ad4997e2","type":"url","category":"Network activity","to_ids":true,"value":"http://116.198.233.179:443","comment":"https://x.com/drb_ra/status/1955405516794163640","timestamp":"1755039979","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9c901a1d-89d6-547c-9c28-8eb56a6b9b6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.198.233.179","comment":"https://x.com/drb_ra/status/1955405516794163640","timestamp":"1755039979","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"437a4985-2ede-502c-ab9b-3ebea13cf050","type":"url","category":"Network activity","to_ids":true,"value":"http://107.173.111.117:443","comment":"https://x.com/drb_ra/status/1955405655004811384","timestamp":"1755040012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3d825f71-5b78-50b8-8475-4a4f2da92b9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.111.117","comment":"https://x.com/drb_ra/status/1955405655004811384","timestamp":"1755040012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0dab0c2e-e2e8-562b-89d8-52e49cf7d24f","type":"url","category":"Network activity","to_ids":true,"value":"http://80.253.249.181:443","comment":"https://x.com/drb_ra/status/1955405794083737968","timestamp":"1755040045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f75a34e9-35c7-520c-803b-61e161718119","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.253.249.181","comment":"https://x.com/drb_ra/status/1955405794083737968","timestamp":"1755040045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"859200c5-23c1-5eed-b1f5-28788fab7d2b","type":"url","category":"Network activity","to_ids":true,"value":"http://91.201.42.205:8085","comment":"https://x.com/drb_ra/status/1955405932730732949","timestamp":"1755040078","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b0ec22ce-63b3-557f-9c8b-e2f7d3734379","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.201.42.205","comment":"https://x.com/drb_ra/status/1955405932730732949","timestamp":"1755040078","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"470be84c-9fa1-5555-b5d7-c28aa37f7d81","type":"domain","category":"Network activity","to_ids":true,"value":"liberomailclosureupgrding.weebly.com","comment":"https://x.com/urldna_bot/status/1955419055898157444","timestamp":"1755043207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e2f19cb6-4550-5fc7-afa4-d45e1cb492b8","type":"url","category":"Network activity","to_ids":true,"value":"https://liberomailclosureupgrding.weebly.com","comment":"https://x.com/urldna_bot/status/1955419055898157444","timestamp":"1755043207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"45afaa5e-2c40-51cc-9cb4-253cbb13697d","type":"domain","category":"Network activity","to_ids":true,"value":"legalpro.com.tw","comment":"https://x.com/ShadowChasing1/status/1955442056404615382","timestamp":"1755048691","distribution":"5"},{"uuid":"c81c8c78-861a-5f56-b7d8-fb50e5e8b2a5","type":"url","category":"Network activity","to_ids":true,"value":"https://www.legalpro.com.tw/uploaded/sin.php?id=33","comment":"https://x.com/ShadowChasing1/status/1955442056404615382","timestamp":"1755048691","distribution":"5"},{"uuid":"861ec45c-0d0d-5c13-9526-8300ecffea36","type":"md5","category":"Payload delivery","to_ids":true,"value":"7b17f38031f095462b736b8730ff7b56","comment":"https://x.com/ShadowChasing1/status/1955442056404615382","timestamp":"1755048691","distribution":"5"},{"uuid":"2d66bb2b-26f2-5959-8d56-46e345100899","type":"md5","category":"Payload delivery","to_ids":true,"value":"e190e93dae3246bfc0fa765a7d3c5fc0","comment":"https://x.com/ShadowChasing1/status/1955442056404615382","timestamp":"1755048691","distribution":"5"},{"uuid":"206b65cf-10a0-5761-acfb-c6516330ecd4","type":"md5","category":"Payload delivery","to_ids":true,"value":"76c3e36eca10b21a2227f20d7555f287","comment":"https://x.com/ShadowChasing1/status/1955442056404615382","timestamp":"1755048691","distribution":"5"},{"uuid":"3dab4224-7528-57d9-b1d1-08c9fab62150","type":"md5","category":"Payload delivery","to_ids":true,"value":"60f1ab17559dccb8ce04b5b4e40daf03","comment":"https://x.com/skocherhan/status/1955446870869938308","timestamp":"1755049839","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5cad4517-98f6-5bbc-a574-8fcc56e1a3ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.95.8.161","comment":"https://x.com/skocherhan/status/1955446870869938308","timestamp":"1755049839","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"24ebd36d-0ef3-576a-abef-9a359b98b902","type":"url","category":"Network activity","to_ids":true,"value":"http://202.95.8.161:25443","comment":"https://x.com/skocherhan/status/1955446870869938308","timestamp":"1755049839","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1dcdefcd-d420-5b08-bdaa-06010e1f68cb","type":"domain","category":"Network activity","to_ids":true,"value":"btrntrnit.weebly.com","comment":"https://x.com/urldna_bot/status/1955449267289481596","timestamp":"1755050410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"636a1fe8-5b82-5dae-a14a-baee0685d6a6","type":"url","category":"Network activity","to_ids":true,"value":"https://btrntrnit.weebly.com","comment":"https://x.com/urldna_bot/status/1955449267289481596","timestamp":"1755050410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"903358f8-892b-5886-8e74-0635fa5fa15b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.159.129.36","comment":"https://x.com/SarlackLab/status/1955464401823097260","timestamp":"1755054018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"366bbb90-c2b7-57d5-878a-1b8f5bdf35eb","type":"url","category":"Network activity","to_ids":true,"value":"http://18.159.129.36:1338","comment":"https://x.com/SarlackLab/status/1955464401823097260","timestamp":"1755054018","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"3e7ee6af-57fb-5501-8f02-c746baaf9586","type":"url","category":"Network activity","to_ids":true,"value":"https://smartresolverpanel.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1955479458384662949","timestamp":"1755057608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e6cb7ba1-8261-5cdc-a904-42ccd474c75d","type":"domain","category":"Network activity","to_ids":true,"value":"smartresolverpanel.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1955479458384662949","timestamp":"1755057608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5bf5dee5-3c00-53a7-961f-2bca4077c7f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.16.171.153","comment":"https://x.com/SarlackLab/status/1955494591135695135","timestamp":"1755061216","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"92481778-48b6-5b3b-97ec-84bb042e25b8","type":"url","category":"Network activity","to_ids":true,"value":"http://gamesarena.gdn","comment":"https://x.com/SarlackLab/status/1955494591135695135","timestamp":"1755061216","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"de8a2439-5276-57dc-b75d-ddd94e1fb83e","type":"url","category":"Network activity","to_ids":true,"value":"http://52.16.171.153:80","comment":"https://x.com/SarlackLab/status/1955494591135695135","timestamp":"1755061216","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"1d75faf6-4d65-572e-b260-c69843d6cfe6","type":"domain","category":"Network activity","to_ids":true,"value":"gamesarena.gdn","comment":"https://x.com/SarlackLab/status/1955494591135695135","timestamp":"1755061216","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"08199621-29f4-5d1d-b691-17929d9ba9ec","type":"domain","category":"Network activity","to_ids":true,"value":"waterheaterrepairatascocita.com","comment":"https://x.com/urldna_bot/status/1955509654454218929","timestamp":"1755064807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5911ce7a-12e7-52f9-bfcb-980cad789dc2","type":"url","category":"Network activity","to_ids":true,"value":"https://waterheaterrepairatascocita.com","comment":"https://x.com/urldna_bot/status/1955509654454218929","timestamp":"1755064807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c3ffd04d-250a-5d74-bb02-6ed59b0d159b","type":"md5","category":"Payload delivery","to_ids":true,"value":"a69981425053d15db37561ff909c2dd9","comment":"https://x.com/skocherhan/status/1955520058765217801","timestamp":"1755067288","distribution":"5"},{"uuid":"71dc88d1-e851-5d69-9e4f-221845adfe0a","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.186.25:7443","comment":"https://x.com/drb_ra/status/1955521200857247927","timestamp":"1755067560","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"8556f10f-33e3-53c1-922a-76462f287051","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.132.186.25","comment":"https://x.com/drb_ra/status/1955521200857247927","timestamp":"1755067560","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"381d19a6-f6fe-5027-b748-b03e7c9db23c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.155.18.55:7443","comment":"https://x.com/drb_ra/status/1955521339063750704","timestamp":"1755067593","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"687de97b-4fb7-5d47-a200-e7cc428445fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.155.18.55","comment":"https://x.com/drb_ra/status/1955521339063750704","timestamp":"1755067593","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"7a89d815-1098-5bf5-982c-69e0c7ba0ed0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.132.50.125","comment":"https://x.com/drb_ra/status/1955521477941530669","timestamp":"1755067626","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"be760099-41fb-5a49-8676-4284b35fe1fb","type":"url","category":"Network activity","to_ids":true,"value":"http://114.132.50.125:4567","comment":"https://x.com/drb_ra/status/1955521477941530669","timestamp":"1755067626","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0f298b0e-0bcf-5134-87e1-323aee4ecaa6","type":"url","category":"Network activity","to_ids":true,"value":"http://216.9.224.88:15402","comment":"https://x.com/drb_ra/status/1955522123847618917","timestamp":"1755067780","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7bcd9f96-3067-5288-94d7-e520b309b6b9","type":"url","category":"Network activity","to_ids":true,"value":"http://216.9.224.88:15403","comment":"https://x.com/drb_ra/status/1955522261810880977","timestamp":"1755067813","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7c04f1f5-0605-5d84-b26a-fa5e67b0b50a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.9.224.88","comment":"https://x.com/drb_ra/status/1955522261810880977","timestamp":"1755067813","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9e0c5f22-ca18-5ec0-814f-7278a002e92d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.137.71:2889","comment":"https://x.com/drb_ra/status/1955522399207821717","timestamp":"1755067846","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"991453dd-8c86-5159-94f0-ad5045cd3818","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.137.71","comment":"https://x.com/drb_ra/status/1955522399207821717","timestamp":"1755067846","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3e18f32f-7538-50d2-843f-094b6a1a21fb","type":"url","category":"Network activity","to_ids":true,"value":"http://81.19.137.242:443","comment":"https://x.com/drb_ra/status/1955522536701300745","timestamp":"1755067879","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"174cf0ed-c6d3-5faf-b37f-35a5089cd526","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.19.137.242","comment":"https://x.com/drb_ra/status/1955522536701300745","timestamp":"1755067879","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1fef7ebb-4e3e-5259-a3b8-63315be4f898","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.16.187.155","comment":"https://x.com/drb_ra/status/1955522675310494133","timestamp":"1755067912","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4af3fd8b-127d-5ce7-8e6a-fc71468acd37","type":"url","category":"Network activity","to_ids":true,"value":"http://16.16.187.155:7656","comment":"https://x.com/drb_ra/status/1955522675310494133","timestamp":"1755067912","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"052b4f15-cd08-5473-8dce-358ad281df91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.203.233.141","comment":"https://x.com/drb_ra/status/1955522813491843309","timestamp":"1755067945","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"16c5b59f-44bb-51a2-84e7-93df07bcf18c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.203.233.141:2003","comment":"https://x.com/drb_ra/status/1955522813491843309","timestamp":"1755067945","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"274326b9-492e-5aa1-b746-7419a7bdcd78","type":"url","category":"Network activity","to_ids":true,"value":"http://18.163.40.223:18030","comment":"https://x.com/drb_ra/status/1955522951538778296","timestamp":"1755067978","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7f52af39-22a1-5c47-b919-511c604fec30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.163.40.223","comment":"https://x.com/drb_ra/status/1955522951538778296","timestamp":"1755067978","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f04c7254-34d2-50b8-a464-2eee3440d26d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.71.87.13:18082","comment":"https://x.com/drb_ra/status/1955523090147869109","timestamp":"1755068011","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4a47f2c7-604b-5eb1-9563-3a8a5c77f0d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.53.246.92","comment":"https://x.com/drb_ra/status/1955523229277446154","timestamp":"1755068044","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5226b9c0-8bd5-5cc6-a8fb-dae107e1c8f0","type":"url","category":"Network activity","to_ids":true,"value":"http://52.53.246.92:8888","comment":"https://x.com/drb_ra/status/1955523229277446154","timestamp":"1755068044","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"eb786b21-1731-5078-875f-577803946d51","type":"url","category":"Network activity","to_ids":true,"value":"http://45.129.199.234:8080","comment":"https://x.com/drb_ra/status/1955523367165174167","timestamp":"1755068077","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"50484b51-9e63-56cb-a27b-bad0a53e4b25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.129.199.234","comment":"https://x.com/drb_ra/status/1955523367165174167","timestamp":"1755068077","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c675b644-51fc-5794-8f9d-3041b5038e1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.108.190","comment":"https://x.com/drb_ra/status/1955523506244030490","timestamp":"1755068110","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"b4685189-cc3e-5d62-9eac-fae602563cc7","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.108.190:80","comment":"https://x.com/drb_ra/status/1955523506244030490","timestamp":"1755068110","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"5061082e-5653-59ce-92fe-8b96ad8c5bd0","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.202:80","comment":"https://x.com/drb_ra/status/1955523645922742696","timestamp":"1755068143","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"ac1d9334-ae58-5ea3-9c77-99efb8cf6a88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.202","comment":"https://x.com/drb_ra/status/1955523645922742696","timestamp":"1755068143","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"4eb1d366-abbf-52a5-93ec-3a324d73d8f8","type":"url","category":"Network activity","to_ids":true,"value":"http://170.130.165.178:443","comment":"https://x.com/drb_ra/status/1955523784028647529","timestamp":"1755068176","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1f88e7f3-16af-59f4-8f15-0443179eaeba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.130.165.178","comment":"https://x.com/drb_ra/status/1955523784028647529","timestamp":"1755068176","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ad947f84-84bd-525d-bcf4-c70b7bf59fdb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.245.54.105","comment":"https://x.com/drb_ra/status/1955523921534722232","timestamp":"1755068209","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"22c30d17-56b7-58b4-81ef-4fba63f68f63","type":"url","category":"Network activity","to_ids":true,"value":"http://157.245.54.105:443","comment":"https://x.com/drb_ra/status/1955523921534722232","timestamp":"1755068209","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"18b3243c-2118-590a-a000-dda5ff872e19","type":"url","category":"Network activity","to_ids":true,"value":"http://91.149.222.151:443","comment":"https://x.com/drb_ra/status/1955524059904741643","timestamp":"1755068242","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"fc9710cc-5bfc-523b-9340-9124e8d0550e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.149.222.151","comment":"https://x.com/drb_ra/status/1955524059904741643","timestamp":"1755068242","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"312bf985-857b-588b-a708-415c9f9d35b3","type":"url","category":"Network activity","to_ids":true,"value":"http://154.17.235.123:8443","comment":"https://x.com/drb_ra/status/1955524197675094062","timestamp":"1755068275","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c46ee5b9-878c-52ee-ad67-8e9cb4fbd668","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.17.235.123","comment":"https://x.com/drb_ra/status/1955524197675094062","timestamp":"1755068275","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"22003ec8-ad93-589d-a4b5-a7ca20f86713","type":"url","category":"Network activity","to_ids":true,"value":"http://172.233.145.245:41337","comment":"https://x.com/drb_ra/status/1955524844302504261","timestamp":"1755068429","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4cdd2150-32a2-5c37-8d06-d78e04ed67b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.233.145.245","comment":"https://x.com/drb_ra/status/1955524844302504261","timestamp":"1755068429","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0ee89f93-8886-5f8e-895c-8ee2ae5513b1","type":"url","category":"Network activity","to_ids":true,"value":"http://vaganetka.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"db8c5096-4118-5112-83b2-a1ca55fa55a6","type":"domain","category":"Network activity","to_ids":true,"value":"syntrva.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"674db88a-830d-5f65-9a6b-44e7b40dad3f","type":"url","category":"Network activity","to_ids":true,"value":"http://syntrva.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"0f89948a-9dad-5b1d-a58e-383856a9a0a6","type":"domain","category":"Network activity","to_ids":true,"value":"hatsalnm.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"e43c9910-e8e2-5733-aeda-7087f3f5bdf9","type":"domain","category":"Network activity","to_ids":true,"value":"ebuinwgs.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"450dd5a4-e4a3-5156-a473-f19c48c4956a","type":"url","category":"Network activity","to_ids":true,"value":"http://yrokistorii.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"e786cf8a-1cdd-5a3f-896a-1c282574c89f","type":"url","category":"Network activity","to_ids":true,"value":"http://ebuinwgs.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"1e834fba-ebc3-58c5-8715-7916d0314ea4","type":"domain","category":"Network activity","to_ids":true,"value":"vaganetka.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"930b3f21-5933-5ccc-8113-d09fa5ff1b08","type":"domain","category":"Network activity","to_ids":true,"value":"yrokistorii.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"bad17751-8649-5f14-8bdb-c1786c55cb0a","type":"url","category":"Network activity","to_ids":true,"value":"http://pictuqyr.qpon","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"869ee612-9f1f-5ddc-8e89-7472a19d5c6e","type":"domain","category":"Network activity","to_ids":true,"value":"kletkamozga.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"99a79de2-39d1-5b44-aab9-e1664ef83d5c","type":"url","category":"Network activity","to_ids":true,"value":"http://kletkamozga.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"a882e533-16de-57ac-ba4b-7e0373583b11","type":"domain","category":"Network activity","to_ids":true,"value":"stolewnica.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"0a91e8db-86e8-5bd9-b210-44d9050417d3","type":"url","category":"Network activity","to_ids":true,"value":"http://stolewnica.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"511d75ce-b533-5043-a09d-ca54b7b9fcab","type":"domain","category":"Network activity","to_ids":true,"value":"mastwin.in","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"5efea21a-60dd-5174-8152-00ba0ea9709c","type":"url","category":"Network activity","to_ids":true,"value":"http://mastwin.in","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"de288d59-d36a-5e9d-9409-17990fe506ac","type":"domain","category":"Network activity","to_ids":true,"value":"pictuqyr.qpon","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"4981531b-b87c-5ac0-8a72-1016e4949e72","type":"url","category":"Network activity","to_ids":true,"value":"http://hatsalnm.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"63dc2b68-4a17-526c-b627-d0e6ab2e7c1d","type":"domain","category":"Network activity","to_ids":true,"value":"ydobniudivan.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"e7ddeab9-1e61-52a0-8416-b4ab55b9c14b","type":"url","category":"Network activity","to_ids":true,"value":"http://shfsz.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"3a31843c-8565-5e60-b294-331a8ed5dc9b","type":"domain","category":"Network activity","to_ids":true,"value":"regkjw.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"91c7f92d-c4f4-5adc-8a2c-8630ce6a5909","type":"url","category":"Network activity","to_ids":true,"value":"http://ydobniudivan.ru","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"da25e6e6-b97a-5e8f-85b1-f5fe2936b8bc","type":"domain","category":"Network activity","to_ids":true,"value":"thigk.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"3fa3d7c9-7b7c-5e13-8628-b7279c1f8a9a","type":"url","category":"Network activity","to_ids":true,"value":"http://thigk.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"b0df2ee4-8533-5ef3-9cd6-d74f8f6ba476","type":"domain","category":"Network activity","to_ids":true,"value":"geczs.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"864bc4b5-40ca-5fe7-afe7-0db3e7737990","type":"url","category":"Network activity","to_ids":true,"value":"http://regkjw.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"045844b2-74a0-5aec-acc0-8de1df104422","type":"url","category":"Network activity","to_ids":true,"value":"http://maszgn.club","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"4ce62c47-0b3e-5735-99b5-caaed95cee08","type":"url","category":"Network activity","to_ids":true,"value":"http://geczs.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"b101f600-9ace-5991-be27-9a33ea4e0713","type":"url","category":"Network activity","to_ids":true,"value":"http://mflqsm.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"b4e2b418-627f-585d-ae87-197bd9046cf8","type":"domain","category":"Network activity","to_ids":true,"value":"ribbomv.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"4518dd15-3b27-5ebd-b43f-c1d7d49ed5da","type":"url","category":"Network activity","to_ids":true,"value":"http://ribbomv.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"782d90ea-9470-5cb2-8c88-ce1d9b476920","type":"domain","category":"Network activity","to_ids":true,"value":"hyduwkvd.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"0eea9168-3f27-5185-82f0-4a82ba84b130","type":"url","category":"Network activity","to_ids":true,"value":"http://hyduwkvd.forum","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"4c61529a-5fc9-56ac-8b97-88642b489d18","type":"domain","category":"Network activity","to_ids":true,"value":"maszgn.club","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"f78a80b1-5d25-5475-bcb1-9b4bac61d57d","type":"domain","category":"Network activity","to_ids":true,"value":"shfsz.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"dae9b30d-ab65-56c9-9372-b5ed2fcd099b","type":"domain","category":"Network activity","to_ids":true,"value":"mflqsm.xyz","comment":"https://x.com/skocherhan/status/1955527547392786838","timestamp":"1755069073","distribution":"5"},{"uuid":"dfc08067-9be9-5ecb-84f4-c11eab5102c8","type":"url","category":"Network activity","to_ids":true,"value":"http://extrudingtattle.bet","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"66a37e94-84e2-55df-bdc3-0af1cad94cda","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.23.108.20","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"6aece701-1622-57c5-bac7-e7d31bd24f47","type":"url","category":"Network activity","to_ids":true,"value":"http://sermonrevolver.top","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"10d66974-46be-5361-acc2-4ff4353be0f4","type":"domain","category":"Network activity","to_ids":true,"value":"sermonrevolver.top","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"e8184d11-7d61-5443-96e4-54639a9a2678","type":"url","category":"Network activity","to_ids":true,"value":"http://89.23.108.20","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"930f04d0-19fd-5e0f-a203-68df5d481ed8","type":"domain","category":"Network activity","to_ids":true,"value":"extrudingtattle.bet","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"45ec1868-330b-5259-874f-18a73105ba38","type":"domain","category":"Network activity","to_ids":true,"value":"naturistvenue.digital","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"d6e2ae02-faef-5026-bdc3-ba0e673ef073","type":"domain","category":"Network activity","to_ids":true,"value":"unpilotedbanter.top","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"c6be5dcd-0376-57b8-8008-21ca249c5af0","type":"url","category":"Network activity","to_ids":true,"value":"http://naturistvenue.digital","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"4d0115ed-c750-5d2e-842d-dba69872c649","type":"url","category":"Network activity","to_ids":true,"value":"http://unpilotedbanter.top","comment":"https://x.com/skocherhan/status/1955533752995922359","timestamp":"1755070553","distribution":"5"},{"uuid":"0a42b988-700b-5bf4-85c8-40d2504c9efa","type":"domain","category":"Network activity","to_ids":true,"value":"cyber-smart-guard-safe.autos","comment":"https://x.com/skocherhan/status/1955535613408514241","timestamp":"1755070996","distribution":"5"},{"uuid":"d6c61ea8-7996-56ab-a743-b304efe71661","type":"url","category":"Network activity","to_ids":true,"value":"http://www.cyber-smart-guard-safe.autos/1j2h5r30d/l?btd=dHJrLnN0b21hY2gtbWV0aG9kLW9wZW4tYXJ0LnJ1bg&exptoken=MTc1NTA3MDc1NTMwNw%3D%3D&lang=en&lid=de4fefff-f0da-48e6-8da7-860ede31b596<d=dHJrLmF0ZS1jb3JuZXItcmh5dGhtLWZvZy5ydW4&pd2q=YTE9ZGU0ZmVmZmYtZjBkYS00OGU2LThkYTctODYwZWRlMzFiNTk2","comment":"https://x.com/skocherhan/status/1955535613408514241","timestamp":"1755070996","distribution":"5"},{"uuid":"a14ee329-bfba-55b4-ba72-bb9457c4dc12","type":"domain","category":"Network activity","to_ids":true,"value":"prayflixplus.identificare.com.br","comment":"https://x.com/urldna_bot/status/1955539847835238822","timestamp":"1755072006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a1490f79-2ac9-5f0f-99c8-5e5c99724ee2","type":"url","category":"Network activity","to_ids":true,"value":"http://prayflixplus.identificare.com.br/PAG483728WEB/itauseguranca/index.php","comment":"https://x.com/urldna_bot/status/1955539847835238822","timestamp":"1755072006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d3e486b9-06b0-52c3-9e55-8c89f068c228","type":"md5","category":"Payload delivery","to_ids":true,"value":"113e9b383a82031c1934885448c267e5","comment":"https://x.com/suyog41/status/1955542116958081446","timestamp":"1755072547","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"fdf04d95-b258-530c-a5d8-b94fa69165a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.214.215","comment":"https://x.com/drb_ra/status/1955567614354469202","timestamp":"1755078626","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c3ae4f82-42ce-5d4d-a773-ceb92ed9f53d","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.214.215:80","comment":"https://x.com/drb_ra/status/1955567614354469202","timestamp":"1755078626","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38d9b7e8-94dd-57d4-95d8-279761102173","type":"url","category":"Network activity","to_ids":true,"value":"http://213.152.161.244:61865","comment":"https://x.com/SarlackLab/status/1955570136238231855","timestamp":"1755079227","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"4be7cdca-e58a-5af8-a951-c5bafbec4ff7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.152.161.244","comment":"https://x.com/SarlackLab/status/1955570136238231855","timestamp":"1755079227","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"961be012-a58a-5858-b22a-dc6fa1a59c0a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.246.17.133","comment":"https://x.com/Fact_Finder03/status/1955574944567574731","timestamp":"1755080374","distribution":"5"},{"uuid":"9b6f2e78-7670-5a24-8884-b8defb8a7572","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.243.64","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"49d7c937-ad31-5319-8fe8-cca237ef12c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.243.5","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"84a2fc4b-25af-5c4c-a2d4-0b5ea6d3f91a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.253.251.138","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"af316e7e-4de2-5011-93b9-66bdc5a2f5fb","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.243.64","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"f0a800d8-27e4-5ad9-8a6e-663f9819c44f","type":"url","category":"Network activity","to_ids":true,"value":"http://80.253.251.138","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"18127c2b-5915-5688-a194-f1e6df95c9ad","type":"url","category":"Network activity","to_ids":true,"value":"http://r2uvdV8HqEZ2Xu.com","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"22434cd7-cc55-55f4-a5b9-be65ee4ae324","type":"domain","category":"Network activity","to_ids":true,"value":"r2uvdV8HqEZ2Xu.com","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"7e4fcb29-f602-54da-919d-f0cf66d02b75","type":"url","category":"Network activity","to_ids":true,"value":"http://ue29ognhUGjiQc.com","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"67f30bbc-c0d4-5be0-a463-4e61989f76fb","type":"domain","category":"Network activity","to_ids":true,"value":"ue29ognhUGjiQc.com","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"534d5bbb-c538-5a4d-969c-b212d16c9c92","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.243.5","comment":"https://x.com/executemalware/status/1955580496064266400","timestamp":"1755081697","distribution":"5"},{"uuid":"3a20b7b1-db7d-5cb7-86ed-c14105aafb97","type":"domain","category":"Network activity","to_ids":true,"value":"complaintform-id9205.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"2d3caf7d-1df3-59bc-b876-7a24e733ed32","type":"domain","category":"Network activity","to_ids":true,"value":"reservation-id129245.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"f4a929dd-a306-5eb4-8cea-61294294b61d","type":"url","category":"Network activity","to_ids":true,"value":"http://reservation-id129245.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"5f1f9a83-dada-5620-926d-6a95818cc5d6","type":"url","category":"Network activity","to_ids":true,"value":"http://visitor952816.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"9280b0da-3165-55ce-af13-6c1579d0b8ae","type":"domain","category":"Network activity","to_ids":true,"value":"visitor952816.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"02f34ea1-31d1-5883-8627-e66951412514","type":"domain","category":"Network activity","to_ids":true,"value":"extranet-manage.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"1fb1b9e9-317d-53b8-afb3-32fcabd86dc1","type":"url","category":"Network activity","to_ids":true,"value":"http://extranet-manage.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"9c7215a8-cfbc-54c1-92a1-d8000cb11204","type":"domain","category":"Network activity","to_ids":true,"value":"formcomplaint-id8173.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"299a34ba-f668-5369-9868-a0816b61c1a9","type":"url","category":"Network activity","to_ids":true,"value":"http://formcomplaint-id8173.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"7198728c-f175-5b26-b36a-18045eae189d","type":"url","category":"Network activity","to_ids":true,"value":"http://complaintform-id9205.help","comment":"https://x.com/executemalware/status/1955580741993341011","timestamp":"1755081756","distribution":"5"},{"uuid":"d8bfc28e-9159-59e0-99f5-075bf9c73e4a","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.148.227:4444","comment":"https://x.com/drb_ra/status/1955587039270715852","timestamp":"1755083257","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7746497c-9cc0-5692-9b9e-2aea329564fa","type":"url","category":"Network activity","to_ids":true,"value":"http://185.243.41.252:445","comment":"https://x.com/drb_ra/status/1955587687169310850","timestamp":"1755083412","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4c88098-f53e-5998-ab7b-6b8a7a5215db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.243.41.252","comment":"https://x.com/drb_ra/status/1955587687169310850","timestamp":"1755083412","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc214e4a-3c4a-54eb-874c-24edca2d0bed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.199.3","comment":"https://x.com/drb_ra/status/1955587827217183183","timestamp":"1755083445","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"153d77d9-0436-5158-b632-f7f4b9048e99","type":"url","category":"Network activity","to_ids":true,"value":"https://47.92.199.3/assets/login_guide.js","comment":"https://x.com/drb_ra/status/1955587827217183183","timestamp":"1755083445","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aac79fae-07a5-5391-9671-a8fb040b411b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.199.3:8443","comment":"https://x.com/drb_ra/status/1955587827217183183","timestamp":"1755083445","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"870b4ed2-e43d-590c-bc30-76b2c38bb846","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.211.31.181","comment":"https://x.com/drb_ra/status/1955587967529185356","timestamp":"1755083479","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a399bcb6-bd8c-5899-905d-7cb8670f9c7a","type":"url","category":"Network activity","to_ids":true,"value":"http://129.211.31.181:8088","comment":"https://x.com/drb_ra/status/1955587967529185356","timestamp":"1755083479","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22490985-8a5d-57c1-9a6a-912f45ff6128","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.36.127:443","comment":"https://x.com/drb_ra/status/1955590648205279566","timestamp":"1755084118","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b9035ab5-1bb5-54d1-bccf-bded5bf8fd6b","type":"url","category":"Network activity","to_ids":true,"value":"https://8.137.36.127/ca","comment":"https://x.com/drb_ra/status/1955590648205279566","timestamp":"1755084118","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3401995c-b35f-52b9-86ec-32fba03342c8","type":"url","category":"Network activity","to_ids":true,"value":"https://10.1.6.62/ca","comment":"https://x.com/drb_ra/status/1955590786797690956","timestamp":"1755084151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3b42718-ec22-5375-8607-ba5c1e91bc58","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.36.127:80","comment":"https://x.com/drb_ra/status/1955590786797690956","timestamp":"1755084151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"74e21903-e587-51bc-95ec-f6df9fed8138","type":"ip-dst","category":"Network activity","to_ids":true,"value":"10.1.6.62","comment":"https://x.com/drb_ra/status/1955590786797690956","timestamp":"1755084151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"134c3f1b-eee2-54bb-b81f-b306f8012f2f","type":"domain","category":"Network activity","to_ids":true,"value":"1win-telegram.com","comment":"https://x.com/c9lab_soc/status/1955592062474359294","timestamp":"1755084455","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3a444bb4-5549-5510-bff1-2d7a87bc928f","type":"url","category":"Network activity","to_ids":true,"value":"http://1win-telegram.com","comment":"https://x.com/c9lab_soc/status/1955592062474359294","timestamp":"1755084455","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c07766e8-787a-58a8-aa31-df0a28498e80","type":"domain","category":"Network activity","to_ids":true,"value":"americanexpress-security.info","comment":"https://x.com/c9lab_soc/status/1955592062474359294","timestamp":"1755084455","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"babf189f-fbb6-5ab2-b69b-617a3aeb37db","type":"url","category":"Network activity","to_ids":true,"value":"http://americanexpress-security.info","comment":"https://x.com/c9lab_soc/status/1955592062474359294","timestamp":"1755084455","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"72f095fe-f102-503f-9d52-e098b788bf83","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/maksvavrik99/test/releases/download/Test/Another.jar","comment":"https://x.com/skocherhan/status/1955592395200114780","timestamp":"1755084534","distribution":"5"},{"uuid":"ffe1201d-652b-5250-b693-56eb9690e182","type":"domain","category":"Network activity","to_ids":true,"value":"axlecoffee.fun:8080","comment":"https://x.com/skocherhan/status/1955592395200114780","timestamp":"1755084534","distribution":"5"},{"uuid":"076b0584-0c77-5a73-81db-acbedc7acbbc","type":"url","category":"Network activity","to_ids":true,"value":"http://www.axlecoffee.fun:8080/upload","comment":"https://x.com/skocherhan/status/1955592395200114780","timestamp":"1755084534","distribution":"5"},{"uuid":"48c9a8be-4f02-5713-8ddb-2ac4a465cd5c","type":"domain","category":"Network activity","to_ids":true,"value":"f0994264.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"db944992-00b7-5f09-ae32-e6f6ef0fdc88","type":"url","category":"Network activity","to_ids":true,"value":"http://f0994264.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"12f3119c-e7eb-5876-a09d-f2a7395236af","type":"url","category":"Network activity","to_ids":true,"value":"http://f0994264.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"51f0a9bd-5b87-5634-bfe1-5af69003f3b9","type":"url","category":"Network activity","to_ids":true,"value":"http://f0875111.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"b2b26917-05be-5346-8da7-40be464dc450","type":"domain","category":"Network activity","to_ids":true,"value":"f0994264.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"fb37fe71-a96d-5aca-9d33-901cf286d349","type":"url","category":"Network activity","to_ids":true,"value":"http://f0d384f8.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"f2c4c08e-7b70-5bc3-9603-bbecfb7714b6","type":"url","category":"Network activity","to_ids":true,"value":"http://f009d129.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"570e7101-2e27-5f28-a65e-4cf658b5d61b","type":"url","category":"Network activity","to_ids":true,"value":"http://f0875111.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"892fb4e9-1d03-56fb-aac7-4733cd17f99a","type":"domain","category":"Network activity","to_ids":true,"value":"f0875111.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"214cb20b-d4bb-5e0d-99af-8b0e3d17319f","type":"url","category":"Network activity","to_ids":true,"value":"http://f06ed4a1.xyz","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"267f8699-6380-584a-924a-b2f8561a6eed","type":"domain","category":"Network activity","to_ids":true,"value":"f06ed4a1.xyz","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"7a0079b2-8362-5cd2-86a4-a866c1a1ce83","type":"domain","category":"Network activity","to_ids":true,"value":"f009d129.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"64227aac-2912-5ca6-a8b4-d84fdc06710b","type":"domain","category":"Network activity","to_ids":true,"value":"f0875111.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"9274e834-4430-533a-a8f2-88b42f14d609","type":"domain","category":"Network activity","to_ids":true,"value":"f0d384f8.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"738573c5-9b62-5da2-9e71-0890f68fe0f8","type":"url","category":"Network activity","to_ids":true,"value":"http://f1ae1891.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"a4dbd943-18ea-57fc-b380-0bb6917a45e1","type":"domain","category":"Network activity","to_ids":true,"value":"f0d384f8.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"4449014e-94e6-5702-ac55-96530c7818d6","type":"url","category":"Network activity","to_ids":true,"value":"http://f13e8bdc.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"b3eb125f-d9af-5c70-b755-6751f1b6e1b4","type":"domain","category":"Network activity","to_ids":true,"value":"f0d384f8.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"53e1b683-8828-51f6-811f-10ca912137af","type":"url","category":"Network activity","to_ids":true,"value":"http://f0d384f8.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"2bafa29b-6b50-56aa-803e-268bef3ee957","type":"domain","category":"Network activity","to_ids":true,"value":"f13e8bdc.space","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"faa043e1-b05b-5bff-9a8e-01afb316e6d4","type":"url","category":"Network activity","to_ids":true,"value":"http://f14a4904.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"3244dba3-2699-5862-b06b-f649d8578402","type":"md5","category":"Payload delivery","to_ids":true,"value":"74a85e829aff288dba3077668c94739e","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"4032eb9b-6b45-5e89-a3d4-ef9b272686e3","type":"domain","category":"Network activity","to_ids":true,"value":"f14a4904.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"9c46bda9-d6bd-594a-8d2e-e1eec77395a4","type":"domain","category":"Network activity","to_ids":true,"value":"f1ae1891.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"83a9b77b-111e-5302-9274-eba38ca5f423","type":"url","category":"Network activity","to_ids":true,"value":"http://f1a3ccb4.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"7a7542f7-fb20-5f7e-bcb9-f72937131df4","type":"md5","category":"Payload delivery","to_ids":true,"value":"692d6023668b811fc67ecde3e521253e","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"19fb5214-2210-59f1-b0e8-44ba5c3eac39","type":"url","category":"Network activity","to_ids":true,"value":"http://f0d384f8.fun","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"538393e8-c81e-5aa5-bf8f-9fe7e1a6f6b0","type":"domain","category":"Network activity","to_ids":true,"value":"f1a3ccb4.cfd","comment":"https://x.com/skocherhan/status/1955594325041066191","timestamp":"1755084994","distribution":"5"},{"uuid":"928f9140-9d20-55be-b778-96c11ae9714e","type":"url","category":"Network activity","to_ids":true,"value":"https://103-246-144-165.cprapid.com/it/arub","comment":"https://x.com/AddressIntel/status/1955595319556571516","timestamp":"1755085232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fa35bd29-2506-5105-93f3-e1b2e931a6e7","type":"domain","category":"Network activity","to_ids":true,"value":"103-246-144-165.cprapid.com","comment":"https://x.com/AddressIntel/status/1955595319556571516","timestamp":"1755085232","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b2cfc64-7db6-52bc-8bb7-ecc5905c96b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.43","comment":"https://x.com/skocherhan/status/1955599720908501085","timestamp":"1755086281","distribution":"5"},{"uuid":"29273a34-d210-576c-a75a-362f37aaefba","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.43","comment":"https://x.com/skocherhan/status/1955599720908501085","timestamp":"1755086281","distribution":"5"},{"uuid":"a3fd06bf-db5a-5178-8c8f-10c5fdd52722","type":"url","category":"Network activity","to_ids":true,"value":"http://famousblack.network","comment":"https://x.com/skocherhan/status/1955599720908501085","timestamp":"1755086281","distribution":"5"},{"uuid":"84e92558-9735-571c-9706-e9919647aecd","type":"domain","category":"Network activity","to_ids":true,"value":"famousblack.network","comment":"https://x.com/skocherhan/status/1955599720908501085","timestamp":"1755086281","distribution":"5"},{"uuid":"828ecafd-567f-58f1-85cd-144f9ffafbd0","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:65309","comment":"https://x.com/SarlackLab/status/1955600293795701038","timestamp":"1755086417","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"c09e988e-08e2-574f-97f7-dd3d2e912146","type":"domain","category":"Network activity","to_ids":true,"value":"trust-mpg.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1955600293795701038","timestamp":"1755086417","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"4ea59720-394d-564c-a0dc-db862248d157","type":"url","category":"Network activity","to_ids":true,"value":"http://trust-mpg.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1955600293795701038","timestamp":"1755086417","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1955600293795701038","timestamp":"1755086417","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"ad892a8c-92be-53b0-a546-5a1d34fba3d2","type":"md5","category":"Payload delivery","to_ids":true,"value":"35042ab1864287014846732ea736ceae","comment":"https://x.com/skocherhan/status/1955605199000867101","timestamp":"1755087587","distribution":"5"},{"uuid":"e0a6d322-99e0-5933-ba2a-fac783e3affe","type":"url","category":"Network activity","to_ids":true,"value":"http://mi.ultimateamplifier.world","comment":"https://x.com/skocherhan/status/1955605199000867101","timestamp":"1755087587","distribution":"5"},{"uuid":"2c7683de-d83d-5a2b-b6f5-b415a19129a9","type":"domain","category":"Network activity","to_ids":true,"value":"b1.plasma-copilot.life","comment":"https://x.com/skocherhan/status/1955605199000867101","timestamp":"1755087587","distribution":"5"},{"uuid":"2a13b4d8-d2ed-5148-9b44-8297130dcbc9","type":"url","category":"Network activity","to_ids":true,"value":"http://b1.plasma-copilot.life","comment":"https://x.com/skocherhan/status/1955605199000867101","timestamp":"1755087587","distribution":"5"},{"uuid":"ba199183-b387-5678-b71a-1e49cd054f40","type":"domain","category":"Network activity","to_ids":true,"value":"mi.ultimateamplifier.world","comment":"https://x.com/skocherhan/status/1955605199000867101","timestamp":"1755087587","distribution":"5"},{"uuid":"8ef53db0-310e-57ec-8f47-9f495fd38bac","type":"url","category":"Network activity","to_ids":true,"value":"http://softytoys.shop","comment":"https://x.com/skocherhan/status/1955607051872182540","timestamp":"1755088029","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"67a72b62-3e6c-50bf-bdf7-f1133e008f26","type":"domain","category":"Network activity","to_ids":true,"value":"softytoys.shop","comment":"https://x.com/skocherhan/status/1955607051872182540","timestamp":"1755088029","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a8408004-215d-5da8-9637-7db7859fc6da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.35","comment":"https://x.com/skocherhan/status/1955607051872182540","timestamp":"1755088029","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"685b5235-0077-5c6d-a050-8da32e5f8d2d","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.35/verifi.txt","comment":"https://x.com/skocherhan/status/1955607051872182540","timestamp":"1755088029","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"01dcc726-dae3-571a-af48-a52242e86b2e","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.35/gitok.mp4","comment":"https://x.com/skocherhan/status/1955607051872182540","timestamp":"1755088029","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"59ffa301-651c-579c-a6a3-8f73765eb2a9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"20665f5812fa6ed99ebef18203e0d333805728ceb7342afdbbb33e6579040edc","comment":"https://x.com/skocherhan/status/1955609141072011425","timestamp":"1755088527","distribution":"5"},{"uuid":"a489cf94-61eb-5096-acc0-9b4a96fa2746","type":"domain","category":"Network activity","to_ids":true,"value":"cabinatthepond.com","comment":"https://x.com/masaomi346/status/1955611034657706474","timestamp":"1755088978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c950b55-ad29-5b1d-b477-7e93b5df6113","type":"url","category":"Network activity","to_ids":true,"value":"https://cabinatthepond.com/iBkKa7/","comment":"https://x.com/masaomi346/status/1955611034657706474","timestamp":"1755088978","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a2731f9-e949-5e01-ae24-72912d10e815","type":"md5","category":"Payload delivery","to_ids":true,"value":"9EB01D61EAFB20DFC5F01E61DD8A6031","comment":"https://x.com/fbgwls245/status/1955652969934078131","timestamp":"1755098976","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"fb075825-29a1-5656-b817-6be2c23a5848","type":"domain","category":"Network activity","to_ids":true,"value":"217651.8b.io","comment":"https://x.com/urldna_bot/status/1955660659468701804","timestamp":"1755100810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1f26c551-8938-5917-b0cd-453a075a73ff","type":"url","category":"Network activity","to_ids":true,"value":"https://217651.8b.io","comment":"https://x.com/urldna_bot/status/1955660659468701804","timestamp":"1755100810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3b324a6d-d6af-5686-8f06-f6327522641f","type":"url","category":"Network activity","to_ids":true,"value":"http://196.119.21.70:10000","comment":"https://x.com/SarlackLab/status/1955660728590885294","timestamp":"1755100826","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"02116190-6972-5bd1-83c0-9a3659a5c6a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.119.21.70","comment":"https://x.com/SarlackLab/status/1955660728590885294","timestamp":"1755100826","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"f6c91189-097a-52b2-ad3d-8294ce1fcb43","type":"domain","category":"Network activity","to_ids":true,"value":"mailserver-lk.com","comment":"https://x.com/volrant136/status/1955663006303699041","timestamp":"1755101369","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81bc5d0a-f4e8-5506-a26d-8b5494815a30","type":"url","category":"Network activity","to_ids":true,"value":"http://mailserver-lk.com","comment":"https://x.com/volrant136/status/1955663006303699041","timestamp":"1755101369","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9812dc32-3a29-5179-ba25-3d7c59d0dddb","type":"url","category":"Network activity","to_ids":true,"value":"https://webmail.aruba.it/newuismart/cgi-bin/ajaxfile?ACT_FIL_DL=1&PUBLICUID=","comment":"https://x.com/skocherhan/status/1955681418098663577","timestamp":"1755105759","distribution":"5"},{"uuid":"3c277d40-2070-5878-b8d1-d8368981b49c","type":"domain","category":"Network activity","to_ids":true,"value":"webmail.aruba.it","comment":"https://x.com/skocherhan/status/1955681418098663577","timestamp":"1755105759","distribution":"5"},{"uuid":"a15f354d-b085-5de5-80bb-03c9671da856","type":"sha256","category":"Payload delivery","to_ids":true,"value":"1029d5b931bd161da6e0f9107b8eaf6861abd88837e347496d11e98dcf497a1e","comment":"https://x.com/skocherhan/status/1955681574512697709","timestamp":"1755105796","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"39e7f634-6e75-5ecd-b991-6b8ca1314d6e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"2bf42a1d3430586fa3893060685c5dc5053c35f74d9df236fde81085ce7a63ce","comment":"https://x.com/skocherhan/status/1955681833431208043","timestamp":"1755105858","distribution":"5"},{"uuid":"8bbcd96e-5a58-554f-aa60-44a70be6b598","type":"sha256","category":"Payload delivery","to_ids":true,"value":"aed6529bc656f8efff82a8d10edae738bb62a84cc0aa332ac63367b23b6e3c7f","comment":"https://x.com/skocherhan/status/1955681833431208043","timestamp":"1755105858","distribution":"5"},{"uuid":"2ca47d58-0dd0-5fa4-b9b0-9fce411150a7","type":"url","category":"Network activity","to_ids":true,"value":"https://onlinestlouiscommunitycu.weebly.com","comment":"https://x.com/urldna_bot/status/1955690846054945219","timestamp":"1755108007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"311aeb00-8eff-5611-9418-abe613a9019c","type":"domain","category":"Network activity","to_ids":true,"value":"onlinestlouiscommunitycu.weebly.com","comment":"https://x.com/urldna_bot/status/1955690846054945219","timestamp":"1755108007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0cf5e635-9c5d-598d-a92f-34f66a5d5ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.161.193.99","comment":"https://x.com/SarlackLab/status/1955690904179654847","timestamp":"1755108021","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a9d4c304-dc6e-56d5-8aed-cfd7eaa88297","type":"url","category":"Network activity","to_ids":true,"value":"http://193.161.193.99:42347","comment":"https://x.com/SarlackLab/status/1955690904179654847","timestamp":"1755108021","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"89bf94d5-d147-50aa-81c1-8327db734569","type":"domain","category":"Network activity","to_ids":true,"value":"NetFox-42347.portmap.host","comment":"https://x.com/SarlackLab/status/1955690904179654847","timestamp":"1755108021","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"28e5dea2-f809-5d57-94ff-b31fd1279ea3","type":"url","category":"Network activity","to_ids":true,"value":"http://NetFox-42347.portmap.host","comment":"https://x.com/SarlackLab/status/1955690904179654847","timestamp":"1755108021","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"9e067bcd-d976-50cb-8f11-dccf2e82df2b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.63:53","comment":"https://x.com/drb_ra/status/1955700999022051700","timestamp":"1755110427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"433f844b-f14c-543d-a696-f81c92d454d8","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.sdsdsdfsdf145.shop","comment":"https://x.com/drb_ra/status/1955700999022051700","timestamp":"1755110427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bb0a5959-a5fe-5b39-98d2-dcdb91317a74","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.sdsdsdfsdf145.shop/dot.gif","comment":"https://x.com/drb_ra/status/1955700999022051700","timestamp":"1755110427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"068087dd-5091-5b2b-bcef-b79e587d2435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.63","comment":"https://x.com/drb_ra/status/1955700999022051700","timestamp":"1755110427","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"27119412-e149-5c44-9d46-f014c6d3951a","type":"url","category":"Network activity","to_ids":true,"value":"http://149.28.158.166:53","comment":"https://x.com/drb_ra/status/1955701646454927522","timestamp":"1755110582","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cef15741-c08e-5112-95a0-aa1ae0b4761c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.28.158.166","comment":"https://x.com/drb_ra/status/1955701646454927522","timestamp":"1755110582","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"52cdbfc9-a7ec-5806-bc2f-029430c5b936","type":"url","category":"Network activity","to_ids":true,"value":"http://5.181.1.105:65000","comment":"https://x.com/drb_ra/status/1955702292285370738","timestamp":"1755110736","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5eab7229-7b93-5cca-a2e9-bf73ed52b1e4","type":"url","category":"Network activity","to_ids":true,"value":"http://5.181.1.105:443","comment":"https://x.com/drb_ra/status/1955702429485252758","timestamp":"1755110769","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8d800c74-50e6-57b3-b463-0e9994f80f47","type":"url","category":"Network activity","to_ids":true,"value":"http://54.233.9.240:4444","comment":"https://x.com/drb_ra/status/1955703075148030197","timestamp":"1755110922","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"df575454-c984-5b59-8a05-1a412da7ff0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.233.9.240","comment":"https://x.com/drb_ra/status/1955703075148030197","timestamp":"1755110922","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f84e9864-12ec-57a3-8caa-c75860597bd3","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.187.135:54681","comment":"https://x.com/drb_ra/status/1955703213283238038","timestamp":"1755110955","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7a074c41-509a-51e9-928e-fc52ff879c87","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.172.127:5000","comment":"https://x.com/drb_ra/status/1955703352156729377","timestamp":"1755110989","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"326f2687-391f-538c-b424-e762151d2c76","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.172.127:1200","comment":"https://x.com/drb_ra/status/1955703490723873105","timestamp":"1755111022","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ba7e1bd7-1b4a-5281-82b9-86724084f674","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.172.127:48750","comment":"https://x.com/drb_ra/status/1955703628783558949","timestamp":"1755111054","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"af7fdbcc-bb1f-5afd-8166-76d439979db2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.255.172.127","comment":"https://x.com/drb_ra/status/1955703628783558949","timestamp":"1755111054","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f03f9203-6b59-502f-8685-0b190ae751e2","type":"url","category":"Network activity","to_ids":true,"value":"http://51.34.22.175:4567","comment":"https://x.com/drb_ra/status/1955703767787098580","timestamp":"1755111088","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1fc36cf1-7d50-5e63-94b9-cdd52d0c31d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.34.22.175","comment":"https://x.com/drb_ra/status/1955703767787098580","timestamp":"1755111088","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9a074795-7a96-562f-bffc-46159124834a","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.73:9999","comment":"https://x.com/drb_ra/status/1955703905620201751","timestamp":"1755111120","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"038bc708-e3ce-577b-af63-11a03a338676","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.73","comment":"https://x.com/drb_ra/status/1955703905620201751","timestamp":"1755111120","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b931b315-61ef-5ee7-8fe6-0b16ef76be3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.6.161","comment":"https://x.com/drb_ra/status/1955704043231220104","timestamp":"1755111153","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"648a8ec2-3d51-5ba3-9c5b-6b64a671a77e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.6.161:8808","comment":"https://x.com/drb_ra/status/1955704043231220104","timestamp":"1755111153","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d1469cca-e50b-51ed-8421-8884a4851858","type":"url","category":"Network activity","to_ids":true,"value":"http://23.88.63.151:80","comment":"https://x.com/drb_ra/status/1955704181139951752","timestamp":"1755111186","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a2fc8e11-e35d-50e1-a84c-c19e422bb9d5","type":"url","category":"Network activity","to_ids":true,"value":"http://23.88.63.151:25","comment":"https://x.com/drb_ra/status/1955704318859919738","timestamp":"1755111219","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"42ce8050-f024-515d-8bc9-bc3bb24225cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.88.63.151","comment":"https://x.com/drb_ra/status/1955704318859919738","timestamp":"1755111219","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"412b3963-791a-5e4f-a96f-a98d84667b21","type":"url","category":"Network activity","to_ids":true,"value":"http://103.236.162.78:587","comment":"https://x.com/drb_ra/status/1955704457536106801","timestamp":"1755111252","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0202de21-7f78-57d5-816c-da5035805088","type":"url","category":"Network activity","to_ids":true,"value":"http://103.236.162.78:80","comment":"https://x.com/drb_ra/status/1955704595981766690","timestamp":"1755111285","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"339a88ea-480d-59a7-8a1e-91a30687b446","type":"url","category":"Network activity","to_ids":true,"value":"http://103.236.162.78:25","comment":"https://x.com/drb_ra/status/1955704736197312657","timestamp":"1755111319","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"072b2919-fead-5185-9cdb-1db7ba84e9cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.236.162.78","comment":"https://x.com/drb_ra/status/1955704736197312657","timestamp":"1755111319","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2cde1f67-048b-5f5b-9636-6c5086456db6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.144.175","comment":"https://x.com/drb_ra/status/1955704874655506724","timestamp":"1755111352","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"12b62811-a012-5459-be82-9669a4a73dca","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.144.175:8888","comment":"https://x.com/drb_ra/status/1955704874655506724","timestamp":"1755111352","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"b68f74d2-4ce0-5f43-b937-b19bb960d4f7","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.22:5000","comment":"https://x.com/drb_ra/status/1955705013164036151","timestamp":"1755111385","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"0045ca22-4e42-5bf1-8c93-9798eadd85b1","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.22:1963","comment":"https://x.com/drb_ra/status/1955705151466946886","timestamp":"1755111418","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"997b479d-87b4-5e27-a9c6-4760f82a8461","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.6.22","comment":"https://x.com/drb_ra/status/1955705151466946886","timestamp":"1755111418","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"484df780-5478-5f4b-9a1b-43cc6573c277","type":"url","category":"Network activity","to_ids":true,"value":"http://1.161.101.25:443","comment":"https://x.com/drb_ra/status/1955705289820266884","timestamp":"1755111450","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9a75d0ab-5b8f-5a53-b9a3-6d4238b9dc9c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.84.73:443","comment":"https://x.com/drb_ra/status/1955705427682832648","timestamp":"1755111483","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d70a8a09-c062-5bbc-9ced-7bedfb95b4da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.84.73","comment":"https://x.com/drb_ra/status/1955705427682832648","timestamp":"1755111483","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"90a19631-3c55-5b6d-b343-3b401a640e8d","type":"url","category":"Network activity","to_ids":true,"value":"http://79.141.164.150:139","comment":"https://x.com/drb_ra/status/1955705566086533329","timestamp":"1755111516","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"50144c8e-534e-55b4-8a67-9fc3b144816b","type":"url","category":"Network activity","to_ids":true,"value":"http://79.141.164.150:445","comment":"https://x.com/drb_ra/status/1955705703605080302","timestamp":"1755111549","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d73cc75e-973e-5d69-8948-6088d9184958","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.141.164.150","comment":"https://x.com/drb_ra/status/1955705703605080302","timestamp":"1755111549","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b7f9705f-dbaa-594a-9669-ecc9d07dc75b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.28.129.77","comment":"https://x.com/drb_ra/status/1955705840813421003","timestamp":"1755111582","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"dc5e307c-c4b5-530e-8092-69fc03d1d336","type":"url","category":"Network activity","to_ids":true,"value":"http://149.28.129.77:443","comment":"https://x.com/drb_ra/status/1955705840813421003","timestamp":"1755111582","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"01d3b693-235c-5339-8aeb-6e9939061632","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.217:80","comment":"https://x.com/drb_ra/status/1955705979825197472","timestamp":"1755111615","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"2c1dd680-2553-5e77-a0d5-4d78dd3b084d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.54.42.217","comment":"https://x.com/drb_ra/status/1955705979825197472","timestamp":"1755111615","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"19304291-22e5-5cd9-8ab8-0905e605ae45","type":"url","category":"Network activity","to_ids":true,"value":"http://16.170.232.86:443","comment":"https://x.com/drb_ra/status/1955706117293547734","timestamp":"1755111648","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"d442ede5-2a00-5b13-8859-50e4340fde80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.170.232.86","comment":"https://x.com/drb_ra/status/1955706117293547734","timestamp":"1755111648","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0cc25ddd-6d14-5714-af8e-9651b081329e","type":"url","category":"Network activity","to_ids":true,"value":"http://74.163.97.231:443","comment":"https://x.com/drb_ra/status/1955706255403532766","timestamp":"1755111681","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"de8175d8-0614-5041-ba85-9634386f5eea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.163.97.231","comment":"https://x.com/drb_ra/status/1955706255403532766","timestamp":"1755111681","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1431af69-b83f-58cd-b5b0-66e9ce1d088f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.93.219.123","comment":"https://x.com/drb_ra/status/1955706392871895537","timestamp":"1755111713","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"bf4dcb10-cb29-5270-b3d1-6ec17bc94646","type":"url","category":"Network activity","to_ids":true,"value":"http://80.93.219.123:7443","comment":"https://x.com/drb_ra/status/1955706392871895537","timestamp":"1755111713","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"57be7713-94b1-5fbd-b0e1-ede1a741a1c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.180.124.14","comment":"https://x.com/drb_ra/status/1955706530294055376","timestamp":"1755111746","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d404020b-2e09-5381-b01d-6edcc8695276","type":"url","category":"Network activity","to_ids":true,"value":"http://157.180.124.14:7443","comment":"https://x.com/drb_ra/status/1955706530294055376","timestamp":"1755111746","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"2501737b-1e28-5d65-9520-b81269a6706b","type":"url","category":"Network activity","to_ids":true,"value":"http://3.91.11.124:7443","comment":"https://x.com/drb_ra/status/1955706668374757542","timestamp":"1755111779","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"52029ec7-8a8e-5c72-9b3d-e46a35739399","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.163:7443","comment":"https://x.com/drb_ra/status/1955706806006677799","timestamp":"1755111812","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cf1a075a-4891-5c1d-a1fa-94bb84ec31ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.163","comment":"https://x.com/drb_ra/status/1955706806006677799","timestamp":"1755111812","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"1f84a13c-7189-51c4-b934-b6d5fa3cfee2","type":"url","category":"Network activity","to_ids":true,"value":"http://88.21.3.229:8443","comment":"https://x.com/drb_ra/status/1955707451077959867","timestamp":"1755111966","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b72e0f67-c0c7-509e-9098-07ff76edaf99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.21.3.229","comment":"https://x.com/drb_ra/status/1955707451077959867","timestamp":"1755111966","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a85a307c-d552-506f-a0b7-a1d9c4fbfbae","type":"url","category":"Network activity","to_ids":true,"value":"http://216.250.248.207:2404","comment":"https://x.com/drb_ra/status/1955707589070614730","timestamp":"1755111999","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3f960b61-501f-5d8c-ae41-5444c7d03a28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.250.248.207","comment":"https://x.com/drb_ra/status/1955707589070614730","timestamp":"1755111999","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3b87464c-dde0-5d38-a066-2e7cdce2d52a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.171.192.135","comment":"https://x.com/drb_ra/status/1955707726740308445","timestamp":"1755112032","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c5345d68-ff13-5b0e-a38c-6c8f6d93f35d","type":"url","category":"Network activity","to_ids":true,"value":"http://108.171.192.135:27000","comment":"https://x.com/drb_ra/status/1955707726740308445","timestamp":"1755112032","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"fa72b8cf-37b8-5c88-8a7a-c9df0257483e","type":"url","category":"Network activity","to_ids":true,"value":"http://hmt.fellowslabs.com","comment":"https://x.com/skocherhan/status/1955710939551982059","timestamp":"1755112797","distribution":"5"},{"uuid":"75540d92-e710-5d24-8bc1-7db0e86dd5bc","type":"domain","category":"Network activity","to_ids":true,"value":"hmt.fellowslabs.com","comment":"https://x.com/skocherhan/status/1955710939551982059","timestamp":"1755112797","distribution":"5"},{"uuid":"1d1e2541-5a85-5986-87c6-39322f3bd6fd","type":"domain","category":"Network activity","to_ids":true,"value":"captchamicrosoft.com","comment":"https://x.com/1ZRR4H/status/1955712146907476468","timestamp":"1755113085","distribution":"5"},{"uuid":"24ef9324-bcfb-5106-9aef-dec223d42b33","type":"url","category":"Network activity","to_ids":true,"value":"https://captchamicrosoft.com/captcha.js","comment":"https://x.com/1ZRR4H/status/1955712146907476468","timestamp":"1755113085","distribution":"5"},{"uuid":"d9000476-0f68-5e31-b3a9-a157daa7e143","type":"domain","category":"Network activity","to_ids":true,"value":"vanhoadoanhnghiep.vn","comment":"https://x.com/skocherhan/status/1955716507914133583","timestamp":"1755114125","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"203fca30-d363-5ecc-b19e-fde6e8d0148f","type":"url","category":"Network activity","to_ids":true,"value":"http://vanhoadoanhnghiep.vn/wp-admin/bb/IdVerm/auth/login.php","comment":"https://x.com/skocherhan/status/1955716507914133583","timestamp":"1755114125","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7a8cd962-609f-518f-9e71-42d8b7e424ed","type":"domain","category":"Network activity","to_ids":true,"value":"ppl.la","comment":"https://x.com/skocherhan/status/1955718798436118861","timestamp":"1755114671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e262ffc4-e0ba-5c4a-a7b0-a47e7aceae49","type":"url","category":"Network activity","to_ids":true,"value":"http://ppl.la/VJqWyjC","comment":"https://x.com/skocherhan/status/1955718798436118861","timestamp":"1755114671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f940d88-8a02-566e-9ac9-5bf205281691","type":"domain","category":"Network activity","to_ids":true,"value":"cancelatuseguro-bancobogota.onrender.com","comment":"https://x.com/skocherhan/status/1955718798436118861","timestamp":"1755114671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3e325e65-c973-59b6-a5c8-d5aab1e2ca56","type":"url","category":"Network activity","to_ids":true,"value":"http://cancelatuseguro-bancobogota.onrender.com/inicio.html","comment":"https://x.com/skocherhan/status/1955718798436118861","timestamp":"1755114671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19eb6930-e87b-5c59-b71e-a583f7e514f1","type":"url","category":"Network activity","to_ids":true,"value":"https://cssmcspacor8339.weebly.com","comment":"https://x.com/urldna_bot/status/1955721040564306165","timestamp":"1755115206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f3ccdff4-976d-5ed8-b00f-a1b3b1d12feb","type":"domain","category":"Network activity","to_ids":true,"value":"cssmcspacor8339.weebly.com","comment":"https://x.com/urldna_bot/status/1955721040564306165","timestamp":"1755115206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"926415dd-fa94-589d-882a-7a3410ad7cad","type":"domain","category":"Network activity","to_ids":true,"value":"evoedilestore.com","comment":"https://x.com/skocherhan/status/1955721964875571269","timestamp":"1755115426","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60e4bb43-1c6d-5641-9839-2d18eeabb5ad","type":"url","category":"Network activity","to_ids":true,"value":"http://evoedilestore.com/wp-includes/images/media/image/hmr/","comment":"https://x.com/skocherhan/status/1955721964875571269","timestamp":"1755115426","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eab771d1-a17d-5197-964a-1977daa83e4d","type":"domain","category":"Network activity","to_ids":true,"value":"owa.printermaintenanceservice.com","comment":"https://x.com/drb_ra/status/1955733224203976954","timestamp":"1755118111","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"25b562b0-83b5-5ae1-84a9-0cb50c91be02","type":"url","category":"Network activity","to_ids":true,"value":"https://owa.printermaintenanceservice.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955733224203976954","timestamp":"1755118111","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"955be1b4-3853-5d6c-9721-60050f081a8b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.223.120.202:80","comment":"https://x.com/drb_ra/status/1955733224203976954","timestamp":"1755118111","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d1744508-1c7e-5665-aed1-a4ed585e6f70","type":"url","category":"Network activity","to_ids":true,"value":"https://www.printermaintenanceservice.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955733500738363410","timestamp":"1755118177","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3e427a6-8e39-5a65-bf14-99ccea14d334","type":"url","category":"Network activity","to_ids":true,"value":"http://104.223.120.202:443","comment":"https://x.com/drb_ra/status/1955733640501191139","timestamp":"1755118210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6e28c6a2-c5b1-5b0e-8164-8a22ab0ea04c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.223.120.202","comment":"https://x.com/drb_ra/status/1955733640501191139","timestamp":"1755118210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"172be538-2d2d-574a-8d3b-54e2a5d1e7e5","type":"domain","category":"Network activity","to_ids":true,"value":"printermaintenanceservice.com","comment":"https://x.com/drb_ra/status/1955733640501191139","timestamp":"1755118210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"03b230d9-849e-5f53-86d4-776c607dcba6","type":"url","category":"Network activity","to_ids":true,"value":"https://printermaintenanceservice.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955733640501191139","timestamp":"1755118210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c094067-bed2-523b-8ee1-093bf6057339","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.132.53.182","comment":"https://x.com/FalconFeedsio/status/1955734369076986289","timestamp":"1755118384","distribution":"5"},{"uuid":"dfff42c7-6a31-54c4-ba00-b0f09f3b4dc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.135.215.25","comment":"https://x.com/FalconFeedsio/status/1955734369076986289","timestamp":"1755118384","distribution":"5"},{"uuid":"7696257c-85ff-5aeb-b55b-99be4af61752","type":"url","category":"Network activity","to_ids":true,"value":"http://52.57.120.10","comment":"https://x.com/threatquery/status/1955736128134304236","timestamp":"1755118803","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"247434e7-f4fe-5983-909e-b0e636d0fe80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.57.120.10","comment":"https://x.com/threatquery/status/1955736128134304236","timestamp":"1755118803","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"63e35879-c519-5da9-9b48-188e6f9b6550","type":"url","category":"Network activity","to_ids":true,"value":"http://54.255.172.127","comment":"https://x.com/threatquery/status/1955736129753252001","timestamp":"1755118803","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"malware"},{"name":"C2"}]},{"uuid":"e0421007-bf16-5456-a5c7-1bb8c8d9d646","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.22","comment":"https://x.com/threatquery/status/1955736131481358615","timestamp":"1755118804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"561eb940-d412-5081-a749-f8edc73ff904","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8a2590c9a17beff4632e5c888cee885f37901a664d21309b8b3b803462b160d7","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"bff71b81-db37-5b4d-8d55-8cf347a24d8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.55.137.74","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"615a191b-19be-5af7-9755-4728b6e02e2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.158.108.139","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"241590c0-8877-5205-b618-083637098465","type":"url","category":"Network activity","to_ids":true,"value":"http://glokdrofko.top","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"973cf9a0-f753-5006-9c95-717723e3d712","type":"domain","category":"Network activity","to_ids":true,"value":"glokdrofko.top","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"75a73456-57ce-5c19-800f-979456d4e7d3","type":"domain","category":"Network activity","to_ids":true,"value":"lunared-cdn.asia","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"61943fc3-c75d-5473-986d-29e835f452d9","type":"url","category":"Network activity","to_ids":true,"value":"http://lunared-cdn.asia","comment":"https://x.com/JAMESWT_WT/status/1955736362147307696","timestamp":"1755118859","distribution":"5"},{"uuid":"d6da6941-780c-5b10-9861-fa7c4a3e2255","type":"url","category":"Network activity","to_ids":true,"value":"http://file-workerdue-documentation.onrender.com","comment":"https://x.com/skocherhan/status/1955743091199005130","timestamp":"1755120463","distribution":"5"},{"uuid":"4a91f2df-809e-58e9-9f9c-9fa88d970246","type":"domain","category":"Network activity","to_ids":true,"value":"file-workerdue-documentation.onrender.com","comment":"https://x.com/skocherhan/status/1955743091199005130","timestamp":"1755120463","distribution":"5"},{"uuid":"ac5d0487-7e46-5ee5-9c43-239e4f83709d","type":"url","category":"Network activity","to_ids":true,"value":"http://docs.google.com/document/d/e/2PACX-1vSsQgB-iEhUDOdRKPYrxpWIKHZ3alkAb4dSvrzDGpPwVJ2oid3-FZFB5qNf-U35b8aWCdfg0iF9n1T7/pub","comment":"https://x.com/skocherhan/status/1955743091199005130","timestamp":"1755120463","distribution":"5"},{"uuid":"38b1128e-66b7-5113-ae4c-aa53b918e486","type":"domain","category":"Network activity","to_ids":true,"value":"gmailzmno.ebforms.com","comment":"https://x.com/urldna_bot/status/1955751240232534529","timestamp":"1755122406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a736d737-4524-5b38-8da1-75d6afb6e475","type":"url","category":"Network activity","to_ids":true,"value":"https://gmailzmno.ebforms.com","comment":"https://x.com/urldna_bot/status/1955751240232534529","timestamp":"1755122406","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ec4d7e6a-3043-565a-a37a-c506eb1bfea4","type":"url","category":"Network activity","to_ids":true,"value":"http://179.43.186.224:43721","comment":"https://x.com/drb_ra/status/1955764738069291038","timestamp":"1755125624","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"44f25ba6-6f47-5693-8f1a-7699cf2f917e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.43.186.224","comment":"https://x.com/drb_ra/status/1955764738069291038","timestamp":"1755125624","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"45b3de20-133f-5e19-9b38-bad818b781a5","type":"domain","category":"Network activity","to_ids":true,"value":"hometrade-nomura-co-jp.vinyltex.com","comment":"https://x.com/masaomi346/status/1955773150295384144","timestamp":"1755127630","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b1a7649-a8ac-5e60-976e-4cd04780de55","type":"url","category":"Network activity","to_ids":true,"value":"https://hometrade-nomura-co-jp.vinyltex.com/web/","comment":"https://x.com/masaomi346/status/1955773150295384144","timestamp":"1755127630","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ddc0b235-e97f-5881-8a72-d81b0f7f2f8a","type":"md5","category":"Payload delivery","to_ids":true,"value":"fc3d742d6e8d1d395078cc760d92a97c","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"48cf6643-e22f-5bee-b15b-ffdeb52dd11a","type":"md5","category":"Payload delivery","to_ids":true,"value":"e9b66d2c6a2a5856a3f415f91644d74f","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"f0b6e120-50fd-5891-bf23-d62809455755","type":"md5","category":"Payload delivery","to_ids":true,"value":"e69fe3ef266f2c4b3dd6c4c5847df1e0","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"ddbed77d-100f-5f4a-9551-4c3a4d3c51f8","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c81e71e0fc7e0a149b66d5639ad0c88","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"9f4c1340-e65e-5469-ae81-7b6d790d4d9b","type":"md5","category":"Payload delivery","to_ids":true,"value":"5345146055832c588b5204e155096399","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"f01fbb1e-b12c-5d7f-aa1b-1e95a49c3225","type":"md5","category":"Payload delivery","to_ids":true,"value":"532d3152d298b6652cca83aa3a812cbd","comment":"https://x.com/JAMESWT_WT/status/1955782956381037056","timestamp":"1755129968","distribution":"5"},{"uuid":"f6c91189-097a-52b2-ad3d-8294ce1fcb43","type":"domain","category":"Network activity","to_ids":true,"value":"mailserver-lk.com","comment":"https://x.com/skocherhan/status/1955783120646758785","timestamp":"1755130007","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81bc5d0a-f4e8-5506-a26d-8b5494815a30","type":"url","category":"Network activity","to_ids":true,"value":"http://mailserver-lk.com","comment":"https://x.com/skocherhan/status/1955783120646758785","timestamp":"1755130007","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"175066dd-e3d9-5e24-8cb5-392d3cbf9358","type":"domain","category":"Network activity","to_ids":true,"value":"mastercard-bility.sanzmedia.cn","comment":"https://x.com/Metemcyber/status/1955799214925193476","timestamp":"1755133844","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a81cd29-8ad4-5683-904f-3680f734a053","type":"url","category":"Network activity","to_ids":true,"value":"https://mastercard-bility.sanzmedia.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1955799214925193476","timestamp":"1755133844","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62dfafd7-d331-584d-b190-400ade6ddee1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.26.70","comment":"https://x.com/Metemcyber/status/1955799214925193476","timestamp":"1755133844","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e0e4356-5ac9-55a9-b2d7-cf99aa10cc7d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.135.153","comment":"https://x.com/Metemcyber/status/1955799214925193476","timestamp":"1755133844","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2580b2cc-012e-5758-93dc-b8bc656af74a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.49.236","comment":"https://x.com/Metemcyber/status/1955801846368600441","timestamp":"1755134471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30abceb0-15b8-58a1-ae50-25c65bc0428b","type":"domain","category":"Network activity","to_ids":true,"value":"fraternowni.wwwdyfreee.cn","comment":"https://x.com/Metemcyber/status/1955801846368600441","timestamp":"1755134471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"282d4eb0-6e60-51ac-b75a-59209124c544","type":"url","category":"Network activity","to_ids":true,"value":"https://fraternowni.wwwdyfreee.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1955801846368600441","timestamp":"1755134471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0bad6458-229f-5af6-9eb9-8940afef63d0","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.195.210","comment":"https://x.com/Metemcyber/status/1955801846368600441","timestamp":"1755134471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"964eed06-920c-504a-814c-4b3ba21bced3","type":"domain","category":"Network activity","to_ids":true,"value":"dhl-roachlet.rwkcn.cn","comment":"https://x.com/Metemcyber/status/1955803858665660610","timestamp":"1755134951","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc4552b5-7624-593e-9a77-98ddf8fe3fd3","type":"url","category":"Network activity","to_ids":true,"value":"https://dhl-roachlet.rwkcn.cn/portal_login_exp/getQuoteTab/","comment":"https://x.com/Metemcyber/status/1955803858665660610","timestamp":"1755134951","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb477845-5492-5a5f-890e-686aa6caddc1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.3.238","comment":"https://x.com/Metemcyber/status/1955803858665660610","timestamp":"1755134951","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fd4cea6-00de-5057-9bca-71dc96b34461","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.131.86","comment":"https://x.com/Metemcyber/status/1955803858665660610","timestamp":"1755134951","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f80849e6-a0f1-560e-88bb-18fe731d4e6c","type":"domain","category":"Network activity","to_ids":true,"value":"free5644.weebly.com","comment":"https://x.com/urldna_bot/status/1955811654110793763","timestamp":"1755136810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"71ded2ab-4b7b-59c2-bdbf-de09900453b8","type":"url","category":"Network activity","to_ids":true,"value":"https://free5644.weebly.com","comment":"https://x.com/urldna_bot/status/1955811654110793763","timestamp":"1755136810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4041b24c-f2b8-593f-b2d7-5653bdeaa180","type":"domain","category":"Network activity","to_ids":true,"value":"webmailalertservic.wixsite.com","comment":"https://x.com/urldna_bot/status/1955841836632707577","timestamp":"1755144006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ea65bf07-010e-52ba-8752-217f0c2b4198","type":"url","category":"Network activity","to_ids":true,"value":"http://webmailalertservic.wixsite.com/my-site/","comment":"https://x.com/urldna_bot/status/1955841836632707577","timestamp":"1755144006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0ed172c2-bfe3-5e3b-9d97-0f47ca8a235d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.217.209.205","comment":"https://x.com/Fact_Finder03/status/1955847872898822487","timestamp":"1755145445","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"eefb8bc7-93ed-59be-a69a-0b07329831ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.248.150.68","comment":"https://x.com/FalconFeedsio/status/1955850748228722740","timestamp":"1755146130","distribution":"5"},{"uuid":"0cf5e635-9c5d-598d-a92f-34f66a5d5ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.161.193.99","comment":"https://x.com/FalconFeedsio/status/1955854393959702853","timestamp":"1755147000","distribution":"5"},{"uuid":"a86d920a-86e6-5d74-bbd8-c4383680d865","type":"domain","category":"Network activity","to_ids":true,"value":"e-tax-must.dwudhio.cn","comment":"https://x.com/Metemcyber/status/1955862873403744640","timestamp":"1755149021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd3f238e-7a0e-5007-8cc2-40d1e39895de","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.152.119","comment":"https://x.com/Metemcyber/status/1955862873403744640","timestamp":"1755149021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3ecf770d-188f-54c2-bfd6-585c08977543","type":"url","category":"Network activity","to_ids":true,"value":"https://e-tax-must.dwudhio.cn/loginouudividua/","comment":"https://x.com/Metemcyber/status/1955862873403744640","timestamp":"1755149021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a9cf28e-44d9-5441-9143-97659db8c087","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.74.7","comment":"https://x.com/Metemcyber/status/1955862873403744640","timestamp":"1755149021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b6922ae1-1ab6-5673-b6af-80c77f057d4e","type":"md5","category":"Payload delivery","to_ids":true,"value":"aca107782cd7c82842a908d9e924d756","comment":"https://x.com/ReBensk/status/1955862876859589015","timestamp":"1755149022","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"8dc487a6-083e-506a-a4ef-ccdd40a330eb","type":"domain","category":"Network activity","to_ids":true,"value":"app.modcloudspace.com","comment":"https://x.com/__0XYC__/status/1955863170712530987","timestamp":"1755149092","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"8c59e990-27aa-58a0-ba5a-8fe27382b919","type":"url","category":"Network activity","to_ids":true,"value":"https://app.modcloudspace.com/mypage/meeting/securedrive.html","comment":"https://x.com/__0XYC__/status/1955863170712530987","timestamp":"1755149092","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"f3d8bd50-1edc-588e-b861-70adf212ea78","type":"domain","category":"Network activity","to_ids":true,"value":"icloud-skin.ykqzql.cn","comment":"https://x.com/Metemcyber/status/1955865880837153074","timestamp":"1755149738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88e1457c-7cb6-585b-8df5-1ef35925e08c","type":"url","category":"Network activity","to_ids":true,"value":"https://icloud-skin.ykqzql.cn/gvIY2S/","comment":"https://x.com/Metemcyber/status/1955865880837153074","timestamp":"1755149738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70422739-80a3-5a38-96a7-d15a1133ca8a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.155.190","comment":"https://x.com/Metemcyber/status/1955865880837153074","timestamp":"1755149738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19742784-03f9-59f8-90e5-856347341a7d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.40.174","comment":"https://x.com/Metemcyber/status/1955865880837153074","timestamp":"1755149738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"176bd74e-8e6e-5231-a6e4-8ee0db843799","type":"sha256","category":"Payload delivery","to_ids":true,"value":"275af9acc867f8a10734247c82fbbfb0c596a4877b44da6456d2d3439613d3c0","comment":"https://x.com/fbgwls245/status/1955867948712911125","timestamp":"1755150231","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"c54e1ea8-811f-511a-9273-9d1b9622a652","type":"domain","category":"Network activity","to_ids":true,"value":"epasseetelrnjp.pics","comment":"https://x.com/Metemcyber/status/1955869107687186614","timestamp":"1755150508","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"348be982-1db4-52f7-98d1-9ebf3d4d27b5","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.81.147","comment":"https://x.com/Metemcyber/status/1955869107687186614","timestamp":"1755150508","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aab7a32c-99f3-54ff-8f73-9696051f45e7","type":"url","category":"Network activity","to_ids":true,"value":"https://epasseetelrnjp.pics/11frDk/","comment":"https://x.com/Metemcyber/status/1955869107687186614","timestamp":"1755150508","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d72190e-0706-54c1-a912-5c6cb045ef28","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.189.254","comment":"https://x.com/Metemcyber/status/1955869107687186614","timestamp":"1755150508","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a55e86c7-ccf8-569f-9f52-fed329cb15ff","type":"url","category":"Network activity","to_ids":true,"value":"http://sayeghjewelry.com","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"04c9581d-5f3f-5d81-a658-5a0515b88523","type":"domain","category":"Network activity","to_ids":true,"value":"sayeghjewelry.com","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"209842f7-6a11-535c-bc25-c66756dc0091","type":"url","category":"Network activity","to_ids":true,"value":"https://creativepackout.co","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5"},{"uuid":"b34c414b-3a18-54e9-bab3-20a67c4132ab","type":"url","category":"Network activity","to_ids":true,"value":"http://mobballetc2ec.com","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ee125239-3040-52ab-ac3e-0087834763f5","type":"url","category":"Network activity","to_ids":true,"value":"http://ideal-bau.de/wp-admin/js/widgets/hurryup/?rv=bear&za=battle0","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5"},{"uuid":"2ee5df1f-5707-5526-a54f-7550f5c86cc7","type":"domain","category":"Network activity","to_ids":true,"value":"ideal-bau.de","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5"},{"uuid":"5cc10e16-c887-5335-9f81-466dd956716a","type":"domain","category":"Network activity","to_ids":true,"value":"creativepackout.co","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5"},{"uuid":"f5ebae17-a5e5-5151-8dc3-c3234f00db70","type":"domain","category":"Network activity","to_ids":true,"value":"mobballetc2ec.com","comment":"https://x.com/skocherhan/status/1955869327925580099","timestamp":"1755150560","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"f1c78977-5835-5676-8a51-1c882726f1a3","type":"domain","category":"Network activity","to_ids":true,"value":"sf-mc.co.jp","comment":"https://x.com/urldna_bot/status/1955872040008688090","timestamp":"1755151207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ab66ed96-1786-59d7-a593-963b14c9169a","type":"url","category":"Network activity","to_ids":true,"value":"https://sf-mc.co.jp","comment":"https://x.com/urldna_bot/status/1955872040008688090","timestamp":"1755151207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0ef3b08d-727f-55d6-9b46-b9bbf65bfb8a","type":"url","category":"Network activity","to_ids":true,"value":"http://43.134.168.10:8888","comment":"https://x.com/drb_ra/status/1955884014989963268","timestamp":"1755154062","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"a3cfd96e-70ab-5f2d-b4b1-04790057bfcb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.168.10","comment":"https://x.com/drb_ra/status/1955884014989963268","timestamp":"1755154062","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"e3cba127-cac9-5e9e-8dd5-7f27b1dcca35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.57.82.185","comment":"https://x.com/drb_ra/status/1955884153800421484","timestamp":"1755154095","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ab89a93a-a0ca-5fbe-8c88-0c3211ecf40a","type":"url","category":"Network activity","to_ids":true,"value":"http://123.57.82.185:8888","comment":"https://x.com/drb_ra/status/1955884153800421484","timestamp":"1755154095","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"06f9bbb2-4caf-5257-ad9e-ad036dde5d66","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.196.96:443","comment":"https://x.com/drb_ra/status/1955884293047095496","timestamp":"1755154128","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9f826bed-f79a-50e7-8c6d-cd03536ce644","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.196.96","comment":"https://x.com/drb_ra/status/1955884293047095496","timestamp":"1755154128","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"892a7978-7b8a-5851-bf55-f6a2b487151a","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.61.112:443","comment":"https://x.com/drb_ra/status/1955884432608358749","timestamp":"1755154161","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b197b97d-cf0d-57a5-979e-4ffda7194944","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.61.112","comment":"https://x.com/drb_ra/status/1955884432608358749","timestamp":"1755154161","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"906e6ee5-e315-56ea-a7d8-beb326c722a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.49.43.74","comment":"https://x.com/drb_ra/status/1955884570840121350","timestamp":"1755154194","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"94e1bd17-af0b-5bf7-97f9-cfa3713fcbdf","type":"url","category":"Network activity","to_ids":true,"value":"http://94.49.43.74:443","comment":"https://x.com/drb_ra/status/1955884570840121350","timestamp":"1755154194","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"3916096d-876e-5fc9-8048-7e8ba7759cd9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.84.189:443","comment":"https://x.com/drb_ra/status/1955884709679911337","timestamp":"1755154228","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bd4a7aec-7946-5431-94f6-d995024dcd61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.84.189","comment":"https://x.com/drb_ra/status/1955884709679911337","timestamp":"1755154228","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6611511e-2b4a-5be1-874f-8e73566f023a","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.142.64:443","comment":"https://x.com/drb_ra/status/1955884847332810917","timestamp":"1755154260","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f5b2622b-3b4a-5af7-b7da-91fcd16dd22c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.142.64","comment":"https://x.com/drb_ra/status/1955884847332810917","timestamp":"1755154260","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"e5c0f555-e6f8-59d2-9022-70d2497e2386","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.144.98:443","comment":"https://x.com/drb_ra/status/1955884984637469005","timestamp":"1755154293","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"feb9e992-b286-59f6-b844-a6f114d79d71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.144.98","comment":"https://x.com/drb_ra/status/1955884984637469005","timestamp":"1755154293","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"be215257-b839-5c8c-bbdb-9af6c98e19b4","type":"url","category":"Network activity","to_ids":true,"value":"http://103.235.75.42:443","comment":"https://x.com/drb_ra/status/1955885123183755588","timestamp":"1755154326","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d9f6a96e-cf18-5184-a1fa-bfc3b4eaa00e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.235.75.42","comment":"https://x.com/drb_ra/status/1955885123183755588","timestamp":"1755154326","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ee15d5b0-87fa-541d-a9f5-158485a97eb9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.167.207.76","comment":"https://x.com/drb_ra/status/1955885261054693376","timestamp":"1755154359","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"26bcf4fc-69f5-56ec-afea-417aa730126e","type":"url","category":"Network activity","to_ids":true,"value":"http://198.167.207.76:443","comment":"https://x.com/drb_ra/status/1955885261054693376","timestamp":"1755154359","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"935fc51f-a3c1-58e1-b430-c9633ca3dae1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.161.41.158","comment":"https://x.com/drb_ra/status/1955885399114395720","timestamp":"1755154392","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"06184221-b9c3-5308-bc8d-2daf90884333","type":"url","category":"Network activity","to_ids":true,"value":"http://203.161.41.158:8443","comment":"https://x.com/drb_ra/status/1955885399114395720","timestamp":"1755154392","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"0f31aa3c-20ed-541b-b0bf-1af4b12d0fad","type":"url","category":"Network activity","to_ids":true,"value":"http://3.146.105.91:443","comment":"https://x.com/drb_ra/status/1955885537685844345","timestamp":"1755154425","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"8c7ac2d6-ef10-5748-aad8-ce9e37d22007","type":"url","category":"Network activity","to_ids":true,"value":"http://54.228.103.168:443","comment":"https://x.com/drb_ra/status/1955885675896606976","timestamp":"1755154458","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6f8b8d95-e1e5-509a-b28d-3d6f21ec5a90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.228.103.168","comment":"https://x.com/drb_ra/status/1955885675896606976","timestamp":"1755154458","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"cb3cd441-b0b0-5190-a8c0-62b47fb708ba","type":"url","category":"Network activity","to_ids":true,"value":"http://3.222.154.33:443","comment":"https://x.com/drb_ra/status/1955885813675233531","timestamp":"1755154491","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b351d1d3-d9fc-58d7-8c82-c41bf45785b3","type":"url","category":"Network activity","to_ids":true,"value":"http://5.223.67.5:7443","comment":"https://x.com/drb_ra/status/1955885951303004500","timestamp":"1755154524","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e67c12e6-1319-5931-ac7f-cb6150812e15","type":"url","category":"Network activity","to_ids":true,"value":"http://23.88.39.201:7443","comment":"https://x.com/drb_ra/status/1955886089178161633","timestamp":"1755154556","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"ed7ea079-4c34-5375-8218-2856f1411736","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.88.39.201","comment":"https://x.com/drb_ra/status/1955886089178161633","timestamp":"1755154556","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"5b1c51f5-fd43-588d-a4ca-909c5ef67f56","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.191.63.174","comment":"https://x.com/FalconFeedsio/status/1955886142970302843","timestamp":"1755154569","distribution":"5"},{"uuid":"1a40efea-575a-510f-84b9-23c550927b34","type":"url","category":"Network activity","to_ids":true,"value":"http://173.212.199.220:8080","comment":"https://x.com/drb_ra/status/1955886735075762540","timestamp":"1755154710","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"476c3840-7014-559c-9012-3df724ecc05b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.212.199.220","comment":"https://x.com/drb_ra/status/1955886735075762540","timestamp":"1755154710","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4e20e661-44e9-599a-9763-56f2dcdae372","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.81.3:2404","comment":"https://x.com/drb_ra/status/1955886873068364279","timestamp":"1755154743","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"db77a1e2-235d-573e-bb21-64b222f09fbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.81.3","comment":"https://x.com/drb_ra/status/1955886873068364279","timestamp":"1755154743","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f7b798a5-9cb3-5bda-916b-c7b45c57cf22","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.158.241:2404","comment":"https://x.com/drb_ra/status/1955887010935091491","timestamp":"1755154776","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"055a7df1-9f1f-5561-86da-9b5ca8a2794e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.158.241","comment":"https://x.com/drb_ra/status/1955887010935091491","timestamp":"1755154776","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1d2e8570-a3bd-5a3e-9107-437832b75fef","type":"url","category":"Network activity","to_ids":true,"value":"http://193.26.115.190:2404","comment":"https://x.com/drb_ra/status/1955887153008795724","timestamp":"1755154810","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b265229e-39d2-5c75-9bd3-114f28c83d3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.26.115.190","comment":"https://x.com/drb_ra/status/1955887153008795724","timestamp":"1755154810","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"17c0b38a-0050-5b44-9bf7-7c72ba3f231e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.158.58.205","comment":"https://x.com/SarlackLab/status/1955887243031097500","timestamp":"1755154832","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"84767ab0-db34-54d4-9785-0fcdb8712d58","type":"url","category":"Network activity","to_ids":true,"value":"http://18.158.58.205:12027","comment":"https://x.com/SarlackLab/status/1955887243031097500","timestamp":"1755154832","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"0b51c649-b68e-5efa-8c80-3145c34de3d8","type":"url","category":"Network activity","to_ids":true,"value":"http://bestoffivem.online","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"ae4eea4c-badd-56a3-a727-5b21a9ef3ac9","type":"domain","category":"Network activity","to_ids":true,"value":"bestoffivem.online","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"2cd0c31c-7083-57dc-803a-a912abf16c8f","type":"domain","category":"Network activity","to_ids":true,"value":"dogestealer.site","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"96b456a5-a2b9-58ff-925a-8874af34afa2","type":"domain","category":"Network activity","to_ids":true,"value":"d1ge.xyz","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"fa555287-39e0-5fa3-beb3-613d5a94eec2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.64.4.198:12027","comment":"https://x.com/SarlackLab/status/1955887278351384682","timestamp":"1755154840","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"b7787ab4-03bf-5937-b445-140eafad32d1","type":"url","category":"Network activity","to_ids":true,"value":"http://dogestealer.site","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"f3e1c2fb-bf9c-5220-a74a-dd688926964d","type":"md5","category":"Payload delivery","to_ids":true,"value":"18a97e0067ffbd9ddba79e3bc43c98ab","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"d836ddf8-63b3-5bf2-a2a9-d01cac3c8cfd","type":"url","category":"Network activity","to_ids":true,"value":"http://d1ge.xyz/api/sh1t","comment":"https://x.com/skocherhan/status/1955887277420294332","timestamp":"1755154840","distribution":"5"},{"uuid":"934f97ee-52c0-538d-a285-50f8b3def056","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.235:5671","comment":"https://x.com/drb_ra/status/1955887291366342658","timestamp":"1755154843","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"40fa70ba-0992-57d9-9d6c-212f3c7c6911","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.235","comment":"https://x.com/drb_ra/status/1955887291366342658","timestamp":"1755154843","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"061556b5-7a60-5f68-ad6c-859457d69b02","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ab85924ba95692995ac622172ed7f2ebc1997450d86f5245b03491422be2f3d6","comment":"https://x.com/skocherhan/status/1955887381682290879","timestamp":"1755154865","distribution":"5"},{"uuid":"67697a68-96c8-5dfe-a806-7c822b1b8136","type":"md5","category":"Payload delivery","to_ids":true,"value":"c1a1e6e2ef0694180b865df321f99471","comment":"https://x.com/skocherhan/status/1955887381682290879","timestamp":"1755154865","distribution":"5"},{"uuid":"1639e153-cc28-51d9-ab18-abdd3f59780d","type":"url","category":"Network activity","to_ids":true,"value":"http://54.89.255.236:80","comment":"https://x.com/drb_ra/status/1955887429795115136","timestamp":"1755154876","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"91f50242-4fcc-5126-a0c8-09f009b6468b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.89.255.236","comment":"https://x.com/drb_ra/status/1955887429795115136","timestamp":"1755154876","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7c8fde3f-e834-5d3c-9929-81368163bcc5","type":"url","category":"Network activity","to_ids":true,"value":"http://102.100.73.224:443","comment":"https://x.com/drb_ra/status/1955887568618156457","timestamp":"1755154909","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7d9bc31a-f40c-559a-870c-24a479197d61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.100.73.224","comment":"https://x.com/drb_ra/status/1955887568618156457","timestamp":"1755154909","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6c68b6bc-669d-54db-80c8-f1ed35d2b314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.212.35.30","comment":"https://x.com/drb_ra/status/1955887707101544567","timestamp":"1755154942","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"bfa328a3-8f91-5aa5-8540-815468aebf7c","type":"url","category":"Network activity","to_ids":true,"value":"http://13.212.35.30:888","comment":"https://x.com/drb_ra/status/1955887707101544567","timestamp":"1755154942","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7d75b068-5f89-5547-a866-d9c57a3eaa67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.198.185.141","comment":"https://x.com/drb_ra/status/1955887845681287409","timestamp":"1755154975","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8a775f68-a7cc-53bf-9cd2-bc6383725023","type":"url","category":"Network activity","to_ids":true,"value":"http://93.198.185.141:81","comment":"https://x.com/drb_ra/status/1955887845681287409","timestamp":"1755154975","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f42cd98f-6303-58d9-aceb-82064653395c","type":"url","category":"Network activity","to_ids":true,"value":"http://64.23.97.215:443","comment":"https://x.com/drb_ra/status/1955887984579866738","timestamp":"1755155008","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b7873de6-962f-5de3-913e-125516060a1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.23.97.215","comment":"https://x.com/drb_ra/status/1955887984579866738","timestamp":"1755155008","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0008c27f-f863-5f59-b7b7-10cb130eeb27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.19","comment":"https://x.com/drb_ra/status/1955888122710909365","timestamp":"1755155041","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"28743592-1add-5398-bbb8-500f9f57b5d3","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.19:9999","comment":"https://x.com/drb_ra/status/1955888122710909365","timestamp":"1755155041","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"cf179e84-5fbf-5bab-8cab-b43c6d4a6ec2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.204","comment":"https://x.com/drb_ra/status/1955888260913250757","timestamp":"1755155074","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f043235b-e0a7-5e25-b241-f1fa927c9977","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.204:4001","comment":"https://x.com/drb_ra/status/1955888260913250757","timestamp":"1755155074","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8bef8e4f-aa1c-5354-97e8-a2bd3d97a336","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:443","comment":"https://x.com/drb_ra/status/1955896520823234666","timestamp":"1755157044","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"abdabe75-defc-50b5-9d52-20e9eaa2494d","type":"domain","category":"Network activity","to_ids":true,"value":"v22ki3938h962ibdpe8z9y7e7mcjlxhar.probe.tbcache.com","comment":"https://x.com/drb_ra/status/1955896520823234666","timestamp":"1755157044","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2fe0e521-2abd-5415-aae8-dca1d3b68094","type":"url","category":"Network activity","to_ids":true,"value":"https://v22ki3938h962ibdpe8z9y7e7mcjlxhar.probe.tbcache.com/ca","comment":"https://x.com/drb_ra/status/1955896520823234666","timestamp":"1755157044","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d8b60216-3d6f-5eaa-b594-b15312be7791","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.64.54","comment":"https://x.com/drb_ra/status/1955896520823234666","timestamp":"1755157044","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"01f6361e-128e-5bff-83e9-2cb6103c8037","type":"domain","category":"Network activity","to_ids":true,"value":"rtost.duckdns.org","comment":"https://x.com/skocherhan/status/1955899026630480370","timestamp":"1755157641","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"3cc6b14d-5d84-56b2-8656-f37fbc2e4c91","type":"url","category":"Network activity","to_ids":true,"value":"http://rtost.duckdns.org/mimicr/","comment":"https://x.com/skocherhan/status/1955899026630480370","timestamp":"1755157641","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"43f3d5d2-f319-59e0-aa72-5c178c351115","type":"domain","category":"Network activity","to_ids":true,"value":"jamesprop.com","comment":"https://x.com/urldna_bot/status/1955902238343176564","timestamp":"1755158407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"08571603-894a-586a-90c4-f8b2cff1ae08","type":"url","category":"Network activity","to_ids":true,"value":"http://jamesprop.com/smp/ams-update/index.html","comment":"https://x.com/urldna_bot/status/1955902238343176564","timestamp":"1755158407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"24d6e0c7-8d20-5f23-94a3-9c24c6e92d93","type":"domain","category":"Network activity","to_ids":true,"value":"feetifu.net","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"d2e9a990-e828-50c1-a516-8939774daab0","type":"url","category":"Network activity","to_ids":true,"value":"http://feetifu.net","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"fc2b5ceb-9492-5863-bb4d-7e87748294d7","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.196.167:7700","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"d158eebd-1ec5-51fe-91cf-650280cc53cc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.83.165.0:7700","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"9c73c150-d50a-594d-8d6a-4773635b5fb6","type":"url","category":"Network activity","to_ids":true,"value":"http://8.210.41.205:7700","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"95c28c80-95af-5222-8a33-365bdf1c6182","type":"url","category":"Network activity","to_ids":true,"value":"http://154.39.238.51:7700","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"1b5c21df-96f3-58c0-a640-d1b324b97519","type":"url","category":"Network activity","to_ids":true,"value":"http://122.10.24.147:7700","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"098c34b1-f5f1-5303-8f5d-494eb69b4c21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.83.196.167","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"0afc31c7-bef8-52f2-952f-4ad30a1ab644","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.39.238.51","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"aadd15c7-6cb3-53f7-8571-b3856863983b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.10.24.147","comment":"https://x.com/skocherhan/status/1955915197404586141","timestamp":"1755161496","distribution":"5"},{"uuid":"9163053c-22a8-59d4-91bd-d71be456a727","type":"domain","category":"Network activity","to_ids":true,"value":"cywcare.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"89cb9be9-e542-52c8-8017-12a904b6b705","type":"url","category":"Network activity","to_ids":true,"value":"http://cywcare.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d62a287e-0087-5243-a814-a63bba43e90a","type":"domain","category":"Network activity","to_ids":true,"value":"livecxn.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"40496132-1117-5e38-80fb-08b211ce2810","type":"url","category":"Network activity","to_ids":true,"value":"http://livecxn.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7c511f64-2f35-5016-b9ac-6e4974d6f7f7","type":"domain","category":"Network activity","to_ids":true,"value":"bdglive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2d1ae1d4-1465-560a-be42-1f5c4ce92a45","type":"url","category":"Network activity","to_ids":true,"value":"http://bdglive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"78dfa5a4-8c3a-507d-94cb-24c7d8ec0a89","type":"domain","category":"Network activity","to_ids":true,"value":"ugfcare.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9e8062cf-b0c7-5705-a9bc-ccce771c62aa","type":"url","category":"Network activity","to_ids":true,"value":"http://ugfcare.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b266c8db-94c6-554c-8b6a-fdff92596afa","type":"domain","category":"Network activity","to_ids":true,"value":"livenmv.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bc0da5d3-0fa8-5373-91f2-2921ddebf014","type":"url","category":"Network activity","to_ids":true,"value":"http://livenmv.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e77f7533-b1ca-5899-92ae-92fa8c7ad2c0","type":"domain","category":"Network activity","to_ids":true,"value":"wzglive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c7fea64a-b035-5cae-a2a9-2f76e7e8fa76","type":"url","category":"Network activity","to_ids":true,"value":"http://wzglive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"953b2eb3-3a92-5eff-87a5-1af60882e955","type":"domain","category":"Network activity","to_ids":true,"value":"njqlive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"65e0a3a3-ff1a-5caa-bb46-8283a5ff3958","type":"url","category":"Network activity","to_ids":true,"value":"http://njqlive.top","comment":"https://x.com/FABO97662188/status/1955917470964859037","timestamp":"1755162038","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"172be538-2d2d-574a-8d3b-54e2a5d1e7e5","type":"domain","category":"Network activity","to_ids":true,"value":"printermaintenanceservice.com","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d1744508-1c7e-5665-aed1-a4ed585e6f70","type":"url","category":"Network activity","to_ids":true,"value":"https://www.printermaintenanceservice.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eab771d1-a17d-5197-964a-1977daa83e4d","type":"domain","category":"Network activity","to_ids":true,"value":"owa.printermaintenanceservice.com","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"25b562b0-83b5-5ae1-84a9-0cb50c91be02","type":"url","category":"Network activity","to_ids":true,"value":"https://owa.printermaintenanceservice.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c3e427a6-8e39-5a65-bf14-99ccea14d334","type":"url","category":"Network activity","to_ids":true,"value":"http://104.223.120.202:443","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e28c6a2-c5b1-5b0e-8164-8a22ab0ea04c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.223.120.202","comment":"https://x.com/drb_ra/status/1955926114037047430","timestamp":"1755164099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c1db0a48-1002-5351-9393-748f9d5d638f","type":"domain","category":"Network activity","to_ids":true,"value":"msbdjdhdjd.weebly.com","comment":"https://x.com/urldna_bot/status/1955932437331976632","timestamp":"1755165607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ad9aecf5-87ef-52c7-b82e-5ebf22f89576","type":"url","category":"Network activity","to_ids":true,"value":"https://msbdjdhdjd.weebly.com","comment":"https://x.com/urldna_bot/status/1955932437331976632","timestamp":"1755165607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"329efa91-c737-5df1-8012-67fed449833e","type":"domain","category":"Network activity","to_ids":true,"value":"smbccardadf.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cc21aa3-7e1f-5386-8582-7520335619c1","type":"url","category":"Network activity","to_ids":true,"value":"https://smbccardadf.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"442f7d77-e660-5b8d-9255-b15fb89d2a5e","type":"domain","category":"Network activity","to_ids":true,"value":"smbccardhyf.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"316886a1-7624-53b5-8c44-8182bbd071a2","type":"url","category":"Network activity","to_ids":true,"value":"https://smbccardhyf.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a88689be-213e-5163-946f-8f38e5079603","type":"domain","category":"Network activity","to_ids":true,"value":"smbccardwad.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03e35650-3270-5d76-bb1f-5d63b470b8c5","type":"url","category":"Network activity","to_ids":true,"value":"https://smbccardwad.club","comment":"https://x.com/masaomi346/status/1955946032749252947","timestamp":"1755168848","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"adb62fc8-f600-536e-b2ed-f2ba679ca5c7","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.91.41:8805","comment":"https://x.com/SarlackLab/status/1955948051614347584","timestamp":"1755169329","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"4a20ad53-c19f-52ed-a290-814df600216f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.91.41","comment":"https://x.com/SarlackLab/status/1955948051614347584","timestamp":"1755169329","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"250a8820-8c7d-5696-a0a7-c9374bc593cc","type":"domain","category":"Network activity","to_ids":true,"value":"carolesheridan4.wixsite.com","comment":"https://x.com/urldna_bot/status/1955962639382630520","timestamp":"1755172807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"32972dff-f04d-5a44-87fa-808b31e51cc6","type":"url","category":"Network activity","to_ids":true,"value":"http://carolesheridan4.wixsite.com/my-site","comment":"https://x.com/urldna_bot/status/1955962639382630520","timestamp":"1755172807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"14d67d35-83c5-5cb1-a41e-056dbac841a6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"94c6ff0a9f1b2b85a1f6576716e03dad1d7fa172defd234e7985a8efedfe9ac6","comment":"https://x.com/James_inthe_box/status/1955978206093435066","timestamp":"1755176519","distribution":"5","Tag":[{"name":"RAT"},{"name":"Remcos"}]},{"uuid":"600010ce-bcfc-520b-aab9-99cfdfe09f26","type":"domain","category":"Network activity","to_ids":true,"value":"attonlinewebaccess.weebly.com","comment":"https://x.com/urldna_bot/status/1955992836060381492","timestamp":"1755180007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6e1a7c84-f0ed-5082-a5ba-4c57107faf38","type":"url","category":"Network activity","to_ids":true,"value":"https://attonlinewebaccess.weebly.com","comment":"https://x.com/urldna_bot/status/1955992836060381492","timestamp":"1755180007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"742cd311-f523-5339-97e0-6d475fccb7f4","type":"domain","category":"Network activity","to_ids":true,"value":"ia801703.us.archive.org","comment":"https://x.com/JAMESWT_WT/status/1955993167238414686","timestamp":"1755180086","distribution":"5"},{"uuid":"7502afeb-c3e5-5f05-9d3a-a69e28f60f08","type":"url","category":"Network activity","to_ids":true,"value":"https://ia801703.us.archive.org/8/items/msi-pro/MSI_PRO.jpg","comment":"https://x.com/JAMESWT_WT/status/1955993167238414686","timestamp":"1755180086","distribution":"5"},{"uuid":"8a051b2b-06ec-5cf7-955f-341296fc5ef1","type":"domain","category":"Network activity","to_ids":true,"value":"www-paeactivation9925.my.id","comment":"https://x.com/skocherhan/status/1956005478439207009","timestamp":"1755183021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30079e74-6c08-52e8-928e-25e563f41ecb","type":"url","category":"Network activity","to_ids":true,"value":"http://www-paeactivation9925.my.id/timeactive?Communty-Standard/5700","comment":"https://x.com/skocherhan/status/1956005478439207009","timestamp":"1755183021","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c2232337-7eb0-5c5a-bdd7-0a63f24d53ef","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/ebooket1234/psychic-couscous/releases/download/auto-20250813-111502/CapCutPro_v2.9.3_x64.zip","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"e29b8582-6088-5e65-b2c4-ddad2b423964","type":"domain","category":"Network activity","to_ids":true,"value":"urcapcut.site","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"cf45da4f-ae7b-5c8b-a78d-0857595484d0","type":"url","category":"Network activity","to_ids":true,"value":"http://urcapcut.site","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"2e18d556-1d04-5062-a978-c2454d25d45d","type":"domain","category":"Network activity","to_ids":true,"value":"capcutstudioweb2.com","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"0d1ba81a-9670-5186-8cff-85f31db97544","type":"url","category":"Network activity","to_ids":true,"value":"http://capcutstudioweb2.com","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"a201f052-0ad4-5533-b67f-03e3eaffa9ad","type":"domain","category":"Network activity","to_ids":true,"value":"cutstudio.org","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"07d137f9-1aba-5262-84aa-6b927cbeb2be","type":"url","category":"Network activity","to_ids":true,"value":"http://cutstudio.org","comment":"https://x.com/skocherhan/status/1956011703520354326","timestamp":"1755184505","distribution":"5"},{"uuid":"35659611-848b-5bca-86ca-194a6f716b90","type":"url","category":"Network activity","to_ids":true,"value":"https://163.181.35.242/g.pixel","comment":"https://x.com/drb_ra/status/1956022617493631255","timestamp":"1755187107","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d78f5824-992d-5320-a788-bf0da1ac0e8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.181.35.242","comment":"https://x.com/drb_ra/status/1956022617493631255","timestamp":"1755187107","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ca9767b3-d0be-5aeb-90f3-e8b932980958","type":"url","category":"Network activity","to_ids":true,"value":"https://47.93.240.197/socialapiVersion=1.1","comment":"https://x.com/drb_ra/status/1956023266096599356","timestamp":"1755187262","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e2c5840b-32ef-5ae8-ad1f-622b72010136","type":"url","category":"Network activity","to_ids":true,"value":"http://47.93.240.197:65433","comment":"https://x.com/drb_ra/status/1956023266096599356","timestamp":"1755187262","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3860b66-e996-54ad-a028-38d631a67aa9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.93.240.197","comment":"https://x.com/drb_ra/status/1956023266096599356","timestamp":"1755187262","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c094067-bed2-523b-8ee1-093bf6057339","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.132.53.182","comment":"https://x.com/FalconFeedsio/status/1956038925719626158","timestamp":"1755190995","distribution":"5"},{"uuid":"f2ed8084-a124-5f9a-ae3d-9d49ed978eb8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.142.251.65","comment":"https://x.com/FalconFeedsio/status/1956039975566499876","timestamp":"1755191246","distribution":"5"},{"uuid":"3556664c-ad30-5aeb-ad92-8f277561536e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.157.171.245","comment":"https://x.com/skocherhan/status/1956045506225856748","timestamp":"1755192564","distribution":"5"},{"uuid":"15610a13-ad47-51d1-a40b-f2a7ee00dcfe","type":"sha256","category":"Payload delivery","to_ids":true,"value":"36c7f277cff08333b0c301721a407546b548543da9ca69a16320f061e4c11f33","comment":"https://x.com/skocherhan/status/1956045566854443090","timestamp":"1755192579","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1f54cbff-18d2-5b61-976c-68281c531615","type":"domain","category":"Network activity","to_ids":true,"value":"sso-robinhoodcom-login.typedream.app","comment":"https://x.com/urldna_bot/status/1956053233866076601","timestamp":"1755194407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"419a0681-0790-5bcc-8b71-d97c42ba7e2e","type":"url","category":"Network activity","to_ids":true,"value":"http://sso-robinhoodcom-login.typedream.app","comment":"https://x.com/urldna_bot/status/1956053233866076601","timestamp":"1755194407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a200abed-e144-5754-9580-813b283c2667","type":"domain","category":"Network activity","to_ids":true,"value":"universal-uzbekistan-grid-os.trycloudflare.com","comment":"https://x.com/skocherhan/status/1956061596037341232","timestamp":"1755196401","distribution":"5"},{"uuid":"fabe2d2d-4657-503e-afbe-577b729ae9a7","type":"url","category":"Network activity","to_ids":true,"value":"http://universal-uzbekistan-grid-os.trycloudflare.com/Su/persuadej3M/accidentalW72.pdf","comment":"https://x.com/skocherhan/status/1956061596037341232","timestamp":"1755196401","distribution":"5"},{"uuid":"71d81cad-e0af-5b9d-a6ee-dc5ec6fa63ac","type":"url","category":"Network activity","to_ids":true,"value":"http://38.12.25.51:8888","comment":"https://x.com/drb_ra/status/1956064984519065778","timestamp":"1755197208","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"bb117837-2e25-56eb-b30c-8ca6fb1d289b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.12.25.51","comment":"https://x.com/drb_ra/status/1956064984519065778","timestamp":"1755197208","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"1ff41bee-bca3-5186-b6c7-6f52f9f261a9","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.14.2:1963","comment":"https://x.com/drb_ra/status/1956065123480588579","timestamp":"1755197242","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"a7ada0d7-ca10-53b9-974d-fa3d6b87b2f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.14.2","comment":"https://x.com/drb_ra/status/1956065123480588579","timestamp":"1755197242","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"0d7bbbbb-9d52-569f-b0b8-db7ea7c43f76","type":"url","category":"Network activity","to_ids":true,"value":"http://185.158.248.53:139","comment":"https://x.com/drb_ra/status/1956065261770989920","timestamp":"1755197274","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a95beea1-02e5-5f19-8b64-73b05fafa854","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.158.248.53","comment":"https://x.com/drb_ra/status/1956065261770989920","timestamp":"1755197274","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fcc26d7a-9e19-5080-8494-ff3920c986f8","type":"url","category":"Network activity","to_ids":true,"value":"http://18.142.251.65:80","comment":"https://x.com/drb_ra/status/1956065403051933704","timestamp":"1755197308","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"18fe1876-3599-57f4-b16e-cb8d332371a9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"df10af3cf31ae5c0aeb93ab76ca9eac4189a35bb9869ac2cf5f120f1ca953733","comment":"https://x.com/skocherhan/status/1956065466482356661","timestamp":"1755197323","distribution":"5"},{"uuid":"a50dca89-c3d1-5eed-b9a3-e358ca99d5a1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.217.72.116:443","comment":"https://x.com/drb_ra/status/1956065540515979554","timestamp":"1755197341","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"d08519b0-7415-5ab5-8214-5a22d899a708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.217.72.116","comment":"https://x.com/drb_ra/status/1956065540515979554","timestamp":"1755197341","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"17726911-0507-5cf0-9640-eb64690c77ee","type":"url","category":"Network activity","to_ids":true,"value":"http://3.136.46.174:443","comment":"https://x.com/drb_ra/status/1956065678026236372","timestamp":"1755197374","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"947f1066-9a58-5d36-a364-96b75f06e4c0","type":"url","category":"Network activity","to_ids":true,"value":"http://15.207.149.189:443","comment":"https://x.com/drb_ra/status/1956065816119550369","timestamp":"1755197407","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1fe1fe09-738b-58b8-95fe-db02e86467a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.207.149.189","comment":"https://x.com/drb_ra/status/1956065816119550369","timestamp":"1755197407","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3edda7e8-8070-56fd-a96c-50b69fa1baee","type":"url","category":"Network activity","to_ids":true,"value":"http://16.171.38.71:443","comment":"https://x.com/drb_ra/status/1956065954833817857","timestamp":"1755197440","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fe276edf-d2c0-577f-8c39-4bebe2afe24f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.171.38.71","comment":"https://x.com/drb_ra/status/1956065954833817857","timestamp":"1755197440","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cac3f761-06fb-5393-933a-b2433ecfc6c1","type":"url","category":"Network activity","to_ids":true,"value":"http://95.179.209.246:7443","comment":"https://x.com/drb_ra/status/1956066091764990373","timestamp":"1755197472","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"d882916c-1417-55db-85ba-c4cf2782c718","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.179.209.246","comment":"https://x.com/drb_ra/status/1956066091764990373","timestamp":"1755197472","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0bd5065c-5bee-527e-9eb5-d9bf26402125","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.89:2404","comment":"https://x.com/drb_ra/status/1956066739193819170","timestamp":"1755197627","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4e02de3b-3853-53a0-b33e-3fc96ff89ff5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.89","comment":"https://x.com/drb_ra/status/1956066739193819170","timestamp":"1755197627","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"75dadf48-f20c-563f-b656-6f12d7abe0ce","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.162:2404","comment":"https://x.com/drb_ra/status/1956066877010272329","timestamp":"1755197660","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"85ba687c-9bb8-580e-8704-e339ff838419","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.162","comment":"https://x.com/drb_ra/status/1956066877010272329","timestamp":"1755197660","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"90f815d6-4d21-534d-9fdc-5b6335826f7f","type":"url","category":"Network activity","to_ids":true,"value":"http://94.26.90.178:2404","comment":"https://x.com/drb_ra/status/1956067014960644518","timestamp":"1755197692","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1670740d-3b4e-5182-80ac-e3e8cb0e050c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.26.90.178","comment":"https://x.com/drb_ra/status/1956067014960644518","timestamp":"1755197692","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6e35bd45-fa28-5381-8773-08c4367300d5","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.70.224:33672","comment":"https://x.com/drb_ra/status/1956067154719334800","timestamp":"1755197726","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3a7e1585-9a21-5691-918d-2924701f53da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.70.224","comment":"https://x.com/drb_ra/status/1956067154719334800","timestamp":"1755197726","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7a03ea93-3dd8-58d2-8371-30879853f9ee","type":"url","category":"Network activity","to_ids":true,"value":"http://78.128.112.6:3030","comment":"https://x.com/drb_ra/status/1956067292741054753","timestamp":"1755197759","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"35a63c67-c47a-5ee5-a89f-987976f55462","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.128.112.6","comment":"https://x.com/drb_ra/status/1956067292741054753","timestamp":"1755197759","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0b09c9e0-6402-5fb9-8193-ba78af30dc4e","type":"url","category":"Network activity","to_ids":true,"value":"http://13.60.220.2:2077","comment":"https://x.com/drb_ra/status/1956067432315150350","timestamp":"1755197792","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ff1860ac-8e03-5495-b2eb-85201a4e6209","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.60.220.2","comment":"https://x.com/drb_ra/status/1956067432315150350","timestamp":"1755197792","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1fb9fa6f-d0dd-5161-b3a5-1c926840c1e1","type":"url","category":"Network activity","to_ids":true,"value":"http://35.92.47.41:10204","comment":"https://x.com/drb_ra/status/1956067570156552465","timestamp":"1755197825","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"df84e258-83fd-5b83-bbbb-69b455e79309","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.92.47.41","comment":"https://x.com/drb_ra/status/1956067570156552465","timestamp":"1755197825","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"468e8c8e-ce97-55de-8eaf-6d0630c1d321","type":"url","category":"Network activity","to_ids":true,"value":"http://51.17.51.236:14000","comment":"https://x.com/drb_ra/status/1956067710946959615","timestamp":"1755197858","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f62a5bea-9a5a-5e5c-a9e1-302493afe178","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.17.51.236","comment":"https://x.com/drb_ra/status/1956067710946959615","timestamp":"1755197858","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3036dd7d-3215-57ac-b02c-9b6a77d88f0e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.203.139.54:80","comment":"https://x.com/drb_ra/status/1956067849648398349","timestamp":"1755197891","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ad108d83-c16d-5ead-8915-cda36616f781","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.203.139.54","comment":"https://x.com/drb_ra/status/1956067849648398349","timestamp":"1755197891","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a1405ee0-1af5-5842-8812-2315f149caea","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.220.217:80","comment":"https://x.com/drb_ra/status/1956067987720651065","timestamp":"1755197924","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4d54613d-e364-581a-b55a-7d1c746b3c9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.220.217","comment":"https://x.com/drb_ra/status/1956067987720651065","timestamp":"1755197924","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ec976b9e-dfd1-51af-bf83-2ecc8566c4c5","type":"url","category":"Network activity","to_ids":true,"value":"http://54.195.187.225:443","comment":"https://x.com/drb_ra/status/1956068125847511210","timestamp":"1755197957","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2b51b464-63d1-5186-b796-e21d4a7fbafe","type":"url","category":"Network activity","to_ids":true,"value":"http://54.195.187.225:80","comment":"https://x.com/drb_ra/status/1956068262661267764","timestamp":"1755197990","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"801a041e-edb2-5c00-b1c5-c3464f970f61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.195.187.225","comment":"https://x.com/drb_ra/status/1956068262661267764","timestamp":"1755197990","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dc65af77-d564-5308-ad23-27d1eee3840e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.182.225:80","comment":"https://x.com/drb_ra/status/1956068402046661102","timestamp":"1755198023","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2f5e0bae-ac22-511f-925a-10368b5c1a51","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.133.209:80","comment":"https://x.com/drb_ra/status/1956068540362186774","timestamp":"1755198056","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1f4d7346-30e0-5447-b423-4b3fde03542b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.133.209","comment":"https://x.com/drb_ra/status/1956068540362186774","timestamp":"1755198056","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"70b5b871-b9c5-5cef-9ff3-4501c581b1f1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.217.138:80","comment":"https://x.com/drb_ra/status/1956068677037498706","timestamp":"1755198089","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"810de244-ad12-5562-909c-e950a0dde399","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.217.138","comment":"https://x.com/drb_ra/status/1956068677037498706","timestamp":"1755198089","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9eb5440d-554d-5490-981d-bc12251bc3d6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.120.33:80","comment":"https://x.com/drb_ra/status/1956068817375052031","timestamp":"1755198122","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2af9ca34-b1b0-5eff-add5-d405ab71cd62","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.120.33","comment":"https://x.com/drb_ra/status/1956068817375052031","timestamp":"1755198122","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"91fbae9d-302c-5e85-9928-0ccbd7170048","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.143.221.209","comment":"https://x.com/FalconFeedsio/status/1956072984206053413","timestamp":"1755199116","distribution":"5"},{"uuid":"8a9df64f-c11e-5aff-981f-38a3efc40b07","type":"domain","category":"Network activity","to_ids":true,"value":"ohshit.sh","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"a4d5c9d3-f9e1-5d69-90aa-d15cdcfd09dd","type":"url","category":"Network activity","to_ids":true,"value":"https://ohshit.sh","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"460399f1-c399-56db-961e-bbc565fb34ce","type":"url","category":"Network activity","to_ids":true,"value":"http://160.191.244.103:6582","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"82e088b4-0d6f-52a8-88a0-604cb25e8423","type":"url","category":"Network activity","to_ids":true,"value":"http://103.167.90.238:7000","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"abf2e1ca-adc9-568f-a27e-9a4688f77286","type":"url","category":"Network activity","to_ids":true,"value":"http://160.250.136.71","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"3edc757a-17b4-5ff1-b920-3b940fdce4c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.191.244.103","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"fd6e7471-1bac-5172-a35f-461cd91706ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.167.90.238","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"bb8f1f05-c297-521e-be52-e17c3078776e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.250.136.71","comment":"https://x.com/FalconFeedsio/status/1956079037807571313","timestamp":"1755200559","distribution":"5"},{"uuid":"0dc524a2-800a-522e-8d19-84c835a55040","type":"domain","category":"Network activity","to_ids":true,"value":"bafybeicr56y3d6snd2qndj7473fddlwhkpefaglp6ev5yytkxrbskgz3ri.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1956083434280915249","timestamp":"1755201607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ac5af58d-b994-5024-9796-2f2dbe300862","type":"url","category":"Network activity","to_ids":true,"value":"https://bafybeicr56y3d6snd2qndj7473fddlwhkpefaglp6ev5yytkxrbskgz3ri.ipfs.dweb.link/cPweb78620.html","comment":"https://x.com/urldna_bot/status/1956083434280915249","timestamp":"1755201607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b2cb1685-893d-56e8-a83b-2a36c5299a15","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-file-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"6ceb413b-13e6-5255-aaab-44ef67cdbaad","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-file-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"f7f462e4-322f-57f3-ada0-ac1a2c32e7c3","type":"domain","category":"Network activity","to_ids":true,"value":"mmm-board-recruitment-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"f7699ee2-8eb4-511b-9f1a-24c46599cf28","type":"url","category":"Network activity","to_ids":true,"value":"http://mmm-board-recruitment-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"e5b72ea4-91d6-5fec-9a15-c55a70d160b4","type":"url","category":"Network activity","to_ids":true,"value":"http://84.21.189.228:5504/a.bat","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"307b4c30-4d84-517f-a563-a22c1d0b4014","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.21.189.228","comment":"https://x.com/skocherhan/status/1956098271027282320","timestamp":"1755205145","distribution":"5"},{"uuid":"977fec4f-0c70-5b58-b1a2-509b0b203db9","type":"url","category":"Network activity","to_ids":true,"value":"http://47.93.240.197","comment":"https://x.com/threatquery/status/1956098517413302614","timestamp":"1755205203","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"malware"},{"name":"C2"}]},{"uuid":"104757ba-2832-5d71-8190-4fecd4256366","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.71","comment":"https://x.com/threatquery/status/1956098521116860874","timestamp":"1755205204","distribution":"5","Tag":[{"name":"malware"},{"name":"Xworm"},{"name":"C2"}]},{"uuid":"20fe8a40-3fef-50f0-a37e-5fe85ea31eac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.71","comment":"https://x.com/threatquery/status/1956098521116860874","timestamp":"1755205204","distribution":"5","Tag":[{"name":"malware"},{"name":"Xworm"},{"name":"C2"}]},{"uuid":"9fb0889d-569d-5ea5-ba55-58d44406f92c","type":"url","category":"Network activity","to_ids":true,"value":"http://121.40.69.150","comment":"https://x.com/threatquery/status/1956098519053316223","timestamp":"1755205204","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"malware"},{"name":"C2"}]},{"uuid":"880b2229-1c6c-535b-8d4a-96d470ff46c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.40.69.150","comment":"https://x.com/threatquery/status/1956098519053316223","timestamp":"1755205204","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"malware"},{"name":"C2"}]},{"uuid":"eaaada4e-5354-5b8b-a8f1-75d3d4a1ed59","type":"domain","category":"Network activity","to_ids":true,"value":"mmm-intranet-document-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"d32afe40-8096-5c81-98e2-81b34434e335","type":"url","category":"Network activity","to_ids":true,"value":"http://mmm-intranet-document-explorer.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"63ce4eb4-0567-55a0-9f46-21e9fc0d4d13","type":"domain","category":"Network activity","to_ids":true,"value":"appcloud-documents-7c1ac1b9.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"fbadc00f-3bb4-57f7-8658-72861e7d8d3e","type":"url","category":"Network activity","to_ids":true,"value":"http://appcloud-documents-7c1ac1b9.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"16678b71-d902-5e1a-a0aa-cb7293f31ab1","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-documentation-085a51-0b2ecf.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"429954a2-8419-57ac-be80-99db080d5848","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-documentation-085a51-0b2ecf.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"af0f0633-e6af-5277-ac55-82f0112edcb1","type":"domain","category":"Network activity","to_ids":true,"value":"smart-icloud-doc-explorer-97db42.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"8035c658-4fae-5a27-b0cc-64de484c01b7","type":"url","category":"Network activity","to_ids":true,"value":"http://smart-icloud-doc-explorer-97db42.netlify.app","comment":"https://x.com/skocherhan/status/1956099491817193678","timestamp":"1755205436","distribution":"5"},{"uuid":"59f59f77-8835-5da8-b782-bba55ba8e336","type":"domain","category":"Network activity","to_ids":true,"value":"executive-board-recruitment.pages.dev","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"4c586425-b364-5ebb-808a-e85ced907c55","type":"url","category":"Network activity","to_ids":true,"value":"http://executive-board-recruitment.pages.dev/3Mnet/","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"aadceb09-bcf6-50f3-b6ee-2d6fded4e947","type":"domain","category":"Network activity","to_ids":true,"value":"cloudfile-documents.pages.dev","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"0649759b-36a5-5223-a673-b15c62b371ec","type":"url","category":"Network activity","to_ids":true,"value":"http://cloudfile-documents.pages.dev/BTw1/","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"09ae4eca-8151-5519-81de-af928b3763d5","type":"domain","category":"Network activity","to_ids":true,"value":"netexplorer-documents-579f34-5b1840a5.netlify.app","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"eadee742-c855-5f67-b02a-7e42f3f22595","type":"url","category":"Network activity","to_ids":true,"value":"http://netexplorer-documents-579f34-5b1840a5.netlify.app","comment":"https://x.com/skocherhan/status/1956101871174553606","timestamp":"1755206003","distribution":"5"},{"uuid":"4349be5c-8aaa-5524-8b6b-a8d18e2cfa83","type":"domain","category":"Network activity","to_ids":true,"value":"revistadiversidadcultural.com","comment":"https://x.com/skocherhan/status/1956109228977840366","timestamp":"1755207757","distribution":"5"},{"uuid":"5b790065-031f-5380-80c4-23e389bc772c","type":"url","category":"Network activity","to_ids":true,"value":"http://revistadiversidadcultural.com","comment":"https://x.com/skocherhan/status/1956109228977840366","timestamp":"1755207757","distribution":"5"},{"uuid":"1d5d473c-dbf5-584c-bf54-f5d41d9c4c81","type":"domain","category":"Network activity","to_ids":true,"value":"dbegmore.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"b08499b0-0bb2-5e44-ace9-99479d2f6a8f","type":"url","category":"Network activity","to_ids":true,"value":"http://dbegmore.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"d4819a18-bdd4-51aa-ad0a-d636a3d63a68","type":"domain","category":"Network activity","to_ids":true,"value":"pinnaclepassage.co.zw","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"c7898c72-83e1-52a9-9741-49fa9a259d43","type":"url","category":"Network activity","to_ids":true,"value":"http://pinnaclepassage.co.zw","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"19fa75e5-6acf-5967-8241-4cee608c1f48","type":"domain","category":"Network activity","to_ids":true,"value":"colivingmuni.com.br","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"c777abbe-0480-5732-b765-1e3cbb3686b1","type":"url","category":"Network activity","to_ids":true,"value":"http://colivingmuni.com.br","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"d5921eab-07f9-517c-9f75-f33784ce71ac","type":"domain","category":"Network activity","to_ids":true,"value":"rootsmacaronesia.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"3f298a19-f72d-582e-be8c-62b8cc5a7626","type":"url","category":"Network activity","to_ids":true,"value":"http://rootsmacaronesia.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"156d2561-ee9c-5a92-b32a-dd5a0a082a39","type":"domain","category":"Network activity","to_ids":true,"value":"cuanauntung.xyz","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"8e7443c9-d08b-5687-98d0-54e8c081d7ce","type":"url","category":"Network activity","to_ids":true,"value":"http://cuanauntung.xyz","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"a5eb695c-5ee8-5110-950a-1db9895cda97","type":"domain","category":"Network activity","to_ids":true,"value":"risehealthdpc.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"3517f0c9-7131-5156-aa00-7cef2b5e18e8","type":"url","category":"Network activity","to_ids":true,"value":"http://risehealthdpc.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"bf45690c-5193-52e6-a81c-6986c9fe2e2d","type":"domain","category":"Network activity","to_ids":true,"value":"mirapath.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"4859718d-466f-5d6b-bce5-fa5748d3c786","type":"url","category":"Network activity","to_ids":true,"value":"http://mirapath.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"953a9c21-b23e-582d-9647-899dd2910aab","type":"domain","category":"Network activity","to_ids":true,"value":"foremostco.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"5954c06d-aa15-5d22-8a1e-cc7915b9caa3","type":"url","category":"Network activity","to_ids":true,"value":"http://foremostco.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"a06e561c-4894-5e32-9220-b5119e12395c","type":"domain","category":"Network activity","to_ids":true,"value":"lpkdienthoai.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"1f6d470c-9a8b-510d-9145-632bafa0b071","type":"url","category":"Network activity","to_ids":true,"value":"http://lpkdienthoai.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"de745a78-e8af-5c54-91a9-688dcc664fa2","type":"domain","category":"Network activity","to_ids":true,"value":"beauty.uzahost.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"711c8e9e-cf52-522f-a806-3e0544a3e221","type":"url","category":"Network activity","to_ids":true,"value":"http://beauty.uzahost.com","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"5887e907-d379-51ba-8d38-5f3d12983f76","type":"domain","category":"Network activity","to_ids":true,"value":"guydigi.top","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"3a782972-a34d-52b5-8468-b74d87320cff","type":"url","category":"Network activity","to_ids":true,"value":"http://guydigi.top","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"36e50717-82be-5815-9561-442169838b68","type":"domain","category":"Network activity","to_ids":true,"value":"mmcbelgrave.com.au","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"33893682-ca63-5a56-badc-a3d710e89ae7","type":"url","category":"Network activity","to_ids":true,"value":"http://mmcbelgrave.com.au","comment":"https://x.com/skocherhan/status/1956109722047717587","timestamp":"1755207875","distribution":"5"},{"uuid":"3a162578-70cb-5c5b-bdfb-95158c7b800e","type":"domain","category":"Network activity","to_ids":true,"value":"coinbaseprom.com","comment":"https://x.com/skocherhan/status/1956112501906481347","timestamp":"1755208537","distribution":"5"},{"uuid":"560a62b3-a96a-5c34-88a4-686f54f58495","type":"url","category":"Network activity","to_ids":true,"value":"http://coinbaseprom.com","comment":"https://x.com/skocherhan/status/1956112501906481347","timestamp":"1755208537","distribution":"5"},{"uuid":"50dcedb5-478a-58d2-b169-46b4983efc1b","type":"url","category":"Network activity","to_ids":true,"value":"http://217.60.37.55","comment":"https://x.com/skocherhan/status/1956112501906481347","timestamp":"1755208537","distribution":"5"},{"uuid":"0c4f4b2d-42dc-5bb5-84b4-dc2fddd20047","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.60.37.55","comment":"https://x.com/skocherhan/status/1956112501906481347","timestamp":"1755208537","distribution":"5"},{"uuid":"3a3e7dde-c83b-551c-ab8f-f73d2fa68126","type":"domain","category":"Network activity","to_ids":true,"value":"kimmado.xsrv.jp","comment":"https://x.com/urldna_bot/status/1956113631281660088","timestamp":"1755208807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b38d1f0f-bb5c-55a4-aef7-c8f6cb87a9b1","type":"url","category":"Network activity","to_ids":true,"value":"https://kimmado.xsrv.jp/wp-content/plugins/advanced-custom-fields/includes/Rackspace_validated.htm","comment":"https://x.com/urldna_bot/status/1956113631281660088","timestamp":"1755208807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"133bbace-cf76-50e4-a5c4-24e24ad86509","type":"url","category":"Network activity","to_ids":true,"value":"http://gitlab.com/rated1337-group","comment":"https://x.com/skocherhan/status/1956128689105621355","timestamp":"1755212397","distribution":"5"},{"uuid":"6ac0d584-1230-5b98-a8bf-41e897c84e5f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.76.188.238:999","comment":"https://x.com/drb_ra/status/1956130320362672197","timestamp":"1755212786","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"075af983-4067-50da-a2ac-cf874ee2bcee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.188.238","comment":"https://x.com/drb_ra/status/1956130320362672197","timestamp":"1755212786","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b673921f-0b0e-5dcd-92e4-ccf31191d3fb","type":"domain","category":"Network activity","to_ids":true,"value":"m2th3k.top","comment":"https://x.com/drb_ra/status/1956130460360159335","timestamp":"1755212819","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ddff9cc0-ad09-5a19-9b3d-ac7190c42cdc","type":"url","category":"Network activity","to_ids":true,"value":"https://m2th3k.top/images/","comment":"https://x.com/drb_ra/status/1956130460360159335","timestamp":"1755212819","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9f976465-57c2-52b7-897a-a68705c1f5a3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.41.3:80","comment":"https://x.com/drb_ra/status/1956130460360159335","timestamp":"1755212819","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d645ee6-d31e-5546-ae0e-a6e52a27b84b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.41.3","comment":"https://x.com/drb_ra/status/1956130460360159335","timestamp":"1755212819","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38c6fa9d-8968-5eea-8666-129e9456647f","type":"url","category":"Network activity","to_ids":true,"value":"http://111.230.214.218:10086","comment":"https://x.com/drb_ra/status/1956130600227594748","timestamp":"1755212852","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"92d4414f-dba2-5c5a-8b1c-2c9f10bf8590","type":"url","category":"Network activity","to_ids":true,"value":"http://1.14.101.23:8888","comment":"https://x.com/drb_ra/status/1956130738446696604","timestamp":"1755212885","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ed0fb6ed-6855-58d3-b569-f80c063cf312","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.76.13:443","comment":"https://x.com/drb_ra/status/1956130876909060433","timestamp":"1755212918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fecf3e28-efb1-5aa9-b2a3-bc303b9c342f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.76.13","comment":"https://x.com/drb_ra/status/1956130876909060433","timestamp":"1755212918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f590e86b-cf23-5bfa-af48-b75343f90422","type":"url","category":"Network activity","to_ids":true,"value":"https://47.92.76.13/introduction/edr","comment":"https://x.com/drb_ra/status/1956130876909060433","timestamp":"1755212918","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"89d2fc4d-13aa-5666-8bca-78640a871df2","type":"url","category":"Network activity","to_ids":true,"value":"http://124.220.30.223:56666","comment":"https://x.com/drb_ra/status/1956131525365272835","timestamp":"1755213073","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"034bd200-4853-55a0-8c0c-27df9f03c70a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.220.30.223","comment":"https://x.com/drb_ra/status/1956131525365272835","timestamp":"1755213073","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"129d9863-8831-58df-82f2-07fb7bb2034e","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-cervic.sh1m.cn","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"917887b4-36c9-5487-9252-043d0eca03b6","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-cervic.sh1m.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b45f9b0-4926-5f38-a7df-7429b5b2665e","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-givei.ewyl.cn","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3e1d470-3ff6-5971-8409-ba12ba222c13","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-givei.ewyl.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91171bcd-f963-5d80-a6f5-9eb1ff3dfd63","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-ideion.naxq.cn","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef6966ce-0660-5f2f-b39b-2f6b5205063a","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-ideion.naxq.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a23f92fa-0873-59c7-87da-71641d348ef4","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-spicad.azyr.cn","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1fd134a-53c0-5915-a5b9-238993d9fc89","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-spicad.azyr.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1956131588158447968","timestamp":"1755213088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1b8ece9-95b7-5078-96a1-5de8b3d8fb2c","type":"url","category":"Network activity","to_ids":true,"value":"http://202.155.152.136:8080","comment":"https://x.com/drb_ra/status/1956131665295585592","timestamp":"1755213106","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8d08ad0c-8ad5-534b-b67a-d2790aa547ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.155.152.136","comment":"https://x.com/drb_ra/status/1956131665295585592","timestamp":"1755213106","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c59cd82-ad2f-52ff-b628-f08134498b93","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-ultade.aqan.cn","comment":"https://x.com/masaomi346/status/1956131727249956905","timestamp":"1755213121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"05778e1c-f8ea-5d8d-8009-3395a42d1458","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-ultade.aqan.cn/netservice/login/","comment":"https://x.com/masaomi346/status/1956131727249956905","timestamp":"1755213121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a61d7193-aa38-5e6c-afb9-87537d767054","type":"url","category":"Network activity","to_ids":true,"value":"http://47.97.125.50:80","comment":"https://x.com/drb_ra/status/1956131804231958817","timestamp":"1755213139","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c31e1db6-750f-5dfa-9385-adea1036052e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.97.125.50","comment":"https://x.com/drb_ra/status/1956131804231958817","timestamp":"1755213139","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6a13a447-e72d-5fc7-94e0-340c740e5bee","type":"url","category":"Network activity","to_ids":true,"value":"http://43.160.252.15:80","comment":"https://x.com/drb_ra/status/1956131943210221854","timestamp":"1755213173","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d81b0070-f022-54f9-af22-1ec730c18312","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.252.15","comment":"https://x.com/drb_ra/status/1956131943210221854","timestamp":"1755213173","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"13e1234e-843f-52bd-8feb-c1299840dc88","type":"url","category":"Network activity","to_ids":true,"value":"https://122.228.223.249/common/advertisement/Fixed/float/smile.svg","comment":"https://x.com/drb_ra/status/1956132083451236570","timestamp":"1755213206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3bb43370-a8d5-5bf3-8a91-bdf9f3852c53","type":"url","category":"Network activity","to_ids":true,"value":"http://118.31.0.235:443","comment":"https://x.com/drb_ra/status/1956132083451236570","timestamp":"1755213206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"141f4aee-e266-57bb-877e-04832444d708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.31.0.235","comment":"https://x.com/drb_ra/status/1956132083451236570","timestamp":"1755213206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5e56882b-0c40-5388-b058-41adc9641762","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.228.223.249","comment":"https://x.com/drb_ra/status/1956132083451236570","timestamp":"1755213206","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7e4e53f6-448f-5172-b1a8-8ed2c07d01b0","type":"url","category":"Network activity","to_ids":true,"value":"http://111.230.214.218:10084","comment":"https://x.com/drb_ra/status/1956132221531619560","timestamp":"1755213239","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1b23b0e0-d7a1-5605-ab59-58b85de8337c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.230.214.218","comment":"https://x.com/drb_ra/status/1956132221531619560","timestamp":"1755213239","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c071283c-3b24-50a3-a8aa-1d41a45acba7","type":"domain","category":"Network activity","to_ids":true,"value":"prod.infodatasinc.com","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1607ac11-e60d-52da-bc9f-e8951f26a3e5","type":"url","category":"Network activity","to_ids":true,"value":"https://prod.infodatasinc.com/checkouts/internal/preloads.js","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"caf4c95e-6de6-5226-b779-0fe27c67de5a","type":"domain","category":"Network activity","to_ids":true,"value":"panel.infodatasinc.com","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"34adb1e4-df71-5b94-944e-e55efa50dae2","type":"url","category":"Network activity","to_ids":true,"value":"https://panel.infodatasinc.com/checkouts/internal/preloads.js","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"02b8a364-abc6-52dc-8a67-c1fe63fa04ed","type":"url","category":"Network activity","to_ids":true,"value":"http://213.21.245.169:443","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"66744e1f-5aa3-5cff-a1a3-a766fd45d124","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.21.245.169","comment":"https://x.com/drb_ra/status/1956132362086998098","timestamp":"1755213272","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1aa032a5-2044-56e7-a757-b6408723dede","type":"domain","category":"Network activity","to_ids":true,"value":"verified-badges.com","comment":"https://x.com/urldna_bot/status/1956143849618711020","timestamp":"1755216011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"643663f9-d7b3-5f73-94d2-ea6567051ea7","type":"url","category":"Network activity","to_ids":true,"value":"https://verified-badges.com/606967319425038/form/wrong-login.php","comment":"https://x.com/urldna_bot/status/1956143849618711020","timestamp":"1755216011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"15610a13-ad47-51d1-a40b-f2a7ee00dcfe","type":"sha256","category":"Payload delivery","to_ids":true,"value":"36c7f277cff08333b0c301721a407546b548543da9ca69a16320f061e4c11f33","comment":"https://x.com/ShadowChasing1/status/1956153176559903081","timestamp":"1755218235","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e0d7f28f-d3cd-5508-9781-da75442ddb08","type":"domain","category":"Network activity","to_ids":true,"value":"trackings-genar.daotell.cn","comment":"https://x.com/Metemcyber/status/1956161443998654712","timestamp":"1755220206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0c77c15-e28c-5bc1-b67d-ab2844f41685","type":"url","category":"Network activity","to_ids":true,"value":"https://trackings-genar.daotell.cn/japeanposder/","comment":"https://x.com/Metemcyber/status/1956161443998654712","timestamp":"1755220206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9855c25-4a15-51ff-9cf6-ca28ac3c2633","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.25.126","comment":"https://x.com/Metemcyber/status/1956161443998654712","timestamp":"1755220206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c0a3559a-7fdc-5fc8-a8b3-7ee3ddb079b9","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.134.60","comment":"https://x.com/Metemcyber/status/1956161443998654712","timestamp":"1755220206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1956163950502088935","timestamp":"1755220804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1956163950502088935","timestamp":"1755220804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ed73c46-02ef-5662-901e-0a2007319b2a","type":"url","category":"Network activity","to_ids":true,"value":"https://capital.holiontek.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1956163950502088935","timestamp":"1755220804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ae3da08-342a-5f7f-81c5-d8bdbc6f9f5f","type":"domain","category":"Network activity","to_ids":true,"value":"capital.holiontek.cn","comment":"https://x.com/Metemcyber/status/1956163950502088935","timestamp":"1755220804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1956163950502088935","timestamp":"1755220804","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e910c042-c83b-5802-8303-58697f05f395","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.14.147","comment":"https://x.com/Metemcyber/status/1956166482829959498","timestamp":"1755221407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64a64a10-16de-5099-94c9-f11e71712b22","type":"url","category":"Network activity","to_ids":true,"value":"https://www2.fancyluxs.shop/visitor_Login/","comment":"https://x.com/Metemcyber/status/1956166482829959498","timestamp":"1755221407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"744f9891-f3d4-5e46-9da9-ebd5a6f1be16","type":"domain","category":"Network activity","to_ids":true,"value":"www2.fancyluxs.shop","comment":"https://x.com/Metemcyber/status/1956166482829959498","timestamp":"1755221407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f03a773-28a2-5345-bc2e-fb60d7b810b3","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.14.147","comment":"https://x.com/Metemcyber/status/1956166482829959498","timestamp":"1755221407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a987e8d9-f5bc-551c-8e2a-00a4723dd2c5","type":"domain","category":"Network activity","to_ids":true,"value":"satyarthi.uk","comment":"https://x.com/urldna_bot/status/1956174031809335646","timestamp":"1755223207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ff3879e8-1684-57cf-84f4-de3e5bbbe75c","type":"url","category":"Network activity","to_ids":true,"value":"https://satyarthi.uk/MM/htdocsitau/index.html","comment":"https://x.com/urldna_bot/status/1956174031809335646","timestamp":"1755223207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eac84f14-a0e5-532b-8d83-7c5f23cd17a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.139.175","comment":"https://x.com/drb_ra/status/1956175082943893967","timestamp":"1755223458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e83a5f33-0848-55ea-be80-b047b26e54f4","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.139.175:80","comment":"https://x.com/drb_ra/status/1956175082943893967","timestamp":"1755223458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d6661390-8aa3-5e50-aa8f-63e60f4195ef","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.41.3:443","comment":"https://x.com/drb_ra/status/1956175222165446910","timestamp":"1755223491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d645ee6-d31e-5546-ae0e-a6e52a27b84b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.41.3","comment":"https://x.com/drb_ra/status/1956175222165446910","timestamp":"1755223491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b673921f-0b0e-5dcd-92e4-ccf31191d3fb","type":"domain","category":"Network activity","to_ids":true,"value":"m2th3k.top","comment":"https://x.com/drb_ra/status/1956175222165446910","timestamp":"1755223491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ddff9cc0-ad09-5a19-9b3d-ac7190c42cdc","type":"url","category":"Network activity","to_ids":true,"value":"https://m2th3k.top/images/","comment":"https://x.com/drb_ra/status/1956175222165446910","timestamp":"1755223491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7d10e42f-c48d-571b-ad5a-a67dd915f39e","type":"domain","category":"Network activity","to_ids":true,"value":"qontomsg03.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1956204230231929172","timestamp":"1755230407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1b26d834-636c-57fc-986f-20690aa889ed","type":"url","category":"Network activity","to_ids":true,"value":"https://qontomsg03.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1956204230231929172","timestamp":"1755230407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fbf6e0ea-c96d-5a62-ae60-09f2d5331df4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.205.156.112","comment":"https://x.com/skocherhan/status/1956216814343471582","timestamp":"1755233407","distribution":"5"},{"uuid":"b7be50ce-7a40-568a-ae73-27d00d4df1a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.90.60.99","comment":"https://x.com/skocherhan/status/1956216814343471582","timestamp":"1755233407","distribution":"5"},{"uuid":"8e1481c0-dc4f-539f-ac85-276db39ed9d3","type":"url","category":"Network activity","to_ids":true,"value":"http://154.205.156.112","comment":"https://x.com/skocherhan/status/1956216814343471582","timestamp":"1755233407","distribution":"5"},{"uuid":"dfdc8d17-13b5-50b6-b38d-dd162018877b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.90.60.99","comment":"https://x.com/skocherhan/status/1956216814343471582","timestamp":"1755233407","distribution":"5"},{"uuid":"14d67d35-83c5-5cb1-a41e-056dbac841a6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"94c6ff0a9f1b2b85a1f6576716e03dad1d7fa172defd234e7985a8efedfe9ac6","comment":"https://x.com/skocherhan/status/1956217351940264445","timestamp":"1755233536","distribution":"5","Tag":[{"name":"Remcos"},{"name":"RAT"}]},{"uuid":"b4f111aa-9e66-5b6d-86f5-d24d26eafea0","type":"url","category":"Network activity","to_ids":true,"value":"http://govistatement.online","comment":"https://x.com/skocherhan/status/1956217693696409757","timestamp":"1755233617","distribution":"5"},{"uuid":"440699b6-ddb7-5776-8e65-cd3726c8524a","type":"domain","category":"Network activity","to_ids":true,"value":"govistatement.online","comment":"https://x.com/skocherhan/status/1956217693696409757","timestamp":"1755233617","distribution":"5"},{"uuid":"67f09e0b-82d7-5636-add7-64ef396a4a7d","type":"md5","category":"Payload delivery","to_ids":true,"value":"c107dcb9ab557ff179c9b9219feee725","comment":"https://x.com/skocherhan/status/1956217693696409757","timestamp":"1755233617","distribution":"5"},{"uuid":"d619525b-bedc-5a9f-941f-578f8cea85bf","type":"sha256","category":"Payload delivery","to_ids":true,"value":"eb5cfca67c4684d2f7eb2fc8fa532465b9cc5bfde006836353ab9b90c4b35f45","comment":"https://x.com/skocherhan/status/1956217693696409757","timestamp":"1755233617","distribution":"5"},{"uuid":"cf11d6ac-2957-5527-8839-1f62728d8a0d","type":"url","category":"Network activity","to_ids":true,"value":"https://iinetuptde.weebly.com","comment":"https://x.com/urldna_bot/status/1956234427815657654","timestamp":"1755237607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"50b855b8-f3be-5a41-9634-1c576998c66b","type":"domain","category":"Network activity","to_ids":true,"value":"iinetuptde.weebly.com","comment":"https://x.com/urldna_bot/status/1956234427815657654","timestamp":"1755237607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1956243069348769843","timestamp":"1755239667","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c122e4a6-2982-5348-a8e1-a155c3da2f07","type":"domain","category":"Network activity","to_ids":true,"value":"eki-gestward.shyzbsm.cn","comment":"https://x.com/Metemcyber/status/1956243069348769843","timestamp":"1755239667","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9838238-7801-5364-85ea-ac6a2cb3804b","type":"url","category":"Network activity","to_ids":true,"value":"https://eki-gestward.shyzbsm.cn/Perosnal_member/","comment":"https://x.com/Metemcyber/status/1956243069348769843","timestamp":"1755239667","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c84b4a51-5c11-5bb9-ac4f-bda7607f8c6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.108.108","comment":"https://x.com/drb_ra/status/1956246368525119637","timestamp":"1755240454","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5bde0e0d-0cdd-55d9-a17e-8cbd88f593e7","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.108.108:80","comment":"https://x.com/drb_ra/status/1956246368525119637","timestamp":"1755240454","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"49055f88-b430-5094-81cf-cd826082a8f0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.78.139.178:80","comment":"https://x.com/drb_ra/status/1956246507104932051","timestamp":"1755240487","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1dd1b924-9eec-5123-a02d-712a44ef332d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.78.139.178","comment":"https://x.com/drb_ra/status/1956246507104932051","timestamp":"1755240487","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b7df6d8b-e866-5649-8141-2e7f6f32c1f2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.218.219.97:80","comment":"https://x.com/drb_ra/status/1956246645969989797","timestamp":"1755240520","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"78803688-eb4e-557b-8548-e2d2cddf5bef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.218.219.97","comment":"https://x.com/drb_ra/status/1956246645969989797","timestamp":"1755240520","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"739a1f1c-4e31-5732-baa5-925b22e6b484","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.161.209.117","comment":"https://x.com/drb_ra/status/1956246784667156655","timestamp":"1755240553","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"65a9a6cc-81cc-52b6-9139-585201160302","type":"url","category":"Network activity","to_ids":true,"value":"http://185.161.209.117:443","comment":"https://x.com/drb_ra/status/1956246784667156655","timestamp":"1755240553","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"cc7ce6b0-cb9f-5c37-a9f6-02e25582ac53","type":"url","category":"Network activity","to_ids":true,"value":"http://200.91.114.190:443","comment":"https://x.com/drb_ra/status/1956246923662516366","timestamp":"1755240586","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"3b336333-80c3-54a4-9c9c-49f474c0cd7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.91.114.190","comment":"https://x.com/drb_ra/status/1956246923662516366","timestamp":"1755240586","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"dec400ef-9950-5f7b-91b3-e34e6c65e92a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.10:80","comment":"https://x.com/drb_ra/status/1956247062242320484","timestamp":"1755240619","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"8ed4f95a-7e5f-5e17-8011-a35c2c8ea584","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.10","comment":"https://x.com/drb_ra/status/1956247062242320484","timestamp":"1755240619","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b37faf8b-9585-58e8-a3a6-c6d904039acb","type":"url","category":"Network activity","to_ids":true,"value":"http://4.228.56.150:443","comment":"https://x.com/drb_ra/status/1956247200104616062","timestamp":"1755240652","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"b2377392-70ed-5b8c-8963-3d26bbc66f54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.92.116.42","comment":"https://x.com/drb_ra/status/1956247337572896983","timestamp":"1755240685","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"088cb5be-b753-574b-a37b-2f01d3753170","type":"url","category":"Network activity","to_ids":true,"value":"http://54.92.116.42:443","comment":"https://x.com/drb_ra/status/1956247337572896983","timestamp":"1755240685","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"42b60055-f923-5ee2-9bb2-245430382928","type":"url","category":"Network activity","to_ids":true,"value":"http://66.244.243.78:8080","comment":"https://x.com/drb_ra/status/1956247475620118923","timestamp":"1755240718","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a78723bf-4954-59b5-8b2c-4f89442c7b91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.244.243.78","comment":"https://x.com/drb_ra/status/1956247475620118923","timestamp":"1755240718","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fe3ef3a1-110c-561e-8972-4b6311a9a86c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.238.57.149","comment":"https://x.com/drb_ra/status/1956248120485879914","timestamp":"1755240871","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"174299d4-0891-5fe6-b3f5-95c6412edf80","type":"url","category":"Network activity","to_ids":true,"value":"http://104.238.57.149:4321","comment":"https://x.com/drb_ra/status/1956248120485879914","timestamp":"1755240871","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c4bc7d52-0765-5118-b948-d7319bf8231a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.22.85.55:4321","comment":"https://x.com/drb_ra/status/1956248258973458600","timestamp":"1755240904","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4b1e16d3-c8a6-5f8e-a554-4bbae4b09699","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.81.115.254","comment":"https://x.com/drb_ra/status/1956248396810842124","timestamp":"1755240937","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"03bacca2-44a8-5e6d-85d0-3499ba524468","type":"url","category":"Network activity","to_ids":true,"value":"http://185.81.115.254:8777","comment":"https://x.com/drb_ra/status/1956248396810842124","timestamp":"1755240937","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"128847ac-8283-5b3a-88b6-0de1afc3bd9e","type":"url","category":"Network activity","to_ids":true,"value":"http://194.164.245.180:443","comment":"https://x.com/drb_ra/status/1956248538918109295","timestamp":"1755240971","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6407d9f0-5c4c-556a-a11a-8c53340edd2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.164.245.180","comment":"https://x.com/drb_ra/status/1956248538918109295","timestamp":"1755240971","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fb27b50f-692a-5679-9380-2f0d7aa257a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.51.240","comment":"https://x.com/drb_ra/status/1956248677888004599","timestamp":"1755241004","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"50b0054a-39d0-549a-acf8-2d922e48df55","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.51.240:8080","comment":"https://x.com/drb_ra/status/1956248677888004599","timestamp":"1755241004","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b2195387-a5b0-57bc-acc2-62f68dbb9c20","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.44.179:465","comment":"https://x.com/drb_ra/status/1956248816341930076","timestamp":"1755241037","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3187cf4c-8702-5bef-b038-e8a94ac26fe3","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.44.179:443","comment":"https://x.com/drb_ra/status/1956248954233934315","timestamp":"1755241070","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"03fc5ebb-ab5f-5dba-af09-d726307ee21f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.44.179","comment":"https://x.com/drb_ra/status/1956248954233934315","timestamp":"1755241070","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6e582c76-34ce-52fa-8add-2350d4f61527","type":"url","category":"Network activity","to_ids":true,"value":"http://72.68.192.55:2410","comment":"https://x.com/drb_ra/status/1956249091878346889","timestamp":"1755241103","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"942e9657-7d84-59a6-bc78-386721ab658f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.68.192.55","comment":"https://x.com/drb_ra/status/1956249091878346889","timestamp":"1755241103","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3324674e-497a-5821-b141-b172cec0d7da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.81.21","comment":"https://x.com/drb_ra/status/1956249229887963482","timestamp":"1755241136","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3436dfeb-b5dc-5e9a-b4ac-d6ae21751749","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.81.21:9373","comment":"https://x.com/drb_ra/status/1956249229887963482","timestamp":"1755241136","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cbb18a76-423c-5f7d-9cbc-122ea697d333","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.15.4","comment":"https://x.com/drb_ra/status/1956249368148971783","timestamp":"1755241169","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c5e1a8fd-a051-5ec7-97cd-6ddb9c01b12e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.15.4:47486","comment":"https://x.com/drb_ra/status/1956249368148971783","timestamp":"1755241169","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"994c5005-be38-58a9-80dd-aa5bf0031444","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.58.212:8090","comment":"https://x.com/drb_ra/status/1956249506561085905","timestamp":"1755241202","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"38382159-afc6-5488-9ff5-909e5039b08d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.58.212","comment":"https://x.com/drb_ra/status/1956249644779905138","timestamp":"1755241235","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"584e3cc3-6861-53db-8933-a2c14e8a2ccb","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.58.212:4840","comment":"https://x.com/drb_ra/status/1956249644779905138","timestamp":"1755241235","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"feba2814-706f-5785-a9f1-fcbc6e7d891b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.237.144.163:8020","comment":"https://x.com/drb_ra/status/1956249783422832826","timestamp":"1755241268","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"776bd4b2-021f-5d5b-a65e-2e65a0dd3b0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.237.144.163","comment":"https://x.com/drb_ra/status/1956249783422832826","timestamp":"1755241268","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4eb2f2d2-7695-5959-a3a1-968b0546133a","type":"url","category":"Network activity","to_ids":true,"value":"http://35.93.44.212:9042","comment":"https://x.com/drb_ra/status/1956249921142526381","timestamp":"1755241301","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ef64da2d-48f5-5402-bd81-b7a078882584","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.93.44.212","comment":"https://x.com/drb_ra/status/1956249921142526381","timestamp":"1755241301","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"82143da8-215a-5aad-868b-b335429e6e8f","type":"domain","category":"Network activity","to_ids":true,"value":"mygas-flamless.shm1r6.cn","comment":"https://x.com/Metemcyber/status/1956250003326034119","timestamp":"1755241320","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"72bc1328-edd3-54cc-88d0-b7ae4176f45b","type":"url","category":"Network activity","to_ids":true,"value":"https://mygas-flamless.shm1r6.cn/mtgalogin/","comment":"https://x.com/Metemcyber/status/1956250003326034119","timestamp":"1755241320","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bbb0fe7e-2298-58ea-8cd3-47227135ed75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.174.154.230","comment":"https://x.com/drb_ra/status/1956250060057915682","timestamp":"1755241334","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5f1515af-4d8b-5b96-861c-5d1410e9de1b","type":"url","category":"Network activity","to_ids":true,"value":"http://118.174.154.230:7443","comment":"https://x.com/drb_ra/status/1956250060057915682","timestamp":"1755241334","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a59bdfd5-df71-5093-9fe9-4e1fb8adc160","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.59.38:3000","comment":"https://x.com/drb_ra/status/1956250197912379510","timestamp":"1755241367","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"3c0d1a57-1ab0-5957-95c8-8c69cb083e62","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.59.38:1000","comment":"https://x.com/drb_ra/status/1956250336496136527","timestamp":"1755241400","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"dac2922a-8154-50aa-9f23-95ceb9282b9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.59.38","comment":"https://x.com/drb_ra/status/1956250336496136527","timestamp":"1755241400","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"c74c84e3-cbc0-5106-923b-338cede3b5e0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.30.100:80","comment":"https://x.com/drb_ra/status/1956250474707083328","timestamp":"1755241433","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"964237cd-6917-59a2-a277-6665bd465188","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.30.100","comment":"https://x.com/drb_ra/status/1956250474707083328","timestamp":"1755241433","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e44c4bb3-3877-5ae0-ac80-33e65591fdd3","type":"domain","category":"Network activity","to_ids":true,"value":"bafkreidk7xqh4zlmeereu5jrz6hc6e26ay5uhx3hlpaebyrkh77yq74ubq.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1956264626800259171","timestamp":"1755244807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"79ab797a-258a-51e2-921e-3256c00bb2c6","type":"url","category":"Network activity","to_ids":true,"value":"https://bafkreidk7xqh4zlmeereu5jrz6hc6e26ay5uhx3hlpaebyrkh77yq74ubq.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1956264626800259171","timestamp":"1755244807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"176bd74e-8e6e-5231-a6e4-8ee0db843799","type":"sha256","category":"Payload delivery","to_ids":true,"value":"275af9acc867f8a10734247c82fbbfb0c596a4877b44da6456d2d3439613d3c0","comment":"https://x.com/fbgwls245/status/1956277434434691121","timestamp":"1755247860","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"7ff664f9-abdc-5ad2-a8c1-d20775ac68dc","type":"url","category":"Network activity","to_ids":true,"value":"http://pixelnowsearchae.top","comment":"https://x.com/500mk500/status/1956289552999440690","timestamp":"1755250750","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"2d6aea17-bc68-5fd3-a74a-54ab10ad9d3f","type":"domain","category":"Network activity","to_ids":true,"value":"pixelnowsearchae.top","comment":"https://x.com/500mk500/status/1956289552999440690","timestamp":"1755250750","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"0d8b8dac-ef0a-5480-ad73-2ac7188e0801","type":"domain","category":"Network activity","to_ids":true,"value":"heimerikszenit.top","comment":"https://x.com/500mk500/status/1956289552999440690","timestamp":"1755250750","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"273226c1-ef77-5e31-a81c-89c7e5b7684a","type":"url","category":"Network activity","to_ids":true,"value":"http://heimerikszenit.top","comment":"https://x.com/500mk500/status/1956289552999440690","timestamp":"1755250750","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"bac27398-81c6-5711-af9e-50108d121777","type":"url","category":"Network activity","to_ids":true,"value":"https://sedrtfyudfghftgh.weebly.com","comment":"https://x.com/urldna_bot/status/1956294826481094686","timestamp":"1755252007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"148e04ff-b3d7-5f73-944c-b33b02e3ddd1","type":"domain","category":"Network activity","to_ids":true,"value":"sedrtfyudfghftgh.weebly.com","comment":"https://x.com/urldna_bot/status/1956294826481094686","timestamp":"1755252007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f36ab3ec-e998-55c1-a8f5-f929011eb0a8","type":"url","category":"Network activity","to_ids":true,"value":"https://multas-consultar.com","comment":"https://x.com/0xDanielLopez/status/1956299640417980652","timestamp":"1755253155","distribution":"5"},{"uuid":"c82c9b71-d135-5cea-ab65-a27071b26c77","type":"domain","category":"Network activity","to_ids":true,"value":"multas-consultar.com","comment":"https://x.com/0xDanielLopez/status/1956299640417980652","timestamp":"1755253155","distribution":"5"},{"uuid":"576502ba-3e48-5a65-af64-cd1547293bd6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.202.181","comment":"https://x.com/drb_ra/status/1956306923298365602","timestamp":"1755254891","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"353623eb-2d19-5145-851d-e43d4d7ce526","type":"url","category":"Network activity","to_ids":true,"value":"https://217.154.202.181:8080","comment":"https://x.com/drb_ra/status/1956306923298365602","timestamp":"1755254891","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e2fe7a70-bdb5-5add-8596-7cebc5feadb3","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.202.181:8080","comment":"https://x.com/drb_ra/status/1956306923298365602","timestamp":"1755254891","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ed50ce3c-b692-5025-bbfe-5536f0750bd2","type":"url","category":"Network activity","to_ids":true,"value":"http://107.149.167.105:80","comment":"https://x.com/drb_ra/status/1956309092072292578","timestamp":"1755255408","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5858b797-e242-5ac4-a912-e39c06d473f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.149.167.105","comment":"https://x.com/drb_ra/status/1956309092072292578","timestamp":"1755255408","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"04c95ac8-36ea-5539-b0f7-1a2c3cf3d5cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.240.92.80","comment":"https://x.com/drb_ra/status/1956309092072292578","timestamp":"1755255408","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1c007304-88be-5934-90f8-17f12d63dfcc","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.178.234:80","comment":"https://x.com/drb_ra/status/1956309230438273181","timestamp":"1755255441","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dcd6d02a-2d7b-5be6-8957-bcaf6f14eee0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.178.234","comment":"https://x.com/drb_ra/status/1956309230438273181","timestamp":"1755255441","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8bef8e4f-aa1c-5354-97e8-a2bd3d97a336","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:443","comment":"https://x.com/drb_ra/status/1956309371069088160","timestamp":"1755255475","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c2079fc2-31f9-5b14-967c-a4a02ee19624","type":"url","category":"Network activity","to_ids":true,"value":"https://www.5827575.cn.w.kunlunaq.com/activity","comment":"https://x.com/drb_ra/status/1956309371069088160","timestamp":"1755255475","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"252c4d0e-b4da-5490-89a4-fa735fd332a4","type":"domain","category":"Network activity","to_ids":true,"value":"5827575.cn.w.kunlunaq.com","comment":"https://x.com/drb_ra/status/1956309371069088160","timestamp":"1755255475","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4ac7ed85-b2fe-5295-ad48-42fc457b476a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.190.138.41","comment":"https://x.com/drb_ra/status/1956309511184019613","timestamp":"1755255508","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"37dc9788-ee3e-54f6-bbd4-e3b3566d5b2a","type":"url","category":"Network activity","to_ids":true,"value":"http://115.190.138.41:443","comment":"https://x.com/drb_ra/status/1956309511184019613","timestamp":"1755255508","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9d521c96-8627-5592-8669-67b71469fa0f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.1.211.57:443","comment":"https://x.com/drb_ra/status/1956309649461821669","timestamp":"1755255541","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ca977a4b-a060-531e-8ee9-f7c6cda423ba","type":"url","category":"Network activity","to_ids":true,"value":"https://116.62.64.54/cx","comment":"https://x.com/drb_ra/status/1956309789132062870","timestamp":"1755255574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ceab159d-bf53-5a39-9997-3ce1cd0b6aec","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:4433","comment":"https://x.com/drb_ra/status/1956309789132062870","timestamp":"1755255574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d8b60216-3d6f-5eaa-b594-b15312be7791","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.64.54","comment":"https://x.com/drb_ra/status/1956309789132062870","timestamp":"1755255574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"838b1f01-8c8c-53d9-b62d-93de633666f6","type":"url","category":"Network activity","to_ids":true,"value":"http://49.235.130.208:80","comment":"https://x.com/drb_ra/status/1956311959520837733","timestamp":"1755256092","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"309df2c0-cf7c-5abc-8732-c1d4da4cd28b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.235.130.208","comment":"https://x.com/drb_ra/status/1956311959520837733","timestamp":"1755256092","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f9e58d68-40d5-5529-b613-175c1dff557a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.89.73.78","comment":"https://x.com/drb_ra/status/1956312097341485086","timestamp":"1755256125","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"44152a03-ae02-5bf5-98ff-a0bd0951af58","type":"url","category":"Network activity","to_ids":true,"value":"http://118.89.73.78:8011","comment":"https://x.com/drb_ra/status/1956312097341485086","timestamp":"1755256125","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"86f219bd-70a3-5a55-850c-b081a273055a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.71.117.148","comment":"https://x.com/drb_ra/status/1956312236982452550","timestamp":"1755256158","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d76aba39-7644-5bf4-89a7-ae29bbf335c0","type":"url","category":"Network activity","to_ids":true,"value":"http://118.71.117.148:4444","comment":"https://x.com/drb_ra/status/1956312236982452550","timestamp":"1755256158","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"22dc7f3d-67df-5195-9ebf-f1011b3cd9db","type":"url","category":"Network activity","to_ids":true,"value":"http://39.99.155.47:8888","comment":"https://x.com/drb_ra/status/1956312375251832883","timestamp":"1755256191","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ad2d5cdd-5801-5a85-a718-6ecd1626cf9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.99.155.47","comment":"https://x.com/drb_ra/status/1956312375251832883","timestamp":"1755256191","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f79b601d-0ffc-5d7d-805a-814b079b2e84","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.139.175:443","comment":"https://x.com/drb_ra/status/1956312514632855692","timestamp":"1755256224","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3ca9ecff-f580-544e-bd3c-df5bb9eec795","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.139.80:5006","comment":"https://x.com/drb_ra/status/1956313160920473854","timestamp":"1755256378","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"08f5c5d1-7f4a-5627-8c27-2e33d5460f00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.139.80","comment":"https://x.com/drb_ra/status/1956313160920473854","timestamp":"1755256378","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8e831962-b927-5b47-b6b5-1cf2a25d7c6d","type":"domain","category":"Network activity","to_ids":true,"value":"ebtehaj.click","comment":"https://x.com/masaomi346/status/1956331904548159748","timestamp":"1755260847","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"270737c5-17a7-556a-bdc1-71848211cbf9","type":"url","category":"Network activity","to_ids":true,"value":"https://ebtehaj.click/Softaccount/Sites/index.html","comment":"https://x.com/masaomi346/status/1956331904548159748","timestamp":"1755260847","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e990ccec-a9cc-5207-81b1-54339597560f","type":"url","category":"Network activity","to_ids":true,"value":"http://segurocartaoapp.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"a700ed94-cb97-5b25-97c4-3a7fc796120c","type":"domain","category":"Network activity","to_ids":true,"value":"appsegurocartao.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"6dacf02b-440b-5521-b617-e531004ec089","type":"url","category":"Network activity","to_ids":true,"value":"http://appsegurocartao.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"4c7c0b45-e75b-5f9e-bb4f-e448dc5bf58b","type":"url","category":"Network activity","to_ids":true,"value":"http://segurancadocartao.info","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"e1c50561-a85d-5830-9121-9fe433ee398e","type":"domain","category":"Network activity","to_ids":true,"value":"segurancadocartao.info","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"b9b2d20b-7d3b-5fd1-bf55-e323c4d4f98f","type":"domain","category":"Network activity","to_ids":true,"value":"sicurezza-nfc24h.site","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"290fc55b-1cc4-583e-9ad1-51b67017ad02","type":"url","category":"Network activity","to_ids":true,"value":"http://sicurezza-nfc24h.site","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"11c5e184-3310-5b61-a62e-a4ef6251c1e8","type":"domain","category":"Network activity","to_ids":true,"value":"segurocartaoprotegido.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"b770e855-3711-5096-b3cf-2ec1a7752ec0","type":"url","category":"Network activity","to_ids":true,"value":"http://segurocartaoprotegido.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"27162256-86de-589e-8dd6-acc6fdf6ca74","type":"domain","category":"Network activity","to_ids":true,"value":"segurocartaoapp.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"c3c9a1d8-1d3e-5a11-9258-bfa2ba505196","type":"url","category":"Network activity","to_ids":true,"value":"http://segurancanfc.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"01376779-e754-59e7-bc9b-93f1ee08e792","type":"domain","category":"Network activity","to_ids":true,"value":"meucartaoseguro.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"4048b027-74ba-5699-86d0-338be881d38d","type":"domain","category":"Network activity","to_ids":true,"value":"segurancanoseucartao.shop","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"a0f996e9-cdaf-5d41-af39-928196fb27fb","type":"url","category":"Network activity","to_ids":true,"value":"http://segurancanoseucartao.shop","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"6d92b657-d0af-58c9-8e1e-d9a9b04fa7c4","type":"domain","category":"Network activity","to_ids":true,"value":"segurancanfc.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"c782ad19-db1f-57a2-a721-7979085b7522","type":"domain","category":"Network activity","to_ids":true,"value":"monitoreseucartao.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"02af6b91-5803-56e4-b94a-761d816a4163","type":"url","category":"Network activity","to_ids":true,"value":"http://monitoreseucartao.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"e4595930-ff6d-5d3e-82e8-c9f2ab76854c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.meucartaoseguro.com","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"b890044f-f78f-52eb-9310-b6e51107544e","type":"domain","category":"Network activity","to_ids":true,"value":"securecard.online","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"abb6cd36-71fa-5aa3-8e3b-ea12366778cf","type":"url","category":"Network activity","to_ids":true,"value":"http://securecard.online","comment":"https://x.com/skocherhan/status/1956335155632562481","timestamp":"1755261622","distribution":"5"},{"uuid":"5980ec3b-192a-5f89-9be8-7727ab16bef9","type":"url","category":"Network activity","to_ids":true,"value":"http://transportepublico.es","comment":"https://x.com/FalconFeedsio/status/1956338390829269368","timestamp":"1755262394","distribution":"5"},{"uuid":"dbebc923-3840-5240-bc13-dccb470c1c57","type":"domain","category":"Network activity","to_ids":true,"value":"transportepublico.es","comment":"https://x.com/FalconFeedsio/status/1956338390829269368","timestamp":"1755262394","distribution":"5"},{"uuid":"08e3c41b-6d65-5e96-803e-350563fbcd45","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.14.3:5552","comment":"https://x.com/SarlackLab/status/1956340171927904312","timestamp":"1755262818","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2ae84a10-2d81-5786-a5c0-7d895523d3f6","type":"domain","category":"Network activity","to_ids":true,"value":"romanovas.duckdns.org","comment":"https://x.com/SarlackLab/status/1956340171927904312","timestamp":"1755262818","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"d7d551c8-1fa4-50e6-a626-59da2cb54f52","type":"url","category":"Network activity","to_ids":true,"value":"http://romanovas.duckdns.org","comment":"https://x.com/SarlackLab/status/1956340171927904312","timestamp":"1755262818","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"23652657-5ed6-5611-bbce-5ad2f3c7cba5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.14.3","comment":"https://x.com/SarlackLab/status/1956340171927904312","timestamp":"1755262818","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e61ddbdb-e799-54be-89e4-340f009b3105","type":"url","category":"Network activity","to_ids":true,"value":"https://sweepstakes47.godaddysites.com","comment":"https://x.com/urldna_bot/status/1956355237079318915","timestamp":"1755266410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"48ff6de8-de0a-5a0c-bfe8-2b31cb4dbfef","type":"domain","category":"Network activity","to_ids":true,"value":"sweepstakes47.godaddysites.com","comment":"https://x.com/urldna_bot/status/1956355237079318915","timestamp":"1755266410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4cdf7ef6-87ea-5546-8be3-4a537545ef5a","type":"domain","category":"Network activity","to_ids":true,"value":"schoolviewers9876542567894.weebly.com","comment":"https://x.com/urldna_bot/status/1956385420687650819","timestamp":"1755273606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ede4415a-6f86-5217-855e-693611a19211","type":"url","category":"Network activity","to_ids":true,"value":"https://schoolviewers9876542567894.weebly.com","comment":"https://x.com/urldna_bot/status/1956385420687650819","timestamp":"1755273606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"43e53464-c791-507c-bfcb-cc46bc0e1c16","type":"domain","category":"Network activity","to_ids":true,"value":"nsipsvc.com","comment":"https://x.com/skocherhan/status/1956394556460503408","timestamp":"1755275784","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"f1475025-ce10-589f-91d3-47c38d2064b0","type":"url","category":"Network activity","to_ids":true,"value":"http://nsipsvc.com","comment":"https://x.com/skocherhan/status/1956394556460503408","timestamp":"1755275784","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ae5df0d6-93f9-5f98-a391-e908ce0f62e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.44.61.136","comment":"https://x.com/skocherhan/status/1956394556460503408","timestamp":"1755275784","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"80f71f48-5da4-5445-8ed6-c3aa85902e2d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.44.61.195","comment":"https://x.com/skocherhan/status/1956394556460503408","timestamp":"1755275784","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ea290ae2-8a6e-5697-bb8c-6efe09b8089a","type":"md5","category":"Payload delivery","to_ids":true,"value":"6048a27d3ba5860dabb9fe47e7f959c7","comment":"https://x.com/skocherhan/status/1956394556460503408","timestamp":"1755275784","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d69cf6fe-5a79-54b1-9f45-1c0a084ae730","type":"domain","category":"Network activity","to_ids":true,"value":"trustwallet-user.vip","comment":"https://x.com/harugasumi/status/1956408115257368822","timestamp":"1755279017","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14e57a4f-12e0-53fc-92ea-009ac1b7ca4e","type":"url","category":"Network activity","to_ids":true,"value":"https://trustwallet-user.vip","comment":"https://x.com/harugasumi/status/1956408115257368822","timestamp":"1755279017","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2fd21815-4fb2-55f9-9233-242e558dbc39","type":"url","category":"Network activity","to_ids":true,"value":"http://api.vtqgo0729ilnmyxs9q.com","comment":"https://x.com/JAMESWT_WT/status/1956409874759487721","timestamp":"1755279437","distribution":"5"},{"uuid":"76406c10-0d16-5ed8-9681-e7a0956668e0","type":"domain","category":"Network activity","to_ids":true,"value":"api.vtqgo0729ilnmyxs9q.com","comment":"https://x.com/JAMESWT_WT/status/1956409874759487721","timestamp":"1755279437","distribution":"5"},{"uuid":"b08d7fb7-8221-5e75-9f3d-0e30c49944a1","type":"url","category":"Network activity","to_ids":true,"value":"https://eventjp-jebnko00.com/cash/driect/client/anti/3210000","comment":"https://x.com/harugasumi/status/1956410009686082045","timestamp":"1755279469","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"52d6d99e-f9ad-5079-9332-66a4a9fde9c8","type":"domain","category":"Network activity","to_ids":true,"value":"eventjp-jebnko00.com","comment":"https://x.com/harugasumi/status/1956410009686082045","timestamp":"1755279469","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab9889c9-4a08-585d-a7ce-283dd9d114b3","type":"url","category":"Network activity","to_ids":true,"value":"https://eventjp-jebnko01-08.com","comment":"https://x.com/harugasumi/status/1956410009686082045","timestamp":"1755279469","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b17a16d-3bbc-5756-b7c3-e630659e0b82","type":"domain","category":"Network activity","to_ids":true,"value":"eventjp-jebnko01-08.com","comment":"https://x.com/harugasumi/status/1956410009686082045","timestamp":"1755279469","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a66c2947-ca0a-528b-b168-882343d1c0ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.144.162","comment":"https://x.com/JAMESWT_WT/status/1956410259926360441","timestamp":"1755279528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"1d0a88d3-bdb2-5827-bda9-03a0f440f9f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.208.226.175","comment":"https://x.com/JAMESWT_WT/status/1956410259926360441","timestamp":"1755279528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"4cd7d60e-d4c0-5db8-976d-9eefdcf908bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.26.90.245","comment":"https://x.com/JAMESWT_WT/status/1956410259926360441","timestamp":"1755279528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"9877a7e0-c7c4-5aff-b5dc-a6bf77fb9743","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.10.38","comment":"https://x.com/JAMESWT_WT/status/1956410259926360441","timestamp":"1755279528","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"5f024f3f-292f-5d77-990c-1d55f7ec9cdc","type":"domain","category":"Network activity","to_ids":true,"value":"spzia.com","comment":"https://x.com/urldna_bot/status/1956415633580491036","timestamp":"1755280810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"848434d7-f6ea-5adf-8a56-b9a7fbd0c9af","type":"url","category":"Network activity","to_ids":true,"value":"https://spzia.com","comment":"https://x.com/urldna_bot/status/1956415633580491036","timestamp":"1755280810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"076a08a1-4b52-50d3-88e9-9e3ebe9be7d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.216.158.48","comment":"https://x.com/FalconFeedsio/status/1956424753000124738","timestamp":"1755282984","distribution":"5"},{"uuid":"f88e3648-1286-5958-a5ea-661025a6dbb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.228.131.165","comment":"https://x.com/FalconFeedsio/status/1956424753000124738","timestamp":"1755282984","distribution":"5"},{"uuid":"f55065e0-fab6-56a3-a02e-9b350028d2ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.249.0.48","comment":"https://x.com/drb_ra/status/1956427434871472433","timestamp":"1755283623","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ce878520-4af5-5367-ad69-71fa98a0fe05","type":"url","category":"Network activity","to_ids":true,"value":"http://34.249.0.48:80","comment":"https://x.com/drb_ra/status/1956427434871472433","timestamp":"1755283623","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e3719db2-20bc-503c-b7b2-ff2797bc7900","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.103.130:80","comment":"https://x.com/drb_ra/status/1956427573191192785","timestamp":"1755283656","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"58cbf550-872c-50d2-840c-64df24fced79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.103.130","comment":"https://x.com/drb_ra/status/1956427573191192785","timestamp":"1755283656","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b07ba314-1cd1-5a0b-9fc3-09e425f2702f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.249.154.5:80","comment":"https://x.com/drb_ra/status/1956427714451108348","timestamp":"1755283690","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fdd23179-acde-5cb2-9421-700c92475cae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.249.154.5","comment":"https://x.com/drb_ra/status/1956427714451108348","timestamp":"1755283690","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a8228ad3-51f6-5e67-a6cd-84c6b70623a5","type":"url","category":"Network activity","to_ids":true,"value":"http://109.122.197.148:80","comment":"https://x.com/drb_ra/status/1956427853710389499","timestamp":"1755283723","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"9bf44266-0162-5d03-a69c-c34cc48e13b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.122.197.148","comment":"https://x.com/drb_ra/status/1956427853710389499","timestamp":"1755283723","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"95ed794a-2820-594c-a5ac-26a66477ccb7","type":"url","category":"Network activity","to_ids":true,"value":"http://188.4.81.152:995","comment":"https://x.com/drb_ra/status/1956427992843870601","timestamp":"1755283756","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"f68ceffd-96c2-52fb-875a-dd53b04d3565","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.4.81.152","comment":"https://x.com/drb_ra/status/1956427992843870601","timestamp":"1755283756","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"560814f0-c723-5f06-97e7-4b61a8ccae5f","type":"url","category":"Network activity","to_ids":true,"value":"http://109.145.252.102:2222","comment":"https://x.com/drb_ra/status/1956428132724113742","timestamp":"1755283790","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"c195cbce-11fd-5c56-8376-bc084daddc89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.145.252.102","comment":"https://x.com/drb_ra/status/1956428132724113742","timestamp":"1755283790","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"5b815e21-5d74-50f3-b360-ec554a2f7727","type":"url","category":"Network activity","to_ids":true,"value":"http://149.109.119.76:443","comment":"https://x.com/drb_ra/status/1956428275359588754","timestamp":"1755283824","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"6404d677-8d17-5cf3-bad9-a5ea039bdec0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.109.119.76","comment":"https://x.com/drb_ra/status/1956428275359588754","timestamp":"1755283824","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d47d7718-b7c1-5d94-9496-373d9ff4d90b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.98.219.150","comment":"https://x.com/drb_ra/status/1956428416238162053","timestamp":"1755283857","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"bc8154c5-48ab-5376-a4cf-cdb2f2d20853","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.150:443","comment":"https://x.com/drb_ra/status/1956428416238162053","timestamp":"1755283857","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"109468d8-684f-5f57-8a4e-67cf2fe2556f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.157.7.55","comment":"https://x.com/drb_ra/status/1956428554238845053","timestamp":"1755283890","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"e1e21aef-42d3-5845-9bbd-9f56c37835d8","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.55:2222","comment":"https://x.com/drb_ra/status/1956428554238845053","timestamp":"1755283890","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"296e7fa0-549e-5881-89eb-9df7813c73ad","type":"url","category":"Network activity","to_ids":true,"value":"http://35.179.93.188:443","comment":"https://x.com/drb_ra/status/1956428694316368040","timestamp":"1755283924","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e9d05b92-328a-53f9-b7d9-02c87de22aec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.179.93.188","comment":"https://x.com/drb_ra/status/1956428694316368040","timestamp":"1755283924","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"6d590be4-2441-5dab-9927-cca3d28f3b6b","type":"url","category":"Network activity","to_ids":true,"value":"http://197.162.208.113:8888","comment":"https://x.com/drb_ra/status/1956428832086311166","timestamp":"1755283956","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"292416d8-3707-5c63-9168-ac75b1267f40","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.162.208.113","comment":"https://x.com/drb_ra/status/1956428832086311166","timestamp":"1755283956","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"4fe7ea24-c0c4-59b2-b472-ef9930db44a3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.210.146.87:443","comment":"https://x.com/drb_ra/status/1956428970141917329","timestamp":"1755283989","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1ead4b46-c83d-5cb3-92c6-6a8bb28718a1","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.122.159:443","comment":"https://x.com/drb_ra/status/1956429108554203377","timestamp":"1755284022","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"efedb98f-2067-5e17-8dea-e3691c94d356","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.122.159","comment":"https://x.com/drb_ra/status/1956429108554203377","timestamp":"1755284022","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a9226a82-c91a-52b2-916b-7b26a95292ec","type":"url","category":"Network activity","to_ids":true,"value":"http://18.188.140.220:443","comment":"https://x.com/drb_ra/status/1956429246714331208","timestamp":"1755284055","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b3d9a8a6-212e-572a-b67f-96db0bafda0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.188.140.220","comment":"https://x.com/drb_ra/status/1956429246714331208","timestamp":"1755284055","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"687e09ea-f70f-55aa-ac99-4119c40bc6fe","type":"url","category":"Network activity","to_ids":true,"value":"http://112.124.61.206:7443","comment":"https://x.com/drb_ra/status/1956429385164087710","timestamp":"1755284088","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d5f2f57a-2929-5ee9-997b-da2c8196ed82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.124.61.206","comment":"https://x.com/drb_ra/status/1956429385164087710","timestamp":"1755284088","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d0fe9fd7-c61a-5356-b812-2cfc0e79fe56","type":"url","category":"Network activity","to_ids":true,"value":"http://173.214.226.23:8080","comment":"https://x.com/drb_ra/status/1956430031632126461","timestamp":"1755284242","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"43a99cf5-8222-5ccf-9001-e7c5dec5d7a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.214.226.23","comment":"https://x.com/drb_ra/status/1956430031632126461","timestamp":"1755284242","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"01e3afc2-e1f8-54a3-8dd5-07cb88f4eedf","type":"url","category":"Network activity","to_ids":true,"value":"http://84.38.132.101:3535","comment":"https://x.com/drb_ra/status/1956430170140643672","timestamp":"1755284275","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"946e3b89-7782-5416-889a-f7ff5036cf12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.38.132.101","comment":"https://x.com/drb_ra/status/1956430170140643672","timestamp":"1755284275","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d9585be4-821c-513d-a2bc-90f5fe3bc9a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.134","comment":"https://x.com/drb_ra/status/1956430309253058796","timestamp":"1755284309","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b93c169e-2a13-5709-8f88-26d6745a685e","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.134:2404","comment":"https://x.com/drb_ra/status/1956430309253058796","timestamp":"1755284309","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"937d1b2b-6c56-555a-9129-55408ad48d44","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.42.4:7001","comment":"https://x.com/drb_ra/status/1956430449309274606","timestamp":"1755284342","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"5a9e541b-1063-598d-bdd7-f97d15f39e4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.42.4","comment":"https://x.com/drb_ra/status/1956430449309274606","timestamp":"1755284342","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"367eaecf-1b7a-55c6-a1d5-50953587d8ca","type":"url","category":"Network activity","to_ids":true,"value":"http://3.148.113.159:60000","comment":"https://x.com/drb_ra/status/1956430588388282416","timestamp":"1755284375","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"95255922-d926-56d9-81f8-fd78c4fab5b8","type":"url","category":"Network activity","to_ids":true,"value":"http://16.62.81.5:2581","comment":"https://x.com/drb_ra/status/1956430727458742363","timestamp":"1755284408","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"888696c4-0f33-5bde-94dc-e215c365e840","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.62.81.5","comment":"https://x.com/drb_ra/status/1956430727458742363","timestamp":"1755284408","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f001a5b4-a648-53ba-93f3-e529582d925b","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.31:2232","comment":"https://x.com/SarlackLab/status/1956430778922926094","timestamp":"1755284421","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2a2ed3cb-2370-5b81-a9b7-c1eea1404aa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.31","comment":"https://x.com/SarlackLab/status/1956430778922926094","timestamp":"1755284421","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"15900db8-3678-5e0a-9804-8c6ead770736","type":"url","category":"Network activity","to_ids":true,"value":"http://13.229.211.114:4840","comment":"https://x.com/drb_ra/status/1956430865904361953","timestamp":"1755284441","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"36213f16-0740-5cc3-af91-1408de1349eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.229.211.114","comment":"https://x.com/drb_ra/status/1956430865904361953","timestamp":"1755284441","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5e399ef1-c2bd-56d0-a251-282ad3664515","type":"url","category":"Network activity","to_ids":true,"value":"http://18.119.161.168:2096","comment":"https://x.com/drb_ra/status/1956431004874285445","timestamp":"1755284474","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7bec520b-d492-51a5-a501-af6db8501cc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.119.161.168","comment":"https://x.com/drb_ra/status/1956431004874285445","timestamp":"1755284474","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c6ef63d0-cbb7-524d-b4b0-5b48cb55679c","type":"url","category":"Network activity","to_ids":true,"value":"http://35.222.14.165:80","comment":"https://x.com/drb_ra/status/1956431144112542069","timestamp":"1755284508","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9d9ea0a1-9747-5495-8d62-565c3c0e0d5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.222.14.165","comment":"https://x.com/drb_ra/status/1956431144112542069","timestamp":"1755284508","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"400059a2-90c7-5348-bf9f-bf8b0a8ff3ad","type":"url","category":"Network activity","to_ids":true,"value":"http://52.214.98.84:443","comment":"https://x.com/drb_ra/status/1956431282361053257","timestamp":"1755284541","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d23bea4f-8044-5862-8f03-d543b51e16d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.214.98.84","comment":"https://x.com/drb_ra/status/1956431282361053257","timestamp":"1755284541","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8a465a33-8887-5ece-bafb-d9d7e7baadd8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.188.246","comment":"https://x.com/drb_ra/status/1956431421213450644","timestamp":"1755284574","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ea58ee5f-0aaf-5e01-a9c9-733d3f509892","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.188.246:80","comment":"https://x.com/drb_ra/status/1956431421213450644","timestamp":"1755284574","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1c4c8cac-69f6-5181-a2ff-e6ffd50cb681","type":"url","category":"Network activity","to_ids":true,"value":"http://52.214.17.211:80","comment":"https://x.com/drb_ra/status/1956431559709364286","timestamp":"1755284607","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b231da3e-789b-585d-a3c3-c9f517000c7d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.214.17.211","comment":"https://x.com/drb_ra/status/1956431559709364286","timestamp":"1755284607","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"633ec503-d4ce-52ca-a2af-a5fdf74a6987","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.97.96:80","comment":"https://x.com/drb_ra/status/1956431702231761382","timestamp":"1755284641","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cfd5d25d-3b88-5d74-b5be-b81fa122dce8","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.97.96:587","comment":"https://x.com/drb_ra/status/1956431840417403020","timestamp":"1755284674","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"68b49799-08a3-5694-a495-798897497c8f","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.97.96:465","comment":"https://x.com/drb_ra/status/1956431981115245051","timestamp":"1755284707","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"03084619-94e4-5dd1-a1fd-223e8e0a7195","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.97.96:443","comment":"https://x.com/drb_ra/status/1956432119929950575","timestamp":"1755284740","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d768bd87-38a6-505f-b801-522cb26d93af","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.89.97.96","comment":"https://x.com/drb_ra/status/1956432119929950575","timestamp":"1755284740","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2b394d5b-454c-5d96-9566-da0525896950","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.239.12","comment":"https://x.com/drb_ra/status/1956432257767407988","timestamp":"1755284773","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dffd5a82-6db3-5cb7-9831-f7282c5010b5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.239.12:80","comment":"https://x.com/drb_ra/status/1956432257767407988","timestamp":"1755284773","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6004b530-b439-52d2-be24-0ae3babfe91a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.251.145.165:80","comment":"https://x.com/drb_ra/status/1956432396695265476","timestamp":"1755284806","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"20740a54-3fcc-5ac5-8030-21d4a732850c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.251.145.165","comment":"https://x.com/drb_ra/status/1956432396695265476","timestamp":"1755284806","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"657d10c5-2902-5ea5-b8e6-4ff6337baad1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.164.255:80","comment":"https://x.com/drb_ra/status/1956432535015100524","timestamp":"1755284839","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4d47cc8b-0f77-50ce-883e-87a0b05973c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.164.255","comment":"https://x.com/drb_ra/status/1956432535015100524","timestamp":"1755284839","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4804a677-ec3d-59ed-8bfc-17b31653e37c","type":"url","category":"Network activity","to_ids":true,"value":"http://57.158.25.100:443","comment":"https://x.com/drb_ra/status/1956432674060706177","timestamp":"1755284872","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9f597bee-aa26-5b4b-bbd9-66d2b6880720","type":"ip-dst","category":"Network activity","to_ids":true,"value":"57.158.25.100","comment":"https://x.com/drb_ra/status/1956432674060706177","timestamp":"1755284872","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7674ba4a-0b50-5fbd-afd8-8bc422fb1611","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.254.229.227","comment":"https://x.com/drb_ra/status/1956432832999330020","timestamp":"1755284910","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6059a40f-9235-5880-b3ab-db4760ad9996","type":"url","category":"Network activity","to_ids":true,"value":"http://34.254.229.227:80","comment":"https://x.com/drb_ra/status/1956432832999330020","timestamp":"1755284910","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4001326c-4392-54b7-9ce2-4cce54c56ff3","type":"domain","category":"Network activity","to_ids":true,"value":"avec-coinbase.comparomax.com","comment":"https://x.com/urldna_bot/status/1956445824109388032","timestamp":"1755288008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"564ccaa0-b53c-574d-8986-c1405d0c2395","type":"url","category":"Network activity","to_ids":true,"value":"https://avec-coinbase.comparomax.com","comment":"https://x.com/urldna_bot/status/1956445824109388032","timestamp":"1755288008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"22fcbfb4-8b17-56e8-9640-9ac67021ac63","type":"url","category":"Network activity","to_ids":true,"value":"http://86.98.219.150","comment":"https://x.com/threatquery/status/1956460908584059132","timestamp":"1755291604","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"74d0034f-fe1d-5369-bfa0-ff9e400b2d5a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.210.146.87","comment":"https://x.com/threatquery/status/1956460912191135965","timestamp":"1755291605","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"e1b2332d-f132-5593-a7bd-402a40dce391","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.55","comment":"https://x.com/threatquery/status/1956460910580502792","timestamp":"1755291605","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"f6f61839-f983-55a6-ba63-63d6deee7f53","type":"url","category":"Network activity","to_ids":true,"value":"https://212.192.13.166/activity","comment":"https://x.com/drb_ra/status/1956462900438028661","timestamp":"1755292079","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"51ac5090-d487-5829-804d-310c3c728b59","type":"url","category":"Network activity","to_ids":true,"value":"http://212.192.13.166:8888","comment":"https://x.com/drb_ra/status/1956462900438028661","timestamp":"1755292079","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"64b0bf79-0e82-5136-948c-4e0aad4b8514","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.192.13.166","comment":"https://x.com/drb_ra/status/1956462900438028661","timestamp":"1755292079","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91308a9f-2633-52ce-82c3-05e03a09af9a","type":"url","category":"Network activity","to_ids":true,"value":"https://8.219.76.168/updates","comment":"https://x.com/drb_ra/status/1956463039219122647","timestamp":"1755292112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"89e87482-228a-52b2-95b5-c132c11a40ab","type":"url","category":"Network activity","to_ids":true,"value":"http://8.219.76.168:80","comment":"https://x.com/drb_ra/status/1956463039219122647","timestamp":"1755292112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"104757ba-2832-5d71-8190-4fecd4256366","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.71","comment":"https://x.com/skocherhan/status/1956463326222749786","timestamp":"1755292180","distribution":"5","Tag":[{"name":"malware"},{"name":"Xworm"},{"name":"C2"}]},{"uuid":"20fe8a40-3fef-50f0-a37e-5fe85ea31eac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.71","comment":"https://x.com/skocherhan/status/1956463326222749786","timestamp":"1755292180","distribution":"5","Tag":[{"name":"malware"},{"name":"Xworm"},{"name":"C2"}]},{"uuid":"9f16668a-a3fa-513d-b72f-e4059b4bc966","type":"url","category":"Network activity","to_ids":true,"value":"http://116.198.233.179:6666","comment":"https://x.com/drb_ra/status/1956463686320631970","timestamp":"1755292266","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9c901a1d-89d6-547c-9c28-8eb56a6b9b6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.198.233.179","comment":"https://x.com/drb_ra/status/1956463686320631970","timestamp":"1755292266","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5f0ed5df-b433-50be-885d-8015a93e9768","type":"url","category":"Network activity","to_ids":true,"value":"https://137.184.145.88:443","comment":"https://x.com/drb_ra/status/1956470421919797250","timestamp":"1755293872","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a0a07d2d-7a51-5d20-ac56-2a4f01ba463b","type":"url","category":"Network activity","to_ids":true,"value":"http://137.184.145.88:443","comment":"https://x.com/drb_ra/status/1956470421919797250","timestamp":"1755293872","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e2db98ad-fea0-5b74-b60c-fa33bd56ea9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.184.145.88","comment":"https://x.com/drb_ra/status/1956470421919797250","timestamp":"1755293872","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"22595663-01e1-53f5-8814-6d728d40f872","type":"domain","category":"Network activity","to_ids":true,"value":"689d4c46c7f21f360dc44ccc--lighthearted-frangipane-f9dddb.netlify.app","comment":"https://x.com/urldna_bot/status/1956476020724207622","timestamp":"1755295207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fa74a40f-6c26-5d0e-97e6-092ae0bb4a17","type":"url","category":"Network activity","to_ids":true,"value":"https://689d4c46c7f21f360dc44ccc--lighthearted-frangipane-f9dddb.netlify.app/index-2.html","comment":"https://x.com/urldna_bot/status/1956476020724207622","timestamp":"1755295207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"70e2f534-d63b-510a-9f25-99062011a86f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9089df0071fb1473ec82601c117ae755c0117eb55250ce5fd22da5e34f9c3796","comment":"https://x.com/skocherhan/status/1956484473857380524","timestamp":"1755297222","distribution":"5"},{"uuid":"57e88a51-b51e-5e57-9823-b34d8049ccd9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"977705a055599b61d5235c34aa5deadd6da0e884652306f802abeedde466d6a1","comment":"https://x.com/skocherhan/status/1956484473857380524","timestamp":"1755297222","distribution":"5"},{"uuid":"5f0c5d0e-8b8c-52ce-a8ac-696721733846","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.53.26:8443","comment":"https://x.com/drb_ra/status/1956491863361225013","timestamp":"1755298984","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"995fe921-0692-54dc-9d5d-32d2d5c6d026","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.26","comment":"https://x.com/drb_ra/status/1956491863361225013","timestamp":"1755298984","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cd436b32-d903-5a65-a9d4-b4b52db601c1","type":"url","category":"Network activity","to_ids":true,"value":"http://39.106.2.193:5995","comment":"https://x.com/drb_ra/status/1956492002016493972","timestamp":"1755299017","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a6abec33-8917-5d94-a944-44def8d6e651","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.106.2.193","comment":"https://x.com/drb_ra/status/1956492002016493972","timestamp":"1755299017","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7684f175-953e-5cb4-b23e-fba0d83a9f2d","type":"url","category":"Network activity","to_ids":true,"value":"http://43.243.73.187:443","comment":"https://x.com/drb_ra/status/1956492142836056117","timestamp":"1755299051","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"632abc6a-bacc-5eb0-b631-e48bb51cea27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.243.73.187","comment":"https://x.com/drb_ra/status/1956492142836056117","timestamp":"1755299051","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2394a7f8-69d0-5375-8b27-5f5740b6b03d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.1.211.57:80","comment":"https://x.com/drb_ra/status/1956492788415058142","timestamp":"1755299205","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"62778a1e-bdfc-549f-a935-e73207128904","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.76.13:81","comment":"https://x.com/drb_ra/status/1956492927259009261","timestamp":"1755299238","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fecf3e28-efb1-5aa9-b2a3-bc303b9c342f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.76.13","comment":"https://x.com/drb_ra/status/1956492927259009261","timestamp":"1755299238","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aea3c490-226c-5173-b4c5-57e87b3c6698","type":"domain","category":"Network activity","to_ids":true,"value":"gitcompay.com","comment":"https://x.com/drb_ra/status/1956493067034534144","timestamp":"1755299271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e86ac0a2-50c5-58aa-b103-53fd5006a6b6","type":"url","category":"Network activity","to_ids":true,"value":"https://gitcompay.com/api/v1/get","comment":"https://x.com/drb_ra/status/1956493067034534144","timestamp":"1755299271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"81764385-9afe-540e-a429-1378ba300f8c","type":"url","category":"Network activity","to_ids":true,"value":"http://103.12.148.37:443","comment":"https://x.com/drb_ra/status/1956493067034534144","timestamp":"1755299271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a35e70f4-960b-5e4f-ad78-b919f2d8d072","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.12.148.37","comment":"https://x.com/drb_ra/status/1956493067034534144","timestamp":"1755299271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"327cba50-6c24-5c78-ad6d-9cc1314ed934","type":"domain","category":"Network activity","to_ids":true,"value":"kraklog23.pages.dev","comment":"https://x.com/urldna_bot/status/1956506222569328996","timestamp":"1755302408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9faf08a2-0dc2-5bb5-a08e-0135f4351bf5","type":"url","category":"Network activity","to_ids":true,"value":"https://kraklog23.pages.dev/login","comment":"https://x.com/urldna_bot/status/1956506222569328996","timestamp":"1755302408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"38686adb-9b15-5aac-a7cd-47b094ffea99","type":"domain","category":"Network activity","to_ids":true,"value":"coinbaselogindesk.blogspot.co.id","comment":"https://x.com/urldna_bot/status/1956536418387230986","timestamp":"1755309607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"30a91029-75ad-5531-a28b-0a39bde6e61e","type":"url","category":"Network activity","to_ids":true,"value":"https://coinbaselogindesk.blogspot.co.id","comment":"https://x.com/urldna_bot/status/1956536418387230986","timestamp":"1755309607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e6bf8c71-48b3-52b6-b571-6d1d8f8ccd66","type":"url","category":"Network activity","to_ids":true,"value":"https://101.36.125.58/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1956537737344946187","timestamp":"1755309921","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8be28af6-11c8-5d38-bfb5-f94a03082c71","type":"url","category":"Network activity","to_ids":true,"value":"http://101.36.125.58:443","comment":"https://x.com/drb_ra/status/1956537737344946187","timestamp":"1755309921","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f17e2d6-3e06-5ea5-9c4c-7319caef2765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.36.125.58","comment":"https://x.com/drb_ra/status/1956537737344946187","timestamp":"1755309921","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"77a6a5ec-3135-5582-9638-a12d4cda7d5b","type":"domain","category":"Network activity","to_ids":true,"value":"kraklog26.pages.dev","comment":"https://x.com/urldna_bot/status/1956566620601536621","timestamp":"1755316808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f1ca1c34-79fd-5667-865e-1223f7380fd5","type":"url","category":"Network activity","to_ids":true,"value":"https://kraklog26.pages.dev/login","comment":"https://x.com/urldna_bot/status/1956566620601536621","timestamp":"1755316808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"28b454ab-693c-5258-8255-f2cefb33dcdb","type":"domain","category":"Network activity","to_ids":true,"value":"sstage.portfolio.metamask.cx","comment":"https://x.com/urldna_bot/status/1956596817665073257","timestamp":"1755324007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"961e949f-6971-50a9-bb71-7ff56102edcf","type":"url","category":"Network activity","to_ids":true,"value":"https://sstage.portfolio.metamask.cx","comment":"https://x.com/urldna_bot/status/1956596817665073257","timestamp":"1755324007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"43b6a2d4-0eac-5e11-b0cb-1fe2daeb7996","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.176.103.2","comment":"https://x.com/FalconFeedsio/status/1956623977604104537","timestamp":"1755330483","distribution":"5"},{"uuid":"7cfc4743-78cf-57da-9bb4-a72600bb3f2b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.183.72.95","comment":"https://x.com/FalconFeedsio/status/1956623977604104537","timestamp":"1755330483","distribution":"5"},{"uuid":"ee0bfb8a-c699-5582-846a-e86aa00352e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.117.100.92","comment":"https://x.com/FalconFeedsio/status/1956623977604104537","timestamp":"1755330483","distribution":"5"},{"uuid":"995fe921-0692-54dc-9d5d-32d2d5c6d026","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.26","comment":"https://x.com/FalconFeedsio/status/1956623977604104537","timestamp":"1755330483","distribution":"5"},{"uuid":"34e79b89-a297-5f10-84a1-966f9fb2ce7d","type":"domain","category":"Network activity","to_ids":true,"value":"coinbasepr04.godaddysites.com","comment":"https://x.com/urldna_bot/status/1956627014208610562","timestamp":"1755331207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8745497b-0585-5e5a-859c-7a20fb5084c5","type":"url","category":"Network activity","to_ids":true,"value":"http://coinbasepr04.godaddysites.com","comment":"https://x.com/urldna_bot/status/1956627014208610562","timestamp":"1755331207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f69926a7-0255-5c56-8bbe-cf1faa7c6452","type":"url","category":"Network activity","to_ids":true,"value":"http://89.23.98.77:1912","comment":"https://x.com/SarlackLab/status/1956627074816348452","timestamp":"1755331221","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"f0ea0bd8-cd86-5ad4-9e55-4c3c1b21c8c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.23.98.77","comment":"https://x.com/SarlackLab/status/1956627074816348452","timestamp":"1755331221","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"cd9f81bb-d172-51ab-ba31-343477b71ee8","type":"domain","category":"Network activity","to_ids":true,"value":"booking.confirmation-id8295.com","comment":"https://x.com/urldna_bot/status/1956657217249124765","timestamp":"1755338408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d0e31908-76cf-5157-86b4-b97dc36486dd","type":"url","category":"Network activity","to_ids":true,"value":"http://booking.confirmation-id8295.com/1","comment":"https://x.com/urldna_bot/status/1956657217249124765","timestamp":"1755338408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cbc52924-3988-5b62-aa15-927b65571b19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.96.172.174","comment":"https://x.com/JAMESWT_WT/status/1956669208252579998","timestamp":"1755341267","distribution":"5"},{"uuid":"0896a379-50bc-5d28-914a-25ef639fd4c2","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.141/ssh","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2900b60b-5b7d-569c-92f3-2267ea57cfae","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.141","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"4a6a533b-6503-5bd6-9f5a-c2f00443edc3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.135.194.32","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5d28b6e7-2d21-5b5a-92b5-58bdbc9d4702","type":"domain","category":"Network activity","to_ids":true,"value":"bootaa.anondns.net","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fd3c01cd-b84d-586b-b7f2-8c1773ce4238","type":"url","category":"Network activity","to_ids":true,"value":"http://bootaa.anondns.net","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a5b2fbf9-e876-5d87-b9ed-b279aa531025","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.141","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"51fb65c4-3494-5b6c-b7e0-d83c23a80f13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.135.194.32","comment":"https://x.com/redrabytes/status/1956672997831451002","timestamp":"1755342170","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7d145f8f-2f58-55c2-9e56-1999515a6f86","type":"url","category":"Network activity","to_ids":true,"value":"http://23.146.184.21/abd.sh","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"43f1032a-e6a2-50b9-be27-1bd9420e0e1b","type":"url","category":"Network activity","to_ids":true,"value":"http://23.146.184.21","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"4ada49a5-9bbd-56c4-82f1-a7d81e53e811","type":"url","category":"Network activity","to_ids":true,"value":"http://209.141.32.42","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"eee0e927-cfb8-5ba0-b3f9-1e2350888f93","type":"url","category":"Network activity","to_ids":true,"value":"http://209.141.32.42:1999","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f3dcee55-6296-552c-a01a-39daaf7aaf3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.146.184.21","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d1e02836-efd8-5351-96a1-430123172a04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.141.32.42","comment":"https://x.com/redrabytes/status/1956675627722883404","timestamp":"1755342797","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"dbebc923-3840-5240-bc13-dccb470c1c57","type":"domain","category":"Network activity","to_ids":true,"value":"transportepublico.es","comment":"https://x.com/nuria_imeq/status/1956676033232380321","timestamp":"1755342894","distribution":"5"},{"uuid":"5980ec3b-192a-5f89-9be8-7727ab16bef9","type":"url","category":"Network activity","to_ids":true,"value":"http://transportepublico.es","comment":"https://x.com/nuria_imeq/status/1956676033232380321","timestamp":"1755342894","distribution":"5"},{"uuid":"bab5663d-f08a-5ae9-9d6b-7a1ce567d122","type":"domain","category":"Network activity","to_ids":true,"value":"yairix.github.io","comment":"https://x.com/urldna_bot/status/1956687416145711318","timestamp":"1755345608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b57e4ba3-9096-5a65-98e3-baf6bd36e96f","type":"url","category":"Network activity","to_ids":true,"value":"https://yairix.github.io/Login-Instagram/","comment":"https://x.com/urldna_bot/status/1956687416145711318","timestamp":"1755345608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ea3c6182-d8a7-5965-9ec1-b6f2fe9f1ce7","type":"domain","category":"Network activity","to_ids":true,"value":"especially.hrwyvow.cn","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f65a96ee-7985-5811-8930-8cc668db8f26","type":"url","category":"Network activity","to_ids":true,"value":"https://especially.hrwyvow.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"564b44d5-108d-5362-a6a0-05bd08a77d29","type":"domain","category":"Network activity","to_ids":true,"value":"neverious.jetj.cn","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceb7d8d1-285e-5be0-bc7b-b76b19986cad","type":"url","category":"Network activity","to_ids":true,"value":"https://neverious.jetj.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f47ee4ab-9f4f-57bc-aae3-6de380adf75e","type":"domain","category":"Network activity","to_ids":true,"value":"motherness.pgiyuwd.cn","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"992ed944-8f76-550b-a0e6-6711ac02b31d","type":"url","category":"Network activity","to_ids":true,"value":"https://motherness.pgiyuwd.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956687797227499753","timestamp":"1755345699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25c678ad-86ba-540a-8e32-235e3a223949","type":"domain","category":"Network activity","to_ids":true,"value":"oculatic.ozjgrep.cn","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"639e30c3-5e12-5663-acd8-3660510310f1","type":"url","category":"Network activity","to_ids":true,"value":"https://oculatic.ozjgrep.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b461de93-9936-59f7-8c52-630cf216c77e","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-cation.pqwedn.cn","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3371eadb-06f4-5adf-930a-83f1c5fa186d","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-cation.pqwedn.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b630287-498f-5d88-906a-48cf82ab55f5","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-dogmat.qingbaoyu.cn","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e41db767-ab9c-5377-8e1b-e2b49a0ce8b0","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-dogmat.qingbaoyu.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1956688064069189663","timestamp":"1755345762","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4076ec7-b241-5a73-b518-dfeffd344e29","type":"domain","category":"Network activity","to_ids":true,"value":"backupper.info","comment":"https://x.com/500mk500/status/1956688953320366297","timestamp":"1755345974","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"cbfdefe0-3d10-52c9-9d10-b52e5c8efd77","type":"url","category":"Network activity","to_ids":true,"value":"http://backupper.info","comment":"https://x.com/500mk500/status/1956688953320366297","timestamp":"1755345974","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"3f2eb8d8-21bf-55a6-92c5-ac56f1dfabc1","type":"domain","category":"Network activity","to_ids":true,"value":"geoterbang.site","comment":"https://x.com/500mk500/status/1956688953320366297","timestamp":"1755345974","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"3467b505-056a-56d4-9187-a5c727ab0995","type":"url","category":"Network activity","to_ids":true,"value":"http://geoterbang.site","comment":"https://x.com/500mk500/status/1956688953320366297","timestamp":"1755345974","distribution":"5","Tag":[{"name":"Magecart"}]},{"uuid":"5a7fa46d-1aba-5a53-b33f-72a3b393a364","type":"domain","category":"Network activity","to_ids":true,"value":"bank-of-usa.vercel.app","comment":"https://x.com/urldna_bot/status/1956717613272203659","timestamp":"1755352807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2889afad-2307-50f4-83d4-05b9c182a2bb","type":"url","category":"Network activity","to_ids":true,"value":"https://bank-of-usa.vercel.app","comment":"https://x.com/urldna_bot/status/1956717613272203659","timestamp":"1755352807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"21417719-5b2d-5165-ab76-0f8f3d7de859","type":"md5","category":"Payload delivery","to_ids":true,"value":"0b37276f131f56adbe2fa62092b11cfb","comment":"https://x.com/ReBensk/status/1956718050578927909","timestamp":"1755352911","distribution":"5","Tag":[{"name":"malware"},{"name":"Trojan"},{"name":"Android"}]},{"uuid":"d8233b7d-dbe7-5cc1-8f2a-065beb8dca2b","type":"domain","category":"Network activity","to_ids":true,"value":"faceit.eternalsgamingcs.com","comment":"https://x.com/urldna_bot/status/1956747810977550389","timestamp":"1755360007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0dca1fc2-b031-5e4d-bd7c-417478edd920","type":"url","category":"Network activity","to_ids":true,"value":"https://faceit.eternalsgamingcs.com","comment":"https://x.com/urldna_bot/status/1956747810977550389","timestamp":"1755360007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"62e81c2a-a65c-5e04-8c11-528a7ea922e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.83.97.12","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"bd017118-88da-5e2e-a626-4bd7ab633ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.75.201.77","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"8510c4f5-8a91-51b1-956a-bece51c089bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.9.137","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"3f1acb36-b3bc-5ec2-ab4a-21d975b448c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.132.181.168","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"c6c4516d-2c1c-5beb-93af-bad86c323b90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.242.217.84","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"d1afff5d-1576-516e-96ca-8de5106a0e3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.137.82","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"ca82318c-e529-58d9-8bb4-280269c80a42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.142.213.105","comment":"https://x.com/FalconFeedsio/status/1956754589572825106","timestamp":"1755361623","distribution":"5"},{"uuid":"f6a18ac0-e2d3-559b-a617-77ea9c0317f6","type":"domain","category":"Network activity","to_ids":true,"value":"psanda.co.za","comment":"https://x.com/urldna_bot/status/1956778011493122354","timestamp":"1755367207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"51c862c9-36d1-5272-8b4f-e199559fda3e","type":"url","category":"Network activity","to_ids":true,"value":"https://psanda.co.za","comment":"https://x.com/urldna_bot/status/1956778011493122354","timestamp":"1755367207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ca4620fd-1a68-5dce-89d7-dedc83e9419c","type":"domain","category":"Network activity","to_ids":true,"value":"t-k-shop-download.top","comment":"https://x.com/urldna_bot/status/1956808224385974429","timestamp":"1755374411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cff867d1-37d7-508d-abb1-cba1f460e8ce","type":"url","category":"Network activity","to_ids":true,"value":"http://t-k-shop-download.top","comment":"https://x.com/urldna_bot/status/1956808224385974429","timestamp":"1755374411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8df7d139-0373-5fd1-aacf-4ad64ca27621","type":"url","category":"Network activity","to_ids":true,"value":"http://16.163.24.117","comment":"https://x.com/threatquery/status/1956823304305561834","timestamp":"1755378006","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"5b602138-5a90-523b-a0e9-c9d3e1ecd33e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.163.24.117","comment":"https://x.com/threatquery/status/1956823304305561834","timestamp":"1755378006","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"41948cd8-f787-5bf7-a913-e0a6941755ab","type":"url","category":"Network activity","to_ids":true,"value":"http://45.83.207.35","comment":"https://x.com/threatquery/status/1956823309053501941","timestamp":"1755378007","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"91441d9f-9c69-5f29-aac4-ae4d8d8517e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.83.207.35","comment":"https://x.com/threatquery/status/1956823309053501941","timestamp":"1755378007","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"e13d3d9d-9e13-5ffe-ace0-a3c70657e372","type":"url","category":"Network activity","to_ids":true,"value":"http://193.134.209.94","comment":"https://x.com/threatquery/status/1956823312090140950","timestamp":"1755378008","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ec5f33c7-173b-52c2-b794-a7ca13cf4d3b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.134.209.94","comment":"https://x.com/threatquery/status/1956823312090140950","timestamp":"1755378008","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"41faabcd-3372-5499-b58c-c8318d9d7ce3","type":"domain","category":"Network activity","to_ids":true,"value":"01-l786855.replit.app","comment":"https://x.com/ViriBack/status/1956825046443286663","timestamp":"1755378421","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"802abf17-cc33-5230-84ba-8b282b98f39b","type":"url","category":"Network activity","to_ids":true,"value":"https://01-l786855.replit.app/gate.php","comment":"https://x.com/ViriBack/status/1956825046443286663","timestamp":"1755378421","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3009bc2a-eac0-5b96-a4f6-1a7a2a4e8689","type":"url","category":"Network activity","to_ids":true,"value":"https://01-l786855.replit.app/login.php","comment":"https://x.com/ViriBack/status/1956825046443286663","timestamp":"1755378421","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"41188101-7554-50f5-98f0-aaa772b0f5d5","type":"md5","category":"Payload delivery","to_ids":true,"value":"c28ae2a5b3d3b1f79935325a8d998f39","comment":"https://x.com/ViriBack/status/1956825046443286663","timestamp":"1755378421","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0721cdaf-55de-5001-ab99-8aa0069e7e5f","type":"domain","category":"Network activity","to_ids":true,"value":"facturation-ameli.com","comment":"https://x.com/urldna_bot/status/1956838406975066488","timestamp":"1755381607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c202f501-efc5-5727-b6aa-7e4e24890304","type":"url","category":"Network activity","to_ids":true,"value":"http://facturation-ameli.com","comment":"https://x.com/urldna_bot/status/1956838406975066488","timestamp":"1755381607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ac48aad8-2f0f-54ca-bfe1-5b35a4b0cbae","type":"domain","category":"Network activity","to_ids":true,"value":"betting-88.com","comment":"https://x.com/catnap707/status/1956863795646877703","timestamp":"1755387660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"07ecb2ae-0f2a-5662-b738-45cdd0f3cb62","type":"url","category":"Network activity","to_ids":true,"value":"http://betting-88.com/visitor","comment":"https://x.com/catnap707/status/1956863795646877703","timestamp":"1755387660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15589ebd-8c78-5a31-9008-b341a0d30212","type":"domain","category":"Network activity","to_ids":true,"value":"bullzonepro.icu","comment":"https://x.com/catnap707/status/1956863795646877703","timestamp":"1755387660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a8b1428-6932-512c-b53f-d8fbc8c722c0","type":"url","category":"Network activity","to_ids":true,"value":"http://bullzonepro.icu/co.jp/ETGate=sbi/","comment":"https://x.com/catnap707/status/1956863795646877703","timestamp":"1755387660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aea238df-004d-5d21-9383-d6819961abba","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.220.95","comment":"https://x.com/catnap707/status/1956863795646877703","timestamp":"1755387660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"842a9775-e0d7-5410-951a-1eb2f3edad1a","type":"domain","category":"Network activity","to_ids":true,"value":"applebootstrap.vercel.app","comment":"https://x.com/urldna_bot/status/1956868613886927331","timestamp":"1755388809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2c4a3181-763e-5a34-a3bf-8017d7094f12","type":"url","category":"Network activity","to_ids":true,"value":"http://applebootstrap.vercel.app","comment":"https://x.com/urldna_bot/status/1956868613886927331","timestamp":"1755388809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"23e4f5ba-d82b-5a74-9c08-02ff3124719e","type":"domain","category":"Network activity","to_ids":true,"value":"mysitecentrum.weebly.com","comment":"https://x.com/urldna_bot/status/1956898803899945149","timestamp":"1755396006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bad3b5cb-4cad-52b3-9572-64bc6f1b6827","type":"url","category":"Network activity","to_ids":true,"value":"https://mysitecentrum.weebly.com","comment":"https://x.com/urldna_bot/status/1956898803899945149","timestamp":"1755396006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b3147fbd-e819-57b3-9490-3beea19aad23","type":"domain","category":"Network activity","to_ids":true,"value":"btreiyrstakxn-cjserpqonuaxh.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1956929000166592874","timestamp":"1755403206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bde246f8-c4e2-517f-b80e-85cf900c50d0","type":"url","category":"Network activity","to_ids":true,"value":"https://btreiyrstakxn-cjserpqonuaxh.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1956929000166592874","timestamp":"1755403206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"259f77f5-b95b-57d3-aa0f-a8b5d98ceb1c","type":"domain","category":"Network activity","to_ids":true,"value":"gmx-login-web.weebly.com","comment":"https://x.com/urldna_bot/status/1956959215831937370","timestamp":"1755410410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9835802a-5cc0-5a46-979c-65d84748f888","type":"url","category":"Network activity","to_ids":true,"value":"https://gmx-login-web.weebly.com","comment":"https://x.com/urldna_bot/status/1956959215831937370","timestamp":"1755410410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e47aa2af-739f-5e50-9f13-e7c6184e7d54","type":"domain","category":"Network activity","to_ids":true,"value":"telstrappointt.weebly.com","comment":"https://x.com/urldna_bot/status/1956989401495437742","timestamp":"1755417607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d944cf7f-d802-5ce4-a033-0c8028a5fbea","type":"url","category":"Network activity","to_ids":true,"value":"https://telstrappointt.weebly.com","comment":"https://x.com/urldna_bot/status/1956989401495437742","timestamp":"1755417607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"db9a0acf-68ea-5565-bdf0-caf11b396b7e","type":"domain","category":"Network activity","to_ids":true,"value":"v-vpass-jp.xueqiaowang.com","comment":"https://x.com/masaomi346/status/1956992265643237432","timestamp":"1755418289","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"737ce28e-6e81-5aea-8ef8-1dd37d41a82b","type":"url","category":"Network activity","to_ids":true,"value":"https://v-vpass-jp.xueqiaowang.com","comment":"https://x.com/masaomi346/status/1956992265643237432","timestamp":"1755418289","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceb4c718-78b2-5b7d-bfa3-fe39ccf58e9d","type":"domain","category":"Network activity","to_ids":true,"value":"classicalmesh.com","comment":"https://x.com/harugasumi/status/1956996647378125175","timestamp":"1755419334","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df341c22-6e63-58dc-9790-afce1e4847c6","type":"url","category":"Network activity","to_ids":true,"value":"https://classicalmesh.com","comment":"https://x.com/harugasumi/status/1956996647378125175","timestamp":"1755419334","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"084943e4-facf-5048-94b3-0ae81d144381","type":"domain","category":"Network activity","to_ids":true,"value":"cb2373.cdn.91fangyu.com","comment":"https://x.com/harugasumi/status/1956998368934453290","timestamp":"1755419745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5d8ea02c-674d-5e3d-baf0-6cc40f75e850","type":"url","category":"Network activity","to_ids":true,"value":"http://cb2373.cdn.91fangyu.com","comment":"https://x.com/harugasumi/status/1956998368934453290","timestamp":"1755419745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60849ca3-17f1-59f7-9b6e-968b7b28240f","type":"domain","category":"Network activity","to_ids":true,"value":"2373cdn.ddcc.51ddos.com","comment":"https://x.com/harugasumi/status/1956998368934453290","timestamp":"1755419745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"216b2fbc-4cfc-524e-9ab7-54e77f7f38bc","type":"url","category":"Network activity","to_ids":true,"value":"http://2373cdn.ddcc.51ddos.com","comment":"https://x.com/harugasumi/status/1956998368934453290","timestamp":"1755419745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1c77832-3613-5f66-b1da-28aaf1c1bf8c","type":"domain","category":"Network activity","to_ids":true,"value":"bafkreib24vgv52m5ysam2cyz62dpww6hgcpgjamzilhljhmquzp2uh66iu.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1957019605832007904","timestamp":"1755424808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9bfee122-3a5c-58a9-9974-b55fba38b731","type":"url","category":"Network activity","to_ids":true,"value":"https://bafkreib24vgv52m5ysam2cyz62dpww6hgcpgjamzilhljhmquzp2uh66iu.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1957019605832007904","timestamp":"1755424808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aca23821-0d89-5676-97bd-1a550452e0b6","type":"url","category":"Network activity","to_ids":true,"value":"https://t.me/knt_dev","comment":"https://x.com/JAMESWT_WT/status/1957042675435397347","timestamp":"1755430308","distribution":"5"},{"uuid":"4b98dcea-6847-5b22-b0f1-1a2219419924","type":"domain","category":"Network activity","to_ids":true,"value":"842b84ca-db8f-41ca-9b26-8f1ed5ed91b5-00-22ogy2yez54ai.riker.replit.dev","comment":"https://x.com/urldna_bot/status/1957049804627833011","timestamp":"1755432008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"72342f46-df07-5970-99d1-290624dc4a48","type":"url","category":"Network activity","to_ids":true,"value":"http://842b84ca-db8f-41ca-9b26-8f1ed5ed91b5-00-22ogy2yez54ai.riker.replit.dev","comment":"https://x.com/urldna_bot/status/1957049804627833011","timestamp":"1755432008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8d7a451c-ddd7-58ee-bf9a-871556aefe13","type":"domain","category":"Network activity","to_ids":true,"value":"msportpromobonus.weebly.com","comment":"https://x.com/urldna_bot/status/1957080001250996652","timestamp":"1755439207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e89598ce-3ee1-59be-9911-b4543b5f2a08","type":"url","category":"Network activity","to_ids":true,"value":"https://msportpromobonus.weebly.com","comment":"https://x.com/urldna_bot/status/1957080001250996652","timestamp":"1755439207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9889a4ff-ae91-5d51-a22b-7f1e70009b85","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:6053","comment":"https://x.com/SarlackLab/status/1957095208828424455","timestamp":"1755442833","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"8d72e2d0-d8a1-54b6-9531-d8e8b3299fec","type":"domain","category":"Network activity","to_ids":true,"value":"jne7ovfut.localto.net","comment":"https://x.com/SarlackLab/status/1957095208828424455","timestamp":"1755442833","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"b7eaeb57-0339-5a6b-b83e-dac9b5729a3d","type":"url","category":"Network activity","to_ids":true,"value":"http://jne7ovfut.localto.net","comment":"https://x.com/SarlackLab/status/1957095208828424455","timestamp":"1755442833","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a8e007e4-0292-5dac-8bce-2e8ce13a5bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.194.35.243","comment":"https://x.com/SarlackLab/status/1957095208828424455","timestamp":"1755442833","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c349703d-3e10-5a3e-9356-ee6ea9eae509","type":"domain","category":"Network activity","to_ids":true,"value":"twfrfh.weebly.com","comment":"https://x.com/urldna_bot/status/1957110195944857721","timestamp":"1755446406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0bea3b40-ba19-525f-8f2b-63808cfaefe9","type":"url","category":"Network activity","to_ids":true,"value":"https://twfrfh.weebly.com","comment":"https://x.com/urldna_bot/status/1957110195944857721","timestamp":"1755446406","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b6f1e872-f848-5071-ba38-0eb9f51a3b64","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:6677","comment":"https://x.com/SarlackLab/status/1957110256196006081","timestamp":"1755446421","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e3eaabac-bf41-5fae-8a98-932f7c10cb35","type":"domain","category":"Network activity","to_ids":true,"value":"yohlkdt3m.localto.net","comment":"https://x.com/SarlackLab/status/1957110256196006081","timestamp":"1755446421","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"44e2d207-ce0a-589e-902d-e5a0e74f9549","type":"url","category":"Network activity","to_ids":true,"value":"http://yohlkdt3m.localto.net","comment":"https://x.com/SarlackLab/status/1957110256196006081","timestamp":"1755446421","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"41227b8b-f545-5528-a37d-c5d44c55329c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:8122","comment":"https://x.com/SarlackLab/status/1957110571666460973","timestamp":"1755446496","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"08e744a9-1f98-5c4a-b225-f6b09caa3e5f","type":"domain","category":"Network activity","to_ids":true,"value":"j4gn7dcux.localto.net","comment":"https://x.com/SarlackLab/status/1957110571666460973","timestamp":"1755446496","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"ad68aa9c-4120-57db-8e25-45a2cf45c464","type":"url","category":"Network activity","to_ids":true,"value":"http://j4gn7dcux.localto.net","comment":"https://x.com/SarlackLab/status/1957110571666460973","timestamp":"1755446496","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"75179da5-b734-5798-8d2e-8e3139ba0448","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:6258","comment":"https://x.com/SarlackLab/status/1957125363907047621","timestamp":"1755450023","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"531b67da-56f3-5551-8b44-7c5afe310102","type":"domain","category":"Network activity","to_ids":true,"value":"bio.link","comment":"https://x.com/ShadowOpCode/status/1957136638082978028","timestamp":"1755452711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab81a90e-295d-5749-a64c-61ade7fdb58c","type":"url","category":"Network activity","to_ids":true,"value":"https://bio.link/leviueeg","comment":"https://x.com/ShadowOpCode/status/1957136638082978028","timestamp":"1755452711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82208908-ad57-5ef3-8197-0a1a18bb2d4d","type":"domain","category":"Network activity","to_ids":true,"value":"areaprivatalt.chickenkiller.com","comment":"https://x.com/ShadowOpCode/status/1957136638082978028","timestamp":"1755452711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a6a57d8-d091-5315-8989-bc14ed7847e7","type":"url","category":"Network activity","to_ids":true,"value":"https://areaprivatalt.chickenkiller.com/main/client/login.php?redirect=https%3A%2F%2Fareaprivatalt.chickenkiller.com%2Fmain%2F","comment":"https://x.com/ShadowOpCode/status/1957136638082978028","timestamp":"1755452711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7b5def4-e190-5d0f-8dd8-0a980c17c28a","type":"domain","category":"Network activity","to_ids":true,"value":"k36578.com","comment":"https://x.com/urldna_bot/status/1957140396791759207","timestamp":"1755453607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"60f9d4be-f24f-50e9-8bd6-c1c7cc95b490","type":"url","category":"Network activity","to_ids":true,"value":"http://k36578.com","comment":"https://x.com/urldna_bot/status/1957140396791759207","timestamp":"1755453607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"62b33325-7c49-5cbd-97af-94b0abb47f26","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.230:1912","comment":"https://x.com/SarlackLab/status/1957140476902936727","timestamp":"1755453626","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"c486303a-d86f-5adc-9e5c-9d071665d265","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.230","comment":"https://x.com/SarlackLab/status/1957140476902936727","timestamp":"1755453626","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"4fb70e26-e2a4-5ef1-837b-82830b9b3eb0","type":"url","category":"Network activity","to_ids":true,"value":"http://103.204.79.118:448","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"c15041ad-c985-5403-be16-96024de774a4","type":"url","category":"Network activity","to_ids":true,"value":"http://103.204.79.114:448","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"fc773aef-d552-5a95-800c-b22b39ea40f6","type":"domain","category":"Network activity","to_ids":true,"value":"5201314999.com:448","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"1d0ecb09-0c8c-58c0-87e9-36c55b4ce3a0","type":"url","category":"Network activity","to_ids":true,"value":"http://5201314999.com:448/NetSyst87.dll","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"21b61478-7e25-525d-ae17-2cf6c602cb33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.204.79.118","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"e521094f-d310-5203-a8fd-139bdbc9f983","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.204.79.114","comment":"https://x.com/smica83/status/1957150632093057227","timestamp":"1755456047","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"98ac8770-b61f-56cf-9c2c-e02078f1a1f2","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.23:26149","comment":"https://x.com/SarlackLab/status/1957155556176609433","timestamp":"1755457221","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"1032944c-fae2-523c-b415-3aa8a216d8c7","type":"domain","category":"Network activity","to_ids":true,"value":"just-rss.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1957155556176609433","timestamp":"1755457221","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"eab9b74f-4b01-550c-9cba-0c476cc63cb8","type":"url","category":"Network activity","to_ids":true,"value":"http://just-rss.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1957155556176609433","timestamp":"1755457221","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c1473f90-dd01-5171-a82e-fd5b7c372b43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.23","comment":"https://x.com/SarlackLab/status/1957155556176609433","timestamp":"1755457221","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"07904def-04bf-5cb1-83f5-3b1c767cff22","type":"url","category":"Network activity","to_ids":true,"value":"https://t.me/Ktama_Official","comment":"https://x.com/skocherhan/status/1957164743799796172","timestamp":"1755459411","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"281f1813-608f-5c9e-ad8e-b4c1df7aa0eb","type":"domain","category":"Network activity","to_ids":true,"value":"site-0kozkr163.godaddysites.com","comment":"https://x.com/urldna_bot/status/1957170597571571899","timestamp":"1755460807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dc93fbb5-fe09-5493-9983-530fc3d5ba5f","type":"url","category":"Network activity","to_ids":true,"value":"https://site-0kozkr163.godaddysites.com","comment":"https://x.com/urldna_bot/status/1957170597571571899","timestamp":"1755460807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"52fdc6cd-2b2d-5934-b549-ab9494ebc9db","type":"url","category":"Network activity","to_ids":true,"value":"http://52.19.11.153","comment":"https://x.com/threatquery/status/1957185681660240360","timestamp":"1755464403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"6aa86d50-d0b7-5b8b-91dd-4e85f4f2cfab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.19.11.153","comment":"https://x.com/threatquery/status/1957185681660240360","timestamp":"1755464403","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"5ae4e0df-27e0-5ebe-9968-1a37362e1a25","type":"url","category":"Network activity","to_ids":true,"value":"http://162.215.23.136","comment":"https://x.com/threatquery/status/1957185685615448307","timestamp":"1755464404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Supershell"}]},{"uuid":"3e6fd0bf-3fdd-57c4-a17f-f12438a39681","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.215.23.136","comment":"https://x.com/threatquery/status/1957185685615448307","timestamp":"1755464404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Supershell"}]},{"uuid":"494af4e8-0625-56bf-af90-83204435ab91","type":"url","category":"Network activity","to_ids":true,"value":"http://103.167.27.137","comment":"https://x.com/threatquery/status/1957185683790893524","timestamp":"1755464404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"c601f592-6697-5db7-b89e-4eb5ff598225","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.167.27.137","comment":"https://x.com/threatquery/status/1957185683790893524","timestamp":"1755464404","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"f59061e6-4118-55db-8027-0b3056c7030d","type":"domain","category":"Network activity","to_ids":true,"value":"inte-zim-updatey.weebly.com","comment":"https://x.com/urldna_bot/status/1957200798682616115","timestamp":"1755468008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b4505743-499d-541b-bdaf-2b12dcdec9df","type":"url","category":"Network activity","to_ids":true,"value":"https://inte-zim-updatey.weebly.com","comment":"https://x.com/urldna_bot/status/1957200798682616115","timestamp":"1755468008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"66b19a0b-411a-5ea5-be41-20b78529d503","type":"domain","category":"Network activity","to_ids":true,"value":"www1-hotmailsmt-docomojapanse.cotti.site","comment":"https://x.com/masaomi346/status/1957213724340806084","timestamp":"1755471089","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f580d0d6-d26b-57bb-b195-a4a0ea39a68a","type":"url","category":"Network activity","to_ids":true,"value":"https://www1-hotmailsmt-docomojapanse.cotti.site/src/index.html/","comment":"https://x.com/masaomi346/status/1957213724340806084","timestamp":"1755471089","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"765e24a4-3b9d-5e3e-ac85-8adf42c2ae2e","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.31:11800","comment":"https://x.com/SarlackLab/status/1957215954653352318","timestamp":"1755471621","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"9bb7a8f2-0bad-5a16-bd70-31f5ebfa9b50","type":"domain","category":"Network activity","to_ids":true,"value":"transfer-hero.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1957215954653352318","timestamp":"1755471621","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"b3bc23d2-3f22-504b-84c7-542994cb11af","type":"url","category":"Network activity","to_ids":true,"value":"http://transfer-hero.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1957215954653352318","timestamp":"1755471621","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2a2ed3cb-2370-5b81-a9b7-c1eea1404aa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.31","comment":"https://x.com/SarlackLab/status/1957215954653352318","timestamp":"1755471621","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"500790d3-5931-5463-a98c-f7c4f04d7f5e","type":"domain","category":"Network activity","to_ids":true,"value":"webup-app.com","comment":"https://x.com/urldna_bot/status/1957231004084576313","timestamp":"1755475209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"86c38a09-4549-53c9-9b6a-cd095ff0e434","type":"url","category":"Network activity","to_ids":true,"value":"https://webup-app.com/ser/db/index/liO/customer_center/user-066433/","comment":"https://x.com/urldna_bot/status/1957231004084576313","timestamp":"1755475209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"adb79955-ee20-549f-9ec2-d2e064cf4d9a","type":"md5","category":"Payload delivery","to_ids":true,"value":"ec6d283651393e5daff7449cecc08e5d","comment":"https://x.com/fbgwls245/status/1957243578583028216","timestamp":"1755478207","distribution":"5"},{"uuid":"447eb310-912c-5963-81de-90326a9ee035","type":"domain","category":"Network activity","to_ids":true,"value":"btinternet7t543dfjk.weebly.com","comment":"https://x.com/urldna_bot/status/1957261195246776348","timestamp":"1755482407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"adc6c962-d205-53db-9630-12fef0c1701d","type":"url","category":"Network activity","to_ids":true,"value":"https://btinternet7t543dfjk.weebly.com","comment":"https://x.com/urldna_bot/status/1957261195246776348","timestamp":"1755482407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d861f43c-e2d3-5f57-97c3-7ddc9738caba","type":"domain","category":"Network activity","to_ids":true,"value":"login.daiwalog.cfd","comment":"https://x.com/masaomi346/status/1957289776345964819","timestamp":"1755489222","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b865015-3eec-5b2c-8893-38efc64c5d96","type":"url","category":"Network activity","to_ids":true,"value":"https://login.daiwalog.cfd/PCC/","comment":"https://x.com/masaomi346/status/1957289776345964819","timestamp":"1755489222","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f02217d-7fa2-561d-b9cf-0fbf00be5cf0","type":"domain","category":"Network activity","to_ids":true,"value":"wtye662hdjjkd9f90wmdjj226did883d.weebly.com","comment":"https://x.com/urldna_bot/status/1957291389680599358","timestamp":"1755489606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"576f9c4e-0295-5178-bd4e-a593efe26da7","type":"url","category":"Network activity","to_ids":true,"value":"https://wtye662hdjjkd9f90wmdjj226did883d.weebly.com","comment":"https://x.com/urldna_bot/status/1957291389680599358","timestamp":"1755489606","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"846fe559-eecf-5e3d-aaf1-2fe19f557d5d","type":"md5","category":"Payload delivery","to_ids":true,"value":"b6ce193bee0b906ee57c0a0ec4dcedb4","comment":"https://x.com/ReBensk/status/1957315875574296880","timestamp":"1755495444","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"46e51457-b363-5b1d-995e-d9abdee9190d","type":"domain","category":"Network activity","to_ids":true,"value":"webupgradeteam-com.weebly.com","comment":"https://x.com/urldna_bot/status/1957321597448073465","timestamp":"1755496808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"468a6d77-a87d-5e9e-81ca-b66970df0d78","type":"url","category":"Network activity","to_ids":true,"value":"https://webupgradeteam-com.weebly.com","comment":"https://x.com/urldna_bot/status/1957321597448073465","timestamp":"1755496808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"118c688b-be53-50c7-95f3-703bb5778087","type":"md5","category":"Payload delivery","to_ids":true,"value":"008d37384874e315b82cdd41ebe8e5c2","comment":"https://x.com/suyog41/status/1957325079630737829","timestamp":"1755497638","distribution":"5"},{"uuid":"42ab05fd-351d-5c7a-a54c-9c8e68fafe36","type":"md5","category":"Payload delivery","to_ids":true,"value":"b9ab6f726043b0280d471378251c87fd","comment":"https://x.com/suyog41/status/1957325079630737829","timestamp":"1755497638","distribution":"5"},{"uuid":"3bd025ad-0467-5750-994a-d1f8a5aa1157","type":"md5","category":"Payload delivery","to_ids":true,"value":"7a3f11724aec0d5c76a92f5d9c03cd65","comment":"https://x.com/suyog41/status/1957325079630737829","timestamp":"1755497638","distribution":"5"},{"uuid":"eed3d2b3-f7db-5d93-a354-90b49366c20b","type":"md5","category":"Payload delivery","to_ids":true,"value":"f056ff27f7a95e019deb3bc6008499eb","comment":"https://x.com/suyog41/status/1957325079630737829","timestamp":"1755497638","distribution":"5"},{"uuid":"a79293ca-350f-5d33-8903-0df82ab7b1a8","type":"md5","category":"Payload delivery","to_ids":true,"value":"5ddfffae3cd0cc3d93943974c0299024","comment":"https://x.com/suyog41/status/1957325079630737829","timestamp":"1755497638","distribution":"5"},{"uuid":"1e331a3f-3e42-5a04-a3d6-5bbba5a2ef23","type":"md5","category":"Payload delivery","to_ids":true,"value":"a8ee2e13f11fed7b960067ec781512cb","comment":"https://x.com/suyog41/status/1957332351966494931","timestamp":"1755499372","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"335c9c48-e4a2-5f13-82c0-09202e61b99b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c2e152f6ebfc2e625edb1217e0d28a9c21ba5bfb43cfe5339fb4ab7fdcc51f4b","comment":"https://x.com/skocherhan/status/1957334238598221941","timestamp":"1755499822","distribution":"5"},{"uuid":"0e915986-215f-53f6-93f0-5d11fcd141f2","type":"domain","category":"Network activity","to_ids":true,"value":"portal-nhifssev0red.weebly.com","comment":"https://x.com/urldna_bot/status/1957351803067965609","timestamp":"1755504010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"23423f94-ae1c-51cd-930c-386047809f4e","type":"url","category":"Network activity","to_ids":true,"value":"https://portal-nhifssev0red.weebly.com","comment":"https://x.com/urldna_bot/status/1957351803067965609","timestamp":"1755504010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0bc5e76d-8bbf-5647-9a69-7017158ba77f","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.106:5085","comment":"https://x.com/SarlackLab/status/1957351832386175065","timestamp":"1755504017","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"43b7dfac-06c1-5d5a-bcf9-2908f581bf67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.106","comment":"https://x.com/SarlackLab/status/1957351832386175065","timestamp":"1755504017","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"93b64b0c-1b66-5560-b88e-517bf4fb596a","type":"md5","category":"Payload delivery","to_ids":true,"value":"3d4059721cf5f8ab81a84dbdefccf418","comment":"https://x.com/skocherhan/status/1957365857597686254","timestamp":"1755507361","distribution":"5"},{"uuid":"2cd0c31c-7083-57dc-803a-a912abf16c8f","type":"domain","category":"Network activity","to_ids":true,"value":"dogestealer.site","comment":"https://x.com/suyog41/status/1957370087217992025","timestamp":"1755508369","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"fab6b300-17cd-585c-bece-ef5a44f8f4da","type":"md5","category":"Payload delivery","to_ids":true,"value":"4dfc3c7d0e99bf4e62d05b40e9233a9e","comment":"https://x.com/suyog41/status/1957370087217992025","timestamp":"1755508369","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"b7787ab4-03bf-5937-b445-140eafad32d1","type":"url","category":"Network activity","to_ids":true,"value":"http://dogestealer.site","comment":"https://x.com/suyog41/status/1957370087217992025","timestamp":"1755508369","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"285c20cf-bef0-5d99-b448-cfce34cd08a6","type":"url","category":"Network activity","to_ids":true,"value":"http://d1ge.xyz","comment":"https://x.com/suyog41/status/1957370087217992025","timestamp":"1755508369","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"96b456a5-a2b9-58ff-925a-8874af34afa2","type":"domain","category":"Network activity","to_ids":true,"value":"d1ge.xyz","comment":"https://x.com/suyog41/status/1957370087217992025","timestamp":"1755508369","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"eb25b4fa-1024-5bb5-ba3a-9c040f1fe0c1","type":"url","category":"Network activity","to_ids":true,"value":"https://wakeupanddreamchallenge.info","comment":"https://x.com/urldna_bot/status/1957381995874406427","timestamp":"1755511208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f9964f18-2f15-5275-80e4-16eb40f76ef2","type":"domain","category":"Network activity","to_ids":true,"value":"wakeupanddreamchallenge.info","comment":"https://x.com/urldna_bot/status/1957381995874406427","timestamp":"1755511208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e8dd3071-94b4-5f6b-aa97-2883e11e266d","type":"url","category":"Network activity","to_ids":true,"value":"http://kwalive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e6397e72-6b52-5d94-9ed0-5f31b0bdf8bf","type":"url","category":"Network activity","to_ids":true,"value":"http://soldxh.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"65e0a3a3-ff1a-5caa-bb46-8283a5ff3958","type":"url","category":"Network activity","to_ids":true,"value":"http://njqlive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7c511f64-2f35-5016-b9ac-6e4974d6f7f7","type":"domain","category":"Network activity","to_ids":true,"value":"bdglive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2d1ae1d4-1465-560a-be42-1f5c4ce92a45","type":"url","category":"Network activity","to_ids":true,"value":"http://bdglive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bc25d442-fa8a-5aa4-9284-07f6d397999f","type":"domain","category":"Network activity","to_ids":true,"value":"carefst.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"953b2eb3-3a92-5eff-87a5-1af60882e955","type":"domain","category":"Network activity","to_ids":true,"value":"njqlive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"35710003-e81b-5a36-b7cd-2187cbdfe040","type":"domain","category":"Network activity","to_ids":true,"value":"soldxh.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"95ee11d4-5778-543b-9864-27751dae2536","type":"domain","category":"Network activity","to_ids":true,"value":"kwalive.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9a81de98-e325-5c2d-b9f4-e810540a185b","type":"domain","category":"Network activity","to_ids":true,"value":"solwzi.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f1ff1619-ec76-5721-9f22-f3633045e92a","type":"domain","category":"Network activity","to_ids":true,"value":"m.wpahelp.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"049ef192-7207-51fd-9e01-73b6bd6d42a1","type":"url","category":"Network activity","to_ids":true,"value":"http://carefst.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3d8d95a7-3ed0-5d9a-9733-409daf2ac9b3","type":"url","category":"Network activity","to_ids":true,"value":"http://m.wpahelp.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d62a287e-0087-5243-a814-a63bba43e90a","type":"domain","category":"Network activity","to_ids":true,"value":"livecxn.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"40496132-1117-5e38-80fb-08b211ce2810","type":"url","category":"Network activity","to_ids":true,"value":"http://livecxn.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d55b8d47-8ab0-5202-8952-6e981c1885ca","type":"domain","category":"Network activity","to_ids":true,"value":"pgmhelp.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9c01db8e-77ad-5f94-9538-0eea24add3e4","type":"url","category":"Network activity","to_ids":true,"value":"http://pgmhelp.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2c107120-d9f8-508a-a7b2-2da40a972dc7","type":"url","category":"Network activity","to_ids":true,"value":"http://solwzi.top","comment":"https://x.com/FABO97662188/status/1957382035762200918","timestamp":"1755511218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3f5c579b-bf67-5ca6-8212-38fa31986b67","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.215.71","comment":"https://x.com/Metemcyber/status/1957383257797837291","timestamp":"1755511509","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13ca688f-4ba0-56b2-b118-79be6761e536","type":"domain","category":"Network activity","to_ids":true,"value":"visitian.huaimikeji.cn","comment":"https://x.com/Metemcyber/status/1957383257797837291","timestamp":"1755511509","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5a075d8-3aa2-5031-a454-41ad59f08673","type":"url","category":"Network activity","to_ids":true,"value":"https://visitian.huaimikeji.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1957383257797837291","timestamp":"1755511509","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69b22a51-3a2a-591c-b923-4e71a44a3127","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.24.10","comment":"https://x.com/Metemcyber/status/1957383257797837291","timestamp":"1755511509","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af1e2859-0282-5cea-9828-a326c278e1e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.177.200.47","comment":"https://x.com/solostalking/status/1957384552457884125","timestamp":"1755511818","distribution":"5"},{"uuid":"afc5862b-85af-58aa-b99f-0152477d708c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.215.240.118","comment":"https://x.com/solostalking/status/1957384552457884125","timestamp":"1755511818","distribution":"5"},{"uuid":"8a84e880-904a-5abc-9113-e63209bed3ab","type":"domain","category":"Network activity","to_ids":true,"value":"memoryrium.fengyunqi.cn","comment":"https://x.com/Metemcyber/status/1957384586549428409","timestamp":"1755511826","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8f00391-d0df-5921-bc19-aef1ebe3a74b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.39.183","comment":"https://x.com/Metemcyber/status/1957384586549428409","timestamp":"1755511826","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e338d4df-58c6-51f8-821a-9e84a36bb333","type":"url","category":"Network activity","to_ids":true,"value":"https://memoryrium.fengyunqi.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1957384586549428409","timestamp":"1755511826","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"deb2a54b-fd03-5918-89d5-5a8c9400f4e0","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.171.45","comment":"https://x.com/Metemcyber/status/1957384586549428409","timestamp":"1755511826","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23d3fa99-0b0a-5c84-a3dc-a37a9eb7d77d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.201.190","comment":"https://x.com/Metemcyber/status/1957389727705022517","timestamp":"1755513052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d755801e-6433-5ee4-9e54-ba106c719c29","type":"domain","category":"Network activity","to_ids":true,"value":"melanproof.elexinq.cn","comment":"https://x.com/Metemcyber/status/1957389727705022517","timestamp":"1755513052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e1169dd-9069-57ff-88cf-56245d4db541","type":"url","category":"Network activity","to_ids":true,"value":"https://melanproof.elexinq.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1957389727705022517","timestamp":"1755513052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1d7e301-9f20-5000-a8aa-f0dead147679","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.82.114","comment":"https://x.com/Metemcyber/status/1957389727705022517","timestamp":"1755513052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe505f96-312e-53ae-b592-3390e1d2ba32","type":"domain","category":"Network activity","to_ids":true,"value":"Citydev.brussels","comment":"https://x.com/FalconFeedsio/status/1957391094028878049","timestamp":"1755513378","distribution":"5"},{"uuid":"efb435cf-c4a5-5cc5-a10b-ff5312225869","type":"url","category":"Network activity","to_ids":true,"value":"http://Citydev.brussels","comment":"https://x.com/FalconFeedsio/status/1957391094028878049","timestamp":"1755513378","distribution":"5"},{"uuid":"e97b908c-1123-5493-bae2-586de1abfdf0","type":"domain","category":"Network activity","to_ids":true,"value":"horkyrown.com","comment":"https://x.com/TechNadu/status/1957406091802767675","timestamp":"1755516953","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf9c528f-b805-51f6-94e0-e4c8fe79327f","type":"url","category":"Network activity","to_ids":true,"value":"http://horkyrown.com","comment":"https://x.com/TechNadu/status/1957406091802767675","timestamp":"1755516953","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db011aa0-0b8b-5229-93f4-751a10e7f82f","type":"domain","category":"Network activity","to_ids":true,"value":"apples-care-service7p3.vercel.app","comment":"https://x.com/urldna_bot/status/1957412192573153703","timestamp":"1755518408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a8a8ffa9-719d-563a-b86e-549f49bb10c6","type":"url","category":"Network activity","to_ids":true,"value":"http://apples-care-service7p3.vercel.app","comment":"https://x.com/urldna_bot/status/1957412192573153703","timestamp":"1755518408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"77ac8759-3e29-5e7f-865b-f83986690fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://lwtgiajga.localto.net","comment":"https://x.com/SarlackLab/status/1957427375903293698","timestamp":"1755522028","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"91686d68-2a71-554c-9632-776f859e9631","type":"domain","category":"Network activity","to_ids":true,"value":"lwtgiajga.localto.net","comment":"https://x.com/SarlackLab/status/1957427375903293698","timestamp":"1755522028","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"f149316e-368d-547c-9c18-e2d94d858a26","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:1658","comment":"https://x.com/SarlackLab/status/1957427375903293698","timestamp":"1755522028","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ea10bc27-ea30-58b9-8cb6-124f3bbffc66","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:4659","comment":"https://x.com/SarlackLab/status/1957427514185322522","timestamp":"1755522061","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a8e007e4-0292-5dac-8bce-2e8ce13a5bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.194.35.243","comment":"https://x.com/SarlackLab/status/1957427514185322522","timestamp":"1755522061","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c82c9b71-d135-5cea-ab65-a27071b26c77","type":"domain","category":"Network activity","to_ids":true,"value":"multas-consultar.com","comment":"https://x.com/0xDanielLopez/status/1957428381256908803","timestamp":"1755522268","distribution":"5"},{"uuid":"f36ab3ec-e998-55c1-a8f5-f929011eb0a8","type":"url","category":"Network activity","to_ids":true,"value":"https://multas-consultar.com","comment":"https://x.com/0xDanielLopez/status/1957428381256908803","timestamp":"1755522268","distribution":"5"},{"uuid":"e4918dfa-5ca3-5140-9e02-6a1f89be28ad","type":"domain","category":"Network activity","to_ids":true,"value":"websollj.weebly.com","comment":"https://x.com/urldna_bot/status/1957442392174346695","timestamp":"1755525608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1effd959-a970-50b2-8c74-40b407f3ab3c","type":"url","category":"Network activity","to_ids":true,"value":"https://websollj.weebly.com","comment":"https://x.com/urldna_bot/status/1957442392174346695","timestamp":"1755525608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fef4a308-58ae-50d5-9bf3-ddbd351dc983","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.194.57","comment":"https://x.com/FalconFeedsio/status/1957445543027937699","timestamp":"1755526359","distribution":"5"},{"uuid":"223871f4-6bc4-5e26-b53c-6b737434b91a","type":"url","category":"Network activity","to_ids":true,"value":"https://www2-hotmailsmt-docomojapanse.starbucks.wang/src/index.html/","comment":"https://x.com/masaomi346/status/1957447446180897236","timestamp":"1755526813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ca172b4c-cd06-5725-a0c5-e9e9bcf3e123","type":"domain","category":"Network activity","to_ids":true,"value":"www2-hotmailsmt-docomojapanse.starbucks.wang","comment":"https://x.com/masaomi346/status/1957447446180897236","timestamp":"1755526813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"524bdd0c-b388-5e00-aff3-0a731ed0c089","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:7826","comment":"https://x.com/SarlackLab/status/1957457538087043270","timestamp":"1755529219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"adb7c439-97fe-5ed2-85e5-88ab9ac7db81","type":"domain","category":"Network activity","to_ids":true,"value":"l5ewog1zc.localto.net","comment":"https://x.com/SarlackLab/status/1957457538087043270","timestamp":"1755529219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c535fc6c-c5ce-5e3d-ba15-30feeeb9761a","type":"url","category":"Network activity","to_ids":true,"value":"http://l5ewog1zc.localto.net","comment":"https://x.com/SarlackLab/status/1957457538087043270","timestamp":"1755529219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"223e7a72-4137-5a81-b0b4-63157021c2c9","type":"domain","category":"Network activity","to_ids":true,"value":"mybdoonline.device-personal.workers.dev","comment":"https://x.com/urldna_bot/status/1957472589627986015","timestamp":"1755532808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d8a882ce-f7fa-5d53-9188-98642942532e","type":"url","category":"Network activity","to_ids":true,"value":"https://mybdoonline.device-personal.workers.dev/bdo-form/pIyMEqOhGY8MahZ5gYRHYfEnS1id5OYhHAa0BT8MeX","comment":"https://x.com/urldna_bot/status/1957472589627986015","timestamp":"1755532808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b4ac100c-d68f-5205-a70e-05cbbc4b7c46","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:2364","comment":"https://x.com/SarlackLab/status/1957472640815296907","timestamp":"1755532820","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"30f81ca5-e800-539d-9ec1-28c2cc4f46c8","type":"domain","category":"Network activity","to_ids":true,"value":"arhived.weebly.com","comment":"https://x.com/urldna_bot/status/1957502793423409307","timestamp":"1755540009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a71276b2-f74f-5794-98d7-94c377729004","type":"url","category":"Network activity","to_ids":true,"value":"https://arhived.weebly.com","comment":"https://x.com/urldna_bot/status/1957502793423409307","timestamp":"1755540009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dc5cdced-a836-5cca-b235-12b2508e4842","type":"domain","category":"Network activity","to_ids":true,"value":"tezrhatwared.webflow.io","comment":"https://x.com/urldna_bot/status/1957532987039396088","timestamp":"1755547207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f1eb39f5-8e57-5f1c-982e-1feb58255931","type":"url","category":"Network activity","to_ids":true,"value":"https://tezrhatwared.webflow.io","comment":"https://x.com/urldna_bot/status/1957532987039396088","timestamp":"1755547207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8e8becad-975b-511c-a9ad-c62ed31f9800","type":"domain","category":"Network activity","to_ids":true,"value":"snoopdogweed.n0rv3m.xyz","comment":"https://x.com/FalconFeedsio/status/1957535424102166637","timestamp":"1755547789","distribution":"5"},{"uuid":"efe312e6-1aa9-51c8-a892-a76371998702","type":"url","category":"Network activity","to_ids":true,"value":"http://snoopdogweed.n0rv3m.xyz","comment":"https://x.com/FalconFeedsio/status/1957535424102166637","timestamp":"1755547789","distribution":"5"},{"uuid":"066ef78e-7e1d-5340-baa8-4c63330e05ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.216.3.95","comment":"https://x.com/FalconFeedsio/status/1957535424102166637","timestamp":"1755547789","distribution":"5"},{"uuid":"1f5f5f80-9c1e-5517-94b4-052b215dadd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.14.99.3","comment":"https://x.com/FalconFeedsio/status/1957535424102166637","timestamp":"1755547789","distribution":"5"},{"uuid":"fd1898c5-d08d-5cbd-8008-14c7abaae1c6","type":"domain","category":"Network activity","to_ids":true,"value":"electrons-residingonthemoon.info","comment":"https://x.com/skocherhan/status/1957546833812553769","timestamp":"1755550509","distribution":"5"},{"uuid":"121090e4-d466-59f4-823f-9cb831d5cb81","type":"url","category":"Network activity","to_ids":true,"value":"http://electrons-residingonthemoon.info","comment":"https://x.com/skocherhan/status/1957546833812553769","timestamp":"1755550509","distribution":"5"},{"uuid":"ae462427-fbcd-595a-a329-bab1f6abe0ff","type":"url","category":"Network activity","to_ids":true,"value":"http://185.132.176.27","comment":"https://x.com/skocherhan/status/1957546833812553769","timestamp":"1755550509","distribution":"5"},{"uuid":"e73fa1dd-b1c5-5fe4-b565-96c86fcdf27d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.132.176.27","comment":"https://x.com/skocherhan/status/1957546833812553769","timestamp":"1755550509","distribution":"5"},{"uuid":"07cae213-3fee-59f4-861d-58ac56e8516e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.75.238.72","comment":"https://x.com/skocherhan/status/1957546852447838461","timestamp":"1755550513","distribution":"5"},{"uuid":"e18d5be6-9a40-585b-a42f-bb6df8622fa4","type":"url","category":"Network activity","to_ids":true,"value":"http://95.214.208.42","comment":"https://x.com/threatquery/status/1957548069496455565","timestamp":"1755550803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"6d9699ad-5030-5e68-b500-36a25acd1645","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.214.208.42","comment":"https://x.com/threatquery/status/1957548069496455565","timestamp":"1755550803","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"a680695e-f18e-5cd6-8acd-ffcf56501559","type":"url","category":"Network activity","to_ids":true,"value":"http://84.132.27.152","comment":"https://x.com/threatquery/status/1957548072805822925","timestamp":"1755550804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"1f92e35c-6910-5e31-a77e-25896fbbe961","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.132.27.152","comment":"https://x.com/threatquery/status/1957548072805822925","timestamp":"1755550804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"574a6c47-dd9f-5de7-9151-c932ac347764","type":"url","category":"Network activity","to_ids":true,"value":"http://34.193.94.14","comment":"https://x.com/threatquery/status/1957548071195193735","timestamp":"1755550804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"0450cdf7-39f3-5a39-b841-cc6694ae7ad9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.193.94.14","comment":"https://x.com/threatquery/status/1957548071195193735","timestamp":"1755550804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f0005687-b6cc-5807-a2c7-bdf99572e6cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.138.7.140","comment":"https://x.com/skocherhan/status/1957548479342911574","timestamp":"1755550901","distribution":"5"},{"uuid":"248bfffa-9d0c-5899-992c-a8cbe881749b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5833392068b7f84ac0b4b1769e4d9ea5f1eed59c67c6926e9c97fa569428bfac","comment":"https://x.com/skocherhan/status/1957549054583324924","timestamp":"1755551038","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"e4247d3e-bdea-5583-8118-505fdfb3a401","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.209.143.148","comment":"https://x.com/FalconFeedsio/status/1957558192654987458","timestamp":"1755553217","distribution":"5"},{"uuid":"528cb493-8b8d-5356-9a14-91c6bf0c9ba5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.117.24.210","comment":"https://x.com/FalconFeedsio/status/1957558192654987458","timestamp":"1755553217","distribution":"5"},{"uuid":"a0ef4a77-6df1-56c6-b1b9-86cc271e7076","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.15.5.45","comment":"https://x.com/FalconFeedsio/status/1957558192654987458","timestamp":"1755553217","distribution":"5"},{"uuid":"e0893697-be3c-5e54-b1b5-e1afe0e46cd1","type":"domain","category":"Network activity","to_ids":true,"value":"alvoportas.com.br","comment":"https://x.com/FalconFeedsio/status/1957560693940797701","timestamp":"1755553813","distribution":"5"},{"uuid":"e198aac4-4dd0-5bc9-aa9e-c308c1e2df1e","type":"url","category":"Network activity","to_ids":true,"value":"http://alvoportas.com.br","comment":"https://x.com/FalconFeedsio/status/1957560693940797701","timestamp":"1755553813","distribution":"5"},{"uuid":"0e25a624-8bd3-5ffc-89d7-ce89bbd2ca2f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.116.52.102","comment":"https://x.com/FalconFeedsio/status/1957560693940797701","timestamp":"1755553813","distribution":"5"},{"uuid":"dec3145e-341e-5a40-9d3a-ba457025d33e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.150.6.17","comment":"https://x.com/FalconFeedsio/status/1957560693940797701","timestamp":"1755553813","distribution":"5"},{"uuid":"54ab7534-1b03-5d0f-9b91-83c513978494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.207.199.12","comment":"https://x.com/FalconFeedsio/status/1957560693940797701","timestamp":"1755553813","distribution":"5"},{"uuid":"85a9ea56-efb0-5145-8667-4016b5faa5d1","type":"domain","category":"Network activity","to_ids":true,"value":"198dd2.algo-fly.com","comment":"https://x.com/urldna_bot/status/1957563184060973495","timestamp":"1755554407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bf3b33d9-8dc2-5759-9170-2b8fafc58b54","type":"url","category":"Network activity","to_ids":true,"value":"http://198dd2.algo-fly.com/workbench.php","comment":"https://x.com/urldna_bot/status/1957563184060973495","timestamp":"1755554407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eeb94304-ddb9-5db6-800f-93c1742c45ed","type":"domain","category":"Network activity","to_ids":true,"value":"plertiol.online","comment":"https://x.com/skocherhan/status/1957565608125419704","timestamp":"1755554985","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"b8581227-343e-578d-8b70-db09ab1a71b5","type":"url","category":"Network activity","to_ids":true,"value":"http://plertiol.online","comment":"https://x.com/skocherhan/status/1957565608125419704","timestamp":"1755554985","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"d9075f08-cd31-575d-87a7-21b91c03a205","type":"domain","category":"Network activity","to_ids":true,"value":"colertds.ru","comment":"https://x.com/skocherhan/status/1957565608125419704","timestamp":"1755554985","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"c3fdfd8c-5d55-5588-a014-21e5aa8ed194","type":"url","category":"Network activity","to_ids":true,"value":"http://colertds.ru","comment":"https://x.com/skocherhan/status/1957565608125419704","timestamp":"1755554985","distribution":"5","Tag":[{"name":"Dcrat"}]},{"uuid":"4903576a-f329-56f2-90c7-63bd286b3ae4","type":"domain","category":"Network activity","to_ids":true,"value":"closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"0144ecd0-1748-5cbb-8471-ac9ca0c93874","type":"url","category":"Network activity","to_ids":true,"value":"http://closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"6464c67b-3d77-54ee-921a-7a463593e6c4","type":"domain","category":"Network activity","to_ids":true,"value":"03j.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"04e445a1-05b8-5ca2-ac73-7e2476c75074","type":"url","category":"Network activity","to_ids":true,"value":"http://03j.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"0fae5aae-26a1-5f44-ab9e-3d74cb3563a8","type":"domain","category":"Network activity","to_ids":true,"value":"0r9y.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"b5862213-f0e7-58d8-9528-b907b1d123ed","type":"url","category":"Network activity","to_ids":true,"value":"http://0r9y.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"21a4ebdc-c3ee-5e76-9c0b-8d1b5cf518f0","type":"domain","category":"Network activity","to_ids":true,"value":"1gch.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"ed01f3de-5f6f-5a4c-b711-368f679f02b1","type":"url","category":"Network activity","to_ids":true,"value":"http://1gch.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"01e067ba-6d4d-55dd-bcf4-e22a4cc235d6","type":"domain","category":"Network activity","to_ids":true,"value":"1oz8.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"3a02cb28-9d75-5d9b-9368-94f871185335","type":"url","category":"Network activity","to_ids":true,"value":"http://1oz8.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"b6320dec-372b-585d-ac7b-7ce04eefb5da","type":"domain","category":"Network activity","to_ids":true,"value":"1uadl.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"12dd1e85-6e58-5247-87e2-ad631d5a2e7c","type":"url","category":"Network activity","to_ids":true,"value":"http://1uadl.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"550ddb4a-3a1e-57ba-b306-0867ba2dbd1f","type":"domain","category":"Network activity","to_ids":true,"value":"29ujj.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"8ffd1895-7afb-5e15-ae89-416a68a39b06","type":"url","category":"Network activity","to_ids":true,"value":"http://29ujj.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"0240856e-1d7d-529c-b974-134739b79be3","type":"domain","category":"Network activity","to_ids":true,"value":"2b5u.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"af7a3965-c5af-57f4-9631-113ff91f6d5c","type":"url","category":"Network activity","to_ids":true,"value":"http://2b5u.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"9dbf99c7-36be-5550-b3ca-8b563e9342f5","type":"domain","category":"Network activity","to_ids":true,"value":"2bi65.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"7b27622a-f24e-5b4d-9a33-31b1df9441a7","type":"url","category":"Network activity","to_ids":true,"value":"http://2bi65.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"035f57e6-ff21-5bd9-ab2e-66ca5f971168","type":"domain","category":"Network activity","to_ids":true,"value":"2gj3.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"5b85ad9d-8dad-51a0-9947-bfd344aeff70","type":"url","category":"Network activity","to_ids":true,"value":"http://2gj3.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"89e993c6-49dc-549d-aaa7-b0859463ca00","type":"domain","category":"Network activity","to_ids":true,"value":"2kh.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"d40d86d5-45b3-5945-8ccc-cf8afc1ff952","type":"url","category":"Network activity","to_ids":true,"value":"http://2kh.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"a837de10-c2cf-5e72-b9e7-7c26bbf53d21","type":"domain","category":"Network activity","to_ids":true,"value":"2ob2g.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"4ffe69b0-93ef-5e2e-a9f3-db98638e9da8","type":"url","category":"Network activity","to_ids":true,"value":"http://2ob2g.closebar.buzz","comment":"https://x.com/skocherhan/status/1957574708980863162","timestamp":"1755557155","distribution":"5"},{"uuid":"2341bc56-e580-5e52-9685-2a58f38ac09f","type":"domain","category":"Network activity","to_ids":true,"value":"vaultselection-coinbase.com","comment":"https://x.com/skocherhan/status/1957582849483169915","timestamp":"1755559096","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df7d9e57-de34-55c2-811d-e5699f844c30","type":"url","category":"Network activity","to_ids":true,"value":"http://vaultselection-coinbase.com","comment":"https://x.com/skocherhan/status/1957582849483169915","timestamp":"1755559096","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3be60ff-cfb3-523e-a822-44536d3b3788","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.130:4565/wget.sh","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"62d12f4d-f01e-5931-ba46-55b088cc6a1c","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.130","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ecd69bd0-d07d-5033-a66a-c5e4050ffe7d","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.109","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b272cedf-1339-5304-8812-6996483decd7","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.109:999","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"074da46f-8bc1-56aa-9742-67a390d9343c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.130","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1aee7543-117a-55ea-9c06-270ba94d107b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.109","comment":"https://x.com/redrabytes/status/1957584747980288088","timestamp":"1755559548","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f3690077-e3f1-599e-ae6e-e9a6a3c9689f","type":"domain","category":"Network activity","to_ids":true,"value":"maialjp.weebly.com","comment":"https://x.com/urldna_bot/status/1957593390792507609","timestamp":"1755561609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6212333f-bb37-5298-b080-b039ce685ffa","type":"url","category":"Network activity","to_ids":true,"value":"https://maialjp.weebly.com","comment":"https://x.com/urldna_bot/status/1957593390792507609","timestamp":"1755561609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a42da86e-3abe-5ba9-9f8a-0c38c32ab092","type":"domain","category":"Network activity","to_ids":true,"value":"andrefelipedonascime1753562407700.0461178.meusitehostgator.com.br","comment":"https://x.com/1ZRR4H/status/1957600739427069987","timestamp":"1755563361","distribution":"5"},{"uuid":"993f4369-1740-586a-aa28-7d6aca9c4c0b","type":"url","category":"Network activity","to_ids":true,"value":"http://andrefelipedonascime1753562407700.0461178.meusitehostgator.com.br","comment":"https://x.com/1ZRR4H/status/1957600739427069987","timestamp":"1755563361","distribution":"5"},{"uuid":"e22169ee-6f1e-5274-b4aa-0bb121ac95df","type":"domain","category":"Network activity","to_ids":true,"value":"vic-educationonlinehelpteam.weebly.com","comment":"https://x.com/urldna_bot/status/1957623579341722002","timestamp":"1755568806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"51c5c04d-5ceb-5408-a65c-f8b3b47d989a","type":"url","category":"Network activity","to_ids":true,"value":"https://vic-educationonlinehelpteam.weebly.com","comment":"https://x.com/urldna_bot/status/1957623579341722002","timestamp":"1755568806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c810fa44-3e14-51e8-9d02-bbca6260174c","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.132.35:1912","comment":"https://x.com/SarlackLab/status/1957623644420551089","timestamp":"1755568822","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"cbe551e5-4ee5-5a7b-9bb2-9841413e514f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.132.35","comment":"https://x.com/SarlackLab/status/1957623644420551089","timestamp":"1755568822","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"6b1ad713-269b-5224-b52b-88a8ab997f01","type":"url","category":"Network activity","to_ids":true,"value":"https://mbekw.cn/Login","comment":"https://x.com/romonlyht/status/1957634508251128180","timestamp":"1755571412","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d9aeb18-fb13-54d0-a2b9-181ff88065f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.2.149.162","comment":"https://x.com/romonlyht/status/1957634508251128180","timestamp":"1755571412","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d9bb707-6432-51ff-8c47-c12dabe5ea6a","type":"url","category":"Network activity","to_ids":true,"value":"https://mbekw.cn/Login/","comment":"https://x.com/romonlyht/status/1957634511002607896","timestamp":"1755571413","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"97da460d-7ddf-57d7-9724-4cfb30f24920","type":"domain","category":"Network activity","to_ids":true,"value":"mbekw.cn","comment":"https://x.com/romonlyht/status/1957634511002607896","timestamp":"1755571413","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b5eaec7-68c5-5821-a284-7a73d0b8e6d8","type":"domain","category":"Network activity","to_ids":true,"value":"fqdfu.cn","comment":"https://x.com/romonlyht/status/1957634757279510639","timestamp":"1755571471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"17dc4821-e286-50a6-a7d0-3465c7a868ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.224.143.81","comment":"https://x.com/romonlyht/status/1957634755492737154","timestamp":"1755571471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"324ba0bd-7671-5bff-a4f6-78c1d7f23912","type":"url","category":"Network activity","to_ids":true,"value":"https://fqdfu.cn/Login/","comment":"https://x.com/romonlyht/status/1957634757279510639","timestamp":"1755571471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83649480-5283-5d81-844a-50ab4f8ee3cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.128.36","comment":"https://x.com/romonlyht/status/1957634755492737154","timestamp":"1755571471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1fc878e-85bd-59d2-b830-9b2356aa2e31","type":"url","category":"Network activity","to_ids":true,"value":"https://fqdfu.cn/Login","comment":"https://x.com/romonlyht/status/1957634755492737154","timestamp":"1755571471","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3431e898-93a4-5b15-a541-4f9d2212ea89","type":"domain","category":"Network activity","to_ids":true,"value":"sa-iso-n.5c-tm2-a8-c4-r5-j1.cyou","comment":"https://x.com/romonlyht/status/1957637802033836462","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d4e0482-ca80-540b-a94d-660330275fb5","type":"url","category":"Network activity","to_ids":true,"value":"https://sa-iso-n.5c-tm2-a8-c4-r5-j1.cyou/saisonCard_index_html","comment":"https://x.com/romonlyht/status/1957637799546614036","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"59d17c01-a6dc-598a-8f27-4aac0188f9ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.111","comment":"https://x.com/romonlyht/status/1957637799546614036","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"965bae77-ac69-53a6-9899-46ff661f2d7a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.242.233.199","comment":"https://x.com/romonlyht/status/1957637799546614036","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"604b7eeb-bd1c-5526-9246-924e108c40a7","type":"url","category":"Network activity","to_ids":true,"value":"https://sa-iso-n.5c-tm2-a8-c4-r5-j1.cyou/saisonCard_index_html/","comment":"https://x.com/romonlyht/status/1957637802033836462","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c531597d-5053-527b-ab87-6206711ba90d","type":"url","category":"Network activity","to_ids":true,"value":"https://w-s-s-b-japan.2-tm2-a8-c4-r5-j1.cyou/index_jP","comment":"https://x.com/romonlyht/status/1957637802033836462","timestamp":"1755572197","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"772a06a6-09af-53cf-9c6b-453f784410f6","type":"url","category":"Network activity","to_ids":true,"value":"https://w-s-s-b-japan.2-tm2-a8-c4-r5-j1.cyou/index_jP/","comment":"https://x.com/romonlyht/status/1957637804315537854","timestamp":"1755572198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94ac14fc-1b3b-5597-b400-c5d208512dd5","type":"domain","category":"Network activity","to_ids":true,"value":"w-s-s-b-japan.2-tm2-a8-c4-r5-j1.cyou","comment":"https://x.com/romonlyht/status/1957637804315537854","timestamp":"1755572198","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3079675-7fc8-5385-a199-0c55a4694d8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.3.188.143","comment":"https://x.com/romonlyht/status/1957640553816060144","timestamp":"1755572853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef5d7312-1c41-5bee-9997-fe6b84fef084","type":"url","category":"Network activity","to_ids":true,"value":"https://www.loesl.com/3xMam4","comment":"https://x.com/romonlyht/status/1957640553816060144","timestamp":"1755572853","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be7a6c89-b39a-5837-a720-a321779c600e","type":"domain","category":"Network activity","to_ids":true,"value":"kuronkoyomata.co.jp.gsmskj.com","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d3b6066-0a53-564f-87f8-4133b1a37556","type":"domain","category":"Network activity","to_ids":true,"value":"loesl.com","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7995de57-b3d8-54c2-87e7-f325d38e9aaa","type":"url","category":"Network activity","to_ids":true,"value":"https://www.loesl.com/3xMam4/","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20e7ede7-ae11-5be3-8999-2d5267ddb230","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.162.112.162","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3697a0e7-47ee-59c9-b241-da4c537a9d3d","type":"url","category":"Network activity","to_ids":true,"value":"https://www.kuronkoyomata.co.jp.gsmskj.com/cgi-bin/yamato","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a34d515-3101-562f-a4a4-a28b589ebdde","type":"url","category":"Network activity","to_ids":true,"value":"https://www.kuronkoyomata.co.jp.gsmskj.com/cgi-bin/yamato/","comment":"https://x.com/romonlyht/status/1957640556630409327","timestamp":"1755572854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a2fa0232-5e67-5356-b4e8-60c7abcbf1ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.230.231.225","comment":"https://x.com/romonlyht/status/1957644040364814735","timestamp":"1755573685","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1a4103d-2c5b-5f61-8eb1-8c30b9165d04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.183.100","comment":"https://x.com/romonlyht/status/1957644043971883435","timestamp":"1755573686","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f2a0241-121c-59b4-b1a0-92fca11b126a","type":"domain","category":"Network activity","to_ids":true,"value":"zhuanyongche.cc","comment":"https://x.com/romonlyht/status/1957644043971883435","timestamp":"1755573686","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffc0c556-c514-523e-ab17-69a6d33cf1da","type":"url","category":"Network activity","to_ids":true,"value":"https://youaigu.net/ike/","comment":"https://x.com/romonlyht/status/1957644043971883435","timestamp":"1755573686","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b01f287b-cecf-5869-89f8-9621e0fcde9c","type":"url","category":"Network activity","to_ids":true,"value":"https://zhuanyongche.cc/iekie/","comment":"https://x.com/romonlyht/status/1957644043971883435","timestamp":"1755573686","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"106a0734-a796-5a77-be36-0fa3b3d37dd0","type":"domain","category":"Network activity","to_ids":true,"value":"youaigu.net","comment":"https://x.com/romonlyht/status/1957644043971883435","timestamp":"1755573686","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a051789-cac5-53b5-a160-e169ef75c117","type":"url","category":"Network activity","to_ids":true,"value":"https://ob-two.com/apple-ids","comment":"https://x.com/romonlyht/status/1957649496894239002","timestamp":"1755574986","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50fa5e05-7a1d-57a0-b0ce-6d27b3694b92","type":"domain","category":"Network activity","to_ids":true,"value":"ob-two.com","comment":"https://x.com/romonlyht/status/1957649496894239002","timestamp":"1755574986","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9867260c-9f3e-57c7-be22-9fe3829af7a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.187.211.108","comment":"https://x.com/romonlyht/status/1957649496894239002","timestamp":"1755574986","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69a0e4e2-8373-5222-bad1-979534a1cc88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.36.166.37","comment":"https://x.com/romonlyht/status/1957649496894239002","timestamp":"1755574986","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a82d403-1ead-5da9-80ff-0dbb3a82ae38","type":"url","category":"Network activity","to_ids":true,"value":"https://ob-two.com/welcome","comment":"https://x.com/romonlyht/status/1957649496894239002","timestamp":"1755574986","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2bf7bed8-420e-5082-a213-578e2084a154","type":"domain","category":"Network activity","to_ids":true,"value":"jump.aqrkd.com","comment":"https://x.com/romonlyht/status/1957651265552544223","timestamp":"1755575407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"708fd5da-15eb-58bc-b6ae-50fa87149f82","type":"url","category":"Network activity","to_ids":true,"value":"https://jump.aqrkd.com/69OYAA?amzon.co.jp/up_date","comment":"https://x.com/romonlyht/status/1957651265552544223","timestamp":"1755575407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac227c9c-5f6e-50db-9048-5a28b4ee0eae","type":"domain","category":"Network activity","to_ids":true,"value":"amazon.pakejbahagia.com","comment":"https://x.com/romonlyht/status/1957651268400505292","timestamp":"1755575408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"946f2b60-79f7-5aeb-a535-c2d5d3d178a7","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon.pakejbahagia.com/amazon_update","comment":"https://x.com/romonlyht/status/1957651268400505292","timestamp":"1755575408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9180eb00-ffc7-5f45-bc75-b42f7d1a12dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.95.165","comment":"https://x.com/romonlyht/status/1957651268400505292","timestamp":"1755575408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f2c6887-3c69-5af5-bfb5-443b58e347de","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon.pakejbahagia.com/amazon_update/","comment":"https://x.com/romonlyht/status/1957651268400505292","timestamp":"1755575408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6c94456-f04c-5e0d-9dcd-002f3511d4c3","type":"url","category":"Network activity","to_ids":true,"value":"https://s-b-i-s-e-c.tuolesi.info/index_html","comment":"https://x.com/romonlyht/status/1957653024886890773","timestamp":"1755575827","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46434b34-3aad-5406-bb61-748abfb17094","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.39","comment":"https://x.com/romonlyht/status/1957653024886890773","timestamp":"1755575827","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c077ecd2-0dbf-51ff-8de7-9b51dd627ee6","type":"domain","category":"Network activity","to_ids":true,"value":"s-b-i-s-e-c.tuolesi.info","comment":"https://x.com/romonlyht/status/1957653024886890773","timestamp":"1755575827","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67034d25-27dc-5ec3-a220-b60fa255d95b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.128.9","comment":"https://x.com/romonlyht/status/1957653183003783282","timestamp":"1755575864","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4febc1be-7b4b-5010-b169-64bec5f6bc99","type":"url","category":"Network activity","to_ids":true,"value":"https://s-b-i-s-e-c.bxyc.info/index_html","comment":"https://x.com/romonlyht/status/1957653183003783282","timestamp":"1755575864","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"860c579a-f1db-5b47-a3e0-89608089adf3","type":"domain","category":"Network activity","to_ids":true,"value":"s-b-i-s-e-c.bxyc.info","comment":"https://x.com/romonlyht/status/1957653183003783282","timestamp":"1755575864","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83ab4d29-c254-53e9-bcea-5e37c69fba0a","type":"url","category":"Network activity","to_ids":true,"value":"https://ukenlog.com","comment":"https://x.com/urldna_bot/status/1957653790250660216","timestamp":"1755576009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d02a6d44-fc5c-5966-9b31-7f0c9a6275e0","type":"domain","category":"Network activity","to_ids":true,"value":"ukenlog.com","comment":"https://x.com/urldna_bot/status/1957653790250660216","timestamp":"1755576009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a52e99d3-bed4-57a6-8b12-959f550999f9","type":"domain","category":"Network activity","to_ids":true,"value":"cdn.prod.website-files.com","comment":"https://x.com/masaomi346/status/1957657207342002661","timestamp":"1755576824","distribution":"5"},{"uuid":"ed1f379f-9490-5415-8f1d-11e5f9e4a2f8","type":"url","category":"Network activity","to_ids":true,"value":"http://cdn.prod.website-files.com","comment":"https://x.com/masaomi346/status/1957657207342002661","timestamp":"1755576824","distribution":"5"},{"uuid":"dd6267b4-eb84-58c1-a261-8168e60a9d59","type":"url","category":"Network activity","to_ids":true,"value":"https://www.xzdsueshop.shop","comment":"https://x.com/urldna_bot/status/1957683983086506030","timestamp":"1755583208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2c2d263f-4361-5df2-b9a1-bb8dd6268027","type":"domain","category":"Network activity","to_ids":true,"value":"xzdsueshop.shop","comment":"https://x.com/urldna_bot/status/1957683983086506030","timestamp":"1755583208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"82ce2657-491f-55a1-8d19-91099d506941","type":"url","category":"Network activity","to_ids":true,"value":"https://915944.tp1766.com/gateway.php?token=61da4c763f12fbd59f3de55dc8724e248c03ded4c6456df566b331f65241e28a","comment":"https://x.com/romonlyht/status/1957685873505706216","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2fc94905-1b51-5d26-8165-3867fae02c49","type":"domain","category":"Network activity","to_ids":true,"value":"915944.tp1766.com","comment":"https://x.com/romonlyht/status/1957685873505706216","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"664b14bf-75dc-5a4f-a021-34027bd1419c","type":"url","category":"Network activity","to_ids":true,"value":"https://tp1892.com/F9r5Kq","comment":"https://x.com/romonlyht/status/1957685873505706216","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91b5094d-2136-5964-89d9-48d5cc7eb4d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.117.41.93","comment":"https://x.com/romonlyht/status/1957685870846439618","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"398fc40c-5306-5391-bf20-f0d47d8c0463","type":"sha256","category":"Payload delivery","to_ids":true,"value":"61da4c763f12fbd59f3de55dc8724e248c03ded4c6456df566b331f65241e28a","comment":"https://x.com/romonlyht/status/1957685873505706216","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffa90a4e-36e2-561f-bc1c-2bca795f5d2d","type":"url","category":"Network activity","to_ids":true,"value":"https://915944.tp1766.com/?ps=tep&t_aaaa@example.jp&sps=tep&has=3ldFzR1tWjPt5nBYszIyaZGb&login_on&","comment":"https://x.com/romonlyht/status/1957685870846439618","timestamp":"1755583658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0acb0165-eff4-5158-8e5a-2f270a5818ba","type":"domain","category":"Network activity","to_ids":true,"value":"tp1892.com","comment":"https://x.com/romonlyht/status/1957685876433309788","timestamp":"1755583659","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4140201-0a42-5a33-9c50-b4203d64207d","type":"url","category":"Network activity","to_ids":true,"value":"https://tp1892.com/F9r5Kq/","comment":"https://x.com/romonlyht/status/1957685876433309788","timestamp":"1755583659","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a63e3ccc-d3ff-548d-821d-5de44c85938b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.189.112.253","comment":"https://x.com/romonlyht/status/1957690014877241556","timestamp":"1755584646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09a88e78-4148-5a11-9ef5-9a9035b09126","type":"url","category":"Network activity","to_ids":true,"value":"https://smatpbyoyudhcjp.icu/67g0UK","comment":"https://x.com/romonlyht/status/1957690014877241556","timestamp":"1755584646","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb63253b-40ce-576e-95e6-83e1379f0267","type":"domain","category":"Network activity","to_ids":true,"value":"smatpvboyuoihojp.icu","comment":"https://x.com/romonlyht/status/1957690043864346804","timestamp":"1755584653","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3df5a8b9-e701-5a02-aa61-65a2370abcb5","type":"domain","category":"Network activity","to_ids":true,"value":"smatpbyoyudhcjp.icu","comment":"https://x.com/romonlyht/status/1957690043864346804","timestamp":"1755584653","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b253a46-4148-5c50-8512-05e4c07c1168","type":"url","category":"Network activity","to_ids":true,"value":"https://smatpbyoyudhcjp.icu/67g0UK/","comment":"https://x.com/romonlyht/status/1957690043864346804","timestamp":"1755584653","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"59393e34-6a18-5a29-ba28-a7c1b55876fe","type":"url","category":"Network activity","to_ids":true,"value":"https://smatpvboyuoihojp.icu/KRVhOa","comment":"https://x.com/romonlyht/status/1957690043864346804","timestamp":"1755584653","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b83d014-b790-56d0-932d-99f77668edd2","type":"url","category":"Network activity","to_ids":true,"value":"https://smatpvboyuoihojp.icu/KRVhOa/","comment":"https://x.com/romonlyht/status/1957690043864346804","timestamp":"1755584653","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8468eb30-d99f-5112-9ed5-29193a0f0a5a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5cfc3ee66d05ca669d59db0965f629ec","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"16b930f4-b524-54ed-9b5c-ad12b774ee10","type":"md5","category":"Payload delivery","to_ids":true,"value":"1d8972c75e12926615d307efe06820d2","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"53674db0-3edc-53be-a0bc-da7807c5fb0c","type":"md5","category":"Payload delivery","to_ids":true,"value":"aa15bd63f2f556f88c15515dce7cb09e","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"79b69fd6-1112-5a95-9a99-a6aca5b51188","type":"md5","category":"Payload delivery","to_ids":true,"value":"cbed0b23e25277549740212a2a80e881","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"383816e3-ff2d-5ff9-be50-a43de3fe04a8","type":"md5","category":"Payload delivery","to_ids":true,"value":"fd0dbd4a8e616b7302e1a53402950828","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"dc75565d-cf52-5842-aaa7-163fb04d7f0a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5c6b650c056ee633f89f4d6aaca438a6","comment":"https://x.com/suyog41/status/1957690692937085260","timestamp":"1755584807","distribution":"5"},{"uuid":"65ec80c5-aa27-58e0-b23e-8010f1a38291","type":"url","category":"Network activity","to_ids":true,"value":"https://greenapplelight.ocarino.com","comment":"https://x.com/romonlyht/status/1957694502790991987","timestamp":"1755585716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6e0b6ba-8549-560b-b30d-c53bbc3e456d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.1.45","comment":"https://x.com/romonlyht/status/1957694502790991987","timestamp":"1755585716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"486445da-62b5-5baa-af59-007d7fcadf2d","type":"url","category":"Network activity","to_ids":true,"value":"https://greenapplelight.ocarino.com/#/","comment":"https://x.com/romonlyht/status/1957694502790991987","timestamp":"1755585716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92ce00f2-c693-5297-a4c6-1c517698d4dd","type":"domain","category":"Network activity","to_ids":true,"value":"greenapplelight.ocarino.com","comment":"https://x.com/romonlyht/status/1957694502790991987","timestamp":"1755585716","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"025ae220-a524-503d-b804-7ad9c9582d4e","type":"url","category":"Network activity","to_ids":true,"value":"https://fastmonkeyworld.tatlddz.com/#/","comment":"https://x.com/romonlyht/status/1957694751429521516","timestamp":"1755585775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e786764f-ec25-508f-aa95-16ba978c83e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.254.239","comment":"https://x.com/romonlyht/status/1957694751429521516","timestamp":"1755585775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e097dd5c-9a8d-5fb1-8ceb-0d2994a7558f","type":"url","category":"Network activity","to_ids":true,"value":"https://fastmonkeyworld.tatlddz.com","comment":"https://x.com/romonlyht/status/1957694751429521516","timestamp":"1755585775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64a9422c-1dea-540e-800d-5a1e4172922d","type":"domain","category":"Network activity","to_ids":true,"value":"fastmonkeyworld.tatlddz.com","comment":"https://x.com/romonlyht/status/1957694751429521516","timestamp":"1755585775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c67e585c-7635-5b3d-8989-70822f7cb1de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.2.61","comment":"https://x.com/romonlyht/status/1957694751429521516","timestamp":"1755585775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1488fb1-99b8-54eb-9233-a1ce4731a6dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.128.129.174","comment":"https://x.com/romonlyht/status/1957696230668009480","timestamp":"1755586128","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08412af1-90c3-58a1-a500-26c949de4c43","type":"url","category":"Network activity","to_ids":true,"value":"https://appp.e-tm2-a8-c4-r5-j1.cyou/apserver","comment":"https://x.com/romonlyht/status/1957696230668009480","timestamp":"1755586128","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd16caca-0272-59ac-8a17-1f6c09f12412","type":"domain","category":"Network activity","to_ids":true,"value":"appp.e-tm2-a8-c4-r5-j1.cyou","comment":"https://x.com/romonlyht/status/1957696234652578033","timestamp":"1755586129","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"384269ad-098a-57f4-acda-c0a396c1d0aa","type":"url","category":"Network activity","to_ids":true,"value":"https://appp.e-tm2-a8-c4-r5-j1.cyou/apserver/","comment":"https://x.com/romonlyht/status/1957696234652578033","timestamp":"1755586129","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0fff3640-fadf-59e0-b480-8bb2ce9be9fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.69.190.246","comment":"https://x.com/romonlyht/status/1957697758527205432","timestamp":"1755586492","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e12e4854-9d7f-5ad3-ac70-77cf61d3ae46","type":"url","category":"Network activity","to_ids":true,"value":"https://dlefv.cn/Login","comment":"https://x.com/romonlyht/status/1957697758527205432","timestamp":"1755586492","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74e47777-b154-5750-b776-e1d8a61b7245","type":"url","category":"Network activity","to_ids":true,"value":"https://dlefv.cn/Login/","comment":"https://x.com/romonlyht/status/1957697762125922413","timestamp":"1755586493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5aeca070-d9f0-5417-afb8-046a1c60106a","type":"domain","category":"Network activity","to_ids":true,"value":"dlefv.cn","comment":"https://x.com/romonlyht/status/1957697762125922413","timestamp":"1755586493","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c4e356a-c396-581e-b4aa-03fa08c8a192","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.93.89.62","comment":"https://x.com/solostalking/status/1957706264932200643","timestamp":"1755588520","distribution":"5"},{"uuid":"0bc0510a-ad53-51d8-b0db-7313149988fe","type":"url","category":"Network activity","to_ids":true,"value":"http://172.234.86.225:4321","comment":"https://x.com/drb_ra/status/1957708802809073956","timestamp":"1755589125","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6201d40a-12a9-5ac7-b0b9-bbc30d649e55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.234.86.225","comment":"https://x.com/drb_ra/status/1957708802809073956","timestamp":"1755589125","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5e8585b7-dcac-5adf-9621-1e2fbebec4cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.124.74.55","comment":"https://x.com/drb_ra/status/1957708943335027073","timestamp":"1755589159","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"1a05ca2f-622c-5dc5-9905-86eaeb832df3","type":"url","category":"Network activity","to_ids":true,"value":"http://46.124.74.55:8080","comment":"https://x.com/drb_ra/status/1957708943335027073","timestamp":"1755589159","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"d2bf09ea-4a27-5aa5-bbfd-e2523f3cd932","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.212.166.194","comment":"https://x.com/drb_ra/status/1957709082304860420","timestamp":"1755589192","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b7e98328-2e87-5db9-a1ef-fec55e2dd14e","type":"url","category":"Network activity","to_ids":true,"value":"http://91.212.166.194:11602","comment":"https://x.com/drb_ra/status/1957709082304860420","timestamp":"1755589192","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"82459cb6-14a8-5201-bccc-afdf6241c377","type":"url","category":"Network activity","to_ids":true,"value":"http://85.9.199.250:8082","comment":"https://x.com/drb_ra/status/1957709221975203918","timestamp":"1755589225","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"26f6749c-0a77-56d0-9522-abb3d11d83fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.9.199.250","comment":"https://x.com/drb_ra/status/1957709221975203918","timestamp":"1755589225","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"55bb062d-58f6-5d65-9809-632f45dd6c82","type":"url","category":"Network activity","to_ids":true,"value":"http://75.158.42.85:443","comment":"https://x.com/drb_ra/status/1957709360785666150","timestamp":"1755589258","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f431b482-78f1-513a-aa53-28c49d90e438","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.158.42.85","comment":"https://x.com/drb_ra/status/1957709360785666150","timestamp":"1755589258","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"74af9793-bedf-5208-9b33-c7e1f1249127","type":"url","category":"Network activity","to_ids":true,"value":"http://209.94.62.9:8080","comment":"https://x.com/drb_ra/status/1957709504952304007","timestamp":"1755589293","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"acef0f76-c0ea-5da2-80e2-0667527b5b99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.94.62.9","comment":"https://x.com/drb_ra/status/1957709504952304007","timestamp":"1755589293","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"acf1357a-91fc-5485-9347-0798f4a105e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.247.108.46","comment":"https://x.com/drb_ra/status/1957709644089987084","timestamp":"1755589326","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f9e43d1b-70dc-5656-ab9c-3a25a33f943e","type":"url","category":"Network activity","to_ids":true,"value":"http://46.247.108.46:5888","comment":"https://x.com/drb_ra/status/1957709644089987084","timestamp":"1755589326","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"bf718733-5414-5624-a171-fc328821ee3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.25.72.95","comment":"https://x.com/drb_ra/status/1957709783286399189","timestamp":"1755589359","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c4149882-8cc0-521d-87db-8c83637ba80a","type":"url","category":"Network activity","to_ids":true,"value":"http://160.25.72.95:2404","comment":"https://x.com/drb_ra/status/1957709783286399189","timestamp":"1755589359","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"57a16850-5b44-5b2d-8f21-afc3bba05292","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.50.115","comment":"https://x.com/drb_ra/status/1957709922617159756","timestamp":"1755589392","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"98589735-0a40-522d-a461-7e01f3e50c94","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.50.115:2404","comment":"https://x.com/drb_ra/status/1957709922617159756","timestamp":"1755589392","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"aed0da36-5919-5acd-aa22-eaeb08cc5155","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.137.67","comment":"https://x.com/drb_ra/status/1957710060362043502","timestamp":"1755589425","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c3598593-345f-5232-8d9a-8b671f1e9637","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.137.67:2889","comment":"https://x.com/drb_ra/status/1957710060362043502","timestamp":"1755589425","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a35e2c56-66c1-5a14-838a-b0bad2483e2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.190","comment":"https://x.com/drb_ra/status/1957710197947765175","timestamp":"1755589458","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"62efa23e-6295-5b77-8bb9-703c00997594","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.190:63288","comment":"https://x.com/drb_ra/status/1957710197947765175","timestamp":"1755589458","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2e2b9a95-14e9-5296-91b3-a7cbe14cfeb1","type":"url","category":"Network activity","to_ids":true,"value":"http://103.158.37.74:3232","comment":"https://x.com/drb_ra/status/1957710335621681198","timestamp":"1755589491","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"88ab21e8-358e-5859-9929-cdbef940396f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.158.37.74","comment":"https://x.com/drb_ra/status/1957710335621681198","timestamp":"1755589491","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"c47af957-bd15-5828-ba6d-50ce5da81406","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.226.54.38","comment":"https://x.com/drb_ra/status/1957710474759241870","timestamp":"1755589524","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"15b2aa8e-b6c9-5b6e-9cb5-4797880e23ef","type":"url","category":"Network activity","to_ids":true,"value":"http://23.226.54.38:3232","comment":"https://x.com/drb_ra/status/1957710474759241870","timestamp":"1755589524","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"95051a3b-07ea-5d4d-9b66-463b31abe1bf","type":"url","category":"Network activity","to_ids":true,"value":"http://speedtestcheck.org","comment":"https://x.com/500mk500/status/1957710484603297941","timestamp":"1755589526","distribution":"5"},{"uuid":"ae5106fc-cc72-59d5-b57d-b4e360a64a15","type":"domain","category":"Network activity","to_ids":true,"value":"speedtestcheck.org","comment":"https://x.com/500mk500/status/1957710484603297941","timestamp":"1755589526","distribution":"5"},{"uuid":"bff50939-2aba-5f50-b570-9de669ce52cf","type":"domain","category":"Network activity","to_ids":true,"value":"upfilenew.cc","comment":"https://x.com/500mk500/status/1957710484603297941","timestamp":"1755589526","distribution":"5"},{"uuid":"d40e25dd-f0ab-5433-9d46-b57addc82090","type":"url","category":"Network activity","to_ids":true,"value":"http://upfilenew.cc","comment":"https://x.com/500mk500/status/1957710484603297941","timestamp":"1755589526","distribution":"5"},{"uuid":"0c61bf2b-3680-50df-b6d4-60698ae35ade","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.214.19:443","comment":"https://x.com/drb_ra/status/1957710613557199047","timestamp":"1755589557","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"81a28820-6db5-57eb-8744-f4d90ed05b70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.214.19","comment":"https://x.com/drb_ra/status/1957710613557199047","timestamp":"1755589557","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"68a61adf-cf59-5296-8114-adff25b63fc4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.20.142.120","comment":"https://x.com/drb_ra/status/1957710753063944478","timestamp":"1755589590","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"36428fd1-3016-5677-ad58-701dc9b95f29","type":"url","category":"Network activity","to_ids":true,"value":"http://51.20.142.120:5995","comment":"https://x.com/drb_ra/status/1957710753063944478","timestamp":"1755589590","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d0a7214d-f0b9-5c99-a9e2-644373be6fde","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.120.203","comment":"https://x.com/drb_ra/status/1957710892579143955","timestamp":"1755589623","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4dad7223-2227-5151-bac0-e64f71f4ade8","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.120.203:2087","comment":"https://x.com/drb_ra/status/1957710892579143955","timestamp":"1755589623","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"accf4865-8bab-5fbf-97ca-46e5785dcf3a","type":"url","category":"Network activity","to_ids":true,"value":"http://78.12.193.1:20058","comment":"https://x.com/drb_ra/status/1957711030680789081","timestamp":"1755589656","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f5e5aff8-cb4a-521b-aa3f-664b1ef71452","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.12.193.1","comment":"https://x.com/drb_ra/status/1957711030680789081","timestamp":"1755589656","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ab418f8b-99a7-5c56-abd4-5b18544590f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.178.201.56","comment":"https://x.com/drb_ra/status/1957711169025691719","timestamp":"1755589689","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d5bc3caf-0548-52c1-b67d-d09bd0fdc959","type":"url","category":"Network activity","to_ids":true,"value":"http://35.178.201.56:12925","comment":"https://x.com/drb_ra/status/1957711169025691719","timestamp":"1755589689","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8d3ae459-f612-5e68-8f90-c101f62781e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.100","comment":"https://x.com/drb_ra/status/1957711307332813000","timestamp":"1755589722","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"6815d520-bade-55e7-a062-1a892840bff1","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.100:8808","comment":"https://x.com/drb_ra/status/1957711307332813000","timestamp":"1755589722","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"08137cc1-d166-5427-b341-f4daee95b6b0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.155.249:80","comment":"https://x.com/drb_ra/status/1957711446130741599","timestamp":"1755589755","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"12a5cf49-97db-59f8-b674-9f0c7b93c15c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.155.249","comment":"https://x.com/drb_ra/status/1957711446130741599","timestamp":"1755589755","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8937a617-603c-5a57-a168-29d128100268","type":"url","category":"Network activity","to_ids":true,"value":"http://34.246.173.165:80","comment":"https://x.com/drb_ra/status/1957711586535092319","timestamp":"1755589789","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"11898f8c-48dc-5ed5-9aae-a541d242ef26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.246.173.165","comment":"https://x.com/drb_ra/status/1957711586535092319","timestamp":"1755589789","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e2e9ffb9-158f-584f-aa2b-aac4d5b8fbf1","type":"url","category":"Network activity","to_ids":true,"value":"http://54.195.163.159:80","comment":"https://x.com/drb_ra/status/1957711728898150775","timestamp":"1755589823","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b128e5fd-5eda-5b23-aed7-05e1740b7453","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.195.163.159","comment":"https://x.com/drb_ra/status/1957711728898150775","timestamp":"1755589823","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4455c43f-8c9e-5ce0-b891-7a67d65a7008","type":"url","category":"Network activity","to_ids":true,"value":"http://52.49.168.106:80","comment":"https://x.com/drb_ra/status/1957711871991283836","timestamp":"1755589857","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"76f9a169-4ab4-5dd3-aecb-4cb52bb26bf0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.49.168.106","comment":"https://x.com/drb_ra/status/1957711871991283836","timestamp":"1755589857","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"28715775-43d0-5451-8b30-688ce13dabf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.208.190.221","comment":"https://x.com/drb_ra/status/1957712010243707339","timestamp":"1755589890","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c4112109-fb58-5f3c-a846-55a1bc38446a","type":"url","category":"Network activity","to_ids":true,"value":"http://52.208.190.221:80","comment":"https://x.com/drb_ra/status/1957712010243707339","timestamp":"1755589890","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6cae4bb9-2d69-580b-bfad-77dcd7b027c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.185.156","comment":"https://x.com/drb_ra/status/1957712149100286074","timestamp":"1755589923","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b00d70ad-4c23-529f-953b-a52501a42605","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.185.156:80","comment":"https://x.com/drb_ra/status/1957712149100286074","timestamp":"1755589923","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ee24be0d-2d6b-5a1f-900d-db9066637289","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.135.231:80","comment":"https://x.com/drb_ra/status/1957712288032452990","timestamp":"1755589956","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2f5c1a92-3f57-53f6-9333-e0500d760b9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.135.231","comment":"https://x.com/drb_ra/status/1957712288032452990","timestamp":"1755589956","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b6762120-28e2-55b9-8c0e-308575e6c719","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.79.42:80","comment":"https://x.com/drb_ra/status/1957712427857989975","timestamp":"1755589989","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"744bc3bb-4d2a-5531-801b-5ddda1982775","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.79.42","comment":"https://x.com/drb_ra/status/1957712427857989975","timestamp":"1755589989","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"831f5389-a343-591f-b669-73f8d15b07db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.209.120.70","comment":"https://x.com/drb_ra/status/1957712567612121298","timestamp":"1755590023","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bea59b1d-6696-5827-835c-c9945893433d","type":"url","category":"Network activity","to_ids":true,"value":"http://52.209.120.70:80","comment":"https://x.com/drb_ra/status/1957712567612121298","timestamp":"1755590023","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"45c38166-dcc1-5e00-b010-3e2379b4e58c","type":"url","category":"Network activity","to_ids":true,"value":"http://52.31.82.255:80","comment":"https://x.com/drb_ra/status/1957712707357999276","timestamp":"1755590056","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"cb28ba8c-84b4-5f14-8850-04547774d70a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.31.82.255","comment":"https://x.com/drb_ra/status/1957712707357999276","timestamp":"1755590056","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fb8a00f2-54c0-5f15-abc6-7f48075c70e0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.47.188:80","comment":"https://x.com/drb_ra/status/1957712847028306368","timestamp":"1755590089","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fc023688-aa76-567d-87fd-8e70c9f3d370","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.47.188","comment":"https://x.com/drb_ra/status/1957712847028306368","timestamp":"1755590089","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e4b6a2b1-dd22-5830-b34b-945254f3e28f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.19.198.172:80","comment":"https://x.com/drb_ra/status/1957712986765754605","timestamp":"1755590123","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3e11d7a9-29eb-55f8-86d4-915e0ac04f54","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.19.198.172","comment":"https://x.com/drb_ra/status/1957712986765754605","timestamp":"1755590123","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0915157b-1cc7-5e0f-b5dc-ee7ee0193d08","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.108.105:80","comment":"https://x.com/drb_ra/status/1957713127895679202","timestamp":"1755590156","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ae1fc0d5-7c49-5d98-aaf7-a15cd4a797a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.108.105","comment":"https://x.com/drb_ra/status/1957713127895679202","timestamp":"1755590156","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e8965792-fe5b-5b3a-ad62-dd5b9b70a333","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.115.234","comment":"https://x.com/drb_ra/status/1957713269411704870","timestamp":"1755590190","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d3c21c8e-cea5-5bff-a488-51281082687c","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.115.234:80","comment":"https://x.com/drb_ra/status/1957713269411704870","timestamp":"1755590190","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3cf39b6d-a877-5bdb-97f6-9ebd1775f6e6","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.18.52:80","comment":"https://x.com/drb_ra/status/1957713407651566007","timestamp":"1755590223","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"eaacb7fe-5822-5a97-8649-0764c1ec4bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.18.52","comment":"https://x.com/drb_ra/status/1957713407651566007","timestamp":"1755590223","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d3fdac06-aece-5ba6-af46-e500322ced83","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.79.118:80","comment":"https://x.com/drb_ra/status/1957713547313525178","timestamp":"1755590256","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9e2d12d9-b596-5487-976d-635ed63bf718","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.79.118","comment":"https://x.com/drb_ra/status/1957713547313525178","timestamp":"1755590256","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f2e4ca99-3264-51d8-8c34-4792dc49b570","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.34.153.148","comment":"https://x.com/drb_ra/status/1957713685939372377","timestamp":"1755590289","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"da913e63-1413-5a49-ba9a-a0b5d4cf9424","type":"url","category":"Network activity","to_ids":true,"value":"http://176.34.153.148:80","comment":"https://x.com/drb_ra/status/1957713685939372377","timestamp":"1755590289","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1f4da50c-e309-522e-b40a-27693629975e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.48.9.104","comment":"https://x.com/drb_ra/status/1957713825374912771","timestamp":"1755590323","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"542aac20-8f18-5c7e-9340-d8a78cb06ccd","type":"url","category":"Network activity","to_ids":true,"value":"http://52.48.9.104:80","comment":"https://x.com/drb_ra/status/1957713825374912771","timestamp":"1755590323","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"50c0e5d4-27a2-5098-8f5c-befe3ed30b0a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.249.196.124","comment":"https://x.com/drb_ra/status/1957713964818698497","timestamp":"1755590356","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"599ca271-b121-5a29-a835-b175c246f345","type":"url","category":"Network activity","to_ids":true,"value":"http://34.249.196.124:80","comment":"https://x.com/drb_ra/status/1957713964818698497","timestamp":"1755590356","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bff0b5ad-2063-5f6e-82b2-1b595efd75a4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.113.59:80","comment":"https://x.com/drb_ra/status/1957714103968944509","timestamp":"1755590389","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ad2dfee4-dc78-5f3d-a479-5692207b794b","type":"url","category":"Network activity","to_ids":true,"value":"https://portail-forfaitaire-gouv.com","comment":"https://x.com/urldna_bot/status/1957714192657420703","timestamp":"1755590410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"504960bb-0b8c-51aa-8bba-c042036a2002","type":"domain","category":"Network activity","to_ids":true,"value":"portail-forfaitaire-gouv.com","comment":"https://x.com/urldna_bot/status/1957714192657420703","timestamp":"1755590410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"072619b4-e81f-5eec-a4fe-37fe1431aa1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.215.23.151","comment":"https://x.com/drb_ra/status/1957714244629069840","timestamp":"1755590423","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8f1a8b33-f278-5d67-add7-4ace123fd63f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.215.23.151:80","comment":"https://x.com/drb_ra/status/1957714244629069840","timestamp":"1755590423","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2c0ca94e-a12b-53e9-bdbe-27bbba9d2430","type":"url","category":"Network activity","to_ids":true,"value":"http://54.155.72.130:80","comment":"https://x.com/drb_ra/status/1957714383800307819","timestamp":"1755590456","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"55890be6-5553-50d0-8378-4f5d0c5bc352","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.155.72.130","comment":"https://x.com/drb_ra/status/1957714383800307819","timestamp":"1755590456","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0248675b-1889-55ec-b0c5-9a59387851b0","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.133.169:80","comment":"https://x.com/drb_ra/status/1957714523105751254","timestamp":"1755590489","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8201108f-102b-5b18-9350-66a465ad71aa","type":"url","category":"Network activity","to_ids":true,"value":"http://52.212.172.212:80","comment":"https://x.com/drb_ra/status/1957714663312965877","timestamp":"1755590522","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"43aa6018-0d94-55d5-b446-ec05379e24b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.212.172.212","comment":"https://x.com/drb_ra/status/1957714663312965877","timestamp":"1755590522","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bc9ed02d-9f14-5d05-831c-c65271a9bc4f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.214.73.243","comment":"https://x.com/drb_ra/status/1957714802454749289","timestamp":"1755590556","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"70237f98-2c41-56c8-a8d6-c167c4e809de","type":"url","category":"Network activity","to_ids":true,"value":"http://52.214.73.243:80","comment":"https://x.com/drb_ra/status/1957714802454749289","timestamp":"1755590556","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4ecf2807-80a6-598e-8f15-15d45c644d1d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.163.163:80","comment":"https://x.com/drb_ra/status/1957714941118443660","timestamp":"1755590589","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"480c7da4-5623-5930-92a1-38157acf50ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.163.163","comment":"https://x.com/drb_ra/status/1957714941118443660","timestamp":"1755590589","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c403b7a7-add3-568e-8694-83750edcaf70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.40.152","comment":"https://x.com/drb_ra/status/1957715081162022934","timestamp":"1755590622","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"19883955-4320-54f8-9af6-9d337c45eea7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.40.152:80","comment":"https://x.com/drb_ra/status/1957715081162022934","timestamp":"1755590622","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4c0b902e-6e22-573b-819e-7faa513d9213","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.135.113:80","comment":"https://x.com/drb_ra/status/1957715220274544886","timestamp":"1755590655","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"01559b0d-53c6-55e7-82c0-bb255efaad2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.135.113","comment":"https://x.com/drb_ra/status/1957715220274544886","timestamp":"1755590655","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"13e9a158-6720-591a-93a2-1996475fe7c9","type":"domain","category":"Network activity","to_ids":true,"value":"protonvpn-qq.com","comment":"https://x.com/c9lab_soc/status/1957719415518065131","timestamp":"1755591655","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"50455222-c1be-5aad-8e8d-f0cf91c734d6","type":"url","category":"Network activity","to_ids":true,"value":"http://protonvpn-qq.com","comment":"https://x.com/c9lab_soc/status/1957719415518065131","timestamp":"1755591655","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3093cb66-7747-5659-8615-cc3cad79c821","type":"domain","category":"Network activity","to_ids":true,"value":"google-seo.ir","comment":"https://x.com/c9lab_soc/status/1957719415518065131","timestamp":"1755591655","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dbfad1ef-d73d-58e7-ae0c-9ea98bce67ef","type":"url","category":"Network activity","to_ids":true,"value":"http://google-seo.ir","comment":"https://x.com/c9lab_soc/status/1957719415518065131","timestamp":"1755591655","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7e8db7d9-06f2-5639-8145-13de54743e58","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.122.171:80","comment":"https://x.com/drb_ra/status/1957719822986367240","timestamp":"1755591753","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7f99fad8-d25a-513f-93ba-1ca85a5ae216","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.122.171","comment":"https://x.com/drb_ra/status/1957719822986367240","timestamp":"1755591753","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c2b9428c-7577-51c4-99c9-e6be60277255","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.116.162:80","comment":"https://x.com/drb_ra/status/1957719962405212200","timestamp":"1755591786","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dfa8b0d3-0905-5f4e-83d1-c350906148db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.116.162","comment":"https://x.com/drb_ra/status/1957719962405212200","timestamp":"1755591786","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ba32640c-613f-572f-9caa-901f5b9e7278","type":"url","category":"Network activity","to_ids":true,"value":"http://54.72.206.10:80","comment":"https://x.com/drb_ra/status/1957720101429604652","timestamp":"1755591819","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8c2fc180-e657-5d42-8b4e-060f96927e71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.72.206.10","comment":"https://x.com/drb_ra/status/1957720101429604652","timestamp":"1755591819","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"59bbb6be-b9c6-5c6e-a7e3-a90929cc3d94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.240.185.19","comment":"https://x.com/drb_ra/status/1957720239824859542","timestamp":"1755591852","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6e8ccec2-4529-5d18-9e6d-e89bc34d884f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.240.185.19:80","comment":"https://x.com/drb_ra/status/1957720239824859542","timestamp":"1755591852","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2020a220-3dca-5a13-8f29-e9e4661de02e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.88.14:80","comment":"https://x.com/drb_ra/status/1957720378102673461","timestamp":"1755591885","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3a5f93c3-d9b4-5e3a-b000-efda3707b609","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.250.239:80","comment":"https://x.com/drb_ra/status/1957720515663343632","timestamp":"1755591918","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0ed46226-a535-5f35-9be9-71e3eb7f2ea0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.250.239","comment":"https://x.com/drb_ra/status/1957720515663343632","timestamp":"1755591918","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ea6a8016-8d7d-5023-ad4b-79b9254b624b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.105.248","comment":"https://x.com/drb_ra/status/1957720655308419507","timestamp":"1755591951","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4d5d7c95-e5f7-5a73-b545-19aff6da11ea","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.105.248:80","comment":"https://x.com/drb_ra/status/1957720655308419507","timestamp":"1755591951","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8b656b78-b821-5cae-876e-5cd5e0497085","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.242.153:80","comment":"https://x.com/drb_ra/status/1957720794106327531","timestamp":"1755591984","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4e531906-1768-5819-9972-251f6cd92e68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.242.153","comment":"https://x.com/drb_ra/status/1957720794106327531","timestamp":"1755591984","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ccda102d-396a-553e-9ea3-472bce37c237","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.202.18","comment":"https://x.com/drb_ra/status/1957720932912623652","timestamp":"1755592017","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0e7cb6b2-8e02-578a-8fbb-a66b8adbc6ab","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.202.18:80","comment":"https://x.com/drb_ra/status/1957720932912623652","timestamp":"1755592017","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3d1db456-f283-5676-8022-d397f14abe24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.206.72.90","comment":"https://x.com/drb_ra/status/1957721071815401694","timestamp":"1755592050","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"098bb603-aa6b-58ba-92c2-85596c1ce07b","type":"url","category":"Network activity","to_ids":true,"value":"http://18.206.72.90:443","comment":"https://x.com/drb_ra/status/1957721071815401694","timestamp":"1755592050","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"58161f0b-fc6d-53dc-980e-e64e61989a1f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.60.70","comment":"https://x.com/drb_ra/status/1957721211754147978","timestamp":"1755592084","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"92438146-61d2-51c9-90c0-7878b9d218ad","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.60.70:80","comment":"https://x.com/drb_ra/status/1957721211754147978","timestamp":"1755592084","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6627675a-d3bf-56ba-aaf8-e0ce25263209","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.154.28.173","comment":"https://x.com/drb_ra/status/1957721350505963951","timestamp":"1755592117","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"898b2ec2-6688-5362-b3ba-69d0f22c4627","type":"url","category":"Network activity","to_ids":true,"value":"http://54.154.28.173:80","comment":"https://x.com/drb_ra/status/1957721350505963951","timestamp":"1755592117","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"31e3473b-582f-5a6e-8c94-ce009c17510d","type":"url","category":"Network activity","to_ids":true,"value":"http://52.210.249.32:80","comment":"https://x.com/drb_ra/status/1957721488653721847","timestamp":"1755592150","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e365decd-fcce-57f3-93e2-8436ba32fe43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.210.249.32","comment":"https://x.com/drb_ra/status/1957721488653721847","timestamp":"1755592150","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"208fd866-da25-5ab6-8632-8fc1e44ad548","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.22.190:80","comment":"https://x.com/drb_ra/status/1957721630727369070","timestamp":"1755592184","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d0ed68a5-c06a-5c43-9a95-b7c7e59ad79f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.22.190","comment":"https://x.com/drb_ra/status/1957721630727369070","timestamp":"1755592184","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8a80c27e-0b35-5f11-9837-b8eeadbfd34b","type":"url","category":"Network activity","to_ids":true,"value":"http://34.240.27.27:80","comment":"https://x.com/drb_ra/status/1957721769227481598","timestamp":"1755592217","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"febd19c5-31cd-5890-b04c-eced3241dc84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.240.27.27","comment":"https://x.com/drb_ra/status/1957721769227481598","timestamp":"1755592217","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c647436a-dae0-568f-b8ee-5bba75af3918","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.49.236:80","comment":"https://x.com/drb_ra/status/1957721915940040778","timestamp":"1755592252","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8cfa99a8-bfe0-5ed9-9024-558f555e2090","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.191.186:80","comment":"https://x.com/drb_ra/status/1957722056411546041","timestamp":"1755592285","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"509bed3e-b9eb-59cc-a5d1-53bd7a08fb36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.228.80.82","comment":"https://x.com/drb_ra/status/1957722195159093688","timestamp":"1755592318","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5c76c00f-d3bf-53af-89b5-857e1ff4be92","type":"url","category":"Network activity","to_ids":true,"value":"http://54.228.80.82:80","comment":"https://x.com/drb_ra/status/1957722195159093688","timestamp":"1755592318","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e5554881-86ce-5034-b9e2-4a458ff8a11a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.223.238:443","comment":"https://x.com/drb_ra/status/1957722336607760815","timestamp":"1755592352","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d31fa93b-72cb-560e-90c1-f69aa598c4bf","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.223.238:80","comment":"https://x.com/drb_ra/status/1957722475678290085","timestamp":"1755592385","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"535bbc25-c3bd-5609-8c89-e89ea02b42df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.223.238","comment":"https://x.com/drb_ra/status/1957722475678290085","timestamp":"1755592385","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"00cb8e0b-16f7-59d9-bcc0-39a3a9570bae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.45.213","comment":"https://x.com/drb_ra/status/1957722614094524614","timestamp":"1755592418","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"35e6aae3-7dde-56ae-adb9-332e357d4766","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.45.213:80","comment":"https://x.com/drb_ra/status/1957722614094524614","timestamp":"1755592418","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3bef1b63-81ec-5a26-a828-69de5798c3c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.44.121","comment":"https://x.com/drb_ra/status/1957722752518893748","timestamp":"1755592451","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e52d73e8-22da-56e2-97d4-6e487ab39326","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.44.121:80","comment":"https://x.com/drb_ra/status/1957722752518893748","timestamp":"1755592451","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8f66ee6f-122d-569e-be2e-2f92d6b39f4f","type":"url","category":"Network activity","to_ids":true,"value":"http://63.35.202.117:80","comment":"https://x.com/drb_ra/status/1957722892336263326","timestamp":"1755592484","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1c8300d6-2673-54b1-b65d-208b1a964032","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.35.202.117","comment":"https://x.com/drb_ra/status/1957722892336263326","timestamp":"1755592484","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0e40bfbb-78cc-5f5a-ad35-a2029d3ac396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.199.38","comment":"https://x.com/drb_ra/status/1957723030173675865","timestamp":"1755592517","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"735d89ae-69e6-58ed-8392-225c55e0d38b","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.199.38:80","comment":"https://x.com/drb_ra/status/1957723030173675865","timestamp":"1755592517","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f284401a-5c53-5956-807e-6694919a718c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.8.159","comment":"https://x.com/drb_ra/status/1957723169252634819","timestamp":"1755592550","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8ef3432b-f0ea-52e9-9499-b174c5b76134","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.8.159:80","comment":"https://x.com/drb_ra/status/1957723169252634819","timestamp":"1755592550","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ce7c09e5-fa3e-5f28-9c72-679f0033dff4","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.54:8888","comment":"https://x.com/drb_ra/status/1957723309824700836","timestamp":"1755592584","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"8d90cde6-3336-5e5c-a834-b38d9ab91380","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.54","comment":"https://x.com/drb_ra/status/1957723309824700836","timestamp":"1755592584","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"84971f6c-0f23-58a2-93ab-76c21bb67def","type":"url","category":"Network activity","to_ids":true,"value":"http://38.12.25.253:8888","comment":"https://x.com/drb_ra/status/1957723447825473914","timestamp":"1755592617","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"0488615e-66d9-5583-82cf-8eb597764a36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.12.25.253","comment":"https://x.com/drb_ra/status/1957723447825473914","timestamp":"1755592617","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"5e3fb3ef-35a7-50d1-a5ca-85ba86e2c654","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.72.146:1597","comment":"https://x.com/drb_ra/status/1957723587588260342","timestamp":"1755592650","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"0aa59b55-30c9-5b03-8863-0cceb344f60d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.72.146","comment":"https://x.com/drb_ra/status/1957723587588260342","timestamp":"1755592650","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"96ba409e-e5c5-53b6-9e2b-833c6aaf5228","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.35.90","comment":"https://x.com/skocherhan/status/1957723724616241307","timestamp":"1755592683","distribution":"5"},{"uuid":"b5967fed-7602-5a2c-9b12-32dc53729071","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.35.90/layer.ps1","comment":"https://x.com/skocherhan/status/1957723724616241307","timestamp":"1755592683","distribution":"5"},{"uuid":"bdf1a9a3-4191-56cb-b3f4-4ff8ee358959","type":"url","category":"Network activity","to_ids":true,"value":"http://92.98.244.48:443","comment":"https://x.com/drb_ra/status/1957723727271227496","timestamp":"1755592683","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2f2097ed-07fe-56bd-96ae-61496de48775","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.98.244.48","comment":"https://x.com/drb_ra/status/1957723727271227496","timestamp":"1755592683","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"1720ab64-e9f3-58dd-8a0c-10c3081a42ba","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.29.244:443","comment":"https://x.com/drb_ra/status/1957723867734028298","timestamp":"1755592717","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"8cf381a7-ca85-533d-8f48-4bf27bef034f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.29.244","comment":"https://x.com/drb_ra/status/1957723867734028298","timestamp":"1755592717","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"30df3596-411d-5212-b4a7-ec0115cb8a65","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.197.213:443","comment":"https://x.com/drb_ra/status/1957724008625107005","timestamp":"1755592751","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"3adbffcc-0aac-54ef-ae27-d0c1685694ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.197.213","comment":"https://x.com/drb_ra/status/1957724008625107005","timestamp":"1755592751","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b9ab7bb9-cd4f-529c-bf27-1f9d78649907","type":"url","category":"Network activity","to_ids":true,"value":"http://188.226.169.207:443","comment":"https://x.com/drb_ra/status/1957724148517728421","timestamp":"1755592784","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"cf68c8a3-5d3e-5052-860b-e7526904b83a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.226.169.207","comment":"https://x.com/drb_ra/status/1957724148517728421","timestamp":"1755592784","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c4d069b3-4ecc-5bb3-8b77-6484fc2df8ba","type":"url","category":"Network activity","to_ids":true,"value":"http://135.181.41.9:80","comment":"https://x.com/drb_ra/status/1957724287030182359","timestamp":"1755592817","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"bf351e6c-6d8d-566e-917c-accad1e506b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"135.181.41.9","comment":"https://x.com/drb_ra/status/1957724287030182359","timestamp":"1755592817","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"416dbb82-ca66-5284-a2a1-1a5594a72db1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.196.152.102","comment":"https://x.com/drb_ra/status/1957724425907773796","timestamp":"1755592850","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"13d9bbce-c3e4-50ea-a7cb-f36e7b159135","type":"url","category":"Network activity","to_ids":true,"value":"http://44.196.152.102:443","comment":"https://x.com/drb_ra/status/1957724425907773796","timestamp":"1755592850","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"4930188b-75a0-562d-9cc4-a0f19d847ef7","type":"url","category":"Network activity","to_ids":true,"value":"http://34.99.4.103:443","comment":"https://x.com/drb_ra/status/1957724564755976236","timestamp":"1755592883","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"cff2fbd6-9783-577b-b48c-1f4828c30fc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.110.218.246","comment":"https://x.com/drb_ra/status/1957724703381950896","timestamp":"1755592916","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"4f395503-4e18-5629-b6ee-2874aeb4ca78","type":"url","category":"Network activity","to_ids":true,"value":"http://86.110.218.246:1720","comment":"https://x.com/drb_ra/status/1957724703381950896","timestamp":"1755592916","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c3e2f2e1-11f3-5fd8-89a3-159b07d5e013","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.173.45:7443","comment":"https://x.com/drb_ra/status/1957724841995321360","timestamp":"1755592949","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9e006b0a-aee8-5e84-b254-17322195bade","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.173.45","comment":"https://x.com/drb_ra/status/1957724841995321360","timestamp":"1755592949","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8f1eeca9-041d-5e89-bcb1-96166fe8f366","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.248.144.119","comment":"https://x.com/drb_ra/status/1957724980403224703","timestamp":"1755592982","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fc45df91-f296-5981-9337-d1aa3f194317","type":"url","category":"Network activity","to_ids":true,"value":"http://104.248.144.119:7443","comment":"https://x.com/drb_ra/status/1957724980403224703","timestamp":"1755592982","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fd6d6acc-639e-5520-9d66-4f319d967e8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.163.25","comment":"https://x.com/drb_ra/status/1957725118769102913","timestamp":"1755593015","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"70979c13-cf1b-55bb-ab7e-120a350f8795","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.163.25:7443","comment":"https://x.com/drb_ra/status/1957725118769102913","timestamp":"1755593015","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"e583a674-aac7-5912-a9f4-61d5849aed26","type":"url","category":"Network activity","to_ids":true,"value":"http://20.199.67.52:7443","comment":"https://x.com/drb_ra/status/1957725258183585998","timestamp":"1755593048","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"f1d876b4-688e-576d-8919-4a065bee339b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.199.67.52","comment":"https://x.com/drb_ra/status/1957725258183585998","timestamp":"1755593048","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"262cc4a4-866f-55e1-81bb-d2e0c8b8d84d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.159.99.134","comment":"https://x.com/romonlyht/status/1957725293130449354","timestamp":"1755593057","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"558b6669-6f42-5940-9d02-c8189847f1bf","type":"url","category":"Network activity","to_ids":true,"value":"https://pontaldoatalaia.com/lead/refix/unicode/?zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1957725293130449354","timestamp":"1755593057","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0b4dec1-bca4-5cf6-a3f5-662aa28bfabc","type":"url","category":"Network activity","to_ids":true,"value":"https://pontaldoatalaia.com/lead/refix/unicode/system.php?praga=43b0c6a5726543b8c8e33a45709d789e&pid=43b0c6a5726543b8c8e33a45709d789e&framework43b0c6a5726543b8c8e33a45709d789e=43b0c6a5726543b8c8e33a45709d789e&zonealldom=aaaa@example.jp&ubuntu=","comment":"https://x.com/romonlyht/status/1957725295626051703","timestamp":"1755593057","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"238ac0ba-9d88-5790-8c91-47ddcca01252","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.116.87.109","comment":"https://x.com/romonlyht/status/1957725293130449354","timestamp":"1755593057","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"22ccfe48-e76a-5ed5-aa6e-493a12468192","type":"domain","category":"Network activity","to_ids":true,"value":"pontaldoatalaia.com","comment":"https://x.com/romonlyht/status/1957725297878659136","timestamp":"1755593058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bd94f7a-034c-5642-843c-f351e71821a1","type":"url","category":"Network activity","to_ids":true,"value":"https://pontaldoatalaia.com/lead/refix/unicode/auth.php","comment":"https://x.com/romonlyht/status/1957725297878659136","timestamp":"1755593058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13e06564-5d2a-5502-bb13-362828e3cd7a","type":"md5","category":"Payload delivery","to_ids":true,"value":"43b0c6a5726543b8c8e33a45709d789e","comment":"https://x.com/romonlyht/status/1957725297878659136","timestamp":"1755593058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9fd0d308-fcdb-5cb1-ac91-81f5927e5c6b","type":"url","category":"Network activity","to_ids":true,"value":"http://85.192.40.185:31337","comment":"https://x.com/drb_ra/status/1957725396746527073","timestamp":"1755593082","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"633aa135-eede-53ad-a76a-87caa924aad4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.192.40.185","comment":"https://x.com/drb_ra/status/1957725396746527073","timestamp":"1755593082","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"04e8eef8-d212-567c-b27a-20ebf595496b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.216.191.29","comment":"https://x.com/drb_ra/status/1957725536165171317","timestamp":"1755593115","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3f639b8c-efe0-5162-9c01-d78c32c07b84","type":"url","category":"Network activity","to_ids":true,"value":"http://95.216.191.29:444","comment":"https://x.com/drb_ra/status/1957725536165171317","timestamp":"1755593115","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b2cef959-cd3c-5e35-8810-e61c910d698c","type":"url","category":"Network activity","to_ids":true,"value":"http://95.216.183.76:444","comment":"https://x.com/drb_ra/status/1957725674992542175","timestamp":"1755593148","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e9a84854-40a6-5874-bfc7-f7c590d4a795","type":"url","category":"Network activity","to_ids":true,"value":"http://95.216.183.76:1433","comment":"https://x.com/drb_ra/status/1957725813421277624","timestamp":"1755593181","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"01b5037e-98e0-5f73-b594-bbed1b5d12cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.216.183.76","comment":"https://x.com/drb_ra/status/1957725813421277624","timestamp":"1755593181","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3bd6f652-9490-5000-a7a8-b4ea31e8dcb4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.10.25.26","comment":"https://x.com/drb_ra/status/1957725954429575359","timestamp":"1755593214","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83eaeea2-30df-594b-a011-1456a9ac06d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.10.49.137","comment":"https://x.com/drb_ra/status/1957725954429575359","timestamp":"1755593214","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b8b7fd80-e882-5842-84f2-57e4d1be68e5","type":"url","category":"Network activity","to_ids":true,"value":"https://122.10.49.137/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1957725954429575359","timestamp":"1755593214","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85d50ea3-4297-58c2-8254-e8eb37eee2e1","type":"url","category":"Network activity","to_ids":true,"value":"http://198.44.249.16:808","comment":"https://x.com/drb_ra/status/1957725954429575359","timestamp":"1755593214","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6ea4194b-ac36-5faa-976e-d02501753593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.44.249.16","comment":"https://x.com/drb_ra/status/1957725954429575359","timestamp":"1755593214","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b6792ca5-d114-5515-abc1-953fd2b260ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.231.118","comment":"https://x.com/drb_ra/status/1957726094724878442","timestamp":"1755593248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0711d3b1-fabf-50d6-ad1b-4c7700c702ef","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.231.118:443","comment":"https://x.com/drb_ra/status/1957726094724878442","timestamp":"1755593248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"11998df9-c3f9-5808-bdf5-5efc0dbc9829","type":"domain","category":"Network activity","to_ids":true,"value":"2n9kf8y7533c0.cfc-execute.bj.baidubce.com","comment":"https://x.com/drb_ra/status/1957726094724878442","timestamp":"1755593248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a0a2c173-9474-52c0-a8ae-5bc0dbb1c698","type":"url","category":"Network activity","to_ids":true,"value":"https://2n9kf8y7533c0.cfc-execute.bj.baidubce.com/ws/391510761054","comment":"https://x.com/drb_ra/status/1957726094724878442","timestamp":"1755593248","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0dbf7cc3-d4e4-54c1-83c0-0d1dddb78bd6","type":"url","category":"Network activity","to_ids":true,"value":"http://58.181.246.7:80","comment":"https://x.com/drb_ra/status/1957726233296359694","timestamp":"1755593281","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ba86cd1e-c0d8-5d33-902c-071d4357709f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"58.181.246.7","comment":"https://x.com/drb_ra/status/1957726233296359694","timestamp":"1755593281","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03cc63f4-7a16-5baa-92c6-085f80e5acc1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.69.98.230","comment":"https://x.com/drb_ra/status/1957726374032019643","timestamp":"1755593315","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fb6e9dc0-2637-5971-a8b8-2a73afc4a7e4","type":"url","category":"Network activity","to_ids":true,"value":"http://81.69.98.230:50010","comment":"https://x.com/drb_ra/status/1957726374032019643","timestamp":"1755593315","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93ff7b12-ac7d-5fe5-9783-6e1d8b86e6ae","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.112.86:8888","comment":"https://x.com/drb_ra/status/1957726514025201912","timestamp":"1755593348","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"73465faa-e09f-510b-8eb4-7e99f6c95ba2","type":"url","category":"Network activity","to_ids":true,"value":"https://18.171.55.104/push","comment":"https://x.com/drb_ra/status/1957726654249181201","timestamp":"1755593381","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"da3d0cb0-a2fb-5352-9787-68c126829f0c","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.150.254:443","comment":"https://x.com/drb_ra/status/1957726654249181201","timestamp":"1755593381","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"957a3ca7-5662-531a-a852-976bb5291726","type":"domain","category":"Network activity","to_ids":true,"value":"aetatestilas.shop","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"76776c11-ede3-5da8-abc4-dd9f7c15019c","type":"url","category":"Network activity","to_ids":true,"value":"http://couplevisa.com","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"da224b36-ab86-5753-b2d8-c5b848415d78","type":"url","category":"Network activity","to_ids":true,"value":"http://aetatestilas.shop","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"ef437bc5-c250-5ab3-b27e-4fe9ce9d1a3b","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.150.254:80","comment":"https://x.com/drb_ra/status/1957726795442082112","timestamp":"1755593415","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f5d6485a-41a3-5372-afca-9018db20f2b0","type":"domain","category":"Network activity","to_ids":true,"value":"couplevisa.com","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"170f28f9-9d23-5d0b-8e9a-5922220ded27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.171.150.254","comment":"https://x.com/drb_ra/status/1957726795442082112","timestamp":"1755593415","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1f4c6800-3746-5a0d-938d-1160a68f6f2c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.171.55.104","comment":"https://x.com/drb_ra/status/1957726795442082112","timestamp":"1755593415","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bb2784a2-783b-5db5-84ce-e7819ec737b2","type":"url","category":"Network activity","to_ids":true,"value":"http://esdras.ddns.net","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"b57e6023-dc6c-501d-b3ea-fd070f9e23c5","type":"domain","category":"Network activity","to_ids":true,"value":"esdras.ddns.net","comment":"https://x.com/skocherhan/status/1957726794506727712","timestamp":"1755593415","distribution":"5"},{"uuid":"7a4a1fa2-0ba9-548b-87d3-7b4b8797797d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.84.67:80","comment":"https://x.com/drb_ra/status/1957726934764232896","timestamp":"1755593448","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d104df2-06bc-5098-932c-c2cda36ad445","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.84.67","comment":"https://x.com/drb_ra/status/1957726934764232896","timestamp":"1755593448","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"028c555c-a043-5eb0-8d74-f59c823b59fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.245.171","comment":"https://x.com/drb_ra/status/1957727075227357313","timestamp":"1755593482","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dcb88023-5b43-5bc3-89d6-da309e2ec77e","type":"url","category":"Network activity","to_ids":true,"value":"https://43.160.245.171/wc/58462514417","comment":"https://x.com/drb_ra/status/1957727075227357313","timestamp":"1755593482","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b106093a-c890-5134-9bfc-f410226e3b80","type":"url","category":"Network activity","to_ids":true,"value":"http://43.160.245.171:8082","comment":"https://x.com/drb_ra/status/1957727075227357313","timestamp":"1755593482","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ea3f629-3981-5b2a-bb71-ee294fc1f1e6","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.184.172:443","comment":"https://x.com/drb_ra/status/1957727215400948197","timestamp":"1755593515","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b5f278c2-083b-5a0f-ae6e-63ecde970e39","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.184.172","comment":"https://x.com/drb_ra/status/1957727215400948197","timestamp":"1755593515","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ececaf5b-fa1d-5cad-9084-19fc20240e3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.229.187.190","comment":"https://x.com/drb_ra/status/1957727355406872595","timestamp":"1755593549","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4d32d3a5-d35b-5249-bfcc-d5fef903da4b","type":"url","category":"Network activity","to_ids":true,"value":"http://111.229.187.190:8993","comment":"https://x.com/drb_ra/status/1957727355406872595","timestamp":"1755593549","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a23f8ec9-15a3-5788-8c53-c710ed5c63b0","type":"domain","category":"Network activity","to_ids":true,"value":"sts.tencentopenapi.xyz","comment":"https://x.com/drb_ra/status/1957727355406872595","timestamp":"1755593549","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1dba4cc5-19a8-5109-802d-f5ee9abbed7d","type":"url","category":"Network activity","to_ids":true,"value":"https://sts.tencentopenapi.xyz/image/","comment":"https://x.com/drb_ra/status/1957727355406872595","timestamp":"1755593549","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b4e9f5c2-a7d4-5225-a0bc-93a34a10bec2","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.158.87:443","comment":"https://x.com/drb_ra/status/1957727496037617832","timestamp":"1755593582","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9265aa66-5ee9-5918-8a42-fd9cfa3c1554","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.158.87","comment":"https://x.com/drb_ra/status/1957727496037617832","timestamp":"1755593582","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5a1b535f-64a2-5264-95c6-42a55cef1a48","type":"url","category":"Network activity","to_ids":true,"value":"https://dev.johnnetcli999.win/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1957727496037617832","timestamp":"1755593582","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6fcb313b-f364-521c-9094-fbc62cca2557","type":"domain","category":"Network activity","to_ids":true,"value":"dev.johnnetcli999.win","comment":"https://x.com/drb_ra/status/1957727496037617832","timestamp":"1755593582","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ffc1f767-7660-5f17-8b0c-f46fc0e3f795","type":"url","category":"Network activity","to_ids":true,"value":"http://47.102.21.22:10001","comment":"https://x.com/drb_ra/status/1957727636857225252","timestamp":"1755593616","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"75519fed-9296-591a-a225-35bbe24e8775","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.102.21.22","comment":"https://x.com/drb_ra/status/1957727636857225252","timestamp":"1755593616","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f6e80a82-5b3b-5363-90f3-be789364fe8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.203.31.207","comment":"https://x.com/drb_ra/status/1957727775441224021","timestamp":"1755593649","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"326724a9-5eb8-5f03-91a1-953b79e385e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.147.39.227","comment":"https://x.com/drb_ra/status/1957727775441224021","timestamp":"1755593649","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"23c2cfad-b3fd-5324-b2a7-bfbdbdf4e6bb","type":"url","category":"Network activity","to_ids":true,"value":"http://116.203.31.207:9999","comment":"https://x.com/drb_ra/status/1957727775441224021","timestamp":"1755593649","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b1795c14-047b-5d65-8b97-70cf6f4f0daa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.159.110.65","comment":"https://x.com/drb_ra/status/1957727915082158324","timestamp":"1755593682","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6b154a07-fdbd-52b9-aefa-1140fa90010b","type":"url","category":"Network activity","to_ids":true,"value":"http://98.159.110.65:80","comment":"https://x.com/drb_ra/status/1957727915082158324","timestamp":"1755593682","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"09af4d33-ed2f-5ea7-86a5-4fb8dd4b15b2","type":"url","category":"Network activity","to_ids":true,"value":"http://192.238.128.167:8080","comment":"https://x.com/drb_ra/status/1957728055046115572","timestamp":"1755593715","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f8cf1fb0-5008-5020-9d08-14d4cf4eb6aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.238.128.167","comment":"https://x.com/drb_ra/status/1957728055046115572","timestamp":"1755593715","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2b5e96d9-a20c-5f4b-9280-7c42a731e6f4","type":"url","category":"Network activity","to_ids":true,"value":"https://192.238.128.167/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1957728055046115572","timestamp":"1755593715","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ed91cc8b-c98e-55b8-ac23-06c10e0aadfd","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.204.37:80","comment":"https://x.com/drb_ra/status/1957728195261665607","timestamp":"1755593749","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2814305a-75c7-59ef-ba64-7e10c1520f74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.204.37","comment":"https://x.com/drb_ra/status/1957728195261665607","timestamp":"1755593749","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4d7d51d-c2f4-52cd-a683-c606242bf97a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.162.186","comment":"https://x.com/drb_ra/status/1957728336546877709","timestamp":"1755593782","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"08dd1086-7e61-5607-b4b0-4a73f67bb812","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.162.186:2082","comment":"https://x.com/drb_ra/status/1957728336546877709","timestamp":"1755593782","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d2973def-6139-504b-9046-b92a73f2651a","type":"domain","category":"Network activity","to_ids":true,"value":"diuwdx.top","comment":"https://x.com/drb_ra/status/1957728336546877709","timestamp":"1755593782","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97fb1d33-167c-53a3-85fb-57acd631c037","type":"url","category":"Network activity","to_ids":true,"value":"https://www.diuwdx.top/js/jquery-3.3.7.min.js","comment":"https://x.com/drb_ra/status/1957728336546877709","timestamp":"1755593782","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"244517d6-c037-5177-ae93-1a493d0f460b","type":"url","category":"Network activity","to_ids":true,"value":"http://135.181.173.184:10443","comment":"https://x.com/drb_ra/status/1957728475009151294","timestamp":"1755593815","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8d779580-1cbb-51c7-9e14-5849d1323317","type":"ip-dst","category":"Network activity","to_ids":true,"value":"135.181.173.184","comment":"https://x.com/drb_ra/status/1957728475009151294","timestamp":"1755593815","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"14beb3f0-073d-5255-8232-bf3a8921fa88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.8.137","comment":"https://x.com/drb_ra/status/1957728614075527294","timestamp":"1755593849","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"45f8b829-ad69-5b73-b090-6b6819766c2b","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.8.137:427","comment":"https://x.com/drb_ra/status/1957728614075527294","timestamp":"1755593849","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6a55c7c3-2387-5db5-97d5-9f3516ca19e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.40.3.205","comment":"https://x.com/drb_ra/status/1957728753225814122","timestamp":"1755593882","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7f136b9e-d7a1-5aef-95a3-2657e0ce1221","type":"url","category":"Network activity","to_ids":true,"value":"http://13.40.3.205:34210","comment":"https://x.com/drb_ra/status/1957728753225814122","timestamp":"1755593882","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f57835e2-fe44-5834-972d-2f8abd2594a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.63.35.98","comment":"https://x.com/drb_ra/status/1957728892690591746","timestamp":"1755593915","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"78586a19-cb46-5cf2-8bac-9640ea61a630","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.35.98:44818","comment":"https://x.com/drb_ra/status/1957728892690591746","timestamp":"1755593915","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"54ab7534-1b03-5d0f-9b91-83c513978494","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.207.199.12","comment":"https://x.com/drb_ra/status/1957729031941464152","timestamp":"1755593948","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5bde3594-f82e-5096-898b-891151389f26","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.199.12:52200","comment":"https://x.com/drb_ra/status/1957729031941464152","timestamp":"1755593948","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"aa04bb39-6248-52e9-9a48-71ce1f4d52e0","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.199.12:10000","comment":"https://x.com/drb_ra/status/1957729171255214430","timestamp":"1755593981","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7fa861bc-61b0-54b8-969a-17ff6e8c9f12","type":"url","category":"Network activity","to_ids":true,"value":"http://43.207.199.12:5900","comment":"https://x.com/drb_ra/status/1957729312666189837","timestamp":"1755594015","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e798a90f-5e51-56f0-b8f9-2a9fd8382635","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.222.90:27017","comment":"https://x.com/drb_ra/status/1957729453364154846","timestamp":"1755594049","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fdfdd585-aa37-5dec-8c4c-71d59cf4c713","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.222.90","comment":"https://x.com/drb_ra/status/1957729453364154846","timestamp":"1755594049","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"44fff8b2-d184-573a-82a2-18b101e4e300","type":"url","category":"Network activity","to_ids":true,"value":"http://15.168.3.125:10261","comment":"https://x.com/drb_ra/status/1957729592468213918","timestamp":"1755594082","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c5f3bc38-8085-500d-b177-895450c7e750","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.168.3.125","comment":"https://x.com/drb_ra/status/1957729592468213918","timestamp":"1755594082","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6d5f12ba-cf0f-58eb-bb8e-336538a41727","type":"url","category":"Network activity","to_ids":true,"value":"http://40.192.2.32:4567","comment":"https://x.com/drb_ra/status/1957729732784509350","timestamp":"1755594115","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"024eb965-8c43-56a6-b66b-27e058c7849d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.192.2.32","comment":"https://x.com/drb_ra/status/1957729732784509350","timestamp":"1755594115","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"531251f4-ef99-5b7a-9432-d4e75b000eb8","type":"url","category":"Network activity","to_ids":true,"value":"http://3.149.190.172:8808","comment":"https://x.com/drb_ra/status/1957729871393591797","timestamp":"1755594148","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c4a4cede-5b78-598c-a65d-13f8e97fffc8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.96.207.101","comment":"https://x.com/drb_ra/status/1957730014683639878","timestamp":"1755594183","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b8a434da-ca31-520d-8e3d-8dceadb3a41c","type":"url","category":"Network activity","to_ids":true,"value":"http://191.96.207.101:8808","comment":"https://x.com/drb_ra/status/1957730014683639878","timestamp":"1755594183","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5adebd82-10b0-58b3-9bcc-7c74bd7deb0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.132.68.152","comment":"https://x.com/drb_ra/status/1957730154668601416","timestamp":"1755594216","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"20f8b188-172e-5547-8639-d3dc7ed67836","type":"url","category":"Network activity","to_ids":true,"value":"http://18.132.68.152:443","comment":"https://x.com/drb_ra/status/1957730154668601416","timestamp":"1755594216","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"93e56d23-8141-53e4-8846-501f556a25a7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.55.41:80","comment":"https://x.com/drb_ra/status/1957730294624059711","timestamp":"1755594249","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0302072a-b664-5256-a89c-c6d74586c6a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.55.41","comment":"https://x.com/drb_ra/status/1957730294624059711","timestamp":"1755594249","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fe59770f-40a3-59ee-b317-5ee5171ccec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.104.202","comment":"https://x.com/drb_ra/status/1957730433761779763","timestamp":"1755594282","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a4c0a668-9e7e-5027-b3f4-6f9c05af065f","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.104.202:80","comment":"https://x.com/drb_ra/status/1957730433761779763","timestamp":"1755594282","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7075b1f9-58c8-5f1c-aeda-ce8988889ee7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.114.198","comment":"https://x.com/drb_ra/status/1957734331578736813","timestamp":"1755595212","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6dc50253-72a7-52d9-b056-53492928d870","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.114.198:80","comment":"https://x.com/drb_ra/status/1957734331578736813","timestamp":"1755595212","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"49f73f2e-941f-5e11-b094-6df74807bd1a","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.109.33:80","comment":"https://x.com/drb_ra/status/1957734610541973973","timestamp":"1755595278","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a9188f8a-eca7-5400-932b-fb54e0a45028","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.109.33","comment":"https://x.com/drb_ra/status/1957734610541973973","timestamp":"1755595278","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8da9ca29-1a1c-517b-8dab-4d0aea548b05","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.223.199:80","comment":"https://x.com/drb_ra/status/1957734749721510145","timestamp":"1755595311","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5d5dea89-d8ad-5022-a21e-4cff34745e97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.223.199","comment":"https://x.com/drb_ra/status/1957734749721510145","timestamp":"1755595311","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fe3017e6-b01f-5874-8380-fe897144cef3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.38.110:80","comment":"https://x.com/drb_ra/status/1957734889769386237","timestamp":"1755595345","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2babf43d-8e4a-55d7-8e84-0c2f4babe6c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.124.116","comment":"https://x.com/drb_ra/status/1957735028864987502","timestamp":"1755595378","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"921f4b91-be49-5146-aacd-099d917f70f8","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.124.116:80","comment":"https://x.com/drb_ra/status/1957735028864987502","timestamp":"1755595378","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4541f5c3-f9ba-5abb-b0a8-d5c49de0ac31","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.8.44:80","comment":"https://x.com/drb_ra/status/1957735167658778630","timestamp":"1755595411","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cb1e9524-58a0-5477-b284-d4fe22e3c6f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.8.44","comment":"https://x.com/drb_ra/status/1957735167658778630","timestamp":"1755595411","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5409f183-69d6-519c-93ca-dcf093f58c37","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.28.149:80","comment":"https://x.com/drb_ra/status/1957735307316462039","timestamp":"1755595444","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cbb88eaa-2978-59c6-96e1-ca5d492c40d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.28.149","comment":"https://x.com/drb_ra/status/1957735307316462039","timestamp":"1755595444","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a847102e-a0f3-5cd8-aaca-264819f78430","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.224.179","comment":"https://x.com/drb_ra/status/1957735447351742865","timestamp":"1755595478","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bd9b405c-f051-5396-9981-fc58395745eb","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.224.179:80","comment":"https://x.com/drb_ra/status/1957735447351742865","timestamp":"1755595478","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"46e81bb0-7385-5442-b3be-a266e113b093","type":"url","category":"Network activity","to_ids":true,"value":"http://52.220.46.82:443","comment":"https://x.com/drb_ra/status/1957735586669699386","timestamp":"1755595511","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"91e1be57-389d-5aa3-8368-751f4f6a38bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.220.46.82","comment":"https://x.com/drb_ra/status/1957735586669699386","timestamp":"1755595511","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"18f96952-607c-5fb5-a7d8-331fed22f522","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.179.235","comment":"https://x.com/drb_ra/status/1957735725211824354","timestamp":"1755595544","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"09e9e3e1-cd61-5a84-8930-72310d835412","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.179.235:80","comment":"https://x.com/drb_ra/status/1957735725211824354","timestamp":"1755595544","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"70659f0e-dca6-591d-b932-e08a8acb3130","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.172.251","comment":"https://x.com/drb_ra/status/1957735865116946812","timestamp":"1755595577","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f8a8b549-d8fb-5299-8bbf-4da862fd3598","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.172.251:80","comment":"https://x.com/drb_ra/status/1957735865116946812","timestamp":"1755595577","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e9f7f69d-96a6-51e4-861f-a07e59c93121","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.60.67:80","comment":"https://x.com/drb_ra/status/1957736003839377840","timestamp":"1755595610","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"33e44b0e-0b4c-5f81-a904-d5090430c5b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.60.67","comment":"https://x.com/drb_ra/status/1957736003839377840","timestamp":"1755595610","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e35eb024-8e9d-5ba2-a7d9-bfc9067de9b3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.235.205:80","comment":"https://x.com/drb_ra/status/1957736144138895767","timestamp":"1755595644","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9fe297d8-162b-5969-b10f-d0c77d94feb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.180.158.22","comment":"https://x.com/drb_ra/status/1957736284392223037","timestamp":"1755595677","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"ad63ec75-4a2a-5c7d-8c3a-2b1055598785","type":"url","category":"Network activity","to_ids":true,"value":"http://194.180.158.22:8443","comment":"https://x.com/drb_ra/status/1957736284392223037","timestamp":"1755595677","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"5de85914-ed3a-59d6-859b-406e8c9793a6","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.183.125:8888","comment":"https://x.com/drb_ra/status/1957736425266245919","timestamp":"1755595711","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"4ec70b77-c5f8-5cac-b300-4e8dbd3295c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.183.125","comment":"https://x.com/drb_ra/status/1957736425266245919","timestamp":"1755595711","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"1c5dee82-08a7-5827-9405-4d9dab499089","type":"url","category":"Network activity","to_ids":true,"value":"http://195.35.20.235:8888","comment":"https://x.com/drb_ra/status/1957736564500414545","timestamp":"1755595744","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"b9be7b2c-7452-5cda-a091-24ee008dda66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.35.20.235","comment":"https://x.com/drb_ra/status/1957736564500414545","timestamp":"1755595744","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"219ca317-d97b-5790-a818-ed2095ace95f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.156.225.126","comment":"https://x.com/drb_ra/status/1957736703143141450","timestamp":"1755595777","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"02a2672e-4be8-5ba9-956d-9d32b0cd970e","type":"url","category":"Network activity","to_ids":true,"value":"http://124.156.225.126:8848","comment":"https://x.com/drb_ra/status/1957736703143141450","timestamp":"1755595777","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"c3c9209d-7617-50db-8be7-7432b91c8992","type":"url","category":"Network activity","to_ids":true,"value":"http://188.48.83.169:995","comment":"https://x.com/drb_ra/status/1957736844595990822","timestamp":"1755595811","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"e64660df-ed1b-5950-89ab-2d236d2dea94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.48.83.169","comment":"https://x.com/drb_ra/status/1957736844595990822","timestamp":"1755595811","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"6d9699ad-5030-5e68-b500-36a25acd1645","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.214.208.42","comment":"https://x.com/drb_ra/status/1957736985843351981","timestamp":"1755595845","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3924e8fa-1da8-580f-ac1b-8e4fe7ac543e","type":"url","category":"Network activity","to_ids":true,"value":"http://95.214.208.42:443","comment":"https://x.com/drb_ra/status/1957736985843351981","timestamp":"1755595845","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"d90a27dc-c73b-525e-90b7-6bc27c61a274","type":"url","category":"Network activity","to_ids":true,"value":"http://27.128.208.206:443","comment":"https://x.com/drb_ra/status/1957737126621041122","timestamp":"1755595878","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"b47c0daf-5286-534a-ab93-6a20ddce5c53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.128.208.206","comment":"https://x.com/drb_ra/status/1957737126621041122","timestamp":"1755595878","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0450cdf7-39f3-5a39-b841-cc6694ae7ad9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.193.94.14","comment":"https://x.com/drb_ra/status/1957737265330852318","timestamp":"1755595911","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"52adf0de-98fc-5e63-a13c-4658c09a9905","type":"url","category":"Network activity","to_ids":true,"value":"http://34.193.94.14:443","comment":"https://x.com/drb_ra/status/1957737265330852318","timestamp":"1755595911","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"40486952-0f81-5654-8929-c6ce0bacb9c0","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.194.57:8443","comment":"https://x.com/drb_ra/status/1957737404388851979","timestamp":"1755595944","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"fef4a308-58ae-50d5-9bf3-ddbd351dc983","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.194.57","comment":"https://x.com/drb_ra/status/1957737404388851979","timestamp":"1755595944","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7bcf86cd-cb8d-5185-a70b-02fa1ecd331e","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.188:443","comment":"https://x.com/drb_ra/status/1957737543522275418","timestamp":"1755595978","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0fc7157b-2d8b-562d-865b-63799c53766e","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.188:4444","comment":"https://x.com/drb_ra/status/1957737682706006515","timestamp":"1755596011","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4bcedea4-d588-542d-93b3-314872fdcf4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.188","comment":"https://x.com/drb_ra/status/1957737682706006515","timestamp":"1755596011","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"96bc3873-5532-5ae6-8cb4-3d24be312a8d","type":"url","category":"Network activity","to_ids":true,"value":"http://150.187.25.242:9999","comment":"https://x.com/drb_ra/status/1957737824054047189","timestamp":"1755596044","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d27fe8d0-2fc7-5e45-ba04-cb44b0af652e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.187.25.242","comment":"https://x.com/drb_ra/status/1957737824054047189","timestamp":"1755596044","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c4a292b0-e29d-5b54-9c7e-f2fa181ff32e","type":"url","category":"Network activity","to_ids":true,"value":"https://185.147.39.227/oscp/","comment":"https://x.com/drb_ra/status/1957737824054047189","timestamp":"1755596044","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c8442741-d612-5ea4-a636-0ad1329d63dd","type":"url","category":"Network activity","to_ids":true,"value":"http://203.91.78.92:443","comment":"https://x.com/drb_ra/status/1957737963615306081","timestamp":"1755596078","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2b6c8405-036d-5af3-b583-684a45468487","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.91.78.92","comment":"https://x.com/drb_ra/status/1957737963615306081","timestamp":"1755596078","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"95526d81-afc4-54a7-8df2-a6c383784107","type":"url","category":"Network activity","to_ids":true,"value":"http://34.92.141.88:443","comment":"https://x.com/drb_ra/status/1957738103386378638","timestamp":"1755596111","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"06dea893-653f-520e-9619-ce11f65be151","type":"url","category":"Network activity","to_ids":true,"value":"https://gddsw.top/ptj","comment":"https://x.com/drb_ra/status/1957738103386378638","timestamp":"1755596111","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fb316c9d-1956-5ecc-84cc-fdf8fd6fdf25","type":"domain","category":"Network activity","to_ids":true,"value":"gddsw.top","comment":"https://x.com/drb_ra/status/1957738103386378638","timestamp":"1755596111","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6ba738e9-a782-57b6-8791-76e594ecc38c","type":"domain","category":"Network activity","to_ids":true,"value":"trendmnicro.qzz.io","comment":"https://x.com/drb_ra/status/1957738243597770863","timestamp":"1755596144","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c65e19c6-31a5-5f22-9bda-af3403282cfe","type":"url","category":"Network activity","to_ids":true,"value":"https://trendmnicro.qzz.io/g.pixel","comment":"https://x.com/drb_ra/status/1957738243597770863","timestamp":"1755596144","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"858efe54-52c9-5a7a-93d8-76b84c65eeb8","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.73.163:8443","comment":"https://x.com/drb_ra/status/1957738243597770863","timestamp":"1755596144","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4958ac79-1657-5b59-9d13-0957f4462e3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.73.163","comment":"https://x.com/drb_ra/status/1957738243597770863","timestamp":"1755596144","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"033de339-ec4b-51a6-9307-02ec91d384b4","type":"url","category":"Network activity","to_ids":true,"value":"http://106.52.162.38:8083","comment":"https://x.com/drb_ra/status/1957738384148861255","timestamp":"1755596178","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e7107678-bcce-59a9-bedd-34de2cc8c314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.52.162.38","comment":"https://x.com/drb_ra/status/1957738384148861255","timestamp":"1755596178","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d81c5fe3-ed53-5666-b514-f915f272c552","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.228.214.99","comment":"https://x.com/drb_ra/status/1957738523747901780","timestamp":"1755596211","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4e56600e-0e2b-59d9-a7a4-5778c66b9478","type":"url","category":"Network activity","to_ids":true,"value":"https://122.228.214.99/archive/static/images/common/phone.svg","comment":"https://x.com/drb_ra/status/1957738523747901780","timestamp":"1755596211","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"141f4aee-e266-57bb-877e-04832444d708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.31.0.235","comment":"https://x.com/drb_ra/status/1957738665062339037","timestamp":"1755596245","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a0236d8b-37c2-5128-a2ba-cba36c92f164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.66.162.82","comment":"https://x.com/drb_ra/status/1957738665062339037","timestamp":"1755596245","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3bb43370-a8d5-5bf3-8a91-bdf9f3852c53","type":"url","category":"Network activity","to_ids":true,"value":"http://118.31.0.235:443","comment":"https://x.com/drb_ra/status/1957738665062339037","timestamp":"1755596245","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bcd9a7c1-536d-5bc9-9f5f-5c9d79240584","type":"url","category":"Network activity","to_ids":true,"value":"https://101.66.162.82/cloud-site/header-and-footer/shopping-cart.png","comment":"https://x.com/drb_ra/status/1957738665062339037","timestamp":"1755596245","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"690e464e-de72-5212-abc1-4b4eb3b4be1b","type":"url","category":"Network activity","to_ids":true,"value":"http://144.2.110.95:8080","comment":"https://x.com/drb_ra/status/1957738804745322499","timestamp":"1755596278","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"a5308f26-d84e-5069-b741-742fe8b3d9f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.2.110.95","comment":"https://x.com/drb_ra/status/1957738804745322499","timestamp":"1755596278","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"f415a615-d9fb-5d43-8cd3-d5ede98e5a8f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.175:8811","comment":"https://x.com/drb_ra/status/1957738942578426190","timestamp":"1755596311","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dc06e8b0-55af-54a8-8343-b13170962b96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.175","comment":"https://x.com/drb_ra/status/1957738942578426190","timestamp":"1755596311","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"476d5375-c073-5f08-a3f3-0f777e43cf29","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.157.158:50478","comment":"https://x.com/drb_ra/status/1957739082970218594","timestamp":"1755596345","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0abbca46-590b-5bbb-ab7d-fbc22d6b9924","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.157.158:45628","comment":"https://x.com/drb_ra/status/1957739221168353336","timestamp":"1755596378","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"69ebab83-1969-5f29-ac66-e9d33426a416","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.63.157.158","comment":"https://x.com/drb_ra/status/1957739221168353336","timestamp":"1755596378","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3f969346-f7c9-580b-b88c-dda8c0028c95","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.157.158:3128","comment":"https://x.com/drb_ra/status/1957739361002258495","timestamp":"1755596411","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ee7596f2-4119-5eb0-a5a4-3be781f200a7","type":"url","category":"Network activity","to_ids":true,"value":"http://3.28.136.187:2281","comment":"https://x.com/drb_ra/status/1957739501121331318","timestamp":"1755596444","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9af81de4-d2e9-5afe-b9b4-2786f9ab92b9","type":"url","category":"Network activity","to_ids":true,"value":"http://51.84.175.155:20277","comment":"https://x.com/drb_ra/status/1957739641014026326","timestamp":"1755596478","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c5762601-d168-585d-97e6-3de4dfa9c999","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.84.175.155","comment":"https://x.com/drb_ra/status/1957739641014026326","timestamp":"1755596478","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b886ee60-b9ea-5ff1-beeb-651d8b05fc7a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.204.198:31594","comment":"https://x.com/drb_ra/status/1957739781799993595","timestamp":"1755596511","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4224f5ec-f244-53f4-b3b6-32955057acdc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.171.204.198","comment":"https://x.com/drb_ra/status/1957739921759682845","timestamp":"1755596545","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9a0a1023-0c65-5deb-928f-9c2848a28476","type":"url","category":"Network activity","to_ids":true,"value":"http://18.171.204.198:1244","comment":"https://x.com/drb_ra/status/1957739921759682845","timestamp":"1755596545","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8f9a93e2-fb3e-5c58-9546-f7eedc782c02","type":"url","category":"Network activity","to_ids":true,"value":"http://102.100.55.208:443","comment":"https://x.com/drb_ra/status/1957740061757219229","timestamp":"1755596578","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"bd380fab-9fc7-50cd-b9d7-1b9bebca12fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.100.55.208","comment":"https://x.com/drb_ra/status/1957740061757219229","timestamp":"1755596578","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d59257f1-194d-5966-9076-aba872468d1a","type":"url","category":"Network activity","to_ids":true,"value":"http://108.137.69.124:59345","comment":"https://x.com/drb_ra/status/1957740200852947078","timestamp":"1755596611","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"46d9169e-9cc3-5490-ad5e-47445ef824d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.137.69.124","comment":"https://x.com/drb_ra/status/1957740200852947078","timestamp":"1755596611","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fa7307c5-d024-5d4c-849c-784fffc86490","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.57.151:102","comment":"https://x.com/drb_ra/status/1957740340288294956","timestamp":"1755596644","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"98a51c52-3a78-521f-b453-06b7e2a5736a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.57.151","comment":"https://x.com/drb_ra/status/1957740340288294956","timestamp":"1755596644","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"1287a8e6-9b65-5b73-9781-39d3baf0e50c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.222.102:80","comment":"https://x.com/drb_ra/status/1957740478612279749","timestamp":"1755596677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3c029746-2223-57d0-9689-a49779b49261","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.222.102","comment":"https://x.com/drb_ra/status/1957740478612279749","timestamp":"1755596677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4cf4414f-b45c-5e51-96b7-7b0961cbc90d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.74.45.253","comment":"https://x.com/drb_ra/status/1957740617603153964","timestamp":"1755596710","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"419d769c-3d99-50c6-a0d8-ebbe51d02a98","type":"url","category":"Network activity","to_ids":true,"value":"http://54.74.45.253:443","comment":"https://x.com/drb_ra/status/1957740617603153964","timestamp":"1755596710","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f83baa88-e59a-5be3-b2c1-a6fd47ea02d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.126.75.222","comment":"https://x.com/drb_ra/status/1957740756698812490","timestamp":"1755596744","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3987f4cd-1248-5c24-b7d2-e222da60a13f","type":"url","category":"Network activity","to_ids":true,"value":"http://13.126.75.222:443","comment":"https://x.com/drb_ra/status/1957740756698812490","timestamp":"1755596744","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b835dfbc-6727-59ca-9165-f4ca3a440b5c","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.112.1:80","comment":"https://x.com/drb_ra/status/1957740895790391670","timestamp":"1755596777","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"567da990-57ba-5b8f-aaef-371e56968e49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.112.1","comment":"https://x.com/drb_ra/status/1957740895790391670","timestamp":"1755596777","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bb70674f-5abd-5a75-832e-1f1cc6a739f4","type":"url","category":"Network activity","to_ids":true,"value":"http://34.241.190.148:80","comment":"https://x.com/drb_ra/status/1957741036484325738","timestamp":"1755596810","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c064f203-71da-5e0c-8c0e-ef2bf5240c6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.241.190.148","comment":"https://x.com/drb_ra/status/1957741036484325738","timestamp":"1755596810","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fb025ca9-60b1-5c20-9791-0b0c440bad6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.234.238","comment":"https://x.com/drb_ra/status/1957741176964149525","timestamp":"1755596844","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f3fc059d-0d57-5b18-bfb9-e8fc7863f800","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.234.238:80","comment":"https://x.com/drb_ra/status/1957741176964149525","timestamp":"1755596844","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9399cfd1-b847-5003-b0d2-3c543ccf0268","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.19.190.100","comment":"https://x.com/drb_ra/status/1957741315808194640","timestamp":"1755596877","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"449be71b-4484-573f-97ee-dea3da7557ad","type":"url","category":"Network activity","to_ids":true,"value":"http://52.19.190.100:80","comment":"https://x.com/drb_ra/status/1957741315808194640","timestamp":"1755596877","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8cbe4063-270b-5f62-920e-ab98de77b5cf","type":"url","category":"Network activity","to_ids":true,"value":"http://54.156.2.207:443","comment":"https://x.com/drb_ra/status/1957741455751139778","timestamp":"1755596910","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"18cb236a-9a92-513c-bf04-d027924d1bb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.156.2.207","comment":"https://x.com/drb_ra/status/1957741455751139778","timestamp":"1755596910","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f625b7d0-2434-598c-a637-de6f95bbe420","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.158.221:80","comment":"https://x.com/drb_ra/status/1957741594192261371","timestamp":"1755596943","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fa6f9aa6-6abf-5ed5-93bf-18cf0c71ebaa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.158.221","comment":"https://x.com/drb_ra/status/1957741594192261371","timestamp":"1755596943","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"163e57b7-c85d-5a6c-8aa0-e5c087fcb563","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.31.168.132","comment":"https://x.com/drb_ra/status/1957741734236156361","timestamp":"1755596977","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f9ef36f4-c362-5cbb-882d-8ec8200c6d4f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.31.168.132:80","comment":"https://x.com/drb_ra/status/1957741734236156361","timestamp":"1755596977","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"691dd473-da5f-57af-b1de-c2bde7acbf48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.229.164.157","comment":"https://x.com/drb_ra/status/1957741872715026478","timestamp":"1755597010","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"07e4e10b-8c92-5ece-bc34-ba0bbe244285","type":"url","category":"Network activity","to_ids":true,"value":"http://34.229.164.157:443","comment":"https://x.com/drb_ra/status/1957741872715026478","timestamp":"1755597010","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d5cad3e0-009c-5277-8609-9b47a91997ba","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.123.3:443","comment":"https://x.com/drb_ra/status/1957742011680702930","timestamp":"1755597043","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"29be489f-99b4-5323-8738-80c2303d80d2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.230.161:80","comment":"https://x.com/drb_ra/status/1957742153062346765","timestamp":"1755597077","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"476c1b1c-0fd2-5d66-ab61-af00bed2443a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.240.32.115","comment":"https://x.com/drb_ra/status/1957742294834217074","timestamp":"1755597110","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9b868e23-c4f0-52ae-be02-ad31b05cbdf6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.240.32.115:443","comment":"https://x.com/drb_ra/status/1957742294834217074","timestamp":"1755597110","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d7a6783a-e52c-50a3-bd07-115c9b82ea48","type":"url","category":"Network activity","to_ids":true,"value":"http://52.3.130.219:443","comment":"https://x.com/drb_ra/status/1957742432419717595","timestamp":"1755597143","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"496534b2-690c-5045-b1b8-67477b918fe1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.3.130.219","comment":"https://x.com/drb_ra/status/1957742432419717595","timestamp":"1755597143","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"74f0593f-17f1-5357-86c7-9125a069781c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.108.44","comment":"https://x.com/drb_ra/status/1957742572572729751","timestamp":"1755597177","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c36a6502-7763-5c15-8957-1adc0a458a22","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.108.44:80","comment":"https://x.com/drb_ra/status/1957742572572729751","timestamp":"1755597177","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d7507153-34d7-5e68-a03f-7dc43bb2b83d","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.120.17:80","comment":"https://x.com/drb_ra/status/1957742713631346887","timestamp":"1755597210","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e74af28f-5b73-5c07-ad5b-2787e20c3d50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.120.17","comment":"https://x.com/drb_ra/status/1957742713631346887","timestamp":"1755597210","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5217fcf0-69fb-5392-a6eb-3662f332fc72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.76.243","comment":"https://x.com/drb_ra/status/1957742854446731544","timestamp":"1755597244","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7cb81a95-73a0-519c-92c7-93355d3157a0","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.76.243:80","comment":"https://x.com/drb_ra/status/1957742854446731544","timestamp":"1755597244","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"eec85ea1-3307-5d73-86bf-c60d69fcf97f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.248.197.35:80","comment":"https://x.com/drb_ra/status/1957742993672163746","timestamp":"1755597277","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6710b234-c680-57df-a9a1-2d45cd4a116b","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.237.203:80","comment":"https://x.com/drb_ra/status/1957743135049568337","timestamp":"1755597311","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dbcb107b-edc2-5339-8f34-84bb2b87db23","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.237.203","comment":"https://x.com/drb_ra/status/1957743135049568337","timestamp":"1755597311","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cbc60761-3781-5493-b023-4b2c384bf961","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.221.108","comment":"https://x.com/drb_ra/status/1957743276766937569","timestamp":"1755597344","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"70a41b7c-5238-5884-9c05-2706bb102cf4","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.221.108:80","comment":"https://x.com/drb_ra/status/1957743276766937569","timestamp":"1755597344","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"48d663bc-bf5c-5f02-980a-b743cf17cade","type":"url","category":"Network activity","to_ids":true,"value":"http://34.241.95.178:80","comment":"https://x.com/drb_ra/status/1957743415493554545","timestamp":"1755597378","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9576b3ee-888e-5d82-bb11-161063b38f8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.241.95.178","comment":"https://x.com/drb_ra/status/1957743415493554545","timestamp":"1755597378","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a7917307-d802-5a71-837a-dc2334e079ea","type":"url","category":"Network activity","to_ids":true,"value":"http://3.226.97.228:443","comment":"https://x.com/drb_ra/status/1957743554794561805","timestamp":"1755597411","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c8a13648-b856-5881-8c8f-a25d48057d71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.138.22","comment":"https://x.com/drb_ra/status/1957743694574211512","timestamp":"1755597444","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"49d35c7e-f44c-5e11-9190-40480389a168","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.138.22:80","comment":"https://x.com/drb_ra/status/1957743694574211512","timestamp":"1755597444","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"48449376-1027-54e8-874f-694b0b5e9d8f","type":"url","category":"Network activity","to_ids":true,"value":"http://54.72.174.205:443","comment":"https://x.com/drb_ra/status/1957743833250214326","timestamp":"1755597477","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9cfcc76f-8553-52c5-9293-d40e7ab7bdc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.72.174.205","comment":"https://x.com/drb_ra/status/1957743833250214326","timestamp":"1755597477","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e6559342-cc11-5d7d-9c25-a8a9590dc81e","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.131.49:80","comment":"https://x.com/drb_ra/status/1957743971804852346","timestamp":"1755597510","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"10bf8948-00c4-507f-a77f-f1c6d6827f1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.131.49","comment":"https://x.com/drb_ra/status/1957743971804852346","timestamp":"1755597510","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"793a8749-077a-5080-99f8-b8d117c1a275","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.159.239:80","comment":"https://x.com/drb_ra/status/1957744112544985293","timestamp":"1755597544","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6e5a7317-ae0f-516a-896f-5b3d58240050","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.159.239","comment":"https://x.com/drb_ra/status/1957744112544985293","timestamp":"1755597544","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7a5e16c8-3323-50a5-92af-f4b5f2de8f7e","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.215.121:80","comment":"https://x.com/drb_ra/status/1957744251162218818","timestamp":"1755597577","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"35c5230a-b159-5735-92df-d161a00d6a86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.215.121","comment":"https://x.com/drb_ra/status/1957744251162218818","timestamp":"1755597577","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"904efaa6-bebc-5545-9e34-6d1a2fd60280","type":"domain","category":"Network activity","to_ids":true,"value":"e-partage-onedrive.webflow.io","comment":"https://x.com/urldna_bot/status/1957744382645313786","timestamp":"1755597608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c74351a2-6c3f-58fe-aa9b-2fc005137178","type":"url","category":"Network activity","to_ids":true,"value":"https://e-partage-onedrive.webflow.io","comment":"https://x.com/urldna_bot/status/1957744382645313786","timestamp":"1755597608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ee7bedd5-39ed-577e-87a8-ab82ec079c26","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.39.193:80","comment":"https://x.com/drb_ra/status/1957744390627287323","timestamp":"1755597610","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4d77e1a8-eb59-5521-ac7d-b0cd879a091e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.39.193","comment":"https://x.com/drb_ra/status/1957744390627287323","timestamp":"1755597610","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2cf7341a-6712-52d0-9668-5acd639fa163","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.122.244:80","comment":"https://x.com/drb_ra/status/1957744530360336823","timestamp":"1755597643","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"acf2b2f1-69b6-51bc-8723-e5af7805c7fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.122.244","comment":"https://x.com/drb_ra/status/1957744530360336823","timestamp":"1755597643","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b0dd6673-0965-5255-b751-20057676994f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.3.131.248:80","comment":"https://x.com/drb_ra/status/1957744670483640443","timestamp":"1755597677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"32141728-a513-540a-b849-b422a24a7e93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.3.131.248","comment":"https://x.com/drb_ra/status/1957744670483640443","timestamp":"1755597677","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d8f74c0a-c4ab-5bdb-9fe6-df09ff5da5fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.125.193","comment":"https://x.com/drb_ra/status/1957744808916590868","timestamp":"1755597710","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"85f4898e-dd21-5c2a-8dd7-aefed49157e7","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.125.193:80","comment":"https://x.com/drb_ra/status/1957744808916590868","timestamp":"1755597710","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"55bde6fc-1489-5e28-9845-dd822c1f09bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.34.20.49","comment":"https://x.com/drb_ra/status/1957744948108738598","timestamp":"1755597743","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"66bca096-7cba-51a4-8f8e-f655408f0ed8","type":"url","category":"Network activity","to_ids":true,"value":"http://63.34.20.49:80","comment":"https://x.com/drb_ra/status/1957744948108738598","timestamp":"1755597743","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"eb786a4f-3802-5fdf-8e68-2e78641f4288","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.75.151:80","comment":"https://x.com/drb_ra/status/1957745088517255326","timestamp":"1755597776","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b7176dd6-9b24-5849-b1b4-15b60041854a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.184.92","comment":"https://x.com/drb_ra/status/1957745228011741607","timestamp":"1755597810","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"05e192a1-1c69-5bf9-a69c-76310f903068","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.184.92:80","comment":"https://x.com/drb_ra/status/1957745228011741607","timestamp":"1755597810","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cc2b2325-81f1-5c3d-b80a-29739ed80cc8","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.213.107:80","comment":"https://x.com/drb_ra/status/1957745367963029841","timestamp":"1755597843","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"901e1c68-e016-5feb-ac36-e32e9f1d8e35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.213.107","comment":"https://x.com/drb_ra/status/1957745367963029841","timestamp":"1755597843","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"27ce51b5-1374-53ef-acdf-2256ebe5102a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.118.60:80","comment":"https://x.com/drb_ra/status/1957745505280098814","timestamp":"1755597876","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1d146424-3639-5f89-b76e-26092c968c6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.118.60","comment":"https://x.com/drb_ra/status/1957745505280098814","timestamp":"1755597876","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8d3ea6fb-cc10-554a-b5bd-b0453209aafb","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.159.184:80","comment":"https://x.com/drb_ra/status/1957745646032613477","timestamp":"1755597909","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"58036e16-2a54-50ea-bde9-841bdc4e1fbf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.159.184","comment":"https://x.com/drb_ra/status/1957745646032613477","timestamp":"1755597909","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a2cb9e84-0da2-52d3-ab20-05ce50aafdae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.65.138","comment":"https://x.com/drb_ra/status/1957745784906043611","timestamp":"1755597942","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"82fcb756-8f6a-56d9-bcd3-4c074fd7d902","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.65.138:80","comment":"https://x.com/drb_ra/status/1957745784906043611","timestamp":"1755597942","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f7a6acdf-ae44-581d-ad37-c4a2c24444ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.228.6.148","comment":"https://x.com/drb_ra/status/1957745923401916737","timestamp":"1755597975","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9c8d7647-afe7-5eb3-ba9b-52de3e497d16","type":"url","category":"Network activity","to_ids":true,"value":"http://34.228.6.148:80","comment":"https://x.com/drb_ra/status/1957745923401916737","timestamp":"1755597975","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"950771f8-88c9-55a1-b965-41e24aaf3ad2","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.4.36:80","comment":"https://x.com/drb_ra/status/1957746061902045480","timestamp":"1755598008","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e13448a9-9098-5db5-bdfb-021fc47bdfa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.4.36","comment":"https://x.com/drb_ra/status/1957746061902045480","timestamp":"1755598008","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"25aeff0e-865f-51b9-be05-78d24e097e3a","type":"url","category":"Network activity","to_ids":true,"value":"http://62.60.226.57:4000","comment":"https://x.com/drb_ra/status/1957746201685545205","timestamp":"1755598042","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"dbf25c8b-7512-5a38-96fa-4e4aa0122857","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.60.226.57","comment":"https://x.com/drb_ra/status/1957746201685545205","timestamp":"1755598042","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"1b2efabf-f4bf-50f3-b22b-3e2281ca3dc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.55","comment":"https://x.com/drb_ra/status/1957746341519716787","timestamp":"1755598075","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"3378091d-2945-5f2f-8628-5d369d32cc1e","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.55:8888","comment":"https://x.com/drb_ra/status/1957746341519716787","timestamp":"1755598075","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"1fb8af3a-4fd5-5ef7-8770-53d1f91073bd","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.42:8888","comment":"https://x.com/drb_ra/status/1957746482049700312","timestamp":"1755598109","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"6ee1ac53-f259-5c28-9796-de7e66a0019b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.42","comment":"https://x.com/drb_ra/status/1957746482049700312","timestamp":"1755598109","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"8786b6f5-711f-58cb-85d1-8da351f44132","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.152.225:443","comment":"https://x.com/drb_ra/status/1957746623754432566","timestamp":"1755598142","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"e6de4a66-77db-5f38-b665-95ab0d9869ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.152.225","comment":"https://x.com/drb_ra/status/1957746623754432566","timestamp":"1755598142","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"be137d10-10bc-545c-bcfe-15f0f956f40c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.134.26.131","comment":"https://x.com/drb_ra/status/1957746761470300175","timestamp":"1755598175","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"389d7fc8-e48a-52b6-9896-bdcdfdcde70f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.134.26.131:443","comment":"https://x.com/drb_ra/status/1957746761470300175","timestamp":"1755598175","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c502c13e-692b-5f53-a1dd-a63e33cdea4c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.248.115.247:443","comment":"https://x.com/drb_ra/status/1957746900943401086","timestamp":"1755598209","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"ab1b4532-3b0c-5904-85b1-69a6ffdce5f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.248.115.247","comment":"https://x.com/drb_ra/status/1957746900943401086","timestamp":"1755598209","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"3ee9cb94-d58b-5cf7-b84c-c4349d5e3574","type":"url","category":"Network activity","to_ids":true,"value":"http://4.201.112.117:31337","comment":"https://x.com/drb_ra/status/1957747040303346102","timestamp":"1755598242","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ea0a6924-cb3e-53c9-8139-f1fbdba91586","type":"url","category":"Network activity","to_ids":true,"value":"http://209.222.4.175:31337","comment":"https://x.com/drb_ra/status/1957747177234518045","timestamp":"1755598274","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"edd8a84e-dadc-5b15-bec8-c9d3cb1c1021","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.222.4.175","comment":"https://x.com/drb_ra/status/1957747177234518045","timestamp":"1755598274","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d7d0af44-4144-59a4-b438-1fe3b3e7ed7c","type":"url","category":"Network activity","to_ids":true,"value":"http://207.244.249.244:31337","comment":"https://x.com/drb_ra/status/1957747316598927511","timestamp":"1755598308","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fe90355c-ab93-5c74-8af9-1c7bfb63068f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.244.249.244","comment":"https://x.com/drb_ra/status/1957747316598927511","timestamp":"1755598308","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"eceed745-6710-528f-a410-11a781af7656","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.59.110","comment":"https://x.com/drb_ra/status/1957747455778517319","timestamp":"1755598341","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"10c435da-cc5c-5e49-995b-3d5328428b1f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.59.110:31337","comment":"https://x.com/drb_ra/status/1957747455778517319","timestamp":"1755598341","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"55a37999-7f24-57f3-bcc1-77d37d1988c4","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.109.65:31337","comment":"https://x.com/drb_ra/status/1957747593762533402","timestamp":"1755598374","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9272cb95-9fcc-5028-a3a8-86eb16a0c134","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.109.65","comment":"https://x.com/drb_ra/status/1957747593762533402","timestamp":"1755598374","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"62847e18-bca2-555a-ad79-e8a3d5834cf2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.24.114.211:443","comment":"https://x.com/drb_ra/status/1957747735303712912","timestamp":"1755598407","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"797c750d-198f-5b96-8110-02f5d93a8e19","type":"url","category":"Network activity","to_ids":true,"value":"http://103.140.194.245:31337","comment":"https://x.com/drb_ra/status/1957747874642489482","timestamp":"1755598441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"7bee0c97-1e99-5b78-999b-bf7cff2376f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.140.194.245","comment":"https://x.com/drb_ra/status/1957747874642489482","timestamp":"1755598441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2ca9282e-fc7c-5ea4-ae36-9061ba0d0c8a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.156.73.52:31337","comment":"https://x.com/drb_ra/status/1957748014396625212","timestamp":"1755598474","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f3ca6559-b80e-5c67-8910-c002b2779285","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.156.73.52","comment":"https://x.com/drb_ra/status/1957748014396625212","timestamp":"1755598474","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2ab837d0-53b0-5154-b65d-ce6600f85968","type":"url","category":"Network activity","to_ids":true,"value":"http://202.10.47.169:9000","comment":"https://x.com/drb_ra/status/1957748154163495227","timestamp":"1755598507","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"972093f4-9ee3-5219-b2f1-f6388de23370","type":"url","category":"Network activity","to_ids":true,"value":"http://202.10.47.169:31337","comment":"https://x.com/drb_ra/status/1957748294592893125","timestamp":"1755598541","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6ead03d0-996c-5242-ac41-b88abcf8c302","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.10.47.169","comment":"https://x.com/drb_ra/status/1957748294592893125","timestamp":"1755598541","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3187fa77-b955-5048-90b1-cc3e8e537433","type":"url","category":"Network activity","to_ids":true,"value":"https://cloud.defenderblt.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1957748436238831908","timestamp":"1755598575","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f8ce708b-f0fd-5cf4-aee8-af3866ce7de7","type":"domain","category":"Network activity","to_ids":true,"value":"cloud.defenderblt.com","comment":"https://x.com/drb_ra/status/1957748436238831908","timestamp":"1755598575","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ed41682f-3e72-5c99-80b5-e81a0fd1117a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.141.24.28","comment":"https://x.com/drb_ra/status/1957748436238831908","timestamp":"1755598575","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"12bb0d6e-f252-5c08-bc8d-a11442e19103","type":"url","category":"Network activity","to_ids":true,"value":"http://185.141.24.28:443","comment":"https://x.com/drb_ra/status/1957748436238831908","timestamp":"1755598575","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b5f5bbe8-6fa9-5f85-875c-1c4dc011b2cc","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.102.110:7788","comment":"https://x.com/drb_ra/status/1957748576613794184","timestamp":"1755598608","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"71980a38-134e-5959-9f5e-429c1d0c43d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.102.110","comment":"https://x.com/drb_ra/status/1957748576613794184","timestamp":"1755598608","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e1066da9-f0b4-563a-b478-ff543d018d28","type":"url","category":"Network activity","to_ids":true,"value":"https://185.147.39.227/ca","comment":"https://x.com/drb_ra/status/1957748717462716585","timestamp":"1755598642","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1957748858043396500","timestamp":"1755598675","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"37d5b2c3-a8f2-5fc3-a67f-facaca63f56b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8848","comment":"https://x.com/drb_ra/status/1957748858043396500","timestamp":"1755598675","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a1c74e5-6dfa-55e1-bf37-b9e4479f7246","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.165.14.51","comment":"https://x.com/drb_ra/status/1957748997357203500","timestamp":"1755598708","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6ba7d5e6-87a2-5461-ab3c-6b582f843c3c","type":"url","category":"Network activity","to_ids":true,"value":"http://102.165.14.51:50542","comment":"https://x.com/drb_ra/status/1957748997357203500","timestamp":"1755598708","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3e7ae48f-c00e-5e57-9352-21cd94e73d39","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.139.214:2404","comment":"https://x.com/drb_ra/status/1957749137635426712","timestamp":"1755598742","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1c6122c7-2ddc-5134-b106-38e190d94fd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.139.214","comment":"https://x.com/drb_ra/status/1957749137635426712","timestamp":"1755598742","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"24b68868-c6e5-5b59-be62-61bbc2857005","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.44.82.75","comment":"https://x.com/drb_ra/status/1957749278484701378","timestamp":"1755598775","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2d39ac17-fcb7-5dc4-ade8-aacdc7d12732","type":"url","category":"Network activity","to_ids":true,"value":"http://51.44.82.75:3128","comment":"https://x.com/drb_ra/status/1957749278484701378","timestamp":"1755598775","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"cab0e00c-4eae-546b-9ec5-58481d3293c3","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.167.228:29451","comment":"https://x.com/drb_ra/status/1957749421430468850","timestamp":"1755598809","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"91cf5729-0b8f-5793-b10a-f8fb600b602b","type":"url","category":"Network activity","to_ids":true,"value":"http://16.63.167.228:9601","comment":"https://x.com/drb_ra/status/1957749561650200951","timestamp":"1755598843","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ac2e4acd-2762-508c-abdf-95698e5e30a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.63.167.228","comment":"https://x.com/drb_ra/status/1957749561650200951","timestamp":"1755598843","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0a6d636d-dc24-56db-b90e-44d0c9a8275c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.199.160.18:8130","comment":"https://x.com/drb_ra/status/1957749703124369464","timestamp":"1755598877","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f9098d27-3f82-5df7-a49e-89f5a51ff841","type":"url","category":"Network activity","to_ids":true,"value":"http://43.199.160.18:2380","comment":"https://x.com/drb_ra/status/1957749841041227909","timestamp":"1755598909","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"cd99a24e-0dc6-5ca5-93a3-b93843177c27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.199.160.18","comment":"https://x.com/drb_ra/status/1957749841041227909","timestamp":"1755598909","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1b75a0a2-1448-55be-b0d8-402e99698af3","type":"url","category":"Network activity","to_ids":true,"value":"http://35.199.35.25:8808","comment":"https://x.com/drb_ra/status/1957749982855086555","timestamp":"1755598943","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"777ba9cb-8a99-595b-812e-67111ee87f7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.199.35.25","comment":"https://x.com/drb_ra/status/1957749982855086555","timestamp":"1755598943","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"51a6f300-8de6-54ba-b802-000beb37ac00","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.159.71:9999","comment":"https://x.com/drb_ra/status/1957750120365047867","timestamp":"1755598976","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c61d53b1-a376-50cd-9386-5c8ec9e49bb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.159.71","comment":"https://x.com/drb_ra/status/1957750120365047867","timestamp":"1755598976","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"47186087-7f88-5845-9508-908116cc020a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.224.81.183","comment":"https://x.com/drb_ra/status/1957750259578220592","timestamp":"1755599009","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"509381c9-ab21-5c1d-a087-8c079852af57","type":"url","category":"Network activity","to_ids":true,"value":"http://18.224.81.183:443","comment":"https://x.com/drb_ra/status/1957750259578220592","timestamp":"1755599009","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"45385713-fc54-5a1a-92ee-e6fa3df99016","type":"url","category":"Network activity","to_ids":true,"value":"http://54.91.67.124:443","comment":"https://x.com/drb_ra/status/1957750399743467948","timestamp":"1755599043","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"816bb367-2062-5e17-b667-ab3a6a8b069d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.91.67.124","comment":"https://x.com/drb_ra/status/1957750399743467948","timestamp":"1755599043","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4d4aa4de-7076-5392-9ab3-3292220385c8","type":"url","category":"Network activity","to_ids":true,"value":"http://3.6.62.222:443","comment":"https://x.com/drb_ra/status/1957750541674770872","timestamp":"1755599077","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4a10d9eb-515d-566e-b678-3e03bdeba643","type":"url","category":"Network activity","to_ids":true,"value":"http://35.157.223.96:443","comment":"https://x.com/drb_ra/status/1957750683391725644","timestamp":"1755599110","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"14237cc4-5741-5248-94f6-dceff98f5e47","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.157.223.96","comment":"https://x.com/drb_ra/status/1957750683391725644","timestamp":"1755599110","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f0fe7347-4f02-52ea-97d5-34a16f6c3394","type":"url","category":"Network activity","to_ids":true,"value":"http://54.219.53.174:443","comment":"https://x.com/drb_ra/status/1957750822898454860","timestamp":"1755599144","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0cceb2c1-957d-5c29-b765-21d75ca3d9f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.219.53.174","comment":"https://x.com/drb_ra/status/1957750822898454860","timestamp":"1755599144","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"22506453-4243-5e81-bd45-462f3161f64e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:1080","comment":"https://x.com/drb_ra/status/1957753612437950937","timestamp":"1755599809","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"edb7adeb-6040-5cb8-af37-0d50dae75ca7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.129","comment":"https://x.com/drb_ra/status/1957753612437950937","timestamp":"1755599809","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"605501a3-88b6-55c2-bc45-e70286ed9ef5","type":"url","category":"Network activity","to_ids":true,"value":"http://87.120.93.133:53","comment":"https://x.com/drb_ra/status/1957753754612298202","timestamp":"1755599843","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2be3785f-18be-596f-82ae-c71e0e98475e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.120.93.133","comment":"https://x.com/drb_ra/status/1957753754612298202","timestamp":"1755599843","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"03627baa-4c00-5232-a4f2-824419069b77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.52.208.143","comment":"https://x.com/drb_ra/status/1957753894844424532","timestamp":"1755599876","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"60d13b55-1829-55da-8dda-e73bbedadb36","type":"url","category":"Network activity","to_ids":true,"value":"http://106.52.208.143:46000","comment":"https://x.com/drb_ra/status/1957753894844424532","timestamp":"1755599876","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"39d70d27-c23f-5e09-b2de-a08326854a13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.56.219.16","comment":"https://x.com/drb_ra/status/1957754035538173983","timestamp":"1755599910","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f768c31c-22b7-5747-8127-8ab1e628e049","type":"url","category":"Network activity","to_ids":true,"value":"http://146.56.219.16:80","comment":"https://x.com/drb_ra/status/1957754035538173983","timestamp":"1755599910","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7fe8c71a-0911-5a3d-ab19-74b72a02a619","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.216.24","comment":"https://x.com/drb_ra/status/1957754174612877384","timestamp":"1755599943","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"04f5efc4-2d73-5c9d-a515-3423d12cf33f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"10.10.16.6","comment":"https://x.com/drb_ra/status/1957754174612877384","timestamp":"1755599943","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6ed99557-cdff-576c-8c39-7fbbd57e2dc2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.216.24:80","comment":"https://x.com/drb_ra/status/1957754174612877384","timestamp":"1755599943","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f33ddb2-ed4f-5909-964c-ae2575aff537","type":"url","category":"Network activity","to_ids":true,"value":"http://106.52.162.38:443","comment":"https://x.com/drb_ra/status/1957754315256279117","timestamp":"1755599976","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6438988-65a5-5e9f-bce4-988b9920f8ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.86.100.98","comment":"https://x.com/drb_ra/status/1957755845103570957","timestamp":"1755600341","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"706c7f40-e3a3-5175-9982-229d04d409f2","type":"url","category":"Network activity","to_ids":true,"value":"http://35.86.100.98:10259","comment":"https://x.com/drb_ra/status/1957755845103570957","timestamp":"1755600341","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"66a8009f-d3d6-55ac-8fcb-2aae422b289f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.44.152:113","comment":"https://x.com/drb_ra/status/1957755985067385194","timestamp":"1755600374","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"383e8fcc-4964-5619-afd5-a79a8700db02","type":"url","category":"Network activity","to_ids":true,"value":"http://54.250.164.8:8013","comment":"https://x.com/drb_ra/status/1957756123961795030","timestamp":"1755600407","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0a08081c-639b-5651-bcbe-93ad45e8ee0a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.250.164.8","comment":"https://x.com/drb_ra/status/1957756123961795030","timestamp":"1755600407","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"748b487f-d578-5206-b323-4e0d9e0b7f79","type":"url","category":"Network activity","to_ids":true,"value":"http://179.95.202.249:9990","comment":"https://x.com/drb_ra/status/1957756265838354793","timestamp":"1755600441","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"023b8684-db16-57f8-94aa-bd2e1c9c9820","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.95.202.249","comment":"https://x.com/drb_ra/status/1957756265838354793","timestamp":"1755600441","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f45821cb-ecf2-54cc-a809-c155170779d6","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.65.171:50805","comment":"https://x.com/drb_ra/status/1957756404237799708","timestamp":"1755600474","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"bae7e741-3448-53ad-9b95-6f5eb76b713c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.65.171","comment":"https://x.com/drb_ra/status/1957756404237799708","timestamp":"1755600474","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d1be2a96-8322-5834-9970-96fffdab87f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.178.203.23","comment":"https://x.com/drb_ra/status/1957756543669006623","timestamp":"1755600508","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"dd26d49e-6968-56d9-91c3-69de06411f35","type":"url","category":"Network activity","to_ids":true,"value":"http://35.178.203.23:9876","comment":"https://x.com/drb_ra/status/1957756543669006623","timestamp":"1755600508","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"019e40fd-515a-5a88-966e-da4cfdb719cc","type":"url","category":"Network activity","to_ids":true,"value":"http://16.62.129.84:5902","comment":"https://x.com/drb_ra/status/1957756682135613617","timestamp":"1755600541","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2386a373-5f17-5dac-a937-86c64a70e2dc","type":"url","category":"Network activity","to_ids":true,"value":"http://16.62.129.84:102","comment":"https://x.com/drb_ra/status/1957756821071925571","timestamp":"1755600574","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"85801b02-bf5a-5275-83d2-3b4a3c5b1cbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.62.129.84","comment":"https://x.com/drb_ra/status/1957756821071925571","timestamp":"1755600574","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d3d3913a-1e97-5c80-ba5b-296b32a6d83c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.38.78.189:80","comment":"https://x.com/drb_ra/status/1957757239415947326","timestamp":"1755600673","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dd058b20-0240-5b2d-9062-510604a0ddeb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.38.78.189","comment":"https://x.com/drb_ra/status/1957757239415947326","timestamp":"1755600673","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b43b9aaa-f9ba-5f6e-afe2-977033532b6c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.161.145.210:443","comment":"https://x.com/drb_ra/status/1957757378683691087","timestamp":"1755600707","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"13424b67-e869-5c59-b2d6-d739650bf74c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.161.145.210","comment":"https://x.com/drb_ra/status/1957757378683691087","timestamp":"1755600707","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9eedab78-928b-59d4-80f0-95f82c61d08a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.8.136.20:443","comment":"https://x.com/drb_ra/status/1957757516986646961","timestamp":"1755600740","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"698fb183-af75-5599-a553-dae7afad67b9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.124.164.59:443","comment":"https://x.com/drb_ra/status/1957757658355601596","timestamp":"1755600773","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d947253c-8940-5c07-92c0-1e6e29c118ce","type":"url","category":"Network activity","to_ids":true,"value":"http://18.203.221.135:443","comment":"https://x.com/drb_ra/status/1957757798504071451","timestamp":"1755600807","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ec85ac96-1369-57f9-8f1e-2999a4dd35a8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.203.221.135","comment":"https://x.com/drb_ra/status/1957757798504071451","timestamp":"1755600807","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a9757d81-0d63-5c38-964d-2ee792c6bf79","type":"url","category":"Network activity","to_ids":true,"value":"http://92.251.143.8:995","comment":"https://x.com/drb_ra/status/1957757937088111100","timestamp":"1755600840","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"c6e95b50-f9ef-5c32-a167-179c822aa3fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.251.143.8","comment":"https://x.com/drb_ra/status/1957757937088111100","timestamp":"1755600840","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b77d4c9f-b6c7-5e15-9d8f-991606ea5921","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.230.102.159","comment":"https://x.com/drb_ra/status/1957758077085630518","timestamp":"1755600873","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"59f8cba6-2018-5115-b6c9-aae05d09f25e","type":"url","category":"Network activity","to_ids":true,"value":"http://157.230.102.159:445","comment":"https://x.com/drb_ra/status/1957758077085630518","timestamp":"1755600873","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c8be6788-d5c6-5623-830f-670c8d2cd4aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.25.140.16","comment":"https://x.com/drb_ra/status/1957758217263387131","timestamp":"1755600907","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"fd8b45cc-296f-5abb-ab29-ed0c945651c9","type":"url","category":"Network activity","to_ids":true,"value":"http://209.25.140.16:4524","comment":"https://x.com/drb_ra/status/1957758217263387131","timestamp":"1755600907","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"577f6852-d52f-5a7d-933d-771845b83ced","type":"url","category":"Network activity","to_ids":true,"value":"http://52.3.219.143:443","comment":"https://x.com/drb_ra/status/1957758357290246540","timestamp":"1755600940","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8ad43796-2d45-54bf-8310-55a939694e25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.3.219.143","comment":"https://x.com/drb_ra/status/1957758357290246540","timestamp":"1755600940","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ed105bbf-c21c-5533-9d79-086359c483e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.128.153.101","comment":"https://x.com/drb_ra/status/1957758499082895739","timestamp":"1755600974","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"598c7d7a-e3ac-5a9d-8977-4117eeaadba4","type":"url","category":"Network activity","to_ids":true,"value":"http://61.128.153.101:4506","comment":"https://x.com/drb_ra/status/1957758499082895739","timestamp":"1755600974","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"03573584-3789-53f0-929e-ed007a2783c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.196.104.26","comment":"https://x.com/drb_ra/status/1957758639436922993","timestamp":"1755601007","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"22962a08-869c-5ec3-8389-1a05f7358a3b","type":"url","category":"Network activity","to_ids":true,"value":"http://217.196.104.26:31337","comment":"https://x.com/drb_ra/status/1957758639436922993","timestamp":"1755601007","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3cebb914-a236-5df5-a06d-32f99d6c82d4","type":"url","category":"Network activity","to_ids":true,"value":"http://34.100.131.1:31337","comment":"https://x.com/drb_ra/status/1957758779333726518","timestamp":"1755601041","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1a8aaec7-4983-5b16-9cf3-65afcd424c9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.192.40.187","comment":"https://x.com/drb_ra/status/1957758918559420629","timestamp":"1755601074","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a7faa4ea-d071-5c9a-9512-cf64a88fc3ed","type":"url","category":"Network activity","to_ids":true,"value":"http://85.192.40.187:31337","comment":"https://x.com/drb_ra/status/1957758918559420629","timestamp":"1755601074","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5b4b5cf5-ced8-57f2-b700-2af4d66e6499","type":"ip-dst","category":"Network activity","to_ids":true,"value":"205.198.87.144","comment":"https://x.com/drb_ra/status/1957759061488779353","timestamp":"1755601108","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a61ef1cd-22c0-50d1-942a-74d12181ebc1","type":"url","category":"Network activity","to_ids":true,"value":"http://205.198.87.144:31337","comment":"https://x.com/drb_ra/status/1957759061488779353","timestamp":"1755601108","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"fab739c9-312a-5908-a57a-04c4c3361963","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.135.95.5","comment":"https://x.com/drb_ra/status/1957759199930155184","timestamp":"1755601141","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dea98758-bb7c-52ae-8255-1a799784f0ab","type":"url","category":"Network activity","to_ids":true,"value":"http://102.135.95.5:31337","comment":"https://x.com/drb_ra/status/1957759199930155184","timestamp":"1755601141","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4755e41c-6475-5cb8-9b73-1baeba6e940f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.138.195.214","comment":"https://x.com/drb_ra/status/1957759337964724388","timestamp":"1755601174","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"af9c3cf0-0217-580d-b506-693a85543cbf","type":"url","category":"Network activity","to_ids":true,"value":"http://155.138.195.214:31337","comment":"https://x.com/drb_ra/status/1957759337964724388","timestamp":"1755601174","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c0ba2a4d-5334-57e4-970c-4dc30b77cb76","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.68.166:31337","comment":"https://x.com/drb_ra/status/1957759478020944051","timestamp":"1755601207","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"e3a1d93b-e3b9-53aa-8c5c-33f810c5c7f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.68.166","comment":"https://x.com/drb_ra/status/1957759478020944051","timestamp":"1755601207","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5d82408b-495c-591e-a0bf-8f853f4715a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.179.184.221","comment":"https://x.com/drb_ra/status/1957759616403616168","timestamp":"1755601240","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dc8ff720-7093-55b7-ade1-c76d39535775","type":"url","category":"Network activity","to_ids":true,"value":"http://158.179.184.221:31337","comment":"https://x.com/drb_ra/status/1957759616403616168","timestamp":"1755601240","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"32d186d9-f52a-54f5-9055-b0d89f612c8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.209.94.119","comment":"https://x.com/drb_ra/status/1957759755486671273","timestamp":"1755601273","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5ad5a493-8201-5aee-bc01-0073dbdcc30a","type":"url","category":"Network activity","to_ids":true,"value":"http://134.209.94.119:31337","comment":"https://x.com/drb_ra/status/1957759755486671273","timestamp":"1755601273","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"746a809f-50ee-5a58-af0f-f6f0fcd05cb1","type":"url","category":"Network activity","to_ids":true,"value":"http://159.65.53.179:31337","comment":"https://x.com/drb_ra/status/1957759894867579242","timestamp":"1755601307","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5133aa4f-8c72-5a25-9030-e668559f9455","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.65.53.179","comment":"https://x.com/drb_ra/status/1957760033376043209","timestamp":"1755601340","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1ad14b88-ca4e-5ff5-a4e9-3d7af98298fa","type":"url","category":"Network activity","to_ids":true,"value":"http://159.65.53.179:8888","comment":"https://x.com/drb_ra/status/1957760033376043209","timestamp":"1755601340","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d90449cd-e224-5d1f-bcc3-b4ef2f8cf1b2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.93.8.9:8888","comment":"https://x.com/drb_ra/status/1957760172056547676","timestamp":"1755601373","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5c5bf533-96f4-56c8-9b1f-5704ae663739","type":"md5","category":"Payload delivery","to_ids":true,"value":"c77d0d50d3538536747ec8c8477e8230","comment":"https://x.com/skocherhan/status/1957760245557538880","timestamp":"1755601390","distribution":"5"},{"uuid":"cfc55fb4-7400-5dc4-b572-e7b37466d886","type":"url","category":"Network activity","to_ids":true,"value":"http://45.93.8.9:31337","comment":"https://x.com/drb_ra/status/1957760310971908575","timestamp":"1755601406","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a1839a7f-f353-564d-8304-f2353aab6b2b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.93.8.9","comment":"https://x.com/drb_ra/status/1957760310971908575","timestamp":"1755601406","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"519319fa-f62a-5ba4-9f5d-9f242f8415f3","type":"url","category":"Network activity","to_ids":true,"value":"http://31.172.75.119:31337","comment":"https://x.com/drb_ra/status/1957760449992094135","timestamp":"1755601439","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"86e4a293-c300-5701-a594-5da54db32ce6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.172.75.119","comment":"https://x.com/drb_ra/status/1957760588961939892","timestamp":"1755601472","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"faeb3cf3-d66c-5d5a-9cf7-a2f4960b31d2","type":"url","category":"Network activity","to_ids":true,"value":"http://31.172.75.119:8888","comment":"https://x.com/drb_ra/status/1957760588961939892","timestamp":"1755601472","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b47dbee9-ff9d-587e-bebc-081d1fb73448","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.16:8888","comment":"https://x.com/drb_ra/status/1957760728472936626","timestamp":"1755601505","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1aee7543-117a-55ea-9c06-270ba94d107b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.109","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"074da46f-8bc1-56aa-9742-67a390d9343c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.130","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b272cedf-1339-5304-8812-6996483decd7","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.109:999","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ecd69bd0-d07d-5033-a66a-c5e4050ffe7d","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.109","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"62d12f4d-f01e-5931-ba46-55b088cc6a1c","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.130","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a3be60ff-cfb3-523e-a822-44536d3b3788","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.130:4565/wget.sh","comment":"https://x.com/skocherhan/status/1957760751956815940","timestamp":"1755601511","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e18d5be6-9a40-585b-a42f-bb6df8622fa4","type":"url","category":"Network activity","to_ids":true,"value":"http://95.214.208.42","comment":"https://x.com/skocherhan/status/1957760776543858717","timestamp":"1755601517","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"5c817e7c-2dba-58cc-982c-f15e931f8403","type":"sha256","category":"Payload delivery","to_ids":true,"value":"236582696baf94763c2b3d30c8fbc5c57f3b310b88ddedc3b077b100e8ae852d","comment":"https://x.com/axl_0x/status/1957760854167806411","timestamp":"1755601535","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"803f6168-9a19-5390-aade-29d47c02812e","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.16:31337","comment":"https://x.com/drb_ra/status/1957760867694514210","timestamp":"1755601538","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b848de4f-8bff-52b3-9d7c-ee9a313c0ae2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.16","comment":"https://x.com/drb_ra/status/1957760867694514210","timestamp":"1755601538","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a4aa8f3c-80d6-551a-bb5e-0910bb4755e0","type":"url","category":"Network activity","to_ids":true,"value":"https://8.218.180.6/ca","comment":"https://x.com/drb_ra/status/1957761008040046628","timestamp":"1755601572","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5f723949-3c7b-5813-b994-726333e6a3f6","type":"url","category":"Network activity","to_ids":true,"value":"http://8.218.180.6:80","comment":"https://x.com/drb_ra/status/1957761008040046628","timestamp":"1755601572","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7cc1a6a1-4431-5ddf-976e-e4023a3b3a33","type":"url","category":"Network activity","to_ids":true,"value":"http://124.221.240.222:80","comment":"https://x.com/drb_ra/status/1957761147777454457","timestamp":"1755601605","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"842f1cd8-8160-5672-9f6a-e602cd668e4a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.221.240.222","comment":"https://x.com/drb_ra/status/1957761147777454457","timestamp":"1755601605","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b3384a22-6e14-5ae7-b0ad-d8c29088ad76","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.202.233.241","comment":"https://x.com/drb_ra/status/1957761289607922174","timestamp":"1755601639","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d32e99b7-3828-5f46-a1d8-3dc8e3a83494","type":"url","category":"Network activity","to_ids":true,"value":"http://91.202.233.241:443","comment":"https://x.com/drb_ra/status/1957761289607922174","timestamp":"1755601639","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2e76b902-60d0-58cc-b6e4-5027f8c9f3d8","type":"url","category":"Network activity","to_ids":true,"value":"https://91.202.233.241/mscrypto/update","comment":"https://x.com/drb_ra/status/1957761289607922174","timestamp":"1755601639","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ec980565-2dfe-5b70-9544-84295b21229c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.53.164.47:62180","comment":"https://x.com/drb_ra/status/1957761428670050581","timestamp":"1755601672","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d67af773-d8b6-5d2a-8fd8-1c5a5adc3934","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.53.164.47","comment":"https://x.com/drb_ra/status/1957761428670050581","timestamp":"1755601672","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"70c6ea6a-0d62-597c-af1a-ffa28d6bd70d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.57","comment":"https://x.com/drb_ra/status/1957761570060005420","timestamp":"1755601706","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"995fe921-0692-54dc-9d5d-32d2d5c6d026","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.26","comment":"https://x.com/drb_ra/status/1957761570060005420","timestamp":"1755601706","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"61d39fdf-d157-5b54-93f8-069101869d89","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.53.57:8443","comment":"https://x.com/drb_ra/status/1957761570060005420","timestamp":"1755601706","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dd9c8db1-6444-5713-9579-f94953cb1ecd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.79.235.16","comment":"https://x.com/drb_ra/status/1957761713761091696","timestamp":"1755601740","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2f39d703-416d-5fa8-a06a-46c1e810e3f2","type":"url","category":"Network activity","to_ids":true,"value":"http://120.79.235.16:8088","comment":"https://x.com/drb_ra/status/1957761713761091696","timestamp":"1755601740","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1f1669c1-bc38-5168-9680-00c3b289cc72","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.168.212:80","comment":"https://x.com/drb_ra/status/1957761853414625599","timestamp":"1755601773","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4a3bb6d5-4720-5648-9874-04e7ca85a4c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.168.212","comment":"https://x.com/drb_ra/status/1957761853414625599","timestamp":"1755601773","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b5fdbf6e-93d5-542d-b32d-22f96849ec7b","type":"url","category":"Network activity","to_ids":true,"value":"http://115.159.125.103:8080","comment":"https://x.com/drb_ra/status/1957761994401935817","timestamp":"1755601807","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da3d7f64-3331-5da9-9c74-9f5e64294a4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.159.125.103","comment":"https://x.com/drb_ra/status/1957761994401935817","timestamp":"1755601807","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6af37fe5-b02c-5405-9b81-4464321ecd2f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.88.186.214","comment":"https://x.com/drb_ra/status/1957762275302932913","timestamp":"1755601874","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e3405534-3d9e-5f2a-9766-d323247c434d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.88.186.214:909","comment":"https://x.com/drb_ra/status/1957762275302932913","timestamp":"1755601874","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"340b9dec-19aa-5187-9237-7ca8ff5d2616","type":"url","category":"Network activity","to_ids":true,"value":"http://84.154.177.111:82","comment":"https://x.com/drb_ra/status/1957762414444749100","timestamp":"1755601907","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"74ec74f8-487e-55c4-b640-f3670fa53ea1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.154.177.111","comment":"https://x.com/drb_ra/status/1957762414444749100","timestamp":"1755601907","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ab4c31e1-f70d-5e46-9202-d1b1928d6766","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.120.126","comment":"https://x.com/drb_ra/status/1957762553402044866","timestamp":"1755601940","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"39ad75ec-f273-57e1-8582-bc18ba6af4fb","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.120.126:44819","comment":"https://x.com/drb_ra/status/1957762553402044866","timestamp":"1755601940","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"f00babe6-c683-5421-b799-bccbe012b068","type":"url","category":"Network activity","to_ids":true,"value":"http://56.124.124.92:49152","comment":"https://x.com/drb_ra/status/1957762696696193157","timestamp":"1755601975","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c2dcedd2-cbd7-585d-b99e-298f5c292a19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.124.124.92","comment":"https://x.com/drb_ra/status/1957762696696193157","timestamp":"1755601975","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"82e6423f-542c-5cc0-8af5-a68c931db266","type":"url","category":"Network activity","to_ids":true,"value":"http://3.29.126.59:4567","comment":"https://x.com/drb_ra/status/1957762837675229365","timestamp":"1755602008","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cd3e777e-31dd-5538-8f0e-bcd5bae62a68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.155.113.234","comment":"https://x.com/drb_ra/status/1957762977962004716","timestamp":"1755602042","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"415aed35-ea5f-55b0-84ba-ae10db649e22","type":"url","category":"Network activity","to_ids":true,"value":"http://56.155.113.234:50995","comment":"https://x.com/drb_ra/status/1957762977962004716","timestamp":"1755602042","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"644a0bc7-9ba1-5ba1-a14c-ae8c1b48f5d8","type":"url","category":"Network activity","to_ids":true,"value":"http://181.131.217.56:8050","comment":"https://x.com/drb_ra/status/1957763117737201850","timestamp":"1755602075","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"0089bc4f-3490-58b6-9f26-50f2966fe68d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.131.217.56","comment":"https://x.com/drb_ra/status/1957763117737201850","timestamp":"1755602075","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"49d040af-3366-5f7a-97b4-f9a439b4e01d","type":"url","category":"Network activity","to_ids":true,"value":"http://84.235.235.48:80","comment":"https://x.com/drb_ra/status/1957763257218789847","timestamp":"1755602108","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c63d919b-1d67-5c6a-b147-37950a9861ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.235.235.48","comment":"https://x.com/drb_ra/status/1957763257218789847","timestamp":"1755602108","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7628d69c-8338-5112-8446-d0312fdede2f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.16.249:80","comment":"https://x.com/drb_ra/status/1957763397748928557","timestamp":"1755602142","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"1b7a9d81-bf7e-595d-9cab-4d17a84cec65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.16.249","comment":"https://x.com/drb_ra/status/1957763397748928557","timestamp":"1755602142","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"6e1c0879-c960-57b6-88ff-de3d0acadb7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.230.161.155","comment":"https://x.com/drb_ra/status/1957763538174284090","timestamp":"1755602175","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"ffb5cf4a-ec84-5825-bae1-a24058258e4a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.230.161.155:2850","comment":"https://x.com/drb_ra/status/1957763538174284090","timestamp":"1755602175","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"d2c7c839-91a4-597c-8e35-b129ae11471f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.250.128.197","comment":"https://x.com/drb_ra/status/1957763677282509097","timestamp":"1755602208","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"1aac9313-f49d-546f-bce4-8d888b196325","type":"url","category":"Network activity","to_ids":true,"value":"http://160.250.128.197:8888","comment":"https://x.com/drb_ra/status/1957763677282509097","timestamp":"1755602208","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7c04cb76-debe-5fbf-b9e6-fd1658a25cfb","type":"url","category":"Network activity","to_ids":true,"value":"http://94.49.196.227:443","comment":"https://x.com/drb_ra/status/1957763817280069875","timestamp":"1755602242","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"fd7d522a-52f6-5bd9-a36d-16e9bd3d4c9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.49.196.227","comment":"https://x.com/drb_ra/status/1957763817280069875","timestamp":"1755602242","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"cfbc06b9-df1e-5e1d-b336-5608c42d7597","type":"url","category":"Network activity","to_ids":true,"value":"http://64.225.126.237:443","comment":"https://x.com/drb_ra/status/1957763956048630122","timestamp":"1755602275","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"66baf2d0-f429-5032-9069-26537f57ee59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.225.126.237","comment":"https://x.com/drb_ra/status/1957763956048630122","timestamp":"1755602275","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4714e43f-d036-597a-83e4-503f6f4bdbba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.239.17","comment":"https://x.com/drb_ra/status/1957764095379112355","timestamp":"1755602308","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"80b5d421-11d2-517c-969c-d93e8564cf29","type":"url","category":"Network activity","to_ids":true,"value":"http://45.76.239.17:2095","comment":"https://x.com/drb_ra/status/1957764095379112355","timestamp":"1755602308","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4cafbb52-84c6-5ccf-8373-003d0d782d27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.146.168.195","comment":"https://x.com/drb_ra/status/1957764234286084581","timestamp":"1755602341","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"22b3375e-f609-54b6-bc02-c51b5e3f91ab","type":"url","category":"Network activity","to_ids":true,"value":"http://54.146.168.195:443","comment":"https://x.com/drb_ra/status/1957764234286084581","timestamp":"1755602341","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4795e74f-f3c8-5a7b-9980-e959b649fdaf","type":"url","category":"Network activity","to_ids":true,"value":"http://217.113.49.161","comment":"https://x.com/redrabytes/status/1957764301055197338","timestamp":"1755602357","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3472938b-d696-5d14-96a3-9fe22eefaba6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.113.49.161","comment":"https://x.com/redrabytes/status/1957764301055197338","timestamp":"1755602357","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8a55a0dd-f286-529e-8d13-ddd447fd42ec","type":"url","category":"Network activity","to_ids":true,"value":"http://103.245.231.188","comment":"https://x.com/redrabytes/status/1957764301055197338","timestamp":"1755602357","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a50189a4-b183-5808-8f51-b870161c4f71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.245.231.188","comment":"https://x.com/redrabytes/status/1957764301055197338","timestamp":"1755602357","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2c6f8638-b1cf-5a69-a7e0-d75c11632701","type":"url","category":"Network activity","to_ids":true,"value":"http://103.245.231.188/vtuber.sh","comment":"https://x.com/redrabytes/status/1957764301055197338","timestamp":"1755602357","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bafc1ecc-9979-51bd-ba89-10ac47dc4c31","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.171.150:7443","comment":"https://x.com/drb_ra/status/1957764373587321259","timestamp":"1755602374","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"80f53358-90ce-5b5d-ab5a-a19abb1ec5fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.171.150","comment":"https://x.com/drb_ra/status/1957764373587321259","timestamp":"1755602374","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"0c2f2818-9340-52ad-a767-76cf7bdc34bd","type":"url","category":"Network activity","to_ids":true,"value":"http://167.71.110.157:443","comment":"https://x.com/drb_ra/status/1957764514251776041","timestamp":"1755602408","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d6636da9-d9da-5c61-96a1-8e91ed7bdbb7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.71.110.157","comment":"https://x.com/drb_ra/status/1957764514251776041","timestamp":"1755602408","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2ba3697f-8350-5068-b913-3c7ba256f74a","type":"url","category":"Network activity","to_ids":true,"value":"http://184.168.28.157:31337","comment":"https://x.com/drb_ra/status/1957764654525976905","timestamp":"1755602441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2104e00f-ac0a-5814-b832-eb1f084a0228","type":"ip-dst","category":"Network activity","to_ids":true,"value":"184.168.28.157","comment":"https://x.com/drb_ra/status/1957764654525976905","timestamp":"1755602441","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fa9a70a4-a52d-529d-b84d-7d737b05e263","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.32.254.92","comment":"https://x.com/drb_ra/status/1957764795190440136","timestamp":"1755602475","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"113b03fa-c152-5d85-bbf2-06a713fe8efc","type":"url","category":"Network activity","to_ids":true,"value":"http://101.32.254.92:443","comment":"https://x.com/drb_ra/status/1957764795190440136","timestamp":"1755602475","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"47ec38c8-4ec2-58b7-9b31-699056fae60d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.223.114.203","comment":"https://x.com/drb_ra/status/1957764937045942551","timestamp":"1755602509","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9dc5cc57-4150-5ebe-859a-00a2385faaac","type":"url","category":"Network activity","to_ids":true,"value":"http://124.223.114.203:4433","comment":"https://x.com/drb_ra/status/1957764937045942551","timestamp":"1755602509","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a35e70f4-960b-5e4f-ad78-b919f2d8d072","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.12.148.37","comment":"https://x.com/drb_ra/status/1957765077165064370","timestamp":"1755602542","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2bc4e968-0364-5032-aa0c-e938080d74cc","type":"url","category":"Network activity","to_ids":true,"value":"http://103.12.148.37:80","comment":"https://x.com/drb_ra/status/1957765077165064370","timestamp":"1755602542","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"afb79dbf-9fb5-54a6-abc7-c84ba77f157a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.229.224.59:443","comment":"https://x.com/drb_ra/status/1957765357784981905","timestamp":"1755602609","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dc1190fd-b273-5e25-8909-1922ddfb8ab6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.229.224.59","comment":"https://x.com/drb_ra/status/1957765357784981905","timestamp":"1755602609","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"734188b4-db0d-5de9-beb5-ff6c38c78b04","type":"domain","category":"Network activity","to_ids":true,"value":"gmo.aozora.press","comment":"https://x.com/kubotaa3/status/1957765384431624345","timestamp":"1755602615","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"206210b5-d430-5c82-9769-1f3972d042c1","type":"url","category":"Network activity","to_ids":true,"value":"https://gmo.aozora.press/v1/check","comment":"https://x.com/kubotaa3/status/1957765384431624345","timestamp":"1755602615","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b3b2560-8c94-5e98-a310-ddccb6d7dd3f","type":"domain","category":"Network activity","to_ids":true,"value":"japan.japangmo.help","comment":"https://x.com/kubotaa3/status/1957765384431624345","timestamp":"1755602615","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c95a584-0459-505e-90a3-a74eb89b6c63","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.134.81.197","comment":"https://x.com/kubotaa3/status/1957765384431624345","timestamp":"1755602615","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cdf37b55-716a-5383-9aa8-4b4be89ab68e","type":"url","category":"Network activity","to_ids":true,"value":"https://japan.japangmo.help/v1/check","comment":"https://x.com/kubotaa3/status/1957765384431624345","timestamp":"1755602615","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2dceeb04-da96-5494-a0bb-971ae156a73e","type":"url","category":"Network activity","to_ids":true,"value":"http://43.243.73.187:80","comment":"https://x.com/drb_ra/status/1957765499149791545","timestamp":"1755602643","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"632abc6a-bacc-5eb0-b631-e48bb51cea27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.243.73.187","comment":"https://x.com/drb_ra/status/1957765499149791545","timestamp":"1755602643","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e86ac0a2-50c5-58aa-b103-53fd5006a6b6","type":"url","category":"Network activity","to_ids":true,"value":"https://gitcompay.com/api/v1/get","comment":"https://x.com/drb_ra/status/1957765499149791545","timestamp":"1755602643","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aea3c490-226c-5173-b4c5-57e87b3c6698","type":"domain","category":"Network activity","to_ids":true,"value":"gitcompay.com","comment":"https://x.com/drb_ra/status/1957765499149791545","timestamp":"1755602643","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3d58640f-7204-5583-b29f-39ea60b36a75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.115.132","comment":"https://x.com/drb_ra/status/1957765637268180994","timestamp":"1755602676","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0f491c76-1728-5e01-b249-b0907cc80d99","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.115.132:4321","comment":"https://x.com/drb_ra/status/1957765637268180994","timestamp":"1755602676","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"45cdec2e-0fe9-5d1e-bc06-a87f3073a095","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.188.68","comment":"https://x.com/drb_ra/status/1957765777408360757","timestamp":"1755602709","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ece57890-c201-56fa-87fa-66f38691a646","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.188.68:4321","comment":"https://x.com/drb_ra/status/1957765777408360757","timestamp":"1755602709","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2cedceaf-4da3-5c76-ba9d-5b7abd527acc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"100.26.201.238","comment":"https://x.com/drb_ra/status/1957765915740631226","timestamp":"1755602742","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e91df30d-2a6d-53e5-bb59-5dd2eabde674","type":"url","category":"Network activity","to_ids":true,"value":"http://100.26.201.238:1617","comment":"https://x.com/drb_ra/status/1957765915740631226","timestamp":"1755602742","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"977a9800-a0ce-5aa8-a59b-8d04f146f6ef","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.254.100:4862","comment":"https://x.com/drb_ra/status/1957766054836359480","timestamp":"1755602775","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1c222c13-5672-5819-8801-64e6e112a489","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.254.100","comment":"https://x.com/drb_ra/status/1957766054836359480","timestamp":"1755602775","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"74375d45-30a8-537c-aaca-cb49334540c1","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.183.221:4477","comment":"https://x.com/drb_ra/status/1957766192979964197","timestamp":"1755602808","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"33d3d751-91ef-565c-b366-8202bfa05c07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.183.221","comment":"https://x.com/drb_ra/status/1957766192979964197","timestamp":"1755602808","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f332a42b-32c1-5138-956f-d345e76a4de9","type":"url","category":"Network activity","to_ids":true,"value":"http://45.80.158.65:2404","comment":"https://x.com/drb_ra/status/1957766332570648662","timestamp":"1755602841","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9c31e4d1-1f4b-5bf4-ac93-e3f8e78f7d0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.80.158.65","comment":"https://x.com/drb_ra/status/1957766332570648662","timestamp":"1755602841","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ad8bc3f2-0cb4-5fd8-a5c5-0ada12e17b1f","type":"url","category":"Network activity","to_ids":true,"value":"http://8.138.222.154:54681","comment":"https://x.com/drb_ra/status/1957766471196590155","timestamp":"1755602874","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7af5979d-bdd2-504c-9ea9-10e63f5029c5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.217.96.253:18245","comment":"https://x.com/drb_ra/status/1957766611609239962","timestamp":"1755602908","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4e271017-32a6-53b8-8231-7b268975a2ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.217.96.253","comment":"https://x.com/drb_ra/status/1957766611609239962","timestamp":"1755602908","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1be9eeea-26eb-50cb-bf4a-4026c3c8dc7d","type":"url","category":"Network activity","to_ids":true,"value":"http://35.87.82.29:7443","comment":"https://x.com/drb_ra/status/1957766750616924327","timestamp":"1755602941","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"dd6dcd27-7d85-540f-af5a-efe95680a883","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.87.82.29","comment":"https://x.com/drb_ra/status/1957766750616924327","timestamp":"1755602941","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"713b381d-d4e2-5c9e-8979-2185018d4f76","type":"url","category":"Network activity","to_ids":true,"value":"http://18.117.100.92:58600","comment":"https://x.com/drb_ra/status/1957766890433974418","timestamp":"1755602974","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ee0bfb8a-c699-5582-846a-e86aa00352e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.117.100.92","comment":"https://x.com/drb_ra/status/1957767030507008432","timestamp":"1755603008","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fe4042db-deae-5d2b-8c19-c09004f78b9c","type":"url","category":"Network activity","to_ids":true,"value":"http://18.117.100.92:45450","comment":"https://x.com/drb_ra/status/1957767030507008432","timestamp":"1755603008","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"78f4f176-edb7-5ccc-8aef-0c49415e7cf1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.155.82","comment":"https://x.com/drb_ra/status/1957767169770508764","timestamp":"1755603041","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ad68d26b-78af-5e4c-89fa-3d2041f50e1d","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.155.82:443","comment":"https://x.com/drb_ra/status/1957767169770508764","timestamp":"1755603041","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"799770a1-e39f-5057-b688-33482f90da27","type":"url","category":"Network activity","to_ids":true,"value":"http://15.185.52.154:17729","comment":"https://x.com/drb_ra/status/1957767309189099835","timestamp":"1755603074","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a33c4361-9a27-5f5d-a484-515ff29e316b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.185.52.154","comment":"https://x.com/drb_ra/status/1957767309189099835","timestamp":"1755603074","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"43b6a2d4-0eac-5e11-b0cb-1fe2daeb7996","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.176.103.2","comment":"https://x.com/drb_ra/status/1957767448268063086","timestamp":"1755603107","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0a9cd7ad-75a7-5855-8072-74ec5f531418","type":"url","category":"Network activity","to_ids":true,"value":"http://160.176.103.2:81","comment":"https://x.com/drb_ra/status/1957767448268063086","timestamp":"1755603107","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"6ccb16d5-f43c-5901-a99b-8c03583d4238","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.91.178.101","comment":"https://x.com/drb_ra/status/1957767587946762448","timestamp":"1755603141","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f0c1b3b2-fef6-50e7-aab8-a00faa21b10b","type":"url","category":"Network activity","to_ids":true,"value":"http://191.91.178.101:8082","comment":"https://x.com/drb_ra/status/1957767587946762448","timestamp":"1755603141","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"e1d740ee-4dbf-59ff-ac3a-5698f688a77b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.72.200:4000","comment":"https://x.com/drb_ra/status/1957767728665706997","timestamp":"1755603174","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"788ffa79-48db-59bc-a005-e039aaf6597f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.72.200","comment":"https://x.com/drb_ra/status/1957767728665706997","timestamp":"1755603174","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"326276b9-63d4-5677-a72c-912624824667","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.178.202:80","comment":"https://x.com/drb_ra/status/1957767871725007097","timestamp":"1755603208","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8091b6f7-b21c-534d-979e-6e8db6378ba2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.178.202","comment":"https://x.com/drb_ra/status/1957767871725007097","timestamp":"1755603208","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"972b25ba-d91a-5d69-905a-403f0779d3ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.213.43","comment":"https://x.com/drb_ra/status/1957768011340791884","timestamp":"1755603242","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a7e2194d-a6b6-5fcd-be85-69c35f3a747c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.213.43:80","comment":"https://x.com/drb_ra/status/1957768011340791884","timestamp":"1755603242","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d9e1b8f6-151c-59f8-9d56-64c621a50ad6","type":"url","category":"Network activity","to_ids":true,"value":"http://54.77.159.237:80","comment":"https://x.com/drb_ra/status/1957768149786341640","timestamp":"1755603275","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d1963eda-e504-5e50-a35e-5910ba5f581b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.77.159.237","comment":"https://x.com/drb_ra/status/1957768149786341640","timestamp":"1755603275","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1525d40f-9adc-5612-b227-7fb6ab7f0462","type":"url","category":"Network activity","to_ids":true,"value":"http://118.174.134.187/download/","comment":"https://x.com/JaceDarkwell/status/1957768247052292408","timestamp":"1755603298","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"e91f3f35-6c0d-5301-aeb1-3963570ab0b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.174.134.187","comment":"https://x.com/JaceDarkwell/status/1957768247052292408","timestamp":"1755603298","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"79fcc704-04ba-51c0-aef9-bf19b4d35b44","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.69.191:80","comment":"https://x.com/drb_ra/status/1957768288307396678","timestamp":"1755603308","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e809ca48-b956-515c-ba6a-b4fdf50ce398","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.69.191","comment":"https://x.com/drb_ra/status/1957768288307396678","timestamp":"1755603308","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"46270731-5a9b-5ccf-b673-87a8cad22bfb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"208.73.203.229","comment":"https://x.com/drb_ra/status/1957768428208439579","timestamp":"1755603341","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"d42442e9-c132-5fd6-828c-f16e00801e92","type":"url","category":"Network activity","to_ids":true,"value":"http://208.73.203.229:443","comment":"https://x.com/drb_ra/status/1957768428208439579","timestamp":"1755603341","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"1affe909-62d3-5ea5-9092-7b0f5f6946e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.73.134","comment":"https://x.com/drb_ra/status/1957768567887200379","timestamp":"1755603374","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"27ffbd7e-a218-51e4-95e1-80f8ceda2d7f","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.73.134:8888","comment":"https://x.com/drb_ra/status/1957768567887200379","timestamp":"1755603374","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"8edf6ff4-c27f-54c8-bf87-655655763502","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.12.25.30","comment":"https://x.com/drb_ra/status/1957768706861199410","timestamp":"1755603407","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"3af7e306-f751-5b04-8ade-2e74df13e3e7","type":"url","category":"Network activity","to_ids":true,"value":"http://38.12.25.30:8888","comment":"https://x.com/drb_ra/status/1957768706861199410","timestamp":"1755603407","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"c501b9cf-0365-5d65-9068-2aa2b994600d","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.197.15:443","comment":"https://x.com/drb_ra/status/1957768846607045074","timestamp":"1755603441","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7fd9a5d0-d7c3-54ef-9f1b-4ba5397be4a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.197.15","comment":"https://x.com/drb_ra/status/1957768846607045074","timestamp":"1755603441","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"a62461c6-9082-5da0-a164-76a01955d9a3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.104.99.167:443","comment":"https://x.com/drb_ra/status/1957768986529046804","timestamp":"1755603474","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"abe6b979-2cf0-5bcd-9824-d4684bfe7111","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.104.99.167","comment":"https://x.com/drb_ra/status/1957768986529046804","timestamp":"1755603474","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ec837bf3-e535-599c-b5fe-bba5f7633a46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.104.53.127","comment":"https://x.com/drb_ra/status/1957769126723686484","timestamp":"1755603508","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"98e361e9-7aae-5a96-97e1-df0b1e713821","type":"url","category":"Network activity","to_ids":true,"value":"http://172.104.53.127:443","comment":"https://x.com/drb_ra/status/1957769126723686484","timestamp":"1755603508","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"3a0ffee4-8526-5829-9ab5-fc27b8c93049","type":"url","category":"Network activity","to_ids":true,"value":"http://103.190.232.198:31564","comment":"https://x.com/drb_ra/status/1957769265110532171","timestamp":"1755603541","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"e2e15fbb-ebdb-5035-bf47-82396fd16978","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.190.232.198","comment":"https://x.com/drb_ra/status/1957769265110532171","timestamp":"1755603541","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"684244a4-32b3-5aca-bdc1-065db30c15a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.142.166.248","comment":"https://x.com/drb_ra/status/1957769404340453788","timestamp":"1755603574","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fc27f6f6-1148-55cd-9ef9-aa19d86d1a98","type":"url","category":"Network activity","to_ids":true,"value":"http://45.142.166.248:443","comment":"https://x.com/drb_ra/status/1957769404340453788","timestamp":"1755603574","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0a39aff3-a81a-5c4c-b1d5-41b600743741","type":"url","category":"Network activity","to_ids":true,"value":"http://95.112.32.154:7443","comment":"https://x.com/drb_ra/status/1957769543184482752","timestamp":"1755603607","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"18d0aba3-80ee-5777-85db-e6275739f01f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.112.32.154","comment":"https://x.com/drb_ra/status/1957769543184482752","timestamp":"1755603607","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8b385c49-8fef-59e1-a427-39d2e0da6a98","type":"url","category":"Network activity","to_ids":true,"value":"http://78.138.9.69:7443","comment":"https://x.com/drb_ra/status/1957769684331188431","timestamp":"1755603641","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"5d277169-483d-5f02-bb88-e1728bfef37d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.138.9.69","comment":"https://x.com/drb_ra/status/1957769684331188431","timestamp":"1755603641","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0a9cffeb-e67e-5ab8-8717-c10962f27f93","type":"url","category":"Network activity","to_ids":true,"value":"http://154.84.184.74:7443","comment":"https://x.com/drb_ra/status/1957769825146528145","timestamp":"1755603674","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"21d2409b-ff23-5865-96d2-746029535090","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.84.184.74","comment":"https://x.com/drb_ra/status/1957769825146528145","timestamp":"1755603674","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"3bab5580-1105-50b2-a6ab-0226b228ff9c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.54.18.39","comment":"https://x.com/drb_ra/status/1957769964707823763","timestamp":"1755603707","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"df933fca-147a-5bd2-96ea-271c8317afcd","type":"url","category":"Network activity","to_ids":true,"value":"http://173.54.18.39:443","comment":"https://x.com/drb_ra/status/1957769964707823763","timestamp":"1755603707","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"85322cb5-de8a-5db7-8767-1c9324e70c80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.50.239","comment":"https://x.com/drb_ra/status/1957770613566709928","timestamp":"1755603862","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2cf4c3fd-75b1-5994-bd57-0b8906b993a0","type":"url","category":"Network activity","to_ids":true,"value":"https://38.54.50.239/dpixel","comment":"https://x.com/drb_ra/status/1957770613566709928","timestamp":"1755603862","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b87d62a9-8e2c-5b96-9f7f-f88fe59a7696","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.50.239:80","comment":"https://x.com/drb_ra/status/1957770613566709928","timestamp":"1755603862","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d20d06a6-eb85-5ad4-a246-5c817ebbed84","type":"url","category":"Network activity","to_ids":true,"value":"https://156.238.243.63/j.ad","comment":"https://x.com/drb_ra/status/1957770753396363300","timestamp":"1755603895","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ebdbd194-e38a-5f98-a526-2dd8bde58439","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.63:80","comment":"https://x.com/drb_ra/status/1957770753396363300","timestamp":"1755603895","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f52b80c6-f856-5ff2-b388-e143cc79e064","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.63","comment":"https://x.com/drb_ra/status/1957770753396363300","timestamp":"1755603895","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"99ddee42-bcbd-51e3-bd53-e36b0309c83a","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8023","comment":"https://x.com/drb_ra/status/1957770894425587776","timestamp":"1755603929","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9fb7eb25-ea03-5ab3-ba45-c7d454cf69bd","type":"url","category":"Network activity","to_ids":true,"value":"https://8.143.2.128/match","comment":"https://x.com/drb_ra/status/1957771035115217045","timestamp":"1755603963","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f561b631-16b4-58ff-8421-418833c879d6","type":"url","category":"Network activity","to_ids":true,"value":"http://8.143.2.128:1111","comment":"https://x.com/drb_ra/status/1957771035115217045","timestamp":"1755603963","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3ea2d026-7007-53f4-88df-30a4d3fc8d76","type":"url","category":"Network activity","to_ids":true,"value":"https://scan.daztar.com/images/09.png","comment":"https://x.com/drb_ra/status/1957771176706547940","timestamp":"1755603996","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"973cd813-b277-5d69-b0e7-4bd7153bf803","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.204.37:443","comment":"https://x.com/drb_ra/status/1957771176706547940","timestamp":"1755603996","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83079dbc-be22-5590-9829-f3802786304e","type":"domain","category":"Network activity","to_ids":true,"value":"scan.daztar.com","comment":"https://x.com/drb_ra/status/1957771176706547940","timestamp":"1755603996","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fecf3e28-efb1-5aa9-b2a3-bc303b9c342f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.76.13","comment":"https://x.com/drb_ra/status/1957771317572247972","timestamp":"1755604030","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"755bb0e7-1496-5979-8167-52c25c188f18","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.76.13:80","comment":"https://x.com/drb_ra/status/1957771317572247972","timestamp":"1755604030","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ae7af65f-8445-5fb4-8297-a7296d273c60","type":"url","category":"Network activity","to_ids":true,"value":"http://185.147.39.227:9999","comment":"https://x.com/drb_ra/status/1957771459125739583","timestamp":"1755604064","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bd4a50b9-c8da-5ed1-86f5-091dd68f0f25","type":"url","category":"Network activity","to_ids":true,"value":"https://150.187.25.242/pixel.gif","comment":"https://x.com/drb_ra/status/1957771459125739583","timestamp":"1755604064","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b9ede03b-ef6f-5db7-b409-80f585895824","type":"url","category":"Network activity","to_ids":true,"value":"http://34.87.104.27:8080","comment":"https://x.com/drb_ra/status/1957771599702106236","timestamp":"1755604097","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"57f7832d-22f1-5fbf-9abf-af9adaa465b1","type":"url","category":"Network activity","to_ids":true,"value":"https://34.87.104.27/en_US/all.js","comment":"https://x.com/drb_ra/status/1957771599702106236","timestamp":"1755604097","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2fc0e3c7-b9e7-5e68-8b0c-99a1b93673f8","type":"url","category":"Network activity","to_ids":true,"value":"http://47.121.136.179:443","comment":"https://x.com/drb_ra/status/1957771739582107966","timestamp":"1755604131","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0ebf2d3f-4f4f-5979-951a-3a0c24a5a24c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.136.179","comment":"https://x.com/drb_ra/status/1957771739582107966","timestamp":"1755604131","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b66ab9b0-c336-5d4c-8432-18e3260a50aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.35.46","comment":"https://x.com/drb_ra/status/1957771878921097313","timestamp":"1755604164","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"315cfd01-729b-5905-b02f-4c41e211543b","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.35.46:8086","comment":"https://x.com/drb_ra/status/1957771878921097313","timestamp":"1755604164","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"411e7c34-15c8-5e64-a41e-8e6375978dc4","type":"url","category":"Network activity","to_ids":true,"value":"http://139.159.150.233:8033","comment":"https://x.com/drb_ra/status/1957772159335428338","timestamp":"1755604231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6b4709c4-a19f-5c19-8235-aa3f5b15103c","type":"url","category":"Network activity","to_ids":true,"value":"https://139.159.150.233/ptj","comment":"https://x.com/drb_ra/status/1957772159335428338","timestamp":"1755604231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93098e8c-8ebb-55d5-92a6-38741d8d0250","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.159.150.233","comment":"https://x.com/drb_ra/status/1957772159335428338","timestamp":"1755604231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1403cab4-c0c4-5f58-bed4-f500850fe34d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.159.110.66","comment":"https://x.com/drb_ra/status/1957772299978912000","timestamp":"1755604264","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"45cf5ea7-409e-5941-8f45-ab2810a6edd5","type":"url","category":"Network activity","to_ids":true,"value":"http://98.159.110.66:80","comment":"https://x.com/drb_ra/status/1957772299978912000","timestamp":"1755604264","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d632bf74-2e9c-5fe7-9c8e-f4d0bbfe1f44","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.231.118:8443","comment":"https://x.com/drb_ra/status/1957772438889984164","timestamp":"1755604297","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d6f9b45a-ff3d-5c36-ada3-5f28be0e64ea","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.129:8089","comment":"https://x.com/drb_ra/status/1957772580032496066","timestamp":"1755604331","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fd710424-374f-5d85-87e0-dc474874fe6a","type":"url","category":"Network activity","to_ids":true,"value":"http://103.178.57.150:89","comment":"https://x.com/drb_ra/status/1957772719908376821","timestamp":"1755604364","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1c1ac765-44ec-5539-b3d3-95f2c9a764bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.178.57.150","comment":"https://x.com/drb_ra/status/1957772719908376821","timestamp":"1755604364","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"55aa7b3b-c38b-5b43-8cdf-477f579f54d3","type":"url","category":"Network activity","to_ids":true,"value":"https://103.178.57.150/pixel.gif","comment":"https://x.com/drb_ra/status/1957772719908376821","timestamp":"1755604364","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"068087dd-5091-5b2b-bcef-b79e587d2435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.63","comment":"https://x.com/drb_ra/status/1957772860467859554","timestamp":"1755604398","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ac21e174-0024-5d3c-8f68-e672bf7cac64","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.63:80","comment":"https://x.com/drb_ra/status/1957772860467859554","timestamp":"1755604398","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d030935c-e3ce-5af9-b64d-d4d633b8a1ed","type":"url","category":"Network activity","to_ids":true,"value":"https://116.203.31.207/cm","comment":"https://x.com/drb_ra/status/1957773000645693915","timestamp":"1755604431","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88c49d71-6915-535f-a19f-5238e0f4b686","type":"url","category":"Network activity","to_ids":true,"value":"http://193.169.245.90:443","comment":"https://x.com/drb_ra/status/1957773141230375092","timestamp":"1755604465","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f8580c18-467e-5273-a8f8-32a955999ede","type":"url","category":"Network activity","to_ids":true,"value":"https://193.169.245.90:443","comment":"https://x.com/drb_ra/status/1957773141230375092","timestamp":"1755604465","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bc5d5e72-f937-5ee3-9473-2dcabe531fcb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.169.245.90","comment":"https://x.com/drb_ra/status/1957773141230375092","timestamp":"1755604465","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e8f1524c-1907-589a-811c-5ccfd3a6b454","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.137.45","comment":"https://x.com/drb_ra/status/1957773280540074027","timestamp":"1755604498","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cf048ebc-145b-56de-8c76-4b5744804e74","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.137.45:80","comment":"https://x.com/drb_ra/status/1957773280540074027","timestamp":"1755604498","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"62f92694-1004-5143-a975-635441f1eb74","type":"md5","category":"Payload delivery","to_ids":true,"value":"75f51daff0696bb59f14a9b3f12d3578","comment":"https://x.com/suyog41/status/1957788805143961711","timestamp":"1755608199","distribution":"5"},{"uuid":"acb21e9a-334b-5ce9-b484-804b31ecae44","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/sakq0a0a","comment":"https://x.com/suyog41/status/1957788805143961711","timestamp":"1755608199","distribution":"5"},{"uuid":"04e3e790-2196-5636-92a8-221b4f4a2ebe","type":"md5","category":"Payload delivery","to_ids":true,"value":"13544421ba7f8e47b7b5ab9c74d1861f","comment":"https://x.com/suyog41/status/1957788805143961711","timestamp":"1755608199","distribution":"5"},{"uuid":"f247bb8e-133d-535d-8229-7a6bfae7cdb7","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:6232","comment":"https://x.com/SarlackLab/status/1957789727190323353","timestamp":"1755608419","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"9cc712ee-014e-5846-8f11-f80258a5b96d","type":"domain","category":"Network activity","to_ids":true,"value":"70zv5n4wj.localto.net","comment":"https://x.com/SarlackLab/status/1957789727190323353","timestamp":"1755608419","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ecda3462-48ee-5d50-bd56-2c029c4c7c31","type":"url","category":"Network activity","to_ids":true,"value":"http://70zv5n4wj.localto.net","comment":"https://x.com/SarlackLab/status/1957789727190323353","timestamp":"1755608419","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a8e007e4-0292-5dac-8bce-2e8ce13a5bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.194.35.243","comment":"https://x.com/SarlackLab/status/1957789727190323353","timestamp":"1755608419","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"6f163db5-eadc-566f-8207-adcfc9fb1b03","type":"domain","category":"Network activity","to_ids":true,"value":"updatezimbrateam.weebly.com","comment":"https://x.com/urldna_bot/status/1957804770950828043","timestamp":"1755612006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e31edeba-499c-588c-be2b-b00cb6acddb6","type":"url","category":"Network activity","to_ids":true,"value":"https://updatezimbrateam.weebly.com","comment":"https://x.com/urldna_bot/status/1957804770950828043","timestamp":"1755612006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1dca252c-42d0-5f56-b9e1-23f100a9a525","type":"domain","category":"Network activity","to_ids":true,"value":"lakukan.icu","comment":"https://x.com/masaomi346/status/1957821076119204116","timestamp":"1755615893","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7a3fb3a1-117d-51e3-9fab-c6618bdeced2","type":"url","category":"Network activity","to_ids":true,"value":"https://lakukan.icu/exhdsa/","comment":"https://x.com/masaomi346/status/1957821076119204116","timestamp":"1755615893","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2a6a143-7147-56da-9d7a-c571f82dadd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.128.158.49","comment":"https://x.com/SarlackLab/status/1957821547902648530","timestamp":"1755616006","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"c62a8ac1-3c7c-5052-b16f-23bafae21bee","type":"url","category":"Network activity","to_ids":true,"value":"http://31.128.158.49:4564","comment":"https://x.com/SarlackLab/status/1957821547902648530","timestamp":"1755616006","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"c364caef-178d-5812-a3df-5e4040c9c27f","type":"url","category":"Network activity","to_ids":true,"value":"https://cosmicfrogsphotography.com","comment":"https://x.com/harugasumi/status/1957830376891600907","timestamp":"1755618111","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f7179afc-9514-5b40-8634-c6b587e5d453","type":"domain","category":"Network activity","to_ids":true,"value":"cosmicfrogsphotography.com","comment":"https://x.com/harugasumi/status/1957830376891600907","timestamp":"1755618111","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b340ac1-4cad-5085-9984-417c1276d4a6","type":"url","category":"Network activity","to_ids":true,"value":"https://sky36.weebly.com","comment":"https://x.com/urldna_bot/status/1957834975438307765","timestamp":"1755619207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f2df2a45-e327-5ce7-8b0b-56bf2f190624","type":"domain","category":"Network activity","to_ids":true,"value":"sky36.weebly.com","comment":"https://x.com/urldna_bot/status/1957834975438307765","timestamp":"1755619207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"990786c7-d7b0-5846-97b4-83c3f6bdaa1b","type":"domain","category":"Network activity","to_ids":true,"value":"putmissionet.ingweiding.cn","comment":"https://x.com/harugasumi/status/1957836273210532122","timestamp":"1755619517","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5313ae6d-668d-5de7-9b6e-19370106e1bf","type":"url","category":"Network activity","to_ids":true,"value":"https://putmissionet.ingweiding.cn/ja-jp/account/login/","comment":"https://x.com/harugasumi/status/1957836273210532122","timestamp":"1755619517","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd4700a3-7e2a-5156-8b08-7e5bb00550e3","type":"url","category":"Network activity","to_ids":true,"value":"http://dianqi1.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1957874990461689997","timestamp":"1755628747","distribution":"5"},{"uuid":"373d0f77-b9a9-5b73-87b9-497322473d4b","type":"domain","category":"Network activity","to_ids":true,"value":"dianqi1.jiayongdianqi.xyz","comment":"https://x.com/SarlackLab/status/1957874990461689997","timestamp":"1755628747","distribution":"5"},{"uuid":"dedc87da-b6b6-53d4-a407-0e34955748b6","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.214.209:80","comment":"https://x.com/drb_ra/status/1957876973423755751","timestamp":"1755629220","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"18fce794-91ee-5581-9f89-d4c0ebdd29cb","type":"url","category":"Network activity","to_ids":true,"value":"http://3.248.196.13:80","comment":"https://x.com/drb_ra/status/1957877111840002342","timestamp":"1755629253","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e7aec0fa-c1fa-5980-bf7b-c3ecce30bb72","type":"url","category":"Network activity","to_ids":true,"value":"http://54.154.112.25:80","comment":"https://x.com/drb_ra/status/1957877249757135013","timestamp":"1755629286","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c6df1722-65c6-5eea-a405-afac084dc09e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.154.112.25","comment":"https://x.com/drb_ra/status/1957877249757135013","timestamp":"1755629286","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d7ced03e-75d1-5cf7-8fe9-de48438b46fe","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.39.32:80","comment":"https://x.com/drb_ra/status/1957877389477974035","timestamp":"1755629319","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"24fa53cf-82e2-55ad-86c3-8dedec3c1fdf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.39.32","comment":"https://x.com/drb_ra/status/1957877389477974035","timestamp":"1755629319","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9616fa9f-ceee-5e9a-a243-abfada6675cb","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.227.251:80","comment":"https://x.com/drb_ra/status/1957877528854733091","timestamp":"1755629353","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dc998407-3240-5e51-9350-ff380d9d6715","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.227.251","comment":"https://x.com/drb_ra/status/1957877528854733091","timestamp":"1755629353","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"170ad690-67d3-50b6-a2a8-6612336ab4e7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.27.126:80","comment":"https://x.com/drb_ra/status/1957877666180186220","timestamp":"1755629385","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a8e25c50-91cd-5981-a4cf-257d0c781f21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.27.126","comment":"https://x.com/drb_ra/status/1957877666180186220","timestamp":"1755629385","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3782c87d-be8c-51b2-abb3-7481ea49b187","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.122.197.147","comment":"https://x.com/drb_ra/status/1957877807742349732","timestamp":"1755629419","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"92232bbf-2942-5191-8b3d-2a93c5b0d73b","type":"url","category":"Network activity","to_ids":true,"value":"http://109.122.197.147:80","comment":"https://x.com/drb_ra/status/1957877807742349732","timestamp":"1755629419","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"fe8a231e-2852-54b6-98fe-0bb2f43c715e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.82.15:6008","comment":"https://x.com/drb_ra/status/1957880673865281966","timestamp":"1755630102","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a9ca5fb3-716e-594e-8976-2d7635bf3200","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.224.94.224","comment":"https://x.com/drb_ra/status/1957880814689218643","timestamp":"1755630136","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8365d5eb-3048-5d76-a3e3-1da8e3e0c1bf","type":"url","category":"Network activity","to_ids":true,"value":"http://54.224.94.224:179","comment":"https://x.com/drb_ra/status/1957880814689218643","timestamp":"1755630136","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6d0c3b51-55af-56f5-aa6d-7061ebf5b372","type":"url","category":"Network activity","to_ids":true,"value":"http://13.58.108.28:8545","comment":"https://x.com/drb_ra/status/1957880952266584519","timestamp":"1755630169","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ffca9aef-fe63-566b-b64c-6e3a4d653fe7","type":"url","category":"Network activity","to_ids":true,"value":"http://13.58.108.28:2095","comment":"https://x.com/drb_ra/status/1957881091097784373","timestamp":"1755630202","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1ffbdea7-e886-5f40-ac41-e0cc3b5d0917","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.58.108.28","comment":"https://x.com/drb_ra/status/1957881229795029269","timestamp":"1755630235","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5cb01fb2-7f95-5f27-a59e-3dd77ce6bf02","type":"url","category":"Network activity","to_ids":true,"value":"http://13.58.108.28:995","comment":"https://x.com/drb_ra/status/1957881229795029269","timestamp":"1755630235","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"66063912-7cc1-5fbd-9d2b-be803f4167b3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.89.225.68:788","comment":"https://x.com/drb_ra/status/1957881369264365952","timestamp":"1755630268","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3504b67b-3ccc-554e-a7d7-096032fb6952","type":"url","category":"Network activity","to_ids":true,"value":"http://13.208.252.175:40961","comment":"https://x.com/drb_ra/status/1957881507961328012","timestamp":"1755630301","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5a551d07-7d99-5546-bda3-ce0979e22ee9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.208.252.175","comment":"https://x.com/drb_ra/status/1957881507961328012","timestamp":"1755630301","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b10cbe6c-be1a-5fcc-976e-af645d90556d","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.106:1894","comment":"https://x.com/drb_ra/status/1957881646717268065","timestamp":"1755630334","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"43b7dfac-06c1-5d5a-bcf9-2908f581bf67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.106","comment":"https://x.com/drb_ra/status/1957881646717268065","timestamp":"1755630334","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"49eae53d-8e10-5043-9f2b-af068f96806d","type":"url","category":"Network activity","to_ids":true,"value":"http://155.94.155.240:6403","comment":"https://x.com/drb_ra/status/1957881785729114347","timestamp":"1755630368","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a72f19ab-9f92-5c2b-b8b8-2a7664b93539","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.94.155.240","comment":"https://x.com/drb_ra/status/1957881785729114347","timestamp":"1755630368","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"56b1aeb4-f46d-5aba-abfc-8de5f9e83598","type":"url","category":"Network activity","to_ids":true,"value":"http://216.250.250.224:443","comment":"https://x.com/drb_ra/status/1957881925026070655","timestamp":"1755630401","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"48a3efb9-4fb8-5eb1-b725-5e0e7a20ff11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.250.250.224","comment":"https://x.com/drb_ra/status/1957881925026070655","timestamp":"1755630401","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"2c936d8f-04a4-5c48-86cf-3a59dd82090a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.213.188:80","comment":"https://x.com/drb_ra/status/1957882063807217941","timestamp":"1755630434","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"72f79fd0-0092-5f90-bf24-9d399c78d0a8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.213.188","comment":"https://x.com/drb_ra/status/1957882063807217941","timestamp":"1755630434","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f23d06aa-48fb-5bfe-88f2-5d677c63f796","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.146.178:80","comment":"https://x.com/drb_ra/status/1957882203574087908","timestamp":"1755630467","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"37358fb3-11cd-5277-b0a6-9fcc7b31e1af","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.146.178","comment":"https://x.com/drb_ra/status/1957882203574087908","timestamp":"1755630467","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"35ec5079-a949-5fa6-8242-02ac5afa82e1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.63.30:80","comment":"https://x.com/drb_ra/status/1957882343013724361","timestamp":"1755630500","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a99a4822-3ee8-5edc-9c69-a52f574b0da1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.63.30","comment":"https://x.com/drb_ra/status/1957882343013724361","timestamp":"1755630500","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fe10b39f-7c8b-565f-8b60-cf614dca128f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.241.252.216","comment":"https://x.com/drb_ra/status/1957882481224323157","timestamp":"1755630533","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0f4c8858-1294-5088-9a20-290bef98beff","type":"url","category":"Network activity","to_ids":true,"value":"http://34.241.252.216:80","comment":"https://x.com/drb_ra/status/1957882481224323157","timestamp":"1755630533","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1bcabe22-cd9d-50bc-9957-17aacd17c3d3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.204.45:80","comment":"https://x.com/drb_ra/status/1957882620362002642","timestamp":"1755630567","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"871cb74e-1eb2-5b65-8b56-379bce048357","type":"url","category":"Network activity","to_ids":true,"value":"http://52.213.238.194:80","comment":"https://x.com/drb_ra/status/1957882760011370892","timestamp":"1755630600","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b1435471-ba93-57bf-bf48-c78caddb53a8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.213.238.194","comment":"https://x.com/drb_ra/status/1957882760011370892","timestamp":"1755630600","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e27e1951-4a39-5865-9dcd-84b3d0a442f3","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.72.110:80","comment":"https://x.com/drb_ra/status/1957882899635794177","timestamp":"1755630633","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"def67f37-c870-5516-9140-7c2694b2660e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.72.110","comment":"https://x.com/drb_ra/status/1957882899635794177","timestamp":"1755630633","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"118cad74-aba7-56a5-9188-389809a947a9","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.140.228:80","comment":"https://x.com/drb_ra/status/1957883038433415174","timestamp":"1755630666","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a89d14d8-afad-5788-8cf3-f19e05e39d49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.140.228","comment":"https://x.com/drb_ra/status/1957883038433415174","timestamp":"1755630666","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"127f0bc0-8a4e-5627-93eb-d8ba1cf98419","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.199.57:80","comment":"https://x.com/drb_ra/status/1957883178099577016","timestamp":"1755630700","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7e2a7963-63b7-5073-b5c0-02b36e077bef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.199.57","comment":"https://x.com/drb_ra/status/1957883178099577016","timestamp":"1755630700","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"414bdef5-da41-5dde-9936-9d0b2383feed","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.195.127:80","comment":"https://x.com/drb_ra/status/1957883317346246886","timestamp":"1755630733","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d3480213-7bdb-5708-bec6-664e00de3d90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.195.127","comment":"https://x.com/drb_ra/status/1957883317346246886","timestamp":"1755630733","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"84807656-f1ca-5fc4-8ee5-ef151af24e42","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.197.106:80","comment":"https://x.com/drb_ra/status/1957883456702095456","timestamp":"1755630766","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7e39d17e-787b-5559-99ca-a346de6531b1","type":"url","category":"Network activity","to_ids":true,"value":"http://3.251.71.152:80","comment":"https://x.com/drb_ra/status/1957883595248529639","timestamp":"1755630799","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5bf9e054-da76-5700-aa95-8ead0d463650","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.210.68.242","comment":"https://x.com/drb_ra/status/1957883733932970291","timestamp":"1755630832","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"91b1006f-fc46-5838-84ba-3ecc9f9c1193","type":"url","category":"Network activity","to_ids":true,"value":"http://52.210.68.242:80","comment":"https://x.com/drb_ra/status/1957883733932970291","timestamp":"1755630832","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"54c7b897-3c3f-5282-b4c8-9e7d7bf3e1e6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.105.235:80","comment":"https://x.com/drb_ra/status/1957883872504390074","timestamp":"1755630865","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4dcdb67b-69d8-5210-a092-c1cd9b7e735a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.105.235","comment":"https://x.com/drb_ra/status/1957883872504390074","timestamp":"1755630865","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9d2a73b5-a635-565f-9334-0932a8cfdbc4","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.128.173:80","comment":"https://x.com/drb_ra/status/1957884013999210500","timestamp":"1755630899","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"00cc740c-03eb-56de-be7f-d998a8a4ff34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.128.173","comment":"https://x.com/drb_ra/status/1957884013999210500","timestamp":"1755630899","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"394fef52-e030-55a0-bab0-b9d474af652f","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.7.245:80","comment":"https://x.com/drb_ra/status/1957884154122494406","timestamp":"1755630932","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a3cc28a0-4781-5e8c-8c30-55242e8562dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.7.245","comment":"https://x.com/drb_ra/status/1957884154122494406","timestamp":"1755630932","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0d87f3dd-f21a-5bb3-864a-65f649a17c12","type":"url","category":"Network activity","to_ids":true,"value":"http://52.211.41.9:80","comment":"https://x.com/drb_ra/status/1957884297081196956","timestamp":"1755630966","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e79db57d-2eef-5d01-b4a2-7601b300fe79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.211.41.9","comment":"https://x.com/drb_ra/status/1957884297081196956","timestamp":"1755630966","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8fdadb58-17dd-575f-9e6e-5b214d639525","type":"url","category":"Network activity","to_ids":true,"value":"http://3.248.217.96:80","comment":"https://x.com/drb_ra/status/1957884434918601185","timestamp":"1755630999","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f5560be4-378e-5b5c-97d0-490eb7bbcb38","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.185.13:80","comment":"https://x.com/drb_ra/status/1957884575209623941","timestamp":"1755631033","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"af732b75-ce9d-54b7-8680-71273512758c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.185.13","comment":"https://x.com/drb_ra/status/1957884575209623941","timestamp":"1755631033","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7ba354af-9921-5cbb-b925-4f262b699c9a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.154.203.105:80","comment":"https://x.com/drb_ra/status/1957884713248403806","timestamp":"1755631066","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e994bd5b-6d42-5389-9060-3633cafffdba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.154.203.105","comment":"https://x.com/drb_ra/status/1957884713248403806","timestamp":"1755631066","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"29d980c9-4aa4-5b7c-b820-ac6e9ce6d193","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.215.206.18","comment":"https://x.com/drb_ra/status/1957884852415390015","timestamp":"1755631099","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8bd08ed2-68c3-527d-b60f-87daa79863d3","type":"url","category":"Network activity","to_ids":true,"value":"http://52.215.206.18:80","comment":"https://x.com/drb_ra/status/1957884852415390015","timestamp":"1755631099","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4c3820e4-8af4-5cac-81f0-debea85f2146","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.139.19","comment":"https://x.com/drb_ra/status/1957884990823231820","timestamp":"1755631132","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e495b227-48a5-5759-b72a-bc48ed40f69a","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.139.19:80","comment":"https://x.com/drb_ra/status/1957884990823231820","timestamp":"1755631132","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"565bae93-76e1-584f-9ea7-13f9469b0ca2","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.208.252:80","comment":"https://x.com/drb_ra/status/1957885130535821364","timestamp":"1755631165","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6671b476-887a-58c5-804e-c680f372f36d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.208.252","comment":"https://x.com/drb_ra/status/1957885130535821364","timestamp":"1755631165","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"24a96707-6b85-5563-86a1-a75cc67385c1","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.214.215:80","comment":"https://x.com/drb_ra/status/1957885268687483134","timestamp":"1755631198","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"33afc828-eb85-5f2a-8502-b82a9761afc6","type":"url","category":"Network activity","to_ids":true,"value":"http://52.212.96.146:80","comment":"https://x.com/drb_ra/status/1957885407510593579","timestamp":"1755631231","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2f71c825-60ad-5915-83c1-b60c69b17eef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.212.96.146","comment":"https://x.com/drb_ra/status/1957885407510593579","timestamp":"1755631231","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cb92423e-09f7-5d42-b2d4-8e5b7032a0b2","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.56.211:80","comment":"https://x.com/drb_ra/status/1957885546132303936","timestamp":"1755631264","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c2aa0d3a-89b4-58fb-ac30-78e804626187","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.56.211","comment":"https://x.com/drb_ra/status/1957885546132303936","timestamp":"1755631264","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"11788757-4a51-573b-8a22-faa5c2b4d781","type":"url","category":"Network activity","to_ids":true,"value":"http://176.34.71.212:80","comment":"https://x.com/drb_ra/status/1957885684901114005","timestamp":"1755631297","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"115f9d76-5d02-5f6b-b324-91899a26f3f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.34.71.212","comment":"https://x.com/drb_ra/status/1957885684901114005","timestamp":"1755631297","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0c65b2a0-01ee-54b8-80fd-0d01d47dd6d8","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.209.85:80","comment":"https://x.com/drb_ra/status/1957885824189730897","timestamp":"1755631330","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2c1a6a85-59d2-51df-95cf-04d89f0fe51a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.209.85","comment":"https://x.com/drb_ra/status/1957885824189730897","timestamp":"1755631330","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2dc2872c-6a46-5da1-b14e-d8f29ec24bbc","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.18.139:443","comment":"https://x.com/drb_ra/status/1957885962333376725","timestamp":"1755631363","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5c8d13df-1aaa-56c8-90c5-729c30b65166","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.18.139:80","comment":"https://x.com/drb_ra/status/1957886101340721503","timestamp":"1755631396","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3dc46a12-edbb-5cbe-b0cc-f6943eb58b71","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.76.61:80","comment":"https://x.com/drb_ra/status/1957886242273501620","timestamp":"1755631430","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bc6d4ad1-8d7e-56b7-916e-266b842e2ef8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.76.61","comment":"https://x.com/drb_ra/status/1957886242273501620","timestamp":"1755631430","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f5362df2-3573-5927-a2da-d26aeb413856","type":"url","category":"Network activity","to_ids":true,"value":"http://52.50.86.69:80","comment":"https://x.com/drb_ra/status/1957886383068180522","timestamp":"1755631464","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"020e0084-fba8-5b2f-8a9d-56f678a3aa82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.50.86.69","comment":"https://x.com/drb_ra/status/1957886383068180522","timestamp":"1755631464","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0aaa83d7-d2bb-54c3-aacb-37c2c140b0af","type":"url","category":"Network activity","to_ids":true,"value":"http://52.51.229.174:80","comment":"https://x.com/drb_ra/status/1957886522553741330","timestamp":"1755631497","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b3d12c46-0d7d-5f49-adc0-53592ca1c683","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.51.229.174","comment":"https://x.com/drb_ra/status/1957886522553741330","timestamp":"1755631497","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"77720f99-ccd3-5c01-9b79-8e7b6749f5a0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.153.225:80","comment":"https://x.com/drb_ra/status/1957886661687152776","timestamp":"1755631530","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9f8e63ca-7b26-564a-86f9-f9a3234313e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.153.225","comment":"https://x.com/drb_ra/status/1957886661687152776","timestamp":"1755631530","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4613ed18-ecc3-5183-a471-facf02005fdd","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.20.145:80","comment":"https://x.com/drb_ra/status/1957886800678043861","timestamp":"1755631563","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e962c1c6-9871-5351-9cc5-621d3e67da14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.20.145","comment":"https://x.com/drb_ra/status/1957886800678043861","timestamp":"1755631563","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d3a3b436-0578-5057-b837-fcdeb73f3907","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.45.25:80","comment":"https://x.com/drb_ra/status/1957886939291611482","timestamp":"1755631596","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"089b1a08-1819-5084-aa68-ed9b98913358","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.45.25","comment":"https://x.com/drb_ra/status/1957886939291611482","timestamp":"1755631596","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"325bba2a-1d3f-559f-ac17-09da8d7b009f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.246.222.221:80","comment":"https://x.com/drb_ra/status/1957887078982963231","timestamp":"1755631630","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bd24c00d-3df6-5ed4-a6e2-c9a1ff770997","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.246.222.221","comment":"https://x.com/drb_ra/status/1957887078982963231","timestamp":"1755631630","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4f764ef6-ece0-510b-83a2-349d714942f0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.63.39:80","comment":"https://x.com/drb_ra/status/1957887215670808589","timestamp":"1755631662","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c444b2df-2260-501e-956d-1f855d7e8405","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.63.39","comment":"https://x.com/drb_ra/status/1957887215670808589","timestamp":"1755631662","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7d966881-9641-5993-9c9a-ea7bb7dcebed","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.142.115:80","comment":"https://x.com/drb_ra/status/1957887355492470977","timestamp":"1755631695","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"270f0048-88b2-58db-94b5-b5a3dc9883de","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.234.198:80","comment":"https://x.com/drb_ra/status/1957887494244168112","timestamp":"1755631729","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"01fd0133-e7d7-5825-ba62-c247160b3374","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.234.198","comment":"https://x.com/drb_ra/status/1957887494244168112","timestamp":"1755631729","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"14c496e7-2be5-574b-ae58-246d01def5fc","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.113.12:80","comment":"https://x.com/drb_ra/status/1957887632844710319","timestamp":"1755631762","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"976a4ed7-402d-57ca-9816-f64ea81591b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.113.12","comment":"https://x.com/drb_ra/status/1957887632844710319","timestamp":"1755631762","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ea88d047-3438-5b19-bbd0-9156bad4b030","type":"url","category":"Network activity","to_ids":true,"value":"http://34.254.181.76:80","comment":"https://x.com/drb_ra/status/1957887771168895309","timestamp":"1755631795","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"1b88cf8b-f5f0-526d-bd4c-569657e319d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.254.181.76","comment":"https://x.com/drb_ra/status/1957887771168895309","timestamp":"1755631795","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"60786c60-2262-521c-8056-973660aadb0e","type":"url","category":"Network activity","to_ids":true,"value":"http://34.241.234.159:80","comment":"https://x.com/drb_ra/status/1957887910352691411","timestamp":"1755631828","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fd22ab82-a24e-5579-babd-66e0f6c9f6c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.241.234.159","comment":"https://x.com/drb_ra/status/1957887910352691411","timestamp":"1755631828","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7bec9dcb-c184-5605-99df-2064d00edb74","type":"url","category":"Network activity","to_ids":true,"value":"http://54.154.226.1:80","comment":"https://x.com/drb_ra/status/1957888049523880310","timestamp":"1755631861","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7b77e5b4-a315-53ec-a92c-acc7eca422b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.154.226.1","comment":"https://x.com/drb_ra/status/1957888049523880310","timestamp":"1755631861","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9a73a3e5-d7be-5191-85eb-6058d0532da8","type":"url","category":"Network activity","to_ids":true,"value":"http://63.35.196.138:443","comment":"https://x.com/drb_ra/status/1957888188179181844","timestamp":"1755631894","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"788ce987-3302-5816-ada8-f8623a76d6c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.35.196.138","comment":"https://x.com/drb_ra/status/1957888188179181844","timestamp":"1755631894","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"230271f4-d6cf-5a7a-b9e8-b392e70aa50b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.92.82","comment":"https://x.com/drb_ra/status/1957888327161638983","timestamp":"1755631927","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c63ff9fd-d28d-53ee-aa3d-dd7833d2690e","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.92.82:80","comment":"https://x.com/drb_ra/status/1957888327161638983","timestamp":"1755631927","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"16a3446e-beee-5e38-97eb-7d0817973acd","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.164.220:80","comment":"https://x.com/drb_ra/status/1957888465452036254","timestamp":"1755631960","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d2204b16-d23e-574c-b42f-dab50eb1438d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.194.193","comment":"https://x.com/drb_ra/status/1957888605332074738","timestamp":"1755631993","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"15247552-475c-5a38-878b-25d05a92b231","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.194.193:80","comment":"https://x.com/drb_ra/status/1957888605332074738","timestamp":"1755631993","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b83b7a2c-2daa-5fcc-94a9-838caee36689","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.163.57:80","comment":"https://x.com/drb_ra/status/1957888742330658943","timestamp":"1755632026","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f65d0987-65ee-50c1-95ac-f346adbb1b19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.163.57","comment":"https://x.com/drb_ra/status/1957888742330658943","timestamp":"1755632026","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9da380bf-cf8f-508f-969a-329d93c1a74c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.247.225:80","comment":"https://x.com/drb_ra/status/1957888881703182520","timestamp":"1755632059","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"57c8da0c-16ad-5a09-a6b5-5ad04fff1acb","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.47.126:80","comment":"https://x.com/drb_ra/status/1957889019918077959","timestamp":"1755632092","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6d8d6417-9e61-514c-8ebf-345b6e285a5d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.47.126","comment":"https://x.com/drb_ra/status/1957889019918077959","timestamp":"1755632092","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5bc4a059-c77f-5798-9ce4-9d54d63e729e","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.131.44:80","comment":"https://x.com/drb_ra/status/1957889158845985272","timestamp":"1755632125","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9c55b305-b08c-5900-9280-e794333790bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.131.44","comment":"https://x.com/drb_ra/status/1957889158845985272","timestamp":"1755632125","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6f20b06d-3a59-509b-8663-e357ec33f5bd","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.122.68:80","comment":"https://x.com/drb_ra/status/1957889297392263181","timestamp":"1755632158","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0345552c-5a8f-53b5-96f6-21348442885e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.122.68","comment":"https://x.com/drb_ra/status/1957889297392263181","timestamp":"1755632158","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"142b6ab2-6e21-5992-a882-ca15d3c1e14c","type":"domain","category":"Network activity","to_ids":true,"value":"gam-impianti.com","comment":"https://x.com/urldna_bot/status/1957895374024081871","timestamp":"1755633607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"42952484-5694-5ff8-8923-80c77a098137","type":"url","category":"Network activity","to_ids":true,"value":"https://gam-impianti.com","comment":"https://x.com/urldna_bot/status/1957895374024081871","timestamp":"1755633607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e0ba40a3-575a-5c8b-b889-1853760e7f38","type":"url","category":"Network activity","to_ids":true,"value":"https://www.mediafire.com/file/4d9ugnrm7616pa5/Andro+RAT+2025.zip/file","comment":"https://x.com/skocherhan/status/1957906643783442935","timestamp":"1755636294","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"7e9b9ae1-bb29-57c6-8e80-5bbde6d2710b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.20.47.153","comment":"https://x.com/threatquery/status/1957910454786744674","timestamp":"1755637203","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"malware"},{"name":"C2"}]},{"uuid":"5a6731d4-f6d8-54e4-8efe-cd4d4fb8db87","type":"url","category":"Network activity","to_ids":true,"value":"http://3.5.131.126","comment":"https://x.com/threatquery/status/1957910456644878383","timestamp":"1755637203","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"malware"},{"name":"C2"}]},{"uuid":"28fd140d-b1d6-52be-8ae2-eb0b84dc97a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.11.80.242","comment":"https://x.com/skocherhan/status/1957910588165689461","timestamp":"1755637235","distribution":"5"},{"uuid":"3dc13263-9be9-5699-a52d-64ba6ab1224c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.13.190.18","comment":"https://x.com/skocherhan/status/1957912084747878726","timestamp":"1755637591","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"770a96a7-88d9-5359-998f-c2756e9363fd","type":"url","category":"Network activity","to_ids":true,"value":"http://31.13.190.18","comment":"https://x.com/skocherhan/status/1957912084747878726","timestamp":"1755637591","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"71b142f0-a070-50b4-921b-eef87bb9deb9","type":"domain","category":"Network activity","to_ids":true,"value":"hzrlcwzx.com","comment":"https://x.com/catnap707/status/1957912262464925782","timestamp":"1755637634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68fc0df0-f4b5-507d-861f-ca7725f59f49","type":"url","category":"Network activity","to_ids":true,"value":"http://hzrlcwzx.com/agency","comment":"https://x.com/catnap707/status/1957912262464925782","timestamp":"1755637634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3d88b23-ceba-5c05-bbfb-cf3c105a61bf","type":"url","category":"Network activity","to_ids":true,"value":"http://tigeranion.icu/QQc0yE/#/","comment":"https://x.com/catnap707/status/1957912262464925782","timestamp":"1755637634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c81ab2fe-489c-52f8-8385-6b2d2c05c463","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.186.89","comment":"https://x.com/catnap707/status/1957912262464925782","timestamp":"1755637634","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8ee5613-c12a-5171-babd-4dc6b637c344","type":"domain","category":"Network activity","to_ids":true,"value":"northwesstel.weebly.com","comment":"https://x.com/urldna_bot/status/1957925569301004593","timestamp":"1755640806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ea7cb8c1-c932-5eb7-a3ad-436a9f63ca8e","type":"url","category":"Network activity","to_ids":true,"value":"https://northwesstel.weebly.com","comment":"https://x.com/urldna_bot/status/1957925569301004593","timestamp":"1755640806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9725ab46-30d6-5a59-891d-98311816e574","type":"ip-dst","category":"Network activity","to_ids":true,"value":"10.20.0.2","comment":"https://x.com/skocherhan/status/1957930604068049168","timestamp":"1755642007","distribution":"5"},{"uuid":"2a93a6e9-6f1c-5b75-b0f3-6e2becf9fd28","type":"url","category":"Network activity","to_ids":true,"value":"https://tigeranion.icu/QQc0yE/","comment":"https://x.com/masaomi346/status/1957936170668814517","timestamp":"1755643334","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e52c3f1-4cf5-544f-a365-b450a41589b2","type":"domain","category":"Network activity","to_ids":true,"value":"tigeranion.icu","comment":"https://x.com/masaomi346/status/1957936170668814517","timestamp":"1755643334","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6bf85ad0-c404-5ba4-901a-5343bb5df9df","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:8088","comment":"https://x.com/drb_ra/status/1957937116035338572","timestamp":"1755643559","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"856c3d45-a233-5fae-9a70-7e51506c1431","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.83.99","comment":"https://x.com/drb_ra/status/1957937255718482105","timestamp":"1755643593","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7783889-ebff-56a2-bac6-8d25c133d803","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.83.99:443","comment":"https://x.com/drb_ra/status/1957937255718482105","timestamp":"1755643593","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"366eb6f5-e792-5e9d-b8e6-aeb65c5f38e7","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.184.172:80","comment":"https://x.com/drb_ra/status/1957937395699183838","timestamp":"1755643626","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3f0aca3e-cca8-5613-bca2-213ec87c4c93","type":"url","category":"Network activity","to_ids":true,"value":"http://81.69.98.230:50011","comment":"https://x.com/drb_ra/status/1957937534769721401","timestamp":"1755643659","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f217c5e9-e6bd-5bc7-84cc-2c4f6223b69d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.216.24:443","comment":"https://x.com/drb_ra/status/1957937674985316667","timestamp":"1755643693","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a47d3313-f666-59ff-ac9f-00f8453afc66","type":"url","category":"Network activity","to_ids":true,"value":"http://144.126.144.70:8000","comment":"https://x.com/SarlackLab/status/1957942011463361000","timestamp":"1755644726","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"b616f5e5-9ccf-59cb-826c-8505f19d2fe6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.126.144.70","comment":"https://x.com/SarlackLab/status/1957942011463361000","timestamp":"1755644726","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"93234978-8d78-5857-9d87-18eff2d93cf2","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.laydfc.com","comment":"https://x.com/masaomi346/status/1957949559910658110","timestamp":"1755646526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"516c1d91-14b0-5f93-a119-3e39d6c8c114","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.laydfc.com/ETGate/","comment":"https://x.com/masaomi346/status/1957949559910658110","timestamp":"1755646526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0bc0a1bd-2637-53d6-9d32-11a49a03ece2","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.qdyouge.com","comment":"https://x.com/masaomi346/status/1957949559910658110","timestamp":"1755646526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56da96c2-1976-5195-a2d9-0130be422b04","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.qdyouge.com/ETGate/","comment":"https://x.com/masaomi346/status/1957949559910658110","timestamp":"1755646526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"faad22ef-bed5-5eb3-b79e-c567b8f2eb12","type":"url","category":"Network activity","to_ids":true,"value":"https://firebasestorage.googleapis.com/v0/b/update-75442.appspot.com/o/index.html?alt=media&token=165130e2-1933-440c-9cd6-c5318f159807","comment":"https://x.com/JAMESWT_WT/status/1957949944821641625","timestamp":"1755646618","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a8b92fc-f282-5692-a84b-7e23859d19e6","type":"domain","category":"Network activity","to_ids":true,"value":"scorea36.com","comment":"https://x.com/harugasumi/status/1957976662253138179","timestamp":"1755652988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3119be2a-04c6-5e06-b503-177b2eaef2e9","type":"url","category":"Network activity","to_ids":true,"value":"https://scorea36.com/famidy","comment":"https://x.com/harugasumi/status/1957976662253138179","timestamp":"1755652988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1dca252c-42d0-5f56-b9e1-23f100a9a525","type":"domain","category":"Network activity","to_ids":true,"value":"lakukan.icu","comment":"https://x.com/harugasumi/status/1957976662253138179","timestamp":"1755652988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7a3fb3a1-117d-51e3-9fab-c6618bdeced2","type":"url","category":"Network activity","to_ids":true,"value":"https://lakukan.icu/exhdsa/","comment":"https://x.com/harugasumi/status/1957976662253138179","timestamp":"1755652988","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"17974931-87cb-546d-ad3c-d75f866d9791","type":"domain","category":"Network activity","to_ids":true,"value":"bellnetmessagerie.weebly.com","comment":"https://x.com/urldna_bot/status/1957985969879069071","timestamp":"1755655207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"22e44041-964a-5fd9-9781-6a6e1db3c6c8","type":"url","category":"Network activity","to_ids":true,"value":"https://bellnetmessagerie.weebly.com","comment":"https://x.com/urldna_bot/status/1957985969879069071","timestamp":"1755655207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7ec86597-9687-58d6-ad67-7e5d7305e07c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.17.233:443","comment":"https://x.com/drb_ra/status/1957985982139277766","timestamp":"1755655210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"45062776-0294-56c8-86fe-b670991d73a7","type":"url","category":"Network activity","to_ids":true,"value":"https://210.16.181.38/api/v1/get","comment":"https://x.com/drb_ra/status/1957985982139277766","timestamp":"1755655210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e31d1e2a-0a19-5429-a392-a213f3a28fae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.16.181.38","comment":"https://x.com/drb_ra/status/1957985982139277766","timestamp":"1755655210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1dc69c13-9756-515e-b385-5d22b67ae922","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.17.233","comment":"https://x.com/drb_ra/status/1957985982139277766","timestamp":"1755655210","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d7fb5917-a096-5246-98ca-76c62056ee06","type":"domain","category":"Network activity","to_ids":true,"value":"d34pt.weebly.com","comment":"https://x.com/urldna_bot/status/1958016170088452353","timestamp":"1755662407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"528b2710-6532-58e0-9ab8-f8470fdd21fd","type":"url","category":"Network activity","to_ids":true,"value":"https://d34pt.weebly.com","comment":"https://x.com/urldna_bot/status/1958016170088452353","timestamp":"1755662407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d7ed5a8c-8fb5-538a-9dbe-932778444879","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.135.194.43","comment":"https://x.com/Fact_Finder03/status/1958017527621042286","timestamp":"1755662731","distribution":"5","Tag":[{"name":"Supershell"}]},{"uuid":"1dfa22de-3e1a-5618-a847-06d4d75dcdb5","type":"md5","category":"Payload delivery","to_ids":true,"value":"73a413578667a059840b7536440d2cc8","comment":"https://x.com/Cyberteam008/status/1958027146904867247","timestamp":"1755665024","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"8e949189-1f9c-5e7e-b57f-134be15adcd9","type":"md5","category":"Payload delivery","to_ids":true,"value":"25989c20a2348c749b1c581f853a8208","comment":"https://x.com/Cyberteam008/status/1958027146904867247","timestamp":"1755665024","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"4b4f3b6f-7c14-5852-84a1-30c045da4bd0","type":"md5","category":"Payload delivery","to_ids":true,"value":"9c47edb66fb49647af31d8d18178320e","comment":"https://x.com/Cyberteam008/status/1958027146904867247","timestamp":"1755665024","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"a7b5e14c-8e52-5045-ad83-aee1d4be6437","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.95.8.176","comment":"https://x.com/FalconFeedsio/status/1958028358031413723","timestamp":"1755665313","distribution":"5"},{"uuid":"73943506-159b-5ce4-902d-eefe0e301d26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.112.103.2","comment":"https://x.com/FalconFeedsio/status/1958028358031413723","timestamp":"1755665313","distribution":"5"},{"uuid":"74273813-2144-5f75-bde5-f044c3d90cff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.178.59","comment":"https://x.com/FalconFeedsio/status/1958028358031413723","timestamp":"1755665313","distribution":"5"},{"uuid":"b7e8784d-d009-5756-9bf3-705d8bdd3ef2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.133.102.42","comment":"https://x.com/FalconFeedsio/status/1958028358031413723","timestamp":"1755665313","distribution":"5"},{"uuid":"6fd8f48c-194b-5d1c-9474-d5692542404b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.27.209.132","comment":"https://x.com/FalconFeedsio/status/1958036136003346870","timestamp":"1755667168","distribution":"5"},{"uuid":"734e6e4a-a097-5aa9-bf1b-4f38f77a8c01","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.239.171.105","comment":"https://x.com/FalconFeedsio/status/1958036136003346870","timestamp":"1755667168","distribution":"5"},{"uuid":"fbd18ea0-5297-50f9-a70e-b7b0ea39934b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.229.77.181","comment":"https://x.com/FalconFeedsio/status/1958036136003346870","timestamp":"1755667168","distribution":"5"},{"uuid":"b3ee4085-1b64-5d05-ad56-c684cf4bf2a8","type":"md5","category":"Payload delivery","to_ids":true,"value":"56fa54e02ba165fda62c78c17ada2328","comment":"https://x.com/ReBensk/status/1958041478971945217","timestamp":"1755668441","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"798c9f67-84bc-5efa-bdba-c1b7910eec6d","type":"md5","category":"Payload delivery","to_ids":true,"value":"109934e153da5e0755da75b674638e08","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"fc5106e3-1c1c-5991-89fd-a8377c194d6e","type":"md5","category":"Payload delivery","to_ids":true,"value":"4dd7ebf7c5d1a314f2ec72adce78c730","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"7aed0c88-7920-5f55-9d96-58b8d3d0de70","type":"md5","category":"Payload delivery","to_ids":true,"value":"b43c128aa92b6a6d3c186db505f5be8b","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"04d7db03-6ae1-55a1-8623-b0014c061afb","type":"md5","category":"Payload delivery","to_ids":true,"value":"d64df2eab3f93a22ff76a40eecfbf265","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"d8c7f138-a7d3-50d4-8949-21b30f1a92aa","type":"md5","category":"Payload delivery","to_ids":true,"value":"1f4b5c7bd8233d5d78bfb6e138cf93e0","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"a416a83e-7bc4-5e2d-9613-0982298afaf0","type":"md5","category":"Payload delivery","to_ids":true,"value":"d01d1ad8a86c14d785137f52299f21c2","comment":"https://x.com/suyog41/status/1958042501614625192","timestamp":"1755668685","distribution":"5"},{"uuid":"d2c59a98-dac1-5d55-89c9-3eb9f8a9421f","type":"url","category":"Network activity","to_ids":true,"value":"https://vodwka1.weebly.com","comment":"https://x.com/urldna_bot/status/1958046367726670213","timestamp":"1755669607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"046ea5ba-a5cc-5bed-b77e-35ba5dd67627","type":"domain","category":"Network activity","to_ids":true,"value":"vodwka1.weebly.com","comment":"https://x.com/urldna_bot/status/1958046367726670213","timestamp":"1755669607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f343d844-7152-54e1-b5d1-55a130b48472","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.50.139.77","comment":"https://x.com/romonlyht/status/1958046779221635510","timestamp":"1755669705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f4edd35f-e3bd-52e9-9557-58e39d012ac5","type":"url","category":"Network activity","to_ids":true,"value":"https://vittacalzature.com/gmo/undexc?zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1958046779221635510","timestamp":"1755669705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ef78163-5665-5de6-a1ab-8d4982db28d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.129.108","comment":"https://x.com/romonlyht/status/1958046779221635510","timestamp":"1755669705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dd28669-ce9e-50b9-a857-ddfe9245b7bf","type":"url","category":"Network activity","to_ids":true,"value":"https://vittacalzature.com/gmo/undexc/system.php?praga=df21ae8ccd6f317919e38cb89c783c68&pid=df21ae8ccd6f317919e38cb89c783c68&frameworkdf21ae8ccd6f317919e38cb89c783c68","comment":"https://x.com/romonlyht/status/1958046781633388598","timestamp":"1755669706","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e8bb70a8-4792-5fe9-ae1f-d0dfa5cac63f","type":"md5","category":"Payload delivery","to_ids":true,"value":"df21ae8ccd6f317919e38cb89c783c68","comment":"https://x.com/romonlyht/status/1958046783554351370","timestamp":"1755669706","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62335f7a-18fc-595d-934e-07ff320de96a","type":"url","category":"Network activity","to_ids":true,"value":"https://vittacalzature.com/gmo/undexc/?zonealldom=aaaa@example.jp","comment":"https://x.com/romonlyht/status/1958046781633388598","timestamp":"1755669706","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"439e02d3-c534-5e51-b76a-e2694e1515a4","type":"domain","category":"Network activity","to_ids":true,"value":"vittacalzature.com","comment":"https://x.com/romonlyht/status/1958046781633388598","timestamp":"1755669706","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ec95191-8daa-584b-8ffb-ef6f67a430d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.113.146.56","comment":"https://x.com/Fact_Finder03/status/1958046987472769319","timestamp":"1755669755","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"8ff1a82b-1f85-51eb-8070-d517847624a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.116.145","comment":"https://x.com/drb_ra/status/1958058135635018219","timestamp":"1755672413","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b3462dc1-2aa3-5162-8744-06b1bfde49c4","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.116.145:80","comment":"https://x.com/drb_ra/status/1958058135635018219","timestamp":"1755672413","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d52dc875-7560-55f7-b3fe-99e5a80015d7","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.178.59:3333","comment":"https://x.com/drb_ra/status/1958058276383326567","timestamp":"1755672446","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"Evilginx"},{"name":"C2"}]},{"uuid":"2d6c490d-21c2-5847-aef8-3cef871df3d2","type":"url","category":"Network activity","to_ids":true,"value":"http://124.220.19.20:8888","comment":"https://x.com/drb_ra/status/1958058414602342782","timestamp":"1755672479","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"3bfc5a16-59df-5df1-81a0-56592c9ff41f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.220.19.20","comment":"https://x.com/drb_ra/status/1958058414602342782","timestamp":"1755672479","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"6309d8be-ed24-5498-8cad-8e21d45c80ba","type":"url","category":"Network activity","to_ids":true,"value":"http://103.215.216.166:443","comment":"https://x.com/drb_ra/status/1958058552901156922","timestamp":"1755672512","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4e19d7e7-791f-5620-908b-a5d4155886fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.215.216.166","comment":"https://x.com/drb_ra/status/1958058552901156922","timestamp":"1755672512","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0bbc7540-529d-5373-b118-61fd5fc85a02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.203.198.198","comment":"https://x.com/drb_ra/status/1958058691694866658","timestamp":"1755672545","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"eed772b6-017e-5658-b52d-c52eb2a08aec","type":"url","category":"Network activity","to_ids":true,"value":"http://34.203.198.198:443","comment":"https://x.com/drb_ra/status/1958058691694866658","timestamp":"1755672545","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"9696c97d-8503-5819-ae83-0cc7f4958c88","type":"url","category":"Network activity","to_ids":true,"value":"http://69.62.65.188:443","comment":"https://x.com/drb_ra/status/1958058830211789239","timestamp":"1755672578","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"22d05a6f-4e5e-5445-879c-8bfb3f44eeb0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.62.65.188","comment":"https://x.com/drb_ra/status/1958058830211789239","timestamp":"1755672578","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"89ea693e-0fd4-502f-9c57-f756f7a71a56","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.14.44.190","comment":"https://x.com/drb_ra/status/1958058967893979498","timestamp":"1755672611","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"274f13dd-409e-5e82-929d-708e3a4dae98","type":"url","category":"Network activity","to_ids":true,"value":"http://77.14.44.190:7443","comment":"https://x.com/drb_ra/status/1958058967893979498","timestamp":"1755672611","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c20de46c-130f-52b7-a230-2f48a6d93d1e","type":"url","category":"Network activity","to_ids":true,"value":"http://95.112.103.2:7443","comment":"https://x.com/drb_ra/status/1958059105907552475","timestamp":"1755672644","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"30e89f02-e371-538a-a4a6-fc1cd305957a","type":"url","category":"Network activity","to_ids":true,"value":"http://13.115.109.98:80","comment":"https://x.com/drb_ra/status/1958059243803738233","timestamp":"1755672677","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"694075fc-5a9a-5706-b62d-35231902cf27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.115.109.98","comment":"https://x.com/drb_ra/status/1958059243803738233","timestamp":"1755672677","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"b42f2a4d-62dd-5c5b-ae44-b72c14b4ea30","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.115.82:31337","comment":"https://x.com/drb_ra/status/1958059381980803134","timestamp":"1755672710","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2a30130a-9097-54f2-a9fa-4d6679654e1b","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.115.82:443","comment":"https://x.com/drb_ra/status/1958059520023826884","timestamp":"1755672743","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9aca29b6-b74b-5f68-9d8f-28f29581aff5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.220.115.82","comment":"https://x.com/drb_ra/status/1958059520023826884","timestamp":"1755672743","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d215529c-53e2-5439-b15a-e0f547153649","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.214.159:60000","comment":"https://x.com/drb_ra/status/1958059658058313886","timestamp":"1755672776","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"fc4a2c19-a894-5ee8-a43e-e5c547fd71cc","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.214.159:8888","comment":"https://x.com/drb_ra/status/1958059797611258267","timestamp":"1755672809","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1cb8cdf0-d2a1-5622-8ee7-9ff7cf1c5cd0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.214.159","comment":"https://x.com/drb_ra/status/1958059935956185523","timestamp":"1755672842","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bc40618d-9d73-583b-817a-2a5c8abc27db","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.214.159:9999","comment":"https://x.com/drb_ra/status/1958059935956185523","timestamp":"1755672842","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"469527bd-8cc7-5ed4-a643-1634249cb0b5","type":"url","category":"Network activity","to_ids":true,"value":"http://52.36.251.99:8080","comment":"https://x.com/drb_ra/status/1958060582113771954","timestamp":"1755672996","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"ea30f963-1f9e-5cb9-816a-2a4c9e4dc6c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.36.251.99","comment":"https://x.com/drb_ra/status/1958060582113771954","timestamp":"1755672996","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"40bde401-5f54-5eb5-94d3-efd32bd174db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.26.115.209","comment":"https://x.com/drb_ra/status/1958060721561821314","timestamp":"1755673029","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"98f22306-31bb-51ef-b3c2-e2c65cbcf3c2","type":"url","category":"Network activity","to_ids":true,"value":"http://193.26.115.209:1024","comment":"https://x.com/drb_ra/status/1958060721561821314","timestamp":"1755673029","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d8b231e1-f30d-5c5f-8cec-36e533ce0fda","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.102.222:102","comment":"https://x.com/drb_ra/status/1958060860238127211","timestamp":"1755673062","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2050f426-547d-5662-8d4c-c93c149a85e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.102.222","comment":"https://x.com/drb_ra/status/1958060860238127211","timestamp":"1755673062","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e376d0a1-a697-5561-8275-42d2cec36336","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.63.178:36683","comment":"https://x.com/drb_ra/status/1958060999614898576","timestamp":"1755673095","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a96b6c02-4959-5e4c-822f-54baef364d46","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.63.178:833","comment":"https://x.com/drb_ra/status/1958061138748342598","timestamp":"1755673129","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2d3acb41-7124-53bf-a36c-a3bc54ebc5f1","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.63.178:83","comment":"https://x.com/drb_ra/status/1958061277252661692","timestamp":"1755673162","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"39b7d73c-60b7-5971-9bd3-689126c70f3c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.192.15.48","comment":"https://x.com/drb_ra/status/1958061415509471613","timestamp":"1755673195","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"218ad8a1-b6ca-57b1-8b04-84b6c25dd24b","type":"url","category":"Network activity","to_ids":true,"value":"http://40.192.15.48:44818","comment":"https://x.com/drb_ra/status/1958061415509471613","timestamp":"1755673195","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ee695a26-466a-5c0d-9758-83de466c34c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.60.200.7","comment":"https://x.com/drb_ra/status/1958061553913327841","timestamp":"1755673228","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5cf17fec-9ebf-514a-90a9-474961ad0c70","type":"url","category":"Network activity","to_ids":true,"value":"http://13.60.200.7:10261","comment":"https://x.com/drb_ra/status/1958061553913327841","timestamp":"1755673228","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"cf7e4110-a888-55e7-bc4f-0e7d64d1db33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.198.30.255","comment":"https://x.com/drb_ra/status/1958061693184925861","timestamp":"1755673261","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2a54f117-ebf7-5e3b-ad7a-c1781c01bff1","type":"url","category":"Network activity","to_ids":true,"value":"http://54.198.30.255:443","comment":"https://x.com/drb_ra/status/1958061693184925861","timestamp":"1755673261","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"13ec33a5-1822-5e5a-8c58-d9a701af741f","type":"url","category":"Network activity","to_ids":true,"value":"http://52.211.179.171:80","comment":"https://x.com/drb_ra/status/1958061831202758861","timestamp":"1755673294","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f124674d-99a6-5b25-bdde-0aa5c3c64e44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.211.179.171","comment":"https://x.com/drb_ra/status/1958061831202758861","timestamp":"1755673294","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2c4a1e63-5001-5af6-8aae-2976bc330869","type":"url","category":"Network activity","to_ids":true,"value":"http://63.35.221.122:80","comment":"https://x.com/drb_ra/status/1958061969677660587","timestamp":"1755673327","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"12040000-eaad-517d-abb6-c36a2e0bbd4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.35.221.122","comment":"https://x.com/drb_ra/status/1958061969677660587","timestamp":"1755673327","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e9533da9-d305-5bb9-9682-5d92781ee213","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.69.37:80","comment":"https://x.com/drb_ra/status/1958062108391669792","timestamp":"1755673360","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f247f278-3d52-5419-8272-22d3f63e4bcc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.69.37","comment":"https://x.com/drb_ra/status/1958062108391669792","timestamp":"1755673360","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"012d2527-9210-59b8-ac02-4822e819af5c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.30.103:80","comment":"https://x.com/drb_ra/status/1958062246883393584","timestamp":"1755673393","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"34010706-2fe0-5ca3-8414-0e5c10167fdd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.65.102","comment":"https://x.com/drb_ra/status/1958062385253478417","timestamp":"1755673426","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7ae00df2-1fca-56f3-8c49-68be83ac27f6","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.65.102:80","comment":"https://x.com/drb_ra/status/1958062385253478417","timestamp":"1755673426","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a84c5517-1c7e-5008-beeb-eeec6fd1625e","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.74.150:80","comment":"https://x.com/drb_ra/status/1958062523439010057","timestamp":"1755673459","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ed1f8df8-99d6-5376-a996-ff15ebecaf53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.74.150","comment":"https://x.com/drb_ra/status/1958062523439010057","timestamp":"1755673459","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"aa204e81-fed7-5777-8acc-1a705423fdb5","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.232.249:80","comment":"https://x.com/drb_ra/status/1958062664254390613","timestamp":"1755673492","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"883cfdc5-b260-57e6-a934-ce85af4f5930","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.232.249","comment":"https://x.com/drb_ra/status/1958062664254390613","timestamp":"1755673492","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"adcb00e4-0dd8-5c3d-8bc9-5014938d0460","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.32.22:80","comment":"https://x.com/drb_ra/status/1958062802913894707","timestamp":"1755673525","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"916f2e8d-c02e-50a0-97a6-056197236bec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.32.22","comment":"https://x.com/drb_ra/status/1958062802913894707","timestamp":"1755673525","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"13a1003e-832c-5bc8-a70c-213657978861","type":"url","category":"Network activity","to_ids":true,"value":"http://54.215.251.1:443","comment":"https://x.com/drb_ra/status/1958062941602763188","timestamp":"1755673558","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"afbad7af-eb0e-5a5b-a280-d9dfe115eeb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.215.251.1","comment":"https://x.com/drb_ra/status/1958062941602763188","timestamp":"1755673558","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"11d49424-4438-574d-84fd-0e0f8838e2ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.105.23.130","comment":"https://x.com/FalconFeedsio/status/1958064772680937591","timestamp":"1755673995","distribution":"5"},{"uuid":"02e82eb6-0afc-5a64-a36c-22c0a67e4e1e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.3.32.143","comment":"https://x.com/FalconFeedsio/status/1958064772680937591","timestamp":"1755673995","distribution":"5"},{"uuid":"a430bb62-ab7e-5f51-a9b6-71b9dc17ff87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.24.124","comment":"https://x.com/FalconFeedsio/status/1958064772680937591","timestamp":"1755673995","distribution":"5"},{"uuid":"e89e306c-ff98-58d2-aa5c-d71bd4de0d0b","type":"domain","category":"Network activity","to_ids":true,"value":"gazelprox.cc","comment":"https://x.com/urldna_bot/status/1958076567914996025","timestamp":"1755676807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a43a9e96-561d-5601-af23-e5cff7d8aa4e","type":"url","category":"Network activity","to_ids":true,"value":"https://gazelprox.cc/go/3394z2/03a4/?rdr=1","comment":"https://x.com/urldna_bot/status/1958076567914996025","timestamp":"1755676807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b6113a5b-e170-59a4-89f6-646220caf182","type":"domain","category":"Network activity","to_ids":true,"value":"saftycar.com","comment":"https://x.com/skocherhan/status/1958084710342459488","timestamp":"1755678749","distribution":"5"},{"uuid":"489ff87b-fb60-570a-9660-aa7d31f6d104","type":"url","category":"Network activity","to_ids":true,"value":"http://saftycar.com/ConvertedFile.txt","comment":"https://x.com/skocherhan/status/1958084710342459488","timestamp":"1755678749","distribution":"5"},{"uuid":"492c229b-58d0-5cdd-9682-05ba31f4332c","type":"md5","category":"Payload delivery","to_ids":true,"value":"f72ad710abf413b5f7f4310ffba28749","comment":"https://x.com/skocherhan/status/1958085792657449130","timestamp":"1755679007","distribution":"5"},{"uuid":"f84543bd-3137-5679-86a3-fca76ca13854","type":"md5","category":"Payload delivery","to_ids":true,"value":"3becdef447c0b52db0907449be6b794f","comment":"https://x.com/skocherhan/status/1958085792657449130","timestamp":"1755679007","distribution":"5"},{"uuid":"108d44f5-4696-59a4-b82e-c972366a6ff1","type":"md5","category":"Payload delivery","to_ids":true,"value":"aa1b4aa4d2faec5723e4d9cb8a3c5ec0","comment":"https://x.com/skocherhan/status/1958085792657449130","timestamp":"1755679007","distribution":"5"},{"uuid":"57129326-947e-5306-a70a-a51b5929841e","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/Fuch0u","comment":"https://x.com/skocherhan/status/1958091413045834148","timestamp":"1755680347","distribution":"5"},{"uuid":"07c0e61d-22eb-5bff-81d5-a04c30003ce7","type":"domain","category":"Network activity","to_ids":true,"value":"customerhelp-google.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cb1b7d77-bb73-5551-a70c-46fb5c2aa7d6","type":"url","category":"Network activity","to_ids":true,"value":"http://customerhelp-google.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"47d0eea9-6a8d-5a57-bb41-763f969728bd","type":"domain","category":"Network activity","to_ids":true,"value":"youtube-mixer.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4ccef703-cb07-5ff1-8225-acd26bd5995a","type":"url","category":"Network activity","to_ids":true,"value":"http://youtube-mixer.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a794de28-b003-57f9-9e42-f5291ff9294d","type":"domain","category":"Network activity","to_ids":true,"value":"netflix-bet.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9c0da7f0-f77e-5d8e-ab22-08b6afaa000c","type":"url","category":"Network activity","to_ids":true,"value":"http://netflix-bet.com","comment":"https://x.com/c9lab_soc/status/1958098687114068178","timestamp":"1755682081","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3a1f2ff2-49db-5eab-aff6-7a169ed60df9","type":"url","category":"Network activity","to_ids":true,"value":"https://hawaiintel6.weebly.com","comment":"https://x.com/urldna_bot/status/1958106779096687005","timestamp":"1755684010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c14bd9d8-7829-5f79-954e-62fd7c4f6a07","type":"domain","category":"Network activity","to_ids":true,"value":"hawaiintel6.weebly.com","comment":"https://x.com/urldna_bot/status/1958106779096687005","timestamp":"1755684010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4c876ae0-cdb5-5b54-9f91-36982f2ab452","type":"md5","category":"Payload delivery","to_ids":true,"value":"e823ea8bba674a2c8df58ab8ecaf8f05","comment":"https://x.com/suyog41/status/1958109207678619911","timestamp":"1755684589","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"e69ee332-a140-5648-b749-4ad718fcc5fb","type":"md5","category":"Payload delivery","to_ids":true,"value":"ab4ad23c95a63168685a8e5189f61946","comment":"https://x.com/suyog41/status/1958109207678619911","timestamp":"1755684589","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"f2ce8a58-6af4-5184-bafa-3280ff3e7600","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.22:8090","comment":"https://x.com/drb_ra/status/1958121936707313764","timestamp":"1755687624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7371c605-88a2-5817-aac2-074fac1ee595","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.22","comment":"https://x.com/drb_ra/status/1958121936707313764","timestamp":"1755687624","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f88350d-7dc2-51ba-a605-1fda94a45482","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.125.195:80","comment":"https://x.com/drb_ra/status/1958122585251524787","timestamp":"1755687779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0222e382-8f49-5b42-9b11-ff714372eba6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.125.195","comment":"https://x.com/drb_ra/status/1958122585251524787","timestamp":"1755687779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fda1ac6a-7589-5352-b042-91cf8d7b9010","type":"url","category":"Network activity","to_ids":true,"value":"http://47.113.193.170:443","comment":"https://x.com/drb_ra/status/1958122726687686791","timestamp":"1755687812","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f6bf132-5e59-53b3-bdbb-14247ed630ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.113.193.170","comment":"https://x.com/drb_ra/status/1958122726687686791","timestamp":"1755687812","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"321ccb59-c689-57ea-a004-57391c614a44","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.111.97.207","comment":"https://x.com/drb_ra/status/1958122868799135859","timestamp":"1755687846","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"59ef94f7-7e81-58de-af64-6e105a10f8b3","type":"url","category":"Network activity","to_ids":true,"value":"http://47.111.97.207:8000","comment":"https://x.com/drb_ra/status/1958122868799135859","timestamp":"1755687846","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d74df921-744e-578b-afdd-dd4651d5b59f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.230.30.248","comment":"https://x.com/drb_ra/status/1958123014119129218","timestamp":"1755687881","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97fefe89-24d1-51b2-bf79-ab0d55e1010f","type":"url","category":"Network activity","to_ids":true,"value":"http://35.230.30.248:2053","comment":"https://x.com/drb_ra/status/1958123014119129218","timestamp":"1755687881","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1e09e0b9-7bca-5fa3-90d6-5b243b1c68d5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.198.162.55:80","comment":"https://x.com/drb_ra/status/1958123155756556498","timestamp":"1755687915","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c6d50d9c-1db6-5507-811c-c34bf046b913","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.198.162.55","comment":"https://x.com/drb_ra/status/1958123155756556498","timestamp":"1755687915","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d0850f33-55ba-54a0-b232-f270fc03e46b","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.55:80","comment":"https://x.com/drb_ra/status/1958123296773357597","timestamp":"1755687948","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6ecd29bd-800f-569e-9399-6b2b42f435f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.55","comment":"https://x.com/drb_ra/status/1958123296773357597","timestamp":"1755687948","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d99e074-b674-56a4-9fd8-2b170d478cc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.124.177","comment":"https://x.com/drb_ra/status/1958123437043679322","timestamp":"1755687982","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"429ddcbf-ad58-581f-80d0-5de395e10cc5","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.124.177:8081","comment":"https://x.com/drb_ra/status/1958123437043679322","timestamp":"1755687982","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"92f89751-66a8-5f76-bbe3-3551bc0086b4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.222.115:8443","comment":"https://x.com/drb_ra/status/1958123576629825815","timestamp":"1755688015","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3f003dd-a55c-59eb-99b8-947db5e77d72","type":"url","category":"Network activity","to_ids":true,"value":"https://8.134.222.115/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1958123576629825815","timestamp":"1755688015","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db8c273a-86a4-5b96-a169-07a769e2743f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.71.116.31","comment":"https://x.com/drb_ra/status/1958123716858003909","timestamp":"1755688048","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d03555dd-46bc-5938-80b2-9009b1be61d6","type":"url","category":"Network activity","to_ids":true,"value":"http://118.71.116.31:4444","comment":"https://x.com/drb_ra/status/1958123716858003909","timestamp":"1755688048","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3a9cc94e-0392-5898-b693-a753b0840224","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.82.150:80","comment":"https://x.com/drb_ra/status/1958123856247312568","timestamp":"1755688082","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"da5c8e92-5c1e-5e83-bc9b-c6bca76e05e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.82.150","comment":"https://x.com/drb_ra/status/1958123856247312568","timestamp":"1755688082","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7778f761-2ad4-580f-853d-9758b03a9295","type":"url","category":"Network activity","to_ids":true,"value":"https://160.30.231.250/ca","comment":"https://x.com/drb_ra/status/1958123995452051758","timestamp":"1755688115","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3b36beab-6e00-5625-844d-a090f676fbeb","type":"url","category":"Network activity","to_ids":true,"value":"http://110.42.47.55:4444","comment":"https://x.com/drb_ra/status/1958123995452051758","timestamp":"1755688115","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e0228275-afac-57ba-8b65-d858695db04b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.42.47.55","comment":"https://x.com/drb_ra/status/1958123995452051758","timestamp":"1755688115","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"73dbf1a5-b1fe-5f89-b967-efb538479eb7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.30.231.250","comment":"https://x.com/drb_ra/status/1958123995452051758","timestamp":"1755688115","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bdd43a21-2cfd-5ee0-b810-07faa511bd67","type":"url","category":"Network activity","to_ids":true,"value":"http://3.27.235.189:80","comment":"https://x.com/drb_ra/status/1958124135470526603","timestamp":"1755688148","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d7996d97-d5cf-54df-af25-0fba2eb550b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.237.119","comment":"https://x.com/drb_ra/status/1958124274473971792","timestamp":"1755688181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22f713b1-099e-5d66-b5b9-c8c86526b661","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.237.119:8020","comment":"https://x.com/drb_ra/status/1958124274473971792","timestamp":"1755688181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88debc91-2300-55d4-b64f-90bff97259f0","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.11.34:443","comment":"https://x.com/drb_ra/status/1958124415645868322","timestamp":"1755688215","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b1784b97-561c-56fd-94cb-42da37eeb9e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.143.11.34","comment":"https://x.com/drb_ra/status/1958124415645868322","timestamp":"1755688215","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"be1f2551-37bd-585b-bd48-8e6806d911a0","type":"url","category":"Network activity","to_ids":true,"value":"http://35.230.30.248:2083","comment":"https://x.com/drb_ra/status/1958124556389953775","timestamp":"1755688249","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3a75cb1-e69a-578b-989d-efa12495b0f5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.69.224:80","comment":"https://x.com/drb_ra/status/1958124696517456305","timestamp":"1755688282","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b82b1dc8-8028-534f-85e0-fd8566f602b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.69.224","comment":"https://x.com/drb_ra/status/1958124696517456305","timestamp":"1755688282","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"25dd3a09-fcaf-5a1c-9bcb-7f4669e3d67e","type":"url","category":"Network activity","to_ids":true,"value":"http://flo4211.github.io/More/","comment":"https://x.com/urldna_bot/status/1958136964822995124","timestamp":"1755691207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9b2f84d9-6be5-5c3a-927a-b4d6405c3df8","type":"domain","category":"Network activity","to_ids":true,"value":"flo4211.github.io","comment":"https://x.com/urldna_bot/status/1958136964822995124","timestamp":"1755691207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4be49b30-0c02-52f8-bf86-66092d7f2fe5","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/zexx_Good","comment":"https://x.com/suyog41/status/1958140266369753509","timestamp":"1755691994","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3ad1ea7f-20ba-5934-aec5-2e1991a8a295","type":"md5","category":"Payload delivery","to_ids":true,"value":"9e5a694ef99c614f35c82c0ce3cde2e0","comment":"https://x.com/suyog41/status/1958140266369753509","timestamp":"1755691994","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"08cfa0ea-4a9f-502e-9099-d56d60054c08","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/sisuryaofficialkuu","comment":"https://x.com/suyog41/status/1958140266369753509","timestamp":"1755691994","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5c205617-e0bf-543a-811d-1158e13f5168","type":"domain","category":"Network activity","to_ids":true,"value":"dpaste.com","comment":"https://x.com/skocherhan/status/1958144218192339353","timestamp":"1755692936","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"040e13c9-70f4-52fc-ac7f-74d6f2614757","type":"url","category":"Network activity","to_ids":true,"value":"http://dpaste.com/H2RYMPTBX.txt","comment":"https://x.com/skocherhan/status/1958144218192339353","timestamp":"1755692936","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"a47ee2bd-9ad6-5ca5-9a2c-57465e69960e","type":"url","category":"Network activity","to_ids":true,"value":"http://13.49.57.111:7000","comment":"https://x.com/skocherhan/status/1958144218192339353","timestamp":"1755692936","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"f80f149c-f920-507b-ad15-24bea8f198e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.49.57.111","comment":"https://x.com/skocherhan/status/1958144218192339353","timestamp":"1755692936","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"ddef7795-aece-5beb-a949-01f2588019c2","type":"url","category":"Network activity","to_ids":true,"value":"https://coolbirdstonezz.jihuisw.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"198bef17-a675-5c6e-8289-e4cfd73c3856","type":"domain","category":"Network activity","to_ids":true,"value":"coolbirdstonezz.jihuisw.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d466c87d-44ce-5427-8b8a-adfb14098cbd","type":"domain","category":"Network activity","to_ids":true,"value":"orangetreecloud.ahzcz.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32b46226-e829-5300-8615-59eaf306a093","type":"url","category":"Network activity","to_ids":true,"value":"https://orangetreecloud.ahzcz.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dcc3fe5-e07b-5c00-8df2-ecf9fe04738c","type":"domain","category":"Network activity","to_ids":true,"value":"redflowerdreams.luckyyou168.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82449b49-b108-5459-a616-f3ba631c5ee4","type":"url","category":"Network activity","to_ids":true,"value":"https://redflowerdreams.luckyyou168.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c3024a7-4aa5-5f8f-85de-9f8fe8251648","type":"url","category":"Network activity","to_ids":true,"value":"https://yellowfishjumpz.ribbonn.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3cf31c71-51da-52be-8ba5-2f2b4a65db19","type":"domain","category":"Network activity","to_ids":true,"value":"yellowfishjumpz.ribbonn.com","comment":"https://x.com/masaomi346/status/1958146622799634757","timestamp":"1755693510","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c4e356a-c396-581e-b4aa-03fa08c8a192","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.93.89.62","comment":"https://x.com/skocherhan/status/1958158589056495832","timestamp":"1755696363","distribution":"5"},{"uuid":"2bf85bb8-7fda-5e3d-9e56-80b8b49a644c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.93.89.62/otherassets/ledger.zip","comment":"https://x.com/skocherhan/status/1958158589056495832","timestamp":"1755696363","distribution":"5"},{"uuid":"ddf32b52-e31c-563e-84b4-3540529da000","type":"domain","category":"Network activity","to_ids":true,"value":"static.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"702e8fd8-f98f-5fd6-b0de-c241c2cfa0fb","type":"domain","category":"Network activity","to_ids":true,"value":"base.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"a1799311-f9f1-598b-a076-a05b5bf0259f","type":"url","category":"Network activity","to_ids":true,"value":"http://static.43.177.216.95.clients.your-server.de","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"09365582-0868-5054-bc06-62990f50e3b8","type":"domain","category":"Network activity","to_ids":true,"value":"demo.shop.plex.name","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"c064e561-7dae-5608-85ce-5c2b5743bf2a","type":"url","category":"Network activity","to_ids":true,"value":"http://demo.shop.plex.name","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"92548eba-6820-57c5-8503-750d8a6cad44","type":"domain","category":"Network activity","to_ids":true,"value":"img.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"e0ea1c4e-c455-5e8a-a16f-05074c297b15","type":"url","category":"Network activity","to_ids":true,"value":"http://img.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"b6d407d2-f73a-58e1-bb15-0f2e5f617ac2","type":"domain","category":"Network activity","to_ids":true,"value":"dd.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"35587593-576d-5cc7-b361-c70cc5abbd5b","type":"url","category":"Network activity","to_ids":true,"value":"http://dd.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"4a53bb9e-2675-5f3a-a713-ee73a2b8bc1c","type":"url","category":"Network activity","to_ids":true,"value":"http://blq.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"b64a1a95-2a85-50f4-8088-e3a6050478d2","type":"url","category":"Network activity","to_ids":true,"value":"http://base.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"2a80109e-6a0f-56a5-9117-c10b07209c65","type":"url","category":"Network activity","to_ids":true,"value":"http://static.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"59d20724-8bb3-531c-b3ad-424d56823f96","type":"domain","category":"Network activity","to_ids":true,"value":"fog.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"0d5e2ca4-4dca-5384-878f-7fb1581ec196","type":"url","category":"Network activity","to_ids":true,"value":"http://fog.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"d988c3ab-35fb-58ff-9cda-ae1174f81cf2","type":"domain","category":"Network activity","to_ids":true,"value":"data.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"a9fb3b6b-97ce-5446-9b01-b5cc555fc663","type":"url","category":"Network activity","to_ids":true,"value":"http://data.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"afd491b7-084b-50fe-8678-8a1ee92c7d4c","type":"domain","category":"Network activity","to_ids":true,"value":"blq.death-angel.shop","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"e026e306-c391-579d-933c-3060cf564c2c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.177.216.95","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"b65d8f33-0bd8-530a-b14a-7226f3e7373a","type":"domain","category":"Network activity","to_ids":true,"value":"static.43.177.216.95.clients.your-server.de","comment":"https://x.com/skocherhan/status/1958164888901022010","timestamp":"1755697865","distribution":"5"},{"uuid":"cab439aa-18ff-59bf-9bd4-561b75218ff4","type":"domain","category":"Network activity","to_ids":true,"value":"inusualinteriorismo.com","comment":"https://x.com/urldna_bot/status/1958167169591652738","timestamp":"1755698408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f5cdd69c-233d-5906-9141-68f00dc61398","type":"md5","category":"Payload delivery","to_ids":true,"value":"fe8ed05153643d81e452383bf8118ca5","comment":"https://x.com/urldna_bot/status/1958167169591652738","timestamp":"1755698408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"70a44d0f-942e-5bc3-a174-e14f353a7097","type":"url","category":"Network activity","to_ids":true,"value":"http://inusualinteriorismo.com/my/new1/fe8ed05153643d81e452383bf8118ca5/index.php","comment":"https://x.com/urldna_bot/status/1958167169591652738","timestamp":"1755698408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5c5bf533-96f4-56c8-9b1f-5704ae663739","type":"md5","category":"Payload delivery","to_ids":true,"value":"c77d0d50d3538536747ec8c8477e8230","comment":"https://x.com/1ZRR4H/status/1958172951729013064","timestamp":"1755699787","distribution":"5"},{"uuid":"f8d273a3-ae00-5d4d-801e-82edac072d4a","type":"domain","category":"Network activity","to_ids":true,"value":"freemailonlineservice.weebly.com","comment":"https://x.com/urldna_bot/status/1958197358325313656","timestamp":"1755705606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"26209eeb-8fb5-58e1-a97c-58c2283e3d5d","type":"url","category":"Network activity","to_ids":true,"value":"https://freemailonlineservice.weebly.com","comment":"https://x.com/urldna_bot/status/1958197358325313656","timestamp":"1755705606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5227373b-e999-5ded-8713-b5dfd3a09ec7","type":"domain","category":"Network activity","to_ids":true,"value":"sat-gob-mx.info","comment":"https://x.com/1ZRR4H/status/1958205635809403359","timestamp":"1755707579","distribution":"5"},{"uuid":"402ecaf2-59a6-5187-af3f-ac523816c5e4","type":"url","category":"Network activity","to_ids":true,"value":"http://sat-gob-mx.info","comment":"https://x.com/1ZRR4H/status/1958205635809403359","timestamp":"1755707579","distribution":"5"},{"uuid":"da317fc4-3f28-5411-8996-3fcbcb1b6e81","type":"domain","category":"Network activity","to_ids":true,"value":"replit.dev","comment":"https://x.com/1ZRR4H/status/1958205635809403359","timestamp":"1755707579","distribution":"5"},{"uuid":"efc45078-4319-55f2-a3a5-c680fd7cd679","type":"url","category":"Network activity","to_ids":true,"value":"http://replit.dev","comment":"https://x.com/1ZRR4H/status/1958205635809403359","timestamp":"1755707579","distribution":"5"},{"uuid":"fce31889-c69c-5dc3-a77f-650fddd6d1c0","type":"url","category":"Network activity","to_ids":true,"value":"https://aflp-gob-ar.com","comment":"https://x.com/1ZRR4H/status/1958221187349385543","timestamp":"1755711287","distribution":"5"},{"uuid":"ae0e5408-7744-57c6-b921-abe553c9ed4c","type":"domain","category":"Network activity","to_ids":true,"value":"aflp-gob-ar.com","comment":"https://x.com/1ZRR4H/status/1958221187349385543","timestamp":"1755711287","distribution":"5"},{"uuid":"1bc101fc-8461-5f7b-83dd-19c58fb1b5fb","type":"url","category":"Network activity","to_ids":true,"value":"https://aflp-gob-ar.com/landing/fetch_satt.php","comment":"https://x.com/1ZRR4H/status/1958221187349385543","timestamp":"1755711287","distribution":"5"},{"uuid":"6e8eaa53-1c8e-5446-bd73-7c93786c9f11","type":"domain","category":"Network activity","to_ids":true,"value":"pdyvjhytbv.pages.dev","comment":"https://x.com/urldna_bot/status/1958227575924240745","timestamp":"1755712810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"967483ee-3514-5571-9369-681bdc93d3de","type":"url","category":"Network activity","to_ids":true,"value":"https://pdyvjhytbv.pages.dev/?e=3mail@b.c","comment":"https://x.com/urldna_bot/status/1958227575924240745","timestamp":"1755712810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a5129ad5-20cc-5a36-8475-bf5588727d00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.183.183.144","comment":"https://x.com/drb_ra/status/1958230346694365236","timestamp":"1755713471","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"334d9188-00b2-5098-af7f-5fb3a3f164d9","type":"url","category":"Network activity","to_ids":true,"value":"http://94.183.183.144:53","comment":"https://x.com/drb_ra/status/1958230346694365236","timestamp":"1755713471","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7b0c996f-e539-54b9-a276-fcbfa68026a7","type":"url","category":"Network activity","to_ids":true,"value":"https://csdnsnew2.awscloudfont.com/pixel.gif","comment":"https://x.com/drb_ra/status/1958230346694365236","timestamp":"1755713471","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bc3b5e7-fd5a-5ffb-bc65-b38b464a23e1","type":"domain","category":"Network activity","to_ids":true,"value":"csdnsnew2.awscloudfont.com","comment":"https://x.com/drb_ra/status/1958230346694365236","timestamp":"1755713471","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6cbb3f47-90a3-55cb-a3ae-1b1e547bde73","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.sdkhsdfsdl54dsd.cfd","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"068087dd-5091-5b2b-bcef-b79e587d2435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.88.63","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e067bcd-d976-50cb-8f11-dccf2e82df2b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.88.63:53","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a6628876-7349-51ba-a249-d1f38738a1ab","type":"url","category":"Network activity","to_ids":true,"value":"https://ns1.sdkhsdfsdl54dsd.cfd/cx","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6b087532-a2e3-5f3b-ab2e-d69cd85f1d66","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.sdkhsdfsdl54dsd.cfd","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e598bff-d2a9-5170-beb0-554e25f60651","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.sdkhsdfsdl54dsd.cfd/en_US/all.js","comment":"https://x.com/drb_ra/status/1958230486070730887","timestamp":"1755713504","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2e9449a8-593f-5fc8-88ad-49609aba9b1a","type":"url","category":"Network activity","to_ids":true,"value":"http://45.61.139.108","comment":"https://x.com/Merlax_/status/1958236477831156172","timestamp":"1755714933","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6a42f16a-2110-5301-a503-f9300486c1f9","type":"url","category":"Network activity","to_ids":true,"value":"http://212.224.88.213","comment":"https://x.com/Merlax_/status/1958236477831156172","timestamp":"1755714933","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1bb63c65-140f-50ba-8ffc-91b5f5fa6bca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.61.139.108","comment":"https://x.com/Merlax_/status/1958236477831156172","timestamp":"1755714933","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c2eff82a-2638-5723-88cb-b065e6404441","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.224.88.213","comment":"https://x.com/Merlax_/status/1958236477831156172","timestamp":"1755714933","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9aa74fd0-de9b-5246-af5f-2c8794ce4989","type":"url","category":"Network activity","to_ids":true,"value":"http://3.106.249.233:443","comment":"https://x.com/drb_ra/status/1958239242179547443","timestamp":"1755715592","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"50b62fd0-c4cb-5854-8384-dd314b8ce28e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.147.171.199","comment":"https://x.com/drb_ra/status/1958239380243370423","timestamp":"1755715625","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f33db619-d8fb-59aa-8304-8a167f410726","type":"url","category":"Network activity","to_ids":true,"value":"http://141.147.171.199:2096","comment":"https://x.com/drb_ra/status/1958239380243370423","timestamp":"1755715625","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"506f889f-07d2-5cb1-a295-7484bd674d02","type":"url","category":"Network activity","to_ids":true,"value":"http://115.144.211.186:7443","comment":"https://x.com/drb_ra/status/1958239520778047992","timestamp":"1755715658","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"3d08b0fb-da21-52bb-bb31-a546af44a5d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.144.211.186","comment":"https://x.com/drb_ra/status/1958239520778047992","timestamp":"1755715658","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"fc0ff250-40cb-5bf0-a0a8-051122f86c97","type":"url","category":"Network activity","to_ids":true,"value":"http://18.253.70.97:7443","comment":"https://x.com/drb_ra/status/1958239658782928913","timestamp":"1755715691","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a4832f5b-30a7-5c03-a012-a1e89dd6d728","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.253.70.97","comment":"https://x.com/drb_ra/status/1958239658782928913","timestamp":"1755715691","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"84f72209-372c-54b3-b8b7-2da20023517d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.76.254.251:7443","comment":"https://x.com/drb_ra/status/1958239796339314919","timestamp":"1755715724","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cc31c5df-01e3-50d0-a4d1-b8118c99d387","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.254.251","comment":"https://x.com/drb_ra/status/1958239796339314919","timestamp":"1755715724","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"deb3b39e-c61d-51f7-a287-e548c590976e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.182.173.57:80","comment":"https://x.com/drb_ra/status/1958239935468872042","timestamp":"1755715757","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"d020411f-1fcb-5b41-898b-281910cac72e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.182.173.57","comment":"https://x.com/drb_ra/status/1958239935468872042","timestamp":"1755715757","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"8777e342-b8af-5c04-a268-7e14334348f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.129","comment":"https://x.com/drb_ra/status/1958240072681017445","timestamp":"1755715790","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bd45ebf2-7047-5312-adc2-d2a195aa54a7","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.129:31337","comment":"https://x.com/drb_ra/status/1958240072681017445","timestamp":"1755715790","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c139c3cb-c208-50e2-aecf-a6b816bf09b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.57.161.54","comment":"https://x.com/drb_ra/status/1958240210887614707","timestamp":"1755715823","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f1da9e59-26a7-5c36-ae88-6fa998eb567c","type":"url","category":"Network activity","to_ids":true,"value":"http://69.57.161.54:443","comment":"https://x.com/drb_ra/status/1958240210887614707","timestamp":"1755715823","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"af4c74fc-b057-52a2-b2f1-83b57fa76534","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.239.118.157","comment":"https://x.com/drb_ra/status/1958240856458101208","timestamp":"1755715977","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"cf53b684-ed61-54b0-8f00-b360a93d3945","type":"url","category":"Network activity","to_ids":true,"value":"http://91.239.118.157:8081","comment":"https://x.com/drb_ra/status/1958240856458101208","timestamp":"1755715977","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"cb9e345b-69a3-5904-a8e6-e8f891793c9d","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.232.71:4477","comment":"https://x.com/drb_ra/status/1958240995855720583","timestamp":"1755716010","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"706865c9-4da7-5624-98fc-76bb37b2eb29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.232.71","comment":"https://x.com/drb_ra/status/1958240995855720583","timestamp":"1755716010","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f3529c60-5b52-5a8b-a39e-b708fe3bbf06","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.82:8000","comment":"https://x.com/drb_ra/status/1958241135245000750","timestamp":"1755716043","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1be7774c-049a-51a7-834b-6a2ae7cb1164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.82","comment":"https://x.com/drb_ra/status/1958241135245000750","timestamp":"1755716043","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3ceb0deb-7270-5a93-a415-3af9bbc583db","type":"url","category":"Network activity","to_ids":true,"value":"http://91.92.109.169:3306","comment":"https://x.com/drb_ra/status/1958241273506062746","timestamp":"1755716076","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"92e4111f-a5c9-56d2-8073-7d8d9c4b66c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.92.109.169","comment":"https://x.com/drb_ra/status/1958241273506062746","timestamp":"1755716076","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"42b61c93-c3b1-533d-9ef9-7409b42d0c27","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.10.160.141","comment":"https://x.com/drb_ra/status/1958241412077559891","timestamp":"1755716109","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8cf85c7a-5e82-5e62-beee-74c594864c01","type":"url","category":"Network activity","to_ids":true,"value":"http://204.10.160.141:443","comment":"https://x.com/drb_ra/status/1958241412077559891","timestamp":"1755716109","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ac3dc0ed-6dcc-56da-b1af-d5aa08c0e6c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.131.205","comment":"https://x.com/drb_ra/status/1958241550288216506","timestamp":"1755716142","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"52adf54d-8817-5e75-bf7a-716529c1a375","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.131.205:1000","comment":"https://x.com/drb_ra/status/1958241550288216506","timestamp":"1755716142","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"2cde1f67-048b-5f5b-9636-6c5086456db6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.144.175","comment":"https://x.com/drb_ra/status/1958241690176868704","timestamp":"1755716175","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"b03cfd06-0050-51dc-86c6-e01387eaf749","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.144.175:3232","comment":"https://x.com/drb_ra/status/1958241690176868704","timestamp":"1755716175","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"a429dbb6-890b-568f-a19c-405dfeebf0ca","type":"url","category":"Network activity","to_ids":true,"value":"http://3.12.151.112:2405","comment":"https://x.com/drb_ra/status/1958241829478093222","timestamp":"1755716209","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"288dddfc-4b15-5714-8c91-79df0049e4a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.79.78.100","comment":"https://x.com/drb_ra/status/1958241967751778322","timestamp":"1755716242","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1dd64340-48a5-56fe-b3a8-384f48186f54","type":"url","category":"Network activity","to_ids":true,"value":"http://99.79.78.100:6513","comment":"https://x.com/drb_ra/status/1958241967751778322","timestamp":"1755716242","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e1150511-cd72-5bfc-9559-0ca9f3c8c785","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.140.165:2000","comment":"https://x.com/drb_ra/status/1958242106910351861","timestamp":"1755716275","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0619f51f-095e-5b04-a601-3529be234b43","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.140.165:5900","comment":"https://x.com/drb_ra/status/1958242245494387032","timestamp":"1755716308","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"36dff369-d02c-54e7-ac6c-8b97450ea6c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.140.165","comment":"https://x.com/drb_ra/status/1958242245494387032","timestamp":"1755716308","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dbb7f112-8541-58ad-85c5-df0903f3d571","type":"url","category":"Network activity","to_ids":true,"value":"http://44.252.84.108:2095","comment":"https://x.com/drb_ra/status/1958242385671962644","timestamp":"1755716341","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dad91c17-9b9a-5c1c-a63b-03e823fef8d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.252.84.108","comment":"https://x.com/drb_ra/status/1958242524646293907","timestamp":"1755716374","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"0d7ec225-e0ec-5c09-9df0-e31c0b255be5","type":"url","category":"Network activity","to_ids":true,"value":"http://44.252.84.108:18245","comment":"https://x.com/drb_ra/status/1958242524646293907","timestamp":"1755716374","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9e1b0b81-b6af-57cf-beea-b71796dfac02","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.63.216:5020","comment":"https://x.com/drb_ra/status/1958242663796265089","timestamp":"1755716408","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"23844a75-8762-5cd1-9adb-c3a9f58eb1f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.63.216","comment":"https://x.com/drb_ra/status/1958242663796265089","timestamp":"1755716408","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"52c5f5b3-6ad5-5ff9-8781-660f711b9757","type":"url","category":"Network activity","to_ids":true,"value":"http://116.108.103.88:8808","comment":"https://x.com/drb_ra/status/1958242802917065169","timestamp":"1755716441","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ea484674-34b0-5de6-a9c9-259bafa05e4a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.108.103.88","comment":"https://x.com/drb_ra/status/1958242802917065169","timestamp":"1755716441","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"0cfbc4cb-9e4b-56f8-9b7c-6382645c7bff","type":"url","category":"Network activity","to_ids":true,"value":"http://18.209.114.17:80","comment":"https://x.com/drb_ra/status/1958242941660483767","timestamp":"1755716474","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5334cf5a-03bf-58d7-a582-8754294ef8c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.209.114.17","comment":"https://x.com/drb_ra/status/1958242941660483767","timestamp":"1755716474","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"54160272-c1f7-5bf7-93d0-3ba4d2add878","type":"url","category":"Network activity","to_ids":true,"value":"http://34.250.252.207:80","comment":"https://x.com/drb_ra/status/1958243080173207782","timestamp":"1755716507","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"22040276-c430-5788-a294-7e945ab70052","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.250.252.207","comment":"https://x.com/drb_ra/status/1958243080173207782","timestamp":"1755716507","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0d3ae3ec-ed0c-5ede-ae09-bdb194480fa9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.215.64","comment":"https://x.com/drb_ra/status/1958243218178597129","timestamp":"1755716540","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e7e6e7f3-f7f8-5536-b57d-e1b4203eb7f0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.215.64:80","comment":"https://x.com/drb_ra/status/1958243218178597129","timestamp":"1755716540","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"343fc68b-ea36-5f2d-8d7f-8be7360baa8b","type":"url","category":"Network activity","to_ids":true,"value":"http://158.69.216.58:587","comment":"https://x.com/drb_ra/status/1958243355701203405","timestamp":"1755716573","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"86540792-8c2a-55ef-a3ac-346c9595b3ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.69.216.58","comment":"https://x.com/drb_ra/status/1958243355701203405","timestamp":"1755716573","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c10cece1-6c9d-5d2d-9531-4f4d25482546","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.96.234:80","comment":"https://x.com/drb_ra/status/1958243493848997929","timestamp":"1755716605","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"10938380-08a2-59ef-ba82-f71755f3b004","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.96.234","comment":"https://x.com/drb_ra/status/1958243493848997929","timestamp":"1755716605","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"34d4e2cd-2774-56f7-a161-4ee15c11ac74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.189.149","comment":"https://x.com/drb_ra/status/1958243631753535586","timestamp":"1755716638","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9e3667b0-af51-5435-b5e3-650ce775d711","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.189.149:80","comment":"https://x.com/drb_ra/status/1958243631753535586","timestamp":"1755716638","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e7db61a8-72b5-5646-8b09-615436ca4453","type":"url","category":"Network activity","to_ids":true,"value":"http://18.198.66.243:443","comment":"https://x.com/drb_ra/status/1958243771033997421","timestamp":"1755716672","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"46fe95ef-51a2-5384-9eb3-228e6f8a6144","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.198.66.243","comment":"https://x.com/drb_ra/status/1958243771033997421","timestamp":"1755716672","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"92fa0e2c-1f85-5aa3-8a1c-8539ff152b50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.106.145","comment":"https://x.com/drb_ra/status/1958243909189963986","timestamp":"1755716705","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"55f7423f-7394-538e-af18-7e0ad69c3bcf","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.106.145:80","comment":"https://x.com/drb_ra/status/1958243909189963986","timestamp":"1755716705","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c2aa0906-25d6-5e28-9dac-fa219db376a6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.240.80.74:80","comment":"https://x.com/drb_ra/status/1958244048327913733","timestamp":"1755716738","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"86ed4b8c-6277-5b21-a6f1-ad499f160a09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.240.80.74","comment":"https://x.com/drb_ra/status/1958244048327913733","timestamp":"1755716738","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"16737794-a464-5693-891e-e6bfd01ae853","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.174.111:443","comment":"https://x.com/drb_ra/status/1958244185380925541","timestamp":"1755716770","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"58e385e0-2c36-53cd-bcc8-b503a9cb2134","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.174.111","comment":"https://x.com/drb_ra/status/1958244185380925541","timestamp":"1755716770","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4d7047e8-6708-569d-8469-420149b492bf","type":"url","category":"Network activity","to_ids":true,"value":"http://52.15.182.185:443","comment":"https://x.com/drb_ra/status/1958244324484772167","timestamp":"1755716804","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3b03a204-a791-528e-8771-a5239ec85c43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.15.182.185","comment":"https://x.com/drb_ra/status/1958244324484772167","timestamp":"1755716804","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cf532c6c-c2fb-5fd0-8227-da80ccee1f19","type":"url","category":"Network activity","to_ids":true,"value":"http://54.155.116.227:80","comment":"https://x.com/drb_ra/status/1958244463299657800","timestamp":"1755716837","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5773e7f8-c7cf-5832-aa93-118b0cbdbb66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.155.116.227","comment":"https://x.com/drb_ra/status/1958244463299657800","timestamp":"1755716837","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"41865e17-7e75-525c-8a39-9acd9211f13b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.154.187","comment":"https://x.com/drb_ra/status/1958244601669853540","timestamp":"1755716870","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"be39dd90-9f25-5766-a3d5-ebf3b79d057a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.154.187:80","comment":"https://x.com/drb_ra/status/1958244601669853540","timestamp":"1755716870","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"077ae98b-be64-5192-88c1-396f9026db48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.12.25.254","comment":"https://x.com/drb_ra/status/1958244739251155058","timestamp":"1755716902","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"cfd37094-c0ca-54e0-96b5-e3edbc959fc9","type":"url","category":"Network activity","to_ids":true,"value":"http://38.12.25.254:8888","comment":"https://x.com/drb_ra/status/1958244739251155058","timestamp":"1755716902","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7c25efb0-7bac-5834-88a0-3a19d34cb00d","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.25.105:8000","comment":"https://x.com/drb_ra/status/1958244877311107412","timestamp":"1755716935","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"246efe65-f55f-5393-b93e-24acf6a035f6","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.84.27:443","comment":"https://x.com/drb_ra/status/1958245015362355205","timestamp":"1755716968","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c248ecd4-a509-55df-b1cb-df09e295384f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.84.27","comment":"https://x.com/drb_ra/status/1958245015362355205","timestamp":"1755716968","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cc859c2a-bfbf-5891-818f-0e079e6b4100","type":"domain","category":"Network activity","to_ids":true,"value":"jul5050quasaa-f.duckdns.org","comment":"https://x.com/FalconFeedsio/status/1958250774796083311","timestamp":"1755718341","distribution":"5"},{"uuid":"af9acbc2-97eb-506c-abdd-50240d162af2","type":"url","category":"Network activity","to_ids":true,"value":"http://jul5050quasaa-f.duckdns.org","comment":"https://x.com/FalconFeedsio/status/1958250774796083311","timestamp":"1755718341","distribution":"5"},{"uuid":"31b9f85d-d64a-5283-a0f8-f7b7e58dee59","type":"domain","category":"Network activity","to_ids":true,"value":"reply-suits.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1958250774796083311","timestamp":"1755718341","distribution":"5"},{"uuid":"cf0aea10-4a28-5427-a936-67436bd46d37","type":"url","category":"Network activity","to_ids":true,"value":"http://reply-suits.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1958250774796083311","timestamp":"1755718341","distribution":"5"},{"uuid":"0934b40f-5ea5-5865-8c40-e003b4198553","type":"url","category":"Network activity","to_ids":true,"value":"https://susrectification.weebly.com","comment":"https://x.com/urldna_bot/status/1958257760287469699","timestamp":"1755720007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"77c0473a-7e3e-5675-9399-88ef2f173000","type":"domain","category":"Network activity","to_ids":true,"value":"susrectification.weebly.com","comment":"https://x.com/urldna_bot/status/1958257760287469699","timestamp":"1755720007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"babf5002-29e2-54e0-a6d0-35aa8e1c22ca","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.189","comment":"https://x.com/FalconFeedsio/status/1958267004210806786","timestamp":"1755722211","distribution":"5"},{"uuid":"5594debd-10f6-5721-98b1-8fb6db42eec2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.189","comment":"https://x.com/FalconFeedsio/status/1958267004210806786","timestamp":"1755722211","distribution":"5"},{"uuid":"72843ed7-1bad-5ef5-9039-2b59137e5acd","type":"url","category":"Network activity","to_ids":true,"value":"http://5.249.165.61","comment":"https://x.com/threatquery/status/1958272849610690765","timestamp":"1755723604","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"},{"name":"malware"}]},{"uuid":"99be111e-769e-5cac-bcd1-87ccaa3aee3a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.39.45.93","comment":"https://x.com/threatquery/status/1958272847937155361","timestamp":"1755723604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"3c6c7578-c802-5be3-aa11-caa5fc0a478f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.39.45.93","comment":"https://x.com/threatquery/status/1958272847937155361","timestamp":"1755723604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"d0aecb82-4269-5cf6-ac6e-9ec273b2284f","type":"url","category":"Network activity","to_ids":true,"value":"http://193.187.91.237","comment":"https://x.com/threatquery/status/1958272845810729231","timestamp":"1755723604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"84612e02-c828-524e-89cf-083c82972742","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.91.237","comment":"https://x.com/threatquery/status/1958272845810729231","timestamp":"1755723604","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"e4db9bb3-7625-5e0e-8b93-372eb0c27fdd","type":"domain","category":"Network activity","to_ids":true,"value":"center-kate.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1958272922243514793","timestamp":"1755723622","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"cf15c8bd-3682-53c1-aae9-dde54b0b0a14","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:42419","comment":"https://x.com/SarlackLab/status/1958272922243514793","timestamp":"1755723622","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1958272922243514793","timestamp":"1755723622","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"03ae579c-252c-5329-8d4f-24dc12fdc876","type":"url","category":"Network activity","to_ids":true,"value":"http://center-kate.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1958272922243514793","timestamp":"1755723622","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"c6b116ca-ba97-5b7e-a154-acc70f45cce9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.53","comment":"https://x.com/drb_ra/status/1958274577525506439","timestamp":"1755724016","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"64f0df8c-6b95-5658-9040-556e21b11beb","type":"domain","category":"Network activity","to_ids":true,"value":"c.testcs888.com","comment":"https://x.com/drb_ra/status/1958274577525506439","timestamp":"1755724016","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"34903cfc-5627-5b78-9357-9ae746470cd7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:8080","comment":"https://x.com/drb_ra/status/1958274577525506439","timestamp":"1755724016","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1780d2e9-f44c-5ed8-9561-3a97322bf25e","type":"url","category":"Network activity","to_ids":true,"value":"https://c.testcs888.com/activity","comment":"https://x.com/drb_ra/status/1958274577525506439","timestamp":"1755724016","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91757760-7cce-5511-b62c-a6f088863d0b","type":"url","category":"Network activity","to_ids":true,"value":"https://115.120.225.134/dot.gif","comment":"https://x.com/drb_ra/status/1958274716738650473","timestamp":"1755724050","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5c94afc6-dc08-51c6-9907-f5ebbb18be85","type":"url","category":"Network activity","to_ids":true,"value":"http://115.120.225.134:89","comment":"https://x.com/drb_ra/status/1958274716738650473","timestamp":"1755724050","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"24dc5beb-9b43-5c5e-847a-d74c2a2a4f31","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.120.225.134","comment":"https://x.com/drb_ra/status/1958274716738650473","timestamp":"1755724050","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d860b0a6-9465-5f0b-901b-3215e532c764","type":"url","category":"Network activity","to_ids":true,"value":"http://195.160.221.203","comment":"https://x.com/Merlax_/status/1958276739760873976","timestamp":"1755724532","distribution":"5"},{"uuid":"17e14556-6fa6-5886-b82f-af256fa891a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.160.221.203","comment":"https://x.com/Merlax_/status/1958276739760873976","timestamp":"1755724532","distribution":"5"},{"uuid":"83071e58-0978-50ed-b83b-69bb6ae00049","type":"domain","category":"Network activity","to_ids":true,"value":"dfgrykuu.weebly.com","comment":"https://x.com/urldna_bot/status/1958287962581463514","timestamp":"1755727208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7508f43a-b61f-53b3-9512-b837a6c15e2b","type":"url","category":"Network activity","to_ids":true,"value":"https://dfgrykuu.weebly.com","comment":"https://x.com/urldna_bot/status/1958287962581463514","timestamp":"1755727208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"392b02d4-1f48-5b4e-bec3-19c39645fce1","type":"url","category":"Network activity","to_ids":true,"value":"https://154.3.32.143/visit.js","comment":"https://x.com/drb_ra/status/1958303260609057006","timestamp":"1755730855","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bbd7a8fd-0fca-51b8-846e-2790983aa179","type":"url","category":"Network activity","to_ids":true,"value":"http://154.3.32.143:8080","comment":"https://x.com/drb_ra/status/1958303260609057006","timestamp":"1755730855","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cf80f2f7-f8d0-5fef-a1d6-c30f60f2d163","type":"url","category":"Network activity","to_ids":true,"value":"http://16.162.119.8:8888","comment":"https://x.com/drb_ra/status/1958303400325517729","timestamp":"1755730888","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e72ab85a-e00f-5d96-bde2-a4aa612dc020","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.162.119.8","comment":"https://x.com/drb_ra/status/1958303400325517729","timestamp":"1755730888","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"783ee554-874f-5849-806f-0aef4b1bd8de","type":"url","category":"Network activity","to_ids":true,"value":"http://43.136.23.88:9999","comment":"https://x.com/drb_ra/status/1958303540318777498","timestamp":"1755730922","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"21b12da7-552b-536e-85a1-8158f83d2a24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.136.23.88","comment":"https://x.com/drb_ra/status/1958303540318777498","timestamp":"1755730922","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6c2d8f9b-fbf1-564f-939b-9886135cef7f","type":"url","category":"Network activity","to_ids":true,"value":"http://188.239.19.190:801","comment":"https://x.com/drb_ra/status/1958303680047812644","timestamp":"1755730955","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb59a9eb-01fd-572f-a83b-a4f2b237bdf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.239.19.190","comment":"https://x.com/drb_ra/status/1958303680047812644","timestamp":"1755730955","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"18d2f070-5014-53e5-a84a-1edf525fb8a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.31.9.211","comment":"https://x.com/drb_ra/status/1958303680047812644","timestamp":"1755730955","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"545d1c29-8d96-5607-9741-fe6d7682617c","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.109:6080","comment":"https://x.com/drb_ra/status/1958303820066222411","timestamp":"1755730988","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4e1972e9-d30f-53d0-83b5-b41c896e18e1","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.229.117:8443","comment":"https://x.com/drb_ra/status/1958303960374075518","timestamp":"1755731022","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"59fb2258-df8e-52ea-8eb1-dc7af996ad99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.229.117","comment":"https://x.com/drb_ra/status/1958303960374075518","timestamp":"1755731022","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7da7fefc-297a-538c-8f93-d455d39435bf","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.109:8086","comment":"https://x.com/drb_ra/status/1958304099490840938","timestamp":"1755731055","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b7f0436-bfb4-5744-a434-30626625329c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.109","comment":"https://x.com/drb_ra/status/1958304099490840938","timestamp":"1755731055","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"12db0da9-f218-59f8-8846-5772593c1b1d","type":"domain","category":"Network activity","to_ids":true,"value":"gmxtomb.weebly.com","comment":"https://x.com/urldna_bot/status/1958318164502097967","timestamp":"1755734408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bc5636dd-7978-5df1-999c-b356e40bc1f2","type":"url","category":"Network activity","to_ids":true,"value":"https://gmxtomb.weebly.com","comment":"https://x.com/urldna_bot/status/1958318164502097967","timestamp":"1755734408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d860b0a6-9465-5f0b-901b-3215e532c764","type":"url","category":"Network activity","to_ids":true,"value":"http://195.160.221.203","comment":"https://x.com/skocherhan/status/1958321416224293267","timestamp":"1755735184","distribution":"5"},{"uuid":"17e14556-6fa6-5886-b82f-af256fa891a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.160.221.203","comment":"https://x.com/skocherhan/status/1958321416224293267","timestamp":"1755735184","distribution":"5"},{"uuid":"8e949189-1f9c-5e7e-b57f-134be15adcd9","type":"md5","category":"Payload delivery","to_ids":true,"value":"25989c20a2348c749b1c581f853a8208","comment":"https://x.com/skocherhan/status/1958321746576032103","timestamp":"1755735262","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"4b4f3b6f-7c14-5852-84a1-30c045da4bd0","type":"md5","category":"Payload delivery","to_ids":true,"value":"9c47edb66fb49647af31d8d18178320e","comment":"https://x.com/skocherhan/status/1958321746576032103","timestamp":"1755735262","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"1dfa22de-3e1a-5618-a847-06d4d75dcdb5","type":"md5","category":"Payload delivery","to_ids":true,"value":"73a413578667a059840b7536440d2cc8","comment":"https://x.com/skocherhan/status/1958321746576032103","timestamp":"1755735262","distribution":"5","Tag":[{"name":"APT"},{"name":"malware"}]},{"uuid":"d52cf70e-fb61-56cd-8481-79ab55359282","type":"md5","category":"Payload delivery","to_ids":true,"value":"1ded71930d997de43a68e098d232e2e5","comment":"https://x.com/skocherhan/status/1958321848736784762","timestamp":"1755735287","distribution":"5"},{"uuid":"f7107c7c-7976-5718-9201-3528896c3c09","type":"sha256","category":"Payload delivery","to_ids":true,"value":"10b54abba525686869c9da223250f70270a742b1a056424c943cfc438c40cc50","comment":"https://x.com/skocherhan/status/1958321848736784762","timestamp":"1755735287","distribution":"5"},{"uuid":"84612e02-c828-524e-89cf-083c82972742","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.91.237","comment":"https://x.com/skocherhan/status/1958321915426181524","timestamp":"1755735303","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"d0aecb82-4269-5cf6-ac6e-9ec273b2284f","type":"url","category":"Network activity","to_ids":true,"value":"http://193.187.91.237","comment":"https://x.com/skocherhan/status/1958321915426181524","timestamp":"1755735303","distribution":"5","Tag":[{"name":"C2"},{"name":"Xworm"},{"name":"malware"}]},{"uuid":"0a69cb1f-0ab9-534c-be95-5f02d51d70fa","type":"url","category":"Network activity","to_ids":true,"value":"https://italia-committees-practical-violence.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"d41c3106-7964-5c6b-add3-422fd30ae967","type":"url","category":"Network activity","to_ids":true,"value":"https://lol-julian-impossible-bermuda.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"20d2d217-58f7-5a92-b201-4a39801a8312","type":"domain","category":"Network activity","to_ids":true,"value":"italia-committees-practical-violence.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"849143b8-6dd1-53cd-8995-45e8e2edbfca","type":"url","category":"Network activity","to_ids":true,"value":"http://episode-windsor-subdivision-delivery.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"e4ec8c06-88b1-50d2-95f8-b77d6a62471f","type":"domain","category":"Network activity","to_ids":true,"value":"lol-julian-impossible-bermuda.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"f6fb743a-46ec-5374-81b4-f028fb34fccf","type":"domain","category":"Network activity","to_ids":true,"value":"episode-windsor-subdivision-delivery.trycloudflare.com","comment":"https://x.com/skocherhan/status/1958321978084852039","timestamp":"1755735318","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"98ca1fdb-0a4e-5d70-8a2b-6c910aae245f","type":"url","category":"Network activity","to_ids":true,"value":"https://www-n-h-k-p-u-l-s-japansevip.ksadkfkfkdsd.website/Upgrade/puls","comment":"https://x.com/Metemcyber/status/1958335252050702558","timestamp":"1755738482","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15ffaae7-07b7-5738-aa5e-40b2107ae720","type":"domain","category":"Network activity","to_ids":true,"value":"www-n-h-k-p-u-l-s-japansevip.ksadkfkfkdsd.website","comment":"https://x.com/Metemcyber/status/1958335252050702558","timestamp":"1755738482","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9d17787-c4f3-57bd-99a0-3135fe2e995a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.29.115","comment":"https://x.com/Metemcyber/status/1958335252050702558","timestamp":"1755738482","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"042bdd45-1e7c-5e9b-a186-7ea59d4cf373","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.171.121","comment":"https://x.com/Metemcyber/status/1958335252050702558","timestamp":"1755738482","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1dfa152a-ede1-5a55-b472-becbe129531d","type":"domain","category":"Network activity","to_ids":true,"value":"mastercard-waster.manmbbb.cn","comment":"https://x.com/Metemcyber/status/1958338585922552077","timestamp":"1755739277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0cbb411f-275e-5d92-a128-78e8719a504d","type":"url","category":"Network activity","to_ids":true,"value":"https://mastercard-waster.manmbbb.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1958338585922552077","timestamp":"1755739277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"432b0882-9707-5892-b8c0-3b4dcb754ef1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.23.241","comment":"https://x.com/Metemcyber/status/1958338585922552077","timestamp":"1755739277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ccee8afe-8601-5304-bad5-33e14eca8ab1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.214.45","comment":"https://x.com/Metemcyber/status/1958338585922552077","timestamp":"1755739277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6094b7bf-e00d-56be-acef-63c69db65f6d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.156.158","comment":"https://x.com/Metemcyber/status/1958341822952132786","timestamp":"1755740049","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83b4a709-ae55-5f15-a221-50b2e2e50f4f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.8.13","comment":"https://x.com/Metemcyber/status/1958341822952132786","timestamp":"1755740049","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f628713d-5c98-572b-8bb1-4b94e7226cd0","type":"domain","category":"Network activity","to_ids":true,"value":"violenceless.mfwenuy.cn","comment":"https://x.com/Metemcyber/status/1958341822952132786","timestamp":"1755740049","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f9abdea-fbee-52f1-a7f6-cc12ff26b866","type":"url","category":"Network activity","to_ids":true,"value":"https://violenceless.mfwenuy.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1958341822952132786","timestamp":"1755740049","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"788a50c7-f53c-5b09-b817-d74e5c0812c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"187.201.97.119","comment":"https://x.com/FalconFeedsio/status/1958346378268282977","timestamp":"1755741135","distribution":"5"},{"uuid":"88a96e53-abda-5f8e-889d-3d8a50c60409","type":"url","category":"Network activity","to_ids":true,"value":"http://187.201.97.119","comment":"https://x.com/FalconFeedsio/status/1958346378268282977","timestamp":"1755741135","distribution":"5"},{"uuid":"e9e540f3-99ae-5bd3-9581-b1524975f3fd","type":"domain","category":"Network activity","to_ids":true,"value":"bafybeid5jtrh2dzvtc3u63zuvrxgim25kon2re54ih7oilxfiocsvn3nhy.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1958348367781568766","timestamp":"1755741609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3aaed802-d1c5-508e-bb49-128dce8c2668","type":"url","category":"Network activity","to_ids":true,"value":"https://bafybeid5jtrh2dzvtc3u63zuvrxgim25kon2re54ih7oilxfiocsvn3nhy.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1958348367781568766","timestamp":"1755741609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d28fa406-8595-587d-9a74-3f6c340ae336","type":"url","category":"Network activity","to_ids":true,"value":"https://220.249.135.249/api/v1/get","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"45062776-0294-56c8-86fe-b670991d73a7","type":"url","category":"Network activity","to_ids":true,"value":"https://210.16.181.38/api/v1/get","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7ec86597-9687-58d6-ad67-7e5d7305e07c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.17.233:443","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1dc69c13-9756-515e-b385-5d22b67ae922","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.17.233","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"26c099a6-3c80-505d-b55e-3a0a6c514e61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"220.249.135.249","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e31d1e2a-0a19-5429-a392-a213f3a28fae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.16.181.38","comment":"https://x.com/drb_ra/status/1958348867361247380","timestamp":"1755741728","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7ddd4b8c-5778-5be3-8aa1-e5d3a4cc153c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.93.89.62","comment":"https://x.com/JAMESWT_WT/status/1958383614107992157","timestamp":"1755750013","distribution":"5"},{"uuid":"4c4e356a-c396-581e-b4aa-03fa08c8a192","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.93.89.62","comment":"https://x.com/JAMESWT_WT/status/1958383614107992157","timestamp":"1755750013","distribution":"5"},{"uuid":"eca8f2fd-d37c-595a-b7f3-7a5835f069b3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.93.89.62/login","comment":"https://x.com/JAMESWT_WT/status/1958383614107992157","timestamp":"1755750013","distribution":"5"},{"uuid":"2f5d8149-abda-5311-a988-2ad0e9162ff9","type":"url","category":"Network activity","to_ids":true,"value":"https://firebasestorage.googleapis.com/v0/b/suryaofficialku.appspot.com/o/","comment":"https://x.com/suyog41/status/1958408283762590180","timestamp":"1755755894","distribution":"5"},{"uuid":"8b8be1f7-e7b3-51f4-a3cc-93c52077ee2a","type":"url","category":"Network activity","to_ids":true,"value":"http://firebasestorage.googleapis.com/v0/b/suryaofficialku.appspot.com/o/kasian.html?alt=media&token=5980a7ba-b33a-4229-80d2-1c0990c71793","comment":"https://x.com/suyog41/status/1958408283762590180","timestamp":"1755755894","distribution":"5"},{"uuid":"6ebf83a0-a21a-5ef5-be6f-e91d92663b9d","type":"domain","category":"Network activity","to_ids":true,"value":"payyy-ranswor.wbz.biz.id","comment":"https://x.com/suyog41/status/1958408283762590180","timestamp":"1755755894","distribution":"5"},{"uuid":"3910bb6c-0ecb-5030-bec8-0f344d96e2b2","type":"url","category":"Network activity","to_ids":true,"value":"http://payyy-ranswor.wbz.biz.id","comment":"https://x.com/suyog41/status/1958408283762590180","timestamp":"1755755894","distribution":"5"},{"uuid":"82123dc9-af71-54cb-8b6a-b5793459c18f","type":"url","category":"Network activity","to_ids":true,"value":"http://email.rusagromaslo.com","comment":"https://x.com/urldna_bot/status/1958408764932911402","timestamp":"1755756009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8858a67b-80f6-5f21-a49b-cd70f501db0d","type":"domain","category":"Network activity","to_ids":true,"value":"email.rusagromaslo.com","comment":"https://x.com/urldna_bot/status/1958408764932911402","timestamp":"1755756009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a5ff8bf5-9995-59d0-bcc9-b1940e5cc902","type":"url","category":"Network activity","to_ids":true,"value":"https://orico-nceuous.28i8su.cn/eorico/login/","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bac99030-1f4e-52bb-a8e6-d94cefbb22f3","type":"domain","category":"Network activity","to_ids":true,"value":"orico-nceuous.28i8su.cn","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1958410286601535880","timestamp":"1755756372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3ff57f08-7915-5242-befd-a9ad3fa5f111","type":"domain","category":"Network activity","to_ids":true,"value":"icloud-hourain.tpglzv.cn","comment":"https://x.com/Metemcyber/status/1958412819646583071","timestamp":"1755756976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9679b8f0-81f1-5d86-8bda-8212c4b63f5b","type":"url","category":"Network activity","to_ids":true,"value":"https://icloud-hourain.tpglzv.cn/gvIY2S/","comment":"https://x.com/Metemcyber/status/1958412819646583071","timestamp":"1755756976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"962c7176-9ad0-50e8-86ef-2b416043f612","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.132.12","comment":"https://x.com/Metemcyber/status/1958412819646583071","timestamp":"1755756976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e82013f-c548-512e-965b-f74a17e2fd60","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.4.119","comment":"https://x.com/Metemcyber/status/1958412819646583071","timestamp":"1755756976","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e481f8d8-5d50-5723-8f6d-bb209f79801a","type":"url","category":"Network activity","to_ids":true,"value":"http://27.102.137.242","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"b5136d82-d7c8-5671-b03b-db1c9ff886ae","type":"domain","category":"Network activity","to_ids":true,"value":"ntpservice.kro.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"0292801d-5da4-5b69-8192-599b0e0cae3c","type":"url","category":"Network activity","to_ids":true,"value":"http://ntpservice.kro.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"36e06553-f4cd-53ee-80aa-f39e074403a9","type":"domain","category":"Network activity","to_ids":true,"value":"ntdocument.r-e.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"e0022cfe-2d7b-5bea-ba42-6d363b5ef0ab","type":"url","category":"Network activity","to_ids":true,"value":"http://ntdocument.r-e.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"351d3279-1111-598f-bdb6-561d0dc3b3f0","type":"domain","category":"Network activity","to_ids":true,"value":"linkdeposits.o-r.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"49073652-a358-55c5-baea-3b95facf145a","type":"url","category":"Network activity","to_ids":true,"value":"http://myonlinedoc.kro.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"d68e6cf7-6d6c-5264-ad54-87b863bcb219","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.102.137.242","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"511bc977-8cc8-5754-bb1d-a0f2b417847d","type":"url","category":"Network activity","to_ids":true,"value":"http://linkdeposits.o-r.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"c8810003-9304-50bc-b803-897ea69494c1","type":"domain","category":"Network activity","to_ids":true,"value":"myonlinedoc.kro.kr","comment":"https://x.com/skocherhan/status/1958415202325516338","timestamp":"1755757544","distribution":"5"},{"uuid":"6b198d9d-5f43-51f5-be5f-4f875b29fc65","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.210.239:80","comment":"https://x.com/drb_ra/status/1958420509672063048","timestamp":"1755758809","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5df782c6-43e5-52b2-b958-1ff05cd09b18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.210.239","comment":"https://x.com/drb_ra/status/1958420509672063048","timestamp":"1755758809","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"56d8607b-48f3-516f-9a47-0f9f47f49511","type":"url","category":"Network activity","to_ids":true,"value":"http://193.58.121.7:80","comment":"https://x.com/drb_ra/status/1958420648541163809","timestamp":"1755758842","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"c3ba3aea-1951-52aa-9d47-22a77fd269d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.58.121.7","comment":"https://x.com/drb_ra/status/1958420648541163809","timestamp":"1755758842","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"f1b2fb8b-3283-5c83-8bd0-a38710120fd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.68.5","comment":"https://x.com/drb_ra/status/1958420788022850005","timestamp":"1755758876","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"13443c38-c445-5e31-8f0c-a9bc1b01efb4","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.68.5:3333","comment":"https://x.com/drb_ra/status/1958420788022850005","timestamp":"1755758876","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"144cc9cb-6e18-50e2-8937-8167e62f53c8","type":"url","category":"Network activity","to_ids":true,"value":"http://176.44.118.62:995","comment":"https://x.com/drb_ra/status/1958420926460023281","timestamp":"1755758909","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"be39d548-0525-513f-a1d7-dc5f10b620e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.44.118.62","comment":"https://x.com/drb_ra/status/1958420926460023281","timestamp":"1755758909","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"f3e315d3-820c-558d-a5aa-e2d8faf81f89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.119.186.119","comment":"https://x.com/drb_ra/status/1958421064586789120","timestamp":"1755758942","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"3409ba41-0cb3-5eb6-a723-99278ef6929c","type":"url","category":"Network activity","to_ids":true,"value":"http://75.119.186.119:443","comment":"https://x.com/drb_ra/status/1958421064586789120","timestamp":"1755758942","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b6c7511a-c3be-599a-b6ae-e278595f024d","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.165:2222","comment":"https://x.com/drb_ra/status/1958421202415804694","timestamp":"1755758975","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"0a3c6bbf-6a5f-5889-ad7b-e58b0d600743","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.157.7.165","comment":"https://x.com/drb_ra/status/1958421202415804694","timestamp":"1755758975","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"63d31010-0427-5536-9adc-4afbb7483d18","type":"md5","category":"Payload delivery","to_ids":true,"value":"c72430163187e16ee34d9953e81f7854","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"9fd3731f-d5fe-5de8-bd0f-e75fe6040af0","type":"md5","category":"Payload delivery","to_ids":true,"value":"b95a9064931f93342112c2575fcc1d50","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"528fa5b0-5e7f-50ad-8aea-558abbb04e4d","type":"md5","category":"Payload delivery","to_ids":true,"value":"71cf7db06b80d10ca398651496fd7339","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"a575634d-4df4-5e67-9b0f-1d79975cbcf0","type":"md5","category":"Payload delivery","to_ids":true,"value":"5cc81b50d844bef6286f7cc297244759","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"dfd0a74e-ddc8-5f78-91e7-8a1128271241","type":"md5","category":"Payload delivery","to_ids":true,"value":"2218972937a39508e655612f4de1c082","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"8e351e4e-759e-551e-a667-11f6159075ba","type":"md5","category":"Payload delivery","to_ids":true,"value":"c32745fff5d5b93f74393752ac42c0dc","comment":"https://x.com/suyog41/status/1958421240592597085","timestamp":"1755758984","distribution":"5"},{"uuid":"f3857cd6-802c-588a-a26d-30265c501c29","type":"url","category":"Network activity","to_ids":true,"value":"http://31.14.142.50:4000","comment":"https://x.com/drb_ra/status/1958421340152528906","timestamp":"1755759007","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"42599d75-8819-508b-bda5-e6c735c29d8b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.14.142.50","comment":"https://x.com/drb_ra/status/1958421340152528906","timestamp":"1755759007","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"238dee36-c239-5fc2-9c32-3fc0348f8a42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.75.102.205","comment":"https://x.com/drb_ra/status/1958421478849810694","timestamp":"1755759040","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"85ee1476-0a4d-5927-a547-51e39aafc621","type":"url","category":"Network activity","to_ids":true,"value":"http://168.75.102.205:8880","comment":"https://x.com/drb_ra/status/1958421478849810694","timestamp":"1755759040","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f597e26f-a285-5858-883a-08c7d397883a","type":"url","category":"Network activity","to_ids":true,"value":"http://44.215.31.49:443","comment":"https://x.com/drb_ra/status/1958421617446391812","timestamp":"1755759073","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f139fe2f-de4e-5f05-99b4-3734baf40ed9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.215.31.49","comment":"https://x.com/drb_ra/status/1958421617446391812","timestamp":"1755759073","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6d30cc50-34fe-51e3-93e0-5aefbadb4dd7","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.31.86:443","comment":"https://x.com/drb_ra/status/1958421756210774325","timestamp":"1755759107","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"713f5a8e-f0ce-5b33-9791-8a38c50ca246","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.223.31.86","comment":"https://x.com/drb_ra/status/1958421756210774325","timestamp":"1755759107","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4a936fc1-8523-5ea6-b046-850d530b7415","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:7443","comment":"https://x.com/drb_ra/status/1958421895063199755","timestamp":"1755759140","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1958421895063199755","timestamp":"1755759140","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"9c3a0d25-0839-568a-be51-06ba17766311","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.204.170","comment":"https://x.com/drb_ra/status/1958422033630372060","timestamp":"1755759173","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"67645a71-e2b9-51fa-83b7-7ecc27f82c08","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.204.170:443","comment":"https://x.com/drb_ra/status/1958422033630372060","timestamp":"1755759173","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e9c55bc3-ec8c-5c42-8b36-476a86e412fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.239.17.165","comment":"https://x.com/drb_ra/status/1958422172487098396","timestamp":"1755759206","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cda97dec-5aad-5506-8787-6684edd37f58","type":"url","category":"Network activity","to_ids":true,"value":"http://23.239.17.165:443","comment":"https://x.com/drb_ra/status/1958422172487098396","timestamp":"1755759206","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6ade35d2-00ae-5b24-818d-d512f2442208","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.58.204.90","comment":"https://x.com/drb_ra/status/1958422310089531499","timestamp":"1755759239","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"66fbf0a7-58fd-5755-bc73-9a5e508fbcdf","type":"url","category":"Network activity","to_ids":true,"value":"http://154.58.204.90:443","comment":"https://x.com/drb_ra/status/1958422310089531499","timestamp":"1755759239","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cd1302ff-bb05-55a5-8aec-f30dc8a6de9e","type":"url","category":"Network activity","to_ids":true,"value":"http://35.180.126.139:443","comment":"https://x.com/drb_ra/status/1958422448568733972","timestamp":"1755759272","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"50f05967-e1cd-5330-95fa-1519f8cfd3d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.180.126.139","comment":"https://x.com/drb_ra/status/1958422448568733972","timestamp":"1755759272","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"db3cb1cb-870b-55f1-a366-ecea60e40fe5","type":"url","category":"Network activity","to_ids":true,"value":"http://23.239.27.109:8080","comment":"https://x.com/drb_ra/status/1958423094986506740","timestamp":"1755759426","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"5c867e56-838f-5128-b596-e6de48b660bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.239.27.109","comment":"https://x.com/drb_ra/status/1958423094986506740","timestamp":"1755759426","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"796e0308-54d1-57d0-ac0f-f0d64570187f","type":"url","category":"Network activity","to_ids":true,"value":"http://157.173.222.22:443","comment":"https://x.com/drb_ra/status/1958423232949690770","timestamp":"1755759459","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c2ef9800-9d38-5cd2-aec3-b5cc78f44d8b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.173.222.22","comment":"https://x.com/drb_ra/status/1958423232949690770","timestamp":"1755759459","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"10d06bb5-b429-59df-b338-df9e06038c68","type":"url","category":"Network activity","to_ids":true,"value":"http://109.234.37.53:443","comment":"https://x.com/drb_ra/status/1958423372750037436","timestamp":"1755759492","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"482cb4d2-2f9a-599b-90b3-ab9c6a75335e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.234.37.53","comment":"https://x.com/drb_ra/status/1958423372750037436","timestamp":"1755759492","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"387996ed-e6fc-5c02-adc4-82af07998e02","type":"url","category":"Network activity","to_ids":true,"value":"http://194.165.16.169:2404","comment":"https://x.com/drb_ra/status/1958423511787016573","timestamp":"1755759525","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"12e978c8-be51-5b79-8453-334606352844","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.165.16.169","comment":"https://x.com/drb_ra/status/1958423511787016573","timestamp":"1755759525","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ee664c89-f3f1-5329-8006-e3c9e0c1f28b","type":"url","category":"Network activity","to_ids":true,"value":"http://46.30.189.9:443","comment":"https://x.com/drb_ra/status/1958423650626875641","timestamp":"1755759558","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9a4af56e-e62a-56d3-8e72-da38c1d5b1b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.30.189.9","comment":"https://x.com/drb_ra/status/1958423650626875641","timestamp":"1755759558","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f2b0378c-06d2-59c5-84b8-0adc0b87df3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.120.93.192","comment":"https://x.com/drb_ra/status/1958423789299015899","timestamp":"1755759591","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d9dc5855-8730-5cce-aa03-da563731f56a","type":"url","category":"Network activity","to_ids":true,"value":"http://87.120.93.192:6969","comment":"https://x.com/drb_ra/status/1958423789299015899","timestamp":"1755759591","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1ad00292-97d8-52b1-a064-2c4ced51b0f3","type":"url","category":"Network activity","to_ids":true,"value":"http://193.56.253.68:433","comment":"https://x.com/drb_ra/status/1958423926926713010","timestamp":"1755759624","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7b982243-75fc-5f9e-8fb7-99479e5d5255","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.56.253.68","comment":"https://x.com/drb_ra/status/1958424066815316475","timestamp":"1755759657","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d74675c5-5799-58a1-937a-121a1febfda7","type":"url","category":"Network activity","to_ids":true,"value":"http://193.56.253.68:8458","comment":"https://x.com/drb_ra/status/1958424066815316475","timestamp":"1755759657","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f79669d1-847f-5fa9-a6dd-808355ab9714","type":"url","category":"Network activity","to_ids":true,"value":"http://193.56.253.69:8458","comment":"https://x.com/drb_ra/status/1958424205026070642","timestamp":"1755759690","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7707f2bb-899a-544a-a666-f11a4aadf0da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.56.253.69","comment":"https://x.com/drb_ra/status/1958424205026070642","timestamp":"1755759690","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0f315606-d3e6-5d1d-a305-3011935dc7a6","type":"url","category":"Network activity","to_ids":true,"value":"http://193.56.253.66:433","comment":"https://x.com/drb_ra/status/1958424343081525436","timestamp":"1755759723","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"abf4a8d0-94bc-5c2a-9b52-7c6006436b83","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.56.253.66","comment":"https://x.com/drb_ra/status/1958424343081525436","timestamp":"1755759723","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"92156144-3da6-5968-ac72-24e094da535d","type":"url","category":"Network activity","to_ids":true,"value":"http://156.247.40.80:3232","comment":"https://x.com/drb_ra/status/1958424482173128971","timestamp":"1755759756","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"95419192-57d5-5d78-b5f0-f02d7d1f5c00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.247.40.80","comment":"https://x.com/drb_ra/status/1958424482173128971","timestamp":"1755759756","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"6fefcba6-9df1-5184-adec-ac8138d1052f","type":"url","category":"Network activity","to_ids":true,"value":"http://47.243.104.165:3232","comment":"https://x.com/drb_ra/status/1958424620761255977","timestamp":"1755759790","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"99a5e06c-6bdf-5d42-b88d-a5e9a5dc24e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.243.104.165","comment":"https://x.com/drb_ra/status/1958424620761255977","timestamp":"1755759790","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"5c8091c9-448a-5f15-a1e6-001bac1f5b8c","type":"url","category":"Network activity","to_ids":true,"value":"http://15.157.72.236:45615","comment":"https://x.com/drb_ra/status/1958424759924072675","timestamp":"1755759823","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9b120a82-5dd7-5497-bda9-26266d16ec55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.157.72.236","comment":"https://x.com/drb_ra/status/1958424759924072675","timestamp":"1755759823","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f8d00ae7-7943-52ac-a8e8-d97bb09c2f90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.234.30.196","comment":"https://x.com/drb_ra/status/1958424897899704703","timestamp":"1755759856","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5763515c-6d95-5ecc-a0e1-35a09ebca912","type":"url","category":"Network activity","to_ids":true,"value":"http://54.234.30.196:25565","comment":"https://x.com/drb_ra/status/1958424897899704703","timestamp":"1755759856","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9e4c4f33-788a-57f4-adf6-ceeb517b8ff6","type":"url","category":"Network activity","to_ids":true,"value":"http://3.251.96.126:80","comment":"https://x.com/drb_ra/status/1958425037050200186","timestamp":"1755759889","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"09fbfba3-8219-5a6d-8b4c-296bbd5bfc6e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.93.238.6:443","comment":"https://x.com/drb_ra/status/1958425175646728698","timestamp":"1755759922","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0445d558-4035-5ee7-a3ea-5a355cdec7c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.97.147.14","comment":"https://x.com/drb_ra/status/1958425313484181647","timestamp":"1755759955","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"df9a7003-ec89-5af0-b2c7-a67395a525ad","type":"url","category":"Network activity","to_ids":true,"value":"http://31.97.147.14:25","comment":"https://x.com/drb_ra/status/1958425313484181647","timestamp":"1755759955","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d5d4809d-6932-5110-993c-9194e63b4bb1","type":"domain","category":"Network activity","to_ids":true,"value":"ohboycharters.com","comment":"https://x.com/kubotaa3/status/1958428783071183035","timestamp":"1755760782","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"433f476e-8d65-5463-ac7e-6df34dbd1e65","type":"url","category":"Network activity","to_ids":true,"value":"http://ohboycharters.com/v1/check","comment":"https://x.com/kubotaa3/status/1958428783071183035","timestamp":"1755760782","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8121b11f-cc26-59f7-8c5e-15f29b8427ed","type":"domain","category":"Network activity","to_ids":true,"value":"jerphys.com","comment":"https://x.com/kubotaa3/status/1958428783071183035","timestamp":"1755760782","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"98ce9448-5caf-5e93-979f-264d7a9732c5","type":"url","category":"Network activity","to_ids":true,"value":"https://jerphys.com/v1/check","comment":"https://x.com/kubotaa3/status/1958428783071183035","timestamp":"1755760782","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06ca1ccc-7c2d-5f95-8ca9-1283caed98b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.131.16","comment":"https://x.com/kubotaa3/status/1958428783071183035","timestamp":"1755760782","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b48f1d5a-68a2-54dc-9e44-d203955328cb","type":"url","category":"Network activity","to_ids":true,"value":"https://adminverififcationxx.weebly.com","comment":"https://x.com/urldna_bot/status/1958438951175266751","timestamp":"1755763206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9d8aa01a-6569-5328-a0aa-0a67b48dd4a4","type":"domain","category":"Network activity","to_ids":true,"value":"adminverififcationxx.weebly.com","comment":"https://x.com/urldna_bot/status/1958438951175266751","timestamp":"1755763206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2be00ca8-7ae5-5bcf-9e6d-202a8b8d7007","type":"url","category":"Network activity","to_ids":true,"value":"http://43.132.244.201:443","comment":"https://x.com/drb_ra/status/1958439656149660069","timestamp":"1755763374","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"90dc2617-9f37-5e06-9a30-fc5016d27ef4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.132.244.201","comment":"https://x.com/drb_ra/status/1958439656149660069","timestamp":"1755763374","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c6b116ca-ba97-5b7e-a154-acc70f45cce9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.53","comment":"https://x.com/drb_ra/status/1958439795295695043","timestamp":"1755763407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d901b81f-717a-5d1c-8d23-134f673a2885","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:2096","comment":"https://x.com/drb_ra/status/1958439795295695043","timestamp":"1755763407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fe1bd04e-cd6a-5ec0-9c0f-d1dbae49ba92","type":"url","category":"Network activity","to_ids":true,"value":"https://dd.tstcs888.com/match","comment":"https://x.com/drb_ra/status/1958439795295695043","timestamp":"1755763407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d9bc5631-d42a-5cd8-8602-8ee446e3d1ed","type":"domain","category":"Network activity","to_ids":true,"value":"dd.tstcs888.com","comment":"https://x.com/drb_ra/status/1958439795295695043","timestamp":"1755763407","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0d495bf4-e676-5550-8273-dc7d7a961a63","type":"domain","category":"Network activity","to_ids":true,"value":"9ir.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"cde650de-0a3e-5fc6-9da7-342fc7516fc6","type":"domain","category":"Network activity","to_ids":true,"value":"681p.net","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"8606dc46-87b4-584d-9027-e89b05b781b8","type":"url","category":"Network activity","to_ids":true,"value":"http://681p.net","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"086d12c5-7465-5ace-93c5-7685d8947661","type":"domain","category":"Network activity","to_ids":true,"value":"91learnai.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"d74e1edd-5aa5-5f78-892b-08d8e0b83ff5","type":"url","category":"Network activity","to_ids":true,"value":"http://91learnai.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"ada8a8bf-6cfc-54c2-8751-71dc89d4e44b","type":"url","category":"Network activity","to_ids":true,"value":"http://9ir.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"37d20100-510a-5b37-9731-d3a86413c61c","type":"url","category":"Network activity","to_ids":true,"value":"http://551004.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"5e220679-7399-576f-89ec-dad86773a77b","type":"url","category":"Network activity","to_ids":true,"value":"http://9yhftjreifdmpfg5.serveexchange.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"359cbf7b-f768-5ed3-a92b-c7a21b7c7846","type":"domain","category":"Network activity","to_ids":true,"value":"a.synologyupdates.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"91de9053-1153-5a9d-92ac-d6314362aaf4","type":"url","category":"Network activity","to_ids":true,"value":"http://a.synologyupdates.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"d399933b-1a0c-5ac3-b69e-f319c1a142d1","type":"domain","category":"Network activity","to_ids":true,"value":"aaa.sleb.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"c707d436-853a-5a49-9011-a2f2d1705f2b","type":"url","category":"Network activity","to_ids":true,"value":"http://aaa.sleb.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"c74c93de-cc80-5ec6-83fe-1c8d939ec933","type":"domain","category":"Network activity","to_ids":true,"value":"9yhftjreifdmpfg5.serveexchange.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"ed7bbd98-2fa5-59aa-a2c0-9c489b860df1","type":"domain","category":"Network activity","to_ids":true,"value":"551004.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"92502e0b-4014-5bcd-98d8-11e6be7b459d","type":"domain","category":"Network activity","to_ids":true,"value":"2839173.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"fb10e34c-e52e-5ecd-904d-449ca9cbcc69","type":"domain","category":"Network activity","to_ids":true,"value":"46638037.eu.org","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"938f91ad-f131-502f-857a-6e3c42ba5eb7","type":"domain","category":"Network activity","to_ids":true,"value":"114.aitourgo.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"d2643bfa-2cd9-57a2-911b-8bd8ac4bf33e","type":"domain","category":"Network activity","to_ids":true,"value":"222505.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"584bfbd7-fe0c-54fe-86c9-f1e72d02d8b0","type":"url","category":"Network activity","to_ids":true,"value":"http://222505.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"0dcb0dab-6d5c-51c9-8dbd-fe703a616fbb","type":"domain","category":"Network activity","to_ids":true,"value":"268673.rdviewer.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"2cb6301c-5311-513e-9a8d-a4ab24d0c32d","type":"url","category":"Network activity","to_ids":true,"value":"http://268673.rdviewer.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"325a27ed-e56b-50e7-a3fa-35c471616467","type":"url","category":"Network activity","to_ids":true,"value":"http://114.aitourgo.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"61bbb241-ac74-53c4-aaa0-5bb7ae8becd4","type":"url","category":"Network activity","to_ids":true,"value":"http://2839173.xyz","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"16463289-aa1e-5cc1-8305-617a9cfc3031","type":"url","category":"Network activity","to_ids":true,"value":"http://3abls3tppqpqugux.ciscofreak.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"29ddae0b-ff37-59c3-86ef-898c2a1e2841","type":"domain","category":"Network activity","to_ids":true,"value":"3abls3tppqpqugux.ciscofreak.com","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"63e8ccfe-1f8b-5303-b156-3eb9b0543b23","type":"url","category":"Network activity","to_ids":true,"value":"http://46638037.eu.org","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"3fd159f9-1a36-5c2a-8ed0-03f889afbbea","type":"domain","category":"Network activity","to_ids":true,"value":"3218.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"dd6ece36-1e29-5881-8395-bb27f8c648bc","type":"url","category":"Network activity","to_ids":true,"value":"http://3218.cn","comment":"https://x.com/skocherhan/status/1958456625657692308","timestamp":"1755767420","distribution":"5"},{"uuid":"3d0420d6-0e96-50ad-836c-15b69e858695","type":"domain","category":"Network activity","to_ids":true,"value":"fortiguard.site","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"515954a9-610d-50a6-babb-ba2623237859","type":"url","category":"Network activity","to_ids":true,"value":"http://fortiguard.site","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c278cb5b-ee98-51b0-a3b1-42d702942d8b","type":"url","category":"Network activity","to_ids":true,"value":"http://facebook-security.org","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6a8e40bb-da1f-53bc-86da-7c31051eb5c7","type":"domain","category":"Network activity","to_ids":true,"value":"reddit-trends.blog","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1c9cda7f-4d69-5537-b51b-ce680a69b1d3","type":"url","category":"Network activity","to_ids":true,"value":"http://reddit-trends.blog","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5d17da07-d0e7-5bb7-bd4b-d3629ef02646","type":"domain","category":"Network activity","to_ids":true,"value":"de-paypal.email","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"52eb3df8-aa11-5c84-a205-76370f49c7dd","type":"url","category":"Network activity","to_ids":true,"value":"http://de-paypal.email","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dbcff2e0-3896-5b6c-8175-b26341c8be21","type":"domain","category":"Network activity","to_ids":true,"value":"facebook-security.org","comment":"https://x.com/c9lab_soc/status/1958461214452793744","timestamp":"1755768514","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1a15887d-c591-5277-861b-a0c08e3b1fb7","type":"url","category":"Network activity","to_ids":true,"value":"https://webmail-email-it.weebly.com","comment":"https://x.com/urldna_bot/status/1958469169118122198","timestamp":"1755770411","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"33adbb76-343c-5eac-8b0e-14636e2da986","type":"domain","category":"Network activity","to_ids":true,"value":"webmail-email-it.weebly.com","comment":"https://x.com/urldna_bot/status/1958469169118122198","timestamp":"1755770411","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3e2aca51-a2c6-58e7-ac75-dafcec5455b7","type":"url","category":"Network activity","to_ids":true,"value":"http://dgtteam.top","comment":"https://x.com/CorporalReaper/status/1958477783471960427","timestamp":"1755772464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e976d3a-644e-538b-aab4-8a3adca80b5f","type":"domain","category":"Network activity","to_ids":true,"value":"dgtteam.top","comment":"https://x.com/CorporalReaper/status/1958477783471960427","timestamp":"1755772464","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f0154ec-82cc-5fdf-b16a-af993253fc4e","type":"domain","category":"Network activity","to_ids":true,"value":"d.tstcs888.com","comment":"https://x.com/drb_ra/status/1958486099023520024","timestamp":"1755774447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c8042eb8-49a3-5abe-98c6-8e162110db51","type":"url","category":"Network activity","to_ids":true,"value":"https://d.tstcs888.com/ga.js","comment":"https://x.com/drb_ra/status/1958486099023520024","timestamp":"1755774447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3aca1a8c-cbc4-57ad-a148-acd4a0e7f4fd","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:443","comment":"https://x.com/drb_ra/status/1958486099023520024","timestamp":"1755774447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4495b00f-e987-5503-abcc-3cd0443067c6","type":"url","category":"Network activity","to_ids":true,"value":"http://8.138.167.123:443","comment":"https://x.com/drb_ra/status/1958486238890979555","timestamp":"1755774480","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ab225e3c-647f-5465-a740-bfce60ef9c53","type":"url","category":"Network activity","to_ids":true,"value":"http://202.155.152.136:8081","comment":"https://x.com/drb_ra/status/1958486379031109740","timestamp":"1755774514","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8d08ad0c-8ad5-534b-b67a-d2790aa547ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.155.152.136","comment":"https://x.com/drb_ra/status/1958486379031109740","timestamp":"1755774514","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ec7e02d4-aa27-53f5-a92f-4e031b7c26f7","type":"domain","category":"Network activity","to_ids":true,"value":"jabanky.icu","comment":"https://x.com/masaomi346/status/1958504276386255286","timestamp":"1755778781","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"348649c6-6bc2-5e02-98ce-4edec1e55a10","type":"url","category":"Network activity","to_ids":true,"value":"https://www.jabanky.icu/XFcts7/","comment":"https://x.com/masaomi346/status/1958504276386255286","timestamp":"1755778781","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a0d4909-e426-54c5-a89b-5b3a9f8b4327","type":"url","category":"Network activity","to_ids":true,"value":"https://vemnedyrieiik93df.pythonanywhere.com/renc","comment":"https://x.com/1ZRR4H/status/1958507125165961530","timestamp":"1755779460","distribution":"5"},{"uuid":"0e11ca3b-82a5-560d-a27e-531cc43a4617","type":"sha256","category":"Payload delivery","to_ids":true,"value":"0df15580ca576d60ca79ed51f84e9699ac49033e5d4b3f82d6fabb606bf90e4c","comment":"https://x.com/1ZRR4H/status/1958507125165961530","timestamp":"1755779460","distribution":"5"},{"uuid":"be371530-c97b-5c61-bc60-69d6d6f54bec","type":"domain","category":"Network activity","to_ids":true,"value":"vemnedyrieiik93df.pythonanywhere.com","comment":"https://x.com/1ZRR4H/status/1958507125165961530","timestamp":"1755779460","distribution":"5"},{"uuid":"668fa2f9-c56a-56b2-afa6-4325578712eb","type":"md5","category":"Payload delivery","to_ids":true,"value":"74e89238e3315e3c5105714246390cda","comment":"https://x.com/suyog41/status/1958531543045194181","timestamp":"1755785282","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"7a5929cf-08f5-54a9-9568-22166d5a593d","type":"domain","category":"Network activity","to_ids":true,"value":"lokrlogalshit.icu","comment":"https://x.com/StopMalvertisin/status/1958533412832371058","timestamp":"1755785728","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b2050715-3dfc-5f50-8b26-392c23877030","type":"url","category":"Network activity","to_ids":true,"value":"https://lokrlogalshit.icu/?z=173&n=1755782459","comment":"https://x.com/StopMalvertisin/status/1958533412832371058","timestamp":"1755785728","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f5693f83-f8af-5768-8724-933a7921bd87","type":"domain","category":"Network activity","to_ids":true,"value":"filesclosedset.icu","comment":"https://x.com/StopMalvertisin/status/1958533412832371058","timestamp":"1755785728","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b503468e-2379-5222-bca3-2b418975f20f","type":"url","category":"Network activity","to_ids":true,"value":"https://filesclosedset.icu/?6h[snipped","comment":"https://x.com/StopMalvertisin/status/1958533412832371058","timestamp":"1755785728","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3c17f320-16b7-58f7-bcb9-22c5bb1d2dfe","type":"url","category":"Network activity","to_ids":true,"value":"https://mega.nz/file/2wIFmYqa#ThUB7FNGQiAgJTc2mxZy43OEleffvDW0wZ8CIF3ZufM","comment":"https://x.com/StopMalvertisin/status/1958533412832371058","timestamp":"1755785728","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b586eb1d-28a8-5757-baa0-e7eee32a0891","type":"url","category":"Network activity","to_ids":true,"value":"https://mega.nz/file/ZhQiBAAY#ClM3w0JPnqqrl6RCKN-rp6X15m8LO_zUJIAbhMx81tY","comment":"https://x.com/skocherhan/status/1958549304940847257","timestamp":"1755789517","distribution":"5","Tag":[{"name":"malware"},{"name":"RAT"}]},{"uuid":"fd438870-d377-53d9-bcd0-61bc57f6c737","type":"domain","category":"Network activity","to_ids":true,"value":"collinscu.weebly.com","comment":"https://x.com/urldna_bot/status/1958559752457179472","timestamp":"1755792007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5adadffa-e5ef-5f4e-85f3-0e2fc45e7457","type":"url","category":"Network activity","to_ids":true,"value":"https://collinscu.weebly.com","comment":"https://x.com/urldna_bot/status/1958559752457179472","timestamp":"1755792007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ce45e186-57c9-5218-aa30-0090e5d6d9db","type":"domain","category":"Network activity","to_ids":true,"value":"eset-black.xyz","comment":"https://x.com/JAMESWT_WT/status/1958579594509877364","timestamp":"1755796738","distribution":"5"},{"uuid":"cae63942-9ac2-54ec-a8c0-b3e3cf17115b","type":"url","category":"Network activity","to_ids":true,"value":"https://eset-black.xyz","comment":"https://x.com/JAMESWT_WT/status/1958579594509877364","timestamp":"1755796738","distribution":"5"},{"uuid":"61f530f8-c773-5947-a351-0763287b57f6","type":"domain","category":"Network activity","to_ids":true,"value":"ourrwtime.weebly.com","comment":"https://x.com/urldna_bot/status/1958589952150712590","timestamp":"1755799208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6073abb4-0a77-5750-978e-1ef57cb9f6d2","type":"url","category":"Network activity","to_ids":true,"value":"https://ourrwtime.weebly.com","comment":"https://x.com/urldna_bot/status/1958589952150712590","timestamp":"1755799208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"99b81455-ebbf-50aa-abc8-21136c20da03","type":"url","category":"Network activity","to_ids":true,"value":"http://107.172.87.130:12033","comment":"https://x.com/drb_ra/status/1958601661620134003","timestamp":"1755801999","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"576efcfd-ee9f-5652-b58a-ad4d759f39b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.172.87.130","comment":"https://x.com/drb_ra/status/1958601661620134003","timestamp":"1755801999","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"539c2335-d5cb-58a7-bb98-f436848b25e6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.193.179:8888","comment":"https://x.com/drb_ra/status/1958601800283779282","timestamp":"1755802032","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9af71753-1ab9-5098-ba2e-d8e4b0856568","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.193.179","comment":"https://x.com/drb_ra/status/1958601800283779282","timestamp":"1755802032","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7c98c1ef-4249-59f7-9302-0bb0b8b336c7","type":"url","category":"Network activity","to_ids":true,"value":"http://50.60.152.89:995","comment":"https://x.com/drb_ra/status/1958601937948963295","timestamp":"1755802065","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"61a5dc40-4b5f-5885-b8ed-c7d92482be3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.60.152.89","comment":"https://x.com/drb_ra/status/1958601937948963295","timestamp":"1755802065","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d3a58cd7-49aa-50d1-bd31-b8501dd0609d","type":"url","category":"Network activity","to_ids":true,"value":"http://92.187.137.1:2222","comment":"https://x.com/drb_ra/status/1958602076042535214","timestamp":"1755802098","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1a043a75-b67c-50dc-8309-d61a045f4ee0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.187.137.1","comment":"https://x.com/drb_ra/status/1958602076042535214","timestamp":"1755802098","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"163251eb-b305-52ca-8fa1-80d1583bcdcf","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.15.84:443","comment":"https://x.com/drb_ra/status/1958602214898856217","timestamp":"1755802131","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"db618dc5-4ae9-533b-8a97-76d5fbb4ae89","type":"url","category":"Network activity","to_ids":true,"value":"http://35.213.179.117:50666","comment":"https://x.com/drb_ra/status/1958602352492953880","timestamp":"1755802164","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"11fc4a87-fa51-507f-bc40-202aa1b4e739","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.213.179.117","comment":"https://x.com/drb_ra/status/1958602352492953880","timestamp":"1755802164","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6cb789c4-80aa-598c-b268-72cb6f72ece1","type":"url","category":"Network activity","to_ids":true,"value":"http://13.239.199.169:443","comment":"https://x.com/drb_ra/status/1958602491849056303","timestamp":"1755802197","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"00550b84-325d-5849-a37c-a7c3f82abdab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.239.199.169","comment":"https://x.com/drb_ra/status/1958602491849056303","timestamp":"1755802197","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"ccda3fe6-547e-5a35-bd63-8b372254f462","type":"url","category":"Network activity","to_ids":true,"value":"http://15.161.122.172:443","comment":"https://x.com/drb_ra/status/1958602630877601994","timestamp":"1755802230","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5e4dcaf2-1b2a-50d7-a976-e9b4aa693ac8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.161.122.172","comment":"https://x.com/drb_ra/status/1958602630877601994","timestamp":"1755802230","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"af112bf5-c152-5dfd-9f12-2fd5e941a708","type":"url","category":"Network activity","to_ids":true,"value":"http://69.197.134.139:7443","comment":"https://x.com/drb_ra/status/1958602773152571560","timestamp":"1755802264","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"8456eeca-2932-5fb0-93bc-527c1c51738f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.197.134.139","comment":"https://x.com/drb_ra/status/1958602773152571560","timestamp":"1755802264","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"7e351bb5-5348-5bd9-9021-489a56438e4f","type":"url","category":"Network activity","to_ids":true,"value":"http://159.69.211.165:7443","comment":"https://x.com/drb_ra/status/1958602912499941712","timestamp":"1755802298","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"9b9900f0-0e8d-574c-b258-00143101b79b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.69.211.165","comment":"https://x.com/drb_ra/status/1958602912499941712","timestamp":"1755802298","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"45eff11a-4a83-56f7-95ef-e9839188a3fc","type":"url","category":"Network activity","to_ids":true,"value":"http://142.93.160.249:443","comment":"https://x.com/drb_ra/status/1958603051247235441","timestamp":"1755802331","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"815ddfd0-74b1-53ee-8947-204b0865f0fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.93.160.249","comment":"https://x.com/drb_ra/status/1958603051247235441","timestamp":"1755802331","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"417134a0-4572-5230-8fcc-8a5bc23b3192","type":"url","category":"Network activity","to_ids":true,"value":"http://45.201.216.199:65535","comment":"https://x.com/drb_ra/status/1958603189542179325","timestamp":"1755802364","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bce6b3b4-4c99-5b7b-b40c-1769a655e599","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.201.216.199","comment":"https://x.com/drb_ra/status/1958603189542179325","timestamp":"1755802364","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"22b02da2-6584-58cb-aa59-cd0ba2d1b050","type":"url","category":"Network activity","to_ids":true,"value":"http://15.236.167.86:443","comment":"https://x.com/drb_ra/status/1958603835645001936","timestamp":"1755802518","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"56d9aa38-bd34-5a3e-9a3e-a0ca39581b70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.236.167.86","comment":"https://x.com/drb_ra/status/1958603835645001936","timestamp":"1755802518","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"8dcd8047-e654-596e-ad3b-7e243b019e2b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.221.64.233:465","comment":"https://x.com/drb_ra/status/1958603974052827413","timestamp":"1755802551","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"49a25873-d143-590d-a8a4-84e2ff218e11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.221.64.233","comment":"https://x.com/drb_ra/status/1958603974052827413","timestamp":"1755802551","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"823787d0-13ea-5350-aaa6-02c83f9d44dd","type":"url","category":"Network activity","to_ids":true,"value":"http://63.141.230.48:2404","comment":"https://x.com/drb_ra/status/1958604112129356240","timestamp":"1755802584","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ba225149-1b7c-54cb-8e6b-779792acf0ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.141.230.48","comment":"https://x.com/drb_ra/status/1958604112129356240","timestamp":"1755802584","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5d84d998-5133-53b0-b66a-7fc094cd9100","type":"url","category":"Network activity","to_ids":true,"value":"http://107.150.0.150:27362","comment":"https://x.com/drb_ra/status/1958604250944045304","timestamp":"1755802617","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8b4cb3cf-5a0e-5281-a2d6-32f3e8f2135b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.150.0.150","comment":"https://x.com/drb_ra/status/1958604250944045304","timestamp":"1755802617","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6801a1c5-9ce1-522d-a464-069793f06fa7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.232:2404","comment":"https://x.com/drb_ra/status/1958604389192802797","timestamp":"1755802650","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9aa9a0f4-14ff-51e4-8713-7628e9d71c42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.232","comment":"https://x.com/drb_ra/status/1958604389192802797","timestamp":"1755802650","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3d013ada-777e-528e-beb9-6b4daf187ff1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.152.216:2404","comment":"https://x.com/drb_ra/status/1958604527684223458","timestamp":"1755802683","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3e6ad959-c121-5fbc-9991-e8c254803544","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.152.216","comment":"https://x.com/drb_ra/status/1958604527684223458","timestamp":"1755802683","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5cc336fe-41f1-50ed-ab9a-8ec3cb50fc05","type":"url","category":"Network activity","to_ids":true,"value":"http://160.25.72.96:2404","comment":"https://x.com/drb_ra/status/1958604666792812921","timestamp":"1755802716","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"726c495c-3f0f-554f-a04b-8f6f4dfab027","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.25.72.96","comment":"https://x.com/drb_ra/status/1958604666792812921","timestamp":"1755802716","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"eb1bc6dc-02f4-5ecd-ae4a-4f7d8bf82902","type":"url","category":"Network activity","to_ids":true,"value":"http://192.254.70.103:8080","comment":"https://x.com/drb_ra/status/1958604805339062589","timestamp":"1755802749","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"27243a8d-c0fc-536e-b6d6-a28e9a7b082c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.254.70.103","comment":"https://x.com/drb_ra/status/1958604805339062589","timestamp":"1755802749","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"db1c8861-331b-54a4-b9ee-ec5d8414d581","type":"url","category":"Network activity","to_ids":true,"value":"http://34.96.165.237:2222","comment":"https://x.com/drb_ra/status/1958604943893426664","timestamp":"1755802782","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"22a2e0e0-779b-5d8f-a541-8aecc720b88d","type":"url","category":"Network activity","to_ids":true,"value":"http://143.92.62.30:3232","comment":"https://x.com/drb_ra/status/1958605083060707422","timestamp":"1755802815","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"704f4f5e-3e36-5656-a101-c7229ccd07e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.62.30","comment":"https://x.com/drb_ra/status/1958605083060707422","timestamp":"1755802815","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"302c109e-9fbb-5d5f-bc16-e939cfd198e8","type":"url","category":"Network activity","to_ids":true,"value":"http://15.152.50.124:18246","comment":"https://x.com/drb_ra/status/1958605221354975399","timestamp":"1755802848","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d0861041-f65a-5c79-b231-e1ea65ace4e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.152.50.124","comment":"https://x.com/drb_ra/status/1958605221354975399","timestamp":"1755802848","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8b3e8d02-66b7-5f1a-b3c7-2ee0384e72a3","type":"url","category":"Network activity","to_ids":true,"value":"http://54.65.66.80:7000","comment":"https://x.com/drb_ra/status/1958605363324100990","timestamp":"1755802882","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0ceb5964-f11d-58b1-a007-36e6938508c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.65.66.80","comment":"https://x.com/drb_ra/status/1958605363324100990","timestamp":"1755802882","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e8cf4230-9c9e-507d-ab38-053f64fa6db4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.96.221.134:17079","comment":"https://x.com/drb_ra/status/1958605501903839439","timestamp":"1755802915","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"731aec2d-fc15-52ea-8e6e-4b1a2966ebcc","type":"url","category":"Network activity","to_ids":true,"value":"http://35.183.105.9:18082","comment":"https://x.com/drb_ra/status/1958605639770357911","timestamp":"1755802948","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"25f8b8ac-4cdd-5ee2-a223-b7b9b8dcdb90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.183.105.9","comment":"https://x.com/drb_ra/status/1958605639770357911","timestamp":"1755802948","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"9a8f7bb3-3bca-5617-a6d9-5c50313108ad","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6fd795b3ab1cc482adb1b69a8ab44fd9ee4f980f976a358a6413f74a59e7033f","comment":"https://x.com/1ZRR4H/status/1958605764701937777","timestamp":"1755802978","distribution":"5"},{"uuid":"759369b3-3993-5d7b-908a-a8c5e759033c","type":"url","category":"Network activity","to_ids":true,"value":"http://103.59.160.219:1337","comment":"https://x.com/drb_ra/status/1958605778920648784","timestamp":"1755802981","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"4060b699-adec-54bc-9825-0150b47079a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.59.160.219","comment":"https://x.com/drb_ra/status/1958605778920648784","timestamp":"1755802981","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8c0310d0-79b4-5be6-9042-25a75cd59562","type":"url","category":"Network activity","to_ids":true,"value":"http://63.35.252.247:80","comment":"https://x.com/drb_ra/status/1958605916699279493","timestamp":"1755803014","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b5e2b624-5d19-52e0-89e2-b62073f4b7b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.35.252.247","comment":"https://x.com/drb_ra/status/1958605916699279493","timestamp":"1755803014","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c7421224-4e13-5a77-bf9a-8a40219a4131","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.157.234:80","comment":"https://x.com/drb_ra/status/1958606055375540508","timestamp":"1755803047","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"830ad941-108c-5787-9be0-d112bf8fba02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.157.234","comment":"https://x.com/drb_ra/status/1958606055375540508","timestamp":"1755803047","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"dad4c4c4-3c1a-5efb-83c1-8582f63ecd4c","type":"url","category":"Network activity","to_ids":true,"value":"http://79.132.250.173:443","comment":"https://x.com/drb_ra/status/1958606193192313246","timestamp":"1755803080","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bc068dda-f6dc-5483-a6d3-628e2968138d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.132.250.173","comment":"https://x.com/drb_ra/status/1958606193192313246","timestamp":"1755803080","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"43528bbd-c546-5d7c-9635-e2aca34668a7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.15.155:80","comment":"https://x.com/drb_ra/status/1958606331327475979","timestamp":"1755803113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"72c8fbd9-59da-56e4-8bff-f0b72f31b3bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.15.155","comment":"https://x.com/drb_ra/status/1958606331327475979","timestamp":"1755803113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"056ca2be-06ae-5c28-8af0-45dfd7b9fd08","type":"url","category":"Network activity","to_ids":true,"value":"http://3.133.130.178:443","comment":"https://x.com/drb_ra/status/1958606470662045801","timestamp":"1755803146","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d7210cde-ae9d-5aaf-a593-c1283f31936a","type":"url","category":"Network activity","to_ids":true,"value":"http://212.47.239.191:587","comment":"https://x.com/drb_ra/status/1958606610445869534","timestamp":"1755803179","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"645c4d5c-6285-57f1-9e00-538a75a232a8","type":"url","category":"Network activity","to_ids":true,"value":"http://212.47.239.191:80","comment":"https://x.com/drb_ra/status/1958606748576579726","timestamp":"1755803212","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"516314fd-e9ba-5d20-83a5-09581325afe8","type":"url","category":"Network activity","to_ids":true,"value":"http://212.47.239.191:25","comment":"https://x.com/drb_ra/status/1958606888020713741","timestamp":"1755803245","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"788d92b6-402f-577f-ac89-5b6b70ed2afa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.47.239.191","comment":"https://x.com/drb_ra/status/1958606888020713741","timestamp":"1755803245","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3565fe68-7f26-5f96-acb1-9e8591e22be3","type":"domain","category":"Network activity","to_ids":true,"value":"cf.1v5sd1c2ds.com","comment":"https://x.com/drb_ra/status/1958619202362708387","timestamp":"1755806181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c8ebb4c-f458-5e44-a6cb-b050a9c0db5e","type":"url","category":"Network activity","to_ids":true,"value":"https://cf.1v5sd1c2ds.com/fwlink","comment":"https://x.com/drb_ra/status/1958619202362708387","timestamp":"1755806181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e594e700-faaa-5fa8-afd4-b1da0b256747","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:2087","comment":"https://x.com/drb_ra/status/1958619202362708387","timestamp":"1755806181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0a2cd03b-f4ae-5a71-a70b-429ddc747c35","type":"domain","category":"Network activity","to_ids":true,"value":"prdelb.sgsrmy.org","comment":"https://x.com/drb_ra/status/1958619848990220388","timestamp":"1755806336","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cbbf32bc-7fb4-507e-bae7-bf8aece8ec5f","type":"url","category":"Network activity","to_ids":true,"value":"https://prdelb.sgsrmy.org/jquery.com/","comment":"https://x.com/drb_ra/status/1958619848990220388","timestamp":"1755806336","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d0a74ba0-7936-5745-8dac-7af3e5c8b977","type":"url","category":"Network activity","to_ids":true,"value":"http://74.48.75.59:443","comment":"https://x.com/drb_ra/status/1958619848990220388","timestamp":"1755806336","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9f4977dc-55a2-51bd-a7b2-a4f2748a572d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.48.75.59","comment":"https://x.com/drb_ra/status/1958619848990220388","timestamp":"1755806336","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"24b6e99b-2941-5f93-8bcc-e0e0586a7bb1","type":"domain","category":"Network activity","to_ids":true,"value":"cf.testcs888.com","comment":"https://x.com/drb_ra/status/1958619988350132357","timestamp":"1755806369","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e7c1b69-cda2-537d-bc75-590a16ee7078","type":"url","category":"Network activity","to_ids":true,"value":"https://cf.testcs888.com/cm","comment":"https://x.com/drb_ra/status/1958619988350132357","timestamp":"1755806369","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ebe394c0-ad79-5b96-8fdb-149dfe4254ca","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:8443","comment":"https://x.com/drb_ra/status/1958619988350132357","timestamp":"1755806369","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a30ffc10-37b4-5f7f-8f3b-9e23a904b05b","type":"domain","category":"Network activity","to_ids":true,"value":"awsapi.xyz","comment":"https://x.com/drb_ra/status/1958620128456949992","timestamp":"1755806402","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5a893a6a-5258-5d82-9d14-fd3d57dba50d","type":"url","category":"Network activity","to_ids":true,"value":"https://awsapi.xyz/load","comment":"https://x.com/drb_ra/status/1958620128456949992","timestamp":"1755806402","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8573c8b4-4dd0-53ef-b41c-b806e1739db9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.8.48.87:443","comment":"https://x.com/drb_ra/status/1958620128456949992","timestamp":"1755806402","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5aaf78f3-600e-5231-ac55-c3f79db48d7e","type":"domain","category":"Network activity","to_ids":true,"value":"foundersffcu.weebly.com","comment":"https://x.com/urldna_bot/status/1958620149524644143","timestamp":"1755806407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"db0f1e64-a4a6-5a21-b348-eda22b181b4f","type":"url","category":"Network activity","to_ids":true,"value":"https://foundersffcu.weebly.com","comment":"https://x.com/urldna_bot/status/1958620149524644143","timestamp":"1755806407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"76c8cf54-9c0c-58c4-b4e1-5ef77139ec30","type":"url","category":"Network activity","to_ids":true,"value":"http://94.99.103.174","comment":"https://x.com/FalconFeedsio/status/1958634926649352469","timestamp":"1755809930","distribution":"5"},{"uuid":"df6f03ca-1520-5e92-ae13-75d0a499f08b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.99.103.174","comment":"https://x.com/FalconFeedsio/status/1958634926649352469","timestamp":"1755809930","distribution":"5"},{"uuid":"9dc23699-5464-532b-94e2-07b611407644","type":"url","category":"Network activity","to_ids":true,"value":"http://85.236.49.84","comment":"https://x.com/threatquery/status/1958635232644493436","timestamp":"1755810003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"eb869875-39c5-5f33-aa95-0dfdf65d10f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.236.49.84","comment":"https://x.com/threatquery/status/1958635232644493436","timestamp":"1755810003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"021fc479-0485-5e57-8e30-60f78a8a3263","type":"url","category":"Network activity","to_ids":true,"value":"http://43.226.17.43","comment":"https://x.com/threatquery/status/1958635235903525331","timestamp":"1755810004","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"malware"},{"name":"C2"}]},{"uuid":"dad69ff1-7caa-5278-b99c-b093e9755f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.226.17.43","comment":"https://x.com/threatquery/status/1958635235903525331","timestamp":"1755810004","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"malware"},{"name":"C2"}]},{"uuid":"83430b9f-63e5-5623-9a09-d4db2beaa1aa","type":"url","category":"Network activity","to_ids":true,"value":"http://15.152.50.124","comment":"https://x.com/threatquery/status/1958635234271871051","timestamp":"1755810004","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"malware"},{"name":"C2"}]},{"uuid":"c592f8b3-daa4-55e8-8c12-0e085d363e82","type":"domain","category":"Network activity","to_ids":true,"value":"iheartredteams.com","comment":"https://x.com/drb_ra/status/1958636506459119650","timestamp":"1755810307","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3e54b1c-fa1b-5a5e-8eb7-b9888558885d","type":"url","category":"Network activity","to_ids":true,"value":"https://iheartredteams.com/g.pixel","comment":"https://x.com/drb_ra/status/1958636506459119650","timestamp":"1755810307","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"25fbdc57-2a2f-598e-9bbc-e7e81c3cd0cf","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:80","comment":"https://x.com/drb_ra/status/1958636506459119650","timestamp":"1755810307","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3cd14d64-bdc4-594b-8a46-6c645684ea81","type":"domain","category":"Network activity","to_ids":true,"value":"eller.de","comment":"https://x.com/RedPacketSec/status/1958638637765083384","timestamp":"1755810815","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"63ddcef7-4f9f-5c80-81bd-4a35ef366a80","type":"url","category":"Network activity","to_ids":true,"value":"http://eller.de","comment":"https://x.com/RedPacketSec/status/1958638637765083384","timestamp":"1755810815","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f6988950-0064-5db5-8a37-de273fe2e54a","type":"domain","category":"Network activity","to_ids":true,"value":"capitalonelogin1.weebly.com","comment":"https://x.com/urldna_bot/status/1958650360500748769","timestamp":"1755813610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"85abefc1-0c9c-5f22-8577-7ea7df29c6b3","type":"url","category":"Network activity","to_ids":true,"value":"https://capitalonelogin1.weebly.com","comment":"https://x.com/urldna_bot/status/1958650360500748769","timestamp":"1755813610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"adf675e3-1a7f-51bf-ae42-df495df4c07a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.16.109.234","comment":"https://x.com/FalconFeedsio/status/1958656359425351756","timestamp":"1755815040","distribution":"5"},{"uuid":"045b2918-bc59-5a63-a938-3bd6488e6513","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.224.169.251","comment":"https://x.com/FalconFeedsio/status/1958656359425351756","timestamp":"1755815040","distribution":"5"},{"uuid":"f2dfbe35-9b7b-5300-877f-7768d1c1c511","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.80.137.36","comment":"https://x.com/FalconFeedsio/status/1958656359425351756","timestamp":"1755815040","distribution":"5"},{"uuid":"2e91ba6b-5e28-531f-acff-ead628a3a69a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.17.226.115","comment":"https://x.com/FalconFeedsio/status/1958656359425351756","timestamp":"1755815040","distribution":"5"},{"uuid":"7d59fa75-ab76-5a02-8eda-32e9b2612aa3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.137.70","comment":"https://x.com/FalconFeedsio/status/1958656359425351756","timestamp":"1755815040","distribution":"5"},{"uuid":"d4cd76ca-9c6e-571c-8363-524a926f23b1","type":"domain","category":"Network activity","to_ids":true,"value":"liscoo.weebly.com","comment":"https://x.com/urldna_bot/status/1958680550492774689","timestamp":"1755820808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d1457c98-2ee5-5a68-a4d9-f01e17f564ce","type":"url","category":"Network activity","to_ids":true,"value":"https://liscoo.weebly.com","comment":"https://x.com/urldna_bot/status/1958680550492774689","timestamp":"1755820808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"12df1d23-7570-5f2c-bc9a-28a607594c7f","type":"url","category":"Network activity","to_ids":true,"value":"https://omnibustax.com/jabank/Phone/Verifyidentity","comment":"https://x.com/romonlyht/status/1958692443068780597","timestamp":"1755823643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6a3c4a7-e602-59e2-99dd-e9db93f6fbbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.85.210.65","comment":"https://x.com/romonlyht/status/1958692443068780597","timestamp":"1755823643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/romonlyht/status/1958692443068780597","timestamp":"1755823643","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe8d4f02-b892-5488-bc4a-45e08d4dc1df","type":"domain","category":"Network activity","to_ids":true,"value":"omnibustax.com","comment":"https://x.com/romonlyht/status/1958692445413413058","timestamp":"1755823644","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0670c59-6e8e-5101-90a0-8d25126c18d0","type":"url","category":"Network activity","to_ids":true,"value":"https://omnibustax.com/jabank/Phone/Verifyidentity/","comment":"https://x.com/romonlyht/status/1958692445413413058","timestamp":"1755823644","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68def3ba-9633-5e91-8479-ca33a5c42cdb","type":"domain","category":"Network activity","to_ids":true,"value":"peane-ja.com","comment":"https://x.com/romonlyht/status/1958692445413413058","timestamp":"1755823644","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0015089b-39d9-53a0-8a8c-ea50c15914f2","type":"url","category":"Network activity","to_ids":true,"value":"https://peane-ja.com/ibclient/select","comment":"https://x.com/romonlyht/status/1958692445413413058","timestamp":"1755823644","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d1fa5a0-3e74-5cb1-9498-f9ddb77bf14d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.235","comment":"https://x.com/romonlyht/status/1958692445413413058","timestamp":"1755823644","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df328ac9-d68e-56a0-b88b-0692d43770b7","type":"domain","category":"Network activity","to_ids":true,"value":"click.sleadtrack.com","comment":"https://x.com/romonlyht/status/1958697916882985467","timestamp":"1755824948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e3c9ca10-75e2-5fba-a581-724fa7d1cb0b","type":"url","category":"Network activity","to_ids":true,"value":"https://click.sleadtrack.com/link?messageId=%3Cd0db8b27-485a-sl83-431a-a7e5-6703066ae196@priorityleadseo.com%3E&url=","comment":"https://x.com/romonlyht/status/1958697916882985467","timestamp":"1755824948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"366a07d9-7b64-5654-adff-ea30e4a84a51","type":"ip-dst","category":"Network activity","to_ids":true,"value":"177.47.177.26","comment":"https://x.com/romonlyht/status/1958697916882985467","timestamp":"1755824948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c33f500f-ee18-5c71-aca2-ed6cfc187bee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.79.8.101","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c65aa686-fbaa-59aa-a44a-36c4a377d8c9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.221.216.119","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ca87b79-5cc9-59c1-ae99-4b22f8d839c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.250.229.31","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"afffdbc7-174e-5d1b-8317-0195da0ed40f","type":"url","category":"Network activity","to_ids":true,"value":"https://ovhc.petrabhdf.org","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f3fe720-be79-5146-a753-a7e1e4fed240","type":"domain","category":"Network activity","to_ids":true,"value":"purewatersp.com","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e91d0e9-3096-52a7-99da-2dc3ac7b5df1","type":"url","category":"Network activity","to_ids":true,"value":"https://purewatersp.com/var/","comment":"https://x.com/romonlyht/status/1958697919860625613","timestamp":"1755824949","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"18692bb3-353d-5d0b-bc6c-7e8e93c70ab2","type":"domain","category":"Network activity","to_ids":true,"value":"ovhc.petrabhdf.org","comment":"https://x.com/romonlyht/status/1958697923396719082","timestamp":"1755824950","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e7e39fad-2ad9-5f42-8341-6f4f6e9ee8b1","type":"url","category":"Network activity","to_ids":true,"value":"https://ovhc.petrabhdf.org/rcb.php","comment":"https://x.com/romonlyht/status/1958697923396719082","timestamp":"1755824950","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"214dd818-3dfa-5bb5-8805-793403c65e7c","type":"domain","category":"Network activity","to_ids":true,"value":"executive.vxwenjq.cn","comment":"https://x.com/Metemcyber/status/1958698540089450739","timestamp":"1755825097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3034b52c-00a2-54c9-a712-88a4a28f0e60","type":"url","category":"Network activity","to_ids":true,"value":"https://executive.vxwenjq.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/Metemcyber/status/1958698540089450739","timestamp":"1755825097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba093281-1b8e-51ca-9713-f3ebe55b26a2","type":"domain","category":"Network activity","to_ids":true,"value":"arguear.eiwennf.cn","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f45311b-bdb6-52b1-bac8-b5502e911846","type":"url","category":"Network activity","to_ids":true,"value":"https://arguear.eiwennf.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/Metemcyber/status/1958700534325445080","timestamp":"1755825572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9268ec60-7310-5e39-a6bf-0e87d75e1281","type":"url","category":"Network activity","to_ids":true,"value":"https://www-n-h-k-p-u-l-s-japansevip1.xuxubaobei.love/Upgrade/puls","comment":"https://x.com/romonlyht/status/1958700973154849001","timestamp":"1755825677","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4973a9c-d317-5937-9ca8-597903299e72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.129.207","comment":"https://x.com/romonlyht/status/1958700973154849001","timestamp":"1755825677","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a9fe244-2234-5350-9a5a-a4aee4bff3d7","type":"domain","category":"Network activity","to_ids":true,"value":"www-n-h-k-p-u-l-s-japansevip1.xuxubaobei.love","comment":"https://x.com/romonlyht/status/1958700976317005879","timestamp":"1755825678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cf80cb3-c5bb-5a4e-a3e9-f9ca97f2cf0a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-n-h-k-p-u-l-s-japansevip1.xuxubaobei.love/Upgrade/puls/","comment":"https://x.com/romonlyht/status/1958700976317005879","timestamp":"1755825678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e4293e4-1c87-5d5f-b0bd-69e8442ffdad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.129.204","comment":"https://x.com/romonlyht/status/1958701308472697222","timestamp":"1755825757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4856586c-3833-5f14-9d99-e9e1fc3d921d","type":"url","category":"Network activity","to_ids":true,"value":"https://www-n-h-k-p-u-l-s-japansevip1.purebloomf.fun/Upgrade/puls","comment":"https://x.com/romonlyht/status/1958701308472697222","timestamp":"1755825757","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2faafc27-40a8-5810-ae28-9356b25d415d","type":"domain","category":"Network activity","to_ids":true,"value":"www-n-h-k-p-u-l-s-japansevip1.purebloomf.fun","comment":"https://x.com/romonlyht/status/1958701312163578230","timestamp":"1755825758","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b77af855-fad2-5b9e-9b8f-f5780070a953","type":"url","category":"Network activity","to_ids":true,"value":"https://www-n-h-k-p-u-l-s-japansevip1.purebloomf.fun/Upgrade/puls/","comment":"https://x.com/romonlyht/status/1958701312163578230","timestamp":"1755825758","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af5b8ecc-4d18-5d4d-bcaf-4e7ffc982f78","type":"url","category":"Network activity","to_ids":true,"value":"https://sorsgas.kfwenip.cn/first_jalsuica-default/","comment":"https://x.com/Metemcyber/status/1958703677759529063","timestamp":"1755826322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f473ecd1-bc39-5db1-b02a-d89dabea548d","type":"domain","category":"Network activity","to_ids":true,"value":"sorsgas.kfwenip.cn","comment":"https://x.com/Metemcyber/status/1958703677759529063","timestamp":"1755826322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a39f168-cdb4-5fd5-8547-eaf8f33b29ea","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.201.66","comment":"https://x.com/Metemcyber/status/1958703677759529063","timestamp":"1755826322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e18e8ed4-0b1d-53a9-a964-95f3bbf1315a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.76.216","comment":"https://x.com/Metemcyber/status/1958703677759529063","timestamp":"1755826322","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c8f3af1-2c49-5831-8601-67cc6d008393","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.75.148","comment":"https://x.com/romonlyht/status/1958704711714095233","timestamp":"1755826568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a92582ba-69e2-5552-b100-5c921542cc43","type":"domain","category":"Network activity","to_ids":true,"value":"jump.ib-ps.com","comment":"https://x.com/romonlyht/status/1958704711714095233","timestamp":"1755826568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3d4e944-13fc-5ba6-9755-351626acff7d","type":"url","category":"Network activity","to_ids":true,"value":"https://jump.ib-ps.com/zqFo8J?amzon.co.jp/up_date","comment":"https://x.com/romonlyht/status/1958704711714095233","timestamp":"1755826568","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9180eb00-ffc7-5f45-bc75-b42f7d1a12dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.95.165","comment":"https://x.com/romonlyht/status/1958704714658587006","timestamp":"1755826569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e146388f-4050-5f39-bb74-a8109e58335b","type":"url","category":"Network activity","to_ids":true,"value":"https://www.etc-meisai.jp.cedarcreektibetans.com/etc_update/","comment":"https://x.com/romonlyht/status/1958704714658587006","timestamp":"1755826569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"85869788-9375-54ea-98af-adb46d9239ef","type":"domain","category":"Network activity","to_ids":true,"value":"etc-meisai.jp.cedarcreektibetans.com","comment":"https://x.com/romonlyht/status/1958704714658587006","timestamp":"1755826569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4de32e4c-d8f4-5793-92fa-c0a1eb556a99","type":"url","category":"Network activity","to_ids":true,"value":"https://www.etc-meisai.jp.cedarcreektibetans.com/etc_update","comment":"https://x.com/romonlyht/status/1958704714658587006","timestamp":"1755826569","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cfb771e8-6854-5c44-b1a6-c3593c1d42aa","type":"domain","category":"Network activity","to_ids":true,"value":"qoqzd.com","comment":"https://x.com/romonlyht/status/1958709856040624302","timestamp":"1755827795","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60cfaa62-e17f-5ccf-b7de-6084ee832a43","type":"url","category":"Network activity","to_ids":true,"value":"https://qoqzd.com/jp","comment":"https://x.com/romonlyht/status/1958709856040624302","timestamp":"1755827795","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6614fc4-da8b-5cd7-a51f-777bf0cac9fc","type":"url","category":"Network activity","to_ids":true,"value":"https://qoqzd.com/jp/","comment":"https://x.com/romonlyht/status/1958709856040624302","timestamp":"1755827795","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"048719ec-f7cd-58bc-a68c-b13857f0d2f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.116.113","comment":"https://x.com/romonlyht/status/1958709856040624302","timestamp":"1755827795","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c38a32f3-65c3-5094-b043-e792a8cbaf7a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.lyndaslovelace.com/Login/","comment":"https://x.com/romonlyht/status/1958709882426990795","timestamp":"1755827801","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"919c02de-00d5-57fe-b3a6-66e3aadaa8c4","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.lyndaslovelace.com","comment":"https://x.com/romonlyht/status/1958709882426990795","timestamp":"1755827801","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c0b82256-09cb-5d0b-a015-cd0093000077","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.lyndaslovelace.com/Login","comment":"https://x.com/romonlyht/status/1958709882426990795","timestamp":"1755827801","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34e7d0b7-45ce-53c3-9cbb-2cb2802f7712","type":"url","category":"Network activity","to_ids":true,"value":"https://jrautoo.com/jp","comment":"https://x.com/romonlyht/status/1958710319507022084","timestamp":"1755827905","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cf6c8dc-1274-51cf-bc0f-49dbc18fa744","type":"url","category":"Network activity","to_ids":true,"value":"https://jrautoo.com/jp/","comment":"https://x.com/romonlyht/status/1958710319507022084","timestamp":"1755827905","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"426b1e6c-4668-5858-b543-2a5c4fbb4600","type":"domain","category":"Network activity","to_ids":true,"value":"jrautoo.com","comment":"https://x.com/romonlyht/status/1958710319507022084","timestamp":"1755827905","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a0d8ab4-bb8b-5547-b4ad-a6936ac5a2a7","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.tdcnctool.com/Login/","comment":"https://x.com/romonlyht/status/1958710323009265996","timestamp":"1755827906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4702aef-bd8d-5f43-8e17-b3a76ae6ec40","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.tdcnctool.com/Login","comment":"https://x.com/romonlyht/status/1958710323009265996","timestamp":"1755827906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15436170-c739-5b98-98e1-26b3941ddff8","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.tdcnctool.com","comment":"https://x.com/romonlyht/status/1958710323009265996","timestamp":"1755827906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6b05d2e2-cdf2-5ce8-9dac-c23199819438","type":"url","category":"Network activity","to_ids":true,"value":"https://bbbbbtttteeelllwebm.weebly.com","comment":"https://x.com/urldna_bot/status/1958710744729419960","timestamp":"1755828007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"559c9384-3c04-508f-9a75-945f1a4cd1f1","type":"domain","category":"Network activity","to_ids":true,"value":"bbbbbtttteeelllwebm.weebly.com","comment":"https://x.com/urldna_bot/status/1958710744729419960","timestamp":"1755828007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7e094afb-c8a2-5017-a6cb-7a1253b68ce1","type":"domain","category":"Network activity","to_ids":true,"value":"globalgifs.com","comment":"https://x.com/romonlyht/status/1958717433755443322","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3278b447-be80-50f7-8be2-bbca53efed55","type":"url","category":"Network activity","to_ids":true,"value":"https://globalgifs.com/jp/","comment":"https://x.com/romonlyht/status/1958717433755443322","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"deee5fdf-8d41-5624-968d-929dd125028c","type":"url","category":"Network activity","to_ids":true,"value":"https://globalgifs.com/jp","comment":"https://x.com/romonlyht/status/1958717433755443322","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62395f66-5324-5f0f-82e9-5619b21fa8b6","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.biush.com/ETGate","comment":"https://x.com/romonlyht/status/1958717435852595389","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"047c90ee-438e-57b5-aa4e-ee43c2d94a42","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.biush.com/ETGate/","comment":"https://x.com/romonlyht/status/1958717435852595389","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea2a812a-c867-5e40-88ef-def43c987b3b","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.biush.com","comment":"https://x.com/romonlyht/status/1958717435852595389","timestamp":"1755829602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb56475f-c9de-5338-af35-97ee60656eae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.189.99.252","comment":"https://x.com/romonlyht/status/1958717662219182270","timestamp":"1755829656","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c379aef-911b-5d56-aaf7-ea87e038cbcf","type":"domain","category":"Network activity","to_ids":true,"value":"n4epuu.top","comment":"https://x.com/romonlyht/status/1958717662219182270","timestamp":"1755829656","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"da2155c5-3099-5396-b1d5-bae1ed765aab","type":"url","category":"Network activity","to_ids":true,"value":"https://n4epuu.top/DyIBDPO9HV/login&getFlg=on","comment":"https://x.com/romonlyht/status/1958717662219182270","timestamp":"1755829656","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1077d073-d456-562b-8c74-3c0fabadb417","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.kingcue.com","comment":"https://x.com/romonlyht/status/1958718154676609458","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fe87e699-aa02-5a0d-89b7-c5a863b0893a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.kingcue.com/ETGate","comment":"https://x.com/romonlyht/status/1958718154676609458","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"613731a3-4218-5b64-a34f-0c811597ac20","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.kingcue.com/ETGate/","comment":"https://x.com/romonlyht/status/1958718154676609458","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb28c5a4-70ec-585b-8933-436c2076625c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.194.94","comment":"https://x.com/romonlyht/status/1958718152764006413","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc36d395-7c38-5b63-9dcd-4bb630d23a46","type":"url","category":"Network activity","to_ids":true,"value":"https://buerjiaju.com/jp/","comment":"https://x.com/romonlyht/status/1958718152764006413","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14c7e398-7874-5b46-b6a5-2673aad38bcb","type":"url","category":"Network activity","to_ids":true,"value":"https://buerjiaju.com/jp","comment":"https://x.com/romonlyht/status/1958718152764006413","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e422f07c-9255-51d0-9e65-d3e949bd0b7e","type":"domain","category":"Network activity","to_ids":true,"value":"buerjiaju.com","comment":"https://x.com/romonlyht/status/1958718152764006413","timestamp":"1755829773","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fa6ddca4-2eff-5f2d-b394-fdb845cc1e54","type":"url","category":"Network activity","to_ids":true,"value":"https://xde3py.top/DyIBDPO9HV/login&getFlg=on","comment":"https://x.com/romonlyht/status/1958718402023104655","timestamp":"1755829832","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e81bf0d4-ed96-574c-a3d0-736a8b1be60b","type":"domain","category":"Network activity","to_ids":true,"value":"xde3py.top","comment":"https://x.com/romonlyht/status/1958718402023104655","timestamp":"1755829832","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2adc2fb4-fd3b-5c49-88ad-8bdf08588294","type":"ip-dst","category":"Network activity","to_ids":true,"value":"41.150.226.89","comment":"https://x.com/romonlyht/status/1958718402023104655","timestamp":"1755829832","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9faf9fdc-091a-5151-b3c0-aecd96a31f9e","type":"url","category":"Network activity","to_ids":true,"value":"https://smart-ex.jp.chopschurch.com/smart_ex","comment":"https://x.com/romonlyht/status/1958722313589076128","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75917daf-a10e-5ca5-bb0b-d71d9ea3541a","type":"domain","category":"Network activity","to_ids":true,"value":"smart-ex.jp.chopschurch.com","comment":"https://x.com/romonlyht/status/1958722313589076128","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b1ac334-551e-5079-a706-24dbcd74f8d2","type":"url","category":"Network activity","to_ids":true,"value":"https://smart-ex.jp.chopschurch.com/smart_ex/","comment":"https://x.com/romonlyht/status/1958722313589076128","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7406e50-5c72-57ac-a811-fa0c8b9b9c94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.200.57.164","comment":"https://x.com/romonlyht/status/1958722311743488503","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9db7de42-6acc-551f-8e39-0f87f2e277ec","type":"url","category":"Network activity","to_ids":true,"value":"https://jump.sfmosaic.com/8Sw92z?smart-ex.jp/up_date","comment":"https://x.com/romonlyht/status/1958722311743488503","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9f825d3-f0f0-5df7-a4fb-859c08a45361","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.243.125.37","comment":"https://x.com/romonlyht/status/1958722311743488503","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2993dc29-bf60-5a98-9d16-3ae527cd4fc9","type":"domain","category":"Network activity","to_ids":true,"value":"jump.sfmosaic.com","comment":"https://x.com/romonlyht/status/1958722311743488503","timestamp":"1755830765","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31f44dc9-dfd7-5d65-9c53-fe216c8eddb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.180.199","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fea15d21-38f3-5fe0-8c63-64c963e69cbf","type":"domain","category":"Network activity","to_ids":true,"value":"13153.asia","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e99c23b0-8096-533e-9788-3bb3fa90d5b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.103.88.43","comment":"https://x.com/romonlyht/status/1958726708519215468","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f20a184-dbf7-5b8d-921d-87a8b891f179","type":"url","category":"Network activity","to_ids":true,"value":"http://2Fdocomo.co.jp@ravyh.213mu.com","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bae2a94-864f-575a-94dc-5399862158bc","type":"url","category":"Network activity","to_ids":true,"value":"https://yy9oomb2.asia/iboss/","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e32fd0ea-1867-5bc9-9cc4-f80f51efb31b","type":"url","category":"Network activity","to_ids":true,"value":"https://13153.asia/NOA7J2A/","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7bf0158c-881a-5f92-ae9e-0904178770c8","type":"domain","category":"Network activity","to_ids":true,"value":"yy9oomb2.asia","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ecd539a-aa0d-537b-840b-6b35b57ae9fb","type":"domain","category":"Network activity","to_ids":true,"value":"2Fdocomo.co.jp@ravyh.213mu.com","comment":"https://x.com/romonlyht/status/1958726710503121062","timestamp":"1755831813","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d424b92-948e-5524-99cd-c17286492b20","type":"url","category":"Network activity","to_ids":true,"value":"http://193.161.193.99:24727","comment":"https://x.com/FalconFeedsio/status/1958732002037047317","timestamp":"1755833075","distribution":"5"},{"uuid":"ce978c84-43c3-5f99-ae4b-28b9ea2485e6","type":"url","category":"Network activity","to_ids":true,"value":"http://171.250.184.154:9999","comment":"https://x.com/FalconFeedsio/status/1958732002037047317","timestamp":"1755833075","distribution":"5"},{"uuid":"0cf5e635-9c5d-598d-a92f-34f66a5d5ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.161.193.99","comment":"https://x.com/FalconFeedsio/status/1958732002037047317","timestamp":"1755833075","distribution":"5"},{"uuid":"a86a909e-8944-5095-835c-bc9538877602","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.142.138.179","comment":"https://x.com/FalconFeedsio/status/1958732002037047317","timestamp":"1755833075","distribution":"5"},{"uuid":"704b891a-37ed-548a-a02d-5f5dfcb1c4bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.250.184.154","comment":"https://x.com/FalconFeedsio/status/1958732002037047317","timestamp":"1755833075","distribution":"5"},{"uuid":"972baf5c-83ba-56b2-b3f7-4111ebb02283","type":"domain","category":"Network activity","to_ids":true,"value":"aeon.aklhgo.com","comment":"https://x.com/romonlyht/status/1958733247229419553","timestamp":"1755833372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"abf71302-8679-5431-8897-83897b816345","type":"url","category":"Network activity","to_ids":true,"value":"https://aeon.aklhgo.com/aeoncojp/","comment":"https://x.com/romonlyht/status/1958733247229419553","timestamp":"1755833372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"292cbfbb-c1e7-5aa0-b56b-2bcbc3693818","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.103.231.40","comment":"https://x.com/romonlyht/status/1958733247229419553","timestamp":"1755833372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eaa47bbd-e224-571b-843a-31661bb4a6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.130.243.180","comment":"https://x.com/romonlyht/status/1958733247229419553","timestamp":"1755833372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"481c7fb2-a548-5173-ba23-5b0acbaa846b","type":"url","category":"Network activity","to_ids":true,"value":"http://59.93.74.219:34836","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"512531eb-f869-5f68-b378-b2c72ad2ef8a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.60.226.102:8575","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"c6e70509-617e-5140-ac47-29c0ffcd464b","type":"url","category":"Network activity","to_ids":true,"value":"http://117.212.50.193:36968","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"97f1c05d-8581-58f5-987d-ac014ee0e99c","type":"url","category":"Network activity","to_ids":true,"value":"http://13.126.17.42","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"a19c68db-6613-5075-a7e6-7d19254d97da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.212.50.193","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"6321c5bc-a1da-58bd-b4d2-5afb6f6a5fd3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.93.74.219","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"5393a79e-5f35-5bed-baf6-b44dc9405b6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.60.226.102","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"1763d905-6f58-594c-a237-b9b08bf8654e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.126.17.42","comment":"https://x.com/FalconFeedsio/status/1958738494970634708","timestamp":"1755834623","distribution":"5"},{"uuid":"24e5e2af-6d8c-598a-9cc1-febde7d62633","type":"domain","category":"Network activity","to_ids":true,"value":"secure-pioneerbandt-acc.weebly.com","comment":"https://x.com/urldna_bot/status/1958740944963903823","timestamp":"1755835207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6e9e6c94-06fd-5f33-bbd5-18f0fca70a8b","type":"url","category":"Network activity","to_ids":true,"value":"https://secure-pioneerbandt-acc.weebly.com","comment":"https://x.com/urldna_bot/status/1958740944963903823","timestamp":"1755835207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aa14036d-cc07-556e-87e0-563f0a6d9b2a","type":"md5","category":"Payload delivery","to_ids":true,"value":"5ab23ac79ede02166d6f5013d89738f9","comment":"https://x.com/skocherhan/status/1958752179168121245","timestamp":"1755837886","distribution":"5"},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/skocherhan/status/1958752179168121245","timestamp":"1755837886","distribution":"5"},{"uuid":"56328658-f4ef-590c-a099-09efe563d95b","type":"md5","category":"Payload delivery","to_ids":true,"value":"e0b465d3bd1ec5e95aee016951d55640","comment":"https://x.com/skocherhan/status/1958752179168121245","timestamp":"1755837886","distribution":"5"},{"uuid":"d5a2b9ee-599e-57ad-bea6-14681231707c","type":"url","category":"Network activity","to_ids":true,"value":"http://Huy1612-24727.portmap.io:24727","comment":"https://x.com/skocherhan/status/1958752179168121245","timestamp":"1755837886","distribution":"5"},{"uuid":"dabb5fac-8451-542d-b895-85b80481e44d","type":"domain","category":"Network activity","to_ids":true,"value":"Huy1612-24727.portmap.io:24727","comment":"https://x.com/skocherhan/status/1958752179168121245","timestamp":"1755837886","distribution":"5"},{"uuid":"d113e663-9f2e-5c4f-a95f-b4fa90b5b8f4","type":"md5","category":"Payload delivery","to_ids":true,"value":"4551f21640eb726886b9805001fc30f6","comment":"https://x.com/suyog41/status/1958766748804817302","timestamp":"1755841359","distribution":"5"},{"uuid":"fcdc3928-7095-55cb-8ce3-77607759234e","type":"md5","category":"Payload delivery","to_ids":true,"value":"64a1bd59ca5a7bae2e69e8ad581de9ea","comment":"https://x.com/suyog41/status/1958766748804817302","timestamp":"1755841359","distribution":"5"},{"uuid":"cf1b7ddb-ee48-589d-826f-34f88af58b45","type":"domain","category":"Network activity","to_ids":true,"value":"nomination.army-bd.com","comment":"https://x.com/suyog41/status/1958766748804817302","timestamp":"1755841359","distribution":"5"},{"uuid":"86af6883-9a00-5323-8d63-bd69f9f359bd","type":"md5","category":"Payload delivery","to_ids":true,"value":"b2dc34dd4aeafb2490712983cfca75ff","comment":"https://x.com/suyog41/status/1958766748804817302","timestamp":"1755841359","distribution":"5"},{"uuid":"e49905be-2801-55c5-9b7d-ce982f42eee6","type":"url","category":"Network activity","to_ids":true,"value":"http://nomination.army-bd.com","comment":"https://x.com/suyog41/status/1958766748804817302","timestamp":"1755841359","distribution":"5"},{"uuid":"2e3d2b0e-d9f6-5a97-9253-1a0b02e86161","type":"md5","category":"Payload delivery","to_ids":true,"value":"8a6c3dcb4d392e1dc7a6be540baedf26","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"416b5e07-4577-5319-9836-2785f3f1c29c","type":"md5","category":"Payload delivery","to_ids":true,"value":"f9314b1521ce9d31bc35971bff5c71b4","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"20e35860-d6cd-500e-945e-efd7d4e0b1ae","type":"md5","category":"Payload delivery","to_ids":true,"value":"793df792e93eaa15f7e516d7b971dd57","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"617f84c3-65ec-5b97-b4a9-0a42f08971bd","type":"md5","category":"Payload delivery","to_ids":true,"value":"117a1da0428c460b50259e9ed2ce96ee","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"4453acea-53e0-598e-8ac9-9731b22305e3","type":"md5","category":"Payload delivery","to_ids":true,"value":"1ed3ab2742d5f04e1f0feb28a049835b","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"7055d6ec-2371-5b67-8615-18e302f470d0","type":"md5","category":"Payload delivery","to_ids":true,"value":"37c8f5bde4564be6991e534f3dcdf9d0","comment":"https://x.com/suyog41/status/1958771082670088568","timestamp":"1755842392","distribution":"5"},{"uuid":"1fff498b-6b2a-50b0-b264-54e8b3ead44d","type":"domain","category":"Network activity","to_ids":true,"value":"pusat-bantuan-dana-9v1d.vercel.app","comment":"https://x.com/urldna_bot/status/1958771157391245499","timestamp":"1755842410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c896fa37-6889-5450-be68-2eff9f8e3d91","type":"url","category":"Network activity","to_ids":true,"value":"https://pusat-bantuan-dana-9v1d.vercel.app","comment":"https://x.com/urldna_bot/status/1958771157391245499","timestamp":"1755842410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6b59c607-3035-5216-9d66-0317c5912780","type":"domain","category":"Network activity","to_ids":true,"value":"adipence.pjwenmh.cn","comment":"https://x.com/Metemcyber/status/1958774260966858913","timestamp":"1755843150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6dd29d1e-7ad5-50e7-942a-982967a366db","type":"url","category":"Network activity","to_ids":true,"value":"https://adipence.pjwenmh.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/Metemcyber/status/1958774260966858913","timestamp":"1755843150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1924def4-e3de-5b47-b035-f5c63210f92c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.195.176","comment":"https://x.com/Metemcyber/status/1958774260966858913","timestamp":"1755843150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"084227bf-4a82-5177-aba9-984702d17a37","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.92.162","comment":"https://x.com/Metemcyber/status/1958774260966858913","timestamp":"1755843150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0fd73567-6aed-5349-84e9-e4a3c4023dd7","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.136.183","comment":"https://x.com/Metemcyber/status/1958777196157571556","timestamp":"1755843850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c5c6d739-9827-5d11-8b84-3e0cd2cacb1e","type":"url","category":"Network activity","to_ids":true,"value":"https://etc-very.vzypme.cn/Rfuncc1013000extfunc/","comment":"https://x.com/Metemcyber/status/1958777196157571556","timestamp":"1755843850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6eb7f03-57a8-526b-b5c2-8fdfb01ebbcd","type":"domain","category":"Network activity","to_ids":true,"value":"etc-very.vzypme.cn","comment":"https://x.com/Metemcyber/status/1958777196157571556","timestamp":"1755843850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"297f4e86-180a-5de8-9385-05a2b804692e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.62.151","comment":"https://x.com/Metemcyber/status/1958777196157571556","timestamp":"1755843850","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a218711-d205-531e-97ec-08f41fb086fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.203.48.142","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"78c2aaec-f0a9-5997-b939-869c062d3f02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.241.72.84","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"05054b78-35b2-5d91-9e91-e783b2e1ee08","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.118.251.202","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"920d5b3d-8ad4-55b6-97bd-a589bdf85882","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.118.251.242","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"c7e4e554-cb52-5767-8de0-180c86cff0f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.163.208.156","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"8b9f842f-3d47-5090-9064-1562e397d26e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.203.48.150","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"d52b47fa-0532-5e53-9468-45adc55c3dc4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.118.251.222","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"f43d2315-0da0-5c8a-a254-8e012e3d5b25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.68.9.150","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"c87c358e-510c-54a7-b4f0-770621a8e36f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.118.251.206","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"6609b7c9-68de-5e7a-bd7c-64da378f6061","type":"url","category":"Network activity","to_ids":true,"value":"http://216.118.251.242","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"f8a4539f-e4e5-5c05-a71e-05e5e088a24d","type":"url","category":"Network activity","to_ids":true,"value":"http://216.118.251.222","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"388d3324-0802-59a3-8d70-ff804b977e56","type":"url","category":"Network activity","to_ids":true,"value":"http://216.118.251.206","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"111985a3-21a6-530d-9d76-6e586bac94c7","type":"url","category":"Network activity","to_ids":true,"value":"http://216.118.251.202","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"f0eb29a8-72ac-5e25-92b1-d0528955c989","type":"url","category":"Network activity","to_ids":true,"value":"http://103.241.72.84","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"735561f0-e38b-527e-b1cd-13209a99b749","type":"url","category":"Network activity","to_ids":true,"value":"http://103.203.48.150","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"6f23372b-fd17-58ea-a3b8-066a1179c525","type":"url","category":"Network activity","to_ids":true,"value":"http://103.203.48.142","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"45307b89-14d9-5366-8ea7-1fd350496760","type":"url","category":"Network activity","to_ids":true,"value":"http://111.68.9.150","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"4a1be460-a82c-5834-a8a9-0ea87273518c","type":"url","category":"Network activity","to_ids":true,"value":"http://103.163.208.156","comment":"https://x.com/skocherhan/status/1958778506935972013","timestamp":"1755844163","distribution":"5"},{"uuid":"ce45e186-57c9-5218-aa30-0090e5d6d9db","type":"domain","category":"Network activity","to_ids":true,"value":"eset-black.xyz","comment":"https://x.com/skocherhan/status/1958779414784745825","timestamp":"1755844379","distribution":"5"},{"uuid":"cae63942-9ac2-54ec-a8c0-b3e3cf17115b","type":"url","category":"Network activity","to_ids":true,"value":"https://eset-black.xyz","comment":"https://x.com/skocherhan/status/1958779414784745825","timestamp":"1755844379","distribution":"5"},{"uuid":"b544a81b-f7af-5ce2-bc28-63df019fd44b","type":"domain","category":"Network activity","to_ids":true,"value":"www-daiwa-jp.clzq68.com","comment":"https://x.com/Metemcyber/status/1958779837038170229","timestamp":"1755844480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5ccf7b7-4664-5edb-bc9a-d35b400cc781","type":"url","category":"Network activity","to_ids":true,"value":"https://www-daiwa-jp.clzq68.com/PCC/","comment":"https://x.com/Metemcyber/status/1958779837038170229","timestamp":"1755844480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4f0c46f-2660-5733-a2f2-fa0609126def","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.121","comment":"https://x.com/drb_ra/status/1958782831699628137","timestamp":"1755845194","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"230ca999-8a36-58db-86b6-d2c7bff154b2","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.121:4000","comment":"https://x.com/drb_ra/status/1958782831699628137","timestamp":"1755845194","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"3eee8ed0-ada1-5a3f-bfce-d3fbfa00973b","type":"url","category":"Network activity","to_ids":true,"value":"http://60.204.249.248:8888","comment":"https://x.com/drb_ra/status/1958782970652663845","timestamp":"1755845227","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"3bbe954c-604f-5aa7-a152-76d393012164","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.204.249.248","comment":"https://x.com/drb_ra/status/1958782970652663845","timestamp":"1755845227","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"0d32610a-8f3d-52a4-b904-1ceee6f7947a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.31.158","comment":"https://x.com/drb_ra/status/1958783108792091036","timestamp":"1755845260","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"df402bf1-0d81-5f36-ab46-8ea454e5d5ab","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.31.158:443","comment":"https://x.com/drb_ra/status/1958783108792091036","timestamp":"1755845260","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"da004025-6382-5b09-a848-01cdd596c782","type":"url","category":"Network activity","to_ids":true,"value":"http://142.247.221.216:443","comment":"https://x.com/drb_ra/status/1958783247111856556","timestamp":"1755845293","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9645774b-b713-57fa-a253-d7e1ee9b89db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.247.221.216","comment":"https://x.com/drb_ra/status/1958783247111856556","timestamp":"1755845293","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"f5175e40-da24-5fe3-a4c3-2254f21c4e37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.5.83.11","comment":"https://x.com/drb_ra/status/1958783384756306361","timestamp":"1755845326","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"852db191-afe9-54cb-a9a1-528c46a26f62","type":"url","category":"Network activity","to_ids":true,"value":"http://52.5.83.11:443","comment":"https://x.com/drb_ra/status/1958783384756306361","timestamp":"1755845326","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"932462a6-a138-5d3d-be1b-4d0679ac4bf4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.223.31.10","comment":"https://x.com/drb_ra/status/1958783522476351861","timestamp":"1755845358","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f68bce66-9f52-53a3-ba85-dc1d9d497ecf","type":"url","category":"Network activity","to_ids":true,"value":"http://52.223.31.10:443","comment":"https://x.com/drb_ra/status/1958783522476351861","timestamp":"1755845358","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"30ad0af7-9c7e-502c-a0b2-6d28d41dfa2c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.220.86.71:443","comment":"https://x.com/drb_ra/status/1958783660288602620","timestamp":"1755845391","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0fd44824-4d6e-5001-93b8-d40bdbe1d945","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.220.86.71","comment":"https://x.com/drb_ra/status/1958783660288602620","timestamp":"1755845391","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"be1549d3-634b-54a0-9909-febb5bccb898","type":"url","category":"Network activity","to_ids":true,"value":"http://20.42.107.78:7443","comment":"https://x.com/drb_ra/status/1958783799233245358","timestamp":"1755845424","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"4d6f8d5e-e401-5c6d-b9b6-ca88f5362368","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.42.107.78","comment":"https://x.com/drb_ra/status/1958783799233245358","timestamp":"1755845424","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"6e6b1ea5-f1f8-591c-9b2f-1fbc244c37c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.172.168.145","comment":"https://x.com/drb_ra/status/1958784445604847738","timestamp":"1755845578","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"b57ff373-742a-5fc7-bdde-edd37f0cc83c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.172.168.145:443","comment":"https://x.com/drb_ra/status/1958784445604847738","timestamp":"1755845578","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"73829767-6e74-5bf8-be8f-0abd70930a18","type":"url","category":"Network activity","to_ids":true,"value":"http://176.78.167.33:8080","comment":"https://x.com/drb_ra/status/1958784585216462857","timestamp":"1755845612","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"69122a1b-dde3-5b8f-9b5a-0e39107161bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.78.167.33","comment":"https://x.com/drb_ra/status/1958784585216462857","timestamp":"1755845612","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"f00c5106-3cc5-509b-b508-3405173510db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.242.144","comment":"https://x.com/drb_ra/status/1958784724417065383","timestamp":"1755845645","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"5ecc8aae-33e2-5d2d-90e7-0eec093d5f43","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.242.144:443","comment":"https://x.com/drb_ra/status/1958784724417065383","timestamp":"1755845645","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"dbf0fed7-d4bb-56c7-9cd2-6db2b6576f83","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.89.184:443","comment":"https://x.com/drb_ra/status/1958784862376092113","timestamp":"1755845678","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"ffdbdcbc-ce31-5de3-87c2-a8f1e49e60df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.89.184","comment":"https://x.com/drb_ra/status/1958784862376092113","timestamp":"1755845678","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"6e4a9394-1ae1-5fea-986b-5bfaf4bb6cef","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.137.70:2889","comment":"https://x.com/drb_ra/status/1958784999777349694","timestamp":"1755845711","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7d59fa75-ab76-5a02-8eda-32e9b2612aa3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.137.70","comment":"https://x.com/drb_ra/status/1958784999777349694","timestamp":"1755845711","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9edd097e-a9d7-5c27-88b5-43652d7bc785","type":"url","category":"Network activity","to_ids":true,"value":"http://74.50.94.176:6040","comment":"https://x.com/drb_ra/status/1958785138994639209","timestamp":"1755845744","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8387e068-cc1e-5377-9093-9a4e05d4aea2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.50.94.176","comment":"https://x.com/drb_ra/status/1958785138994639209","timestamp":"1755845744","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"05228c9a-77ef-5860-8cf1-6a33fc62f395","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.254.102","comment":"https://x.com/drb_ra/status/1958785277029232929","timestamp":"1755845777","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"efa509d0-0ac1-50a2-a711-7810d0b073b1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.254.102:48791","comment":"https://x.com/drb_ra/status/1958785277029232929","timestamp":"1755845777","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6a778d8d-de37-5fe2-b340-95882aa4a96f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.45.172","comment":"https://x.com/drb_ra/status/1958785415445410091","timestamp":"1755845810","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"402c62fa-4328-5734-84f7-0f2717919d78","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.45.172:2404","comment":"https://x.com/drb_ra/status/1958785415445410091","timestamp":"1755845810","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ce5cc12f-f51a-5924-a3f1-2f6437477c6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.40.97.10","comment":"https://x.com/drb_ra/status/1958785553899397630","timestamp":"1755845843","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"19a1e5d8-075d-57ea-a42c-5d77ceecce22","type":"url","category":"Network activity","to_ids":true,"value":"http://13.40.97.10:43","comment":"https://x.com/drb_ra/status/1958785553899397630","timestamp":"1755845843","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b50c6068-cb8d-5ec0-b86a-910a481ba643","type":"url","category":"Network activity","to_ids":true,"value":"http://52.36.18.177:8090","comment":"https://x.com/drb_ra/status/1958785692768612538","timestamp":"1755845876","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ff580a29-0d4a-5e18-84e5-6f0f8bf0567d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.36.18.177","comment":"https://x.com/drb_ra/status/1958785692768612538","timestamp":"1755845876","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"92fcffa8-dafc-5bd2-9c06-e81ed5aec64d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.20.94.251","comment":"https://x.com/drb_ra/status/1958785831713276388","timestamp":"1755845909","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b26f70c8-375f-519a-8ee3-c383fec9b3c4","type":"url","category":"Network activity","to_ids":true,"value":"http://51.20.94.251:9301","comment":"https://x.com/drb_ra/status/1958785831713276388","timestamp":"1755845909","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1a4efb29-d37b-5e48-8dfa-0caea943ed1b","type":"url","category":"Network activity","to_ids":true,"value":"http://34.192.99.136:443","comment":"https://x.com/drb_ra/status/1958785970431574496","timestamp":"1755845942","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"130d3d37-ef1d-545a-a3ff-85947c99d477","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.192.99.136","comment":"https://x.com/drb_ra/status/1958785970431574496","timestamp":"1755845942","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6eede333-4c34-5f0c-b0cf-aedaeb0f8ebb","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.5.168:80","comment":"https://x.com/drb_ra/status/1958786108147327043","timestamp":"1755845975","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0f8fcd02-9504-5189-9880-e28d1f1ff679","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.5.168","comment":"https://x.com/drb_ra/status/1958786108147327043","timestamp":"1755845975","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9cf0edfd-66fa-5520-8fe0-8b66cf874d4e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.223.251.198:443","comment":"https://x.com/drb_ra/status/1958786246529999288","timestamp":"1755846008","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"51930521-3c38-5a16-aea0-52289900c2bf","type":"url","category":"Network activity","to_ids":true,"value":"http://3.223.251.198:80","comment":"https://x.com/drb_ra/status/1958786384799453449","timestamp":"1755846041","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c854ec22-13c8-564b-8315-ee20e0ded8cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.198.212","comment":"https://x.com/drb_ra/status/1958786523169431789","timestamp":"1755846074","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"69f76b9e-1502-5d6b-8fbf-ade5f8676f30","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.198.212:80","comment":"https://x.com/drb_ra/status/1958786523169431789","timestamp":"1755846074","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fb8ebb9c-a9de-5382-9361-7b946b82f4b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.244.129","comment":"https://x.com/drb_ra/status/1958786661505982630","timestamp":"1755846107","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0f346912-f0c2-56a7-bf3a-1ad81b1e2054","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.244.129:80","comment":"https://x.com/drb_ra/status/1958786661505982630","timestamp":"1755846107","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"da0a3b78-993a-5758-bc89-48a7e0801e59","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.76.176:80","comment":"https://x.com/drb_ra/status/1958786799309873591","timestamp":"1755846140","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ffc618be-c4dc-581c-89b5-270d1b77f290","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.76.176","comment":"https://x.com/drb_ra/status/1958786799309873591","timestamp":"1755846140","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"511d75ce-b533-5043-a09d-ca54b7b9fcab","type":"domain","category":"Network activity","to_ids":true,"value":"mastwin.in","comment":"https://x.com/netresec/status/1958790017859338262","timestamp":"1755846907","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5efea21a-60dd-5174-8152-00ba0ea9709c","type":"url","category":"Network activity","to_ids":true,"value":"http://mastwin.in","comment":"https://x.com/netresec/status/1958790017859338262","timestamp":"1755846907","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4b1bebdc-8195-5a5f-9995-8ff594d91af3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.106.140","comment":"https://x.com/netresec/status/1958790017859338262","timestamp":"1755846907","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1958794050137469395","timestamp":"1755847868","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f3402d08-446e-5da5-bb33-73051781e2cd","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:443","comment":"https://x.com/drb_ra/status/1958794050137469395","timestamp":"1755847868","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c592f8b3-daa4-55e8-8c12-0e085d363e82","type":"domain","category":"Network activity","to_ids":true,"value":"iheartredteams.com","comment":"https://x.com/drb_ra/status/1958794050137469395","timestamp":"1755847868","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4d233f75-028c-5f1b-a49a-fdd271212eb6","type":"url","category":"Network activity","to_ids":true,"value":"https://iheartredteams.com/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1958794050137469395","timestamp":"1755847868","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6290760d-7a7f-5ebf-bc2f-c4e322b9fc32","type":"url","category":"Network activity","to_ids":true,"value":"http://43.132.244.201:4443","comment":"https://x.com/drb_ra/status/1958794194161434991","timestamp":"1755847903","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"90dc2617-9f37-5e06-9a30-fc5016d27ef4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.132.244.201","comment":"https://x.com/drb_ra/status/1958794194161434991","timestamp":"1755847903","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e62adfc1-ead1-53b8-b54e-5f1bc8831656","type":"url","category":"Network activity","to_ids":true,"value":"http://3.107.113.235:443","comment":"https://x.com/drb_ra/status/1958794333773058126","timestamp":"1755847936","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"803a4e04-a206-5bda-a440-cb0257cab02a","type":"domain","category":"Network activity","to_ids":true,"value":"swissairmitglieder.com","comment":"https://x.com/urldna_bot/status/1958801353033109647","timestamp":"1755849609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f638cb21-3239-5bbc-b7e2-3f584b1510c5","type":"url","category":"Network activity","to_ids":true,"value":"https://swissairmitglieder.com/payment","comment":"https://x.com/urldna_bot/status/1958801353033109647","timestamp":"1755849609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8f90f1a3-c5a8-5b81-9291-b9fc672a7490","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.243.204.23","comment":"https://x.com/SarlackLab/status/1958802144225530065","timestamp":"1755849798","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c446caf6-96ed-5d06-babf-6d2829f83235","type":"url","category":"Network activity","to_ids":true,"value":"http://162.243.204.23:1177","comment":"https://x.com/SarlackLab/status/1958802144225530065","timestamp":"1755849798","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"4f1a1b5d-5a9e-56be-bc3b-fb81d245265b","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/hectorp12/re","comment":"https://x.com/skocherhan/status/1958809695591842050","timestamp":"1755851599","distribution":"5"},{"uuid":"54cb4d8e-78a1-5e15-98d7-c084eee0fe8d","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/hectorp12/respaldo1212/main/cmd.txt","comment":"https://x.com/skocherhan/status/1958809695591842050","timestamp":"1755851599","distribution":"5"},{"uuid":"12290f12-a7da-574a-bc7c-87b0df8933e0","type":"domain","category":"Network activity","to_ids":true,"value":"telegrampremium.app","comment":"https://x.com/CyfirmaR/status/1958822520708374533","timestamp":"1755854656","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"},{"name":"LummaStealer"}]},{"uuid":"dcf95de1-1867-58c4-876a-0c55e3d2de8e","type":"url","category":"Network activity","to_ids":true,"value":"http://telegrampremium.app","comment":"https://x.com/CyfirmaR/status/1958822520708374533","timestamp":"1755854656","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"},{"name":"LummaStealer"}]},{"uuid":"32e264c7-2c2e-500c-adf6-0e9650d0ec42","type":"url","category":"Network activity","to_ids":true,"value":"http://casio-classic-watch.com","comment":"https://x.com/c9lab_soc/status/1958826903302803847","timestamp":"1755855701","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4b542221-edb0-5f6f-b550-9c745606ef0d","type":"url","category":"Network activity","to_ids":true,"value":"http://discord.tel","comment":"https://x.com/c9lab_soc/status/1958826903302803847","timestamp":"1755855701","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3ac208e7-b551-50b3-837e-50a8a318eb94","type":"domain","category":"Network activity","to_ids":true,"value":"discord.tel","comment":"https://x.com/c9lab_soc/status/1958826903302803847","timestamp":"1755855701","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e9b6b160-f832-52ff-8ee8-c79318e12a77","type":"domain","category":"Network activity","to_ids":true,"value":"casio-classic-watch.com","comment":"https://x.com/c9lab_soc/status/1958826903302803847","timestamp":"1755855701","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"29513eca-9710-59a4-8d6a-4b45cdd9dacf","type":"url","category":"Network activity","to_ids":true,"value":"https://universidadedelisboa.weebly.com","comment":"https://x.com/urldna_bot/status/1958831546917351722","timestamp":"1755856808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2183bfec-84dd-5ed0-92b9-d85c4e4064b0","type":"domain","category":"Network activity","to_ids":true,"value":"universidadedelisboa.weebly.com","comment":"https://x.com/urldna_bot/status/1958831546917351722","timestamp":"1755856808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"63a166ef-bdff-5647-a6b3-76d7994c0a87","type":"url","category":"Network activity","to_ids":true,"value":"http://www.respaldomx2.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"71a69c0b-0571-52e3-a5c6-de185ca97ee9","type":"md5","category":"Payload delivery","to_ids":true,"value":"1de9b7175b325bb7c2c3a3fb55121c15","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"23844a75-8762-5cd1-9adb-c3a9f58eb1f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.63.216","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"0bb2a8a5-ed1d-5ccc-8248-f5b94ebc6b38","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.63.216:7645","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"bf21d3e0-0503-597f-aab5-a29654f509da","type":"url","category":"Network activity","to_ids":true,"value":"http://respaldomx2.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"db6da2ae-34d7-5fb1-ab24-cbeac490fc1c","type":"url","category":"Network activity","to_ids":true,"value":"http://quasar12agos.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"98e5f5c4-63a0-542f-861e-b7e59dbee295","type":"domain","category":"Network activity","to_ids":true,"value":"quasar12agos.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"b278f473-e792-592a-9b8c-d664bf997022","type":"domain","category":"Network activity","to_ids":true,"value":"seguroagost21.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"38c531b6-489d-5420-8b94-3a29d3ac173e","type":"url","category":"Network activity","to_ids":true,"value":"http://sostexampp.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"0b90897e-b226-5894-8882-bb924a867ccd","type":"domain","category":"Network activity","to_ids":true,"value":"sostexampp.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"c0c2c4bf-368b-541b-bcb7-f560d8eec089","type":"url","category":"Network activity","to_ids":true,"value":"http://agostodc20.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"0f3ca5ef-7fa4-5628-918d-06cc3275fd14","type":"domain","category":"Network activity","to_ids":true,"value":"agostodc20.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"48110eaf-cfc8-5036-b379-258a3c9824b3","type":"url","category":"Network activity","to_ids":true,"value":"http://remcosf2025.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"378d570f-f75b-51fd-9f0e-13afaf641cdb","type":"domain","category":"Network activity","to_ids":true,"value":"remcosf2025.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"aabcfaeb-e182-5c23-a1aa-cf50445592b6","type":"domain","category":"Network activity","to_ids":true,"value":"respaldomx2.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"83974628-3c1b-5966-bea2-5f8d37e49a0b","type":"url","category":"Network activity","to_ids":true,"value":"http://seguroagost21.duckdns.org","comment":"https://x.com/skocherhan/status/1958833100823175433","timestamp":"1755857179","distribution":"5"},{"uuid":"32294646-cb58-51d6-8d6f-d656ef632a68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.54.105.38","comment":"https://x.com/drb_ra/status/1958846215522545830","timestamp":"1755860306","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5f70c729-6eec-54cc-89de-10f226871457","type":"url","category":"Network activity","to_ids":true,"value":"http://209.54.105.38:6666","comment":"https://x.com/drb_ra/status/1958846215522545830","timestamp":"1755860306","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eb59a9eb-01fd-572f-a83b-a4f2b237bdf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.239.19.190","comment":"https://x.com/drb_ra/status/1958846355192893802","timestamp":"1755860339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c2d8f9b-fbf1-564f-939b-9886135cef7f","type":"url","category":"Network activity","to_ids":true,"value":"http://188.239.19.190:801","comment":"https://x.com/drb_ra/status/1958846355192893802","timestamp":"1755860339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"625a639e-a497-556b-a02d-2c6d37fe0ab7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.239.190.19","comment":"https://x.com/drb_ra/status/1958846355192893802","timestamp":"1755860339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"63392486-eed9-59c1-8929-4fad81b1a20b","type":"url","category":"Network activity","to_ids":true,"value":"https://www.harrowtuitioncentre.co.uk/gcse-tuition/fonts/","comment":"https://x.com/urldna_bot/status/1958861742152323367","timestamp":"1755864007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b5f1acfd-683a-5007-aae2-b968252ce091","type":"domain","category":"Network activity","to_ids":true,"value":"harrowtuitioncentre.co.uk","comment":"https://x.com/urldna_bot/status/1958861742152323367","timestamp":"1755864007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"292e9d5d-9925-5915-a927-cb7dcc93e7fb","type":"md5","category":"Payload delivery","to_ids":true,"value":"d52186818ff0ec7a14d9751e98b9760c","comment":"https://x.com/suyog41/status/1958866461541220504","timestamp":"1755865133","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3ef7a626-e6d0-5dda-954c-50ca71186454","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.52.80.44","comment":"https://x.com/ViriBack/status/1958868457056862686","timestamp":"1755865608","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0592237b-67d7-5635-b6a0-a95836d672fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.158.108.135","comment":"https://x.com/ViriBack/status/1958868457056862686","timestamp":"1755865608","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"65798580-db04-5ce1-9fd7-a98216f106a5","type":"url","category":"Network activity","to_ids":true,"value":"http://85.158.108.135:5050/login","comment":"https://x.com/ViriBack/status/1958868457056862686","timestamp":"1755865608","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"878503d4-38c7-51ae-9552-134f0724d13d","type":"url","category":"Network activity","to_ids":true,"value":"http://64.52.80.44:9999/login","comment":"https://x.com/ViriBack/status/1958868457056862686","timestamp":"1755865608","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c9cc709c-4967-5a26-be6c-888d77bb9b02","type":"domain","category":"Network activity","to_ids":true,"value":"Fullcolour.com","comment":"https://x.com/FalconFeedsio/status/1958868498878169512","timestamp":"1755865618","distribution":"5"},{"uuid":"e9393b73-01ad-5a77-9525-830ce54d701b","type":"url","category":"Network activity","to_ids":true,"value":"http://Fullcolour.com","comment":"https://x.com/FalconFeedsio/status/1958868498878169512","timestamp":"1755865618","distribution":"5"},{"uuid":"de46f690-40da-566c-bed6-d4fd6427c751","type":"url","category":"Network activity","to_ids":true,"value":"http://3.135.194.95/09_nsabdo/receado.php","comment":"https://x.com/JAMESWT_WT/status/1958916800407842892","timestamp":"1755877134","distribution":"5"},{"uuid":"7494dda1-c7a6-5ee3-9af6-dcf9f4cce42d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.141.199.105/14_ytashev/tribos.php","comment":"https://x.com/JAMESWT_WT/status/1958916800407842892","timestamp":"1755877134","distribution":"5"},{"uuid":"d2c7c839-91a4-597c-8e35-b129ae11471f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.250.128.197","comment":"https://x.com/drb_ra/status/1958920030533595139","timestamp":"1755877904","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"87acc502-3cfb-5831-9fbd-e71618726c66","type":"url","category":"Network activity","to_ids":true,"value":"https://160.250.128.197/visit.js","comment":"https://x.com/drb_ra/status/1958920030533595139","timestamp":"1755877904","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"22a8e47f-1360-5902-85ff-0a54a0e50ec1","type":"url","category":"Network activity","to_ids":true,"value":"http://160.250.128.197:8080","comment":"https://x.com/drb_ra/status/1958920030533595139","timestamp":"1755877904","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ddc6b217-65a9-5eff-9d32-253d9815c71b","type":"domain","category":"Network activity","to_ids":true,"value":"login.enterprises","comment":"https://x.com/urldna_bot/status/1958922151207035101","timestamp":"1755878410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2d2c6316-98bd-5db5-84c1-7f2cb7010123","type":"url","category":"Network activity","to_ids":true,"value":"https://login.enterprises/?rid=1EddDSG","comment":"https://x.com/urldna_bot/status/1958922151207035101","timestamp":"1755878410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2f95aa98-55a4-5bb6-aa2c-b30d5422ea97","type":"domain","category":"Network activity","to_ids":true,"value":"pagoenergiacl.shop","comment":"https://x.com/mbec03/status/1958926609844765003","timestamp":"1755879473","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56a12e02-4712-5937-b272-e9ab9113620d","type":"url","category":"Network activity","to_ids":true,"value":"http://pagoenergiacl.shop","comment":"https://x.com/mbec03/status/1958926609844765003","timestamp":"1755879473","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0301b607-f7a2-5567-bfdf-a3cea5dc1b53","type":"domain","category":"Network activity","to_ids":true,"value":"6aao4y2.cn","comment":"https://x.com/harugasumi/status/1958928652592455971","timestamp":"1755879960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a14b8df-d1d4-5977-8019-7869e7f76790","type":"url","category":"Network activity","to_ids":true,"value":"https://6aao4y2.cn","comment":"https://x.com/harugasumi/status/1958928652592455971","timestamp":"1755879960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4565db16-c1c0-5d38-8f43-aedf32ae9d6a","type":"domain","category":"Network activity","to_ids":true,"value":"nevadabicycleclub.com","comment":"https://x.com/harugasumi/status/1958933566093762761","timestamp":"1755881132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6363e149-737f-53e2-8c3e-0c568cf4b7f1","type":"url","category":"Network activity","to_ids":true,"value":"https://nevadabicycleclub.com/my-card-jcb","comment":"https://x.com/harugasumi/status/1958933566093762761","timestamp":"1755881132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4543873f-2063-5a30-9a01-018dae82d4d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.90.27","comment":"https://x.com/c_APT_ure/status/1958938566228418692","timestamp":"1755882324","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"61f5a920-9bec-53af-bcea-d2f5150c5c22","type":"domain","category":"Network activity","to_ids":true,"value":"banorte.life","comment":"https://x.com/mbec03/status/1958938882822615042","timestamp":"1755882399","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea8257a9-9cc3-56b6-aa4f-c48b9920724e","type":"url","category":"Network activity","to_ids":true,"value":"http://banorte.life","comment":"https://x.com/mbec03/status/1958938882822615042","timestamp":"1755882399","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94a70e10-dc4c-5dff-9cc3-e2488d09ac85","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.88.11.161","comment":"https://x.com/mbec03/status/1958938882822615042","timestamp":"1755882399","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9eb8c574-06d5-5c51-9c83-9ad01bb12f21","type":"url","category":"Network activity","to_ids":true,"value":"https://sanosrepaibmolocnab.zeabur.app/crear-usuario/ingresa-tus-datos","comment":"https://x.com/urldna_bot/status/1958952335079542991","timestamp":"1755885606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"96d611af-c1ea-590d-8c6b-e5de4763c9c9","type":"domain","category":"Network activity","to_ids":true,"value":"sanosrepaibmolocnab.zeabur.app","comment":"https://x.com/urldna_bot/status/1958952335079542991","timestamp":"1755885606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f5693f83-f8af-5768-8724-933a7921bd87","type":"domain","category":"Network activity","to_ids":true,"value":"filesclosedset.icu","comment":"https://x.com/skocherhan/status/1958956150067798137","timestamp":"1755886516","distribution":"5"},{"uuid":"9eac48f3-5ac4-5b19-9621-a0b85d5c7a24","type":"url","category":"Network activity","to_ids":true,"value":"http://filesclosedset.icu","comment":"https://x.com/skocherhan/status/1958956150067798137","timestamp":"1755886516","distribution":"5"},{"uuid":"24b721aa-980c-5dc8-b45c-23f8ba789a24","type":"domain","category":"Network activity","to_ids":true,"value":"goaskbobby.com","comment":"https://x.com/luke92881/status/1958962530379829337","timestamp":"1755888037","distribution":"5"},{"uuid":"e23b52a5-983c-5e5e-abdb-d6962f21f647","type":"url","category":"Network activity","to_ids":true,"value":"http://goaskbobby.com","comment":"https://x.com/luke92881/status/1958962530379829337","timestamp":"1755888037","distribution":"5"},{"uuid":"898af4ca-b52a-58c2-b187-cc67accc171b","type":"url","category":"Network activity","to_ids":true,"value":"http://84.21.171.168:31337","comment":"https://x.com/drb_ra/status/1958963778801836320","timestamp":"1755888335","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d72d9d14-179c-5806-bc44-068cbba155a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.21.171.168","comment":"https://x.com/drb_ra/status/1958963778801836320","timestamp":"1755888335","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"22406a94-3914-5351-89aa-df47b2569a4e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.79.84.118:31337","comment":"https://x.com/drb_ra/status/1958963916840570981","timestamp":"1755888368","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"99a96a23-e19c-5e4f-87c0-87fff5a99233","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.84.118","comment":"https://x.com/drb_ra/status/1958963916840570981","timestamp":"1755888368","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9e19d60b-df55-5ed3-8035-1420d08da749","type":"url","category":"Network activity","to_ids":true,"value":"http://113.192.6.34:31337","comment":"https://x.com/drb_ra/status/1958964055500103737","timestamp":"1755888401","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"3226ff18-54d8-5ab7-80d0-6da247a51158","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.192.6.34","comment":"https://x.com/drb_ra/status/1958964055500103737","timestamp":"1755888401","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"032b6711-6ddd-5e00-aadc-d76875a7c538","type":"url","category":"Network activity","to_ids":true,"value":"http://74.48.170.150:8888","comment":"https://x.com/drb_ra/status/1958964193450738088","timestamp":"1755888434","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0bdcce5f-3cd5-5acb-a95b-0bf73849d8cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.48.170.150","comment":"https://x.com/drb_ra/status/1958964331514606006","timestamp":"1755888467","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7829bdb7-3a28-5af0-b99f-7468ad30ef52","type":"url","category":"Network activity","to_ids":true,"value":"http://74.48.170.150:31337","comment":"https://x.com/drb_ra/status/1958964331514606006","timestamp":"1755888467","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a2f3fc61-eebe-547f-a22b-8450670e3acb","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.156.238:31337","comment":"https://x.com/drb_ra/status/1958964469805035941","timestamp":"1755888500","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"98f8e25e-a30b-56bd-8868-712fe2b454a0","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.156.238:8888","comment":"https://x.com/drb_ra/status/1958964608061882864","timestamp":"1755888533","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"25c29634-5c16-5964-8aef-c8f64be6fb6d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.156.238","comment":"https://x.com/drb_ra/status/1958964608061882864","timestamp":"1755888533","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1a5bb2e4-b4f6-5abb-a100-531bfbf9a8d7","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.109.4:443","comment":"https://x.com/drb_ra/status/1958964747107541273","timestamp":"1755888566","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"63c522db-23bb-5861-9af3-fbf3b6041145","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.109.4:31337","comment":"https://x.com/drb_ra/status/1958964885405975037","timestamp":"1755888599","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"67aa5674-c5b1-55f5-9238-35c042ad7a3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.109.4","comment":"https://x.com/drb_ra/status/1958964885405975037","timestamp":"1755888599","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"83404d16-2169-5095-b70d-e893b8486125","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.97.220:80","comment":"https://x.com/drb_ra/status/1958965531366625722","timestamp":"1755888753","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c4def95c-d6ff-55c0-836b-9d55106daec4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.97.220","comment":"https://x.com/drb_ra/status/1958965531366625722","timestamp":"1755888753","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d6ca9b0c-8d03-58b2-9a96-2a3e4af4e7fd","type":"url","category":"Network activity","to_ids":true,"value":"http://pagoenergiacl.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"89ded0b0-c1fb-5049-ace8-e31ad03a3831","type":"domain","category":"Network activity","to_ids":true,"value":"pagoenergiacl.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"c5ceb216-0790-53eb-83bd-50a5623fd6b5","type":"url","category":"Network activity","to_ids":true,"value":"http://empresaelectrica.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"fbea3c61-fc6b-5076-ab2a-73bdb968caea","type":"domain","category":"Network activity","to_ids":true,"value":"empresaelectrica.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"793f7b6b-d8bc-5c71-9335-ca87795e2222","type":"url","category":"Network activity","to_ids":true,"value":"https://cgepagoenergia.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"330c3175-dc5a-5794-9cd0-3c2ed2f04a54","type":"domain","category":"Network activity","to_ids":true,"value":"cgepagoenergia.com","comment":"https://x.com/1ZRR4H/status/1958965621783138695","timestamp":"1755888774","distribution":"5"},{"uuid":"dc5e2b0d-cac6-5b7c-981e-8680fe0275c5","type":"url","category":"Network activity","to_ids":true,"value":"http://95.214.181.235:8443","comment":"https://x.com/drb_ra/status/1958965669917016452","timestamp":"1755888786","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"638d155d-e9d1-590f-aa73-e758fa54b9aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.214.181.235","comment":"https://x.com/drb_ra/status/1958965669917016452","timestamp":"1755888786","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e05dda5c-90e5-56b9-b068-9f85d9bbdef4","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.94:443","comment":"https://x.com/drb_ra/status/1958965807607947293","timestamp":"1755888819","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f4a05cb5-6db9-57c6-81af-55772fb8f97e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.94","comment":"https://x.com/drb_ra/status/1958965807607947293","timestamp":"1755888819","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"be167ccb-fd00-530b-b8c1-21fbb11ae4b8","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.245.58:2404","comment":"https://x.com/drb_ra/status/1958965945554059538","timestamp":"1755888851","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ed38a878-3ed0-5119-b10b-08da8d57d49d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.245.58","comment":"https://x.com/drb_ra/status/1958965945554059538","timestamp":"1755888851","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e95c020c-50dc-55d6-910b-28ca258bbbec","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.159.206:2404","comment":"https://x.com/drb_ra/status/1958966083127279695","timestamp":"1755888884","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d1bd4cb2-05c3-51f5-b316-110c6f86dbbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.159.206","comment":"https://x.com/drb_ra/status/1958966083127279695","timestamp":"1755888884","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"37a69349-6067-52be-8183-c334d9d1cb37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.12.83.117","comment":"https://x.com/drb_ra/status/1958966220830425576","timestamp":"1755888917","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cf3f3fe5-77f8-5c09-9d41-5d3f68c23b24","type":"url","category":"Network activity","to_ids":true,"value":"http://198.12.83.117:2404","comment":"https://x.com/drb_ra/status/1958966220830425576","timestamp":"1755888917","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"fb64acf7-4f88-57f3-9c51-b59cbe01e2a4","type":"url","category":"Network activity","to_ids":true,"value":"http://192.3.3.142:27000","comment":"https://x.com/drb_ra/status/1958966360517878185","timestamp":"1755888950","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"84130867-0b9b-532b-9929-d1c1ee92f3d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.3.142","comment":"https://x.com/drb_ra/status/1958966360517878185","timestamp":"1755888950","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"534f9ab1-c013-52c7-b96f-cfad091e3811","type":"url","category":"Network activity","to_ids":true,"value":"http://143.244.46.151:2404","comment":"https://x.com/drb_ra/status/1958966498711806323","timestamp":"1755888983","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"53244b6d-5aef-5e93-9d35-a93bc67693ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.244.46.151","comment":"https://x.com/drb_ra/status/1958966498711806323","timestamp":"1755888983","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"87c0ab7d-7302-5e1a-9c10-7b5b38d81b36","type":"url","category":"Network activity","to_ids":true,"value":"http://63.176.165.233:13394","comment":"https://x.com/drb_ra/status/1958966636159152406","timestamp":"1755889016","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1de804c3-87fa-5706-a1b7-0930ed28e2bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.176.165.233","comment":"https://x.com/drb_ra/status/1958966636159152406","timestamp":"1755889016","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"96dc5b58-8ea8-5ce5-81c5-e20cd0fc9e94","type":"url","category":"Network activity","to_ids":true,"value":"http://18.163.6.103:14265","comment":"https://x.com/drb_ra/status/1958966774214410367","timestamp":"1755889049","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e7e4bc6b-eabd-5665-b7f8-a953282186a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.163.6.103","comment":"https://x.com/drb_ra/status/1958966774214410367","timestamp":"1755889049","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ac136768-0a3e-559e-bc03-9304fbf12153","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.159.99.244","comment":"https://x.com/drb_ra/status/1958966912974458918","timestamp":"1755889082","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f31a0e33-ec86-5e84-9da4-f4e340766322","type":"url","category":"Network activity","to_ids":true,"value":"http://192.159.99.244:8000","comment":"https://x.com/drb_ra/status/1958966912974458918","timestamp":"1755889082","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"71486fac-9af3-53a0-bbb1-ccefaa8ca03b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.249.130","comment":"https://x.com/drb_ra/status/1958967051311370512","timestamp":"1755889115","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7e6b53e8-6c9d-51fc-8792-f1a9ebb4b058","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.249.130:80","comment":"https://x.com/drb_ra/status/1958967051311370512","timestamp":"1755889115","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"73253d84-dff8-56ed-b9ab-ba24c40938da","type":"url","category":"Network activity","to_ids":true,"value":"http://34.246.187.222:80","comment":"https://x.com/drb_ra/status/1958967191044264098","timestamp":"1755889148","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0e6c7cb3-b169-5024-8d7c-61bfa1a59b76","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.246.187.222","comment":"https://x.com/drb_ra/status/1958967191044264098","timestamp":"1755889148","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"45feea2d-f3f4-5d3f-b888-9462fea68d73","type":"url","category":"Network activity","to_ids":true,"value":"http://52.214.158.102:80","comment":"https://x.com/drb_ra/status/1958967330039595289","timestamp":"1755889181","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e00b7cb9-f5ef-51b8-b1c1-0df414508503","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.214.158.102","comment":"https://x.com/drb_ra/status/1958967330039595289","timestamp":"1755889181","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a1654534-76dc-53f8-bda1-95e7675c6fff","type":"url","category":"Network activity","to_ids":true,"value":"http://167.179.104.126:8888","comment":"https://x.com/drb_ra/status/1958967469064003907","timestamp":"1755889215","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"21f2424b-f98a-572e-9c74-75d77ec4252f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.179.104.126","comment":"https://x.com/drb_ra/status/1958967469064003907","timestamp":"1755889215","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"6267a241-9edb-5eaf-9d32-87e5b9f44588","type":"url","category":"Network activity","to_ids":true,"value":"http://38.181.52.147:8888","comment":"https://x.com/drb_ra/status/1958967608331706576","timestamp":"1755889248","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"05c2ef23-8611-5932-a297-9ac9d6088ecb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.181.52.147","comment":"https://x.com/drb_ra/status/1958967608331706576","timestamp":"1755889248","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"ed1e9c39-fff8-5d85-bb89-ccde55321ab6","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.207.235:443","comment":"https://x.com/drb_ra/status/1958967745883906234","timestamp":"1755889281","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"c3a3f199-01f0-514c-a3d7-c34363dfa1a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.207.235","comment":"https://x.com/drb_ra/status/1958967745883906234","timestamp":"1755889281","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"366ed360-7297-5691-ac89-4185791dae43","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.18:1963","comment":"https://x.com/drb_ra/status/1958967884174303642","timestamp":"1755889314","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"de81b584-dbcc-5f43-8110-f40becb738e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.6.18","comment":"https://x.com/drb_ra/status/1958967884174303642","timestamp":"1755889314","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"9b476ea9-7f8c-5ea7-a8f1-f0f8560b35a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.194.200.155","comment":"https://x.com/drb_ra/status/1958968023374811434","timestamp":"1755889347","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"3dc920e0-9e9c-523a-b5de-767bd310bfd2","type":"url","category":"Network activity","to_ids":true,"value":"http://201.194.200.155:443","comment":"https://x.com/drb_ra/status/1958968023374811434","timestamp":"1755889347","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"06efde52-26d2-5bdf-ba3e-bf15f5fb8a0f","type":"url","category":"Network activity","to_ids":true,"value":"http://101.184.132.71:2222","comment":"https://x.com/drb_ra/status/1958968161115783374","timestamp":"1755889380","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"73bbf817-f982-587d-8067-c7830029e538","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.184.132.71","comment":"https://x.com/drb_ra/status/1958968161115783374","timestamp":"1755889380","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"e826b1db-b1b5-566e-ada4-c3963204dc96","type":"url","category":"Network activity","to_ids":true,"value":"http://186.105.100.206:443","comment":"https://x.com/drb_ra/status/1958968298986774767","timestamp":"1755889413","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"60f3cae5-8354-5ad8-9cfa-bf5d8f71a947","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.105.100.206","comment":"https://x.com/drb_ra/status/1958968298986774767","timestamp":"1755889413","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"74b6ff94-527c-5c8e-b650-ecc87a54d4cb","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.71:2222","comment":"https://x.com/drb_ra/status/1958968436824195301","timestamp":"1755889445","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"79bb0dd7-ac2f-5f34-863b-7cdaf62c0a7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.157.7.71","comment":"https://x.com/drb_ra/status/1958968436824195301","timestamp":"1755889445","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ef6f5d24-eadf-583e-b81a-d63d7fe1cb92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.183.183.150","comment":"https://x.com/drb_ra/status/1958968574623850761","timestamp":"1755889478","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"05677abf-9b17-599e-9f36-f08d3c3c31dc","type":"url","category":"Network activity","to_ids":true,"value":"http://68.183.183.150:443","comment":"https://x.com/drb_ra/status/1958968574623850761","timestamp":"1755889478","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ecd02821-195e-5c9e-90b5-b0df80b2a90b","type":"url","category":"Network activity","to_ids":true,"value":"http://185.169.180.220:443","comment":"https://x.com/drb_ra/status/1958968712813584763","timestamp":"1755889511","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"23c2a087-5c6e-5816-953b-54e29f801ada","type":"url","category":"Network activity","to_ids":true,"value":"http://185.169.180.220:40000","comment":"https://x.com/drb_ra/status/1958968851993174181","timestamp":"1755889544","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"0d07938c-0605-594f-8741-3d1f5a28aa3c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.169.180.220","comment":"https://x.com/drb_ra/status/1958968851993174181","timestamp":"1755889544","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"921a0732-6b73-544a-83a7-e130cb369964","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.27.137:7443","comment":"https://x.com/drb_ra/status/1958968989469769943","timestamp":"1755889577","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"873feae4-25c2-5531-ad3a-1aaf7de243a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.223.27.137","comment":"https://x.com/drb_ra/status/1958968989469769943","timestamp":"1755889577","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"56656bbb-15e7-59b2-810c-5d1aa4a4cc1c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.213.52.193:443","comment":"https://x.com/drb_ra/status/1958969127978377594","timestamp":"1755889610","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c84d9cd3-2a6e-5e9f-b7bf-7042bad92d35","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.135.178:7443","comment":"https://x.com/drb_ra/status/1958969265975173187","timestamp":"1755889643","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"58d5bc05-6469-51ab-98cc-edb60341a7f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.135.178","comment":"https://x.com/drb_ra/status/1958969265975173187","timestamp":"1755889643","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"6c471656-41a0-52ff-a88b-b1586f50fa7c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.78.40.148","comment":"https://x.com/drb_ra/status/1958969404198461706","timestamp":"1755889676","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a4c5fa98-9a54-5fa2-940f-38ceba560fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://66.78.40.148:7443","comment":"https://x.com/drb_ra/status/1958969404198461706","timestamp":"1755889676","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"27f895e3-5e4f-5c29-838b-bdd529229afb","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.161.33:7443","comment":"https://x.com/drb_ra/status/1958969542333595834","timestamp":"1755889709","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"d8d4c684-1fd0-51c4-9459-288746222aba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.161.33","comment":"https://x.com/drb_ra/status/1958969542333595834","timestamp":"1755889709","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"6723eb6c-eda7-52ae-ae22-9d0e61871d1a","type":"url","category":"Network activity","to_ids":true,"value":"http://144.208.127.35:31337","comment":"https://x.com/drb_ra/status/1958969680862859768","timestamp":"1755889742","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0925046e-0db2-5e07-94cf-5ea07b2c7da6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.208.127.35","comment":"https://x.com/drb_ra/status/1958969680862859768","timestamp":"1755889742","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9a5d8cae-5063-5f2b-8a58-b1208c43d402","type":"url","category":"Network activity","to_ids":true,"value":"http://45.137.99.53:31337","comment":"https://x.com/drb_ra/status/1958969819430363283","timestamp":"1755889775","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d85c8896-f1f5-5813-b9fa-b22f912c5b57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.137.99.53","comment":"https://x.com/drb_ra/status/1958969819430363283","timestamp":"1755889775","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ca7ef405-2ddf-5c4c-bba7-52cf1f5a999a","type":"url","category":"Network activity","to_ids":true,"value":"http://75.119.146.156:31337","comment":"https://x.com/drb_ra/status/1958969957183889821","timestamp":"1755889808","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f1dda2d2-b911-554a-95f1-0fe428708eaf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.119.146.156","comment":"https://x.com/drb_ra/status/1958969957183889821","timestamp":"1755889808","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7c759493-fa1c-5ce4-ba0c-ef3268194fbb","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.findsiteabc.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fe79532c-d276-501a-995c-8dadfc6f41b8","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.sncrs.top","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0a8c7c5d-b3b1-5cd8-a448-f2699b5aa8ea","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.sncrs.top","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"6b5b677b-4c64-5f4d-bef0-dcc5e4e474f5","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.ncrs.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bfed55c6-cfe7-548e-8d2a-c8d414014152","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.ncrs.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"06f47529-4ad2-56ca-824d-a67d6dd278fe","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.findsiteabc.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1d270fe6-2e3b-58f3-99e8-4fb318c7188c","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.verifyn.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0f99e21f-6f5b-5623-aadf-13c74f108c74","type":"domain","category":"Network activity","to_ids":true,"value":"dc.c.verifyn.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"797001a1-d8a4-51fc-be2d-635ba0506230","type":"url","category":"Network activity","to_ids":true,"value":"http://indiasrcorg.com","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4078d16e-f5f2-568c-9f7e-a3c6d694a6d6","type":"domain","category":"Network activity","to_ids":true,"value":"indiasrcorg.com","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4c476a97-171e-569d-862e-ad3242c552dd","type":"url","category":"Network activity","to_ids":true,"value":"http://indiasciorg.com","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4d30fb72-2d3e-534c-9864-32cc6a65e4f3","type":"domain","category":"Network activity","to_ids":true,"value":"indiasciorg.com","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e4c23463-0b0b-5ae0-aa7a-361f17025e25","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.c.verifyn.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9ca4add3-5841-5bfe-9305-8533cc1815ca","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.verifyn.site","comment":"https://x.com/500mk500/status/1958971606673268806","timestamp":"1755890201","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"417134a0-4572-5230-8fcc-8a5bc23b3192","type":"url","category":"Network activity","to_ids":true,"value":"http://45.201.216.199:65535","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"fc8c3807-a03b-57f3-960c-2c275c884cc7","type":"url","category":"Network activity","to_ids":true,"value":"http://43.226.17.43:8018","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"501a866c-1d30-584f-bc72-d6deb5086387","type":"url","category":"Network activity","to_ids":true,"value":"http://35.215.191.55:9527","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"bce6b3b4-4c99-5b7b-b40c-1769a655e599","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.201.216.199","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"dad69ff1-7caa-5278-b99c-b093e9755f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.226.17.43","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"a1e1a75f-7c21-5864-b969-5c2d1c9cbea3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.215.191.55","comment":"https://x.com/FalconFeedsio/status/1958976836047708304","timestamp":"1755891448","distribution":"5"},{"uuid":"de98ec59-cef6-577c-bbc0-1dc6bfcf6309","type":"domain","category":"Network activity","to_ids":true,"value":"dyuigefdgsv.beer","comment":"https://x.com/skocherhan/status/1958981561816174634","timestamp":"1755892575","distribution":"5"},{"uuid":"c089d1a8-c7fa-59e7-948f-2faf828cbe48","type":"url","category":"Network activity","to_ids":true,"value":"http://dyuigefdgsv.beer","comment":"https://x.com/skocherhan/status/1958981561816174634","timestamp":"1755892575","distribution":"5"},{"uuid":"0146fe45-3b1c-5375-8d13-4494041e9270","type":"url","category":"Network activity","to_ids":true,"value":"http://94.141.122.164:33337","comment":"https://x.com/skocherhan/status/1958981561816174634","timestamp":"1755892575","distribution":"5"},{"uuid":"f624f4aa-0369-5cf5-afda-3106936e2272","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.141.122.164","comment":"https://x.com/skocherhan/status/1958981561816174634","timestamp":"1755892575","distribution":"5"},{"uuid":"59a7c648-7477-5bdb-8d85-de9402d41957","type":"domain","category":"Network activity","to_ids":true,"value":"mobfree.weebly.com","comment":"https://x.com/urldna_bot/status/1958982546731000315","timestamp":"1755892809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ecb6472b-71d9-5d6c-bb23-6b899d21b77f","type":"url","category":"Network activity","to_ids":true,"value":"https://mobfree.weebly.com","comment":"https://x.com/urldna_bot/status/1958982546731000315","timestamp":"1755892809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"babf5002-29e2-54e0-a6d0-35aa8e1c22ca","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.189","comment":"https://x.com/FalconFeedsio/status/1958984550396129578","timestamp":"1755893287","distribution":"5"},{"uuid":"ec0adec4-8343-599a-b5b0-05616a927fb0","type":"url","category":"Network activity","to_ids":true,"value":"http://5.196.167.242:1526","comment":"https://x.com/FalconFeedsio/status/1958984550396129578","timestamp":"1755893287","distribution":"5"},{"uuid":"6bfc464e-a6c8-5b3c-a2b1-a1fe09830612","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.10:402","comment":"https://x.com/FalconFeedsio/status/1958984550396129578","timestamp":"1755893287","distribution":"5"},{"uuid":"5594debd-10f6-5721-98b1-8fb6db42eec2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.189","comment":"https://x.com/FalconFeedsio/status/1958984550396129578","timestamp":"1755893287","distribution":"5"},{"uuid":"8ed4f95a-7e5f-5e17-8011-a35c2c8ea584","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.10","comment":"https://x.com/FalconFeedsio/status/1958984550396129578","timestamp":"1755893287","distribution":"5"},{"uuid":"142c79d6-e88d-59b2-bab0-7f858df0a9a3","type":"url","category":"Network activity","to_ids":true,"value":"http://35.198.17.120:6000","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"8fc20eae-eca7-55ca-a0be-5ddb31c74ce6","type":"url","category":"Network activity","to_ids":true,"value":"http://168.227.56.89:26269","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"e59826a6-f8aa-576d-9716-cacac3767b59","type":"url","category":"Network activity","to_ids":true,"value":"http://20.226.4.33","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"11a99382-706d-5c50-ae42-090d0785ce33","type":"url","category":"Network activity","to_ids":true,"value":"http://38.210.213.87","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"79f960f0-71e3-5b11-a245-b9d1c7de01b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.198.17.120","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"63d3b964-6e5a-5b8a-b9ad-c077dbcb520f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.227.56.89","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"c88f7b15-d519-5672-830a-f1e1b1110b48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.226.4.33","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"f3e6190c-9328-5a52-9efa-cde0184bb9ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.210.213.87","comment":"https://x.com/FalconFeedsio/status/1958989632403619968","timestamp":"1755894499","distribution":"5"},{"uuid":"3f71cec3-36d8-5175-a40d-bc85108fc1c2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.190.245:443","comment":"https://x.com/drb_ra/status/1958996471254327580","timestamp":"1755896129","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4bf0aaa9-d5b5-59e0-a202-4767db43011e","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.71","comment":"https://x.com/threatquery/status/1958997624817672518","timestamp":"1755896404","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"b24188b2-9b2b-5932-b434-fc614e9a1b20","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.27.137","comment":"https://x.com/threatquery/status/1958997623207059578","timestamp":"1755896404","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"1710b3ee-c02c-5827-a928-fa1ec6e87712","type":"url","category":"Network activity","to_ids":true,"value":"http://3.213.52.193","comment":"https://x.com/threatquery/status/1958997626679959828","timestamp":"1755896405","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"c814deb0-cae5-5d0a-981d-3b08e4ba91dd","type":"url","category":"Network activity","to_ids":true,"value":"http://163.5.63.89/1.sh","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"25ec6bf2-0a47-52fa-995a-51a8c7be7965","type":"url","category":"Network activity","to_ids":true,"value":"http://31.0.0.75","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"36cd469d-a0f3-5dd4-8ea3-704f1738b55a","type":"url","category":"Network activity","to_ids":true,"value":"http://163.5.63.89","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2445c86b-c852-5fb5-b80c-1774168e5882","type":"url","category":"Network activity","to_ids":true,"value":"http://163.5.63.89:8080","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"500fcb44-efb7-5621-bcc0-c0f805327558","type":"url","category":"Network activity","to_ids":true,"value":"http://163.5.63.89:777","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"783eaa87-22d8-5a94-8929-be2e81ff561b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.0.0.75","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3a06afa3-3252-5d80-8f02-bfad82ae3afb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.5.63.89","comment":"https://x.com/redrabytes/status/1959004607314894867","timestamp":"1755898069","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"73eef3f3-753a-57d2-925b-f05dbaa47bf6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e7a71c464583de2c94f1414d741a1ababaffebc426c1ca65819681bff9764b18","comment":"https://x.com/1ZRR4H/status/1959011620794827021","timestamp":"1755899741","distribution":"5"},{"uuid":"502e2fdb-db2a-55a7-acdc-5ad167922f56","type":"url","category":"Network activity","to_ids":true,"value":"http://134.175.217.237:443","comment":"https://x.com/drb_ra/status/1959021969237844345","timestamp":"1755902208","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"160684f5-3866-5e9e-aca1-d85e4a2b5809","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.175.217.237","comment":"https://x.com/drb_ra/status/1959021969237844345","timestamp":"1755902208","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f11d4f3-9386-57c8-ad82-7439abbe4688","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.84.248","comment":"https://x.com/drb_ra/status/1959021969237844345","timestamp":"1755902208","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"743a6209-665e-5466-8cf1-fc3318c0ff8d","type":"domain","category":"Network activity","to_ids":true,"value":"app.blockswap.live","comment":"https://x.com/AmberMille78556/status/1959034940164542582","timestamp":"1755905301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3e805d44-64dd-5e24-a2c5-44e478b81dae","type":"url","category":"Network activity","to_ids":true,"value":"https://app.blockswap.live","comment":"https://x.com/AmberMille78556/status/1959034940164542582","timestamp":"1755905301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea3c6182-d8a7-5965-9ec1-b6f2fe9f1ce7","type":"domain","category":"Network activity","to_ids":true,"value":"especially.hrwyvow.cn","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f65a96ee-7985-5811-8930-8cc668db8f26","type":"url","category":"Network activity","to_ids":true,"value":"https://especially.hrwyvow.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"564b44d5-108d-5362-a6a0-05bd08a77d29","type":"domain","category":"Network activity","to_ids":true,"value":"neverious.jetj.cn","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceb7d8d1-285e-5be0-bc7b-b76b19986cad","type":"url","category":"Network activity","to_ids":true,"value":"https://neverious.jetj.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25c678ad-86ba-540a-8e32-235e3a223949","type":"domain","category":"Network activity","to_ids":true,"value":"oculatic.ozjgrep.cn","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"639e30c3-5e12-5663-acd8-3660510310f1","type":"url","category":"Network activity","to_ids":true,"value":"https://oculatic.ozjgrep.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1959036929091280911","timestamp":"1755905775","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"887fde61-c054-5712-b5c7-a6d59209bbc5","type":"domain","category":"Network activity","to_ids":true,"value":"rapid-ocean-some.on-fleek.app","comment":"https://x.com/urldna_bot/status/1959073132586647566","timestamp":"1755914407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2e40efb1-ffdd-570f-ba18-0d84db67c65e","type":"url","category":"Network activity","to_ids":true,"value":"https://rapid-ocean-some.on-fleek.app","comment":"https://x.com/urldna_bot/status/1959073132586647566","timestamp":"1755914407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"38383f70-280c-527c-a219-f49e98423ab3","type":"domain","category":"Network activity","to_ids":true,"value":"hjgh7878.weebly.com","comment":"https://x.com/urldna_bot/status/1959103329633480953","timestamp":"1755921606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a4325ceb-1b89-518d-bfab-e85f78f917a1","type":"url","category":"Network activity","to_ids":true,"value":"https://hjgh7878.weebly.com","comment":"https://x.com/urldna_bot/status/1959103329633480953","timestamp":"1755921606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"292e9d5d-9925-5915-a927-cb7dcc93e7fb","type":"md5","category":"Payload delivery","to_ids":true,"value":"d52186818ff0ec7a14d9751e98b9760c","comment":"https://x.com/skocherhan/status/1959124648412541076","timestamp":"1755926689","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"2ed2f0b8-edc9-5bda-9863-b948ee7169cd","type":"domain","category":"Network activity","to_ids":true,"value":"telstaara.weebly.com","comment":"https://x.com/urldna_bot/status/1959133541385592969","timestamp":"1755928809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ed6f4e70-9586-52a2-a2ed-ed6ac79535c5","type":"url","category":"Network activity","to_ids":true,"value":"https://telstaara.weebly.com","comment":"https://x.com/urldna_bot/status/1959133541385592969","timestamp":"1755928809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"926082af-f2a6-5293-8c0f-5d86c3c179e2","type":"domain","category":"Network activity","to_ids":true,"value":"asd.takaecdwj.xyz","comment":"https://x.com/urldna_bot/status/1959193943196729481","timestamp":"1755943210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2ec7fd23-992e-505e-81e6-0224f160d466","type":"url","category":"Network activity","to_ids":true,"value":"https://asd.takaecdwj.xyz","comment":"https://x.com/urldna_bot/status/1959193943196729481","timestamp":"1755943210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"433a3295-6d22-59c7-8dc8-b05b5998907b","type":"url","category":"Network activity","to_ids":true,"value":"https://38.181.72.47/image/","comment":"https://x.com/drb_ra/status/1959219195586953402","timestamp":"1755949231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8365946c-fa27-5306-8607-9f06d243eab9","type":"url","category":"Network activity","to_ids":true,"value":"http://38.181.72.47:443","comment":"https://x.com/drb_ra/status/1959219195586953402","timestamp":"1755949231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"383ecfd9-cacd-5ca1-aca4-7d4c9196d4b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.181.72.47","comment":"https://x.com/drb_ra/status/1959219195586953402","timestamp":"1755949231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c58258c-4c4e-5071-9089-ee188098b6b2","type":"url","category":"Network activity","to_ids":true,"value":"http://195.114.193.30:8443","comment":"https://x.com/drb_ra/status/1959219336205279233","timestamp":"1755949264","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88d72ecc-d600-5252-8913-87a8a5060f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.114.193.30","comment":"https://x.com/drb_ra/status/1959219336205279233","timestamp":"1755949264","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"45f6ff6d-30af-5934-bd72-62076cc8e6fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.54.91","comment":"https://x.com/drb_ra/status/1959219476282359883","timestamp":"1755949298","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4c81e0ab-d61c-521e-8e93-128f773c3592","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.54.91:443","comment":"https://x.com/drb_ra/status/1959219476282359883","timestamp":"1755949298","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"909cc6e9-37b9-5808-8467-68c47810b0ec","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.54.86:443","comment":"https://x.com/drb_ra/status/1959219615202005228","timestamp":"1755949331","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"70f7f404-8402-584f-8a11-d75c9bd5b582","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.54.86","comment":"https://x.com/drb_ra/status/1959219615202005228","timestamp":"1755949331","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9f14c187-632b-5179-b6fa-2631310327ac","type":"url","category":"Network activity","to_ids":true,"value":"http://91.149.239.51:2404","comment":"https://x.com/drb_ra/status/1959219754406645983","timestamp":"1755949364","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"dc1b1faa-f0fd-5f0e-a97d-df1bb7c44565","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.149.239.51","comment":"https://x.com/drb_ra/status/1959219754406645983","timestamp":"1755949364","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"54e4bd15-ba77-5c4d-b6f4-ad7e01705235","type":"url","category":"Network activity","to_ids":true,"value":"http://47.99.193.179:3232","comment":"https://x.com/drb_ra/status/1959219894362284491","timestamp":"1755949398","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"9af71753-1ab9-5098-ba2e-d8e4b0856568","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.99.193.179","comment":"https://x.com/drb_ra/status/1959219894362284491","timestamp":"1755949398","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"0bf2531c-1178-57ee-9465-7c2143b96e4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.86.33.171","comment":"https://x.com/drb_ra/status/1959220033118191815","timestamp":"1755949431","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"7411f68e-340e-5869-8e0b-41ec6c5266db","type":"url","category":"Network activity","to_ids":true,"value":"http://144.86.33.171:443","comment":"https://x.com/drb_ra/status/1959220033118191815","timestamp":"1755949431","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b29ac3ab-5ce2-50a5-9fa4-a860d7375918","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.162:1000","comment":"https://x.com/drb_ra/status/1959220173665128901","timestamp":"1755949464","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"22a9c75c-64f3-5627-8fb4-fd1782e36403","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.162","comment":"https://x.com/drb_ra/status/1959220173665128901","timestamp":"1755949464","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"84eb2bbe-be97-55d9-9cea-56d9e9150255","type":"url","category":"Network activity","to_ids":true,"value":"http://2.58.56.187:443","comment":"https://x.com/drb_ra/status/1959220313129984356","timestamp":"1755949497","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6866d8a9-116e-5cae-aa30-78003a8e8844","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.18.60:80","comment":"https://x.com/drb_ra/status/1959220451810443618","timestamp":"1755949530","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"83bcb48d-c512-5561-8bd3-cca1fcfaceac","type":"url","category":"Network activity","to_ids":true,"value":"http://18.141.223.191:443","comment":"https://x.com/drb_ra/status/1959220591719776521","timestamp":"1755949564","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d8ccba8f-2b52-5a88-bc72-0094e8f036da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.141.223.191","comment":"https://x.com/drb_ra/status/1959220591719776521","timestamp":"1755949564","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b8a889a7-5294-587b-8295-ffc38788c5a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.246.193.218","comment":"https://x.com/drb_ra/status/1959220730781982964","timestamp":"1755949597","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9889acef-72b7-5c80-a911-01c40736e588","type":"url","category":"Network activity","to_ids":true,"value":"http://34.246.193.218:80","comment":"https://x.com/drb_ra/status/1959220730781982964","timestamp":"1755949597","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ba787bf5-1471-5ed3-bc1b-c596bc0a3c42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.236.179.186","comment":"https://x.com/drb_ra/status/1959220869890179279","timestamp":"1755949630","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"5153341e-1d81-5e87-aad6-ab29b7984cdc","type":"url","category":"Network activity","to_ids":true,"value":"http://13.236.179.186:80","comment":"https://x.com/drb_ra/status/1959220869890179279","timestamp":"1755949630","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"315a3242-3d26-5403-97e8-71002700067a","type":"url","category":"Network activity","to_ids":true,"value":"http://154.36.165.77:80","comment":"https://x.com/drb_ra/status/1959221010399469648","timestamp":"1755949664","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"2cb9cc3f-4a7b-5f4f-bed4-e259120d515c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.36.165.77","comment":"https://x.com/drb_ra/status/1959221010399469648","timestamp":"1755949664","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"C2"},{"name":"Pegasus"}]},{"uuid":"ee4f55b0-3485-5775-8137-8bbc9f7366e7","type":"url","category":"Network activity","to_ids":true,"value":"http://195.77.8.140:4444","comment":"https://x.com/drb_ra/status/1959221149818146832","timestamp":"1755949697","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"6db2b32f-e840-5400-b015-0cbf359e7de8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.77.8.140","comment":"https://x.com/drb_ra/status/1959221149818146832","timestamp":"1755949697","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"73d5e2ec-9036-58b8-a1e9-0056c68652ca","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.75.28:8888","comment":"https://x.com/drb_ra/status/1959221290864119919","timestamp":"1755949730","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"e36586b6-cbb0-53e8-beca-b0ab84bc8489","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.75.28","comment":"https://x.com/drb_ra/status/1959221290864119919","timestamp":"1755949730","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"72b8b600-1789-5cb6-8983-88a4c60d5443","type":"url","category":"Network activity","to_ids":true,"value":"http://89.110.126.139:443","comment":"https://x.com/drb_ra/status/1959221430119268786","timestamp":"1755949764","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"4c7a886c-df49-5166-9f6e-fcd324a393b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.110.126.139","comment":"https://x.com/drb_ra/status/1959221430119268786","timestamp":"1755949764","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"d235cabb-2809-5ca1-b157-316b3fbb7b81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"168.100.239.215","comment":"https://x.com/drb_ra/status/1959221570095775880","timestamp":"1755949797","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"8aafcb36-22d5-5497-a072-1d128679fa09","type":"url","category":"Network activity","to_ids":true,"value":"http://168.100.239.215:7443","comment":"https://x.com/drb_ra/status/1959221570095775880","timestamp":"1755949797","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"2bd40764-acf2-50d0-bca1-ded3deb2d369","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.20.46:31337","comment":"https://x.com/drb_ra/status/1959221709246025782","timestamp":"1755949830","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7155d04b-f350-5d1d-8073-7c8fa4b4f6ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.20.46","comment":"https://x.com/drb_ra/status/1959221709246025782","timestamp":"1755949830","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"92fc8e84-d99c-5665-845c-83d46b5d1cbd","type":"url","category":"Network activity","to_ids":true,"value":"http://192.144.232.209:31337","comment":"https://x.com/drb_ra/status/1959221848513581157","timestamp":"1755949863","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"04cf507d-9591-5154-b567-c543c13a7078","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.144.232.209","comment":"https://x.com/drb_ra/status/1959221848513581157","timestamp":"1755949863","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0b90e266-f302-5792-99b3-990974a61047","type":"url","category":"Network activity","to_ids":true,"value":"http://47.79.146.121:443","comment":"https://x.com/drb_ra/status/1959221988112650482","timestamp":"1755949897","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0fa7664b-e209-5382-81d2-ada3bee95416","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.146.121","comment":"https://x.com/drb_ra/status/1959221988112650482","timestamp":"1755949897","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1959222127451664809","timestamp":"1755949930","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bf9983c7-da51-5006-aa53-355e75d5bdc8","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:31337","comment":"https://x.com/drb_ra/status/1959222127451664809","timestamp":"1755949930","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1710b3ee-c02c-5827-a928-fa1ec6e87712","type":"url","category":"Network activity","to_ids":true,"value":"http://3.213.52.193","comment":"https://x.com/skocherhan/status/1959222298168242408","timestamp":"1755949971","distribution":"5"},{"uuid":"3ce346d4-adb4-5322-aa73-7b5af6ff3d58","type":"domain","category":"Network activity","to_ids":true,"value":"cdnpoint.guru","comment":"https://x.com/skocherhan/status/1959223336484896915","timestamp":"1755950218","distribution":"5"},{"uuid":"c3d76136-3f17-5512-8a6e-307edad94598","type":"url","category":"Network activity","to_ids":true,"value":"https://cdnpoint.guru","comment":"https://x.com/skocherhan/status/1959223336484896915","timestamp":"1755950218","distribution":"5"},{"uuid":"0cf6b47f-adda-5654-8904-934e92f7f743","type":"domain","category":"Network activity","to_ids":true,"value":"nextpage-gwg.pages.dev","comment":"https://x.com/skocherhan/status/1959223336484896915","timestamp":"1755950218","distribution":"5"},{"uuid":"4e0684d0-0ddf-5c51-bfeb-f48e47c80ee0","type":"url","category":"Network activity","to_ids":true,"value":"https://nextpage-gwg.pages.dev","comment":"https://x.com/skocherhan/status/1959223336484896915","timestamp":"1755950218","distribution":"5"},{"uuid":"73ad9743-d90f-5438-987c-be17693f450b","type":"domain","category":"Network activity","to_ids":true,"value":"my---ndax-aauth.webflow.io","comment":"https://x.com/urldna_bot/status/1959224127576777113","timestamp":"1755950407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"79575cfc-c851-53c1-9fe9-52966670c634","type":"url","category":"Network activity","to_ids":true,"value":"http://my---ndax-aauth.webflow.io","comment":"https://x.com/urldna_bot/status/1959224127576777113","timestamp":"1755950407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65798580-db04-5ce1-9fd7-a98216f106a5","type":"url","category":"Network activity","to_ids":true,"value":"http://85.158.108.135:5050/login","comment":"https://x.com/c3rb3ru5d3d53c/status/1959230609584279600","timestamp":"1755951952","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"878503d4-38c7-51ae-9552-134f0724d13d","type":"url","category":"Network activity","to_ids":true,"value":"http://64.52.80.44:9999/login","comment":"https://x.com/c3rb3ru5d3d53c/status/1959230609584279600","timestamp":"1755951952","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0592237b-67d7-5635-b6a0-a95836d672fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.158.108.135","comment":"https://x.com/c3rb3ru5d3d53c/status/1959230609584279600","timestamp":"1755951952","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3ef7a626-e6d0-5dda-954c-50ca71186454","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.52.80.44","comment":"https://x.com/c3rb3ru5d3d53c/status/1959230609584279600","timestamp":"1755951952","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bbf624d6-ea68-538f-b3c0-e675fae1d174","type":"domain","category":"Network activity","to_ids":true,"value":"vip1-appl-ho-tm-ails-mt-accoutjapanse.gongsj.club","comment":"https://x.com/masaomi346/status/1959231697574076695","timestamp":"1755952212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b8cc9c3-080e-54b9-a0c8-5989ca2453d7","type":"url","category":"Network activity","to_ids":true,"value":"https://vip1-appl-ho-tm-ails-mt-accoutjapanse.gongsj.club/appicoud+/","comment":"https://x.com/masaomi346/status/1959231697574076695","timestamp":"1755952212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"595e5f1c-1406-58bf-8eb7-45c475b3554e","type":"domain","category":"Network activity","to_ids":true,"value":"vip1-appl-ho-tm-ails-mt-accoutjapanse.quark.work","comment":"https://x.com/masaomi346/status/1959231697574076695","timestamp":"1755952212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cd620e20-bbcd-5216-9c1b-9133ca4a8241","type":"url","category":"Network activity","to_ids":true,"value":"https://vip1-appl-ho-tm-ails-mt-accoutjapanse.quark.work/appicoud+/","comment":"https://x.com/masaomi346/status/1959231697574076695","timestamp":"1755952212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1d79c5e-ff2e-5c27-9716-ae210ca2802c","type":"md5","category":"Payload delivery","to_ids":true,"value":"a15620e54d43d3f22774761ad7ae7849","comment":"https://x.com/ReBensk/status/1959241486740185475","timestamp":"1755954546","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"badd86fe-3ec2-5f83-93f0-e1551272882b","type":"domain","category":"Network activity","to_ids":true,"value":"kuckoin-usalogi.godaddysites.com","comment":"https://x.com/urldna_bot/status/1959254326423015804","timestamp":"1755957607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"23971460-9409-508c-9d68-50948cba5244","type":"url","category":"Network activity","to_ids":true,"value":"https://kuckoin-usalogi.godaddysites.com","comment":"https://x.com/urldna_bot/status/1959254326423015804","timestamp":"1755957607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8e989183-de42-5fb7-af98-697bf54bba6d","type":"domain","category":"Network activity","to_ids":true,"value":"espuma-sdp.com","comment":"https://x.com/JAMESWT_WT/status/1959281541097328888","timestamp":"1755964095","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"2cae437e-3a8f-59c4-86ca-a4c545c2069f","type":"url","category":"Network activity","to_ids":true,"value":"https://espuma-sdp.com/awz10/","comment":"https://x.com/JAMESWT_WT/status/1959281541097328888","timestamp":"1755964095","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"641cc2bf-a545-51d1-8209-bc3e77642d73","type":"domain","category":"Network activity","to_ids":true,"value":"regalo-oggi.com","comment":"https://x.com/JAMESWT_WT/status/1959281541097328888","timestamp":"1755964095","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"38e7b694-b567-5467-a02e-4a06e2674730","type":"url","category":"Network activity","to_ids":true,"value":"https://www.regalo-oggi.com","comment":"https://x.com/JAMESWT_WT/status/1959281541097328888","timestamp":"1755964095","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"5ff9d93e-c707-523d-9826-9a7833011412","type":"domain","category":"Network activity","to_ids":true,"value":"lomke0ap2jlcmu3j.jimpike.com.au","comment":"https://x.com/urldna_bot/status/1959284525164339266","timestamp":"1755964807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bc2c060d-8acc-5289-937f-88fe90dc79df","type":"url","category":"Network activity","to_ids":true,"value":"https://lomke0ap2jlcmu3j.jimpike.com.au/mobile/front/","comment":"https://x.com/urldna_bot/status/1959284525164339266","timestamp":"1755964807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e7363d0f-18d6-5bfc-88b6-b06ac9ecb29e","type":"domain","category":"Network activity","to_ids":true,"value":"luckybox-nft19.vercel.app","comment":"https://x.com/urldna_bot/status/1959314722332790846","timestamp":"1755972006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aaaffdcf-537d-507f-b6c0-aba5ac08523a","type":"url","category":"Network activity","to_ids":true,"value":"https://luckybox-nft19.vercel.app","comment":"https://x.com/urldna_bot/status/1959314722332790846","timestamp":"1755972006","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b0e011e9-be55-5438-98e8-7ab535f747dc","type":"domain","category":"Network activity","to_ids":true,"value":"links.truthsocial.com","comment":"https://x.com/JAMESWT_WT/status/1959317292845576433","timestamp":"1755972619","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e2f923c-0995-54ec-9d73-4e59c344fe59","type":"url","category":"Network activity","to_ids":true,"value":"https://links.truthsocial.com/link/114797571026530027","comment":"https://x.com/JAMESWT_WT/status/1959317292845576433","timestamp":"1755972619","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8533b428-54a6-5ef1-91cf-55e25f6e9d29","type":"domain","category":"Network activity","to_ids":true,"value":"pay.qrgene.shop","comment":"https://x.com/JAMESWT_WT/status/1959317292845576433","timestamp":"1755972619","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"37872b79-1ba6-5116-af0a-fcaeaee7fa7e","type":"url","category":"Network activity","to_ids":true,"value":"https://pay.qrgene.shop/index.php/checkout-it/?add-to-cart=83","comment":"https://x.com/JAMESWT_WT/status/1959317292845576433","timestamp":"1755972619","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e7f1eddc-a2c4-5488-bd8e-a0ed9634d6e6","type":"url","category":"Network activity","to_ids":true,"value":"http://3.24.114.211:7443","comment":"https://x.com/drb_ra/status/1959326233344475469","timestamp":"1755974751","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"9eec2996-6707-530e-b0c4-35c31f581167","type":"url","category":"Network activity","to_ids":true,"value":"http://185.202.236.143:7443","comment":"https://x.com/drb_ra/status/1959326371240726782","timestamp":"1755974784","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"321cfe30-0305-5367-a18a-e9f5d173bd59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.202.236.143","comment":"https://x.com/drb_ra/status/1959326371240726782","timestamp":"1755974784","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"180faeb7-79e0-5c00-aa70-346ea6997c96","type":"url","category":"Network activity","to_ids":true,"value":"http://103.245.237.112:31337","comment":"https://x.com/drb_ra/status/1959326508662890549","timestamp":"1755974816","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d67dafcb-42a6-5cbb-972b-948db3619561","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.245.237.112","comment":"https://x.com/drb_ra/status/1959326508662890549","timestamp":"1755974816","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"2209b49f-25d0-5280-909e-dcd4a4dd8079","type":"url","category":"Network activity","to_ids":true,"value":"http://46.62.172.170:8443","comment":"https://x.com/drb_ra/status/1959326648559710520","timestamp":"1755974850","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"08b3fb0c-9f7c-5cca-b9ef-b3d07d878f8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.62.172.170","comment":"https://x.com/drb_ra/status/1959326648559710520","timestamp":"1755974850","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d57e3b1b-0cf5-5575-ac71-8ac87e2c3439","type":"url","category":"Network activity","to_ids":true,"value":"http://62.60.226.231:2022","comment":"https://x.com/drb_ra/status/1959327293509443780","timestamp":"1755975003","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"034e4d89-2b0e-52b5-9177-6e9140b49629","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.60.226.231","comment":"https://x.com/drb_ra/status/1959327293509443780","timestamp":"1755975003","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d3d5d623-1c6f-57f9-a116-234e4bb54338","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.211:2404","comment":"https://x.com/drb_ra/status/1959327432479236410","timestamp":"1755975037","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1d11d632-5e23-57eb-867f-bb94b202f481","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.211","comment":"https://x.com/drb_ra/status/1959327432479236410","timestamp":"1755975037","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"77e0b1e4-8648-59ba-87d0-af8357158810","type":"url","category":"Network activity","to_ids":true,"value":"http://139.99.235.40:4040","comment":"https://x.com/drb_ra/status/1959327570471911763","timestamp":"1755975070","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c91022b5-6e4e-5f39-b07e-2d7cbc062724","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.99.235.40","comment":"https://x.com/drb_ra/status/1959327570471911763","timestamp":"1755975070","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"afbfe682-d68c-5f54-9093-e84d62ccbb85","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.130.210:3232","comment":"https://x.com/drb_ra/status/1959327709009748279","timestamp":"1755975103","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"65946e6f-a98f-5cf2-9bf7-8ec3e6d42c9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.130.210","comment":"https://x.com/drb_ra/status/1959327709009748279","timestamp":"1755975103","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"c4bf17b5-1f77-5101-9f8e-8e24825f427d","type":"url","category":"Network activity","to_ids":true,"value":"http://54.209.57.32:20548","comment":"https://x.com/drb_ra/status/1959327846549299441","timestamp":"1755975135","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8d8e520a-1757-52ef-a449-90bdfcd0ee52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.209.57.32","comment":"https://x.com/drb_ra/status/1959327846549299441","timestamp":"1755975135","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c6221de6-0d46-53e0-982c-fe1d0de24a6d","type":"url","category":"Network activity","to_ids":true,"value":"http://162.243.204.23:8808","comment":"https://x.com/drb_ra/status/1959327984986526154","timestamp":"1755975168","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8f90f1a3-c5a8-5b81-9291-b9fc672a7490","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.243.204.23","comment":"https://x.com/drb_ra/status/1959327984986526154","timestamp":"1755975168","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0dfe4fb7-b89d-5ae4-bc1b-421193b856df","type":"url","category":"Network activity","to_ids":true,"value":"http://84.200.73.108:8808","comment":"https://x.com/drb_ra/status/1959328123910025458","timestamp":"1755975201","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"46f784b2-7ca1-5425-adf1-33033ce740fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.200.73.108","comment":"https://x.com/drb_ra/status/1959328123910025458","timestamp":"1755975201","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"9682765f-0ca7-5bab-8cb4-72689a0c1d2f","type":"url","category":"Network activity","to_ids":true,"value":"http://173.212.197.178:80","comment":"https://x.com/drb_ra/status/1959328261395394900","timestamp":"1755975234","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"915d61e8-b55e-5680-b45a-9b2596fd7a71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.212.197.178","comment":"https://x.com/drb_ra/status/1959328261395394900","timestamp":"1755975234","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"64c57ff7-425b-56ec-926a-a1bcebf851ed","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.156.123:80","comment":"https://x.com/drb_ra/status/1959328399731859546","timestamp":"1755975267","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1006644c-5935-5fa7-ade5-753f9224f0f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.156.123","comment":"https://x.com/drb_ra/status/1959328399731859546","timestamp":"1755975267","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"65feab72-0434-5bfa-a570-b5014d522f82","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.95.238:80","comment":"https://x.com/drb_ra/status/1959328537892028520","timestamp":"1755975300","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"c1095532-8b4e-5ed6-907b-4c89b57d1c10","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.95.238","comment":"https://x.com/drb_ra/status/1959328537892028520","timestamp":"1755975300","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"2994d2a1-07e4-5c2c-b2a7-ae67276ec15e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.225.234.132:8888","comment":"https://x.com/drb_ra/status/1959328676375310560","timestamp":"1755975333","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"efd71d66-845b-5f84-9c8f-50a02bbf145d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.225.234.132","comment":"https://x.com/drb_ra/status/1959328676375310560","timestamp":"1755975333","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"0cf2a331-1e1c-5320-b64d-8c8bd335d2cf","type":"url","category":"Network activity","to_ids":true,"value":"http://44.197.206.29:445","comment":"https://x.com/drb_ra/status/1959328816146379230","timestamp":"1755975366","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d19be096-46f1-5c02-b5e4-f3ffa958699d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.197.206.29","comment":"https://x.com/drb_ra/status/1959328816146379230","timestamp":"1755975366","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"32c597de-2860-5596-b96f-8dfc8b194821","type":"url","category":"Network activity","to_ids":true,"value":"http://95.179.186.204:443","comment":"https://x.com/drb_ra/status/1959328959893762152","timestamp":"1755975401","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7e536622-cbc3-57c0-a683-5b8e7f1b3858","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.179.186.204","comment":"https://x.com/drb_ra/status/1959328959893762152","timestamp":"1755975401","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"54c769a2-aa38-5135-a5fa-9ede80fd4213","type":"url","category":"Network activity","to_ids":true,"value":"http://65.20.109.42:443","comment":"https://x.com/drb_ra/status/1959329098100019631","timestamp":"1755975434","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"01f3e1d1-e1c8-5e54-b883-ffeb8af6892b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.20.109.42","comment":"https://x.com/drb_ra/status/1959329098100019631","timestamp":"1755975434","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"937f68c0-c449-5354-9056-116c52b1cd1a","type":"url","category":"Network activity","to_ids":true,"value":"http://59.35.57.209:36161","comment":"https://x.com/drb_ra/status/1959329237170606586","timestamp":"1755975467","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5dd7a8f9-ce3b-5c48-bb57-40fa24c20aeb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.35.57.209","comment":"https://x.com/drb_ra/status/1959329237170606586","timestamp":"1755975467","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"1e666bfb-bbba-57b7-984b-ad4044e1015b","type":"domain","category":"Network activity","to_ids":true,"value":"mt-swift.com-ustf.us","comment":"https://x.com/urldna_bot/status/1959344920205963458","timestamp":"1755979206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b585bd36-1858-51e7-8e1f-65daef8e4500","type":"url","category":"Network activity","to_ids":true,"value":"http://mt-swift.com-ustf.us","comment":"https://x.com/urldna_bot/status/1959344920205963458","timestamp":"1755979206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a4fde455-3266-5ab9-9ff1-c18de77e05cb","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.218.47","comment":"https://x.com/threatquery/status/1959360017213104242","timestamp":"1755982805","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"a5c27d5c-de49-55a1-a7eb-e25d79fd677e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.218.47","comment":"https://x.com/threatquery/status/1959360017213104242","timestamp":"1755982805","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"71c1fd15-a186-526f-8bee-10a1f8652553","type":"url","category":"Network activity","to_ids":true,"value":"http://59.35.57.209","comment":"https://x.com/threatquery/status/1959360015376040090","timestamp":"1755982805","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f8d20c8e-d6c9-5a79-9e0a-ddefe99bfa31","type":"url","category":"Network activity","to_ids":true,"value":"http://152.42.163.100","comment":"https://x.com/threatquery/status/1959360018995708125","timestamp":"1755982806","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"b126ace4-f89d-5343-9350-77b44c4d4570","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.42.163.100","comment":"https://x.com/threatquery/status/1959360018995708125","timestamp":"1755982806","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"16cdd37b-637e-547e-b6e1-c380bee6819e","type":"domain","category":"Network activity","to_ids":true,"value":"accesserdsc.com","comment":"https://x.com/drb_ra/status/1959361325525811352","timestamp":"1755983117","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a283a51f-429e-5a73-9e0e-93095b13c5f1","type":"url","category":"Network activity","to_ids":true,"value":"https://accesserdsc.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1959361325525811352","timestamp":"1755983117","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"72f57849-1d0b-5627-8a7f-8568ba9190e9","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.74.112:2052","comment":"https://x.com/drb_ra/status/1959361325525811352","timestamp":"1755983117","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ef5f574e-ee95-53d6-98f5-395cd26799c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.74.112","comment":"https://x.com/drb_ra/status/1959361325525811352","timestamp":"1755983117","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e3f71512-81a4-5014-9591-8d0ba34d7b1b","type":"url","category":"Network activity","to_ids":true,"value":"http://106.52.162.38:80","comment":"https://x.com/drb_ra/status/1959361969862951226","timestamp":"1755983271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e7107678-bcce-59a9-bedd-34de2cc8c314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.52.162.38","comment":"https://x.com/drb_ra/status/1959361969862951226","timestamp":"1755983271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"473dab10-61bd-5fd8-993f-2f9522137420","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.105.32.189","comment":"https://x.com/drb_ra/status/1959361969862951226","timestamp":"1755983271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3cb0b2e0-74c7-5fff-a10b-e530b3fdd102","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:50050","comment":"https://x.com/drb_ra/status/1959362108266598689","timestamp":"1755983304","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/drb_ra/status/1959362108266598689","timestamp":"1755983304","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"65c70607-5343-57d3-b1d9-bc429b55ee58","type":"domain","category":"Network activity","to_ids":true,"value":"barclaystrades.com","comment":"https://x.com/skocherhan/status/1959364808005878181","timestamp":"1755983948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ce099ec-a1c1-5c69-8438-22b2b2920a7d","type":"url","category":"Network activity","to_ids":true,"value":"http://barclaystrades.com","comment":"https://x.com/skocherhan/status/1959364808005878181","timestamp":"1755983948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"37a6b3ce-0d73-5cc5-8f0c-a5bc1fb0f951","type":"url","category":"Network activity","to_ids":true,"value":"http://165.154.238.178","comment":"https://x.com/skocherhan/status/1959364808005878181","timestamp":"1755983948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d24ca578-09cb-5774-bf47-ba1a4571ecc8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.154.238.178","comment":"https://x.com/skocherhan/status/1959364808005878181","timestamp":"1755983948","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81d0a5db-9af6-5f13-81a5-dd0974f52c54","type":"domain","category":"Network activity","to_ids":true,"value":"gov-br.receitafederal-irpf.servebbs.com","comment":"https://x.com/skocherhan/status/1959366593881714922","timestamp":"1755984373","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"17aa7f03-c7f1-52c1-ab4f-148ac4465cae","type":"url","category":"Network activity","to_ids":true,"value":"http://gov-br.receitafederal-irpf.servebbs.com/accs/home.php","comment":"https://x.com/skocherhan/status/1959366593881714922","timestamp":"1755984373","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"534f9ab1-c013-52c7-b96f-cfad091e3811","type":"url","category":"Network activity","to_ids":true,"value":"http://143.244.46.151:2404","comment":"https://x.com/skocherhan/status/1959381114231177267","timestamp":"1755987835","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"53244b6d-5aef-5e93-9d35-a93bc67693ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.244.46.151","comment":"https://x.com/skocherhan/status/1959381114231177267","timestamp":"1755987835","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"084ade1a-1e2e-571e-92e8-1a531bb5812c","type":"domain","category":"Network activity","to_ids":true,"value":"secure-chat-support.muetalk.chat","comment":"https://x.com/skocherhan/status/1959381945118588966","timestamp":"1755988033","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"19317235-17bc-5971-a659-31d5c06d8fe1","type":"url","category":"Network activity","to_ids":true,"value":"http://secure-chat-support.muetalk.chat","comment":"https://x.com/skocherhan/status/1959381945118588966","timestamp":"1755988033","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"b383b5f3-2e9b-5979-b3ad-bed97ccae17a","type":"url","category":"Network activity","to_ids":true,"value":"http://193.24.210.67:1001","comment":"https://x.com/skocherhan/status/1959381945118588966","timestamp":"1755988033","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"b4a98dcd-adb3-5c7a-aabf-8e72df8fbcf4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.24.210.67","comment":"https://x.com/skocherhan/status/1959381945118588966","timestamp":"1755988033","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"cf0bb758-1123-5bb0-95b4-212da627ed39","type":"md5","category":"Payload delivery","to_ids":true,"value":"71c7b1c759f1556b07575e63875dce36","comment":"https://x.com/skocherhan/status/1959381945118588966","timestamp":"1755988033","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"3972161e-eea0-5900-aeab-fcc40acf71e3","type":"url","category":"Network activity","to_ids":true,"value":"http://160.250.129.8:8080","comment":"https://x.com/drb_ra/status/1959388114561945836","timestamp":"1755989504","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"86c18ac8-0b39-5a93-b6b3-41cba9bfa23b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.250.129.8","comment":"https://x.com/drb_ra/status/1959388114561945836","timestamp":"1755989504","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cf6a69a6-ea3e-5a08-a9c5-2f02b7c2fb09","type":"url","category":"Network activity","to_ids":true,"value":"https://188.239.190.19/updates.rss","comment":"https://x.com/drb_ra/status/1959388254249091447","timestamp":"1755989538","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b12eaca9-7faa-5cb7-8f46-345e44309d96","type":"url","category":"Network activity","to_ids":true,"value":"http://188.239.19.190:443","comment":"https://x.com/drb_ra/status/1959388254249091447","timestamp":"1755989538","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb59a9eb-01fd-572f-a83b-a4f2b237bdf3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.239.19.190","comment":"https://x.com/drb_ra/status/1959388254249091447","timestamp":"1755989538","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"625a639e-a497-556b-a02d-2c6d37fe0ab7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.239.190.19","comment":"https://x.com/drb_ra/status/1959388254249091447","timestamp":"1755989538","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"09f2ab10-1720-5460-9431-169e8a0c4e36","type":"domain","category":"Network activity","to_ids":true,"value":"letterpostbg.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1959405331441676339","timestamp":"1755993609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"663d0e4e-9806-55e1-9f83-43b25b4977e4","type":"url","category":"Network activity","to_ids":true,"value":"https://letterpostbg.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1959405331441676339","timestamp":"1755993609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1e339909-9933-5cc9-a769-cf2a2b12cf29","type":"domain","category":"Network activity","to_ids":true,"value":"netants.icu","comment":"https://x.com/catnap707/status/1959413878665978273","timestamp":"1755995647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9240faa-ce01-5eaf-b631-3215fe84146a","type":"url","category":"Network activity","to_ids":true,"value":"http://netants.icu/domain","comment":"https://x.com/catnap707/status/1959413878665978273","timestamp":"1755995647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6b04fa79-9d73-5dee-af4f-7316da776d0a","type":"domain","category":"Network activity","to_ids":true,"value":"uhzpi.icu","comment":"https://x.com/catnap707/status/1959413878665978273","timestamp":"1755995647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e922256-4ad1-5714-9713-5dfc25f22dbd","type":"url","category":"Network activity","to_ids":true,"value":"http://uhzpi.icu/apple-co.jp/#/","comment":"https://x.com/catnap707/status/1959413878665978273","timestamp":"1755995647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"652cef0f-48b4-57a8-b48e-1241aabba4a8","type":"url","category":"Network activity","to_ids":true,"value":"http://23.59.183.23","comment":"https://x.com/catnap707/status/1959413878665978273","timestamp":"1755995647","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3cc06a34-4e18-51e1-8d46-21b389b870d3","type":"domain","category":"Network activity","to_ids":true,"value":"focusnow.icu","comment":"https://x.com/catnap707/status/1959418455263973707","timestamp":"1755996738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5200142d-a46b-55f7-94d6-15fee31cf8e2","type":"url","category":"Network activity","to_ids":true,"value":"http://focusnow.icu/applecojp","comment":"https://x.com/catnap707/status/1959418455263973707","timestamp":"1755996738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35f9aefa-600e-5002-8f6b-3a92fa310bf5","type":"domain","category":"Network activity","to_ids":true,"value":"techworlda.icu","comment":"https://x.com/catnap707/status/1959418455263973707","timestamp":"1755996738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23b5c4f6-95f0-55ae-9aa6-1f134a1811d6","type":"url","category":"Network activity","to_ids":true,"value":"http://techworlda.icu/appleco.jp/#/","comment":"https://x.com/catnap707/status/1959418455263973707","timestamp":"1755996738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff28b72f-8598-5db2-925d-ee621d0e617b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.155.218","comment":"https://x.com/catnap707/status/1959418455263973707","timestamp":"1755996738","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6237a2ee-e82d-574b-a522-d09c6d9209f1","type":"domain","category":"Network activity","to_ids":true,"value":"fundant.shop","comment":"https://x.com/Es07er1K/status/1959429902895300927","timestamp":"1755999467","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7755db60-4dbf-5fec-b52c-9a55c7e23c95","type":"url","category":"Network activity","to_ids":true,"value":"https://www.fundant.shop","comment":"https://x.com/Es07er1K/status/1959429902895300927","timestamp":"1755999467","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4ef98f24-b658-5fe6-a021-0a28d4b629b0","type":"domain","category":"Network activity","to_ids":true,"value":"secretteam.gitbook.io","comment":"https://x.com/urldna_bot/status/1959435520213229708","timestamp":"1756000807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a61f17b8-abf1-55b1-9a56-2ebb84d89b83","type":"url","category":"Network activity","to_ids":true,"value":"https://secretteam.gitbook.io","comment":"https://x.com/urldna_bot/status/1959435520213229708","timestamp":"1756000807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"df6f03ca-1520-5e92-ae13-75d0a499f08b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.99.103.174","comment":"https://x.com/FalconFeedsio/status/1959436651706687537","timestamp":"1756001076","distribution":"5"},{"uuid":"81d12db2-b73e-5f04-b6a4-92f41d06ca40","type":"url","category":"Network activity","to_ids":true,"value":"http://152.42.163.100:80/8080","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"3cb0b2e0-74c7-5fff-a10b-e530b3fdd102","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.22.149:50050","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"d065c494-92b6-5908-a0eb-38c03aeb26d2","type":"url","category":"Network activity","to_ids":true,"value":"http://110.40.176.194:80","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"b126ace4-f89d-5343-9350-77b44c4d4570","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.42.163.100","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"0bd8e718-a56d-5ba0-a2bf-57a06ddd5289","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.22.149","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"c7ba3218-24fe-5983-b25e-c6b4cced0218","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.40.176.194","comment":"https://x.com/FalconFeedsio/status/1959441455078113591","timestamp":"1756002222","distribution":"5"},{"uuid":"52012b7b-f669-5469-a6e5-dc6c64c6d54f","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/jasyiah/Encryptix-Crypter","comment":"https://x.com/RNgxz3r0/status/1959459940931621351","timestamp":"1756006629","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"58711acb-c2e7-54c9-9bb2-9150c5121aea","type":"domain","category":"Network activity","to_ids":true,"value":"hxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpssporty.weebly.com","comment":"https://x.com/urldna_bot/status/1959465719784943992","timestamp":"1756008007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a7f34d1e-4e3f-5153-9e1d-ab149ab08c7d","type":"url","category":"Network activity","to_ids":true,"value":"https://hxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpshxxpssporty.weebly.com","comment":"https://x.com/urldna_bot/status/1959465719784943992","timestamp":"1756008007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7c2380ac-6ad0-5b1d-a74e-551457b434f8","type":"url","category":"Network activity","to_ids":true,"value":"http://192.227.134.76:3211","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"87dd0ec4-85ff-5419-8a3b-88498744801e","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.213.5/sh","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"75fe0a0e-b55d-57ca-a755-0ab3dde36938","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.213.5","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5ddaa9a5-dd33-5344-b6b9-ff78b234ec51","type":"url","category":"Network activity","to_ids":true,"value":"http://192.227.134.76:1412","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7e334753-0807-512a-9087-201189bcf3df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.205.213.5","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e8adef4b-afc7-5b50-a0f6-22d07b5033d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.227.134.76","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7975548a-0a3a-523b-991d-3e8363112013","type":"url","category":"Network activity","to_ids":true,"value":"http://192.227.134.76:10257","comment":"https://x.com/redrabytes/status/1959467263674958111","timestamp":"1756008375","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"850fb34b-720a-534b-ab6a-706a8ede75f7","type":"url","category":"Network activity","to_ids":true,"value":"http://rockwood.call105.net","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6afa8043-874f-5168-828e-fd5a2de59722","type":"url","category":"Network activity","to_ids":true,"value":"http://176.65.149.225/x86_64","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"0eb45001-8c61-5083-8a87-6d36f3097401","type":"url","category":"Network activity","to_ids":true,"value":"http://94.156.152.65:61459","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"facfcaaf-8b8a-5a4a-a7c4-2b00f339a2d7","type":"domain","category":"Network activity","to_ids":true,"value":"rockwood.call105.net","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fa5b5ce8-61b0-52c9-bb83-755d3f7aae81","type":"domain","category":"Network activity","to_ids":true,"value":"host117.xtpanel.org","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e7ea19e6-72fe-59ef-b845-c98fc4ab32eb","type":"url","category":"Network activity","to_ids":true,"value":"http://176.65.149.225","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2a14c8af-125e-5df3-9ba3-3bb9258e2771","type":"url","category":"Network activity","to_ids":true,"value":"http://autodiscover.milkir.ro","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c95873a2-3d2c-570b-8a66-923310d3998d","type":"domain","category":"Network activity","to_ids":true,"value":"autodiscover.milkir.ro","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"eb60b33f-763f-5b10-b10e-3123b574a5ec","type":"url","category":"Network activity","to_ids":true,"value":"http://host117.xtpanel.org","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"36bd3198-0436-5beb-b0c5-b101dd31d552","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.149.225","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"28ff5774-75de-5643-9ff9-edd3cc2d55bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.156.152.65","comment":"https://x.com/redrabytes/status/1959475516739633344","timestamp":"1756010343","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"1ea2fa08-91c3-509d-87fa-676903785a08","type":"url","category":"Network activity","to_ids":true,"value":"http://82.27.2.83/knet(.)sh","comment":"https://x.com/redrabytes/status/1959478858287022544","timestamp":"1756011139","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fdea1f78-7f25-5ee6-a659-5f34b0fc3c91","type":"url","category":"Network activity","to_ids":true,"value":"http://82.27.2.83","comment":"https://x.com/redrabytes/status/1959478858287022544","timestamp":"1756011139","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"dc9c7969-d1f6-5f15-b5c0-16d3271b3213","type":"url","category":"Network activity","to_ids":true,"value":"http://82.27.2.83:1312","comment":"https://x.com/redrabytes/status/1959478858287022544","timestamp":"1756011139","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e850c855-59e2-52d4-888a-84a685ffaa56","type":"url","category":"Network activity","to_ids":true,"value":"http://82.27.2.83:3306","comment":"https://x.com/redrabytes/status/1959478858287022544","timestamp":"1756011139","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8ecbdfbe-a049-5a34-8f8b-34c627fb8eeb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.27.2.83","comment":"https://x.com/redrabytes/status/1959478858287022544","timestamp":"1756011139","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ca5ba026-3a7c-5fa2-a057-ea1104e3daa2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.38.20.240","comment":"https://x.com/drb_ra/status/1959507525784523026","timestamp":"1756017974","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"1edd233a-7222-5787-9bd5-ce099f3341c7","type":"url","category":"Network activity","to_ids":true,"value":"http://45.38.20.240:443","comment":"https://x.com/drb_ra/status/1959507525784523026","timestamp":"1756017974","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"36756d9f-3dba-59a8-895d-d8dedb915b3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.86.107.200","comment":"https://x.com/drb_ra/status/1959507663395447075","timestamp":"1756018007","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"813d99e2-6416-5b85-9177-6686cc990b7d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.86.107.200:443","comment":"https://x.com/drb_ra/status/1959507663395447075","timestamp":"1756018007","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"826120b5-124a-5c98-a353-da4c6c14b61b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.76.47.75:443","comment":"https://x.com/drb_ra/status/1959507801362870747","timestamp":"1756018040","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"fb77f8b0-ee7f-5751-b07d-39b2e6999845","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.47.75","comment":"https://x.com/drb_ra/status/1959507801362870747","timestamp":"1756018040","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"789bbcee-9f11-5634-ab6f-09d778740ede","type":"url","category":"Network activity","to_ids":true,"value":"http://120.222.236.74:4506","comment":"https://x.com/drb_ra/status/1959507939300946095","timestamp":"1756018073","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"27a5997e-3d06-57c9-9fe4-ce43bf78a455","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.222.236.74","comment":"https://x.com/drb_ra/status/1959507939300946095","timestamp":"1756018073","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7b3cbc4c-5a63-5896-9aea-ee24a77cf03f","type":"url","category":"Network activity","to_ids":true,"value":"http://20.84.60.5:7443","comment":"https://x.com/drb_ra/status/1959508077541007664","timestamp":"1756018106","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a461c3b3-ba88-5355-a3db-4bbf709ea758","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.84.60.5","comment":"https://x.com/drb_ra/status/1959508077541007664","timestamp":"1756018106","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"151aa282-a3bb-5ed3-a3f4-bdbd992670ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.188.228.199","comment":"https://x.com/drb_ra/status/1959508216305381766","timestamp":"1756018139","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5f052bc2-a01b-5e01-ab7b-35eb970d416e","type":"url","category":"Network activity","to_ids":true,"value":"http://204.188.228.199:31337","comment":"https://x.com/drb_ra/status/1959508216305381766","timestamp":"1756018139","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"aa0e910c-88bb-5a56-be8b-4ff2f0716eff","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.204.213:31337","comment":"https://x.com/drb_ra/status/1959508354226647370","timestamp":"1756018172","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"72f7f7dc-4393-5ac0-9ef2-9c9d234ed028","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.204.213","comment":"https://x.com/drb_ra/status/1959508354226647370","timestamp":"1756018172","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"66403067-72a5-5219-9f6f-b8fe92c95160","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.180.212.140","comment":"https://x.com/drb_ra/status/1959508492869312593","timestamp":"1756018205","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f756e75b-d460-5ebc-a904-1a7b98c66c58","type":"url","category":"Network activity","to_ids":true,"value":"http://193.180.212.140:31337","comment":"https://x.com/drb_ra/status/1959508492869312593","timestamp":"1756018205","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1b849c38-31e1-5f26-b610-ef9d4a4f9643","type":"url","category":"Network activity","to_ids":true,"value":"http://31.220.74.13:8443","comment":"https://x.com/drb_ra/status/1959508631365316818","timestamp":"1756018238","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d7197dbb-2d11-5e32-9c6d-e715f33c0d3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.220.74.13","comment":"https://x.com/drb_ra/status/1959508631365316818","timestamp":"1756018238","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b97cbaeb-add6-5ced-9b8c-1621756416ae","type":"url","category":"Network activity","to_ids":true,"value":"http://20.234.49.186:4321","comment":"https://x.com/drb_ra/status/1959509278785507707","timestamp":"1756018392","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d976ab29-e6cc-50cc-8047-19a0fdb6b33d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.234.49.186","comment":"https://x.com/drb_ra/status/1959509278785507707","timestamp":"1756018392","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d271f379-2786-5562-8104-b5045ab790b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"135.181.141.156","comment":"https://x.com/drb_ra/status/1959509417470165157","timestamp":"1756018425","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"be4461bc-ef2a-5a4d-a37a-f4bb99ce17dc","type":"url","category":"Network activity","to_ids":true,"value":"http://135.181.141.156:8080","comment":"https://x.com/drb_ra/status/1959509417470165157","timestamp":"1756018425","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"b7ad6ea7-1a0c-5afd-a223-af2cdd529e8d","type":"url","category":"Network activity","to_ids":true,"value":"http://152.53.49.222:443","comment":"https://x.com/drb_ra/status/1959509555483722108","timestamp":"1756018458","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6b1c9313-92d5-569a-bcda-38dbfbff8ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.53.49.222","comment":"https://x.com/drb_ra/status/1959509555483722108","timestamp":"1756018458","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ab3871f5-402e-577b-b944-5114f5bf1833","type":"url","category":"Network activity","to_ids":true,"value":"http://69.166.230.100:2404","comment":"https://x.com/drb_ra/status/1959509694407442636","timestamp":"1756018491","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f2a41691-b304-593c-a37c-85a64b926638","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.166.230.100","comment":"https://x.com/drb_ra/status/1959509694407442636","timestamp":"1756018491","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6824e0bb-e538-5168-9eb7-6a816caf9c4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.108.160","comment":"https://x.com/drb_ra/status/1959509832400085092","timestamp":"1756018524","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f779d7e7-bf83-58ea-aed5-935e8f7b4c57","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.108.160:2404","comment":"https://x.com/drb_ra/status/1959509832400085092","timestamp":"1756018524","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0cefc1c8-ef87-5b91-9c0a-0906791554b6","type":"url","category":"Network activity","to_ids":true,"value":"http://38.181.52.147:3232","comment":"https://x.com/drb_ra/status/1959509970858250406","timestamp":"1756018557","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"05c2ef23-8611-5932-a297-9ac9d6088ecb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.181.52.147","comment":"https://x.com/drb_ra/status/1959509970858250406","timestamp":"1756018557","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"d2139d5d-b806-57c0-8ece-186632b11e3e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.153.208.239:771","comment":"https://x.com/drb_ra/status/1959510109991674189","timestamp":"1756018590","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a13008c9-e00f-5816-b72d-5a6faf5bf83e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.153.208.239","comment":"https://x.com/drb_ra/status/1959510109991674189","timestamp":"1756018590","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a3913bd3-06cb-5ce7-bfbc-5d289d86a3cb","type":"url","category":"Network activity","to_ids":true,"value":"http://43.218.233.122:8081","comment":"https://x.com/drb_ra/status/1959510248575668304","timestamp":"1756018623","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c0b05312-fc30-5628-9547-7bdf28a1450f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.218.233.122:6881","comment":"https://x.com/drb_ra/status/1959510387180675199","timestamp":"1756018656","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"77d40731-eae1-52be-81d0-5336c9f4e6b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.218.233.122","comment":"https://x.com/drb_ra/status/1959510387180675199","timestamp":"1756018656","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"5f0148b1-d9de-56fe-a7a8-61efbc14e8c0","type":"url","category":"Network activity","to_ids":true,"value":"http://149.143.127.81:7707","comment":"https://x.com/drb_ra/status/1959510526179881436","timestamp":"1756018690","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ca09931c-512e-50b4-89fb-0881d9eafef6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.143.127.81","comment":"https://x.com/drb_ra/status/1959510526179881436","timestamp":"1756018690","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"59be0126-6b7f-5156-ba47-2e146193e914","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.188.14:465","comment":"https://x.com/drb_ra/status/1959510664747086238","timestamp":"1756018723","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ad9423a6-3c47-57e0-af4c-c194ff849e01","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.188.14:443","comment":"https://x.com/drb_ra/status/1959510803066827148","timestamp":"1756018756","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fb59f868-913e-552d-a049-14c363be9435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.188.14","comment":"https://x.com/drb_ra/status/1959510941709562110","timestamp":"1756018789","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"570c898b-2443-5b04-8d66-0b625428c91e","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.188.14:25","comment":"https://x.com/drb_ra/status/1959510941709562110","timestamp":"1756018789","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a413001d-2bce-5377-85b3-e039d94a5082","type":"url","category":"Network activity","to_ids":true,"value":"http://163.172.68.32:587","comment":"https://x.com/drb_ra/status/1959511080666820841","timestamp":"1756018822","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"70868ce5-915b-500b-b2b6-66a54f920963","type":"url","category":"Network activity","to_ids":true,"value":"http://163.172.68.32:25","comment":"https://x.com/drb_ra/status/1959511218252623994","timestamp":"1756018855","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"421bdb7b-430b-5a09-9d6a-65a337cfd063","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.172.68.32","comment":"https://x.com/drb_ra/status/1959511218252623994","timestamp":"1756018855","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6e170693-fe22-5865-a427-d43dca6b6317","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.115.178:443","comment":"https://x.com/drb_ra/status/1959511356262027754","timestamp":"1756018887","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"98a92d16-3b76-55b3-a2ca-187466324e93","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.115.178:80","comment":"https://x.com/drb_ra/status/1959511494405529713","timestamp":"1756018920","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6e384448-3000-58e9-b57c-0f524cedcb46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.98.115.178","comment":"https://x.com/drb_ra/status/1959511494405529713","timestamp":"1756018920","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5594ac38-ab4b-5b85-a387-61bac63625c5","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.81.55:80","comment":"https://x.com/drb_ra/status/1959511632339423637","timestamp":"1756018953","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"8e10ced1-f95c-52bc-b541-6b24552ffa42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.81.55","comment":"https://x.com/drb_ra/status/1959511632339423637","timestamp":"1756018953","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"d6c720e0-7b6b-549e-8170-7d2f06041de0","type":"url","category":"Network activity","to_ids":true,"value":"http://64.227.174.203:80","comment":"https://x.com/drb_ra/status/1959511772722757734","timestamp":"1756018987","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"b351d901-8107-5ed3-8d96-fde36d088f41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.227.174.203","comment":"https://x.com/drb_ra/status/1959511772722757734","timestamp":"1756018987","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"7c55da78-2fb8-51f2-8af2-936bda1f5ec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.217.39","comment":"https://x.com/drb_ra/status/1959511911235531006","timestamp":"1756019020","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7adf7f32-2f7d-5256-b387-ec6eee8a8e94","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.217.39:8888","comment":"https://x.com/drb_ra/status/1959511911235531006","timestamp":"1756019020","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9a51b822-e98e-5018-8c84-9523f5c0ba43","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.19:8888","comment":"https://x.com/drb_ra/status/1959512050037596338","timestamp":"1756019053","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ab511666-6f9a-5503-85bd-2c116d23a8e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.19","comment":"https://x.com/drb_ra/status/1959512050037596338","timestamp":"1756019053","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"bcf9fdfb-e4c1-5e81-aa2c-2515a199b50b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.177.237.86","comment":"https://x.com/drb_ra/status/1959512188890083401","timestamp":"1756019086","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"6b3ada90-3262-51eb-a0a5-f154ccbe0b68","type":"url","category":"Network activity","to_ids":true,"value":"http://24.177.237.86:443","comment":"https://x.com/drb_ra/status/1959512188890083401","timestamp":"1756019086","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"12f05230-efec-51a7-8a31-63f358db1a5c","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.15.251:443","comment":"https://x.com/drb_ra/status/1959512329185382825","timestamp":"1756019119","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"554c6609-c1cd-5d16-9cd7-cebe019f369c","type":"url","category":"Network activity","to_ids":true,"value":"http://150.158.109.61:6379","comment":"https://x.com/drb_ra/status/1959520072042516632","timestamp":"1756020965","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"25d37bf7-8c5d-581e-b159-815e50d6ad86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.158.109.61","comment":"https://x.com/drb_ra/status/1959520072042516632","timestamp":"1756020965","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"973cb902-9970-5351-9803-ff7db474b6d8","type":"domain","category":"Network activity","to_ids":true,"value":"eebroadband.weebly.com","comment":"https://x.com/urldna_bot/status/1959556314964635654","timestamp":"1756029606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"069dc537-fd90-5bff-b875-8640f5d40ccd","type":"url","category":"Network activity","to_ids":true,"value":"https://eebroadband.weebly.com","comment":"https://x.com/urldna_bot/status/1959556314964635654","timestamp":"1756029606","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5539c982-9ef8-5348-aa45-bbe7f848ac42","type":"url","category":"Network activity","to_ids":true,"value":"http://xtractoapp.com","comment":"https://x.com/JAMESWT_WT/status/1959572735551586475","timestamp":"1756033521","distribution":"5"},{"uuid":"7d34ca42-56fe-523a-93e9-a18db47660ae","type":"domain","category":"Network activity","to_ids":true,"value":"xtractoapp.com","comment":"https://x.com/JAMESWT_WT/status/1959572735551586475","timestamp":"1756033521","distribution":"5"},{"uuid":"2511a81c-bd76-5b40-a014-3c0e923cb288","type":"domain","category":"Network activity","to_ids":true,"value":"reurl.cc","comment":"https://x.com/urldna_bot/status/1959586526859276737","timestamp":"1756036810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7dc06c36-6a37-5037-b771-abdf31b72e09","type":"url","category":"Network activity","to_ids":true,"value":"http://reurl.cc/o0l0rq","comment":"https://x.com/urldna_bot/status/1959586526859276737","timestamp":"1756036810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2be3785f-18be-596f-82ae-c71e0e98475e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.120.93.133","comment":"https://x.com/drb_ra/status/1959638897887150084","timestamp":"1756049296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"605501a3-88b6-55c2-bc45-e70286ed9ef5","type":"url","category":"Network activity","to_ids":true,"value":"http://87.120.93.133:53","comment":"https://x.com/drb_ra/status/1959638897887150084","timestamp":"1756049296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5bd3e709-33ff-52f3-90ea-3d048e2ba37f","type":"url","category":"Network activity","to_ids":true,"value":"https://dns.qqq911.dns-cloud.net/api/v3/r","comment":"https://x.com/drb_ra/status/1959638897887150084","timestamp":"1756049296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"21f0ae9f-9ee0-57f1-ab93-31a180b77826","type":"domain","category":"Network activity","to_ids":true,"value":"dns.qqq911.dns-cloud.net","comment":"https://x.com/drb_ra/status/1959638897887150084","timestamp":"1756049296","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"009a90e9-7864-5392-915f-e44dd53b680a","type":"url","category":"Network activity","to_ids":true,"value":"http://123.57.142.48:80","comment":"https://x.com/drb_ra/status/1959646140300763354","timestamp":"1756051022","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"28bda097-1682-505c-9bc5-f92b24a2c2c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.57.142.48","comment":"https://x.com/drb_ra/status/1959646140300763354","timestamp":"1756051022","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e2b3a868-c736-57cd-8293-c499dedafd9f","type":"url","category":"Network activity","to_ids":true,"value":"http://ahv3ctpms4e.it-support-group.com/s/63BZGFSVBWSFCDX7Y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a","comment":"https://x.com/urldna_bot/status/1959646913721995367","timestamp":"1756051207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3cc27c49-9b22-518e-ab4a-16df4348b872","type":"domain","category":"Network activity","to_ids":true,"value":"ahv3ctpms4e.it-support-group.com","comment":"https://x.com/urldna_bot/status/1959646913721995367","timestamp":"1756051207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"667cc2e2-982f-526a-86b1-ca809a9b5022","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.133.42.76","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"a5c51229-f5ae-5747-983f-74e8b7d2b170","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.114.144.145","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"ce664531-24b4-5f8d-9b7e-df787bd92848","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.215.199.12","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"2336e5bc-8850-5406-b49a-3c11f5d67d25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.72.35.59","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"e847b706-5b66-533f-80fd-e33dfff0302e","type":"url","category":"Network activity","to_ids":true,"value":"http://94.72.35.59/sshd","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"b2842ee4-8329-5b52-85e5-09bfa36c8bf8","type":"url","category":"Network activity","to_ids":true,"value":"http://176.114.144.145","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"6c33bbdd-8cdc-5736-9d0b-fc338b8e1b41","type":"url","category":"Network activity","to_ids":true,"value":"http://185.133.42.76","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"2103c4d2-255c-5f20-9f54-10791f0029e3","type":"url","category":"Network activity","to_ids":true,"value":"http://176.215.199.12","comment":"https://x.com/FalconFeedsio/status/1959661602954973677","timestamp":"1756054709","distribution":"5"},{"uuid":"e99f3458-f846-58e8-9038-c6ed83f7671a","type":"domain","category":"Network activity","to_ids":true,"value":"mail.webaccess-alert.com","comment":"https://x.com/urldna_bot/status/1959677111859376208","timestamp":"1756058407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c50c46ad-2376-50ad-8e1f-951f2e9b62c4","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.webaccess-alert.com/s/63BZGFSVBWSFCDX7Y9/584dd8/90eab167-7429-489f-99f6-ce86e8d0d81a","comment":"https://x.com/urldna_bot/status/1959677111859376208","timestamp":"1756058407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2aad4f4f-d161-57d0-8b9f-7ca836d45ce3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.247.20.44","comment":"https://x.com/drb_ra/status/1959688883769430305","timestamp":"1756061213","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c0ce2b9a-b38c-59a7-8b57-b2116fcb4da1","type":"url","category":"Network activity","to_ids":true,"value":"http://54.247.20.44:80","comment":"https://x.com/drb_ra/status/1959688883769430305","timestamp":"1756061213","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5e7f9e78-fe33-5564-bbf4-28121a22043e","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.114.59:80","comment":"https://x.com/drb_ra/status/1959689023447830833","timestamp":"1756061247","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f233e0b5-304c-5f25-8a1d-25875057694f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.114.59","comment":"https://x.com/drb_ra/status/1959689023447830833","timestamp":"1756061247","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"76e033aa-0713-5370-9718-a412ed355df0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.135.251","comment":"https://x.com/drb_ra/status/1959689163046822171","timestamp":"1756061280","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"b2a550ef-a152-5cab-9f35-a701c8e2a319","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.135.251:3333","comment":"https://x.com/drb_ra/status/1959689163046822171","timestamp":"1756061280","distribution":"5","Tag":[{"name":"C2"},{"name":"EvilGoPhish"},{"name":"Evilginx"}]},{"uuid":"6ece3d98-1509-50ea-afc3-7cbb2f5b4984","type":"url","category":"Network activity","to_ids":true,"value":"http://8.210.214.111:8888","comment":"https://x.com/drb_ra/status/1959689301635010882","timestamp":"1756061313","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"05bc667c-85c3-5add-8f0f-7aae787f6133","type":"url","category":"Network activity","to_ids":true,"value":"http://83.110.197.71:443","comment":"https://x.com/drb_ra/status/1959689441054007330","timestamp":"1756061346","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"370b6c5b-3631-5e39-ae8e-b76b224a49fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.110.197.71","comment":"https://x.com/drb_ra/status/1959689441054007330","timestamp":"1756061346","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2fda9113-f18c-5d8a-be9e-13c8a74400da","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.236.40:995","comment":"https://x.com/drb_ra/status/1959689579650515297","timestamp":"1756061379","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"6d558307-7671-5f77-82f1-c0af57f019b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.236.40","comment":"https://x.com/drb_ra/status/1959689579650515297","timestamp":"1756061379","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"b034daa5-fc6b-592c-970e-bc72cd3d93a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.122.8.57","comment":"https://x.com/drb_ra/status/1959689719035691377","timestamp":"1756061412","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"df30ff65-466f-5ff3-b44d-b87c92fe45db","type":"url","category":"Network activity","to_ids":true,"value":"http://87.122.8.57:443","comment":"https://x.com/drb_ra/status/1959689719035691377","timestamp":"1756061412","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"2a0a2b09-6e9c-5c05-a6bc-02ff3f6f4b12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.242.183.107","comment":"https://x.com/drb_ra/status/1959689857837756568","timestamp":"1756061446","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6ba39eb5-91d1-5ceb-9296-f8a5bf39d6d7","type":"url","category":"Network activity","to_ids":true,"value":"http://61.242.183.107:4506","comment":"https://x.com/drb_ra/status/1959689857837756568","timestamp":"1756061446","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"74ff54fa-8ffc-5eb2-8270-079d601f5c77","type":"url","category":"Network activity","to_ids":true,"value":"http://165.232.148.135:7443","comment":"https://x.com/drb_ra/status/1959689996664987836","timestamp":"1756061479","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"43e5c894-2eab-502a-83a4-c22a3a8b54c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.232.148.135","comment":"https://x.com/drb_ra/status/1959689996664987836","timestamp":"1756061479","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"78b0f5c5-2d4f-5057-8f6b-cb316ae39b8f","type":"url","category":"Network activity","to_ids":true,"value":"http://65.87.7.28:7443","comment":"https://x.com/drb_ra/status/1959690135794266351","timestamp":"1756061512","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bbed56a9-3768-525d-8291-1a5defb110f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.87.7.28","comment":"https://x.com/drb_ra/status/1959690135794266351","timestamp":"1756061512","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f503e52c-c410-5d25-a7d8-3d9272bae68c","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.65.62:3306","comment":"https://x.com/drb_ra/status/1959690781347692999","timestamp":"1756061666","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"22b3f49b-d7e1-5d33-b446-21b08df8cf91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.65.62","comment":"https://x.com/drb_ra/status/1959690781347692999","timestamp":"1756061666","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"265c6b80-b1b9-530c-8a4b-7774aed90e03","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.105:3000","comment":"https://x.com/drb_ra/status/1959690920326246828","timestamp":"1756061699","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"fac1ebb7-b481-5ae4-b52d-c608762391a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.105","comment":"https://x.com/drb_ra/status/1959690920326246828","timestamp":"1756061699","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"f374d9d3-cf75-5ef1-be7f-b6b593770135","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.254.164.90","comment":"https://x.com/drb_ra/status/1959691059405169025","timestamp":"1756061732","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"84a5be7d-c160-5d3b-b4ed-9cb32d2505d0","type":"url","category":"Network activity","to_ids":true,"value":"http://157.254.164.90:2404","comment":"https://x.com/drb_ra/status/1959691059405169025","timestamp":"1756061732","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"af06c7f6-5541-5a2f-8075-9b74f15159b0","type":"url","category":"Network activity","to_ids":true,"value":"http://80.64.18.85:2404","comment":"https://x.com/drb_ra/status/1959691197347504477","timestamp":"1756061765","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6b3e81a5-9680-5331-96db-46e380432495","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.64.18.85","comment":"https://x.com/drb_ra/status/1959691197347504477","timestamp":"1756061765","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"85101f9b-b8b5-583d-8e45-237e31d51f13","type":"url","category":"Network activity","to_ids":true,"value":"http://3.104.111.160:1099","comment":"https://x.com/drb_ra/status/1959691336275337433","timestamp":"1756061798","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"779173f2-d6c0-5298-8422-68482cc0b305","type":"url","category":"Network activity","to_ids":true,"value":"http://3.28.185.123:10443","comment":"https://x.com/drb_ra/status/1959691475111010573","timestamp":"1756061831","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d308ae7d-3edc-593f-88c9-6839c03dac19","type":"url","category":"Network activity","to_ids":true,"value":"http://13.233.166.137:2454","comment":"https://x.com/drb_ra/status/1959691613866963384","timestamp":"1756061864","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a62fdc21-d8d9-59b8-b5f0-de3f7a749a30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.233.166.137","comment":"https://x.com/drb_ra/status/1959691613866963384","timestamp":"1756061864","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"83395236-e5b5-519f-8f6c-c8a0bde6feb0","type":"url","category":"Network activity","to_ids":true,"value":"http://209.46.127.65:443","comment":"https://x.com/drb_ra/status/1959691752136384862","timestamp":"1756061897","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0b4ffcbc-1891-565d-8d10-04590675be8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.46.127.65","comment":"https://x.com/drb_ra/status/1959691752136384862","timestamp":"1756061897","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"490fefaf-106f-5bf4-aa64-bdd26fa4e255","type":"url","category":"Network activity","to_ids":true,"value":"http://m.bureaux.fr","comment":"https://x.com/matheussukar/status/1959713238553375011","timestamp":"1756067020","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"da64511c-4493-55d6-830e-3c1a36f27692","type":"domain","category":"Network activity","to_ids":true,"value":"m.bureaux.fr","comment":"https://x.com/matheussukar/status/1959713238553375011","timestamp":"1756067020","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"6a0f0b9e-98dd-5b77-bbb9-77e332bba983","type":"url","category":"Network activity","to_ids":true,"value":"http://149.56.126.37","comment":"https://x.com/threatquery/status/1959722396585201671","timestamp":"1756069203","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"},{"name":"malware"}]},{"uuid":"1e700a9c-3123-504e-9021-dc7759507f75","type":"url","category":"Network activity","to_ids":true,"value":"http://123.57.142.48","comment":"https://x.com/threatquery/status/1959722394907541610","timestamp":"1756069203","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"CobaltStrike"}]},{"uuid":"ee7d8aa4-c603-5c64-aac0-366271412263","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.56.126.37","comment":"https://x.com/threatquery/status/1959722396585201671","timestamp":"1756069203","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"},{"name":"malware"}]},{"uuid":"34005aa3-edd6-56e7-823c-861dab714113","type":"url","category":"Network activity","to_ids":true,"value":"http://56.125.150.97","comment":"https://x.com/threatquery/status/1959722398476869954","timestamp":"1756069204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Xworm"}]},{"uuid":"0724f343-c38f-5401-a21b-e6a3cb5090ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.125.150.97","comment":"https://x.com/threatquery/status/1959722398476869954","timestamp":"1756069204","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Xworm"}]},{"uuid":"a06b7365-d412-5730-b2e2-bb9bc4a1fcab","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.105.10:8080","comment":"https://x.com/drb_ra/status/1959723324440789468","timestamp":"1756069425","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8dd722d0-0191-5ba2-ac9d-c918504cc83c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.105.10","comment":"https://x.com/drb_ra/status/1959723324440789468","timestamp":"1756069425","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"48c9fb18-1603-5df2-a1e9-5bbb8bc42033","type":"url","category":"Network activity","to_ids":true,"value":"http://3.131.91.218:80","comment":"https://x.com/drb_ra/status/1959723463226093766","timestamp":"1756069458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bde05289-9301-54b3-9a93-549ae8e607e8","type":"url","category":"Network activity","to_ids":true,"value":"http://173.254.201.23:80","comment":"https://x.com/drb_ra/status/1959723603974631599","timestamp":"1756069491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ed7359a9-62c1-5f41-b6e9-871ec3777582","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.254.201.23","comment":"https://x.com/drb_ra/status/1959723603974631599","timestamp":"1756069491","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1d94befa-5cf7-5dfe-89db-4303f104e7ec","type":"domain","category":"Network activity","to_ids":true,"value":"bbrlxwtkbgvpnpfykexu.supabase.co","comment":"https://x.com/skocherhan/status/1959728635134587120","timestamp":"1756070691","distribution":"5"},{"uuid":"ab8a7fa9-3c12-51ea-bcf9-486579988a78","type":"url","category":"Network activity","to_ids":true,"value":"https://bbrlxwtkbgvpnpfykexu.supabase.co/storage/v1/object/public/nano/image.jpg?12711343","comment":"https://x.com/skocherhan/status/1959728635134587120","timestamp":"1756070691","distribution":"5"},{"uuid":"7ccaf70c-a671-5655-9f88-56aaf2009cbf","type":"domain","category":"Network activity","to_ids":true,"value":"peticecream.com","comment":"https://x.com/urldna_bot/status/1959737511833391406","timestamp":"1756072807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"05148187-e6e0-5a52-918a-8d045bd84b59","type":"url","category":"Network activity","to_ids":true,"value":"http://www.peticecream.com/staging/","comment":"https://x.com/urldna_bot/status/1959737511833391406","timestamp":"1756072807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c6e089ec-520b-57c4-9ce3-777f01393174","type":"url","category":"Network activity","to_ids":true,"value":"http://159.75.127.99:50001","comment":"https://x.com/drb_ra/status/1959752640071422320","timestamp":"1756076414","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4f914d5e-a9d2-5f10-a700-36cd24ec16a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.75.127.99","comment":"https://x.com/drb_ra/status/1959752640071422320","timestamp":"1756076414","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"09b9a194-cc61-50ac-9528-e9f3c4422c01","type":"url","category":"Network activity","to_ids":true,"value":"http://114.132.248.120:8283","comment":"https://x.com/drb_ra/status/1959752780035281404","timestamp":"1756076447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3fc8ba6b-ab7a-5bc4-818e-003cc8323ef5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.132.248.120","comment":"https://x.com/drb_ra/status/1959752780035281404","timestamp":"1756076447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b59f74ac-f09e-5c9c-8d81-b36fcd4a83fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.75.189.186","comment":"https://x.com/drb_ra/status/1959752780035281404","timestamp":"1756076447","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1dbc9596-bf3a-5cc4-90ca-209168dc90f7","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.213.174:80","comment":"https://x.com/drb_ra/status/1959752919424885019","timestamp":"1756076481","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"49312edb-9d20-5993-b890-642377f18db2","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.213.134:80","comment":"https://x.com/drb_ra/status/1959753059221069880","timestamp":"1756076514","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6cee002a-1c34-52af-a880-863acda2339f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.205.213.134","comment":"https://x.com/drb_ra/status/1959753059221069880","timestamp":"1756076514","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7b9c280e-9756-5511-abae-d68df35a1eb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.205.213.174","comment":"https://x.com/drb_ra/status/1959753059221069880","timestamp":"1756076514","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"08006744-f7cf-57fe-b807-c9b975d386c6","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.109:6443","comment":"https://x.com/drb_ra/status/1959753197683458229","timestamp":"1756076547","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b7f0436-bfb4-5744-a434-30626625329c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.109","comment":"https://x.com/drb_ra/status/1959753197683458229","timestamp":"1756076547","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"16cdd37b-637e-547e-b6e1-c380bee6819e","type":"domain","category":"Network activity","to_ids":true,"value":"accesserdsc.com","comment":"https://x.com/drb_ra/status/1959753337781264785","timestamp":"1756076580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a283a51f-429e-5a73-9e0e-93095b13c5f1","type":"url","category":"Network activity","to_ids":true,"value":"https://accesserdsc.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1959753337781264785","timestamp":"1756076580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b21ae8e-ac88-56a3-9648-c301ae7bda8b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.201.74.112:2053","comment":"https://x.com/drb_ra/status/1959753337781264785","timestamp":"1756076580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ef5f574e-ee95-53d6-98f5-395cd26799c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.201.74.112","comment":"https://x.com/drb_ra/status/1959753337781264785","timestamp":"1756076580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1972702-cefd-513b-ac56-89994fc4ec0a","type":"url","category":"Network activity","to_ids":true,"value":"http://106.55.138.214:8083","comment":"https://x.com/drb_ra/status/1959753476759519540","timestamp":"1756076613","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"350d9ab0-a216-5650-a006-8420aa647459","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.55.138.214","comment":"https://x.com/drb_ra/status/1959753476759519540","timestamp":"1756076613","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"49f6758d-72d5-587e-9a19-804023ddae63","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.204.98.218","comment":"https://x.com/drb_ra/status/1959753476759519540","timestamp":"1756076613","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d9000476-0f68-5e31-b3a9-a157daa7e143","type":"domain","category":"Network activity","to_ids":true,"value":"vanhoadoanhnghiep.vn","comment":"https://x.com/urldna_bot/status/1959767726710194593","timestamp":"1756080011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4ee4f568-f2f1-5ed3-bd02-966d946a664d","type":"url","category":"Network activity","to_ids":true,"value":"https://vanhoadoanhnghiep.vn","comment":"https://x.com/urldna_bot/status/1959767726710194593","timestamp":"1756080011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2830e6af-0b4d-50da-94cc-d6c94e102d41","type":"domain","category":"Network activity","to_ids":true,"value":"talentedge.com.my","comment":"https://x.com/romonlyht/status/1959771447943115006","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6fc59e58-54db-5c74-9846-10551d90baaf","type":"url","category":"Network activity","to_ids":true,"value":"https://www.talentedge.com.my/za46fdz5a4f56za41.php","comment":"https://x.com/romonlyht/status/1959771447943115006","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db437a62-f771-5ba5-ad4c-8e7094b6e46f","type":"domain","category":"Network activity","to_ids":true,"value":"smbc-card.glueckimgruenen.de","comment":"https://x.com/romonlyht/status/1959771447943115006","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7bd146dd-a760-5d01-90cd-a720b470344f","type":"url","category":"Network activity","to_ids":true,"value":"https://smbc-card.glueckimgruenen.de/index.html","comment":"https://x.com/romonlyht/status/1959771447943115006","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2824a68c-8e76-59f9-9910-c4592ffb7ede","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.6.245.160","comment":"https://x.com/romonlyht/status/1959771447943115006","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e4c9b41-3b10-53a8-8d60-8ae38c87e387","type":"url","category":"Network activity","to_ids":true,"value":"https://talentedge.com.my/za46fdz5a4f56za41.php","comment":"https://x.com/romonlyht/status/1959771446001226128","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eba56cc1-1734-507b-a50b-4d914578748b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.106.90.29","comment":"https://x.com/romonlyht/status/1959771446001226128","timestamp":"1756080898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"622ac207-bcf2-5f34-8c00-4adc2ab8b281","type":"domain","category":"Network activity","to_ids":true,"value":"wlficlaimchecker.xyz","comment":"https://x.com/AmberMille78556/status/1959773951468441666","timestamp":"1756081495","distribution":"5","Tag":[{"name":"ransomware"},{"name":"phishing"}]},{"uuid":"0a527ddf-c61c-5de8-a0da-c83dd5d8cd6a","type":"url","category":"Network activity","to_ids":true,"value":"https://wlficlaimchecker.xyz","comment":"https://x.com/AmberMille78556/status/1959773951468441666","timestamp":"1756081495","distribution":"5","Tag":[{"name":"ransomware"},{"name":"phishing"}]},{"uuid":"eaeeaad8-a5c4-524d-9eba-d7632525b0be","type":"domain","category":"Network activity","to_ids":true,"value":"tjz42m-93wrv9.beetnu11.workers.dev","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"887c8591-08f6-52c1-b3d8-a9aff2780103","type":"url","category":"Network activity","to_ids":true,"value":"https://csyqy0.icu/jmoeu","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"449d3fbe-6dfc-5b7a-9527-e408ee439a1a","type":"url","category":"Network activity","to_ids":true,"value":"https://tjz42m-93wrv9.beetnu11.workers.dev/go?token=17618824316177958194","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9be004-767f-5438-a074-7596d1d68ac8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.29.196.26","comment":"https://x.com/romonlyht/status/1959774960907587777","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43598bf4-ccc5-5496-b7b6-3554eef343b1","type":"url","category":"Network activity","to_ids":true,"value":"https://tjz42m-93wrv9.beetnu11.workers.dev/25wW6oCOuS/tz4mKn0Dg0/-G6ELT5YL8/rUl0j216wxLoU.html","comment":"https://x.com/romonlyht/status/1959774960907587777","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8868968b-6049-5bbd-b792-22597b6a9708","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.239.169.128","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55037e19-8d5c-5a61-972e-c141bc7a3fb8","type":"url","category":"Network activity","to_ids":true,"value":"https://csyqy0.icu/jmoeu/","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43ac9f0e-bf04-5d21-98b3-449dab9afd93","type":"domain","category":"Network activity","to_ids":true,"value":"csyqy0.icu","comment":"https://x.com/romonlyht/status/1959774962874757389","timestamp":"1756081736","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2f33367-4a8d-5892-b0d7-5c92e53cf41a","type":"url","category":"Network activity","to_ids":true,"value":"http://applestoremobile.icu/appleco.jp/","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f89fc7c8-3eb5-50a2-a3c6-74eab80908fb","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.64.1","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db797346-1064-5c30-bf58-06e6e2617fdf","type":"domain","category":"Network activity","to_ids":true,"value":"magtunedengines.com","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"755a4f98-f560-5097-a9b5-854d08b78640","type":"url","category":"Network activity","to_ids":true,"value":"http://magtunedengines.com/applecojp","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce0717e7-0813-5e62-96fa-cceb08110ffc","type":"domain","category":"Network activity","to_ids":true,"value":"applestoremobile.icu","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"298e8946-d6db-5e12-a773-242ceb2407c0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.80.1","comment":"https://x.com/catnap707/status/1959777831292223713","timestamp":"1756082420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ae1119e-e1c0-5297-8f4d-5bbeb8491993","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.85.214.196","comment":"https://x.com/romonlyht/status/1959778962210718002","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7009d5b-496d-55d7-8acb-05c84d8d364e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.104.32.236","comment":"https://x.com/romonlyht/status/1959778964605710758","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6708324f-4bba-5836-af1b-ce65e66671e2","type":"url","category":"Network activity","to_ids":true,"value":"https://sabeirea-ja.com/ibclient/select","comment":"https://x.com/romonlyht/status/1959778964605710758","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25f06ccd-6c88-5244-ad40-631d9cc9b097","type":"url","category":"Network activity","to_ids":true,"value":"https://try2havebaby.com/jabank/Phone/Verifyidentity/","comment":"https://x.com/romonlyht/status/1959778964605710758","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"796eaeb1-c8cc-5d65-ae66-7355490747ae","type":"domain","category":"Network activity","to_ids":true,"value":"sabeirea-ja.com","comment":"https://x.com/romonlyht/status/1959778964605710758","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7afb4e3-e6ef-5a14-b9b7-5845f51563f4","type":"domain","category":"Network activity","to_ids":true,"value":"try2havebaby.com","comment":"https://x.com/romonlyht/status/1959778964605710758","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5fc97e0-2a02-5c5e-9bd3-5c90dc1007c0","type":"url","category":"Network activity","to_ids":true,"value":"https://try2havebaby.com/jabank/Phone/Verifyidentity","comment":"https://x.com/romonlyht/status/1959778962210718002","timestamp":"1756082690","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de28ec59-a5c9-5178-934a-4f8e259e58b3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.171.181","comment":"https://x.com/catnap707/status/1959779193602142530","timestamp":"1756082745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"190440fe-5d1c-573f-8211-500c097acf18","type":"url","category":"Network activity","to_ids":true,"value":"http://monex-jp.hkbdj.com/support/?login=~","comment":"https://x.com/catnap707/status/1959779193602142530","timestamp":"1756082745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"37147263-4911-5f3f-8cea-bb3c3865076a","type":"domain","category":"Network activity","to_ids":true,"value":"monex-jp.hkbdj.com","comment":"https://x.com/catnap707/status/1959779193602142530","timestamp":"1756082745","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41588346-cb09-5175-8b27-6b8f7e81d132","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.85.210.193","comment":"https://x.com/romonlyht/status/1959779258450260226","timestamp":"1756082760","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"655e4143-7cd1-58c4-aa61-1b53929120f4","type":"url","category":"Network activity","to_ids":true,"value":"https://nhobo.com/jabank/Phone/Verifyidentity","comment":"https://x.com/romonlyht/status/1959779258450260226","timestamp":"1756082760","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b777d55-956c-560c-a3ee-b9c70da6473a","type":"url","category":"Network activity","to_ids":true,"value":"https://nhobo.com/jabank/Phone/Verifyidentity/","comment":"https://x.com/romonlyht/status/1959779260115431930","timestamp":"1756082761","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"385cdd82-7114-512b-be31-1a48720aba6c","type":"domain","category":"Network activity","to_ids":true,"value":"nhobo.com","comment":"https://x.com/romonlyht/status/1959779260115431930","timestamp":"1756082761","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f688bb8f-0563-52c5-9ebb-21092363828e","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex.bjjddp888.com","comment":"https://x.com/catnap707/status/1959779686814486959","timestamp":"1756082862","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0dd7c541-137e-5d9e-bbb3-953dbb199d6c","type":"url","category":"Network activity","to_ids":true,"value":"http://www-monex.bjjddp888.com/support/?login=~","comment":"https://x.com/catnap707/status/1959779686814486959","timestamp":"1756082862","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c23765ea-df16-55c9-85e9-f9daf58f8554","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.163.56","comment":"https://x.com/catnap707/status/1959779686814486959","timestamp":"1756082862","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cd7b1c5-1047-5215-9856-98ea2dbcedd8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.134.249.34","comment":"https://x.com/romonlyht/status/1959782349157409162","timestamp":"1756083497","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cc8d854-f2b3-5815-aa24-a63d5af77c0a","type":"url","category":"Network activity","to_ids":true,"value":"https://aozare-kuideo.com","comment":"https://x.com/romonlyht/status/1959782349157409162","timestamp":"1756083497","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c651f47-d6a8-5d45-8ef0-13770e7999e0","type":"domain","category":"Network activity","to_ids":true,"value":"aozare-kuideo.com","comment":"https://x.com/romonlyht/status/1959782349157409162","timestamp":"1756083497","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6049b558-65a4-5454-841d-e31dd2999a80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.85.219.179","comment":"https://x.com/romonlyht/status/1959782731510116383","timestamp":"1756083588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d92dd521-2c1a-58bc-8f95-52d0b79cbced","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.221.72","comment":"https://x.com/romonlyht/status/1959782731510116383","timestamp":"1756083588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"257ea287-8e63-5774-b698-fde2da61daf6","type":"url","category":"Network activity","to_ids":true,"value":"https://aozare-benezir.com","comment":"https://x.com/romonlyht/status/1959782731510116383","timestamp":"1756083588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1c8fa50-0bf5-57ea-96f5-91d7c4e39e45","type":"domain","category":"Network activity","to_ids":true,"value":"aozare-benezir.com","comment":"https://x.com/romonlyht/status/1959782731510116383","timestamp":"1756083588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e59230d-02ed-5e9d-9d71-762cb14d6ac7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.156.213.141","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9270e772-290b-5849-93b9-aa843c090948","type":"url","category":"Network activity","to_ids":true,"value":"https://bank-aozuo-ruosemare.net/Business","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"523f252e-0bdf-5ca5-aeed-b9c28df03c06","type":"domain","category":"Network activity","to_ids":true,"value":"bank-aozuo-ruosemare.net","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50436006-99da-544d-86e6-3eccdb4b92e8","type":"url","category":"Network activity","to_ids":true,"value":"https://bank-aozuo-ruosemare.net/Business/","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8576e575-d515-5a65-bc66-f3440885c433","type":"domain","category":"Network activity","to_ids":true,"value":"policyaboutusite099.com","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93588fde-f8aa-51ae-ae2a-cebbeb51771b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.130.245.186","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83c3e729-f343-56c8-b41e-85cb151eece9","type":"url","category":"Network activity","to_ids":true,"value":"https://policyaboutusite099.com","comment":"https://x.com/romonlyht/status/1959782733514932496","timestamp":"1756083589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e2e385e4-8969-514e-aa25-a20467dd97c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.94.62","comment":"https://x.com/romonlyht/status/1959788296890130680","timestamp":"1756084915","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"16f5b9a2-f7d5-5b52-8408-441a88e21f1a","type":"url","category":"Network activity","to_ids":true,"value":"https://chshsh.com/verify-monex","comment":"https://x.com/romonlyht/status/1959788296890130680","timestamp":"1756084915","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b3df6f05-7a74-57f0-98ca-5b7d142d73a2","type":"domain","category":"Network activity","to_ids":true,"value":"chshsh.com","comment":"https://x.com/romonlyht/status/1959788296890130680","timestamp":"1756084915","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0bb7d4af-ffb4-5d8d-b028-e5152fe99573","type":"url","category":"Network activity","to_ids":true,"value":"https://chshsh.com/verify-monex/","comment":"https://x.com/romonlyht/status/1959788296890130680","timestamp":"1756084915","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dd3a83b-ccbe-5ada-89e2-6e4c4445659e","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.xmhegou.com/Login/","comment":"https://x.com/romonlyht/status/1959788299092189282","timestamp":"1756084916","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"513b50ef-efd2-5092-823f-fa5386a25607","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.xmhegou.com/Login","comment":"https://x.com/romonlyht/status/1959788299092189282","timestamp":"1756084916","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00b42631-b50b-5aa2-9155-343562573639","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.xmhegou.com","comment":"https://x.com/romonlyht/status/1959788299092189282","timestamp":"1756084916","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f464ac1e-ed9a-5204-a135-6ab51157271e","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.hbhdgd.com","comment":"https://x.com/romonlyht/status/1959788687191105962","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"613996bf-f96d-53f1-b282-92555b67eb7e","type":"url","category":"Network activity","to_ids":true,"value":"https://sxhttw.com/verify-monex/","comment":"https://x.com/romonlyht/status/1959788687191105962","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"741d8859-648b-5f20-a042-21066342b2cc","type":"url","category":"Network activity","to_ids":true,"value":"https://sxhttw.com/verify-monex","comment":"https://x.com/romonlyht/status/1959788685261766658","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e2a3a21-0fb5-569b-b9db-a1279ddb7247","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.hbhdgd.com/Login","comment":"https://x.com/romonlyht/status/1959788687191105962","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c5630e1e-1a46-5b0b-bfb6-4909e9f362ee","type":"domain","category":"Network activity","to_ids":true,"value":"sxhttw.com","comment":"https://x.com/romonlyht/status/1959788687191105962","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9eae9d31-04b4-50ae-8040-ef6d8693c6d7","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.hbhdgd.com/Login/","comment":"https://x.com/romonlyht/status/1959788687191105962","timestamp":"1756085008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"61b80758-6cbd-593b-8a8a-44aa124db827","type":"domain","category":"Network activity","to_ids":true,"value":"hnjqmm.com","comment":"https://x.com/romonlyht/status/1959793280553775593","timestamp":"1756086103","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58685ee0-90fa-5871-bcdd-20bdb5a27c98","type":"url","category":"Network activity","to_ids":true,"value":"https://hnjqmm.com/jp/","comment":"https://x.com/romonlyht/status/1959793280553775593","timestamp":"1756086103","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d409c0ec-c298-5278-a40a-f6c3a4c98159","type":"url","category":"Network activity","to_ids":true,"value":"https://hnjqmm.com/jp","comment":"https://x.com/romonlyht/status/1959793280553775593","timestamp":"1756086103","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14536d79-1722-5d6e-8ad9-2aa54eb11e77","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.manifeng.com","comment":"https://x.com/romonlyht/status/1959793282386722992","timestamp":"1756086104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9d55e62-c3ef-5179-bba8-03e9edcbcae8","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.manifeng.com/ETGate","comment":"https://x.com/romonlyht/status/1959793282386722992","timestamp":"1756086104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a88735f0-f657-5763-af8b-b3907f733c6b","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.manifeng.com/ETGate/","comment":"https://x.com/romonlyht/status/1959793282386722992","timestamp":"1756086104","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"215cf8b8-6a3f-5c3f-9c8b-efa1b00ec1cc","type":"domain","category":"Network activity","to_ids":true,"value":"hccqwh.com","comment":"https://x.com/romonlyht/status/1959793667574825066","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ed9943f7-107e-5a0f-93ad-8c1de2ae2b3b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.243.118.31","comment":"https://x.com/romonlyht/status/1959793667574825066","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b5b05eee-2ae8-5c3b-8ffd-f6c0cce95408","type":"url","category":"Network activity","to_ids":true,"value":"https://hccqwh.com/jp","comment":"https://x.com/romonlyht/status/1959793667574825066","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de879684-fb59-5b71-a6c0-1a5889f65376","type":"url","category":"Network activity","to_ids":true,"value":"https://hccqwh.com/jp/","comment":"https://x.com/romonlyht/status/1959793667574825066","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"115f806d-6caf-519a-b6ce-0345b19a0736","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.tbproaudio.com","comment":"https://x.com/romonlyht/status/1959793669432815649","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04e77f21-60d1-53f5-8a0f-3a299f57b0f7","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.tbproaudio.com/ETGate/","comment":"https://x.com/romonlyht/status/1959793669432815649","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d7ab389-1148-5984-bc62-353affa4b31a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.tbproaudio.com/ETGate","comment":"https://x.com/romonlyht/status/1959793669432815649","timestamp":"1756086196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d521d8a5-79ad-5f62-82e1-a789f6ff45a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.126.218.214","comment":"https://x.com/romonlyht/status/1959797215591100723","timestamp":"1756087042","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"90f91b02-5d36-5156-92b3-416410e1e082","type":"domain","category":"Network activity","to_ids":true,"value":"ahtsajof.0523baidu.com","comment":"https://x.com/romonlyht/status/1959797217453297958","timestamp":"1756087042","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2c4ac0d5-9e14-5f69-91f3-1c80476a1d4f","type":"url","category":"Network activity","to_ids":true,"value":"http://ahtsajof.0523baidu.com","comment":"https://x.com/romonlyht/status/1959797217453297958","timestamp":"1756087042","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d67fcf54-6520-551c-8f79-3184a3d59872","type":"ip-dst","category":"Network activity","to_ids":true,"value":"187.62.87.146","comment":"https://x.com/romonlyht/status/1959797525545881940","timestamp":"1756087116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f651b6cd-ff6d-5396-bd8e-ad9f1d7e13d7","type":"url","category":"Network activity","to_ids":true,"value":"https://hfisnt.cn/action/home/request/type=un","comment":"https://x.com/romonlyht/status/1959797525545881940","timestamp":"1756087116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9f59388-426a-5419-acb4-0020ffe27b90","type":"domain","category":"Network activity","to_ids":true,"value":"hfisnt.cn","comment":"https://x.com/romonlyht/status/1959797527370412038","timestamp":"1756087116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f89a8e1d-73d7-544c-9c9b-8336daff8f69","type":"url","category":"Network activity","to_ids":true,"value":"https://hfisnt.cn/action/home/request/type=un/","comment":"https://x.com/romonlyht/status/1959797527370412038","timestamp":"1756087116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2071e72f-7a7a-5931-9bb3-17206f39c2f6","type":"url","category":"Network activity","to_ids":true,"value":"https://111.230.93.148/introduction/edr","comment":"https://x.com/drb_ra/status/1959797723302924555","timestamp":"1756087163","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1959797723302924555","timestamp":"1756087163","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5ab96b69-c9ed-5cde-abc7-cc8bd7432f45","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:801","comment":"https://x.com/drb_ra/status/1959797723302924555","timestamp":"1756087163","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a0fc341-b684-5aed-bd47-0e00ae804371","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.230.93.148","comment":"https://x.com/drb_ra/status/1959797723302924555","timestamp":"1756087163","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8afbd7aa-ed93-59a6-977b-856f25b88d2e","type":"url","category":"Network activity","to_ids":true,"value":"https://t-tonliner.weebly.com","comment":"https://x.com/urldna_bot/status/1959797908057829549","timestamp":"1756087207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2c04718e-08b1-5bfd-bbe4-057325bee150","type":"domain","category":"Network activity","to_ids":true,"value":"t-tonliner.weebly.com","comment":"https://x.com/urldna_bot/status/1959797908057829549","timestamp":"1756087207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6d0b1dd3-5d63-54b9-bb3e-9709dc50ef95","type":"domain","category":"Network activity","to_ids":true,"value":"amazon.co.jp%2Fruna.otsu.fan999%2FdRXYcWB%2FeicccHM%23vouoly%40qzlilqgh%2Famazon.co.jp@hancef.pinliyuan.com","comment":"https://x.com/romonlyht/status/1959802669314539922","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc3bce07-302b-5c2d-915b-f5ab520d4eed","type":"url","category":"Network activity","to_ids":true,"value":"http://2Famazon.co.jp@hancef.pinliyuan.com","comment":"https://x.com/romonlyht/status/1959802669314539922","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"545ac912-4052-55d1-b1b4-af921061b052","type":"domain","category":"Network activity","to_ids":true,"value":"2Famazon.co.jp@hancef.pinliyuan.com","comment":"https://x.com/romonlyht/status/1959802669314539922","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f647364-f159-5b61-9975-198f13504791","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon.co.jp%2Fruna.otsu.fan999%2FdRXYcWB%2FeicccHM%23vouoly%40qzlilqgh%2Famazon.co.jp@hancef.pinliyuan.com","comment":"https://x.com/romonlyht/status/1959802669314539922","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2bbaf031-62c5-5ae6-b51e-7713a70a032d","type":"domain","category":"Network activity","to_ids":true,"value":"juayhrfq.asia","comment":"https://x.com/romonlyht/status/1959802671172563151","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec02d711-8204-5df6-877b-e1699a66167e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.167.5.51","comment":"https://x.com/romonlyht/status/1959802669314539922","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a297882-5ccc-5a43-9376-f6e984712f5b","type":"url","category":"Network activity","to_ids":true,"value":"https://fbvqcap7.asia/hangjkong/","comment":"https://x.com/romonlyht/status/1959802671172563151","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"961f9eab-ddd4-5a72-a1cf-e0c298adc614","type":"domain","category":"Network activity","to_ids":true,"value":"fbvqcap7.asia","comment":"https://x.com/romonlyht/status/1959802671172563151","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf26bf07-989a-53bc-bd0b-770d426aa5f5","type":"url","category":"Network activity","to_ids":true,"value":"https://juayhrfq.asia/hangko/","comment":"https://x.com/romonlyht/status/1959802671172563151","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1a4103d-2c5b-5f61-8eb1-8c30b9165d04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.183.100","comment":"https://x.com/romonlyht/status/1959802671172563151","timestamp":"1756088342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5696a4e2-5e56-527f-89a5-d7d42532a56c","type":"domain","category":"Network activity","to_ids":true,"value":"jump.sddfgccl.com","comment":"https://x.com/romonlyht/status/1959803079920115879","timestamp":"1756088440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0f2b215-81cc-5470-ae33-8a4cf555fc7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.146.107","comment":"https://x.com/romonlyht/status/1959803081744613596","timestamp":"1756088440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84f6c9da-4e2c-504f-bb8e-5b2707ae0ab6","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ana.co.jp.cpr-now.com/ja/jp/amc/","comment":"https://x.com/romonlyht/status/1959803081744613596","timestamp":"1756088440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02046fbe-dbca-5300-bbae-d600e57cfaec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.14.40","comment":"https://x.com/romonlyht/status/1959803079920115879","timestamp":"1756088440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d4425dae-121e-57e1-864b-a6f6d3338b07","type":"domain","category":"Network activity","to_ids":true,"value":"ana.co.jp.cpr-now.com","comment":"https://x.com/romonlyht/status/1959803081744613596","timestamp":"1756088440","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a1f9801-3059-5209-9111-a23a5ff109d3","type":"domain","category":"Network activity","to_ids":true,"value":"3659f4c3d0074a51a1cab1237b654d7d.11506.shop","comment":"https://x.com/romonlyht/status/1959806080185196885","timestamp":"1756089155","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a89c2515-f399-5dd7-b0b5-20d3831a2213","type":"url","category":"Network activity","to_ids":true,"value":"https://3659f4c3d0074a51a1cab1237b654d7d.11506.shop/3659f4c3d0074a51a1cab1237b654d7d","comment":"https://x.com/romonlyht/status/1959806080185196885","timestamp":"1756089155","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5c4387d-0335-5b59-a8b4-716e7bfbc58b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"174.202.165.194","comment":"https://x.com/romonlyht/status/1959806080185196885","timestamp":"1756089155","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbf713fd-f231-5203-ad9c-8dc6054b84a7","type":"md5","category":"Payload delivery","to_ids":true,"value":"3659f4c3d0074a51a1cab1237b654d7d","comment":"https://x.com/romonlyht/status/1959806080185196885","timestamp":"1756089155","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"90d514fc-c72f-5e3a-a8d7-3c1e44d281f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.59.214.85","comment":"https://x.com/romonlyht/status/1959806461728764055","timestamp":"1756089246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13848a87-ef28-55b2-bea9-f3c160fd345f","type":"url","category":"Network activity","to_ids":true,"value":"https://f07508032b7147c28c84613e754bd941.115syt.shop/f07508032b7147c28c84613e754bd941","comment":"https://x.com/romonlyht/status/1959806461728764055","timestamp":"1756089246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"470deebd-f16a-5d40-8be9-4b3543b93cca","type":"domain","category":"Network activity","to_ids":true,"value":"f07508032b7147c28c84613e754bd941.115syt.shop","comment":"https://x.com/romonlyht/status/1959806461728764055","timestamp":"1756089246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9055516-6328-58e2-89a8-03073566020c","type":"md5","category":"Payload delivery","to_ids":true,"value":"f07508032b7147c28c84613e754bd941","comment":"https://x.com/romonlyht/status/1959806461728764055","timestamp":"1756089246","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75b2f38d-ca36-5976-a7f6-7f3c09d7bdac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.8.227.122","comment":"https://x.com/romonlyht/status/1959806463750373694","timestamp":"1756089247","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"505cd8e4-4a43-5b30-b6c0-f503b757e1eb","type":"url","category":"Network activity","to_ids":true,"value":"https://service-jai.sge7210.top/login","comment":"https://x.com/romonlyht/status/1959806463750373694","timestamp":"1756089247","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46e93cb4-4b19-5ab0-bbf8-ffb1c5f277d1","type":"url","category":"Network activity","to_ids":true,"value":"https://service-jai.sge7210.top","comment":"https://x.com/romonlyht/status/1959806463750373694","timestamp":"1756089247","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac12cdb6-fc51-54b7-b0c9-db4853628871","type":"domain","category":"Network activity","to_ids":true,"value":"service-jai.sge7210.top","comment":"https://x.com/romonlyht/status/1959806463750373694","timestamp":"1756089247","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0dc9fd54-6ffc-595b-a388-239e0460579f","type":"url","category":"Network activity","to_ids":true,"value":"https://tqrca.cn/Login/","comment":"https://x.com/romonlyht/status/1959810460817248442","timestamp":"1756090200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45dd0d15-cae5-534f-ac21-d6ee885cd7b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.211.41.70","comment":"https://x.com/romonlyht/status/1959810460817248442","timestamp":"1756090200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e15f88d-642e-53b0-aecb-9a74aaf4d148","type":"domain","category":"Network activity","to_ids":true,"value":"tqrca.cn","comment":"https://x.com/romonlyht/status/1959810460817248442","timestamp":"1756090200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60d4cf73-f8f0-51c7-92f3-7ff5125bb595","type":"url","category":"Network activity","to_ids":true,"value":"https://tqrca.cn/Login","comment":"https://x.com/romonlyht/status/1959810460817248442","timestamp":"1756090200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fba87b03-5e4a-5bce-917b-eb36a468b74b","type":"domain","category":"Network activity","to_ids":true,"value":"yzqil.cn","comment":"https://x.com/romonlyht/status/1959810706787971107","timestamp":"1756090258","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"66f0a404-27fd-522b-b074-45bc8f8757f9","type":"url","category":"Network activity","to_ids":true,"value":"https://yzqil.cn/Login","comment":"https://x.com/romonlyht/status/1959810706787971107","timestamp":"1756090258","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ecdc564-e281-5bb1-ae46-273fc545f17e","type":"url","category":"Network activity","to_ids":true,"value":"https://yzqil.cn/Login/","comment":"https://x.com/romonlyht/status/1959810706787971107","timestamp":"1756090258","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73a7a4a0-abd2-576f-b28c-d903d07eece8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.120.174.141","comment":"https://x.com/romonlyht/status/1959810706787971107","timestamp":"1756090258","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83649480-5283-5d81-844a-50ab4f8ee3cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.128.36","comment":"https://x.com/romonlyht/status/1959810900602523670","timestamp":"1756090304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50993946-8fd4-5c39-a140-5eb818ef37df","type":"url","category":"Network activity","to_ids":true,"value":"https://bdvmf.cn/Login/","comment":"https://x.com/romonlyht/status/1959810900602523670","timestamp":"1756090304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"076baa1d-b8b3-5c53-9f8d-419171eaa490","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.211.49.68","comment":"https://x.com/romonlyht/status/1959810900602523670","timestamp":"1756090304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7666e5f1-b66e-5d36-b058-fbfb644fdf4f","type":"domain","category":"Network activity","to_ids":true,"value":"bdvmf.cn","comment":"https://x.com/romonlyht/status/1959810900602523670","timestamp":"1756090304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c728756b-9097-5c9f-af80-d1321b6301ad","type":"url","category":"Network activity","to_ids":true,"value":"https://bdvmf.cn/Login","comment":"https://x.com/romonlyht/status/1959810900602523670","timestamp":"1756090304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf85a1d2-7365-58e0-a492-5c8359accf9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.163.30.18","comment":"https://x.com/Fact_Finder03/status/1959827397488058511","timestamp":"1756094238","distribution":"5"},{"uuid":"f43fe996-e5a7-5caa-9a62-56925a0a4cd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.10.17.38","comment":"https://x.com/Fact_Finder03/status/1959827397488058511","timestamp":"1756094238","distribution":"5"},{"uuid":"15dd4907-9532-51a1-9ef6-3f3c7613404c","type":"domain","category":"Network activity","to_ids":true,"value":"manetflex.vercel.app","comment":"https://x.com/urldna_bot/status/1959828107797356734","timestamp":"1756094407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0e11fa19-8c92-554e-b7d3-b6d7245e105d","type":"url","category":"Network activity","to_ids":true,"value":"https://manetflex.vercel.app","comment":"https://x.com/urldna_bot/status/1959828107797356734","timestamp":"1756094407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c8d57c79-76ab-5d8f-9d96-dfacc714eaa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.0.129.84","comment":"https://x.com/romonlyht/status/1959835769536942201","timestamp":"1756096234","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c35fcaa0-6592-5b67-80d7-602613f72a25","type":"domain","category":"Network activity","to_ids":true,"value":"jaccs1-info-servic-ails-mt-supportcontact.chun6.club","comment":"https://x.com/romonlyht/status/1959835779821437118","timestamp":"1756096236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f90f3cb-5559-5332-888e-7aeca4f92f65","type":"url","category":"Network activity","to_ids":true,"value":"https://jaccs1-info-servic-ails-mt-supportcontact.chun6.club/supportcontact-/","comment":"https://x.com/romonlyht/status/1959835779821437118","timestamp":"1756096236","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3922584b-c055-5aea-839d-f7b4a474d745","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.190.118.174","comment":"https://x.com/romonlyht/status/1959837395962261939","timestamp":"1756096621","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"171d593a-cfe0-5e9a-897f-1d7283f16734","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.122.135.226","comment":"https://x.com/romonlyht/status/1959839321630163159","timestamp":"1756097080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8791908c-6cbf-5c92-b49e-038c2a7397ea","type":"url","category":"Network activity","to_ids":true,"value":"https://ehswfanw.cn/ap/signin/openid/net2F/","comment":"https://x.com/romonlyht/status/1959839321630163159","timestamp":"1756097080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"769204db-e477-5ca2-b41c-b96be196b601","type":"url","category":"Network activity","to_ids":true,"value":"https://ehswfanw.cn/ap/signin/openid/net2F","comment":"https://x.com/romonlyht/status/1959839321630163159","timestamp":"1756097080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e7fb1f4a-fac6-5af8-abf4-e30221711bf6","type":"domain","category":"Network activity","to_ids":true,"value":"ehswfanw.cn","comment":"https://x.com/romonlyht/status/1959839321630163159","timestamp":"1756097080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58a34d3c-38fb-5535-aae6-1fa9075520a3","type":"url","category":"Network activity","to_ids":true,"value":"https://ipltx.cn/ap/signin/openid/net2F/","comment":"https://x.com/romonlyht/status/1959839324041810020","timestamp":"1756097081","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"112e9388-6ce9-5318-97ff-a001873137f0","type":"domain","category":"Network activity","to_ids":true,"value":"ipltx.cn","comment":"https://x.com/romonlyht/status/1959839324041810020","timestamp":"1756097081","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"78d9c593-4d64-50ec-9107-b1740d87f97e","type":"url","category":"Network activity","to_ids":true,"value":"https://ipltx.cn/ap/signin/openid/net2F","comment":"https://x.com/romonlyht/status/1959839324041810020","timestamp":"1756097081","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8276848-a4c4-5cac-b378-3f2d4618c56d","type":"domain","category":"Network activity","to_ids":true,"value":"authen-metaquest.com","comment":"https://x.com/urldna_bot/status/1959858307973185802","timestamp":"1756101607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"de200417-4d45-51cb-87d3-4dbf35504b24","type":"url","category":"Network activity","to_ids":true,"value":"https://authen-metaquest.com/two_step_verification/authentication/","comment":"https://x.com/urldna_bot/status/1959858307973185802","timestamp":"1756101607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8645a39a-42e9-51ff-90e3-40884db0858c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.155.85","comment":"https://x.com/Metemcyber/status/1959866918766363096","timestamp":"1756103660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"810ec464-b468-5093-91df-261603762da4","type":"domain","category":"Network activity","to_ids":true,"value":"lcmhf.cn","comment":"https://x.com/Metemcyber/status/1959866918766363096","timestamp":"1756103660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9d24d8e-82d3-53b3-8bcb-c1207263e31d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.178","comment":"https://x.com/Metemcyber/status/1959866918766363096","timestamp":"1756103660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c9a8941-0b70-5916-ac8c-ad3a2c494d61","type":"url","category":"Network activity","to_ids":true,"value":"https://lcmhf.cn/action/home/request/type=un","comment":"https://x.com/Metemcyber/status/1959866918766363096","timestamp":"1756103660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"349d933c-c511-555c-8f6c-1992a1b923e1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.162.254","comment":"https://x.com/Metemcyber/status/1959868564762198351","timestamp":"1756104053","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69d55218-0aed-5cf1-b04c-2cfd44b226ea","type":"domain","category":"Network activity","to_ids":true,"value":"firstacle.xctsgxl.cn","comment":"https://x.com/Metemcyber/status/1959868564762198351","timestamp":"1756104053","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f7c32d6-b585-5a8e-aa16-8116c085d86d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.49.125","comment":"https://x.com/Metemcyber/status/1959868564762198351","timestamp":"1756104053","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c27c4000-8f38-52da-80ce-a75de490b197","type":"url","category":"Network activity","to_ids":true,"value":"https://firstacle.xctsgxl.cn/ja-jp/account/login/","comment":"https://x.com/Metemcyber/status/1959868564762198351","timestamp":"1756104053","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1f5ff90-6407-5dc3-83f5-15345049527f","type":"url","category":"Network activity","to_ids":true,"value":"http://185.202.236.143:80","comment":"https://x.com/drb_ra/status/1959869852887421172","timestamp":"1756104360","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"321cfe30-0305-5367-a18a-e9f5d173bd59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.202.236.143","comment":"https://x.com/drb_ra/status/1959869852887421172","timestamp":"1756104360","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"9647cbd5-a07e-51b7-9cae-9136c64d907f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.66.9.8","comment":"https://x.com/drb_ra/status/1959869991488208919","timestamp":"1756104393","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"04ee1bee-fe05-5182-9b2c-59bf7bfc4f48","type":"url","category":"Network activity","to_ids":true,"value":"http://54.66.9.8:443","comment":"https://x.com/drb_ra/status/1959869991488208919","timestamp":"1756104393","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"745d422b-02ff-590d-b563-98cc90b5af71","type":"url","category":"Network activity","to_ids":true,"value":"http://41.242.156.81:443","comment":"https://x.com/drb_ra/status/1959870129925480710","timestamp":"1756104426","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c67a2907-9ffe-5c96-b20e-98022381daa0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"41.242.156.81","comment":"https://x.com/drb_ra/status/1959870129925480710","timestamp":"1756104426","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"1c2a8dc5-cb6b-5ca2-908d-1868a7362fde","type":"url","category":"Network activity","to_ids":true,"value":"http://143.110.191.198:7443","comment":"https://x.com/drb_ra/status/1959870266651123956","timestamp":"1756104458","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"08f2e92a-da65-55c4-9b27-99fd43c9c1f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.110.191.198","comment":"https://x.com/drb_ra/status/1959870266651123956","timestamp":"1756104458","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"40e58e75-4018-5f5e-baef-4dbd2ba5ef34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.229.150.95","comment":"https://x.com/drb_ra/status/1959870405587693949","timestamp":"1756104491","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c4a574c9-b1c0-5db2-8fdd-3ce498b7bdf3","type":"url","category":"Network activity","to_ids":true,"value":"http://43.229.150.95:7443","comment":"https://x.com/drb_ra/status/1959870405587693949","timestamp":"1756104491","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0a16652b-82e9-54f5-8cf5-017a176380bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.60.113.209","comment":"https://x.com/drb_ra/status/1959870545928839215","timestamp":"1756104525","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"48f6f986-6c35-5754-a75e-456e3375ef07","type":"url","category":"Network activity","to_ids":true,"value":"http://72.60.113.209:7443","comment":"https://x.com/drb_ra/status/1959870545928839215","timestamp":"1756104525","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8554738a-352d-5b79-b1c9-77afa6f00bf6","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.50.179","comment":"https://x.com/Metemcyber/status/1959870672316006698","timestamp":"1756104555","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cbb7f634-31b0-56fd-8151-a0f4bbe2dbad","type":"domain","category":"Network activity","to_ids":true,"value":"jdcfrej.cn","comment":"https://x.com/Metemcyber/status/1959870672316006698","timestamp":"1756104555","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5ba0bf14-7c77-56e9-937b-ab8a5f592927","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.164.186","comment":"https://x.com/Metemcyber/status/1959870672316006698","timestamp":"1756104555","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d69f5f5a-e18a-5a8a-846a-9b763bf77f29","type":"url","category":"Network activity","to_ids":true,"value":"https://jdcfrej.cn/action/home/request/type=un","comment":"https://x.com/Metemcyber/status/1959870672316006698","timestamp":"1756104555","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7ba3218-24fe-5983-b25e-c6b4cced0218","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.40.176.194","comment":"https://x.com/FalconFeedsio/status/1959870983659213306","timestamp":"1756104629","distribution":"5"},{"uuid":"0cbbd249-5510-556e-9d63-905de837c97d","type":"url","category":"Network activity","to_ids":true,"value":"http://5.129.235.207:4321","comment":"https://x.com/drb_ra/status/1959871194435620967","timestamp":"1756104680","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"be1549d3-634b-54a0-9909-febb5bccb898","type":"url","category":"Network activity","to_ids":true,"value":"http://20.42.107.78:7443","comment":"https://x.com/drb_ra/status/1959871332243648999","timestamp":"1756104712","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4d6f8d5e-e401-5c6d-b9b6-ca88f5362368","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.42.107.78","comment":"https://x.com/drb_ra/status/1959871332243648999","timestamp":"1756104712","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2d7c3cc8-244d-5f76-809b-e9c9df7ebc6b","type":"url","category":"Network activity","to_ids":true,"value":"http://54.177.244.130:8080","comment":"https://x.com/drb_ra/status/1959871472551526903","timestamp":"1756104746","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"f9841509-540c-5ebe-ab2c-0e708ec89c43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.177.244.130","comment":"https://x.com/drb_ra/status/1959871472551526903","timestamp":"1756104746","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"2ac64324-6431-5299-9bcf-7f1a91b4b270","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.163.203.220","comment":"https://x.com/drb_ra/status/1959871611353665753","timestamp":"1756104779","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ae4f4500-c004-5a9e-ae01-5936b5acc58a","type":"url","category":"Network activity","to_ids":true,"value":"http://213.163.203.220:443","comment":"https://x.com/drb_ra/status/1959871611353665753","timestamp":"1756104779","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1f5f45c3-b8b4-500d-915e-892be10c2f7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.87.80.121","comment":"https://x.com/drb_ra/status/1959871749463625829","timestamp":"1756104812","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"eb06deae-81f4-5abd-a161-d4634fbb8db3","type":"url","category":"Network activity","to_ids":true,"value":"http://194.87.80.121:2404","comment":"https://x.com/drb_ra/status/1959871749463625829","timestamp":"1756104812","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6579094b-2f4a-539b-a238-bb282222dfb1","type":"url","category":"Network activity","to_ids":true,"value":"http://66.63.187.37:2404","comment":"https://x.com/drb_ra/status/1959871888173498417","timestamp":"1756104845","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"295de049-7da5-5401-b716-204991c5f6b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.63.187.37","comment":"https://x.com/drb_ra/status/1959871888173498417","timestamp":"1756104845","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7bb01ad2-3844-5c46-8ee5-b63146296d52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.255.238.135","comment":"https://x.com/drb_ra/status/1959872026698522634","timestamp":"1756104878","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"fcaa8fab-9110-5da1-8289-83e445b67285","type":"url","category":"Network activity","to_ids":true,"value":"http://24.255.238.135:2404","comment":"https://x.com/drb_ra/status/1959872026698522634","timestamp":"1756104878","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6934a8e4-4767-5143-9df2-14fda09139c8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.158.8.240:2405","comment":"https://x.com/drb_ra/status/1959872166092231046","timestamp":"1756104911","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"59dce159-f74f-5f63-8083-108a6ca6c65f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.158.8.240","comment":"https://x.com/drb_ra/status/1959872166092231046","timestamp":"1756104911","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a77b5d38-1c09-5bb0-b355-277a572cab92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.13.0.138","comment":"https://x.com/drb_ra/status/1959872304789561821","timestamp":"1756104944","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7ff9f3ad-655c-5078-a417-3b0ee4de6c52","type":"url","category":"Network activity","to_ids":true,"value":"http://179.13.0.138:2404","comment":"https://x.com/drb_ra/status/1959872304789561821","timestamp":"1756104944","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"204258ee-2eb4-5188-b036-3d8feb6c1413","type":"url","category":"Network activity","to_ids":true,"value":"http://62.60.226.133:61287","comment":"https://x.com/drb_ra/status/1959872441762922899","timestamp":"1756104977","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"73d065c0-771c-5670-93af-d8ab7d68678b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.60.226.133","comment":"https://x.com/drb_ra/status/1959872441762922899","timestamp":"1756104977","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ab511666-6f9a-5503-85bd-2c116d23a8e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.19","comment":"https://x.com/drb_ra/status/1959872581315768470","timestamp":"1756105010","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"59455740-fb66-5921-bddd-8bee83c07482","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.19:3232","comment":"https://x.com/drb_ra/status/1959872581315768470","timestamp":"1756105010","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"7c55da78-2fb8-51f2-8af2-936bda1f5ec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.64.217.39","comment":"https://x.com/drb_ra/status/1959872718826090531","timestamp":"1756105043","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"fc017e7f-1708-5c66-ae3f-3a878211e8fa","type":"url","category":"Network activity","to_ids":true,"value":"http://170.64.217.39:3232","comment":"https://x.com/drb_ra/status/1959872718826090531","timestamp":"1756105043","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"9699595c-a89d-5fca-990e-d37d2083be3c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.51.175","comment":"https://x.com/Metemcyber/status/1959872839928164763","timestamp":"1756105072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f4b6a1b-7e5f-5c91-9dc5-108febfb3e5a","type":"url","category":"Network activity","to_ids":true,"value":"https://kmbyl.cn/action/home/request/type=un","comment":"https://x.com/Metemcyber/status/1959872839928164763","timestamp":"1756105072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5faa23b8-ec2a-592c-bdd4-60eb726d67e1","type":"domain","category":"Network activity","to_ids":true,"value":"kmbyl.cn","comment":"https://x.com/Metemcyber/status/1959872839928164763","timestamp":"1756105072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5750dc79-0fa6-54f3-8bf5-5a40264f2feb","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.183.54","comment":"https://x.com/Metemcyber/status/1959872839928164763","timestamp":"1756105072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b1ec6a9-4e07-53e6-abec-eb7031982a80","type":"url","category":"Network activity","to_ids":true,"value":"http://15.237.116.211:80","comment":"https://x.com/drb_ra/status/1959872857498108342","timestamp":"1756105076","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"659c02a9-5f5b-51f9-854b-ff4cbe0b9bd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.237.116.211","comment":"https://x.com/drb_ra/status/1959872857498108342","timestamp":"1756105076","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"48f837ed-0d09-53c9-86c5-f4060a8aa640","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.11.244:25","comment":"https://x.com/drb_ra/status/1959872996421857440","timestamp":"1756105109","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"acd42336-3947-510d-b866-396402262fdd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.89.11.244","comment":"https://x.com/drb_ra/status/1959873133692993741","timestamp":"1756105142","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"36011efe-5d5b-5700-b925-2b287c7b4ebc","type":"url","category":"Network activity","to_ids":true,"value":"http://159.89.11.244:80","comment":"https://x.com/drb_ra/status/1959873133692993741","timestamp":"1756105142","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"452ad510-9b54-5747-aa94-5256b34cb4f8","type":"url","category":"Network activity","to_ids":true,"value":"http://5.101.84.108:80","comment":"https://x.com/drb_ra/status/1959873272574595158","timestamp":"1756105175","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"1a0e9bb1-c550-540f-b822-b491104d796f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.91.66.252","comment":"https://x.com/drb_ra/status/1959873412467167577","timestamp":"1756105208","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"58e396e3-0e51-518c-8216-7574181bf2c8","type":"url","category":"Network activity","to_ids":true,"value":"http://77.91.66.252:80","comment":"https://x.com/drb_ra/status/1959873412467167577","timestamp":"1756105208","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"Hookbot"},{"name":"C2"}]},{"uuid":"d34fa525-e4a7-5af4-a2fd-d3987b5b7fd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.199.83.166","comment":"https://x.com/drb_ra/status/1959873552792080710","timestamp":"1756105242","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"60250019-4ea1-5087-8af9-802567ee0a34","type":"url","category":"Network activity","to_ids":true,"value":"http://20.199.83.166:6666","comment":"https://x.com/drb_ra/status/1959873552792080710","timestamp":"1756105242","distribution":"5","Tag":[{"name":"EvilGoPhish"},{"name":"C2"},{"name":"Evilginx"}]},{"uuid":"0291d9d2-159b-56a7-b094-4339bff9003b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.104.203.237:3389","comment":"https://x.com/drb_ra/status/1959873690977349918","timestamp":"1756105275","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"c273d17c-c75b-5c13-9b0a-d43e4b594acc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.104.203.237","comment":"https://x.com/drb_ra/status/1959873690977349918","timestamp":"1756105275","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"56149239-eca1-5c5c-a410-ed2ab8c98dff","type":"md5","category":"Payload delivery","to_ids":true,"value":"068484a09058a80ada3fdabf3a04ee62","comment":"https://x.com/ReBensk/status/1959873810372665611","timestamp":"1756105303","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"},{"name":"Trojan"}]},{"uuid":"06b0f47d-4ec1-5c17-8e90-f2bbb44f1bd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.187.25.89","comment":"https://x.com/drb_ra/status/1959873829695836209","timestamp":"1756105308","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"7ae0e5d6-9f4a-527d-a7f6-7eb8178a41d9","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.25.89:995","comment":"https://x.com/drb_ra/status/1959873829695836209","timestamp":"1756105308","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"502521f1-3d1e-5b89-9c0c-12d3f4cd4df0","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.55.251:443","comment":"https://x.com/drb_ra/status/1959873966866075802","timestamp":"1756105341","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"800eb5f6-710a-5805-8d96-8ca1c1e26804","type":"domain","category":"Network activity","to_ids":true,"value":"update-info4468765.com","comment":"https://x.com/JAMESWT_WT/status/1959874333704130804","timestamp":"1756105428","distribution":"5"},{"uuid":"09f4114e-8f67-5054-a40e-d6fc4bc5f0f3","type":"url","category":"Network activity","to_ids":true,"value":"https://update-info4468765.com/sign-in","comment":"https://x.com/JAMESWT_WT/status/1959874333704130804","timestamp":"1756105428","distribution":"5"},{"uuid":"de10c89f-a366-552d-bed1-43d78fe6c043","type":"domain","category":"Network activity","to_ids":true,"value":"everything.ifwenvi.cn","comment":"https://x.com/Metemcyber/status/1959876928166355294","timestamp":"1756106047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c989c4d-81ff-51f5-9b10-72b027d28fbd","type":"url","category":"Network activity","to_ids":true,"value":"https://everything.ifwenvi.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1959876928166355294","timestamp":"1756106047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a7f7bff-7c49-57a7-9ea0-5c8099300ecb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.179.83.142","comment":"https://x.com/ShanHolo/status/1959885287636570469","timestamp":"1756108040","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"5f027c73-0a6b-573a-ac22-1bd6240cd84c","type":"md5","category":"Payload delivery","to_ids":true,"value":"d1a3051a086952643088abe4495100bb","comment":"https://x.com/ShanHolo/status/1959885287636570469","timestamp":"1756108040","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"45c69002-c393-5e01-b3ea-1b8b6910fe34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.91.217","comment":"https://x.com/netresec/status/1959887253062250582","timestamp":"1756108508","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"d4159f9f-1061-52c3-b1e7-999618877eb9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.148.18.44","comment":"https://x.com/netresec/status/1959887253062250582","timestamp":"1756108508","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"7f8ed7a7-78a4-5218-808f-69039eea8e40","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.157.163.136","comment":"https://x.com/netresec/status/1959887253062250582","timestamp":"1756108508","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"84612e02-c828-524e-89cf-083c82972742","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.91.237","comment":"https://x.com/netresec/status/1959887253062250582","timestamp":"1756108508","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"240e9a9a-1662-5e65-b475-82a13cc67fc5","type":"url","category":"Network activity","to_ids":true,"value":"https://ithlpdesks.com/?r=85d3be09-32ad-40a3-9e2c-1a29372f3773&rg=eu","comment":"https://x.com/urldna_bot/status/1959888507612152189","timestamp":"1756108807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cfd299de-d71b-55ad-b2f6-01fde8914da8","type":"domain","category":"Network activity","to_ids":true,"value":"ithlpdesks.com","comment":"https://x.com/urldna_bot/status/1959888507612152189","timestamp":"1756108807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1c03717a-4a79-518f-9a23-a92792b13dfb","type":"url","category":"Network activity","to_ids":true,"value":"http://57.155.1.42","comment":"https://x.com/skocherhan/status/1959888846096572677","timestamp":"1756108888","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"d144046b-4933-564a-b5bc-fbe4482ca020","type":"ip-dst","category":"Network activity","to_ids":true,"value":"57.155.1.42","comment":"https://x.com/skocherhan/status/1959888846096572677","timestamp":"1756108888","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"95464411-7a81-5e2c-9526-99d1ef1e08ce","type":"url","category":"Network activity","to_ids":true,"value":"http://myssnddr.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c5085d59-b48c-5737-a1e8-9d81b1844cf7","type":"domain","category":"Network activity","to_ids":true,"value":"xdpxiezx.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"78c87e5f-f9d9-5a65-98a5-22d30f42ba79","type":"url","category":"Network activity","to_ids":true,"value":"http://et-mygov.com","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db7f0db9-7ac0-5d1a-bbcc-780f6115e42e","type":"domain","category":"Network activity","to_ids":true,"value":"vilkkxzdlp.bond","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f603b7b-b2be-58e6-b66f-c5411deef4e8","type":"url","category":"Network activity","to_ids":true,"value":"http://vilkkxzdlp.bond","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e3b933e-06f8-5c67-9c1d-8c41f3e9654f","type":"domain","category":"Network activity","to_ids":true,"value":"vccvs.sbs","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b957e767-1ef4-5a5b-a05d-e9b14df97692","type":"domain","category":"Network activity","to_ids":true,"value":"sneiyveg.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"690924fe-f230-5f43-98b4-ce3f3961f7ff","type":"url","category":"Network activity","to_ids":true,"value":"http://studiodamaus.com","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac4f1dd3-9a4e-5569-800c-a39ff9dbc8c9","type":"url","category":"Network activity","to_ids":true,"value":"http://bblmxqlh.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62fd6be5-2585-53b2-b3e8-a91ee0114314","type":"domain","category":"Network activity","to_ids":true,"value":"studiodamaus.com","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79bd53dc-fe7f-5d1c-85d4-ffafd5e5a039","type":"url","category":"Network activity","to_ids":true,"value":"http://bmx158.top","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ffb5b40-519a-5951-91be-7d13ac5db859","type":"domain","category":"Network activity","to_ids":true,"value":"bmx158.top","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d3f61c0-20db-5f90-a027-8465d8cab047","type":"domain","category":"Network activity","to_ids":true,"value":"myssnddr.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9155f2c7-407d-5c1a-a362-d6593892a027","type":"url","category":"Network activity","to_ids":true,"value":"http://cmbppnlm.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cd50ea7-44b7-592e-84d3-94011c6f5376","type":"domain","category":"Network activity","to_ids":true,"value":"bblmxqlh.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"86de8793-acb7-5813-a51c-1aee36f2465f","type":"domain","category":"Network activity","to_ids":true,"value":"bacfdgda.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad98b5d7-e8ad-53b9-a0c2-68fd835a6500","type":"url","category":"Network activity","to_ids":true,"value":"http://bacfdgda.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"606e55ee-394e-51c9-a8e6-7ae4d313f9e6","type":"domain","category":"Network activity","to_ids":true,"value":"ffkcvrqi.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c5a9da5e-7b19-5956-acdb-787c2cf50ed1","type":"url","category":"Network activity","to_ids":true,"value":"http://ffkcvrqi.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d007d34c-63d1-5d14-b569-f22f037741e8","type":"url","category":"Network activity","to_ids":true,"value":"http://xdpxiezx.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3408cda-033c-58f0-b15d-ecb36487fcbc","type":"url","category":"Network activity","to_ids":true,"value":"http://nuwxhpob.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9642e098-277c-53d8-87f7-4be80d3e4726","type":"domain","category":"Network activity","to_ids":true,"value":"cmbppnlm.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"13750980-d02d-5159-b583-ad3d5e9d6050","type":"url","category":"Network activity","to_ids":true,"value":"http://sneiyveg.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f83c5867-bd1e-53ea-97aa-177178166ad7","type":"domain","category":"Network activity","to_ids":true,"value":"et-mygov.com","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4833a2d5-d3f1-53ff-a3f3-e2f85bcf2002","type":"domain","category":"Network activity","to_ids":true,"value":"klvbhiat.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f1f187eb-0f9d-5e6e-831e-8dc5e7715ee4","type":"url","category":"Network activity","to_ids":true,"value":"http://klvbhiat.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d8d20d75-bf47-5366-9cfc-56640741ff5b","type":"domain","category":"Network activity","to_ids":true,"value":"ykjujafo.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7160a89-d633-58d2-a1f5-692b7b3008b7","type":"url","category":"Network activity","to_ids":true,"value":"http://vccvs.sbs","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf4c3eb3-df0f-5c8e-a036-251e48774bd6","type":"url","category":"Network activity","to_ids":true,"value":"http://ykjujafo.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8445837d-f36c-5927-9256-768c7c5e5fd6","type":"domain","category":"Network activity","to_ids":true,"value":"nuwxhpob.yachts","comment":"https://x.com/skocherhan/status/1959892258246766829","timestamp":"1756109702","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c048dda6-ea13-5804-b2c1-e4cce51016e8","type":"url","category":"Network activity","to_ids":true,"value":"https://sale-tesla.com","comment":"https://x.com/skocherhan/status/1959895623785668650","timestamp":"1756110504","distribution":"5"},{"uuid":"450a60b1-a320-5d64-bc10-2b0d33f175f3","type":"domain","category":"Network activity","to_ids":true,"value":"sale-tesla.com","comment":"https://x.com/skocherhan/status/1959895623785668650","timestamp":"1756110504","distribution":"5"},{"uuid":"364c4e5b-086f-5507-8e25-cda3eb06a25b","type":"domain","category":"Network activity","to_ids":true,"value":"getcredentialingdone.com","comment":"https://x.com/JAMESWT_WT/status/1959896919662383333","timestamp":"1756110813","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"0468dc94-dfcb-593a-b78c-c3b3701fb66f","type":"md5","category":"Payload delivery","to_ids":true,"value":"cec8d88d695d70153156f70647473a75","comment":"https://x.com/JAMESWT_WT/status/1959896919662383333","timestamp":"1756110813","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"92f54684-a344-571e-9a65-0ea4fb527b18","type":"url","category":"Network activity","to_ids":true,"value":"https://www.getcredentialingdone.com","comment":"https://x.com/JAMESWT_WT/status/1959896919662383333","timestamp":"1756110813","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"d871487d-01c7-539a-9d7e-37a01fff28e3","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.53.26:9999","comment":"https://x.com/drb_ra/status/1959898202012008566","timestamp":"1756111119","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a05e58b6-0e43-5b4c-a6b5-97ef2508d76c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"96.9.124.9","comment":"https://x.com/drb_ra/status/1959898850237247732","timestamp":"1756111273","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ba71f42d-22f2-51ec-8d83-633a3b3e4e38","type":"url","category":"Network activity","to_ids":true,"value":"http://96.9.124.9:443","comment":"https://x.com/drb_ra/status/1959898850237247732","timestamp":"1756111273","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a703b9a4-5a48-5e32-a120-df5bd45e0603","type":"domain","category":"Network activity","to_ids":true,"value":"66chat3.org","comment":"https://x.com/drb_ra/status/1959898850237247732","timestamp":"1756111273","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1b9c2140-9b74-59e3-a64a-855c718ee50a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.66chat3.org/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1959898850237247732","timestamp":"1756111273","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"70c6ea6a-0d62-597c-af1a-ffa28d6bd70d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.57","comment":"https://x.com/drb_ra/status/1959898995410821262","timestamp":"1756111308","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fdf903cb-daa9-5359-b4b7-066a0fe3db20","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.53.57:9999","comment":"https://x.com/drb_ra/status/1959898995410821262","timestamp":"1756111308","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"995fe921-0692-54dc-9d5d-32d2d5c6d026","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.53.26","comment":"https://x.com/drb_ra/status/1959898995410821262","timestamp":"1756111308","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"69c0d0f0-378e-5b55-a9ce-4ca76a492ba7","type":"md5","category":"Payload delivery","to_ids":true,"value":"87c1b572d9d4d88fd7e74f6d6693bc03","comment":"https://x.com/skocherhan/status/1959915662878347694","timestamp":"1756115282","distribution":"5"},{"uuid":"02629fa9-cd3c-5c8f-85d6-8e65230c0409","type":"url","category":"Network activity","to_ids":true,"value":"https://web-spin-cnr-it.weebly.com","comment":"https://x.com/urldna_bot/status/1959918704012964251","timestamp":"1756116007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9db0e40d-cb95-5e1e-8376-4eecb23f5c80","type":"domain","category":"Network activity","to_ids":true,"value":"web-spin-cnr-it.weebly.com","comment":"https://x.com/urldna_bot/status/1959918704012964251","timestamp":"1756116007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ecaf2e68-a7c2-55c8-aeb3-b3259aaecce0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.71.252.234","comment":"https://x.com/skocherhan/status/1959921613639455160","timestamp":"1756116700","distribution":"5"},{"uuid":"7265848a-dafd-5ca1-a8df-93eab1977a42","type":"url","category":"Network activity","to_ids":true,"value":"https://help-hub-dsck-ledgar-live.mypixieset.com","comment":"https://x.com/AmberMille78556/status/1959922880302428462","timestamp":"1756117002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff7c6b90-0cc8-5919-a5da-c09942b833f9","type":"domain","category":"Network activity","to_ids":true,"value":"help-hub-dsck-ledgar-live.mypixieset.com","comment":"https://x.com/AmberMille78556/status/1959922880302428462","timestamp":"1756117002","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"48ce9140-611c-5d2f-9b9d-e9ec03b75451","type":"domain","category":"Network activity","to_ids":true,"value":"royal-nurum.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"2a8270c3-fb33-597f-923a-b2abb3a452ac","type":"url","category":"Network activity","to_ids":true,"value":"http://royahoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"ae4e3cc0-9545-52bc-8051-84ed56526b7d","type":"domain","category":"Network activity","to_ids":true,"value":"vip-fashion-world.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"927664be-04be-50dc-bf73-61e8054a4c24","type":"url","category":"Network activity","to_ids":true,"value":"http://royalhoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"00692001-81e9-5a71-ad6c-571847c586e8","type":"domain","category":"Network activity","to_ids":true,"value":"royalhoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"be6b14a6-19e8-5a60-9234-87288f68840e","type":"domain","category":"Network activity","to_ids":true,"value":"vip-malaysia.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"41133342-693d-5ee0-a22a-9f7040b36e94","type":"url","category":"Network activity","to_ids":true,"value":"http://vipprimeroots.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"f00931de-eda0-58c1-b3ee-0e7434485a82","type":"url","category":"Network activity","to_ids":true,"value":"http://vip-fashion-world.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"e981a718-31c4-5219-bc41-4dec8ed073ba","type":"url","category":"Network activity","to_ids":true,"value":"http://royal-malaysia.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"19cc7c2e-287e-5e1e-9cfc-776162616b2a","type":"domain","category":"Network activity","to_ids":true,"value":"vipprimeroots.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"02fe3781-2926-5cc3-8ef7-e8b35d5dcffb","type":"domain","category":"Network activity","to_ids":true,"value":"royal-malaysia.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"696b6f72-ed05-5bbe-a21f-54d19adfd58e","type":"url","category":"Network activity","to_ids":true,"value":"http://royal-nurum.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"99032836-152e-5c61-8b74-4c4015c9eca8","type":"domain","category":"Network activity","to_ids":true,"value":"royahoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"5e63b5cd-c71d-5dc0-8907-3721becaa77f","type":"url","category":"Network activity","to_ids":true,"value":"http://my-perfumes-vip.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"10a99363-f656-5530-a201-2439516748a0","type":"domain","category":"Network activity","to_ids":true,"value":"royalservicevip.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"23a76cef-bd2f-5e3b-8056-b68315240118","type":"domain","category":"Network activity","to_ids":true,"value":"viphoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"dc976e04-e398-5deb-b812-0625b20ef598","type":"url","category":"Network activity","to_ids":true,"value":"http://vip-honey.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"d82f9310-a313-5c63-b1ec-3f1e082bfe0a","type":"url","category":"Network activity","to_ids":true,"value":"http://myroyalmarket.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"bf323385-fdf9-5498-a615-4de517e66553","type":"url","category":"Network activity","to_ids":true,"value":"http://www.vip-malaysia.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"f1024928-d5b6-547d-9486-a3756d0d6865","type":"domain","category":"Network activity","to_ids":true,"value":"vip-honey.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"b17a5b1e-dc72-5e94-88f3-e738e392a6d1","type":"domain","category":"Network activity","to_ids":true,"value":"myroyalmarket.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"0122fb0e-8fc4-5b15-9798-97fda6c37d50","type":"domain","category":"Network activity","to_ids":true,"value":"my-perfumes-vip.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"2f3f0955-709d-5434-9d0c-1db7f98c1378","type":"url","category":"Network activity","to_ids":true,"value":"http://vip-fashion-malaysia.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"a57b48d6-f3c4-5d39-b255-201efdb852be","type":"domain","category":"Network activity","to_ids":true,"value":"vip-fashion-malaysia.com","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"895edade-c668-5519-a7cc-2ee7d98f36ef","type":"url","category":"Network activity","to_ids":true,"value":"http://royalservicevip.org","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"fe124afa-c494-5e4b-8f31-297ff83cb0f2","type":"url","category":"Network activity","to_ids":true,"value":"http://viphoney.my","comment":"https://x.com/skocherhan/status/1959923130240995560","timestamp":"1756117062","distribution":"5"},{"uuid":"d41c3106-7964-5c6b-add3-422fd30ae967","type":"url","category":"Network activity","to_ids":true,"value":"https://lol-julian-impossible-bermuda.trycloudflare.com","comment":"https://x.com/ShanHolo/status/1959924413802922412","timestamp":"1756117368","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"930a5a48-1a47-5998-adbd-f8b479c57ac1","type":"md5","category":"Payload delivery","to_ids":true,"value":"7f6b4a9c28ebee13e0a700faed793a34","comment":"https://x.com/ShanHolo/status/1959924413802922412","timestamp":"1756117368","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"e4ec8c06-88b1-50d2-95f8-b77d6a62471f","type":"domain","category":"Network activity","to_ids":true,"value":"lol-julian-impossible-bermuda.trycloudflare.com","comment":"https://x.com/ShanHolo/status/1959924413802922412","timestamp":"1756117368","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"77126ca9-8cf4-52b4-b966-972cdbfa294f","type":"domain","category":"Network activity","to_ids":true,"value":"gudgsugd.weebly.com","comment":"https://x.com/urldna_bot/status/1959948905321226345","timestamp":"1756123207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2993c51a-da2e-5c34-a160-69e30b946c97","type":"url","category":"Network activity","to_ids":true,"value":"https://gudgsugd.weebly.com","comment":"https://x.com/urldna_bot/status/1959948905321226345","timestamp":"1756123207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c735d662-c1ee-5f8a-a414-68b738c150f6","type":"domain","category":"Network activity","to_ids":true,"value":"rivatalk.digital","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f6d25290-5c46-5eba-b086-3d070854ed4f","type":"url","category":"Network activity","to_ids":true,"value":"https://rivatalk.digital/panel/login.php","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d4dcd330-2e94-5242-bcd5-0fedf88fd6c9","type":"domain","category":"Network activity","to_ids":true,"value":"soft-gets.com","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"29ca3637-fa24-5eec-b44d-fd7fa74dc462","type":"url","category":"Network activity","to_ids":true,"value":"https://soft-gets.com/panel/login.php","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5df8647f-2bcb-5517-85cf-7b7b21d92e2d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.33.86.220/panel/login.php","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ad96ed67-4b17-5a47-8a19-fa069c46f4eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.33.86.220","comment":"https://x.com/ViriBack/status/1959951097298030712","timestamp":"1756123730","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"4ced2f60-6d61-5f31-86e0-6b01f19fe079","type":"url","category":"Network activity","to_ids":true,"value":"https://tokenlon.live","comment":"https://x.com/AmberMille78556/status/1959958249026793496","timestamp":"1756125435","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa712e1a-d897-5f18-b946-fabb79da3eaa","type":"domain","category":"Network activity","to_ids":true,"value":"tokenlon.live","comment":"https://x.com/AmberMille78556/status/1959958249026793496","timestamp":"1756125435","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32a3ebbc-0c58-57f8-af60-f051d83c8a73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.202.219","comment":"https://x.com/drb_ra/status/1959962948475957562","timestamp":"1756126555","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7d69e513-8fb0-54d3-a003-3d28ce87eaae","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.202.219:9999","comment":"https://x.com/drb_ra/status/1959962948475957562","timestamp":"1756126555","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4612d3ca-e050-5e5e-8059-eb3412903df9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.163.112.217","comment":"https://x.com/drb_ra/status/1959963092516733354","timestamp":"1756126590","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b0d0eba5-288d-5fd0-87a1-50a2c2e44739","type":"url","category":"Network activity","to_ids":true,"value":"http://43.163.112.217:443","comment":"https://x.com/drb_ra/status/1959963092516733354","timestamp":"1756126590","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1d4e20ac-fcd1-5611-a9a3-748455db0cb4","type":"url","category":"Network activity","to_ids":true,"value":"https://43.163.112.217/api/get_auth","comment":"https://x.com/drb_ra/status/1959963092516733354","timestamp":"1756126590","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"24301cdb-17f5-501e-8b3a-7758a35fbc2d","type":"url","category":"Network activity","to_ids":true,"value":"https://45.192.202.194/admin/unqueue/Server/v6.07/API/H1DGUJQ51C8GM","comment":"https://x.com/drb_ra/status/1959963233307042153","timestamp":"1756126623","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"16a9b349-04f5-511e-9d28-802531ece774","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.202.193:9999","comment":"https://x.com/drb_ra/status/1959963233307042153","timestamp":"1756126623","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3efc4bfe-4ca6-5449-bef0-c0c48a66bdce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.202.193","comment":"https://x.com/drb_ra/status/1959963233307042153","timestamp":"1756126623","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"58588383-7c0a-5720-801c-decf13f556f1","type":"url","category":"Network activity","to_ids":true,"value":"http://38.33.184.248:9999","comment":"https://x.com/drb_ra/status/1959963375242293407","timestamp":"1756126657","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b968e394-26b5-5962-8c00-771deb8a32b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.33.184.248","comment":"https://x.com/drb_ra/status/1959963375242293407","timestamp":"1756126657","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3083bdb5-d404-5001-a293-1f8715548a7d","type":"url","category":"Network activity","to_ids":true,"value":"https://8.130.167.250/visit.js","comment":"https://x.com/drb_ra/status/1959963514992316606","timestamp":"1756126690","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4fd441e5-1f38-5354-baff-dc8560e13d4a","type":"url","category":"Network activity","to_ids":true,"value":"http://8.130.167.250:80","comment":"https://x.com/drb_ra/status/1959963514992316606","timestamp":"1756126690","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"afabb9e4-c72c-54d8-a549-5d9c4898decb","type":"url","category":"Network activity","to_ids":true,"value":"https://196.251.80.193/__utm.gif","comment":"https://x.com/drb_ra/status/1959963654549381539","timestamp":"1756126724","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b468c437-66ea-5ed7-88c6-2e9cf524803d","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.193:443","comment":"https://x.com/drb_ra/status/1959963654549381539","timestamp":"1756126724","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b1de65d-de85-5373-a371-6ab47c05070a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.193","comment":"https://x.com/drb_ra/status/1959963654549381539","timestamp":"1756126724","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3e54e7d1-b755-5a54-aa68-742aa4f583f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.202.194","comment":"https://x.com/drb_ra/status/1959963794827841594","timestamp":"1756126757","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2ecfd507-4453-532c-8103-bd16316416c8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.202.197:9999","comment":"https://x.com/drb_ra/status/1959963794827841594","timestamp":"1756126757","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4946beac-4ebb-5e46-ba67-f011d5c0ef38","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.202.197","comment":"https://x.com/drb_ra/status/1959963794827841594","timestamp":"1756126757","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"704c50de-58fd-5f4b-8cad-416a5134cbc3","type":"url","category":"Network activity","to_ids":true,"value":"http://cosmetics.gr","comment":"https://x.com/FalconFeedsio/status/1959971977734783312","timestamp":"1756128708","distribution":"5"},{"uuid":"c91e7173-fe0e-5c18-bce5-6a38dca275e4","type":"domain","category":"Network activity","to_ids":true,"value":"cosmetics.gr","comment":"https://x.com/FalconFeedsio/status/1959971977734783312","timestamp":"1756128708","distribution":"5"},{"uuid":"12b30ed7-bdef-5110-b8e3-819578139825","type":"domain","category":"Network activity","to_ids":true,"value":"Study.ua","comment":"https://x.com/FalconFeedsio/status/1959976920642130342","timestamp":"1756129887","distribution":"5"},{"uuid":"13ce4c91-0755-5cd9-9358-93babb72e8ed","type":"url","category":"Network activity","to_ids":true,"value":"http://Study.ua","comment":"https://x.com/FalconFeedsio/status/1959976920642130342","timestamp":"1756129887","distribution":"5"},{"uuid":"31eb684f-1657-5bbd-bd98-bf41fee4c26a","type":"domain","category":"Network activity","to_ids":true,"value":"authentication11.weebly.com","comment":"https://x.com/urldna_bot/status/1959979114871271622","timestamp":"1756130410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cd4242f0-6067-5632-94e2-c161453f4928","type":"url","category":"Network activity","to_ids":true,"value":"https://authentication11.weebly.com","comment":"https://x.com/urldna_bot/status/1959979114871271622","timestamp":"1756130410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"684487da-7c0b-5a95-ba33-809eb96fa104","type":"domain","category":"Network activity","to_ids":true,"value":"wi2ns.com","comment":"https://x.com/DarkSecTown/status/1959997708342882647","timestamp":"1756134843","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"21107acf-8783-5492-bd3a-a033bc0c688c","type":"url","category":"Network activity","to_ids":true,"value":"http://wi2ns.com/res/decidekitten","comment":"https://x.com/DarkSecTown/status/1959997708342882647","timestamp":"1756134843","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"47261185-c0eb-5aaf-9151-f94547c588b8","type":"domain","category":"Network activity","to_ids":true,"value":"seomeere.weebly.com","comment":"https://x.com/urldna_bot/status/1960009311008010314","timestamp":"1756137609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"787e9abc-b322-52b0-9d2a-4836df23fcea","type":"url","category":"Network activity","to_ids":true,"value":"https://seomeere.weebly.com","comment":"https://x.com/urldna_bot/status/1960009311008010314","timestamp":"1756137609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"16bcfd67-7795-5b04-9bb2-a01139f35483","type":"url","category":"Network activity","to_ids":true,"value":"http://183.63.173.29:8008","comment":"https://x.com/drb_ra/status/1960009585366069409","timestamp":"1756137675","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d1527804-e49a-532e-a2f4-6ef6c3f066fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"183.63.173.29","comment":"https://x.com/drb_ra/status/1960009585366069409","timestamp":"1756137675","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b30eac3-b576-51c0-a955-16930261f947","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:80","comment":"https://x.com/drb_ra/status/1960009726085021697","timestamp":"1756137708","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d8b60216-3d6f-5eaa-b594-b15312be7791","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.62.64.54","comment":"https://x.com/drb_ra/status/1960009867755692122","timestamp":"1756137742","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8bef8e4f-aa1c-5354-97e8-a2bd3d97a336","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:443","comment":"https://x.com/drb_ra/status/1960009867755692122","timestamp":"1756137742","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3ef223d4-68e4-5ceb-9e8f-e417d69d853a","type":"url","category":"Network activity","to_ids":true,"value":"https://fimg.findu.club/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books","comment":"https://x.com/drb_ra/status/1960009867755692122","timestamp":"1756137742","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"68646737-bc9e-5535-a689-2a730aaf9cba","type":"domain","category":"Network activity","to_ids":true,"value":"fimg.findu.club","comment":"https://x.com/drb_ra/status/1960009867755692122","timestamp":"1756137742","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"391087c6-6bde-5c02-8406-0ff092601f5f","type":"domain","category":"Network activity","to_ids":true,"value":"anhuitenghui.com","comment":"https://x.com/harugasumi/status/1960013775865790918","timestamp":"1756138674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e51db1ee-52e5-5bb4-9bd6-bb282d2182bc","type":"url","category":"Network activity","to_ids":true,"value":"https://anhuitenghui.com/dzVfPa","comment":"https://x.com/harugasumi/status/1960013775865790918","timestamp":"1756138674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc5c9898-fb44-5d3a-bfd7-c75a1b47a689","type":"domain","category":"Network activity","to_ids":true,"value":"thebridgegame.com","comment":"https://x.com/harugasumi/status/1960018085479665851","timestamp":"1756139701","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8708ce2d-6551-5d5b-9ff1-e83db4290adb","type":"url","category":"Network activity","to_ids":true,"value":"https://thebridgegame.com/jabank/Phone/Verifyidentity","comment":"https://x.com/harugasumi/status/1960018085479665851","timestamp":"1756139701","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b93b068a-4bc3-5e0e-8ee2-44b76549c455","type":"domain","category":"Network activity","to_ids":true,"value":"sabeirec-ja.com","comment":"https://x.com/harugasumi/status/1960018085479665851","timestamp":"1756139701","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8592880b-39b3-5a1f-8d19-717398310cdc","type":"url","category":"Network activity","to_ids":true,"value":"https://sabeirec-ja.com/ibclient/select","comment":"https://x.com/harugasumi/status/1960018085479665851","timestamp":"1756139701","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4561832b-d2d0-5e6b-86f3-6db228404d36","type":"domain","category":"Network activity","to_ids":true,"value":"mufg-co-jp.statement-mg.sbs","comment":"https://x.com/harugasumi/status/1960021071324946826","timestamp":"1756140413","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc099a74-1a5b-5a11-8464-9c29eb018a69","type":"url","category":"Network activity","to_ids":true,"value":"https://mufg-co-jp.statement-mg.sbs/select/login","comment":"https://x.com/harugasumi/status/1960021071324946826","timestamp":"1756140413","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69275363-6151-52db-9083-826cb6788bda","type":"url","category":"Network activity","to_ids":true,"value":"https://mwebucuonlinhml00adlog0naccesss.weebly.com","comment":"https://x.com/urldna_bot/status/1960039499670425662","timestamp":"1756144807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1cf3d971-2c02-57c7-944b-e879ac92a757","type":"domain","category":"Network activity","to_ids":true,"value":"mwebucuonlinhml00adlog0naccesss.weebly.com","comment":"https://x.com/urldna_bot/status/1960039499670425662","timestamp":"1756144807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7b74ed32-705c-58eb-8834-a0e34c2f076b","type":"url","category":"Network activity","to_ids":true,"value":"https://1h.vuregyy1.ru/3g2bzgrevl.hta","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"6f23f055-8dce-5778-8b07-464e95c4acb2","type":"domain","category":"Network activity","to_ids":true,"value":"1h.vuregyy1.ru","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b713ce55-2005-5825-8019-d4125cc124b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.27.165.65","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"e4e3d5da-ddd5-5225-849d-c1b1d4b2e98a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.212.166.51","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"917c6b73-29d8-5d81-920a-f1330a065d79","type":"url","category":"Network activity","to_ids":true,"value":"https://rs.mezi.bet/samie_bower.mp3","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c08fbd92-8367-52a5-834f-22395a97499f","type":"url","category":"Network activity","to_ids":true,"value":"https://cosi.com.ar","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"80d792a4-3c52-5674-aafc-5cb0bd855359","type":"url","category":"Network activity","to_ids":true,"value":"https://sefefuy2.ru/gdawr.google?t=ye41n873","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"447237f4-fd3b-566b-8057-9957184875d4","type":"domain","category":"Network activity","to_ids":true,"value":"sefefuy2.ru","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"488ff594-3e38-545d-9d4b-0c6bc10c90b3","type":"domain","category":"Network activity","to_ids":true,"value":"rs.mezi.bet","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d3c4c965-e994-5c0b-b1c3-93968faa1f16","type":"domain","category":"Network activity","to_ids":true,"value":"cosi.com.ar","comment":"https://x.com/Merlax_/status/1960048599678493033","timestamp":"1756146976","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"024ba771-8cc4-53b1-9263-6dc859772a7d","type":"url","category":"Network activity","to_ids":true,"value":"http://20.87.75.136","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"6e409a5b-81c1-5adc-8074-007b4fec44f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.247.140.9","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"49c111a4-b7b7-502d-b59b-c15ade216c6c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.104.206:50050","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"67c08ea1-e868-5592-bb22-841b0c326bce","type":"url","category":"Network activity","to_ids":true,"value":"http://13.245.219.61","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"84e1eb9c-8f2b-568b-b146-080dd54ed9d8","type":"url","category":"Network activity","to_ids":true,"value":"http://20.87.76.240","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"7f7d3dde-a503-5c54-9374-1732d1263697","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.104.206","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"9093e6ea-6658-59df-ae14-259a6ff3e275","type":"url","category":"Network activity","to_ids":true,"value":"http://13.247.140.9","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"38032aa4-f46b-55b9-9c45-bcaeba787c8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.87.75.136","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"4814a3a4-2ea0-5b05-8a10-ce17ac04f85f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.87.76.240","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"4c9c37f0-f2dd-570e-8b87-6f14452686fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.245.219.61","comment":"https://x.com/FalconFeedsio/status/1960050147863236643","timestamp":"1756147345","distribution":"5"},{"uuid":"bbea9a3e-013f-5470-82ef-6d7e5a96542f","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.122.46:995","comment":"https://x.com/drb_ra/status/1960051084916879470","timestamp":"1756147569","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7694137a-9f76-5141-8536-79106bb0b209","type":"url","category":"Network activity","to_ids":true,"value":"http://94.49.202.120:443","comment":"https://x.com/drb_ra/status/1960051223387877774","timestamp":"1756147602","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"35b6f3e3-14b7-5451-8021-b7fc34ffbc0f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.49.202.120","comment":"https://x.com/drb_ra/status/1960051223387877774","timestamp":"1756147602","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7643a467-58e5-5ddc-9b4a-578845e0b7a9","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.108.175:56443","comment":"https://x.com/drb_ra/status/1960051361304723930","timestamp":"1756147635","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e7d688cb-64ea-5609-9c14-a07308d097ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.108.175","comment":"https://x.com/drb_ra/status/1960051361304723930","timestamp":"1756147635","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c2a93b68-be7e-591c-847b-4105f9d31fd1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.61.132.78:443","comment":"https://x.com/drb_ra/status/1960051499297570957","timestamp":"1756147668","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"e7c1638f-2894-593e-9130-e8882ef0fd65","type":"url","category":"Network activity","to_ids":true,"value":"http://34.61.132.78:3389","comment":"https://x.com/drb_ra/status/1960051637298364667","timestamp":"1756147700","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"817c07ab-5177-583b-9818-ae7214b5db72","type":"url","category":"Network activity","to_ids":true,"value":"http://18.254.12.28:443","comment":"https://x.com/drb_ra/status/1960051776021033035","timestamp":"1756147734","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"8286fe68-80bf-5278-a55f-483063bc2546","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.254.12.28","comment":"https://x.com/drb_ra/status/1960051776021033035","timestamp":"1756147734","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fb160c3d-d402-5bd5-a93d-ee4e1499e25c","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.205.128:10443","comment":"https://x.com/drb_ra/status/1960052421234667668","timestamp":"1756147887","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2e37ce72-3396-59b9-b3dc-0c0798385314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.205.128","comment":"https://x.com/drb_ra/status/1960052421234667668","timestamp":"1756147887","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fda0fb40-c881-5a0b-9777-65da37d11fbc","type":"url","category":"Network activity","to_ids":true,"value":"http://89.31.121.220:443","comment":"https://x.com/drb_ra/status/1960052559303065969","timestamp":"1756147920","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ab31554b-9029-5b44-910c-4355c227453a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.31.121.220","comment":"https://x.com/drb_ra/status/1960052559303065969","timestamp":"1756147920","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dda05e2f-384a-59e1-897f-ffdf7852b386","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.205.145.190","comment":"https://x.com/drb_ra/status/1960052700504101118","timestamp":"1756147954","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6df7c5d0-958b-504c-849b-0e81190c8657","type":"url","category":"Network activity","to_ids":true,"value":"http://154.205.145.190:443","comment":"https://x.com/drb_ra/status/1960052700504101118","timestamp":"1756147954","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"bb6106b1-a1e6-5cb1-aeb0-1ba19955858a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.40.212.130","comment":"https://x.com/drb_ra/status/1960052839809716568","timestamp":"1756147987","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8649b2fd-44e0-5a78-8d64-eddb53cc7971","type":"url","category":"Network activity","to_ids":true,"value":"http://31.40.212.130:3535","comment":"https://x.com/drb_ra/status/1960052839809716568","timestamp":"1756147987","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5d98ef23-b149-5cd4-83e0-3198f5d68f1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.49.47.43","comment":"https://x.com/drb_ra/status/1960052977898774733","timestamp":"1756148020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2b857e5b-952b-595a-adae-f5d18a3d17f9","type":"url","category":"Network activity","to_ids":true,"value":"http://64.49.47.43:443","comment":"https://x.com/drb_ra/status/1960052977898774733","timestamp":"1756148020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d3c1d035-8e5f-5f99-a549-408a53b92986","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.236.67.179","comment":"https://x.com/drb_ra/status/1960053115610415613","timestamp":"1756148053","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"42052d2d-f4ce-5546-86ac-d39bea7375dd","type":"url","category":"Network activity","to_ids":true,"value":"http://23.236.67.179:3232","comment":"https://x.com/drb_ra/status/1960053115610415613","timestamp":"1756148053","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"643dceb3-8062-5971-83bf-19ce17daae00","type":"url","category":"Network activity","to_ids":true,"value":"http://23.226.54.31:3232","comment":"https://x.com/drb_ra/status/1960053254345433204","timestamp":"1756148086","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f1a8a3d2-b760-50db-80b9-59be24d32795","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.226.54.31","comment":"https://x.com/drb_ra/status/1960053254345433204","timestamp":"1756148086","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"2b526342-2207-599f-866e-70becc463ae2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.141.139:47486","comment":"https://x.com/drb_ra/status/1960053392258244999","timestamp":"1756148119","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"848cff58-4d40-562b-b0f8-2aba642bcc36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.141.139","comment":"https://x.com/drb_ra/status/1960053392258244999","timestamp":"1756148119","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bccf61ae-ddcd-53b2-9fb0-ea276b44bbd2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.198.179.57","comment":"https://x.com/drb_ra/status/1960053532117107192","timestamp":"1756148152","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4fb75611-5593-5f76-bb90-238e11b67fe1","type":"url","category":"Network activity","to_ids":true,"value":"http://93.198.179.57:81","comment":"https://x.com/drb_ra/status/1960053532117107192","timestamp":"1756148152","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"16233884-c2cb-54fe-9c39-8497339d7cc7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.160.128.228","comment":"https://x.com/drb_ra/status/1960053670319665180","timestamp":"1756148185","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8befcd4c-a9b7-51fa-9678-a2b7a56c903b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.160.128.228:20548","comment":"https://x.com/drb_ra/status/1960053670319665180","timestamp":"1756148185","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"39531937-aca0-5682-8d57-0092616b4344","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.84.9.95","comment":"https://x.com/drb_ra/status/1960053808933048802","timestamp":"1756148218","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4a0f20c1-2c94-54a0-ab6a-995f771ae74b","type":"url","category":"Network activity","to_ids":true,"value":"http://51.84.9.95:7000","comment":"https://x.com/drb_ra/status/1960053808933048802","timestamp":"1756148218","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"16834289-93f0-5e31-97ed-6f2846aa60cc","type":"url","category":"Network activity","to_ids":true,"value":"http://46.4.113.39:8808","comment":"https://x.com/drb_ra/status/1960053948020297861","timestamp":"1756148251","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"128a6987-5ba0-5d99-93ae-5a3f3ec21943","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.4.113.39","comment":"https://x.com/drb_ra/status/1960053948020297861","timestamp":"1756148251","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"fbd4c89f-78d5-582a-8b18-ba12f5089bf6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.203.149.151","comment":"https://x.com/drb_ra/status/1960054086935752833","timestamp":"1756148285","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5a6e73b0-e29d-52e3-bad5-62bd62c718d1","type":"url","category":"Network activity","to_ids":true,"value":"http://44.203.149.151:80","comment":"https://x.com/drb_ra/status/1960054086935752833","timestamp":"1756148285","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6f38de0c-155d-5bb3-bb0a-e21b9466d3b1","type":"url","category":"Network activity","to_ids":true,"value":"http://23.21.28.221:80","comment":"https://x.com/drb_ra/status/1960054225217753106","timestamp":"1756148317","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d125c24c-c899-5096-bf50-efd0673d3b9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.21.28.221","comment":"https://x.com/drb_ra/status/1960054225217753106","timestamp":"1756148317","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4fecbd93-e05b-56dd-9bc5-753c868df590","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.234.37.139","comment":"https://x.com/drb_ra/status/1960054364627742794","timestamp":"1756148351","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"19669172-21c0-599a-9389-9060931cff4f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.234.37.139:4000","comment":"https://x.com/drb_ra/status/1960054364627742794","timestamp":"1756148351","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"14dad7da-f1fe-5896-8226-490a31ea04d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.73.218.6","comment":"https://x.com/drb_ra/status/1960054502893174901","timestamp":"1756148384","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"8bc06f09-5b6b-5872-a1d7-11f456793645","type":"url","category":"Network activity","to_ids":true,"value":"http://178.73.218.6:3000","comment":"https://x.com/drb_ra/status/1960054502893174901","timestamp":"1756148384","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"20ca11de-d7cb-57ea-baa9-b9ea8ad8aa23","type":"domain","category":"Network activity","to_ids":true,"value":"mfg.vxf.mybluehost.me","comment":"https://x.com/urldna_bot/status/1960069700013957542","timestamp":"1756152007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"29dd4b02-42e7-57ac-ac9f-4dadea1afc13","type":"url","category":"Network activity","to_ids":true,"value":"http://mfg.vxf.mybluehost.me/fr/auth/Nickel-informations-login-ACLIqWDKsRui5AL3yTAw6C1er11A/clients/login.php","comment":"https://x.com/urldna_bot/status/1960069700013957542","timestamp":"1756152007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"942667ed-cfe5-5c23-9819-4ee3a5768575","type":"url","category":"Network activity","to_ids":true,"value":"http://94.49.202.120","comment":"https://x.com/threatquery/status/1960084784358609309","timestamp":"1756155603","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"44e4823d-aa66-53f1-9108-a4d28689cf1d","type":"url","category":"Network activity","to_ids":true,"value":"http://18.254.12.28","comment":"https://x.com/threatquery/status/1960084788183806456","timestamp":"1756155604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"6354cb4c-3193-556c-a4d8-f5dd756705e2","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.122.46","comment":"https://x.com/threatquery/status/1960084786304766191","timestamp":"1756155604","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"d9afb069-71de-5882-9535-300bc9aacd95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.14.248.18","comment":"https://x.com/drb_ra/status/1960085601958699186","timestamp":"1756155798","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"570cb740-010a-5d0e-80d8-b79f65a246ff","type":"url","category":"Network activity","to_ids":true,"value":"http://38.14.248.18:80","comment":"https://x.com/drb_ra/status/1960085601958699186","timestamp":"1756155798","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"88a56118-c399-5f91-935c-395f05dac35f","type":"url","category":"Network activity","to_ids":true,"value":"https://pensi.me/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1960085740664307989","timestamp":"1756155831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6328f602-b6f3-5e06-b572-ea180393ae50","type":"url","category":"Network activity","to_ids":true,"value":"http://217.154.212.25:8443","comment":"https://x.com/drb_ra/status/1960085740664307989","timestamp":"1756155831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"be98adcc-4cd6-5ab6-b298-b8aac595b353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.154.212.25","comment":"https://x.com/drb_ra/status/1960085740664307989","timestamp":"1756155831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"24308d8f-a7b8-53e8-a7cd-73602cef48da","type":"domain","category":"Network activity","to_ids":true,"value":"pensi.me","comment":"https://x.com/drb_ra/status/1960085740664307989","timestamp":"1756155831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a10f1646-7bbc-51df-8523-435956ddc9b5","type":"url","category":"Network activity","to_ids":true,"value":"https://116.62.64.54/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books","comment":"https://x.com/drb_ra/status/1960085881861124198","timestamp":"1756155865","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ceab159d-bf53-5a39-9997-3ce1cd0b6aec","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:4433","comment":"https://x.com/drb_ra/status/1960085881861124198","timestamp":"1756155865","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"18c674ef-8adf-5f1f-90bc-dbc320b6bfbb","type":"url","category":"Network activity","to_ids":true,"value":"http://8.141.90.104:6666","comment":"https://x.com/drb_ra/status/1960086023376875795","timestamp":"1756155899","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"94e40405-58f1-5d35-ac4c-0c406b0e90ed","type":"url","category":"Network activity","to_ids":true,"value":"http://116.62.64.54:80","comment":"https://x.com/drb_ra/status/1960086672739045672","timestamp":"1756156054","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b3d2df53-58a9-58d9-a2a0-a1768a8e6a78","type":"domain","category":"Network activity","to_ids":true,"value":"xn--spe-2qa.weebly.com","comment":"https://x.com/urldna_bot/status/1960099898486931682","timestamp":"1756159207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"28f5c538-d469-506d-9ee5-2fdef3b397dc","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--spe-2qa.weebly.com","comment":"https://x.com/urldna_bot/status/1960099898486931682","timestamp":"1756159207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"48d21455-1a81-542f-aa08-a42d829212ef","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.46:1911","comment":"https://x.com/SarlackLab/status/1960111301964747068","timestamp":"1756161926","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/SarlackLab/status/1960111301964747068","timestamp":"1756161926","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c7285b26-dd48-51e6-a3f7-c3eb21d4679e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.206.193.214:80","comment":"https://x.com/SarlackLab/status/1960111481757786417","timestamp":"1756161969","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"ca78a5c0-771c-55fa-8b3f-107d0c4e096e","type":"domain","category":"Network activity","to_ids":true,"value":"oct1.xyz","comment":"https://x.com/SarlackLab/status/1960111481757786417","timestamp":"1756161969","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"87de7f05-98f3-5172-b118-cff7909eeec2","type":"url","category":"Network activity","to_ids":true,"value":"http://oct1.xyz","comment":"https://x.com/SarlackLab/status/1960111481757786417","timestamp":"1756161969","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"6e4da31e-11fb-5427-998b-4a90a9e5b9c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.206.193.214","comment":"https://x.com/SarlackLab/status/1960111481757786417","timestamp":"1756161969","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"14469094-cd74-5fb2-bb11-bc4307adda47","type":"domain","category":"Network activity","to_ids":true,"value":"infouploads.com","comment":"https://x.com/SarlackLab/status/1960111556068335643","timestamp":"1756161986","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"b48bb4eb-628d-563d-a024-fba1f50ccd66","type":"url","category":"Network activity","to_ids":true,"value":"http://infouploads.com","comment":"https://x.com/SarlackLab/status/1960111556068335643","timestamp":"1756161986","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"6b1c17e9-2b9f-54b5-b446-645ff8bd0a01","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:33263","comment":"https://x.com/SarlackLab/status/1960111725375578379","timestamp":"1756162027","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"2c4fed12-63dd-5503-a6ae-f1c5c6bc0ba1","type":"domain","category":"Network activity","to_ids":true,"value":"shall-downloaded.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1960111725375578379","timestamp":"1756162027","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"008b0169-6743-5e53-8ff3-1b6afee59c5d","type":"url","category":"Network activity","to_ids":true,"value":"http://shall-downloaded.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1960111725375578379","timestamp":"1756162027","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"075b40de-c18e-5222-a217-c96e0f2c5fb6","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:32744","comment":"https://x.com/SarlackLab/status/1960111873333805195","timestamp":"1756162062","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"64df3f78-7972-57af-b976-25b5564855d8","type":"domain","category":"Network activity","to_ids":true,"value":"al-touring.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1960111873333805195","timestamp":"1756162062","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"290a6f27-da09-53bb-bb8e-f8179dabff96","type":"url","category":"Network activity","to_ids":true,"value":"http://al-touring.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1960111873333805195","timestamp":"1756162062","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/SarlackLab/status/1960111873333805195","timestamp":"1756162062","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ed4ad847-56ef-589c-906b-4eee73d0bf5a","type":"url","category":"Network activity","to_ids":true,"value":"http://3.69.157.220:15537","comment":"https://x.com/SarlackLab/status/1960112042901192856","timestamp":"1756162102","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"3b92c2aa-5c20-5c56-bd2a-656cd93f4cf7","type":"url","category":"Network activity","to_ids":true,"value":"http://52.28.247.255:15537","comment":"https://x.com/SarlackLab/status/1960112042901192856","timestamp":"1756162102","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"089411f0-f183-597e-8f05-59f0bde05377","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.28.247.255","comment":"https://x.com/SarlackLab/status/1960112042901192856","timestamp":"1756162102","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"1247c2e2-4a2b-572a-9997-b91d821d5a4e","type":"url","category":"Network activity","to_ids":true,"value":"http://192.121.16.196:443","comment":"https://x.com/SarlackLab/status/1960112128163041581","timestamp":"1756162123","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"88d461fd-9e11-522f-abf2-bbdf48e1e8b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.121.16.196","comment":"https://x.com/SarlackLab/status/1960112128163041581","timestamp":"1756162123","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e339a6af-f62e-5c99-ac32-8325844b2e2f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.194.35.243:3359","comment":"https://x.com/SarlackLab/status/1960112192902095157","timestamp":"1756162138","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"0d0f11e5-0c0f-5e90-a7ed-dfee6ec81474","type":"domain","category":"Network activity","to_ids":true,"value":"jkhz10cp2.localto.net","comment":"https://x.com/SarlackLab/status/1960112192902095157","timestamp":"1756162138","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"f7ea46b1-1dfe-5c71-8f69-07ad4e9e4e8d","type":"url","category":"Network activity","to_ids":true,"value":"http://jkhz10cp2.localto.net","comment":"https://x.com/SarlackLab/status/1960112192902095157","timestamp":"1756162138","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a8e007e4-0292-5dac-8bce-2e8ce13a5bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.194.35.243","comment":"https://x.com/SarlackLab/status/1960112192902095157","timestamp":"1756162138","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"b6c708fc-72e4-5b9c-ae4e-8594efc062bd","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.116.228:1912","comment":"https://x.com/SarlackLab/status/1960114294722314396","timestamp":"1756162639","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"42e14c37-9e30-583b-8986-76e6ca1f1b03","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.116.228","comment":"https://x.com/SarlackLab/status/1960114294722314396","timestamp":"1756162639","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"8147ec48-a3c7-5336-96f6-87b06561ade4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.130.167.250:8088","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"59a65b3c-98b7-5d99-bb1a-068bb2fb5d7d","type":"url","category":"Network activity","to_ids":true,"value":"http://123.249.33.60:8888","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"6a8784ff-904e-5802-8f7d-3b823c71f660","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.78.183","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"d35edd75-ba06-51a2-894b-01eb5b31775f","type":"url","category":"Network activity","to_ids":true,"value":"http://120.78.121.146","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"eddb7ec4-72f7-526f-baf4-526f61c0c9be","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.122.195","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"401d0875-b6ad-5930-b256-e651c911ab12","type":"url","category":"Network activity","to_ids":true,"value":"http://134.175.87.25:4782","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"09b77334-6bf7-5397-b4f0-945564511fde","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.249.33.60","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"3eb7738e-c4fd-54d6-816f-5286a82079a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.78.183","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"75e31c1c-8ec9-54f2-a1cd-2cb99ad9fd45","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.78.121.146","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"89af0c01-802f-5623-9c12-b14a9a45e2bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.122.195","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"f9da7d7b-5953-5efc-bcb8-39306b4abfdc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.175.87.25","comment":"https://x.com/FalconFeedsio/status/1960116174852850127","timestamp":"1756163087","distribution":"5"},{"uuid":"62b3bb6e-3fa5-559c-9120-414056f8da08","type":"url","category":"Network activity","to_ids":true,"value":"https://47.92.192.154/public/asset/font/script.js","comment":"https://x.com/drb_ra/status/1960116754702577787","timestamp":"1756163226","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22cede7a-46e5-5395-9886-1b09039bf1ac","type":"url","category":"Network activity","to_ids":true,"value":"http://47.92.192.154:80","comment":"https://x.com/drb_ra/status/1960116754702577787","timestamp":"1756163226","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"01c54bef-995b-5293-9f56-52167438818e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.92.192.154","comment":"https://x.com/drb_ra/status/1960116754702577787","timestamp":"1756163226","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"44eff844-6b06-5dae-817b-7e566ada27a4","type":"url","category":"Network activity","to_ids":true,"value":"http://162.251.95.82:88","comment":"https://x.com/drb_ra/status/1960116894507073727","timestamp":"1756163259","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38e06306-bb31-58fe-b3bd-d1c0ecd8f9cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.251.95.82","comment":"https://x.com/drb_ra/status/1960116894507073727","timestamp":"1756163259","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ebf80340-e03b-527f-9927-187786dbeb14","type":"url","category":"Network activity","to_ids":true,"value":"http://47.95.33.207:80","comment":"https://x.com/drb_ra/status/1960117034148417547","timestamp":"1756163292","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b172fb5a-24e2-5777-8e5f-697dc73d4726","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.95.33.207","comment":"https://x.com/drb_ra/status/1960117034148417547","timestamp":"1756163292","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a902fb5-236c-5f95-b087-0de77ab2b8a3","type":"url","category":"Network activity","to_ids":true,"value":"http://118.31.173.19:4444","comment":"https://x.com/drb_ra/status/1960117172631462109","timestamp":"1756163325","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b211c5d6-7dd3-5d4d-a8c5-a5dba73f00a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.31.173.19","comment":"https://x.com/drb_ra/status/1960117172631462109","timestamp":"1756163325","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d269e220-0567-5e03-86b3-1b2f6c502aa0","type":"domain","category":"Network activity","to_ids":true,"value":"cbrightonuk.weebly.com","comment":"https://x.com/urldna_bot/status/1960130106929655828","timestamp":"1756166409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3ab6f594-8b38-5a44-9b1c-e1c90ef2a3f4","type":"url","category":"Network activity","to_ids":true,"value":"https://cbrightonuk.weebly.com","comment":"https://x.com/urldna_bot/status/1960130106929655828","timestamp":"1756166409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ab511666-6f9a-5503-85bd-2c116d23a8e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.146.158.19","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"9da6898e-03f6-5535-af81-31db72ba9daa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"219.87.158.113","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"959bb3b8-fb57-5473-afc4-0e7cfb6f7203","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.124.94.87","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"9a51b822-e98e-5018-8c84-9523f5c0ba43","type":"url","category":"Network activity","to_ids":true,"value":"http://103.146.158.19:8888","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"7b6921fb-6212-54e6-b6d3-8615781ff6be","type":"url","category":"Network activity","to_ids":true,"value":"http://23.58.96.12","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"ee5fc9b4-3260-5d34-b4bf-e1df7cd51f3b","type":"url","category":"Network activity","to_ids":true,"value":"http://219.87.158.113","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"3702e71c-6d7c-5558-a51d-8d7b326bb469","type":"url","category":"Network activity","to_ids":true,"value":"http://221.124.94.87:14876/i","comment":"https://x.com/FalconFeedsio/status/1960132354531532895","timestamp":"1756166945","distribution":"5"},{"uuid":"ecb7b703-6cf8-5a7f-8d7e-05ea1c5a9322","type":"url","category":"Network activity","to_ids":true,"value":"http://cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/fbgwls245/status/1960132631460528240","timestamp":"1756167011","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"aa382bc4-2a7b-5b09-a847-c3534d5e26c2","type":"domain","category":"Network activity","to_ids":true,"value":"cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/fbgwls245/status/1960132631460528240","timestamp":"1756167011","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a4df7c96-3101-549f-baca-a11c27202902","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.201.28","comment":"https://x.com/catnap707/status/1960137468700921939","timestamp":"1756168164","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7964037e-7861-527b-be70-5ea2a2166ce3","type":"domain","category":"Network activity","to_ids":true,"value":"cr-mufg.apjcpjw.com","comment":"https://x.com/catnap707/status/1960137468700921939","timestamp":"1756168164","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b1a7b053-b782-554c-b064-3271b74fed5e","type":"url","category":"Network activity","to_ids":true,"value":"http://cr-mufg.apjcpjw.com/Jyy3sW/?verify=~","comment":"https://x.com/catnap707/status/1960137468700921939","timestamp":"1756168164","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"255be318-f6e2-5023-be59-26a6961953ee","type":"url","category":"Network activity","to_ids":true,"value":"http://cr-mufg.tbyiliao.com/Jyy3sW/?dividend~","comment":"https://x.com/catnap707/status/1960138052120223948","timestamp":"1756168303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75910c59-e13e-57be-af4a-db3d616c23d3","type":"domain","category":"Network activity","to_ids":true,"value":"cr-mufg.tbyiliao.com","comment":"https://x.com/catnap707/status/1960138052120223948","timestamp":"1756168303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7091ff25-a2d8-5543-bfcc-7f243b525c7c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.145.249","comment":"https://x.com/catnap707/status/1960138052120223948","timestamp":"1756168303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33aa08b1-36c2-5280-b1f6-4463ecccb58e","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-shlnklnjp01-06.com","comment":"https://x.com/harugasumi/status/1960139248172208507","timestamp":"1756168589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0bce6e5-f858-56b5-ad86-f0f35049a6f2","type":"domain","category":"Network activity","to_ids":true,"value":"driect-shlnklnjp01-06.com","comment":"https://x.com/harugasumi/status/1960139248172208507","timestamp":"1756168589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92a5b021-39ec-5eaf-b6f1-3af769ebf538","type":"domain","category":"Network activity","to_ids":true,"value":"driect-shlnklnjp00.com","comment":"https://x.com/harugasumi/status/1960139248172208507","timestamp":"1756168589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"583d0c83-7938-5665-b47c-76052cc8cd2e","type":"url","category":"Network activity","to_ids":true,"value":"https://driect-shlnklnjp00.com/tikubetu/selectState.htm/","comment":"https://x.com/harugasumi/status/1960139248172208507","timestamp":"1756168589","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f33353b4-6ed5-5ec7-8437-a9cebb4e8fa2","type":"url","category":"Network activity","to_ids":true,"value":"https://www-cr-mufg.chuanjun99.com/Jyy3sW/","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1225ad95-434b-5069-b1d8-d16ab1d71cfd","type":"url","category":"Network activity","to_ids":true,"value":"https://cr-mufg.hongyuxingtz.com/Jyy3sW/","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"776c2dc2-ea43-59fb-bdf3-49b8b0cf28a9","type":"url","category":"Network activity","to_ids":true,"value":"https://cr-mufg.apjcpjw.com/Jyy3sW/","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d4e0f93-b219-5e7b-b5cb-93dc44d50e8e","type":"domain","category":"Network activity","to_ids":true,"value":"cr-mufg.hongyuxingtz.com","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a3a9f04-f866-5b6e-915d-652194a51a41","type":"url","category":"Network activity","to_ids":true,"value":"https://cr-mufg.tbyiliao.com/Jyy3sW/","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb741900-9791-58b3-94b8-7f09fd05df83","type":"domain","category":"Network activity","to_ids":true,"value":"www-cr-mufg.chuanjun99.com","comment":"https://x.com/masaomi346/status/1960141943603933401","timestamp":"1756169231","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8147ec48-a3c7-5336-96f6-87b06561ade4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.130.167.250:8088","comment":"https://x.com/drb_ra/status/1960158902936305971","timestamp":"1756173275","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0d9b06e7-2845-56c6-bfe4-91bbb9a0d923","type":"url","category":"Network activity","to_ids":true,"value":"https://ac-aix-marseill.weebly.com","comment":"https://x.com/urldna_bot/status/1960160295478775955","timestamp":"1756173607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"07d1eb6f-1342-51e9-a17c-ab7e4140f1e4","type":"domain","category":"Network activity","to_ids":true,"value":"ac-aix-marseill.weebly.com","comment":"https://x.com/urldna_bot/status/1960160295478775955","timestamp":"1756173607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8ddd729b-6ed5-5bd0-ae12-3cba93e07596","type":"domain","category":"Network activity","to_ids":true,"value":"open-monex.qhhbxhz.com","comment":"https://x.com/catnap707/status/1960161879629738470","timestamp":"1756173984","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01a06803-8cd9-5352-820f-7fabf6b1acfd","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.182.230","comment":"https://x.com/catnap707/status/1960161879629738470","timestamp":"1756173984","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d71a942f-2dab-525c-b6c3-6434bcc3d818","type":"url","category":"Network activity","to_ids":true,"value":"http://open-monex.qhhbxhz.com/support/?login=~","comment":"https://x.com/catnap707/status/1960161879629738470","timestamp":"1756173984","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9419f137-243f-5a84-9be2-7d195b08fc86","type":"url","category":"Network activity","to_ids":true,"value":"http://sbisec-jp.helijili.com/ETGate/?sbisec=~","comment":"https://x.com/catnap707/status/1960163667766624666","timestamp":"1756174411","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df8296d6-f145-52cf-ac7b-4278a508d1ed","type":"domain","category":"Network activity","to_ids":true,"value":"sbisec-jp.helijili.com","comment":"https://x.com/catnap707/status/1960163667766624666","timestamp":"1756174411","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f0b3224-9ede-5048-a191-d9d26d71fdf3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.172.129","comment":"https://x.com/catnap707/status/1960163667766624666","timestamp":"1756174411","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec23a8f2-880a-5bb2-a8b3-f6a23ff88fd5","type":"domain","category":"Network activity","to_ids":true,"value":"vigofcuvfy.weebly.com","comment":"https://x.com/urldna_bot/status/1960190493171597394","timestamp":"1756180806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4a0f0046-85ae-53d3-a0f0-20486bcb96bf","type":"url","category":"Network activity","to_ids":true,"value":"https://vigofcuvfy.weebly.com","comment":"https://x.com/urldna_bot/status/1960190493171597394","timestamp":"1756180806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"978d9f13-3f77-5890-a84a-8e901f2b495c","type":"domain","category":"Network activity","to_ids":true,"value":"share.jtor.xyz","comment":"https://x.com/RakeshKrish12/status/1960214877005660257","timestamp":"1756186620","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"58c81076-15f4-5581-9009-c605e4db7757","type":"url","category":"Network activity","to_ids":true,"value":"https://share.jtor.xyz","comment":"https://x.com/RakeshKrish12/status/1960214877005660257","timestamp":"1756186620","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"4ad3fb01-55bb-5121-b998-97bca30c4606","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.85.141.8","comment":"https://x.com/RakeshKrish12/status/1960214877005660257","timestamp":"1756186620","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"489f25b8-33e9-5b05-a626-872411ef8c59","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.80.234.130","comment":"https://x.com/RakeshKrish12/status/1960214877005660257","timestamp":"1756186620","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"56149239-eca1-5c5c-a410-ed2ab8c98dff","type":"md5","category":"Payload delivery","to_ids":true,"value":"068484a09058a80ada3fdabf3a04ee62","comment":"https://x.com/ReBensk/status/1960219012685758536","timestamp":"1756187606","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"24f1366c-77d8-5dbe-a5f0-bb2443f18130","type":"md5","category":"Payload delivery","to_ids":true,"value":"68f1c713a231bee1983633c9373cc871","comment":"https://x.com/ReBensk/status/1960219283406848451","timestamp":"1756187670","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"4023e821-c42f-5431-b2fe-8c0c355923d5","type":"domain","category":"Network activity","to_ids":true,"value":"cursilibim.ru","comment":"https://x.com/K_N1kolenko/status/1960229998721118421","timestamp":"1756190225","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"890fe388-8e7d-5dec-a37a-390ff09b0032","type":"url","category":"Network activity","to_ids":true,"value":"http://cursilibim.ru/zajd","comment":"https://x.com/K_N1kolenko/status/1960229998721118421","timestamp":"1756190225","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"c0696901-dabd-5795-bfec-4b88ff1399fc","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.176.23:80","comment":"https://x.com/drb_ra/status/1960232578763403747","timestamp":"1756190840","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1fa495ac-84a1-5f07-958c-9aeea96e3f67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.176.23","comment":"https://x.com/drb_ra/status/1960232578763403747","timestamp":"1756190840","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7ff1c61f-37ce-5c6f-9f5e-7e43bcd196ef","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.36.8:80","comment":"https://x.com/drb_ra/status/1960232716646977719","timestamp":"1756190873","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"12484fea-2c71-5c08-b0bd-800ba393f0c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.36.8","comment":"https://x.com/drb_ra/status/1960232716646977719","timestamp":"1756190873","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f75c260b-b030-58da-894a-0cf27fdb3ea4","type":"url","category":"Network activity","to_ids":true,"value":"http://47.82.102.108:80","comment":"https://x.com/drb_ra/status/1960232856321405331","timestamp":"1756190906","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3279d49b-009e-5928-8b37-e656ba2f7e13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.82.102.108","comment":"https://x.com/drb_ra/status/1960232856321405331","timestamp":"1756190906","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5db3e981-4088-58af-81d0-113ca956a6d5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.19.161:80","comment":"https://x.com/drb_ra/status/1960232995090010228","timestamp":"1756190940","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"87c1f9df-21d1-56f9-8474-6c3ee70a188e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.19.161","comment":"https://x.com/drb_ra/status/1960232995090010228","timestamp":"1756190940","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0ff41848-26a0-54d3-b7e6-68c979c93217","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.2.168:80","comment":"https://x.com/drb_ra/status/1960233133778858293","timestamp":"1756190973","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ebc1d300-1ccc-547a-8584-beef314e3e10","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.2.168","comment":"https://x.com/drb_ra/status/1960233133778858293","timestamp":"1756190973","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bf4d157a-bc53-5172-9514-8d065ae38f6c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.106.16:80","comment":"https://x.com/drb_ra/status/1960233272715141478","timestamp":"1756191006","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"eb51733a-5782-5924-a6a8-42172e6ecbdc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.106.16","comment":"https://x.com/drb_ra/status/1960233272715141478","timestamp":"1756191006","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a2524996-b62a-544f-bf1c-1182935c06f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.114","comment":"https://x.com/drb_ra/status/1960233410107953408","timestamp":"1756191039","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"f82c36df-334f-50a9-9b8b-6995833a0bc2","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.114:9999","comment":"https://x.com/drb_ra/status/1960233410107953408","timestamp":"1756191039","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"e63b2363-103d-5a31-90f1-b229dd78ca81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.14.7","comment":"https://x.com/drb_ra/status/1960233549233045963","timestamp":"1756191072","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"ac822502-cf27-5691-99dd-40f6350e307e","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.14.7:5000","comment":"https://x.com/drb_ra/status/1960233549233045963","timestamp":"1756191072","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"c915d6af-d9f9-5d99-ad73-9a9836672379","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.191.200.116","comment":"https://x.com/drb_ra/status/1960233687758332336","timestamp":"1756191105","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"40444df2-8f17-58b4-a8a9-d1df1b11cee3","type":"url","category":"Network activity","to_ids":true,"value":"http://98.191.200.116:443","comment":"https://x.com/drb_ra/status/1960233687758332336","timestamp":"1756191105","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ec264ce2-8a50-5799-9392-9482929a207d","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.12.6:443","comment":"https://x.com/drb_ra/status/1960233826594021687","timestamp":"1756191138","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"080efc49-55bd-51c3-85af-578351ccb314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"130.193.41.75","comment":"https://x.com/drb_ra/status/1960233964515348764","timestamp":"1756191171","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"c22f573e-7ee8-51ea-ab56-d4a737274ba3","type":"url","category":"Network activity","to_ids":true,"value":"http://130.193.41.75:443","comment":"https://x.com/drb_ra/status/1960233964515348764","timestamp":"1756191171","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"035c0461-0519-54ed-aad4-f36891fef7f8","type":"url","category":"Network activity","to_ids":true,"value":"http://64.181.243.221:443","comment":"https://x.com/drb_ra/status/1960234103493550144","timestamp":"1756191204","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"45aca7aa-56bc-5e58-8cf1-432ade174668","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.181.243.221","comment":"https://x.com/drb_ra/status/1960234103493550144","timestamp":"1756191204","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"5dfa9f45-08a0-5255-a1b8-15f14b86ff75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.132.178.245","comment":"https://x.com/drb_ra/status/1960234243520397710","timestamp":"1756191237","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"e61e63b3-6c34-5e51-8e16-d4651761d9f9","type":"url","category":"Network activity","to_ids":true,"value":"http://34.132.178.245:7443","comment":"https://x.com/drb_ra/status/1960234243520397710","timestamp":"1756191237","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"eca85e82-9613-5d2f-8cd9-4978d7ca6649","type":"url","category":"Network activity","to_ids":true,"value":"http://194.59.31.30:7443","comment":"https://x.com/drb_ra/status/1960234381022241021","timestamp":"1756191270","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"70e7827d-5169-5f33-bbc6-950d1b4ca340","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.59.31.30","comment":"https://x.com/drb_ra/status/1960234381022241021","timestamp":"1756191270","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"6a7d47f6-da51-573c-883f-08f09d73a1ce","type":"url","category":"Network activity","to_ids":true,"value":"http://66.228.42.166:7443","comment":"https://x.com/drb_ra/status/1960234521623748627","timestamp":"1756191304","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"36160adf-0357-50a3-a903-f737f7582b84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.228.42.166","comment":"https://x.com/drb_ra/status/1960234521623748627","timestamp":"1756191304","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"51716751-5ac5-5dfb-aebd-64bf1b92aaee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.226.204.243","comment":"https://x.com/drb_ra/status/1960234660128014502","timestamp":"1756191337","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a3101c2d-90b0-5317-aebd-511e5289674a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.226.204.243:7443","comment":"https://x.com/drb_ra/status/1960234660128014502","timestamp":"1756191337","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9cb84385-8bb4-5154-a00a-e01950c173b7","type":"url","category":"Network activity","to_ids":true,"value":"http://3.76.47.39:7443","comment":"https://x.com/drb_ra/status/1960234799538327759","timestamp":"1756191370","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c9af4468-f579-5162-9ffe-4cfe50bac8b1","type":"url","category":"Network activity","to_ids":true,"value":"http://91.229.239.115:7443","comment":"https://x.com/drb_ra/status/1960234937681895765","timestamp":"1756191403","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bc3a5d35-8e1c-55ac-882b-95fb66a12a83","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.229.239.115","comment":"https://x.com/drb_ra/status/1960234937681895765","timestamp":"1756191403","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b51beb25-c789-50e9-bd6c-2590f1644ab6","type":"url","category":"Network activity","to_ids":true,"value":"http://35.79.211.69:80","comment":"https://x.com/drb_ra/status/1960235076496638209","timestamp":"1756191436","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"17a0a131-c21a-5ff3-8203-33563d5b1824","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.79.211.69","comment":"https://x.com/drb_ra/status/1960235076496638209","timestamp":"1756191436","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"b4984977-b1c2-5d8d-9415-81eebd4e8dab","type":"url","category":"Network activity","to_ids":true,"value":"http://209.38.62.126:443","comment":"https://x.com/drb_ra/status/1960235216062005301","timestamp":"1756191469","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dd7dffca-c32f-595c-8cfe-5461aca7ef83","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.38.62.126","comment":"https://x.com/drb_ra/status/1960235216062005301","timestamp":"1756191469","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"99e1affa-f9dc-5896-8123-203db92d1e1d","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.103.204:8080","comment":"https://x.com/drb_ra/status/1960235863280869550","timestamp":"1756191623","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e842a079-48ee-5be5-848d-9bbc41bc3998","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.103.204","comment":"https://x.com/drb_ra/status/1960235863280869550","timestamp":"1756191623","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5edf11f9-d09f-5489-8897-85948881a6e0","type":"url","category":"Network activity","to_ids":true,"value":"http://193.26.115.186:1024","comment":"https://x.com/drb_ra/status/1960236001579639161","timestamp":"1756191656","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ecae11f3-fc5a-54e3-be80-df5c05e647e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.26.115.186","comment":"https://x.com/drb_ra/status/1960236001579639161","timestamp":"1756191656","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"db96ded1-20c7-5520-9342-710119ad6342","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.101.106:2405","comment":"https://x.com/drb_ra/status/1960236139379356037","timestamp":"1756191689","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7fc04621-6982-5fd1-9d34-307a3797b03b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.101.106","comment":"https://x.com/drb_ra/status/1960236139379356037","timestamp":"1756191689","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"151747d1-e414-5fee-9983-8b23f07185b3","type":"url","category":"Network activity","to_ids":true,"value":"http://15.228.243.194:2404","comment":"https://x.com/drb_ra/status/1960236277669798076","timestamp":"1756191722","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"90f65302-d6e3-50bb-a514-854bddfc1e0c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.228.243.194","comment":"https://x.com/drb_ra/status/1960236277669798076","timestamp":"1756191722","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1187c8ae-6d76-53e6-abe9-a9fa5e0c680d","type":"domain","category":"Network activity","to_ids":true,"value":"spaces.center:3085","comment":"https://x.com/netresec/status/1960236337807659117","timestamp":"1756191737","distribution":"5","Tag":[{"name":"NetSupportRAT"}]},{"uuid":"1a315d4f-97a8-5e84-9b37-459ed1711665","type":"url","category":"Network activity","to_ids":true,"value":"http://spaces.center:3085","comment":"https://x.com/netresec/status/1960236337807659117","timestamp":"1756191737","distribution":"5","Tag":[{"name":"NetSupportRAT"}]},{"uuid":"38f33a48-8948-58bb-b058-1a1773cd9245","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.88.104.226","comment":"https://x.com/netresec/status/1960236337807659117","timestamp":"1756191737","distribution":"5","Tag":[{"name":"NetSupportRAT"}]},{"uuid":"f6c062a6-2ffa-5347-aaba-111096fb3491","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.48.43","comment":"https://x.com/netresec/status/1960236337807659117","timestamp":"1756191737","distribution":"5","Tag":[{"name":"NetSupportRAT"}]},{"uuid":"46113940-01a9-5a54-91e0-10a6e58c2037","type":"url","category":"Network activity","to_ids":true,"value":"http://69.10.45.244:8172","comment":"https://x.com/drb_ra/status/1960236415683293361","timestamp":"1756191755","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4d89b32c-6ea1-568c-88ed-bc4bdb13944f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.10.45.244","comment":"https://x.com/drb_ra/status/1960236557559861348","timestamp":"1756191789","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"cc350620-bc64-5645-af35-aecee8d5e037","type":"url","category":"Network activity","to_ids":true,"value":"http://69.10.45.244:5938","comment":"https://x.com/drb_ra/status/1960236557559861348","timestamp":"1756191789","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2c4bb9ba-62ab-5135-9d8e-e3c56097e42a","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.30:2323","comment":"https://x.com/drb_ra/status/1960236695535644993","timestamp":"1756191822","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7cf072d4-7e1f-5caf-8c2d-037c368e9acb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.30","comment":"https://x.com/drb_ra/status/1960236695535644993","timestamp":"1756191822","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7b7dc1c5-c7dd-56af-8d16-45dbd81aae6e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.191","comment":"https://x.com/drb_ra/status/1960236833842802714","timestamp":"1756191855","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ba9c530c-294d-5063-af96-d36bd5696069","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.191:2000","comment":"https://x.com/drb_ra/status/1960236833842802714","timestamp":"1756191855","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"eaf46144-343b-51a3-9228-c6b200619ce4","type":"url","category":"Network activity","to_ids":true,"value":"http://123.57.82.185:3232","comment":"https://x.com/drb_ra/status/1960236972498198708","timestamp":"1756191888","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"e3cba127-cac9-5e9e-8dd5-7f27b1dcca35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.57.82.185","comment":"https://x.com/drb_ra/status/1960236972498198708","timestamp":"1756191888","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f14e8dc1-e389-59ee-a704-e48711e70f5a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.55.91.26:3232","comment":"https://x.com/drb_ra/status/1960237112306848232","timestamp":"1756191921","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"a49ef6d0-770d-5b02-a4fd-510e73a7a63e","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.212.116:8080","comment":"https://x.com/drb_ra/status/1960237251050217657","timestamp":"1756191954","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"49808b27-b04c-5560-911f-28f204c408d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.212.116","comment":"https://x.com/drb_ra/status/1960237251050217657","timestamp":"1756191954","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5f876336-fb08-5c12-9d53-d0439685c0ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.234.26","comment":"https://x.com/drb_ra/status/1960237389428777040","timestamp":"1756191987","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"41901e9e-8ac5-512e-9ba1-3cfcf9bf89e8","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.234.26:8080","comment":"https://x.com/drb_ra/status/1960237389428777040","timestamp":"1756191987","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fc80955a-f5c1-5daa-8e4b-e035d30ad434","type":"url","category":"Network activity","to_ids":true,"value":"http://176.46.152.47:6606","comment":"https://x.com/drb_ra/status/1960237527391936666","timestamp":"1756192020","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"7676bdca-2861-5476-9b1b-4bd309ed17a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.47","comment":"https://x.com/drb_ra/status/1960237527391936666","timestamp":"1756192020","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"4c96a7dd-6574-51e7-9e4e-77f27fc20c3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.153.68.198","comment":"https://x.com/drb_ra/status/1960237666919649290","timestamp":"1756192053","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"1afc9804-7d94-51a1-a2d1-1674b08e9bdf","type":"url","category":"Network activity","to_ids":true,"value":"http://43.153.68.198:6606","comment":"https://x.com/drb_ra/status/1960237666919649290","timestamp":"1756192053","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8c72f204-ad5e-543a-85b2-9b75e6a0a066","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.25.35:80","comment":"https://x.com/drb_ra/status/1960237804857774433","timestamp":"1756192086","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"87a05b4b-9da5-552c-a23f-2bb31bf04f42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.25.35","comment":"https://x.com/drb_ra/status/1960237804857774433","timestamp":"1756192086","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"34103663-2a36-580e-b90f-8583477ebe56","type":"url","category":"Network activity","to_ids":true,"value":"https://www.jslianyi.cn","comment":"https://x.com/urldna_bot/status/1960250895788114323","timestamp":"1756195207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f7f2faa7-6032-54c8-8e26-2b7a25088342","type":"domain","category":"Network activity","to_ids":true,"value":"jslianyi.cn","comment":"https://x.com/urldna_bot/status/1960250895788114323","timestamp":"1756195207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f6c91189-097a-52b2-ad3d-8294ce1fcb43","type":"domain","category":"Network activity","to_ids":true,"value":"mailserver-lk.com","comment":"https://x.com/ShadowChasing1/status/1960260418896568398","timestamp":"1756197478","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"81bc5d0a-f4e8-5506-a26d-8b5494815a30","type":"url","category":"Network activity","to_ids":true,"value":"http://mailserver-lk.com","comment":"https://x.com/ShadowChasing1/status/1960260418896568398","timestamp":"1756197478","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"a83ea68b-f0c0-54b7-9e0e-90852033f133","type":"domain","category":"Network activity","to_ids":true,"value":"mailscodomain-hubenkks.b4a.run","comment":"https://x.com/ShadowChasing1/status/1960260490485006662","timestamp":"1756197495","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ae3b0a40-5b6f-5560-a275-535f22884200","type":"url","category":"Network activity","to_ids":true,"value":"https://mailscodomain-hubenkks.b4a.run/mailhome.html?gfjdliotrgojnghgherbegrehureert0e0ee=1","comment":"https://x.com/ShadowChasing1/status/1960260490485006662","timestamp":"1756197495","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"56da5c7c-f0ff-572c-a864-d3bfdac5791b","type":"domain","category":"Network activity","to_ids":true,"value":"paknavy.org.pk","comment":"https://x.com/ShadowChasing1/status/1960260519518220507","timestamp":"1756197502","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5376e276-cee7-5730-8b57-e20d4abc1f33","type":"url","category":"Network activity","to_ids":true,"value":"http://paknavy.org.pk","comment":"https://x.com/ShadowChasing1/status/1960260519518220507","timestamp":"1756197502","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"bfed55c6-cfe7-548e-8d2a-c8d414014152","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.ncrs.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"7c759493-fa1c-5ce4-ba0c-ef3268194fbb","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.findsiteabc.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1d270fe6-2e3b-58f3-99e8-4fb318c7188c","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.verifyn.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"06f47529-4ad2-56ca-824d-a67d6dd278fe","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.findsiteabc.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e4c23463-0b0b-5ae0-aa7a-361f17025e25","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.c.verifyn.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"6b5b677b-4c64-5f4d-bef0-dcc5e4e474f5","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.ncrs.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0a8c7c5d-b3b1-5cd8-a448-f2699b5aa8ea","type":"domain","category":"Network activity","to_ids":true,"value":"dc.crsorgi.gov.in.sncrs.top","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4d30fb72-2d3e-534c-9864-32cc6a65e4f3","type":"domain","category":"Network activity","to_ids":true,"value":"indiasciorg.com","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4078d16e-f5f2-568c-9f7e-a3c6d694a6d6","type":"domain","category":"Network activity","to_ids":true,"value":"indiasrcorg.com","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4c476a97-171e-569d-862e-ad3242c552dd","type":"url","category":"Network activity","to_ids":true,"value":"http://indiasciorg.com","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"0f99e21f-6f5b-5623-aadf-13c74f108c74","type":"domain","category":"Network activity","to_ids":true,"value":"dc.c.verifyn.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9ca4add3-5841-5bfe-9305-8533cc1815ca","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.verifyn.site","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"797001a1-d8a4-51fc-be2d-635ba0506230","type":"url","category":"Network activity","to_ids":true,"value":"http://indiasrcorg.com","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"fe79532c-d276-501a-995c-8dadfc6f41b8","type":"url","category":"Network activity","to_ids":true,"value":"http://dc.crsorgi.gov.in.sncrs.top","comment":"https://x.com/ShadowChasing1/status/1960260918807265596","timestamp":"1756197597","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ee7464b2-3727-5c91-92cd-8bfa670c7255","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.59.88.92","comment":"https://x.com/FalconFeedsio/status/1960261411856347441","timestamp":"1756197715","distribution":"5"},{"uuid":"f328343d-951b-5455-b8c3-1f1699179208","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.59.83.66","comment":"https://x.com/FalconFeedsio/status/1960261411856347441","timestamp":"1756197715","distribution":"5"},{"uuid":"4ba6bdde-ebfa-5779-bc3a-bdbe3d2c042e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.0.234.17","comment":"https://x.com/JAMESWT_WT/status/1960276470275694683","timestamp":"1756201305","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"d40a1a4a-97c6-5915-b20a-9cfffb82b942","type":"md5","category":"Payload delivery","to_ids":true,"value":"de6d8f6af4bf9087a4d2ab3c88e2cb14","comment":"https://x.com/JAMESWT_WT/status/1960276470275694683","timestamp":"1756201305","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"4e6949a3-e4d0-58a7-b946-8d8299d427f9","type":"md5","category":"Payload delivery","to_ids":true,"value":"006a74830a4047fe9e1d5e574a2e6eba","comment":"https://x.com/JAMESWT_WT/status/1960276470275694683","timestamp":"1756201305","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"cb92eea5-fe03-5116-b35c-46d82d5d2617","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.24.123.37","comment":"https://x.com/JAMESWT_WT/status/1960276470275694683","timestamp":"1756201305","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"0de4ff5d-e792-5e9f-9dfb-6ad224abc5cf","type":"domain","category":"Network activity","to_ids":true,"value":"secure.lectec.com.au","comment":"https://x.com/urldna_bot/status/1960281091064930357","timestamp":"1756202407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6224448d-1585-5641-964a-a0a927203e22","type":"url","category":"Network activity","to_ids":true,"value":"https://secure.lectec.com.au/mobile/front","comment":"https://x.com/urldna_bot/status/1960281091064930357","timestamp":"1756202407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f3dd5381-0b71-5096-8b29-3be7001a248b","type":"md5","category":"Payload delivery","to_ids":true,"value":"aabcb9848b8fc20abad173f1be3ed297","comment":"https://x.com/JAMESWT_WT/status/1960283809477243216","timestamp":"1756203055","distribution":"5"},{"uuid":"8e0026ec-bae2-50f7-88f0-fb2054d1ddd5","type":"md5","category":"Payload delivery","to_ids":true,"value":"60adf357ec0538eba3552cf46cc7b035","comment":"https://x.com/JAMESWT_WT/status/1960283809477243216","timestamp":"1756203055","distribution":"5"},{"uuid":"587aede1-4290-5b19-a2dc-f68f587c93a6","type":"md5","category":"Payload delivery","to_ids":true,"value":"c599743e7f93772bff37342a89ac8095","comment":"https://x.com/JAMESWT_WT/status/1960283809477243216","timestamp":"1756203055","distribution":"5"},{"uuid":"cba75294-c50b-5b2d-b5ee-46511d7ae6cf","type":"md5","category":"Payload delivery","to_ids":true,"value":"abcb6acb57823efabb26613fdb89a4cf","comment":"https://x.com/JAMESWT_WT/status/1960283809477243216","timestamp":"1756203055","distribution":"5"},{"uuid":"643cb918-1bf2-52b4-b349-8f3ec33ed352","type":"url","category":"Network activity","to_ids":true,"value":"http://103.63.28.71:2024/getz","comment":"https://x.com/JAMESWT_WT/status/1960296641728012587","timestamp":"1756206114","distribution":"5"},{"uuid":"a753efaa-fb9a-58eb-875c-1366075eeee9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.63.28.71","comment":"https://x.com/JAMESWT_WT/status/1960296641728012587","timestamp":"1756206114","distribution":"5"},{"uuid":"58a74617-6512-5dbc-aaae-7151d95a1595","type":"domain","category":"Network activity","to_ids":true,"value":"newmexico-btonlineh.weebly.com","comment":"https://x.com/urldna_bot/status/1960311292067029317","timestamp":"1756209607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6784c9b4-cd9b-5cff-b28f-bdc53b0e42e6","type":"url","category":"Network activity","to_ids":true,"value":"https://newmexico-btonlineh.weebly.com","comment":"https://x.com/urldna_bot/status/1960311292067029317","timestamp":"1756209607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"48129b25-8dcd-591a-880f-9c89abb24501","type":"md5","category":"Payload delivery","to_ids":true,"value":"6c39ca36484cad85337c12c66ce5b025","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"07c1dc7f-b523-5c01-abd0-8198e4b2a3cb","type":"md5","category":"Payload delivery","to_ids":true,"value":"e27ae37f3cc6f0089cdeacc886cdaad0","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"3a853bd0-697a-54da-adc2-0dccddfd68e1","type":"md5","category":"Payload delivery","to_ids":true,"value":"e6aa891e3a327282b575dd893fcbdd1b","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"17939f92-312c-5777-ad81-20a84d30990b","type":"md5","category":"Payload delivery","to_ids":true,"value":"def31c874ccbababc20cb450b247e890","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"954278ec-99f6-51d9-8ef5-e8b3a207829a","type":"md5","category":"Payload delivery","to_ids":true,"value":"ce21ec26ea7c8327cbe3b4992e6645a7","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"297c6edd-3063-5119-a238-11fd07a849ac","type":"md5","category":"Payload delivery","to_ids":true,"value":"e87349c9326de8cf73235f2bf6e06f1a","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"3ea8c913-fec1-5fa4-88f1-aad22332d384","type":"md5","category":"Payload delivery","to_ids":true,"value":"015856e9c6aa8221d84ae6a6b22d6bd4","comment":"https://x.com/suyog41/status/1960315468146700346","timestamp":"1756210603","distribution":"5"},{"uuid":"1445d526-cdcd-5180-92c0-449da1da87b4","type":"domain","category":"Network activity","to_ids":true,"value":"www-vip1-docmo-ho-tm-ails-mt-dcardjapanseai-jarvis.bytesc.club","comment":"https://x.com/masaomi346/status/1960315710086975544","timestamp":"1756210660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb697e1e-dc84-5f6d-a003-d3eafcd210ed","type":"url","category":"Network activity","to_ids":true,"value":"https://www-vip1-docmo-ho-tm-ails-mt-dcardjapanseai-jarvis.bytesc.club/src/index.html/","comment":"https://x.com/masaomi346/status/1960315710086975544","timestamp":"1756210660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67f65303-8340-59be-8393-15a1187894f8","type":"domain","category":"Network activity","to_ids":true,"value":"vandaagpersoneelsdiensten.nl","comment":"https://x.com/suyog41/status/1960329689995657703","timestamp":"1756213993","distribution":"5"},{"uuid":"7434c52c-6ed8-5cff-b509-23ae3781b8f7","type":"url","category":"Network activity","to_ids":true,"value":"http://vandaagpersoneelsdiensten.nl","comment":"https://x.com/suyog41/status/1960329689995657703","timestamp":"1756213993","distribution":"5"},{"uuid":"f1ad2c93-35d6-553c-bda7-2b99108adcaa","type":"md5","category":"Payload delivery","to_ids":true,"value":"9ecd48e037b933eb6ca5b611517a59e9","comment":"https://x.com/suyog41/status/1960329689995657703","timestamp":"1756213993","distribution":"5"},{"uuid":"41bccd51-9f1d-575e-970e-da74fd4b4c71","type":"url","category":"Network activity","to_ids":true,"value":"https://memberth.vfumpxyg.cn/p/login/RW131201001cc=01002/","comment":"https://x.com/masaomi346/status/1960341166215602678","timestamp":"1756216730","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11cc6b30-cd4e-54f3-8c2d-d776820f967c","type":"url","category":"Network activity","to_ids":true,"value":"https://phylacfication.1vaozxr.cn/p/login/RW131201001cc=01002/","comment":"https://x.com/masaomi346/status/1960341166215602678","timestamp":"1756216730","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb536ade-64fb-5d80-af8e-9b0bbe18140b","type":"domain","category":"Network activity","to_ids":true,"value":"phylacfication.1vaozxr.cn","comment":"https://x.com/masaomi346/status/1960341166215602678","timestamp":"1756216730","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19302df8-7fe8-5d93-9c91-79c32451c036","type":"domain","category":"Network activity","to_ids":true,"value":"memberth.vfumpxyg.cn","comment":"https://x.com/masaomi346/status/1960341166215602678","timestamp":"1756216730","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c22e0efe-8c78-5ca3-a4bb-33a984ef75cb","type":"url","category":"Network activity","to_ids":true,"value":"https://vocalitycommunitycunmv.weebly.com","comment":"https://x.com/urldna_bot/status/1960341489940074575","timestamp":"1756216807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9545b6e4-70ae-579f-b566-323aa20be1bc","type":"domain","category":"Network activity","to_ids":true,"value":"vocalitycommunitycunmv.weebly.com","comment":"https://x.com/urldna_bot/status/1960341489940074575","timestamp":"1756216807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1d40bcca-0610-5e6e-89c9-3ec66f62f25d","type":"url","category":"Network activity","to_ids":true,"value":"http://netextender-sonicwall.org","comment":"https://x.com/1ZRR4H/status/1960344707248083354","timestamp":"1756217574","distribution":"5"},{"uuid":"bbd63cd9-4dca-5e01-b55a-496733ae531c","type":"domain","category":"Network activity","to_ids":true,"value":"netextender-sonicwall.org","comment":"https://x.com/1ZRR4H/status/1960344707248083354","timestamp":"1756217574","distribution":"5"},{"uuid":"ff879d14-e449-59ea-b349-d5be883b18f8","type":"domain","category":"Network activity","to_ids":true,"value":"flfcovfy.weebly.com","comment":"https://x.com/urldna_bot/status/1960371691772600414","timestamp":"1756224007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7825f75e-c992-52bc-9254-99d1cb9f57f9","type":"url","category":"Network activity","to_ids":true,"value":"https://flfcovfy.weebly.com","comment":"https://x.com/urldna_bot/status/1960371691772600414","timestamp":"1756224007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ff7df1f4-45a0-53a0-b15b-c490afcabde5","type":"domain","category":"Network activity","to_ids":true,"value":"xn--c-besncon-pxgf.weebly.com","comment":"https://x.com/urldna_bot/status/1960401891730272270","timestamp":"1756231208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"287ea33e-313e-57b5-8364-cc9166c73aa6","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--c-besncon-pxgf.weebly.com","comment":"https://x.com/urldna_bot/status/1960401891730272270","timestamp":"1756231208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3528fb63-2945-5eba-86f9-a5a55f1f735a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.1.160.69","comment":"https://x.com/drb_ra/status/1960416368282755561","timestamp":"1756234659","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fa40dc79-181a-555c-88d8-930df4f1245f","type":"url","category":"Network activity","to_ids":true,"value":"http://166.1.160.69:65523","comment":"https://x.com/drb_ra/status/1960416368282755561","timestamp":"1756234659","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0342fe6f-2e6a-558e-a6b0-7e7134a7a39d","type":"url","category":"Network activity","to_ids":true,"value":"http://98.158.162.7:443","comment":"https://x.com/drb_ra/status/1960416508351492251","timestamp":"1756234693","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"82938d34-a503-5b2a-80bc-64d6a038c6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.158.162.7","comment":"https://x.com/drb_ra/status/1960416508351492251","timestamp":"1756234693","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"ef258301-3e79-5c88-bd30-7024e4ad6fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://69.197.186.237:8443","comment":"https://x.com/drb_ra/status/1960416648206438446","timestamp":"1756234726","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7e865fe1-9408-5536-8708-39856336a28c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.197.186.237","comment":"https://x.com/drb_ra/status/1960416648206438446","timestamp":"1756234726","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f84e3e4b-9c6e-5bb7-9d27-213c41fbf03f","type":"url","category":"Network activity","to_ids":true,"value":"http://212.22.90.116:11601","comment":"https://x.com/drb_ra/status/1960416789789335688","timestamp":"1756234760","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e04482d6-ed5b-57fd-9d14-09ef7f1f229d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.22.90.116","comment":"https://x.com/drb_ra/status/1960416789789335688","timestamp":"1756234760","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b2813dc0-80c8-5c9c-add2-c888bffc9510","type":"url","category":"Network activity","to_ids":true,"value":"http://135.181.161.106:10443","comment":"https://x.com/drb_ra/status/1960416930118164517","timestamp":"1756234793","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"34c842d7-746f-50d8-994c-3f631f68a93e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"135.181.161.106","comment":"https://x.com/drb_ra/status/1960416930118164517","timestamp":"1756234793","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4556fb89-259b-5a0e-b994-4fb0b1a2da30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.26.192.117","comment":"https://x.com/drb_ra/status/1960417068869935398","timestamp":"1756234826","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"576a2d9b-a715-5dcf-b662-cab13f1f7714","type":"url","category":"Network activity","to_ids":true,"value":"http://194.26.192.117:2404","comment":"https://x.com/drb_ra/status/1960417068869935398","timestamp":"1756234826","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a0818319-f63e-52a7-a3d2-4894aca7b988","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.226.54.25","comment":"https://x.com/drb_ra/status/1960417207856586935","timestamp":"1756234859","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"e1ecbf63-6954-5e12-a608-ad231145657d","type":"url","category":"Network activity","to_ids":true,"value":"http://23.226.54.25:3232","comment":"https://x.com/drb_ra/status/1960417207856586935","timestamp":"1756234859","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"2b07640d-caab-59d8-9794-97881830beaf","type":"url","category":"Network activity","to_ids":true,"value":"http://23.226.54.77:3232","comment":"https://x.com/drb_ra/status/1960417352081924207","timestamp":"1756234894","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"c297083b-4c8e-52dc-bbd2-5fe1ec86a054","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.226.54.77","comment":"https://x.com/drb_ra/status/1960417352081924207","timestamp":"1756234894","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"708d57c0-9eac-56cc-95c8-15f71a75fc18","type":"url","category":"Network activity","to_ids":true,"value":"http://79.241.100.83:82","comment":"https://x.com/drb_ra/status/1960417493002150253","timestamp":"1756234927","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"523ae2c5-597f-5147-b2b5-be658353b5d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.241.100.83","comment":"https://x.com/drb_ra/status/1960417493002150253","timestamp":"1756234927","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a617900e-ac1a-5c6d-ba2b-5b639b0476d0","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.246.145:80","comment":"https://x.com/drb_ra/status/1960417630562738299","timestamp":"1756234960","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"59c0cf4b-37c4-5421-bf1e-16a387cb49a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.246.145","comment":"https://x.com/drb_ra/status/1960417630562738299","timestamp":"1756234960","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"be96392d-2a23-50fb-8a33-51c485faf5fd","type":"url","category":"Network activity","to_ids":true,"value":"http://54.76.17.207:80","comment":"https://x.com/drb_ra/status/1960417768878301658","timestamp":"1756234993","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ea98193a-cb9c-510c-8f47-eab6cc4a1fdf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.76.17.207","comment":"https://x.com/drb_ra/status/1960417768878301658","timestamp":"1756234993","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e816aac0-32f8-5b37-8036-0c439f3c6750","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.230.133","comment":"https://x.com/drb_ra/status/1960417912357052834","timestamp":"1756235027","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7a848267-2e3a-5a09-bd2f-84c8affcbf01","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.230.133:80","comment":"https://x.com/drb_ra/status/1960417912357052834","timestamp":"1756235027","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b9280b64-07bf-5197-9b3d-2a11073efb27","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.24.198:80","comment":"https://x.com/drb_ra/status/1960418050513232038","timestamp":"1756235060","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a6a383e8-664d-5a33-b39f-3464e4da8cb4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.24.198","comment":"https://x.com/drb_ra/status/1960418050513232038","timestamp":"1756235060","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f87bd9c4-b4f4-5890-a535-e8c523569303","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.27.181:80","comment":"https://x.com/drb_ra/status/1960418189919314274","timestamp":"1756235093","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a8e9462c-b7dd-5b21-ac6e-0f2e6551852b","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.104.128:80","comment":"https://x.com/drb_ra/status/1960418327769043312","timestamp":"1756235126","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"540e3819-dea9-5104-acd7-262cf90307f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.104.128","comment":"https://x.com/drb_ra/status/1960418327769043312","timestamp":"1756235126","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"44819e3f-ef31-5495-98fb-72d2e9f7b1f0","type":"url","category":"Network activity","to_ids":true,"value":"http://63.35.217.171:80","comment":"https://x.com/drb_ra/status/1960418604983505303","timestamp":"1756235192","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"57002566-5f6b-5995-93fc-13ecee466b10","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.35.217.171","comment":"https://x.com/drb_ra/status/1960418604983505303","timestamp":"1756235192","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fb24e356-54f3-5be6-a440-030b3a402eb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.236.217","comment":"https://x.com/drb_ra/status/1960418742866993309","timestamp":"1756235225","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dd68e661-d7f4-549d-9aa3-7fa60ed0c66a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.236.217:80","comment":"https://x.com/drb_ra/status/1960418742866993309","timestamp":"1756235225","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2f3d05a9-67b8-55f9-9952-33c8b23978de","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.192.128:80","comment":"https://x.com/drb_ra/status/1960418882503503921","timestamp":"1756235259","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d815e79e-0cc9-574b-91a9-b226e76cd72e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.192.128","comment":"https://x.com/drb_ra/status/1960418882503503921","timestamp":"1756235259","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ef3cd148-18bd-5cd0-ac63-9c4205850e69","type":"url","category":"Network activity","to_ids":true,"value":"http://49.13.164.199:587","comment":"https://x.com/drb_ra/status/1960419021750460791","timestamp":"1756235292","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7788aa7c-cd7e-5fdd-a8fc-d152f73c0354","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.13.164.199","comment":"https://x.com/drb_ra/status/1960419021750460791","timestamp":"1756235292","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5e09c282-597c-5c4e-aa9c-1b27e97b3049","type":"url","category":"Network activity","to_ids":true,"value":"http://85.208.84.133:45051","comment":"https://x.com/drb_ra/status/1960419161323995484","timestamp":"1756235325","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"75198438-6486-5ca1-874d-2d1816d81292","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.133","comment":"https://x.com/drb_ra/status/1960419161323995484","timestamp":"1756235325","distribution":"5","Tag":[{"name":"C2"},{"name":"Hookbot"},{"name":"Pegasus"}]},{"uuid":"6dcb1b05-537b-544d-8588-a1766eff9354","type":"ip-dst","category":"Network activity","to_ids":true,"value":"106.54.198.64","comment":"https://x.com/drb_ra/status/1960419302445600842","timestamp":"1756235359","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"d00316c4-fcf4-59eb-978c-d6010d06a5a2","type":"url","category":"Network activity","to_ids":true,"value":"http://106.54.198.64:8888","comment":"https://x.com/drb_ra/status/1960419302445600842","timestamp":"1756235359","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"1a5f60ee-432a-53dc-a51d-81c30c8798bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.14","comment":"https://x.com/drb_ra/status/1960419442388619298","timestamp":"1756235392","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"7c4c074a-2328-5a1a-a8f5-b91a2a0e21ce","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.14:6667","comment":"https://x.com/drb_ra/status/1960419442388619298","timestamp":"1756235392","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"5415d36a-61f5-52ef-ace3-7aa75bfb2be7","type":"url","category":"Network activity","to_ids":true,"value":"http://176.44.67.235:995","comment":"https://x.com/drb_ra/status/1960419580783833355","timestamp":"1756235425","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"16120211-1cb6-5248-bc6a-8bce8c0bce08","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.44.67.235","comment":"https://x.com/drb_ra/status/1960419580783833355","timestamp":"1756235425","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"4cc183c6-edc9-5ece-9d09-8be19845f343","type":"url","category":"Network activity","to_ids":true,"value":"http://88.248.215.193:443","comment":"https://x.com/drb_ra/status/1960419718440829096","timestamp":"1756235458","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"5d36ffb2-7c6a-596d-b149-ae8d9a375ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.248.215.193","comment":"https://x.com/drb_ra/status/1960419718440829096","timestamp":"1756235458","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"4c393918-c2aa-5392-b68c-20dbb5ed254b","type":"url","category":"Network activity","to_ids":true,"value":"http://118.161.8.116:443","comment":"https://x.com/drb_ra/status/1960419857163247829","timestamp":"1756235491","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"39463772-a81e-5926-b63f-788aa85ebb33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.161.8.116","comment":"https://x.com/drb_ra/status/1960419857163247829","timestamp":"1756235491","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"17cd8457-9705-5eda-ae0d-72bd93f980d5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.239.158.72:445","comment":"https://x.com/drb_ra/status/1960419996141576245","timestamp":"1756235524","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2f98173d-3e8a-55bd-9803-2b015d614385","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.239.158.72","comment":"https://x.com/drb_ra/status/1960419996141576245","timestamp":"1756235524","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3edd4a17-06c4-5cfa-8fd2-24ddf5752f86","type":"url","category":"Network activity","to_ids":true,"value":"http://3.238.255.52:445","comment":"https://x.com/drb_ra/status/1960420135409229864","timestamp":"1756235557","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ac77f05c-b136-5181-8e6d-fd5f69aa5309","type":"url","category":"Network activity","to_ids":true,"value":"http://44.215.46.4:80","comment":"https://x.com/drb_ra/status/1960420274567852290","timestamp":"1756235590","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"64ef211f-5cf1-5af1-a051-de47b078b198","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.215.46.4","comment":"https://x.com/drb_ra/status/1960420274567852290","timestamp":"1756235590","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"aaf02c92-dae7-5375-baf3-3bd468a37482","type":"url","category":"Network activity","to_ids":true,"value":"http://134.199.195.223:7443","comment":"https://x.com/drb_ra/status/1960420413013381310","timestamp":"1756235623","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"247e5a31-6eb2-551f-85ab-e710922ba2c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.199.195.223","comment":"https://x.com/drb_ra/status/1960420413013381310","timestamp":"1756235623","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"63093955-9e7e-55f3-b079-fb895d65eabd","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.239.239:7443","comment":"https://x.com/drb_ra/status/1960420551588970778","timestamp":"1756235657","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8b37ed19-234d-55ba-94a7-3ead69ab84d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.239.239","comment":"https://x.com/drb_ra/status/1960420551588970778","timestamp":"1756235657","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"316a0bed-0209-53c0-a1c8-9cbde3bb1107","type":"url","category":"Network activity","to_ids":true,"value":"http://65.87.7.142:7443","comment":"https://x.com/drb_ra/status/1960420690206539860","timestamp":"1756235690","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"cdad331b-198b-5a0d-a4c8-e1e49baff3b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.87.7.142","comment":"https://x.com/drb_ra/status/1960420690206539860","timestamp":"1756235690","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"74cf33d0-d152-5954-818b-e69125ce2fc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.142.184.149","comment":"https://x.com/drb_ra/status/1960420828253688174","timestamp":"1756235722","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"de90b6ad-2354-52f5-99c1-b068a75878d3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.142.184.149:7443","comment":"https://x.com/drb_ra/status/1960420828253688174","timestamp":"1756235722","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"e319ab64-63ed-53f0-b1e1-e2c993b80148","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.203.241:7443","comment":"https://x.com/drb_ra/status/1960420965977923657","timestamp":"1756235755","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"8c2cee74-a43b-5689-9521-dbe0bc0ce975","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.143.203.241","comment":"https://x.com/drb_ra/status/1960420965977923657","timestamp":"1756235755","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"c18cc0ca-daca-51b9-8007-78b1ed4d8d20","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.148.180:18081","comment":"https://x.com/drb_ra/status/1960421106109587826","timestamp":"1756235789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6887034f-377a-59f0-9a4c-bf7dddbd49b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.148.180","comment":"https://x.com/drb_ra/status/1960421106109587826","timestamp":"1756235789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9471538e-91fb-5cf3-86c1-3152b9f07a33","type":"url","category":"Network activity","to_ids":true,"value":"http://43.100.18.178:443","comment":"https://x.com/drb_ra/status/1960421248581636181","timestamp":"1756235823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8497fa16-b8c6-50f8-b421-5fba33e61111","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.100.18.178","comment":"https://x.com/drb_ra/status/1960421248581636181","timestamp":"1756235823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ad82fb9a-efdd-554b-8995-97d0ca3e6dfc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.132.28.230","comment":"https://x.com/drb_ra/status/1960421390097453192","timestamp":"1756235856","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"46be81a6-af1e-5370-accc-84d57f2df9ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.10.202","comment":"https://x.com/drb_ra/status/1960421390097453192","timestamp":"1756235856","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a992b27f-da1c-5eb7-82d1-3c739e922e92","type":"url","category":"Network activity","to_ids":true,"value":"http://114.132.28.230:8083","comment":"https://x.com/drb_ra/status/1960421390097453192","timestamp":"1756235856","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5468dad9-d229-5bb8-aca7-c2973a0a6ff8","type":"domain","category":"Network activity","to_ids":true,"value":"id-0115481-updatenow.weebly.com","comment":"https://x.com/urldna_bot/status/1960432108452692347","timestamp":"1756238412","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9a609a8c-5d98-5a5c-9a70-6451fe01bcf8","type":"url","category":"Network activity","to_ids":true,"value":"https://id-0115481-updatenow.weebly.com","comment":"https://x.com/urldna_bot/status/1960432108452692347","timestamp":"1756238412","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"408154eb-bf27-5556-9228-5090c2506e36","type":"url","category":"Network activity","to_ids":true,"value":"https://113.44.68.82/cx","comment":"https://x.com/drb_ra/status/1960440300968587739","timestamp":"1756240365","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c5ea29f1-81e3-5382-97e8-e89c7030d93f","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.68.82:8443","comment":"https://x.com/drb_ra/status/1960440300968587739","timestamp":"1756240365","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8d44c16a-5659-5b8c-be28-c35b994f2142","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.68.82","comment":"https://x.com/drb_ra/status/1960440300968587739","timestamp":"1756240365","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5530ae9e-2a74-5633-9b91-b051d9c1971a","type":"url","category":"Network activity","to_ids":true,"value":"http://210.126.67.210:443","comment":"https://x.com/drb_ra/status/1960441962781401499","timestamp":"1756240761","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"340e6d89-1cca-55ec-9d06-ae504a1a41b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.126.67.210","comment":"https://x.com/drb_ra/status/1960441962781401499","timestamp":"1756240761","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d0358be8-307e-557f-80fe-7e65a74c639d","type":"url","category":"Network activity","to_ids":true,"value":"https://210.126.67.210:443","comment":"https://x.com/drb_ra/status/1960441962781401499","timestamp":"1756240761","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6b439e66-bc83-5b9a-a231-38675105a04b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.194.222.199","comment":"https://x.com/threatquery/status/1960447170684817748","timestamp":"1756242003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"b1bfa763-1f06-53df-a8bc-7cc2204f2d59","type":"url","category":"Network activity","to_ids":true,"value":"http://104.194.222.199","comment":"https://x.com/threatquery/status/1960447170684817748","timestamp":"1756242003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"b706c81c-15c2-5f02-a84c-20be74893362","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.111.229","comment":"https://x.com/threatquery/status/1960447172375085226","timestamp":"1756242003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f2c5f5a9-8e46-59c6-8097-7dea4a30dfc2","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.111.229","comment":"https://x.com/threatquery/status/1960447172375085226","timestamp":"1756242003","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"2e40b9ac-38b3-5f99-91db-67d2a86a30d7","type":"url","category":"Network activity","to_ids":true,"value":"http://166.1.160.69","comment":"https://x.com/threatquery/status/1960447174199648266","timestamp":"1756242004","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"e361c678-5267-5263-ad1e-00eaf7b261d0","type":"url","category":"Network activity","to_ids":true,"value":"http://122.152.196.122:8044","comment":"https://x.com/drb_ra/status/1960447181229580630","timestamp":"1756242006","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e0b3477d-7ec4-5395-984a-443f844dd024","type":"ip-dst","category":"Network activity","to_ids":true,"value":"122.152.196.122","comment":"https://x.com/drb_ra/status/1960447181229580630","timestamp":"1756242006","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ed91cc8b-c98e-55b8-ac23-06c10e0aadfd","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.204.37:80","comment":"https://x.com/drb_ra/status/1960447321218670743","timestamp":"1756242039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"310d8c22-72b4-57ea-83e7-d5037f7f8cd1","type":"url","category":"Network activity","to_ids":true,"value":"https://scan.daztar.com/images/10.png","comment":"https://x.com/drb_ra/status/1960447321218670743","timestamp":"1756242039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83079dbc-be22-5590-9829-f3802786304e","type":"domain","category":"Network activity","to_ids":true,"value":"scan.daztar.com","comment":"https://x.com/drb_ra/status/1960447321218670743","timestamp":"1756242039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2814305a-75c7-59ef-ba64-7e10c1520f74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.204.37","comment":"https://x.com/drb_ra/status/1960447321218670743","timestamp":"1756242039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ad13b0f6-de67-5e86-8f61-bf8e6b3009bf","type":"domain","category":"Network activity","to_ids":true,"value":"z2nr7i.webwave.dev","comment":"https://x.com/urldna_bot/status/1960462289124937852","timestamp":"1756245608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7d7ea21f-7de2-5091-bdca-754e579f13b8","type":"url","category":"Network activity","to_ids":true,"value":"https://z2nr7i.webwave.dev","comment":"https://x.com/urldna_bot/status/1960462289124937852","timestamp":"1756245608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2576ab15-9f80-5e8e-aa42-898ff0490933","type":"domain","category":"Network activity","to_ids":true,"value":"tokyobuy.icu","comment":"https://x.com/masaomi346/status/1960467694291181719","timestamp":"1756246896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7490136e-6725-5446-b7d8-053580a6d3dc","type":"url","category":"Network activity","to_ids":true,"value":"https://tokyobuy.icu/account/","comment":"https://x.com/masaomi346/status/1960467694291181719","timestamp":"1756246896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db4e8c9c-45ad-531a-9a1f-2e9745d9edd7","type":"domain","category":"Network activity","to_ids":true,"value":"visaexpresshub.icu","comment":"https://x.com/masaomi346/status/1960467694291181719","timestamp":"1756246896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12c54097-b95d-540a-a8ed-113646b41945","type":"url","category":"Network activity","to_ids":true,"value":"https://visaexpresshub.icu/login/","comment":"https://x.com/masaomi346/status/1960467694291181719","timestamp":"1756246896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a37b5c9a-4247-5f45-8fe0-dd42d3804115","type":"domain","category":"Network activity","to_ids":true,"value":"xn--d1aqfkf.xn--p1ai","comment":"https://x.com/urldna_bot/status/1960492493402734612","timestamp":"1756252809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"11df6c26-ea23-54dd-bb8c-c2c634882b9d","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--d1aqfkf.xn--p1ai/bitrix/.../GlobalSources/","comment":"https://x.com/urldna_bot/status/1960492493402734612","timestamp":"1756252809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"693b3c0d-366e-53d1-84cf-ce0b2e66d318","type":"domain","category":"Network activity","to_ids":true,"value":"bmxnwwir92jvjjeju58ujud3hurfj3ejruhgj5uudwej3ruduj.weebly.com","comment":"https://x.com/urldna_bot/status/1960522687995949523","timestamp":"1756260008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8c1ec600-09cb-5c13-9ef0-3717bfa942dd","type":"url","category":"Network activity","to_ids":true,"value":"https://bmxnwwir92jvjjeju58ujud3hurfj3ejruhgj5uudwej3ruduj.weebly.com","comment":"https://x.com/urldna_bot/status/1960522687995949523","timestamp":"1756260008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9ec6d9bb-1c5d-52a3-ba0d-4b3bbb20a965","type":"domain","category":"Network activity","to_ids":true,"value":"airdropsolananetwork.netlify.app","comment":"https://x.com/bayoctid/status/1960547291971911859","timestamp":"1756265874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14419edf-6bda-5288-abb3-9a7d576177fe","type":"url","category":"Network activity","to_ids":true,"value":"https://airdropsolananetwork.netlify.app","comment":"https://x.com/bayoctid/status/1960547291971911859","timestamp":"1756265874","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa382bc4-2a7b-5b09-a847-c3534d5e26c2","type":"domain","category":"Network activity","to_ids":true,"value":"cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/fbgwls245/status/1960552074002764059","timestamp":"1756267014","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"ecb7b703-6cf8-5a7f-8d7e-05ea1c5a9322","type":"url","category":"Network activity","to_ids":true,"value":"http://cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/fbgwls245/status/1960552074002764059","timestamp":"1756267014","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"215c36f1-8d43-5320-aff5-9569c3668a7d","type":"url","category":"Network activity","to_ids":true,"value":"https://garmillgxin.webflow.io","comment":"https://x.com/urldna_bot/status/1960552888503091648","timestamp":"1756267208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"55a6ac1e-aa18-5c99-a5a9-e7f362a49c61","type":"domain","category":"Network activity","to_ids":true,"value":"garmillgxin.webflow.io","comment":"https://x.com/urldna_bot/status/1960552888503091648","timestamp":"1756267208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"57b163fa-93ec-5962-b7cb-3505cbc30597","type":"url","category":"Network activity","to_ids":true,"value":"http://172.111.244.137:4030","comment":"https://x.com/SarlackLab/status/1960552923911360925","timestamp":"1756267217","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"5771de27-d258-5744-8819-2690733bfb69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.111.244.137","comment":"https://x.com/SarlackLab/status/1960552923911360925","timestamp":"1756267217","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"efdc6fd7-6115-5cf0-a079-de622bb61def","type":"url","category":"Network activity","to_ids":true,"value":"https://weweweseaeweewsewewseawe.weebly.com","comment":"https://x.com/urldna_bot/status/1960583095645610455","timestamp":"1756274410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f940562d-1d43-54c3-a298-ddfb35b0904e","type":"domain","category":"Network activity","to_ids":true,"value":"weweweseaeweewsewewseawe.weebly.com","comment":"https://x.com/urldna_bot/status/1960583095645610455","timestamp":"1756274410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c5972e49-d896-51d3-a5d8-0d268356a4d3","type":"domain","category":"Network activity","to_ids":true,"value":"sv-gt.de","comment":"https://x.com/JAMESWT_WT/status/1960583755879391596","timestamp":"1756274567","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8f1994f-fa1f-5c9c-a556-e7bc26f9d4a2","type":"url","category":"Network activity","to_ids":true,"value":"https://sv-gt.de/wp-content/temp/app/index.php","comment":"https://x.com/JAMESWT_WT/status/1960583755879391596","timestamp":"1756274567","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9938909-a0af-5978-b3a7-8bc61a326b40","type":"url","category":"Network activity","to_ids":true,"value":"http://85.120.81.144:31337","comment":"https://x.com/drb_ra/status/1960594490030170619","timestamp":"1756277127","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"ff799155-fd72-5db9-8e39-c6ee910bbab1","type":"url","category":"Network activity","to_ids":true,"value":"http://85.120.81.144:8888","comment":"https://x.com/drb_ra/status/1960594630493306990","timestamp":"1756277160","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"61f6e654-5627-53b3-9595-f06c955726a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.120.81.144","comment":"https://x.com/drb_ra/status/1960594630493306990","timestamp":"1756277160","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9f89c02d-97e0-526f-ba6e-6c710498ce75","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.52:443","comment":"https://x.com/drb_ra/status/1960594769945497778","timestamp":"1756277193","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"6844513b-9eb1-51a9-a3b7-2d30cf01f439","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.52:31337","comment":"https://x.com/drb_ra/status/1960594907925451062","timestamp":"1756277226","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5eb55e1e-66a4-5dc7-bdfc-c7b5e2de4720","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.52:8888","comment":"https://x.com/drb_ra/status/1960595046756978736","timestamp":"1756277259","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0cbd697e-254b-5dd9-98b0-22223872e47c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.52","comment":"https://x.com/drb_ra/status/1960595046756978736","timestamp":"1756277259","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9c6acf68-525f-5a9b-954d-e9d3c8c36bfe","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.212.102:31337","comment":"https://x.com/drb_ra/status/1960595186511200539","timestamp":"1756277293","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9d5f6420-5b75-568b-b0c4-f1797baad730","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.212.102:443","comment":"https://x.com/drb_ra/status/1960595324277272643","timestamp":"1756277326","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"022378b8-bd72-5335-b436-15acbf79e851","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.212.102","comment":"https://x.com/drb_ra/status/1960595324277272643","timestamp":"1756277326","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"172ba5cf-09d0-521c-987f-d6646b66d3fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.153.138.122","comment":"https://x.com/drb_ra/status/1960595970762399969","timestamp":"1756277480","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f7e7a9ec-fe0f-5161-994a-cd9de80a95c9","type":"url","category":"Network activity","to_ids":true,"value":"http://82.153.138.122:9091","comment":"https://x.com/drb_ra/status/1960595970762399969","timestamp":"1756277480","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e37bd8f5-dcb7-5657-8bc1-27101d31db41","type":"url","category":"Network activity","to_ids":true,"value":"http://20.80.251.169:8443","comment":"https://x.com/drb_ra/status/1960596108087840938","timestamp":"1756277512","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"030b9040-853f-504f-8dd4-4eb014e56a0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.80.251.169","comment":"https://x.com/drb_ra/status/1960596108087840938","timestamp":"1756277512","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3cc8fe77-2cb6-5a0d-9ade-40414d80a0ef","type":"url","category":"Network activity","to_ids":true,"value":"http://176.58.115.59:8888","comment":"https://x.com/drb_ra/status/1960596248408338562","timestamp":"1756277546","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c5316c43-4e41-5059-ab09-408a2f90fda1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.58.115.59","comment":"https://x.com/drb_ra/status/1960596248408338562","timestamp":"1756277546","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"eddcc1ab-0dda-5a3c-982d-ab025c2838a0","type":"md5","category":"Payload delivery","to_ids":true,"value":"38383a8bbf9ff67faba01bdd192543f9","comment":"https://x.com/ShanHolo/status/1960596271258914892","timestamp":"1756277551","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"AgentTesla"}]},{"uuid":"344e48f4-d867-53d0-8dcd-efb54e8e25ab","type":"md5","category":"Payload delivery","to_ids":true,"value":"de1a761c5f66533b054ca00bde1d15e8","comment":"https://x.com/ShanHolo/status/1960596271258914892","timestamp":"1756277551","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"AgentTesla"}]},{"uuid":"3ab29830-499f-5161-a6ee-75771651ca1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.58","comment":"https://x.com/ShanHolo/status/1960596271258914892","timestamp":"1756277551","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"AgentTesla"}]},{"uuid":"6efdf2ff-34ed-5697-8140-00d5351fff8e","type":"url","category":"Network activity","to_ids":true,"value":"https://196.251.73.58/host/","comment":"https://x.com/ShanHolo/status/1960596271258914892","timestamp":"1756277551","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"},{"name":"AgentTesla"}]},{"uuid":"c464de39-3e49-58d5-bda5-66aadf9560a7","type":"url","category":"Network activity","to_ids":true,"value":"http://193.26.115.110:5000","comment":"https://x.com/drb_ra/status/1960596386283483327","timestamp":"1756277579","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b5bd04cd-5779-5bc4-89da-3d75b1443125","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.26.115.110","comment":"https://x.com/drb_ra/status/1960596386283483327","timestamp":"1756277579","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1ef25360-b198-5016-b3f7-12c81453b146","type":"url","category":"Network activity","to_ids":true,"value":"http://142.147.97.158:2404","comment":"https://x.com/drb_ra/status/1960596525085810767","timestamp":"1756277612","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"98006999-8a60-5e95-a147-fbf0f45b5d69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.147.97.158","comment":"https://x.com/drb_ra/status/1960596525085810767","timestamp":"1756277612","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f067fc39-4336-5555-ab5e-7200fad1bf3b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.14","comment":"https://x.com/drb_ra/status/1960596662612619449","timestamp":"1756277645","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b8004ada-3c38-52fa-9a8b-6acc6ef35dcf","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.14:443","comment":"https://x.com/drb_ra/status/1960596662612619449","timestamp":"1756277645","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9f157040-2f88-511b-a23a-62124f761b23","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.88.101:2404","comment":"https://x.com/drb_ra/status/1960596800332591248","timestamp":"1756277677","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a2ffe309-ac42-5737-92c8-1c5d8a808ce4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.88.101","comment":"https://x.com/drb_ra/status/1960596800332591248","timestamp":"1756277677","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"230be082-8665-590f-84a8-b14c6930a9c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.147.35.164","comment":"https://x.com/FalconFeedsio/status/1960596838924607622","timestamp":"1756277687","distribution":"5"},{"uuid":"2fd72dfd-f8fc-5c9f-80a9-ba43a4858816","type":"domain","category":"Network activity","to_ids":true,"value":"form-saver.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1960596838924607622","timestamp":"1756277687","distribution":"5"},{"uuid":"dd915a25-efef-5a3d-a79d-86b7d3f583d4","type":"url","category":"Network activity","to_ids":true,"value":"http://form-saver.gl.at.ply.gg","comment":"https://x.com/FalconFeedsio/status/1960596838924607622","timestamp":"1756277687","distribution":"5"},{"uuid":"ea02c178-f568-5ed4-8245-fe81d2a0d4f8","type":"url","category":"Network activity","to_ids":true,"value":"http://212.11.64.120:2404","comment":"https://x.com/drb_ra/status/1960596938459353430","timestamp":"1756277710","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f486e37f-b3f3-5d1c-941d-cdcb8fee7952","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.11.64.120","comment":"https://x.com/drb_ra/status/1960596938459353430","timestamp":"1756277710","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7fc9c3a9-fd66-584e-a346-628c5897ff87","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.54:3232","comment":"https://x.com/drb_ra/status/1960597077668294949","timestamp":"1756277744","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"8d90cde6-3336-5e5c-a834-b38d9ab91380","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.54","comment":"https://x.com/drb_ra/status/1960597077668294949","timestamp":"1756277744","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"1b2efabf-f4bf-50f3-b22b-3e2281ca3dc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.55","comment":"https://x.com/drb_ra/status/1960597221424161237","timestamp":"1756277778","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"fabe0f75-f63a-5f8b-8eed-3fcad47d78fc","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.55:3232","comment":"https://x.com/drb_ra/status/1960597221424161237","timestamp":"1756277778","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"4ec70b77-c5f8-5cac-b300-4e8dbd3295c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.195.183.125","comment":"https://x.com/drb_ra/status/1960597359479435606","timestamp":"1756277811","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"4e057f8f-7187-53e6-b125-78b6714df925","type":"url","category":"Network activity","to_ids":true,"value":"http://118.195.183.125:3232","comment":"https://x.com/drb_ra/status/1960597359479435606","timestamp":"1756277811","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"218fa960-6bdb-5d35-9637-8608a8b2d1e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.23.210.51","comment":"https://x.com/drb_ra/status/1960597497228689693","timestamp":"1756277844","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9aea3e94-0cc2-5b92-bb47-278619459cad","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.210.51:8808","comment":"https://x.com/drb_ra/status/1960597497228689693","timestamp":"1756277844","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"964cc933-7c99-5fb9-8a6f-b64b341fc527","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.145.132","comment":"https://x.com/drb_ra/status/1960597634860662910","timestamp":"1756277876","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8460bf20-0593-5d76-9602-d14fa8b553a0","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.145.132:8808","comment":"https://x.com/drb_ra/status/1960597634860662910","timestamp":"1756277876","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d060d703-c125-5d99-b168-8078d9c3d896","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.228","comment":"https://x.com/drb_ra/status/1960597912183845020","timestamp":"1756277943","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9260ffaf-4ef9-5b23-a398-3db8c781b9fb","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.228:6677","comment":"https://x.com/drb_ra/status/1960597912183845020","timestamp":"1756277943","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b4abd3bb-b9d7-5d91-b201-284145b13233","type":"url","category":"Network activity","to_ids":true,"value":"http://157.254.236.23:8808","comment":"https://x.com/drb_ra/status/1960598051309096966","timestamp":"1756277976","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"38fedb83-e7e6-582a-bd85-cc2673f7d3e7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.254.236.23","comment":"https://x.com/drb_ra/status/1960598051309096966","timestamp":"1756277976","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3c1ca97a-c9f2-5dfe-a5f0-e26634e1f045","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.79.186:80","comment":"https://x.com/drb_ra/status/1960598190006456389","timestamp":"1756278009","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0a04f7a7-64c9-5bf0-842c-c8b4e8e023b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.215.56","comment":"https://x.com/drb_ra/status/1960598327877161308","timestamp":"1756278042","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"131944dc-d3db-50f1-9035-7d242fbb1fff","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.215.56:80","comment":"https://x.com/drb_ra/status/1960598327877161308","timestamp":"1756278042","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"af007d43-d3fe-5984-b43a-d231acbaec36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.160.2.204","comment":"https://x.com/drb_ra/status/1960598468776296842","timestamp":"1756278075","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"41457d78-931b-50bc-b8b8-883139132975","type":"url","category":"Network activity","to_ids":true,"value":"http://40.160.2.204:3333","comment":"https://x.com/drb_ra/status/1960598468776296842","timestamp":"1756278075","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"C2"},{"name":"EvilGoPhish"}]},{"uuid":"17310d89-af9b-5df2-8f3e-25ee3a03471e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.174.50.172","comment":"https://x.com/drb_ra/status/1960598607901421813","timestamp":"1756278108","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"46e151df-1653-527b-8cfa-997ca696f349","type":"url","category":"Network activity","to_ids":true,"value":"http://108.174.50.172:65534","comment":"https://x.com/drb_ra/status/1960598607901421813","timestamp":"1756278108","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9027c35e-8307-59d6-a61d-771fad744a86","type":"url","category":"Network activity","to_ids":true,"value":"http://191.91.178.217:1521","comment":"https://x.com/drb_ra/status/1960598747508855149","timestamp":"1756278142","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"08f78280-0b30-5273-8d66-76248646442f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.91.178.217","comment":"https://x.com/drb_ra/status/1960598747508855149","timestamp":"1756278142","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"99315639-6246-5ed6-8404-ea59022728dc","type":"url","category":"Network activity","to_ids":true,"value":"http://2.50.15.242:443","comment":"https://x.com/drb_ra/status/1960598888353538370","timestamp":"1756278175","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"bc729a6c-15c8-5cec-bcec-247184eef7fb","type":"url","category":"Network activity","to_ids":true,"value":"http://201.191.169.24:443","comment":"https://x.com/drb_ra/status/1960599026660774117","timestamp":"1756278208","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"30811db7-2862-5706-a9f6-32154283d2e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.191.169.24","comment":"https://x.com/drb_ra/status/1960599026660774117","timestamp":"1756278208","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"7b5516b9-79bd-5601-9e5b-028f33dc0cd2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.54.105.118","comment":"https://x.com/drb_ra/status/1960599167119540316","timestamp":"1756278242","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"692394cf-3848-5c12-9ada-42859932bbf0","type":"url","category":"Network activity","to_ids":true,"value":"http://188.54.105.118:995","comment":"https://x.com/drb_ra/status/1960599167119540316","timestamp":"1756278242","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"59aa0d52-d02e-54a2-b5bb-472e81da3314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.63.97.16","comment":"https://x.com/drb_ra/status/1960599304898232406","timestamp":"1756278275","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4036da3e-114b-5cb0-aa4e-55b907755419","type":"url","category":"Network activity","to_ids":true,"value":"http://92.63.97.16:40050","comment":"https://x.com/drb_ra/status/1960599304898232406","timestamp":"1756278275","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4af2cc30-1ceb-5185-aa1f-409a31128fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://179.43.147.87:40000","comment":"https://x.com/drb_ra/status/1960599443071492596","timestamp":"1756278308","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"814100a8-f580-5d62-a715-0f35382aa21f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.43.147.87","comment":"https://x.com/drb_ra/status/1960599443071492596","timestamp":"1756278308","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"a52ea8fc-1ec2-57f3-9a8d-86bb9f098be3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.155.104","comment":"https://x.com/drb_ra/status/1960599581248356799","timestamp":"1756278341","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"125a0283-3260-5469-ad91-50443f62189e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.86.155.104:4434","comment":"https://x.com/drb_ra/status/1960599581248356799","timestamp":"1756278341","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f1791bf3-0663-5df7-84c0-a120abf2edfd","type":"url","category":"Network activity","to_ids":true,"value":"http://193.235.146.184:443","comment":"https://x.com/drb_ra/status/1960599720805413038","timestamp":"1756278374","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"5b1c4910-bd2b-5b05-9312-d44990dfb5cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.235.146.184","comment":"https://x.com/drb_ra/status/1960599720805413038","timestamp":"1756278374","distribution":"5","Tag":[{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"513b9695-fd58-5a6e-a788-f169a7153696","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.82.244:443","comment":"https://x.com/drb_ra/status/1960599859146191143","timestamp":"1756278407","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"58ab1d4b-6071-5b4d-a41b-48c99ac1ca3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.82.244","comment":"https://x.com/drb_ra/status/1960599859146191143","timestamp":"1756278407","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"bb1b2c4d-2fdc-5cce-85e6-f2f186e9571a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.46.94.95:7443","comment":"https://x.com/drb_ra/status/1960599997965008947","timestamp":"1756278440","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"fd2e5703-af75-5d08-bc02-63276a638477","type":"url","category":"Network activity","to_ids":true,"value":"http://3.22.28.73:7443","comment":"https://x.com/drb_ra/status/1960600135882113126","timestamp":"1756278473","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"50075244-4b2e-5b34-b28b-5375a8a3ca85","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.98.186.13","comment":"https://x.com/drb_ra/status/1960600275498229775","timestamp":"1756278506","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"72530a9b-c60e-5a76-aa24-bf700e136b18","type":"url","category":"Network activity","to_ids":true,"value":"http://176.98.186.13:7443","comment":"https://x.com/drb_ra/status/1960600275498229775","timestamp":"1756278506","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"d0ba9a57-2cd9-5919-8e2b-df6df7c8a7ab","type":"url","category":"Network activity","to_ids":true,"value":"http://5.230.249.62:31337","comment":"https://x.com/drb_ra/status/1960600412140036363","timestamp":"1756278539","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d72ab176-edcd-5080-87e4-a7a88b515603","type":"url","category":"Network activity","to_ids":true,"value":"http://91.206.169.22:31337","comment":"https://x.com/drb_ra/status/1960600549897740380","timestamp":"1756278571","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d72202b6-d1dd-5274-9067-7e7cb816534a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.206.169.22","comment":"https://x.com/drb_ra/status/1960600549897740380","timestamp":"1756278571","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0d708bc7-d724-5787-8152-f7577a27ea2c","type":"url","category":"Network activity","to_ids":true,"value":"http://107.173.50.53:31337","comment":"https://x.com/drb_ra/status/1960600689253769562","timestamp":"1756278605","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3027872d-c6ea-5332-aba2-450f43c75048","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.50.53","comment":"https://x.com/drb_ra/status/1960600689253769562","timestamp":"1756278605","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"19eece07-9114-57ac-b3b0-487a2f07edf5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.223.239.35","comment":"https://x.com/drb_ra/status/1960600827158016215","timestamp":"1756278638","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6746068d-4637-5e4b-9f8f-ac1e937609b0","type":"url","category":"Network activity","to_ids":true,"value":"http://159.223.239.35:31337","comment":"https://x.com/drb_ra/status/1960600827158016215","timestamp":"1756278638","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"308681f0-2aab-5dc8-903b-aaeb2a66ac75","type":"url","category":"Network activity","to_ids":true,"value":"http://103.215.77.42:31337","comment":"https://x.com/drb_ra/status/1960600965008048475","timestamp":"1756278670","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c8a1e24c-755f-5e3b-85ce-2afef4d1346b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.215.77.42","comment":"https://x.com/drb_ra/status/1960600965008048475","timestamp":"1756278670","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"80062c0f-ad0b-5d0e-80ec-28d504a458b1","type":"url","category":"Network activity","to_ids":true,"value":"http://78.47.96.168:31337","comment":"https://x.com/drb_ra/status/1960601103718080610","timestamp":"1756278703","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b107f52d-d281-5337-89e4-9b37b266239a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.47.96.168","comment":"https://x.com/drb_ra/status/1960601103718080610","timestamp":"1756278703","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"97733046-3f23-560e-9a7b-808afab8c890","type":"url","category":"Network activity","to_ids":true,"value":"http://66.78.40.164:31337","comment":"https://x.com/drb_ra/status/1960601240708243776","timestamp":"1756278736","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ca2f8f76-7dc6-5c6a-9e55-615302fdb85a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.78.40.164","comment":"https://x.com/drb_ra/status/1960601240708243776","timestamp":"1756278736","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"38299e36-2649-54a5-8c74-1773cae0dcb2","type":"url","category":"Network activity","to_ids":true,"value":"http://129.211.0.213:31337","comment":"https://x.com/drb_ra/status/1960601379300393316","timestamp":"1756278769","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bf143579-d962-5ff3-bf94-12ef465af27e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.211.0.213","comment":"https://x.com/drb_ra/status/1960601379300393316","timestamp":"1756278769","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8cb7a1dc-94e4-5c8f-982a-3c7822bda802","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.213.249.240","comment":"https://x.com/drb_ra/status/1960601517440033158","timestamp":"1756278802","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4f29610f-cd49-506b-a09b-de5909baef15","type":"url","category":"Network activity","to_ids":true,"value":"http://162.213.249.240:31337","comment":"https://x.com/drb_ra/status/1960601517440033158","timestamp":"1756278802","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"07b5b324-dfe2-5151-b784-ccf43fe5ce45","type":"url","category":"Network activity","to_ids":true,"value":"http://107.173.61.3:31337","comment":"https://x.com/drb_ra/status/1960601655969505768","timestamp":"1756278835","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a97ba7d2-45eb-5e0f-af57-272418713fd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.61.3","comment":"https://x.com/drb_ra/status/1960601655969505768","timestamp":"1756278835","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a6335a8e-068a-5e8a-854b-6c0769b1bb42","type":"url","category":"Network activity","to_ids":true,"value":"http://104.37.184.171:31337","comment":"https://x.com/drb_ra/status/1960601794897154320","timestamp":"1756278868","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a968ec9d-a727-50b2-953e-ff43955b88cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.37.184.171","comment":"https://x.com/drb_ra/status/1960601794897154320","timestamp":"1756278868","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"7af63d51-fa7b-5a40-a788-44a3007bac75","type":"url","category":"Network activity","to_ids":true,"value":"http://34.146.35.229:31337","comment":"https://x.com/drb_ra/status/1960601934697803864","timestamp":"1756278902","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4a53a7d5-e7ac-5432-95d5-9694405ff65e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.35.229","comment":"https://x.com/drb_ra/status/1960601934697803864","timestamp":"1756278902","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c4ff1c10-794f-5246-95ff-af0bfc59c6e6","type":"url","category":"Network activity","to_ids":true,"value":"http://37.211.158.4:31337","comment":"https://x.com/drb_ra/status/1960602071394107894","timestamp":"1756278934","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"36840d57-c328-59bd-9c73-e12e9d98bd5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.211.158.4","comment":"https://x.com/drb_ra/status/1960602071394107894","timestamp":"1756278934","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6c15955c-1ef1-5fb2-b0f0-210190465202","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.169.5.167","comment":"https://x.com/drb_ra/status/1960602209353142780","timestamp":"1756278967","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"19b64043-d736-53a3-9230-b974b8525820","type":"url","category":"Network activity","to_ids":true,"value":"http://89.169.5.167:31337","comment":"https://x.com/drb_ra/status/1960602209353142780","timestamp":"1756278967","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d00375cc-75cc-5a69-8796-64e51cba8faa","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.121.238:31337","comment":"https://x.com/drb_ra/status/1960602347039862795","timestamp":"1756279000","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4ea91908-e8ce-50a7-8cf8-875f83e39fba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.220.121.238","comment":"https://x.com/drb_ra/status/1960602347039862795","timestamp":"1756279000","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1c499e52-c3fc-5df1-b584-c33c0a9344ec","type":"url","category":"Network activity","to_ids":true,"value":"http://14.103.164.134:31337","comment":"https://x.com/drb_ra/status/1960602485334081727","timestamp":"1756279033","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1ac2a2ea-0337-5612-8361-be702142f46d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"14.103.164.134","comment":"https://x.com/drb_ra/status/1960602485334081727","timestamp":"1756279033","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"936c07dd-2626-5d82-beff-02da0894d52f","type":"url","category":"Network activity","to_ids":true,"value":"http://14.103.164.134:8888","comment":"https://x.com/drb_ra/status/1960602624828563957","timestamp":"1756279066","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"bbd63cd9-4dca-5e01-b55a-496733ae531c","type":"domain","category":"Network activity","to_ids":true,"value":"netextender-sonicwall.org","comment":"https://x.com/pr0xylife/status/1960611160715035107","timestamp":"1756281101","distribution":"5"},{"uuid":"1d40bcca-0610-5e6e-89c9-3ec66f62f25d","type":"url","category":"Network activity","to_ids":true,"value":"http://netextender-sonicwall.org","comment":"https://x.com/pr0xylife/status/1960611160715035107","timestamp":"1756281101","distribution":"5"},{"uuid":"5a209b23-aa00-5d52-a5dd-697db615cf3f","type":"domain","category":"Network activity","to_ids":true,"value":"gtuemailvalidatr.weebly.com","comment":"https://x.com/urldna_bot/status/1960613284316365223","timestamp":"1756281608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"15dfbdef-5df8-5ae5-9aa3-80e7687bf81f","type":"url","category":"Network activity","to_ids":true,"value":"https://gtuemailvalidatr.weebly.com","comment":"https://x.com/urldna_bot/status/1960613284316365223","timestamp":"1756281608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"27e8769c-9d25-57b8-8928-ccb118caa166","type":"domain","category":"Network activity","to_ids":true,"value":"nullarmorupload.xyz","comment":"https://x.com/skocherhan/status/1960618886564638822","timestamp":"1756282943","distribution":"5"},{"uuid":"07324ac9-8ef2-59a3-8f50-207ab7f2ea56","type":"url","category":"Network activity","to_ids":true,"value":"http://nullarmorupload.xyz/download/21cfec28","comment":"https://x.com/skocherhan/status/1960618886564638822","timestamp":"1756282943","distribution":"5"},{"uuid":"e7b6f152-fe6e-5ec2-a143-7c26d55450a9","type":"md5","category":"Payload delivery","to_ids":true,"value":"2e8514bcf72ccaee706ab4a672a3d274","comment":"https://x.com/skocherhan/status/1960618886564638822","timestamp":"1756282943","distribution":"5"},{"uuid":"9b519bb6-213f-5212-8dce-e1362561286b","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/ud-progen2/725-mrw/raw/main/u-p.png","comment":"https://x.com/skocherhan/status/1960619125379899537","timestamp":"1756283000","distribution":"5"},{"uuid":"29f9e94d-96e5-521a-984e-812d1150992d","type":"url","category":"Network activity","to_ids":true,"value":"https://gitlab.com/hi4201225/gv725/-/raw/main/mrw-n.zip","comment":"https://x.com/skocherhan/status/1960619125379899537","timestamp":"1756283000","distribution":"5"},{"uuid":"20437a38-bf92-5eb4-a944-ccee23800b9d","type":"domain","category":"Network activity","to_ids":true,"value":"bluelinerecovery.online","comment":"https://x.com/destroyphishing/status/1960628748589654307","timestamp":"1756285295","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbc3224b-d574-5e98-a853-a79743c34b52","type":"url","category":"Network activity","to_ids":true,"value":"https://bluelinerecovery.online","comment":"https://x.com/destroyphishing/status/1960628748589654307","timestamp":"1756285295","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6f0c1aeb-f3d4-5f57-95fc-cb100294a01c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"38019ee88bba4b4ceb159643c5a2a2608b628ef673e7ab7516ef47f6f6230618","comment":"https://x.com/skocherhan/status/1960628935944728704","timestamp":"1756285339","distribution":"5"},{"uuid":"1e311072-dd8d-5c8a-8f86-165e8615d7d8","type":"url","category":"Network activity","to_ids":true,"value":"https://allclearrecovery.online","comment":"https://x.com/destroyphishing/status/1960629150126833750","timestamp":"1756285390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba566412-a350-5bd4-a517-f66f12ef1279","type":"domain","category":"Network activity","to_ids":true,"value":"allclearrecovery.online","comment":"https://x.com/destroyphishing/status/1960629150126833750","timestamp":"1756285390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"90607642-388c-55d9-b2e0-f5157ef9ef00","type":"domain","category":"Network activity","to_ids":true,"value":"bitcoinhyper.icu","comment":"https://x.com/destroyphishing/status/1960629255416557660","timestamp":"1756285415","distribution":"5","Tag":[{"name":"phishing"},{"name":"ransomware"}]},{"uuid":"40508832-c07f-5bbd-8c7b-74fdc2f5133e","type":"url","category":"Network activity","to_ids":true,"value":"https://bitcoinhyper.icu","comment":"https://x.com/destroyphishing/status/1960629255416557660","timestamp":"1756285415","distribution":"5","Tag":[{"name":"phishing"},{"name":"ransomware"}]},{"uuid":"2a801b79-d1a5-544a-9029-a58f35128533","type":"domain","category":"Network activity","to_ids":true,"value":"logfastbr.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45c825a9-4d16-596d-a40f-11ed978a92e9","type":"url","category":"Network activity","to_ids":true,"value":"http://logfastpro.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eab57f5e-f784-5867-b358-1906d169af30","type":"domain","category":"Network activity","to_ids":true,"value":"logfastpro.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99bb27dd-9e2b-5a59-b6ca-c3c78287380d","type":"url","category":"Network activity","to_ids":true,"value":"http://logfast.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"287225b6-79f0-55b9-b483-12146d1f0f80","type":"domain","category":"Network activity","to_ids":true,"value":"logfast.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c07b49c8-ec94-5da7-81a3-5d9cdd99995c","type":"url","category":"Network activity","to_ids":true,"value":"http://logfastnow.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8a90052-3af6-599a-b2ee-a4975e887e94","type":"domain","category":"Network activity","to_ids":true,"value":"meupedidolocalizar.site","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"918ebab4-f2e6-5b42-941d-f012da87ecd2","type":"domain","category":"Network activity","to_ids":true,"value":"logfastnow.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a9f56f1-0fa8-51cc-8e70-6311dd3fe7a2","type":"url","category":"Network activity","to_ids":true,"value":"http://logfastapp.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fed7291-d593-5345-b780-47e31d841a5b","type":"url","category":"Network activity","to_ids":true,"value":"http://logbrasil.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fdc66be7-24ea-5247-9e33-375fd1c6e113","type":"url","category":"Network activity","to_ids":true,"value":"http://logfy.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b53fc7a-0c35-53ee-b64d-7f752c89ffa7","type":"domain","category":"Network activity","to_ids":true,"value":"logfy.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56448c20-e5b5-5213-aaa8-2fc0f4368afb","type":"domain","category":"Network activity","to_ids":true,"value":"logfastapp.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"407d224e-f3d1-5d9c-9f6d-e093603206f6","type":"url","category":"Network activity","to_ids":true,"value":"http://meupedidolocalizar.site","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"845eed70-cffc-5218-94a1-f23a2f3208b3","type":"url","category":"Network activity","to_ids":true,"value":"http://logfastbr.online","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"863cbd75-32e4-5fee-baae-a30ab830cc5d","type":"domain","category":"Network activity","to_ids":true,"value":"logbrasil.info","comment":"https://x.com/P4nd3m1cb0y/status/1960638104391286932","timestamp":"1756287525","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c873fa22-19a4-5431-99c5-4e93d26e2a52","type":"domain","category":"Network activity","to_ids":true,"value":"tuntaotadesk.weebly.com","comment":"https://x.com/urldna_bot/status/1960643486677393480","timestamp":"1756288808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3331a6aa-4e8c-5945-848f-4f422ec61a71","type":"url","category":"Network activity","to_ids":true,"value":"https://tuntaotadesk.weebly.com","comment":"https://x.com/urldna_bot/status/1960643486677393480","timestamp":"1756288808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"012ab1d7-83dd-570e-8c16-bc2450a45bc7","type":"url","category":"Network activity","to_ids":true,"value":"http://166.88.194.123:80","comment":"https://x.com/drb_ra/status/1960658563031810469","timestamp":"1756292403","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"557387f3-396b-5104-9d4c-f79754385472","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.88.194.123","comment":"https://x.com/drb_ra/status/1960658563031810469","timestamp":"1756292403","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cf1fc57b-74ce-599e-a6ef-fb5ce8da4216","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:8082","comment":"https://x.com/drb_ra/status/1960658702131662923","timestamp":"1756292436","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1960658702131662923","timestamp":"1756292436","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0cff15b3-f8f4-5334-8928-2ee884bf08d2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.207.193.76:80","comment":"https://x.com/drb_ra/status/1960658840459866249","timestamp":"1756292469","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fdeeaaf2-544f-5834-b9a0-0c3f6f9631d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.207.193.76","comment":"https://x.com/drb_ra/status/1960658840459866249","timestamp":"1756292469","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc6208ae-978a-5ddb-b2d4-f87d77aef1c5","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.178.168:80","comment":"https://x.com/drb_ra/status/1960658979291320486","timestamp":"1756292502","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7c9aad39-6fa5-558d-b20a-d78f6c442a74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.178.168","comment":"https://x.com/drb_ra/status/1960658979291320486","timestamp":"1756292502","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"60bb7125-1720-57f8-8a3d-5f9b9b092bac","type":"url","category":"Network activity","to_ids":true,"value":"http://8.152.207.173:443","comment":"https://x.com/drb_ra/status/1960659118252847318","timestamp":"1756292535","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"347f717c-cc8f-552c-a648-3ebb163c326f","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.184.25:80","comment":"https://x.com/drb_ra/status/1960659256929083874","timestamp":"1756292568","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"39963d8e-a828-5489-9546-81e4d402dae5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.184.25","comment":"https://x.com/drb_ra/status/1960659256929083874","timestamp":"1756292568","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"76019e57-c2d9-507c-b524-7f89175be7a4","type":"url","category":"Network activity","to_ids":true,"value":"http://182.92.125.117:8080","comment":"https://x.com/drb_ra/status/1960659396674945085","timestamp":"1756292602","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6edd1d05-679b-5f8f-a1a1-4b33f8579765","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.92.125.117","comment":"https://x.com/drb_ra/status/1960659396674945085","timestamp":"1756292602","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9798cecc-6c58-5351-ace9-e0400b8ae0fa","type":"md5","category":"Payload delivery","to_ids":true,"value":"1fa07cab58d34dcb6e231fb57f179c7a","comment":"https://x.com/JAMESWT_WT/status/1960659460868735386","timestamp":"1756292617","distribution":"5"},{"uuid":"790a7fd4-4423-5ea8-8120-794776c38eec","type":"url","category":"Network activity","to_ids":true,"value":"http://47.93.216.2:9553","comment":"https://x.com/drb_ra/status/1960659535372144861","timestamp":"1756292635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"19795270-cd45-59cf-a638-442b85870d8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.93.216.2","comment":"https://x.com/drb_ra/status/1960659535372144861","timestamp":"1756292635","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cb6ba7ab-6f3b-5731-9a33-65ae88efe89c","type":"url","category":"Network activity","to_ids":true,"value":"http://23.158.24.11:8080","comment":"https://x.com/drb_ra/status/1960659674048397391","timestamp":"1756292668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"50e2cd5e-cef7-5afc-babd-86b6a6247826","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.158.24.11","comment":"https://x.com/drb_ra/status/1960659674048397391","timestamp":"1756292668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b4aa6c29-28d0-5eba-b4d8-d177cdcac65b","type":"url","category":"Network activity","to_ids":true,"value":"https://23.158.24.11/pixel.gif","comment":"https://x.com/drb_ra/status/1960659674048397391","timestamp":"1756292668","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b7d9ed5c-844a-561c-8620-cc99d5ef26c0","type":"url","category":"Network activity","to_ids":true,"value":"http://47.91.18.169:80","comment":"https://x.com/drb_ra/status/1960659813039292659","timestamp":"1756292701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"13cfb4bd-4572-5f6a-87a7-0ed3e360e506","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.91.18.169","comment":"https://x.com/drb_ra/status/1960659813039292659","timestamp":"1756292701","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5ef34f1a-57c5-5a1b-afba-c84f67a4b804","type":"url","category":"Network activity","to_ids":true,"value":"http://47.101.145.19:80","comment":"https://x.com/drb_ra/status/1960659951912734780","timestamp":"1756292734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"11eea3a9-d6f8-52ee-9927-9227e67edf8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.101.145.19","comment":"https://x.com/drb_ra/status/1960659951912734780","timestamp":"1756292734","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b0096290-c779-5345-b715-3bd616a9b4a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.19.190.184","comment":"https://x.com/drb_ra/status/1960660091486577051","timestamp":"1756292767","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c0ccc8c1-34ea-5281-b4cc-cf964c2ee723","type":"url","category":"Network activity","to_ids":true,"value":"https://103.19.190.184/wc/58462514417","comment":"https://x.com/drb_ra/status/1960660091486577051","timestamp":"1756292767","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"08ef59fc-e223-53b5-a394-b95344c17ee6","type":"url","category":"Network activity","to_ids":true,"value":"http://103.19.190.184:7416","comment":"https://x.com/drb_ra/status/1960660091486577051","timestamp":"1756292767","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4b8b732c-217b-5fb4-aff9-ff9f521a1d85","type":"url","category":"Network activity","to_ids":true,"value":"http://16.163.145.28:443","comment":"https://x.com/drb_ra/status/1960660229881794708","timestamp":"1756292800","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4917439d-ca8a-5c09-ab17-63bb3eb8ab65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.163.145.28","comment":"https://x.com/drb_ra/status/1960660229881794708","timestamp":"1756292800","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4fdb6026-e913-56fe-89a0-176c7fa47a1e","type":"url","category":"Network activity","to_ids":true,"value":"http://43.136.115.169:3444","comment":"https://x.com/drb_ra/status/1960660370013749629","timestamp":"1756292834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03b6f58e-5d8f-5b3b-9312-375f7b769aa0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.136.115.169","comment":"https://x.com/drb_ra/status/1960660370013749629","timestamp":"1756292834","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38affb0f-bfa6-5559-9690-fd9ef8d554c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.57.177.33","comment":"https://x.com/drb_ra/status/1960661014686413288","timestamp":"1756292987","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7c71d270-abf1-5b28-adb0-54a8675c1520","type":"url","category":"Network activity","to_ids":true,"value":"http://123.57.177.33:8084","comment":"https://x.com/drb_ra/status/1960661014686413288","timestamp":"1756292987","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7e879828-c9b8-5c1d-bdfb-edc248b10341","type":"url","category":"Network activity","to_ids":true,"value":"https://8.141.90.104/fwlink","comment":"https://x.com/drb_ra/status/1960661154285437309","timestamp":"1756293021","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c5045c30-6cde-5b4e-b339-ef91f00b0347","type":"url","category":"Network activity","to_ids":true,"value":"http://8.141.90.104:7777","comment":"https://x.com/drb_ra/status/1960661154285437309","timestamp":"1756293021","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8ca14d6a-fdc4-53e0-8d94-f5c9dfedb193","type":"url","category":"Network activity","to_ids":true,"value":"http://8.152.101.136:8080","comment":"https://x.com/drb_ra/status/1960661294148628843","timestamp":"1756293054","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fbd7a13b-46bd-5da2-93a6-11a5229afe43","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.222.228:80","comment":"https://x.com/drb_ra/status/1960661432749408304","timestamp":"1756293087","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85a9ea56-efb0-5145-8667-4016b5faa5d1","type":"domain","category":"Network activity","to_ids":true,"value":"198dd2.algo-fly.com","comment":"https://x.com/urldna_bot/status/1960673683317346343","timestamp":"1756296008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3d5cf1e3-e3a4-536d-aad4-d51db1cc516d","type":"url","category":"Network activity","to_ids":true,"value":"http://198dd2.algo-fly.com/workbench.php/","comment":"https://x.com/urldna_bot/status/1960673683317346343","timestamp":"1756296008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d0d212f5-016c-5f90-88ed-b3a393c78a5a","type":"url","category":"Network activity","to_ids":true,"value":"https://inmylove.online/cp/pages/login.php","comment":"https://x.com/malwrhunterteam/status/1960682292944204285","timestamp":"1756298061","distribution":"5"},{"uuid":"50f3da7b-2074-52c7-ba46-66aa5c658cc0","type":"domain","category":"Network activity","to_ids":true,"value":"inmylove.online","comment":"https://x.com/malwrhunterteam/status/1960682292944204285","timestamp":"1756298061","distribution":"5"},{"uuid":"ea3c6182-d8a7-5965-9ec1-b6f2fe9f1ce7","type":"domain","category":"Network activity","to_ids":true,"value":"especially.hrwyvow.cn","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f65a96ee-7985-5811-8930-8cc668db8f26","type":"url","category":"Network activity","to_ids":true,"value":"https://especially.hrwyvow.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bdfd999-3b9a-59da-9cb4-22a3b98e1ceb","type":"domain","category":"Network activity","to_ids":true,"value":"hairization.eyvrgpl.cn","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e38ebe07-ca29-517e-90c8-479a1845e4c7","type":"url","category":"Network activity","to_ids":true,"value":"https://hairization.eyvrgpl.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b461de93-9936-59f7-8c52-630cf216c77e","type":"domain","category":"Network activity","to_ids":true,"value":"shinkansen2-cation.pqwedn.cn","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3371eadb-06f4-5adf-930a-83f1c5fa186d","type":"url","category":"Network activity","to_ids":true,"value":"https://shinkansen2-cation.pqwedn.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1960688818933359042","timestamp":"1756299616","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5995ea7-87bd-56a0-afd8-ae0eaea0e38e","type":"url","category":"Network activity","to_ids":true,"value":"https://seriesfaction.ysao3o8.cn/RW03120mckiw00l/","comment":"https://x.com/harugasumi/status/1960691540697002301","timestamp":"1756300265","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19d772cc-514b-5a58-a5c7-6c422669a2da","type":"domain","category":"Network activity","to_ids":true,"value":"seriesfaction.ysao3o8.cn","comment":"https://x.com/harugasumi/status/1960691540697002301","timestamp":"1756300265","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0047909b-7b54-5d97-8f6b-8f9b1acac8f8","type":"domain","category":"Network activity","to_ids":true,"value":"usiminas-ipatinga-u002.sistemastorage.com.br","comment":"https://x.com/urldna_bot/status/1960703891638550538","timestamp":"1756303210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a49747a6-8c88-5573-9620-7ddb5e597b14","type":"url","category":"Network activity","to_ids":true,"value":"https://usiminas-ipatinga-u002.sistemastorage.com.br","comment":"https://x.com/urldna_bot/status/1960703891638550538","timestamp":"1756303210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"910adeef-81b2-5638-aa53-439186bc3844","type":"domain","category":"Network activity","to_ids":true,"value":"ducksmicro.servicos.ws:3020","comment":"https://x.com/1ZRR4H/status/1960708834227302710","timestamp":"1756304388","distribution":"5"},{"uuid":"f336590d-a614-571b-8cb4-48fabb30ec77","type":"url","category":"Network activity","to_ids":true,"value":"https://ducksmicro.servicos.ws:3020/&protected-pdf-pf-unicodw&Microsoft3","comment":"https://x.com/1ZRR4H/status/1960708834227302710","timestamp":"1756304388","distribution":"5"},{"uuid":"80dfb0d1-ee3b-5371-b3e0-256520d508b9","type":"url","category":"Network activity","to_ids":true,"value":"https://pastebin.com/raw/49ayVRGx","comment":"https://x.com/1ZRR4H/status/1960708834227302710","timestamp":"1756304388","distribution":"5"},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/harugasumi/status/1960715635379327338","timestamp":"1756306010","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/harugasumi/status/1960715635379327338","timestamp":"1756306010","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eced1c4d-21b6-5857-bcc6-1a647984c358","type":"domain","category":"Network activity","to_ids":true,"value":"mitarjetacencosudpromociones.cl","comment":"https://x.com/1ZRR4H/status/1960719434261131514","timestamp":"1756306916","distribution":"5"},{"uuid":"e661d4a8-a887-5196-9a3d-f7b6834c74fc","type":"url","category":"Network activity","to_ids":true,"value":"http://mitarjetacencosudpromociones.cl","comment":"https://x.com/1ZRR4H/status/1960719434261131514","timestamp":"1756306916","distribution":"5"},{"uuid":"a43d3ca2-459d-5cff-bdeb-ebc3fdaba67f","type":"domain","category":"Network activity","to_ids":true,"value":"moonfastcar.okvip75.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f032b8a-47ef-5806-b69b-3d1ff931f10f","type":"url","category":"Network activity","to_ids":true,"value":"https://moonfastcar.okvip75.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a795f173-ff7c-5b3c-8986-d9da96774a75","type":"domain","category":"Network activity","to_ids":true,"value":"rockbigman.ex463.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ae47336-4d2e-55eb-aa0a-24c1d988923e","type":"url","category":"Network activity","to_ids":true,"value":"https://rockbigman.ex463.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c9ec97d-fcff-505d-ae20-aafda6c4adb8","type":"domain","category":"Network activity","to_ids":true,"value":"snowpinkfox.ex958.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cb87733-3c96-5840-9d8b-b52b11fdeb26","type":"url","category":"Network activity","to_ids":true,"value":"https://snowpinkfox.ex958.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3c59bf2-b0c5-5dff-bfcd-b32ae003f57c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.247.111","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a699437-73d0-5bf9-83c4-849c1c752826","type":"domain","category":"Network activity","to_ids":true,"value":"bluehotdog.hi81111.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"71172e74-4369-5cd1-8652-737387baa59e","type":"url","category":"Network activity","to_ids":true,"value":"https://bluehotdog.hi81111.com","comment":"https://x.com/harugasumi/status/1960720280353169741","timestamp":"1756307117","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25ed9a82-add9-5864-9e21-0bd48f99b650","type":"sha256","category":"Payload delivery","to_ids":true,"value":"89a6d3392668ba1b765a5ebcc8ac5045fffe8b6ef431004cba352868424a5cc3","comment":"https://x.com/ShadowChasing1/status/1960724277860426014","timestamp":"1756308070","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"}]},{"uuid":"7e048147-a315-5b60-9ba9-8c897d90217b","type":"domain","category":"Network activity","to_ids":true,"value":"trenuleteturda.ro","comment":"https://x.com/urldna_bot/status/1960734083660599435","timestamp":"1756310408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"454dd38c-531b-5caa-89a1-ca7cbd6afc65","type":"url","category":"Network activity","to_ids":true,"value":"https://trenuleteturda.ro/pplala.or/Sites/index.html","comment":"https://x.com/urldna_bot/status/1960734083660599435","timestamp":"1756310408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c668066f-dfa4-55c1-bdb0-3f18c414dc58","type":"domain","category":"Network activity","to_ids":true,"value":"itrustcapital-x-login.webflow.io","comment":"https://x.com/urldna_bot/status/1960764284041846960","timestamp":"1756317609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1a19b076-f011-598d-aed9-a86deb6a2d7a","type":"url","category":"Network activity","to_ids":true,"value":"https://itrustcapital-x-login.webflow.io","comment":"https://x.com/urldna_bot/status/1960764284041846960","timestamp":"1756317609","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a4e322ec-b659-5b63-94cf-8e33d8115d45","type":"url","category":"Network activity","to_ids":true,"value":"http://52.52.101.60:47486","comment":"https://x.com/drb_ra/status/1960776211505778735","timestamp":"1756320452","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4a240708-9cf3-53f5-8efc-9d4d92999d2d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.52.101.60","comment":"https://x.com/drb_ra/status/1960776211505778735","timestamp":"1756320452","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ec816fc8-b4c1-5f76-a975-d225dadc92ed","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.159.206:8808","comment":"https://x.com/drb_ra/status/1960776351000223904","timestamp":"1756320486","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"d1bd4cb2-05c3-51f5-b316-110c6f86dbbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.159.206","comment":"https://x.com/drb_ra/status/1960776351000223904","timestamp":"1756320486","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"edc3e522-f3ca-597c-9b18-3c85f25fc05b","type":"url","category":"Network activity","to_ids":true,"value":"http://34.252.202.151:80","comment":"https://x.com/drb_ra/status/1960776488745337132","timestamp":"1756320519","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"af879d71-ecfc-580b-b158-811ac100e5bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.252.202.151","comment":"https://x.com/drb_ra/status/1960776488745337132","timestamp":"1756320519","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d03ee5e9-9a2d-5add-b543-4706a58a6b19","type":"domain","category":"Network activity","to_ids":true,"value":"pub-86da01ef5dcc48a5835da89640b8232a.r2.dev","comment":"https://x.com/1ZRR4H/status/1960776566432256081","timestamp":"1756320537","distribution":"5"},{"uuid":"180f7a80-d867-561c-89af-e68eb13fa03f","type":"url","category":"Network activity","to_ids":true,"value":"https://pub-86da01ef5dcc48a5835da89640b8232a.r2.dev/KB38459284_x86.exe","comment":"https://x.com/1ZRR4H/status/1960776566432256081","timestamp":"1756320537","distribution":"5"},{"uuid":"944dc328-52cf-5e6b-9706-8ebe79c9dcf0","type":"md5","category":"Payload delivery","to_ids":true,"value":"86da01ef5dcc48a5835da89640b8232a","comment":"https://x.com/1ZRR4H/status/1960776566432256081","timestamp":"1756320537","distribution":"5"},{"uuid":"c404d862-373b-5106-a313-650b30748789","type":"sha256","category":"Payload delivery","to_ids":true,"value":"adc570474b594eb4323605c804e4a7a875763895f56d00b571d9ebc4e0fc3f0e","comment":"https://x.com/1ZRR4H/status/1960776566432256081","timestamp":"1756320537","distribution":"5"},{"uuid":"285d56eb-5549-5f95-a0ad-e3fe6dc6efdc","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.226.155:80","comment":"https://x.com/drb_ra/status/1960776626771271929","timestamp":"1756320551","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4db67ce9-153a-5552-b486-8f057eebb271","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.226.155","comment":"https://x.com/drb_ra/status/1960776626771271929","timestamp":"1756320551","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7445a7e0-7d54-54eb-82a3-3dbbff54d568","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.236.33:80","comment":"https://x.com/drb_ra/status/1960776764902265192","timestamp":"1756320584","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c4edc398-b861-59fd-8072-3dd13e6cee2f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.71.140:80","comment":"https://x.com/drb_ra/status/1960776908452339983","timestamp":"1756320619","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4943cd82-9353-5e36-ba21-ae4aefceece9","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.142.194:80","comment":"https://x.com/drb_ra/status/1960777047946748060","timestamp":"1756320652","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"6ab98920-e7cd-54c6-b170-9e0ca47aeb3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.142.194","comment":"https://x.com/drb_ra/status/1960777047946748060","timestamp":"1756320652","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a38ca967-c6a9-58fc-b806-42f4d9816df9","type":"url","category":"Network activity","to_ids":true,"value":"http://176.34.95.28:80","comment":"https://x.com/drb_ra/status/1960777187101188595","timestamp":"1756320685","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"bcd030d5-ceb6-56f0-835a-41c269507b25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.34.95.28","comment":"https://x.com/drb_ra/status/1960777187101188595","timestamp":"1756320685","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f882e51b-0f69-5b50-8a1b-ecf59285131b","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.163.49:80","comment":"https://x.com/drb_ra/status/1960777324099436798","timestamp":"1756320718","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"30a19f37-c8d4-56dc-9e68-36e07e03f62a","type":"url","category":"Network activity","to_ids":true,"value":"https://ducksmicro.servicos.ws:3020/&protected-pdf-pf-unicodw&Mi","comment":"https://x.com/JAMESWT_WT/status/1960777457604419860","timestamp":"1756320750","distribution":"5"},{"uuid":"3355c851-c75a-5ff8-8b0b-3af316b7eec0","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.60.58:80","comment":"https://x.com/drb_ra/status/1960777463283507454","timestamp":"1756320751","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ab0cf8b2-b934-5cfb-9ba6-697b5bd2b7c6","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.63.54:25","comment":"https://x.com/drb_ra/status/1960777601061888194","timestamp":"1756320784","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d64131df-5ebe-51df-bc6e-f1ee87a35807","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.63.54","comment":"https://x.com/drb_ra/status/1960777601061888194","timestamp":"1756320784","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e39fff51-8279-52f2-97c8-8e698a9abe95","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.249.166:80","comment":"https://x.com/drb_ra/status/1960777740996723013","timestamp":"1756320817","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4bc9eac8-0cd0-598c-ae24-1b0021d6b1b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.249.166","comment":"https://x.com/drb_ra/status/1960777740996723013","timestamp":"1756320817","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f3d3bf64-8820-59a2-95b3-d14845e0b696","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.101.192:25","comment":"https://x.com/drb_ra/status/1960777878544785485","timestamp":"1756320850","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7b7d0e4e-62f8-5c5d-bb28-864e6f0a37d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.101.192","comment":"https://x.com/drb_ra/status/1960777878544785485","timestamp":"1756320850","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0269ac43-136c-581b-af08-2862d47e3c93","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.25.156:995","comment":"https://x.com/drb_ra/status/1960778017090994653","timestamp":"1756320883","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9a7c99a9-7c9e-5d81-8a43-34a637b9c8bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.187.25.156","comment":"https://x.com/drb_ra/status/1960778017090994653","timestamp":"1756320883","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"0231f886-a92a-5aca-8d5d-7ec3261277e4","type":"url","category":"Network activity","to_ids":true,"value":"http://199.68.104.126:443","comment":"https://x.com/drb_ra/status/1960778155180089684","timestamp":"1756320916","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"2a2608f1-024f-5112-86c7-9318f8e292a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"199.68.104.126","comment":"https://x.com/drb_ra/status/1960778155180089684","timestamp":"1756320916","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d1c82077-aa7c-56f7-b08b-75bb748cd7cf","type":"url","category":"Network activity","to_ids":true,"value":"http://152.42.220.255:80","comment":"https://x.com/drb_ra/status/1960778293789253812","timestamp":"1756320949","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b762e0e6-a323-5c66-9a2b-abd215fd0f56","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.42.220.255","comment":"https://x.com/drb_ra/status/1960778293789253812","timestamp":"1756320949","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"b9afbcd1-9d0b-5bd0-95a7-afaa19099a88","type":"url","category":"Network activity","to_ids":true,"value":"http://34.63.8.239:7443","comment":"https://x.com/drb_ra/status/1960778433119584284","timestamp":"1756320982","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d0d8c32c-e490-55e2-bce5-9786d3aa3841","type":"url","category":"Network activity","to_ids":true,"value":"http://35.75.149.18:80","comment":"https://x.com/drb_ra/status/1960778572559474942","timestamp":"1756321015","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"338f7b7b-bd7b-55ff-b3a7-958ce9471b18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.75.149.18","comment":"https://x.com/drb_ra/status/1960778572559474942","timestamp":"1756321015","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"28d00631-9bb4-547c-8021-0c889e44504d","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.145.6:2404","comment":"https://x.com/drb_ra/status/1960779218977202445","timestamp":"1756321169","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"fa579d70-dc6e-5c50-8ef0-6d0b357e1226","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.145.6","comment":"https://x.com/drb_ra/status/1960779218977202445","timestamp":"1756321169","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"f98bc7cc-c7ce-5ab9-bd68-6efe1a16a2d2","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.4.213:2404","comment":"https://x.com/drb_ra/status/1960779356453605779","timestamp":"1756321202","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a21b47d9-68c2-57f2-84f4-d15341d912a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.4.213","comment":"https://x.com/drb_ra/status/1960779356453605779","timestamp":"1756321202","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"a87a8775-4d99-5d4c-8712-43e87efe99dd","type":"url","category":"Network activity","to_ids":true,"value":"http://123.56.48.58:8999","comment":"https://x.com/drb_ra/status/1960779495629316161","timestamp":"1756321235","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"aa807943-5cf2-510b-9ed9-e311bfd9b9fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.56.48.58","comment":"https://x.com/drb_ra/status/1960779495629316161","timestamp":"1756321235","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"7eee9383-c83d-5e31-95b0-f24bf63ab432","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.71.220:8080","comment":"https://x.com/drb_ra/status/1960779636373381267","timestamp":"1756321269","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f478e401-49df-5e18-b43c-246609841099","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.71.220","comment":"https://x.com/drb_ra/status/1960779636373381267","timestamp":"1756321269","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"abb58814-0ba0-572a-8148-285421d4d617","type":"domain","category":"Network activity","to_ids":true,"value":"welcometouhcglobal.com","comment":"https://x.com/urldna_bot/status/1960794494179082718","timestamp":"1756324811","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cdd7fb53-38e6-52f1-9766-0baea77921ea","type":"url","category":"Network activity","to_ids":true,"value":"https://welcometouhcglobal.com","comment":"https://x.com/urldna_bot/status/1960794494179082718","timestamp":"1756324811","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5edbff5e-9ea1-5207-a882-af05f06a685b","type":"url","category":"Network activity","to_ids":true,"value":"http://114.35.219.10","comment":"https://x.com/threatquery/status/1960809559510921325","timestamp":"1756328403","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"c422abc2-a9c5-53f7-a0ec-27df1efc2d4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.35.219.10","comment":"https://x.com/threatquery/status/1960809559510921325","timestamp":"1756328403","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"52955a05-90b3-53ed-a459-f1b430db0c88","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.25.156","comment":"https://x.com/threatquery/status/1960809563126374899","timestamp":"1756328404","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"289900c7-b83b-5c07-b83b-8dbb97bd224f","type":"url","category":"Network activity","to_ids":true,"value":"http://199.68.104.126","comment":"https://x.com/threatquery/status/1960809561364853177","timestamp":"1756328404","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"4fa906cd-80fb-598f-8145-886058b9cc78","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.59.110:802","comment":"https://x.com/drb_ra/status/1960811235546685529","timestamp":"1756328803","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eceed745-6710-528f-a410-11a781af7656","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.59.110","comment":"https://x.com/drb_ra/status/1960811235546685529","timestamp":"1756328803","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b580495c-19e7-5970-ad9d-a52038f23403","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.136.129/push","comment":"https://x.com/drb_ra/status/1960811375359295878","timestamp":"1756328836","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"39d8d241-8dda-565d-ac43-902e711db8dd","type":"url","category":"Network activity","to_ids":true,"value":"http://101.37.80.173:80","comment":"https://x.com/drb_ra/status/1960811375359295878","timestamp":"1756328836","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aaa30f28-df6a-544a-8cf8-a9600658d943","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.37.80.173","comment":"https://x.com/drb_ra/status/1960811375359295878","timestamp":"1756328836","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2fb160f0-339a-581f-b41f-a205410f1655","type":"domain","category":"Network activity","to_ids":true,"value":"52f1897b.5648702dd4d5255cab645104.workers.dev","comment":"https://x.com/urldna_bot/status/1960824674767585652","timestamp":"1756332007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"083934d5-28b6-56b1-ba0d-372b797219de","type":"url","category":"Network activity","to_ids":true,"value":"http://52f1897b.5648702dd4d5255cab645104.workers.dev/?qrc=terry@slurpmail.net","comment":"https://x.com/urldna_bot/status/1960824674767585652","timestamp":"1756332007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7e222ccb-2119-5b03-89d4-c811e4aadc4d","type":"url","category":"Network activity","to_ids":true,"value":"http://136.243.87.214:80","comment":"https://x.com/SarlackLab/status/1960824705104961622","timestamp":"1756332014","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"7cda3f59-2bb4-5862-bda6-d16407b5f73b","type":"domain","category":"Network activity","to_ids":true,"value":"ab-services.ma","comment":"https://x.com/SarlackLab/status/1960824705104961622","timestamp":"1756332014","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"c2b43530-ac8c-5c7d-8d48-d65a78ceb072","type":"url","category":"Network activity","to_ids":true,"value":"http://ab-services.ma","comment":"https://x.com/SarlackLab/status/1960824705104961622","timestamp":"1756332014","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"cfa6fab0-de55-5bef-b558-687236ad4665","type":"ip-dst","category":"Network activity","to_ids":true,"value":"136.243.87.214","comment":"https://x.com/SarlackLab/status/1960824705104961622","timestamp":"1756332014","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"6260eee8-655e-59ba-9dbd-314e15fc08bc","type":"url","category":"Network activity","to_ids":true,"value":"https://1.94.129.250/fwlink","comment":"https://x.com/drb_ra/status/1960839930222981424","timestamp":"1756335644","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e7e199be-207c-527b-9c09-5f31d8e5f3a3","type":"url","category":"Network activity","to_ids":true,"value":"http://1.94.129.250:8001","comment":"https://x.com/drb_ra/status/1960839930222981424","timestamp":"1756335644","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83079dbc-be22-5590-9829-f3802786304e","type":"domain","category":"Network activity","to_ids":true,"value":"scan.daztar.com","comment":"https://x.com/drb_ra/status/1960840070199701872","timestamp":"1756335678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4eefb37a-712d-55ac-bfd1-4ad501cb20a3","type":"url","category":"Network activity","to_ids":true,"value":"https://scan.daztar.com/images/05.png","comment":"https://x.com/drb_ra/status/1960840070199701872","timestamp":"1756335678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"973cd813-b277-5d69-b0e7-4bd7153bf803","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.204.37:443","comment":"https://x.com/drb_ra/status/1960840070199701872","timestamp":"1756335678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2814305a-75c7-59ef-ba64-7e10c1520f74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.204.37","comment":"https://x.com/drb_ra/status/1960840070199701872","timestamp":"1756335678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c25e76a-80f9-5295-8c4e-a708471f7c5e","type":"domain","category":"Network activity","to_ids":true,"value":"recovery.info-meta-noreply.com","comment":"https://x.com/urldna_bot/status/1960854887891136775","timestamp":"1756339210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"01cddf56-e1da-51cc-803a-ff3f458d7f8a","type":"url","category":"Network activity","to_ids":true,"value":"https://recovery.info-meta-noreply.com","comment":"https://x.com/urldna_bot/status/1960854887891136775","timestamp":"1756339210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7854665c-c66f-5726-9702-cced8183f045","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.179.128","comment":"https://x.com/catnap707/status/1960858261252661435","timestamp":"1756340015","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bda2eac4-7b8b-52d5-b8c9-67d94fb45a8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.179.128","comment":"https://x.com/catnap707/status/1960858261252661435","timestamp":"1756340015","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffb12536-9c5f-5325-930b-51289275d8d3","type":"domain","category":"Network activity","to_ids":true,"value":"fubolai.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad78142a-05d9-510e-b84e-149c410e3546","type":"url","category":"Network activity","to_ids":true,"value":"http://fubolai.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf17a554-68c7-5b9b-a8ee-75a22de68200","type":"domain","category":"Network activity","to_ids":true,"value":"klkpobh.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e9eb4f5-de92-516c-aef3-34267518fb6e","type":"url","category":"Network activity","to_ids":true,"value":"http://klkpobh.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceae368f-79da-5e29-a8f3-bdf1f28f0d95","type":"url","category":"Network activity","to_ids":true,"value":"http://nunshang.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be9ef783-baf2-5506-afb9-de999c7cd0c0","type":"url","category":"Network activity","to_ids":true,"value":"http://pqrsxyz.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0eb19e3f-53b1-5af8-b858-9ed479235f9f","type":"url","category":"Network activity","to_ids":true,"value":"http://vrblv.cn","comment":"https://x.com/catnap707/status/1960859524715409662","timestamp":"1756340316","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"567a5b88-b81a-586b-b31a-1f15e458be85","type":"domain","category":"Network activity","to_ids":true,"value":"www-matsui.kcmjn.com","comment":"https://x.com/masaomi346/status/1960860759774388704","timestamp":"1756340610","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"59a801d6-641e-54f3-9781-730659645eeb","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui.kcmjn.com/mgap/","comment":"https://x.com/masaomi346/status/1960860759774388704","timestamp":"1756340610","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69b7fd67-8363-55a8-8143-e71b25a5ac1a","type":"domain","category":"Network activity","to_ids":true,"value":"deal-matsui-jp.sdluntai.com","comment":"https://x.com/Metemcyber/status/1960874975696707604","timestamp":"1756344000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea975232-b5d9-5094-a2a1-018db69b095b","type":"url","category":"Network activity","to_ids":true,"value":"https://deal-matsui-jp.sdluntai.com/mgap/","comment":"https://x.com/Metemcyber/status/1960874975696707604","timestamp":"1756344000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7254afa3-70ce-54f2-913a-0924d5449cb4","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.62.194","comment":"https://x.com/Metemcyber/status/1960874975696707604","timestamp":"1756344000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84d3e247-7de7-54ac-aea2-b718e9e65e42","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.138.190","comment":"https://x.com/Metemcyber/status/1960874975696707604","timestamp":"1756344000","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b56dedfb-6842-5e03-ada1-719198aeab25","type":"url","category":"Network activity","to_ids":true,"value":"https://sposmavipuserkdcjp.top/FJ1tHm","comment":"https://x.com/romonlyht/status/1960875520041869659","timestamp":"1756344129","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e97e4e2-7a99-54ed-90da-477207e33011","type":"ip-dst","category":"Network activity","to_ids":true,"value":"220.192.229.41","comment":"https://x.com/romonlyht/status/1960875520041869659","timestamp":"1756344129","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7bc8b9a-266e-5652-8660-0ab9be4b6b00","type":"domain","category":"Network activity","to_ids":true,"value":"sposmavipuserkdcjp.top","comment":"https://x.com/romonlyht/status/1960875522231300551","timestamp":"1756344130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eae217c8-2c80-5159-a88b-1a3f57191878","type":"url","category":"Network activity","to_ids":true,"value":"https://sposmavipuserkdcjp.top/FJ1tHm/","comment":"https://x.com/romonlyht/status/1960875522231300551","timestamp":"1756344130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2bf317e0-c3bf-5016-bbce-92e02852732d","type":"domain","category":"Network activity","to_ids":true,"value":"spasatpvipuserrkpjp.top","comment":"https://x.com/romonlyht/status/1960875522231300551","timestamp":"1756344130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5896da24-62cb-5aee-8000-8c80636367bc","type":"url","category":"Network activity","to_ids":true,"value":"https://spasatpvipuserrkpjp.top/0xcStq","comment":"https://x.com/romonlyht/status/1960875522231300551","timestamp":"1756344130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a0fd68ca-9da7-5ebb-a565-e0954cd5f47d","type":"url","category":"Network activity","to_ids":true,"value":"https://spasatpvipuserrkpjp.top/0xcStq/","comment":"https://x.com/romonlyht/status/1960875522231300551","timestamp":"1756344130","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"959e7b11-1630-5e9b-8d0f-535a2cb0c1a7","type":"domain","category":"Network activity","to_ids":true,"value":"v-vpass-jp.diaochall.com","comment":"https://x.com/Metemcyber/status/1960877020700946489","timestamp":"1756344487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bdb43a88-f0ed-58fd-b8e2-979c067e402f","type":"url","category":"Network activity","to_ids":true,"value":"https://v-vpass-jp.diaochall.com/webpc/login","comment":"https://x.com/Metemcyber/status/1960877020700946489","timestamp":"1756344487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a03631a-a2d4-5376-be22-314bb6ba7b83","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.33.216","comment":"https://x.com/Metemcyber/status/1960877020700946489","timestamp":"1756344487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c406a87-9baa-5551-8ffb-bd1addf91c62","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.192.215","comment":"https://x.com/Metemcyber/status/1960877020700946489","timestamp":"1756344487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"433fbffb-e698-5983-a13e-63bf6ca22f7d","type":"domain","category":"Network activity","to_ids":true,"value":"aqwzop.cn","comment":"https://x.com/romonlyht/status/1960878778600841579","timestamp":"1756344906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc789a0a-194c-5db9-9bf6-7e8140389aee","type":"url","category":"Network activity","to_ids":true,"value":"https://aqwzop.cn/action/home/request/type=un/","comment":"https://x.com/romonlyht/status/1960878778600841579","timestamp":"1756344906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b7926ec-b9ef-51f5-8198-8500bd61e113","type":"url","category":"Network activity","to_ids":true,"value":"https://aqwzop.cn/action/home/request/type=un","comment":"https://x.com/romonlyht/status/1960878776424038720","timestamp":"1756344906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b318bc41-a4cd-522e-93d9-8f2d4b353aa5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"105.100.72.143","comment":"https://x.com/romonlyht/status/1960878776424038720","timestamp":"1756344906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efe64501-93fe-54a7-9dd6-3b8eddeeb115","type":"url","category":"Network activity","to_ids":true,"value":"https://oinddepe.cn/action/home/request/type=un","comment":"https://x.com/romonlyht/status/1960879032217821328","timestamp":"1756344967","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9de4fab-5af8-516a-a784-f4ed5640a6e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.29.145.194","comment":"https://x.com/romonlyht/status/1960879032217821328","timestamp":"1756344967","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7bfdabd-5eb3-57f1-9576-9c06a15a9ce8","type":"domain","category":"Network activity","to_ids":true,"value":"oinddepe.cn","comment":"https://x.com/romonlyht/status/1960879036709917136","timestamp":"1756344968","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ebada63f-f6a5-52dc-a63c-7fa558e231a5","type":"url","category":"Network activity","to_ids":true,"value":"https://oinddepe.cn/action/home/request/type=un/","comment":"https://x.com/romonlyht/status/1960879036709917136","timestamp":"1756344968","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"22043d8b-7bce-55b9-b9a5-0dc984a670a8","type":"domain","category":"Network activity","to_ids":true,"value":"lainhavenohair.icu","comment":"https://x.com/romonlyht/status/1960882154117980429","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99557800-5250-565b-a0de-d8dc359556f8","type":"url","category":"Network activity","to_ids":true,"value":"https://lainhavenohair.icu/DABWGk","comment":"https://x.com/romonlyht/status/1960882154117980429","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80c5cc34-a63d-5fa4-a039-1b73baa3f23b","type":"url","category":"Network activity","to_ids":true,"value":"https://lainhavenohair.icu/DABWGk/","comment":"https://x.com/romonlyht/status/1960882154117980429","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0289b9af-f4a9-50b9-be5d-3f7040bfd424","type":"domain","category":"Network activity","to_ids":true,"value":"5iso48lfcugrxpnu.s3.me-central-1.amazonaws.com","comment":"https://x.com/romonlyht/status/1960882151957913857","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0d3a13f-b914-5ead-9705-7c69edef3bef","type":"url","category":"Network activity","to_ids":true,"value":"https://5iso48lfcugrxpnu.s3.me-central-1.amazonaws.com/index.html","comment":"https://x.com/romonlyht/status/1960882151957913857","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e3c23d1e-f555-5de9-9a83-e61073d60961","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.95.187.5","comment":"https://x.com/romonlyht/status/1960882151957913857","timestamp":"1756345711","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b339a967-dd7f-5018-81a2-f671b045d433","type":"domain","category":"Network activity","to_ids":true,"value":"saberforevery.icu","comment":"https://x.com/romonlyht/status/1960882473560367551","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b5a8541-4ded-5b19-977e-81145c6807d9","type":"url","category":"Network activity","to_ids":true,"value":"https://saberforevery.icu/DABWGk","comment":"https://x.com/romonlyht/status/1960882473560367551","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53a590bb-5404-51f7-884f-6739a50f5b1b","type":"url","category":"Network activity","to_ids":true,"value":"https://saberforevery.icu/DABWGk/","comment":"https://x.com/romonlyht/status/1960882473560367551","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40f3e04c-35ef-59a2-957c-9bc4706eede0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.150.15","comment":"https://x.com/romonlyht/status/1960882473560367551","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1b13c04-931d-50e4-b8a9-5ff26341ee3e","type":"domain","category":"Network activity","to_ids":true,"value":"9mp31wi2b4ca3tz3.s3.ap-south-2.amazonaws.com","comment":"https://x.com/romonlyht/status/1960882471639376005","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2946dceb-4c47-5338-8eaf-f119cb23653d","type":"url","category":"Network activity","to_ids":true,"value":"https://9mp31wi2b4ca3tz3.s3.ap-south-2.amazonaws.com/index.html","comment":"https://x.com/romonlyht/status/1960882471639376005","timestamp":"1756345787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89d53ffe-33f7-560a-8724-f9855c4a2b63","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.32.72:80","comment":"https://x.com/drb_ra/status/1960884333000188376","timestamp":"1756346231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"278a9cfe-0088-5638-bd99-b77ffdd7d501","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.32.72","comment":"https://x.com/drb_ra/status/1960884333000188376","timestamp":"1756346231","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f83565a1-ba82-5978-bf3e-1fd402e79f88","type":"domain","category":"Network activity","to_ids":true,"value":"e0febd5f1df0439d96032a85583d1db3.4i89un.shop","comment":"https://x.com/romonlyht/status/1960885357979033760","timestamp":"1756346475","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28953aa0-1e29-59f5-be07-cbd0f0d881e9","type":"url","category":"Network activity","to_ids":true,"value":"https://e0febd5f1df0439d96032a85583d1db3.4i89un.shop/e0febd5f1df0439d96032a85583d1db3","comment":"https://x.com/romonlyht/status/1960885357979033760","timestamp":"1756346475","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08bb133c-759e-5fc5-a4bf-90f806d25ec6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.175.120.214","comment":"https://x.com/romonlyht/status/1960885357979033760","timestamp":"1756346475","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b92b4fd9-95dd-5e85-9e85-eb08d3faf37e","type":"md5","category":"Payload delivery","to_ids":true,"value":"e0febd5f1df0439d96032a85583d1db3","comment":"https://x.com/romonlyht/status/1960885357979033760","timestamp":"1756346475","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0928cb34-b8f7-5e60-b13f-d89952fd3eb0","type":"domain","category":"Network activity","to_ids":true,"value":"f34a4cd959fd4f4fb34d392e7cce78fa.4j9m1c1.shop","comment":"https://x.com/romonlyht/status/1960885682429419944","timestamp":"1756346552","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f1c3646-efd2-51c2-9348-4ae025cd0ea1","type":"url","category":"Network activity","to_ids":true,"value":"https://f34a4cd959fd4f4fb34d392e7cce78fa.4j9m1c1.shop/f34a4cd959fd4f4fb34d392e7cce78fa","comment":"https://x.com/romonlyht/status/1960885682429419944","timestamp":"1756346552","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"950badba-09c4-5c47-ab4d-685e9ae78cef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.170.17.89","comment":"https://x.com/romonlyht/status/1960885682429419944","timestamp":"1756346552","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"774e6484-a8e1-57ee-a1af-6a8076418bba","type":"md5","category":"Payload delivery","to_ids":true,"value":"f34a4cd959fd4f4fb34d392e7cce78fa","comment":"https://x.com/romonlyht/status/1960885682429419944","timestamp":"1756346552","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f15ab311-1d50-5a44-a8e8-b0a72d832055","type":"domain","category":"Network activity","to_ids":true,"value":"19avygw.shop","comment":"https://x.com/romonlyht/status/1960885685164106181","timestamp":"1756346553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2710b213-d762-5d59-99e6-66eafcfdbd00","type":"url","category":"Network activity","to_ids":true,"value":"https://19avygw.shop/jp","comment":"https://x.com/romonlyht/status/1960885685164106181","timestamp":"1756346553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33e51488-ddfc-5ac0-940c-63a47ae32213","type":"url","category":"Network activity","to_ids":true,"value":"https://19avygw.shop/jp/","comment":"https://x.com/romonlyht/status/1960885685164106181","timestamp":"1756346553","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb208b3f-3923-5df7-9fae-6636185d7c46","type":"domain","category":"Network activity","to_ids":true,"value":"clickcart.icu","comment":"https://x.com/catnap707/status/1960886769253277872","timestamp":"1756346811","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f82b259f-daf7-514c-9d80-2250ca66d713","type":"url","category":"Network activity","to_ids":true,"value":"http://clickcart.icu/apple-enter","comment":"https://x.com/catnap707/status/1960886769253277872","timestamp":"1756346811","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5f07903-e1df-52c8-88ac-97a1ebb23993","type":"domain","category":"Network activity","to_ids":true,"value":"samuraishop.icu","comment":"https://x.com/catnap707/status/1960886769253277872","timestamp":"1756346811","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9945228c-a58c-5248-8534-43422dd05120","type":"url","category":"Network activity","to_ids":true,"value":"http://samuraishop.icu/account/","comment":"https://x.com/catnap707/status/1960886769253277872","timestamp":"1756346811","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b040745-e5d3-5e6b-a7fa-096e85ef069d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.142.38","comment":"https://x.com/catnap707/status/1960886769253277872","timestamp":"1756346811","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec8ed904-9f99-5b43-b57e-42da021441d6","type":"domain","category":"Network activity","to_ids":true,"value":"xinyujidian.com","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b1e8a2f-2648-5cd6-a9a5-1f577483e15b","type":"url","category":"Network activity","to_ids":true,"value":"http://xinyujidian.com/account","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77f02643-e53d-59ff-a995-bab85e32e8a2","type":"domain","category":"Network activity","to_ids":true,"value":"shopora.icu","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cdd2153f-16ea-5046-aeda-f0a59948d504","type":"url","category":"Network activity","to_ids":true,"value":"http://shopora.icu/login/","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f89fc7c8-3eb5-50a2-a3c6-74eab80908fb","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.64.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"298e8946-d6db-5e12-a773-242ceb2407c0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.80.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"737b38e6-979b-5d25-937a-36128c1b6638","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.96.1","comment":"https://x.com/catnap707/status/1960887369785335821","timestamp":"1756346955","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6417c9b6-9e7c-57be-9dc4-fa73bfb9f4bd","type":"domain","category":"Network activity","to_ids":true,"value":"d929ef8604f844699da8a83bee63530c.3ufzk2.shop","comment":"https://x.com/romonlyht/status/1960888443900453182","timestamp":"1756347211","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f38e44c9-0a37-5305-adbd-1c8bf91b008e","type":"url","category":"Network activity","to_ids":true,"value":"https://d929ef8604f844699da8a83bee63530c.3ufzk2.shop/d929ef8604f844699da8a83bee63530c","comment":"https://x.com/romonlyht/status/1960888443900453182","timestamp":"1756347211","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"644c6cea-0733-5a05-aa19-ae4caa86cbd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.199.178.188","comment":"https://x.com/romonlyht/status/1960888443900453182","timestamp":"1756347211","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40dcd892-0955-50fa-9387-99ba73c55185","type":"md5","category":"Payload delivery","to_ids":true,"value":"d929ef8604f844699da8a83bee63530c","comment":"https://x.com/romonlyht/status/1960888443900453182","timestamp":"1756347211","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d43c5755-f8c5-5314-b133-0151019dee52","type":"domain","category":"Network activity","to_ids":true,"value":"2181uyn.shop","comment":"https://x.com/romonlyht/status/1960888447268479210","timestamp":"1756347212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11f02a15-aa6d-5d2d-9c40-b314d1ca27be","type":"url","category":"Network activity","to_ids":true,"value":"https://2181uyn.shop/jp","comment":"https://x.com/romonlyht/status/1960888447268479210","timestamp":"1756347212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fcdf2c18-7e5c-567a-af5c-bdfb8f688f54","type":"url","category":"Network activity","to_ids":true,"value":"https://2181uyn.shop/jp/","comment":"https://x.com/romonlyht/status/1960888447268479210","timestamp":"1756347212","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45e7a0ca-dfbd-574a-ab51-14aa8a34ea9d","type":"domain","category":"Network activity","to_ids":true,"value":"ana.co.jp.geziaraci.com","comment":"https://x.com/romonlyht/status/1960890782870855876","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e3d2724-9fa0-5fd8-b0cc-4c2af513b6e6","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ana.co.jp.geziaraci.com/ja/jp/amc/","comment":"https://x.com/romonlyht/status/1960890782870855876","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b2662b4-234c-5cd9-8cc4-edacf2de36f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.145.68","comment":"https://x.com/romonlyht/status/1960890782870855876","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e734f4a4-12bb-5088-a781-0806145a390c","type":"domain","category":"Network activity","to_ids":true,"value":"jump.c47dgxr82.com","comment":"https://x.com/romonlyht/status/1960890781146997094","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2de4e8e6-8e94-53d8-ba6c-bd4dec56522f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.40.48","comment":"https://x.com/romonlyht/status/1960890781146997094","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db51c932-9e5b-590c-8402-50689d68ac74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.160.63","comment":"https://x.com/romonlyht/status/1960890781146997094","timestamp":"1756347768","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"214eb83f-6bac-5d73-af90-66daeb14c60d","type":"domain","category":"Network activity","to_ids":true,"value":"15371.asia","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cedc64e2-6d22-5a12-b6fc-ad614abdda4e","type":"url","category":"Network activity","to_ids":true,"value":"https://15371.asia/vais/","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40b3e752-0076-50db-9820-75feb314e59a","type":"domain","category":"Network activity","to_ids":true,"value":"97155.asia","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f193911a-7aa6-50b0-bfdc-799c9e2566ef","type":"url","category":"Network activity","to_ids":true,"value":"https://97155.asia/asvi/","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2c92e1c7-0fcf-5484-abe0-d89187312703","type":"domain","category":"Network activity","to_ids":true,"value":"ryhhlekscf.pinshiguang.com","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9bcd5b3-2b56-5084-9675-7c56456814ec","type":"url","category":"Network activity","to_ids":true,"value":"http://ryhhlekscf.pinshiguang.com","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31f44dc9-dfd7-5d65-9c53-fe216c8eddb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.180.199","comment":"https://x.com/romonlyht/status/1960894564413399416","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"caf26641-332b-59a5-8d22-442eb720285d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"218.85.54.102","comment":"https://x.com/romonlyht/status/1960894562458841254","timestamp":"1756348670","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5a5f6d7f-8a79-5f56-823c-dca91a147fb2","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.zbdlfs.com","comment":"https://x.com/romonlyht/status/1960900164979450070","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49c9b571-eb7b-5b13-b6d0-5e8f0c55d39a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.zbdlfs.com/ETGate","comment":"https://x.com/romonlyht/status/1960900164979450070","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aae7aa06-01e1-5cf0-9e69-37c649102e3a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.zbdlfs.com/ETGate/","comment":"https://x.com/romonlyht/status/1960900164979450070","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"912c9d36-61de-5468-8d32-9e4ec5eac051","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.188.23","comment":"https://x.com/romonlyht/status/1960900164979450070","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6caa746-9f09-5c83-b408-5f15e8dc77bc","type":"domain","category":"Network activity","to_ids":true,"value":"shformore.com","comment":"https://x.com/romonlyht/status/1960900163024904493","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87190d10-3237-58b2-8481-3b74feb3a1c5","type":"url","category":"Network activity","to_ids":true,"value":"https://shformore.com/verify","comment":"https://x.com/romonlyht/status/1960900163024904493","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3349b6d6-2ec8-58b5-b17a-bbd7c9b4360e","type":"url","category":"Network activity","to_ids":true,"value":"https://shformore.com/verify/","comment":"https://x.com/romonlyht/status/1960900163024904493","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3239a015-17ec-5ca8-bd71-472eba91563f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.200.116.255","comment":"https://x.com/romonlyht/status/1960900163024904493","timestamp":"1756350005","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f834e9f-b7df-5a04-a8f7-7e8e0499702b","type":"domain","category":"Network activity","to_ids":true,"value":"imiwang.com","comment":"https://x.com/romonlyht/status/1960900649802953035","timestamp":"1756350121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4eff5b7d-068a-516d-85d9-4de16198f504","type":"url","category":"Network activity","to_ids":true,"value":"https://imiwang.com/verify","comment":"https://x.com/romonlyht/status/1960900649802953035","timestamp":"1756350121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"47b2a0dd-2930-546d-b844-c281272a4ed4","type":"url","category":"Network activity","to_ids":true,"value":"https://imiwang.com/verify/","comment":"https://x.com/romonlyht/status/1960900649802953035","timestamp":"1756350121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"772812d4-cc77-53bd-b841-20de9dd650a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.11.54","comment":"https://x.com/romonlyht/status/1960900649802953035","timestamp":"1756350121","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40e12d0c-8425-5e3c-af86-96f4e5807914","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.hheerroo.com","comment":"https://x.com/romonlyht/status/1960900653225517060","timestamp":"1756350122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64eb8170-c885-5e15-903f-c53a6d8ffe81","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.hheerroo.com/ETGate","comment":"https://x.com/romonlyht/status/1960900653225517060","timestamp":"1756350122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee26c783-89df-54fb-bfc8-e6c7a70f56ba","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.hheerroo.com/ETGate/","comment":"https://x.com/romonlyht/status/1960900653225517060","timestamp":"1756350122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70524eab-1148-5b25-a505-db1496dafe5a","type":"domain","category":"Network activity","to_ids":true,"value":"www-matsui-co-jp.guangruidg.com","comment":"https://x.com/romonlyht/status/1960905097384484900","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"528381be-eb80-5a7c-8e38-90543646059b","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.guangruidg.com/login","comment":"https://x.com/romonlyht/status/1960905097384484900","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ca3b5cd8-ab96-510c-93d3-7512195c0062","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.guangruidg.com/login/","comment":"https://x.com/romonlyht/status/1960905097384484900","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69c176a9-edd8-507f-9813-e5d2ef6fe601","type":"domain","category":"Network activity","to_ids":true,"value":"yuzhoujcgs.com","comment":"https://x.com/romonlyht/status/1960905095362830350","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5d772684-775c-5c27-97ae-ff79cc30fd6e","type":"url","category":"Network activity","to_ids":true,"value":"https://yuzhoujcgs.com/jp","comment":"https://x.com/romonlyht/status/1960905095362830350","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f488cd5-76de-5cb6-b1d7-c549fcca6229","type":"url","category":"Network activity","to_ids":true,"value":"https://yuzhoujcgs.com/jp/","comment":"https://x.com/romonlyht/status/1960905095362830350","timestamp":"1756351181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f580fce-d9ea-5032-835f-80828626f980","type":"domain","category":"Network activity","to_ids":true,"value":"ahxfzymy.com","comment":"https://x.com/romonlyht/status/1960905515237826611","timestamp":"1756351281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6db83f46-089a-5d45-82da-3ea60892589f","type":"url","category":"Network activity","to_ids":true,"value":"https://ahxfzymy.com/jp","comment":"https://x.com/romonlyht/status/1960905515237826611","timestamp":"1756351281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46e50eb2-02d0-5f41-86c0-619051909a02","type":"url","category":"Network activity","to_ids":true,"value":"https://ahxfzymy.com/jp/","comment":"https://x.com/romonlyht/status/1960905515237826611","timestamp":"1756351281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bdb77320-fd71-56f0-bffc-abae6f3224a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.200.73.193","comment":"https://x.com/romonlyht/status/1960905515237826611","timestamp":"1756351281","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b84e9d2f-2581-5d6b-a63b-17ca32fcca03","type":"domain","category":"Network activity","to_ids":true,"value":"www-matsui-co-jp.rxcoatings.com","comment":"https://x.com/romonlyht/status/1960905524918001944","timestamp":"1756351283","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"89d73b9b-9f23-5b20-a650-4e1623852096","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.rxcoatings.com/login","comment":"https://x.com/romonlyht/status/1960905524918001944","timestamp":"1756351283","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0223d7c3-c121-55c6-b70c-e5dc0c5775a6","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.rxcoatings.com/login/","comment":"https://x.com/romonlyht/status/1960905524918001944","timestamp":"1756351283","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3532f821-8a45-536b-9f7b-0ffdbae11a1d","type":"domain","category":"Network activity","to_ids":true,"value":"htlxx.cn","comment":"https://x.com/romonlyht/status/1960910174698229946","timestamp":"1756352392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a55db8a-6a9d-5e9e-b0ed-e8d1161ead0a","type":"url","category":"Network activity","to_ids":true,"value":"https://htlxx.cn/Login","comment":"https://x.com/romonlyht/status/1960910174698229946","timestamp":"1756352392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15e55762-2a6a-521c-adbf-d4ce36b0412a","type":"url","category":"Network activity","to_ids":true,"value":"https://htlxx.cn/Login/","comment":"https://x.com/romonlyht/status/1960910174698229946","timestamp":"1756352392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cfd96cce-f9d8-5df5-ac3b-0562c6b19894","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.211.56.111","comment":"https://x.com/romonlyht/status/1960910174698229946","timestamp":"1756352392","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b60401c1-65f5-5fa2-a9e9-39f00237edec","type":"domain","category":"Network activity","to_ids":true,"value":"nathanlowe.com","comment":"https://x.com/romonlyht/status/1960910475199131980","timestamp":"1756352463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"96147293-6671-5a11-9fdb-62d2adde3d13","type":"url","category":"Network activity","to_ids":true,"value":"https://nathanlowe.com","comment":"https://x.com/romonlyht/status/1960910475199131980","timestamp":"1756352463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c17b1a7b-0d37-5337-a4a5-75c3f56ea579","type":"url","category":"Network activity","to_ids":true,"value":"https://nathanlowe.com/v1/check","comment":"https://x.com/romonlyht/status/1960910473068720149","timestamp":"1756352463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b222c93-41e1-5ab1-ae3d-5e6847978a37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.223.172","comment":"https://x.com/romonlyht/status/1960910473068720149","timestamp":"1756352463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba3854bb-c370-5d8f-bd2f-1e0b3bb95f13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.190.195","comment":"https://x.com/romonlyht/status/1960910473068720149","timestamp":"1756352463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a5620bf8-ffa3-53bc-b862-3514fffac5e6","type":"domain","category":"Network activity","to_ids":true,"value":"nlaao.cn","comment":"https://x.com/romonlyht/status/1960910712806490286","timestamp":"1756352520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3dac570-2ac0-50d9-be52-0e8017666af6","type":"url","category":"Network activity","to_ids":true,"value":"https://nlaao.cn/Login","comment":"https://x.com/romonlyht/status/1960910712806490286","timestamp":"1756352520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53301c27-9e92-5684-9fb4-4960491c98a5","type":"url","category":"Network activity","to_ids":true,"value":"https://nlaao.cn/Login/","comment":"https://x.com/romonlyht/status/1960910712806490286","timestamp":"1756352520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be4a951e-9569-5031-92d3-ff35b2bf7fc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"183.166.170.7","comment":"https://x.com/romonlyht/status/1960910712806490286","timestamp":"1756352520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83649480-5283-5d81-844a-50ab4f8ee3cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.128.36","comment":"https://x.com/romonlyht/status/1960910712806490286","timestamp":"1756352520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cbdaaef2-4be8-5ffb-b1c6-cf3cbf6dd09c","type":"domain","category":"Network activity","to_ids":true,"value":"xvxvxemail.weebly.com","comment":"https://x.com/urldna_bot/status/1960915287466815532","timestamp":"1756353611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2603615d-baaf-51f4-a440-5f81cef4df03","type":"url","category":"Network activity","to_ids":true,"value":"https://xvxvxemail.weebly.com","comment":"https://x.com/urldna_bot/status/1960915287466815532","timestamp":"1756353611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a76e984d-4211-5fbd-8ed4-192817c6da2a","type":"domain","category":"Network activity","to_ids":true,"value":"lending-metalx.pages.dev","comment":"https://x.com/alvosec/status/1960917846453518524","timestamp":"1756354221","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b5074c3-014f-5a4b-98b6-2257ed98ffe5","type":"url","category":"Network activity","to_ids":true,"value":"http://lending-metalx.pages.dev","comment":"https://x.com/alvosec/status/1960917846453518524","timestamp":"1756354221","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33aa07fb-7f1d-5600-9da1-965cef9a6bda","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.145.61.131","comment":"https://x.com/Cyberteam008/status/1960934160807420075","timestamp":"1756358110","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"4b25d9b8-a37f-5c4f-9342-eb0bc5615ca7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.93.154.222","comment":"https://x.com/Cyberteam008/status/1960934160807420075","timestamp":"1756358110","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"5bd6f429-92be-5242-bc9e-a361dfe2a3ec","type":"md5","category":"Payload delivery","to_ids":true,"value":"591e736cd14433b9a2fa7af7337c523b","comment":"https://x.com/Cyberteam008/status/1960934160807420075","timestamp":"1756358110","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"77d9157f-a5ef-5f5c-a13b-3fe3e0c1fff6","type":"md5","category":"Payload delivery","to_ids":true,"value":"04f481b61fe6eceeadd60bb78b0898e1","comment":"https://x.com/Cyberteam008/status/1960934160807420075","timestamp":"1756358110","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"76df8973-8509-596e-924d-6b3f49690122","type":"domain","category":"Network activity","to_ids":true,"value":"sportybetwithdrawbonue.weebly.com","comment":"https://x.com/urldna_bot/status/1960945475663626686","timestamp":"1756360808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f525b6df-c1a9-56ed-9916-949bde4e5521","type":"url","category":"Network activity","to_ids":true,"value":"https://sportybetwithdrawbonue.weebly.com","comment":"https://x.com/urldna_bot/status/1960945475663626686","timestamp":"1756360808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c20ad906-7749-576b-ba4e-5352c0bacd67","type":"domain","category":"Network activity","to_ids":true,"value":"www-aauponet-sebir.swpdibim.club","comment":"https://x.com/Metemcyber/status/1960955869971275813","timestamp":"1756363286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3940b6d8-9956-533b-bab6-057d470bf7fa","type":"url","category":"Network activity","to_ids":true,"value":"https://www-aauponet-sebir.swpdibim.club/aupasfnbi/","comment":"https://x.com/Metemcyber/status/1960955869971275813","timestamp":"1756363286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d6d5e2e-74d7-5d32-91f2-3de89ecf4e8b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.214.190","comment":"https://x.com/Metemcyber/status/1960955869971275813","timestamp":"1756363286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbbc3715-06d4-5aca-87bd-5435b33453e8","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.23.253","comment":"https://x.com/Metemcyber/status/1960955869971275813","timestamp":"1756363286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c18df626-d9e8-50ad-9b88-2c170b2f061b","type":"url","category":"Network activity","to_ids":true,"value":"http://2.241.123.75:7443","comment":"https://x.com/drb_ra/status/1960956985257672894","timestamp":"1756363552","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"43ff6f2e-92d9-5714-ba96-9d3d6930d5c9","type":"url","category":"Network activity","to_ids":true,"value":"http://212.11.64.215:7443","comment":"https://x.com/drb_ra/status/1960957122344104108","timestamp":"1756363585","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"70d476a7-007d-56ff-9090-87c54d2c33e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.11.64.215","comment":"https://x.com/drb_ra/status/1960957122344104108","timestamp":"1756363585","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"22d92a3b-c7a5-5dcc-ba02-002a17b501b6","type":"url","category":"Network activity","to_ids":true,"value":"http://4.182.221.225:443","comment":"https://x.com/drb_ra/status/1960957264099205205","timestamp":"1756363619","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a343d6db-ff4f-5046-b574-b689a725c3a1","type":"url","category":"Network activity","to_ids":true,"value":"http://45.79.28.93:31337","comment":"https://x.com/drb_ra/status/1960957401848262693","timestamp":"1756363652","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f679397d-6108-53dd-ae5c-5117461f2f8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.79.28.93","comment":"https://x.com/drb_ra/status/1960957401848262693","timestamp":"1756363652","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b5daa969-132e-5ea6-99ed-eafc817ddb95","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.135.178:8443","comment":"https://x.com/drb_ra/status/1960957539413082281","timestamp":"1756363684","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"941ade2b-92ee-55e5-8fd2-a96ff66be398","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.135.178:443","comment":"https://x.com/drb_ra/status/1960957678026641823","timestamp":"1756363717","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"58d5bc05-6469-51ab-98cc-edb60341a7f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.135.178","comment":"https://x.com/drb_ra/status/1960957678026641823","timestamp":"1756363717","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"23c5db09-c568-52e3-baf9-f468641a898f","type":"url","category":"Network activity","to_ids":true,"value":"http://37.221.65.106:45387","comment":"https://x.com/drb_ra/status/1960957815855702508","timestamp":"1756363750","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"29723c65-c9d9-5d70-96e0-bd5478278945","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.221.65.106","comment":"https://x.com/drb_ra/status/1960957815855702508","timestamp":"1756363750","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"31bd17b4-fe97-52f9-bb4c-5fd1b0051c2d","type":"url","category":"Network activity","to_ids":true,"value":"http://38.242.230.250:2405","comment":"https://x.com/drb_ra/status/1960958458884133138","timestamp":"1756363904","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6ef4d7c3-0df2-5c54-a9bb-fe365cd17978","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.242.230.250","comment":"https://x.com/drb_ra/status/1960958458884133138","timestamp":"1756363904","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"96db6dfe-95e1-571d-b49f-a681aeb9af66","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.126.182:2404","comment":"https://x.com/drb_ra/status/1960958596952547422","timestamp":"1756363937","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a68c9ed2-debb-561e-a71d-5fbc940a70b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.126.182","comment":"https://x.com/drb_ra/status/1960958596952547422","timestamp":"1756363937","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a058ef9b-396a-5305-9c62-f4c1c172a52f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.135.194.43:3232","comment":"https://x.com/drb_ra/status/1960958734340927663","timestamp":"1756363969","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"d7ed5a8c-8fb5-538a-9dbe-932778444879","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.135.194.43","comment":"https://x.com/drb_ra/status/1960958734340927663","timestamp":"1756363969","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"24233dc3-3ea1-55fd-b8c7-1afa898bc34c","type":"url","category":"Network activity","to_ids":true,"value":"http://13.246.41.198:2000","comment":"https://x.com/drb_ra/status/1960958874418339956","timestamp":"1756364003","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"bcffdba1-b544-57e8-bfbd-08b4f4d99bad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.246.41.198","comment":"https://x.com/drb_ra/status/1960958874418339956","timestamp":"1756364003","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ea9697f0-c1b4-5cd0-90fc-98fb8ad13ce0","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.214.215:443","comment":"https://x.com/drb_ra/status/1960959011592843682","timestamp":"1756364035","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d4a4146b-688a-5458-b0e3-7e1d1c9e0a17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.214.215","comment":"https://x.com/drb_ra/status/1960959011592843682","timestamp":"1756364035","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7086c364-30fa-500d-bb53-76bb369f06a9","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.113.211:8808","comment":"https://x.com/drb_ra/status/1960959149883195809","timestamp":"1756364068","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d45c886d-9ec7-537f-b199-8b0437986077","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.113.211","comment":"https://x.com/drb_ra/status/1960959149883195809","timestamp":"1756364068","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"0f51248c-5057-5439-8f77-3199dd782cbc","type":"url","category":"Network activity","to_ids":true,"value":"http://184.73.132.74:443","comment":"https://x.com/drb_ra/status/1960959288307859642","timestamp":"1756364101","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"70f95f38-691d-51f7-b12e-f5922e111e5a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"184.73.132.74","comment":"https://x.com/drb_ra/status/1960959288307859642","timestamp":"1756364101","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0d19467b-68cc-52d2-9c64-e4bc7c57d0c7","type":"domain","category":"Network activity","to_ids":true,"value":"pocketcard-provid.ejhl.cn","comment":"https://x.com/Metemcyber/status/1960959311418679576","timestamp":"1756364107","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"054e42a8-b5a6-5bc6-882f-e0a4963ad508","type":"url","category":"Network activity","to_ids":true,"value":"https://pocketcard-provid.ejhl.cn/netservice/login/","comment":"https://x.com/Metemcyber/status/1960959311418679576","timestamp":"1756364107","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a65e36ef-5b3d-5d88-ac84-c2f01d887a40","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.204.24","comment":"https://x.com/Metemcyber/status/1960959311418679576","timestamp":"1756364107","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"414f1364-8c9b-577d-a9cb-1d6d355385c0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.52.211","comment":"https://x.com/Metemcyber/status/1960959311418679576","timestamp":"1756364107","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa462cae-96ea-5b93-83a2-0de1595d5e43","type":"url","category":"Network activity","to_ids":true,"value":"http://16.163.145.28:8888","comment":"https://x.com/drb_ra/status/1960959426568798571","timestamp":"1756364134","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"4917439d-ca8a-5c09-ab17-63bb3eb8ab65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.163.145.28","comment":"https://x.com/drb_ra/status/1960959426568798571","timestamp":"1756364134","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"59f6ebd6-bd3a-5774-9f07-3239b3189114","type":"url","category":"Network activity","to_ids":true,"value":"http://190.255.85.13:4100","comment":"https://x.com/drb_ra/status/1960959564452331786","timestamp":"1756364167","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"449f6969-075c-551a-96bc-1ff7f502e4cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"190.255.85.13","comment":"https://x.com/drb_ra/status/1960959564452331786","timestamp":"1756364167","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"e234b3fb-4192-5cf2-8ef5-e0ed6242b394","type":"url","category":"Network activity","to_ids":true,"value":"http://44.210.76.29:445","comment":"https://x.com/drb_ra/status/1960959702235230343","timestamp":"1756364200","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"20bd9717-c938-5157-96d4-fa4375b21c4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.210.76.29","comment":"https://x.com/drb_ra/status/1960959702235230343","timestamp":"1756364200","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2d69b8d3-d219-5969-bff7-fb9dd2f20a85","type":"url","category":"Network activity","to_ids":true,"value":"http://54.66.50.36:443","comment":"https://x.com/drb_ra/status/1960959841092120974","timestamp":"1756364233","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a312600d-7f2b-5f3c-857f-3fe9eaab8b55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.66.50.36","comment":"https://x.com/drb_ra/status/1960959841092120974","timestamp":"1756364233","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"1663ac22-0bbb-5231-82a8-5cb8e5d90aa1","type":"url","category":"Network activity","to_ids":true,"value":"http://45.79.175.160:8080","comment":"https://x.com/drb_ra/status/1960959977993969854","timestamp":"1756364266","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"26601818-9557-57ed-a259-8b1e1f8ea598","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.79.175.160","comment":"https://x.com/drb_ra/status/1960959977993969854","timestamp":"1756364266","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"2a2772b9-ae6d-5131-b405-43377b1da263","type":"url","category":"Network activity","to_ids":true,"value":"http://18.119.67.85:443","comment":"https://x.com/drb_ra/status/1960960115747459575","timestamp":"1756364299","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d83df1ac-4bed-5020-a0db-973cac120ce8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.119.67.85","comment":"https://x.com/drb_ra/status/1960960115747459575","timestamp":"1756364299","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4a555497-0ef7-51fc-873a-6f64e2593047","type":"url","category":"Network activity","to_ids":true,"value":"http://15.197.130.84:443","comment":"https://x.com/drb_ra/status/1960960254075691396","timestamp":"1756364332","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6c01ff39-2b8a-5438-a014-293383059311","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.197.130.84","comment":"https://x.com/drb_ra/status/1960960254075691396","timestamp":"1756364332","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"2ba447a7-e6ac-5c37-a6d5-f2381d08f5c8","type":"url","category":"Network activity","to_ids":true,"value":"http://34.206.102.55:443","comment":"https://x.com/drb_ra/status/1960960391929840051","timestamp":"1756364364","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"4419f726-58ea-5290-a9c6-918a641a5f96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.206.102.55","comment":"https://x.com/drb_ra/status/1960960391929840051","timestamp":"1756364364","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c022d7b0-9c9c-5d7f-98e1-db8f58eb2062","type":"domain","category":"Network activity","to_ids":true,"value":"itechac.ir","comment":"https://x.com/skocherhan/status/1960974947561443443","timestamp":"1756367835","distribution":"5"},{"uuid":"37442360-b627-5cfa-8dfe-b06e21f2016e","type":"url","category":"Network activity","to_ids":true,"value":"http://itechac.ir","comment":"https://x.com/skocherhan/status/1960974947561443443","timestamp":"1756367835","distribution":"5"},{"uuid":"e311f3cd-59eb-5bca-9cd0-c16808184efe","type":"domain","category":"Network activity","to_ids":true,"value":"121212121rcnn.weebly.com","comment":"https://x.com/urldna_bot/status/1960975679882686781","timestamp":"1756368009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c9d3377f-25fe-542d-97f6-9b67e418fdcc","type":"url","category":"Network activity","to_ids":true,"value":"https://121212121rcnn.weebly.com","comment":"https://x.com/urldna_bot/status/1960975679882686781","timestamp":"1756368009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d52cf70e-fb61-56cd-8481-79ab55359282","type":"md5","category":"Payload delivery","to_ids":true,"value":"1ded71930d997de43a68e098d232e2e5","comment":"https://x.com/JAMESWT_WT/status/1960988232285393273","timestamp":"1756371002","distribution":"5"},{"uuid":"f7107c7c-7976-5718-9201-3528896c3c09","type":"sha256","category":"Payload delivery","to_ids":true,"value":"10b54abba525686869c9da223250f70270a742b1a056424c943cfc438c40cc50","comment":"https://x.com/JAMESWT_WT/status/1960988232285393273","timestamp":"1756371002","distribution":"5"},{"uuid":"51f7d008-f633-5458-b720-831ea0ddf96d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.145.217","comment":"https://x.com/Fact_Finder03/status/1960991092758696391","timestamp":"1756371684","distribution":"5","Tag":[{"name":"Hookbot"}]},{"uuid":"64a489b8-e2c3-5856-be69-e9cb09457da2","type":"domain","category":"Network activity","to_ids":true,"value":"fileripple.com","comment":"https://x.com/melanews/status/1961001566225269029","timestamp":"1756374181","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"91311c49-577a-52f7-aa4c-2278288f2fe3","type":"url","category":"Network activity","to_ids":true,"value":"http://fileripple.com","comment":"https://x.com/melanews/status/1961001566225269029","timestamp":"1756374181","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"9d1fd276-e33b-5c80-a416-a64e1079ff67","type":"md5","category":"Payload delivery","to_ids":true,"value":"f5f3258e0ba84d3f5b3c1bc40a6335c6","comment":"https://x.com/PrakkiSathwik/status/1961004346029584888","timestamp":"1756374844","distribution":"5","Tag":[{"name":"phishing"},{"name":"APT"}]},{"uuid":"b90eaf94-4bb3-5795-a53f-78aa7f2490ea","type":"domain","category":"Network activity","to_ids":true,"value":"president.edu.np","comment":"https://x.com/urldna_bot/status/1961005885355942149","timestamp":"1756375211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"448ac96b-0870-5039-a2a7-c7591df64c91","type":"url","category":"Network activity","to_ids":true,"value":"https://president.edu.np/president.html","comment":"https://x.com/urldna_bot/status/1961005885355942149","timestamp":"1756375211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0871635d-01b5-5841-a106-2ded3a7ffc61","type":"domain","category":"Network activity","to_ids":true,"value":"ci.com.pk","comment":"https://x.com/AddressIntel/status/1961010893208051931","timestamp":"1756376405","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f1dbcda7-7380-56fc-92a4-ad4b4c8f34ac","type":"url","category":"Network activity","to_ids":true,"value":"https://ci.com.pk/keypa/pago/pago/msdpweb/","comment":"https://x.com/AddressIntel/status/1961010893208051931","timestamp":"1756376405","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce26dff5-7aae-58da-be9a-9ea21149f0f0","type":"url","category":"Network activity","to_ids":true,"value":"http://114.55.226.54:8099","comment":"https://x.com/drb_ra/status/1961018890277843167","timestamp":"1756378312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ca1c2985-8361-5a0d-a145-9b9332ae1684","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.55.226.54","comment":"https://x.com/drb_ra/status/1961018890277843167","timestamp":"1756378312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a36e160b-bd2d-51a6-a237-b6db519b2348","type":"url","category":"Network activity","to_ids":true,"value":"https://172.185.168.117/api/v1/page","comment":"https://x.com/drb_ra/status/1961019030237589733","timestamp":"1756378345","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bd474d40-ee44-5970-88f1-b9dff9ff77d9","type":"url","category":"Network activity","to_ids":true,"value":"http://172.185.168.117:9443","comment":"https://x.com/drb_ra/status/1961019030237589733","timestamp":"1756378345","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fd8e8c8b-1312-51ef-982f-2913f0efeefc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.185.168.117","comment":"https://x.com/drb_ra/status/1961019030237589733","timestamp":"1756378345","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"35aa0155-19e0-5ff1-866e-bc72559c8516","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.237.222/ptj","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fa194a0a-d0e2-5c78-bf7e-ae246b737c75","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.237.199/visit.js","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"415e45be-fc50-517b-92d5-e35aed4e2382","type":"url","category":"Network activity","to_ids":true,"value":"https://154.12.26.73/visit.js","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d056dc6b-e7f6-50d6-920c-1410b17522e2","type":"url","category":"Network activity","to_ids":true,"value":"http://154.12.26.73:443","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"13ef281c-7658-5927-a449-1190f51d8178","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.12.26.73","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7150bf5a-2777-588b-b22e-00f517719bb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.10.16.129","comment":"https://x.com/drb_ra/status/1961019172969738410","timestamp":"1756378379","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5bcd1561-f716-528a-af23-05f46ddf0878","type":"domain","category":"Network activity","to_ids":true,"value":"familie-pankowski.de","comment":"https://x.com/suyog41/status/1961026246906626514","timestamp":"1756380066","distribution":"5"},{"uuid":"c699bcde-740a-5713-b814-0f5be911f562","type":"url","category":"Network activity","to_ids":true,"value":"http://familie-pankowski.de","comment":"https://x.com/suyog41/status/1961026246906626514","timestamp":"1756380066","distribution":"5"},{"uuid":"072792cd-db30-5a4d-93d1-3749196847a2","type":"md5","category":"Payload delivery","to_ids":true,"value":"dedf4babbcd571e959ae09f3119e8f46","comment":"https://x.com/suyog41/status/1961026246906626514","timestamp":"1756380066","distribution":"5"},{"uuid":"82e95b30-56f1-5214-b447-78294ad51284","type":"md5","category":"Payload delivery","to_ids":true,"value":"058eeb1315b354ac63b4fa22951c3f4b","comment":"https://x.com/suyog41/status/1961026246906626514","timestamp":"1756380066","distribution":"5"},{"uuid":"1ec050b5-6292-5176-a957-c29715801a5c","type":"domain","category":"Network activity","to_ids":true,"value":"snwardbn24dec4.weebly.com","comment":"https://x.com/urldna_bot/status/1961036079567442054","timestamp":"1756382410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1accbd58-82cb-508a-9484-62361e472531","type":"url","category":"Network activity","to_ids":true,"value":"https://snwardbn24dec4.weebly.com","comment":"https://x.com/urldna_bot/status/1961036079567442054","timestamp":"1756382410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3de49ded-4312-5017-b4ec-82831ec6dfba","type":"url","category":"Network activity","to_ids":true,"value":"http://185.235.178.14","comment":"https://x.com/drb_ra/status/1961062947175694451","timestamp":"1756388816","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9713b8ea-c50e-5411-8e6f-0287b8ea0718","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.235.178.14","comment":"https://x.com/drb_ra/status/1961062947175694451","timestamp":"1756388816","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"23e21f21-1a76-562c-9690-a95b2c1d1ce4","type":"md5","category":"Payload delivery","to_ids":true,"value":"a8dfcf45d2ced877beb17d4dd41aa4cb","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"412bb0c7-7ae0-5434-b0fb-88ba9aa7d732","type":"md5","category":"Payload delivery","to_ids":true,"value":"c76e5b16c2764e3e3c41fa448d6aa003","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"28a45431-4e6d-5fc9-bb8a-8f41f5a4be83","type":"md5","category":"Payload delivery","to_ids":true,"value":"52d4d7ab56e960e11d82d953f85fd4e5","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"be0dc958-be8f-508f-b7cf-85e67578bcb5","type":"md5","category":"Payload delivery","to_ids":true,"value":"c3a87e89f3cf0be17e70e4cc0327ed6c","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"0729ed7c-14ff-539e-8a6d-33b3e1ddcbc0","type":"md5","category":"Payload delivery","to_ids":true,"value":"cd5f36811ded6568de4deb926194964e","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"315177ce-cc36-5dc6-a01d-833ddf5e49bf","type":"md5","category":"Payload delivery","to_ids":true,"value":"c086885c02a5c195470a6b3eab6700ef","comment":"https://x.com/suyog41/status/1961070752590926231","timestamp":"1756390677","distribution":"5"},{"uuid":"12207655-3b69-5e60-85f6-4d956bd08582","type":"domain","category":"Network activity","to_ids":true,"value":"oceani.fr","comment":"https://x.com/suyog41/status/1961071173011198282","timestamp":"1756390777","distribution":"5"},{"uuid":"9433e2e1-d9bb-56f1-b29e-7920f6d9e880","type":"url","category":"Network activity","to_ids":true,"value":"http://oceani.fr","comment":"https://x.com/suyog41/status/1961071173011198282","timestamp":"1756390777","distribution":"5"},{"uuid":"21754469-8c33-52f3-af32-150093d058d9","type":"md5","category":"Payload delivery","to_ids":true,"value":"4d05ee64311d3d0268976bb1d5b00c3c","comment":"https://x.com/suyog41/status/1961071173011198282","timestamp":"1756390777","distribution":"5"},{"uuid":"35b7e734-5924-58f9-b340-1a16cda08a7a","type":"md5","category":"Payload delivery","to_ids":true,"value":"eab2b2475e115c528c2ffd26b7b1629a","comment":"https://x.com/suyog41/status/1961071173011198282","timestamp":"1756390777","distribution":"5"},{"uuid":"a40b9d13-acf1-5524-8fc0-4a9b706c73b8","type":"domain","category":"Network activity","to_ids":true,"value":"smartwebresolver.pages.dev","comment":"https://x.com/AmberMille78556/status/1961074134730809436","timestamp":"1756391483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"618c2943-df1e-53b1-9c7d-a7fdd7e16ceb","type":"url","category":"Network activity","to_ids":true,"value":"https://smartwebresolver.pages.dev","comment":"https://x.com/AmberMille78556/status/1961074134730809436","timestamp":"1756391483","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb593293-17f5-51d1-845c-f588aa5a9ebe","type":"domain","category":"Network activity","to_ids":true,"value":"hbezrvto.cn","comment":"https://x.com/harugasumi/status/1961090902799315190","timestamp":"1756395481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f76405c-3e10-51b3-b2dc-3bcf266990ff","type":"url","category":"Network activity","to_ids":true,"value":"https://hbezrvto.cn/action/home/request/type=un","comment":"https://x.com/harugasumi/status/1961090902799315190","timestamp":"1756395481","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77aaf680-d906-55d9-9d6f-8e5d3ee2814c","type":"domain","category":"Network activity","to_ids":true,"value":"jiayangfirm.com.tw","comment":"https://x.com/urldna_bot/status/1961096471253516437","timestamp":"1756396808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e48665c7-ccd6-5309-9242-322c3a015e38","type":"url","category":"Network activity","to_ids":true,"value":"http://jiayangfirm.com.tw/public/DROPBOX/DROPBOX/vinc/","comment":"https://x.com/urldna_bot/status/1961096471253516437","timestamp":"1756396808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"916ab9b6-a8f0-53a9-8a88-336704d7ef16","type":"domain","category":"Network activity","to_ids":true,"value":"entel.onl","comment":"https://x.com/mbec03/status/1961106527563256067","timestamp":"1756399206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"235cf211-82f7-5fc9-9465-ac2e6355c52e","type":"url","category":"Network activity","to_ids":true,"value":"http://entel.onl/cl/#/","comment":"https://x.com/mbec03/status/1961106527563256067","timestamp":"1756399206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40d27d70-7a01-59ff-ad0a-1bb52675b43f","type":"domain","category":"Network activity","to_ids":true,"value":"entel.mobi","comment":"https://x.com/mbec03/status/1961106527563256067","timestamp":"1756399206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57170d60-2e62-5501-a567-a26932c5ede1","type":"url","category":"Network activity","to_ids":true,"value":"http://entel.mobi/cl/#/","comment":"https://x.com/mbec03/status/1961106527563256067","timestamp":"1756399206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab250270-4c5a-5e59-9e57-02d0c922ee7d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.253.62.227","comment":"https://x.com/mbec03/status/1961106527563256067","timestamp":"1756399206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6169653-ac3b-5faa-b093-1a258b5fdf58","type":"domain","category":"Network activity","to_ids":true,"value":"mirrored.to","comment":"https://x.com/GhostDecoder/status/1961109218452189630","timestamp":"1756399847","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"6b8b8e5b-3900-514e-985f-370492f2d709","type":"url","category":"Network activity","to_ids":true,"value":"https://www.mirrored.to/files/PFMH0VYI/GhostDZ_***","comment":"https://x.com/GhostDecoder/status/1961109218452189630","timestamp":"1756399847","distribution":"5","Tag":[{"name":"RAT"},{"name":"malware"}]},{"uuid":"d3200b85-4882-530d-8614-ccf10cd8db85","type":"domain","category":"Network activity","to_ids":true,"value":"office3652cougarnetuhedu.weebly.com","comment":"https://x.com/urldna_bot/status/1961126669118226827","timestamp":"1756404008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6addb445-6d8d-58d4-a87d-a99138810f39","type":"url","category":"Network activity","to_ids":true,"value":"https://office3652cougarnetuhedu.weebly.com","comment":"https://x.com/urldna_bot/status/1961126669118226827","timestamp":"1756404008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"27a3bbd5-f44c-5daa-ab63-3ed7c382d4da","type":"domain","category":"Network activity","to_ids":true,"value":"en-trezor-io-login.typedream.app","comment":"https://x.com/Leon4Leon2/status/1961136394736222506","timestamp":"1756406327","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3ca44ac-6b58-50e5-a003-88e0144a0d66","type":"url","category":"Network activity","to_ids":true,"value":"https://en-trezor-io-login.typedream.app/en-us","comment":"https://x.com/Leon4Leon2/status/1961136394736222506","timestamp":"1756406327","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"edcf74fa-2538-54b5-bd04-6956d3d566ed","type":"url","category":"Network activity","to_ids":true,"value":"http://185.208.159.208:4000","comment":"https://x.com/drb_ra/status/1961138391166190044","timestamp":"1756406803","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"e2d62a40-681c-53d3-a9a6-89cf07c11949","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.208.159.208","comment":"https://x.com/drb_ra/status/1961138391166190044","timestamp":"1756406803","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"d6ee0d9e-2a0b-5a96-b75c-f24c8b404f73","type":"url","category":"Network activity","to_ids":true,"value":"http://74.118.80.74:443","comment":"https://x.com/drb_ra/status/1961138528915787898","timestamp":"1756406836","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"46861247-223f-529f-842a-1b1f709b6a29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"74.118.80.74","comment":"https://x.com/drb_ra/status/1961138528915787898","timestamp":"1756406836","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2295eaa4-ea58-5406-8a84-1ff0e3ea5266","type":"url","category":"Network activity","to_ids":true,"value":"http://45.12.254.27:8443","comment":"https://x.com/drb_ra/status/1961138668195787219","timestamp":"1756406869","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7b56b095-1ab5-5ced-a8a5-2074e04ee5c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.12.254.27","comment":"https://x.com/drb_ra/status/1961138668195787219","timestamp":"1756406869","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"8cb36a04-7c3b-58f1-b50d-60cfcc66603f","type":"url","category":"Network activity","to_ids":true,"value":"http://109.123.250.38:5671","comment":"https://x.com/drb_ra/status/1961138763821728066","timestamp":"1756406892","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5cc74c95-6d23-555b-a41e-b87324e64208","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.123.250.38","comment":"https://x.com/drb_ra/status/1961138763821728066","timestamp":"1756406892","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"1f1096e6-9496-521d-be28-806a99266899","type":"url","category":"Network activity","to_ids":true,"value":"https://x.com/SoundlineApp","comment":"https://x.com/malwrhunterteam/status/1961149307832156217","timestamp":"1756409406","distribution":"5"},{"uuid":"bd321b2e-9c87-5b06-a41c-a4fe42af5b50","type":"domain","category":"Network activity","to_ids":true,"value":"inform-01.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1961156882153849287","timestamp":"1756411211","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dfbf5fe0-0696-57f4-8aa5-6510ff3863db","type":"url","category":"Network activity","to_ids":true,"value":"https://inform-01.firebaseapp.com","comment":"https://x.com/urldna_bot/status/1961156882153849287","timestamp":"1756411211","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"45062776-0294-56c8-86fe-b670991d73a7","type":"url","category":"Network activity","to_ids":true,"value":"https://210.16.181.38/api/v1/get","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e3a2a421-b535-598d-b8b8-d008ed86a31e","type":"url","category":"Network activity","to_ids":true,"value":"https://210.16.181.32/api/v1/get","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7ec86597-9687-58d6-ad67-7e5d7305e07c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.17.233:443","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1dc69c13-9756-515e-b385-5d22b67ae922","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.17.233","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e31d1e2a-0a19-5429-a392-a213f3a28fae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.16.181.38","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c28cea97-5421-54e9-9c9a-71914808a59d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"210.16.181.32","comment":"https://x.com/drb_ra/status/1961171903285960957","timestamp":"1756414793","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ac34e960-36e8-5f6b-b589-c68d6df21d9c","type":"url","category":"Network activity","to_ids":true,"value":"http://8.141.123.245","comment":"https://x.com/threatquery/status/1961171952258756938","timestamp":"1756414804","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"1e0184cb-e20a-5d52-ae40-5ef3ef7cd6d6","type":"url","category":"Network activity","to_ids":true,"value":"http://23.249.28.76","comment":"https://x.com/threatquery/status/1961171950442586327","timestamp":"1756414804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"4c91f06b-36c9-54ea-86b4-248c68b4326d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.249.28.76","comment":"https://x.com/threatquery/status/1961171950442586327","timestamp":"1756414804","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"0f81ef4f-b8cc-5cd7-b0c1-cf5ef31ba39c","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.141","comment":"https://x.com/threatquery/status/1961171948567740633","timestamp":"1756414804","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"},{"name":"malware"}]},{"uuid":"9089285c-477f-59cb-9abc-052e6ce70ff5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.141","comment":"https://x.com/threatquery/status/1961171948567740633","timestamp":"1756414804","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"},{"name":"malware"}]},{"uuid":"2a7cb060-4ec7-52bd-8d35-0c8a903f0200","type":"url","category":"Network activity","to_ids":true,"value":"https://172.10.16.129/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1961172005123740060","timestamp":"1756414817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c14ae8cc-2dfd-5df6-b5c6-d9f7ec28fbed","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.237.222/en_US/all.js","comment":"https://x.com/drb_ra/status/1961172005123740060","timestamp":"1756414817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"321221a1-640f-5cbc-a1ec-fc3b1dcc73ee","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.237.199/en_US/all.js","comment":"https://x.com/drb_ra/status/1961172005123740060","timestamp":"1756414817","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1cbacd59-6ae9-5856-bc3e-d1c10a0dbb05","type":"domain","category":"Network activity","to_ids":true,"value":"gmopoilc-activ.duobaosports-app.com","comment":"https://x.com/masaomi346/status/1961184461707776173","timestamp":"1756417787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1bbba495-86d2-582c-b8ae-adbc17311aa3","type":"url","category":"Network activity","to_ids":true,"value":"https://gmopoilc-activ.duobaosports-app.com/jp/","comment":"https://x.com/masaomi346/status/1961184461707776173","timestamp":"1756417787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef4f329e-99d0-5013-9856-8dfe2e793378","type":"domain","category":"Network activity","to_ids":true,"value":"nihonbuy.icu","comment":"https://x.com/masaomi346/status/1961184461707776173","timestamp":"1756417787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"263846d1-e230-5910-b0bf-04aecd9318bf","type":"url","category":"Network activity","to_ids":true,"value":"https://nihonbuy.icu/TJ6RDi/","comment":"https://x.com/masaomi346/status/1961184461707776173","timestamp":"1756417787","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e35cb03-8e2c-5f14-b319-bde0aded1cc1","type":"domain","category":"Network activity","to_ids":true,"value":"irsrefundsc.weebly.com","comment":"https://x.com/urldna_bot/status/1961187055787987117","timestamp":"1756418405","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"97eba32a-7ea3-5d37-9391-395875515c6b","type":"url","category":"Network activity","to_ids":true,"value":"https://irsrefundsc.weebly.com","comment":"https://x.com/urldna_bot/status/1961187055787987117","timestamp":"1756418405","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c9f618a3-0403-5dbe-a4c5-b7a7ffbaf27b","type":"domain","category":"Network activity","to_ids":true,"value":"utfcusecureauth0z7i1.weebly.com","comment":"https://x.com/urldna_bot/status/1961217280957673619","timestamp":"1756425612","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d695fedf-dcd6-5080-af62-b7e8f92e5b3f","type":"url","category":"Network activity","to_ids":true,"value":"https://utfcusecureauth0z7i1.weebly.com","comment":"https://x.com/urldna_bot/status/1961217280957673619","timestamp":"1756425612","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a6fa1c7b-1f59-5821-a1e7-d4d0b045b836","type":"md5","category":"Payload delivery","to_ids":true,"value":"a1e6d2fb310de44a1454007c608b6439","comment":"https://x.com/fbgwls245/status/1961217728951562477","timestamp":"1756425718","distribution":"5"},{"uuid":"088fd235-a8d3-5534-bac5-1c4dd5ba5b43","type":"sha256","category":"Payload delivery","to_ids":true,"value":"cb27ae30a0654bc1cf51d476eeef18eea502c406c1c025142b8d2f7c9cafd8f4","comment":"https://x.com/fbgwls245/status/1961223789431460270","timestamp":"1756427163","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"72042e2b-df7c-5a7b-8c2b-5c013b5327fb","type":"url","category":"Network activity","to_ids":true,"value":"http://162.243.204.23:5050","comment":"https://x.com/SarlackLab/status/1961232403399069785","timestamp":"1756429217","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"8f90f1a3-c5a8-5b81-9291-b9fc672a7490","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.243.204.23","comment":"https://x.com/SarlackLab/status/1961232403399069785","timestamp":"1756429217","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ccee8afe-8601-5304-bad5-33e14eca8ab1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.214.45","comment":"https://x.com/Metemcyber/status/1961241151660593639","timestamp":"1756431303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0cbb411f-275e-5d92-a128-78e8719a504d","type":"url","category":"Network activity","to_ids":true,"value":"https://mastercard-waster.manmbbb.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1961241151660593639","timestamp":"1756431303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1dfa152a-ede1-5a55-b472-becbe129531d","type":"domain","category":"Network activity","to_ids":true,"value":"mastercard-waster.manmbbb.cn","comment":"https://x.com/Metemcyber/status/1961241151660593639","timestamp":"1756431303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"432b0882-9707-5892-b8c0-3b4dcb754ef1","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.23.241","comment":"https://x.com/Metemcyber/status/1961241151660593639","timestamp":"1756431303","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5457e54c-8427-5df8-8369-3b051e8110f1","type":"domain","category":"Network activity","to_ids":true,"value":"dhl-teletake.nuoshuan.cn","comment":"https://x.com/Metemcyber/status/1961243064707785203","timestamp":"1756431759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99b22db9-6110-55b3-b72b-423f60feffd8","type":"url","category":"Network activity","to_ids":true,"value":"https://dhl-teletake.nuoshuan.cn/portal_login_exp/getQuoteTab/","comment":"https://x.com/Metemcyber/status/1961243064707785203","timestamp":"1756431759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e652f110-f6a9-52e9-b1a0-5fbc35655fdf","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.11.149","comment":"https://x.com/Metemcyber/status/1961243064707785203","timestamp":"1756431759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e7210fd7-058b-5036-905a-1cf35fc3068a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.166.91","comment":"https://x.com/Metemcyber/status/1961243064707785203","timestamp":"1756431759","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51c3318d-6a29-5379-ad46-c91e7c23b434","type":"url","category":"Network activity","to_ids":true,"value":"https://knewlog.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84104d47-2a21-5a0b-a012-b20fb169cc7d","type":"url","category":"Network activity","to_ids":true,"value":"https://lihuawang.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f76c2cb5-d6c7-53bd-9467-9a4d3ec1e22c","type":"domain","category":"Network activity","to_ids":true,"value":"lihuawang.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6dc9129-c121-58da-b195-d94c2849ab15","type":"domain","category":"Network activity","to_ids":true,"value":"knewlog.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"807f20f4-b899-545c-be1b-d76c3fdfbc0e","type":"domain","category":"Network activity","to_ids":true,"value":"fananba.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbeaa4a0-c412-5657-8ebc-271c1740435f","type":"url","category":"Network activity","to_ids":true,"value":"https://fananba.cn","comment":"https://x.com/Metemcyber/status/1961245560616489199","timestamp":"1756432354","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf17a554-68c7-5b9b-a8ee-75a22de68200","type":"domain","category":"Network activity","to_ids":true,"value":"klkpobh.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f82831a-fa0f-58c2-b54f-6cd42c9fb71c","type":"url","category":"Network activity","to_ids":true,"value":"https://klkpobh.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c8f0fa2-2f29-5648-a3ad-22edf7868254","type":"domain","category":"Network activity","to_ids":true,"value":"liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23c4a4c4-d198-52ad-82a6-77d3056a5266","type":"url","category":"Network activity","to_ids":true,"value":"https://liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1961245628173803871","timestamp":"1756432370","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2cef9831-ce6c-52f1-b12e-0d7bff5a64b2","type":"url","category":"Network activity","to_ids":true,"value":"https://fishnew.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"52c5710d-fde0-577d-81ac-9f59ca7932a7","type":"domain","category":"Network activity","to_ids":true,"value":"fishnew.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d9f4315-f5ef-5df7-bd3f-b34da2ac2c95","type":"url","category":"Network activity","to_ids":true,"value":"https://duolalife.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0233d1e4-9eb3-5999-a83e-b5d50041af23","type":"domain","category":"Network activity","to_ids":true,"value":"duolalife.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/Metemcyber/status/1961245710029852809","timestamp":"1756432390","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba4906bd-c0bf-522b-a315-6f5f86d25619","type":"url","category":"Network activity","to_ids":true,"value":"https://fubolai.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffb12536-9c5f-5325-930b-51289275d8d3","type":"domain","category":"Network activity","to_ids":true,"value":"fubolai.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3786faa-e05d-5e67-9580-dcb5d7abba56","type":"domain","category":"Network activity","to_ids":true,"value":"hackwps.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e52bb16-081b-57c1-b7d9-1419899ab5a8","type":"url","category":"Network activity","to_ids":true,"value":"https://hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9bc2cb56-c538-524c-bbf6-e1ea4bc937f4","type":"domain","category":"Network activity","to_ids":true,"value":"hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9085948-103e-53dd-9cf6-e2953aaf7357","type":"url","category":"Network activity","to_ids":true,"value":"https://hackwps.cn","comment":"https://x.com/Metemcyber/status/1961245786412339285","timestamp":"1756432408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7854665c-c66f-5726-9702-cced8183f045","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.179.128","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80da2721-b46f-5a98-8e05-1fe0dfd2a316","type":"domain","category":"Network activity","to_ids":true,"value":"hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7482a3cf-27d2-5b43-ac12-011784093978","type":"url","category":"Network activity","to_ids":true,"value":"https://hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bda2eac4-7b8b-52d5-b8c9-67d94fb45a8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.179.128","comment":"https://x.com/Metemcyber/status/1961245853286351349","timestamp":"1756432424","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad0b2082-e16b-5a1b-b716-a5509f3901b6","type":"url","category":"Network activity","to_ids":true,"value":"http://emrarealestate.com/wp-includes/blocks/audio/sf/sf_marley/sf_marley/?email=impfreight@slurpmail.net","comment":"https://x.com/urldna_bot/status/1961247465744548007","timestamp":"1756432808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a1b4c56a-555c-53fb-a8e2-d1444c505c7d","type":"domain","category":"Network activity","to_ids":true,"value":"emrarealestate.com","comment":"https://x.com/urldna_bot/status/1961247465744548007","timestamp":"1756432808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6b689ed7-2fd2-566a-856b-4a1815d6f09e","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.97.184","comment":"https://x.com/RussianPanda9xx/status/1961263759110148511","timestamp":"1756436693","distribution":"5"},{"uuid":"0d012860-e17c-5244-bb8a-446965349e67","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.97.184","comment":"https://x.com/RussianPanda9xx/status/1961263759110148511","timestamp":"1756436693","distribution":"5"},{"uuid":"cd48ffa5-b1d6-58df-ba6b-4bf17075ae43","type":"domain","category":"Network activity","to_ids":true,"value":"xtarverications.weebly.com","comment":"https://x.com/urldna_bot/status/1961277674598404582","timestamp":"1756440011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"816939cf-9d8b-543f-9270-37f2f27fbbd1","type":"url","category":"Network activity","to_ids":true,"value":"https://xtarverications.weebly.com","comment":"https://x.com/urldna_bot/status/1961277674598404582","timestamp":"1756440011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c48f9442-40da-508d-8ab8-1cfbb0ec18f8","type":"url","category":"Network activity","to_ids":true,"value":"https://authlobby.site","comment":"https://x.com/ShadowChasing1/status/1961277847580156049","timestamp":"1756440052","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"659480bb-d84e-560a-a37f-6b89b6afbd50","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e44f8592680fd14373a51b9667c6e6e4ca47f84d16c1437e20d4d1bea2c6bfee","comment":"https://x.com/ShadowChasing1/status/1961277847580156049","timestamp":"1756440052","distribution":"5"},{"uuid":"6668d537-e8ae-55e8-9559-9a1e4a8fbdd1","type":"domain","category":"Network activity","to_ids":true,"value":"authlobby.site","comment":"https://x.com/ShadowChasing1/status/1961277847580156049","timestamp":"1756440052","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"b6e2557e-9053-5534-9a76-31acff643e7f","type":"domain","category":"Network activity","to_ids":true,"value":"info-guest44567645.com","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"ad091cf0-8ed6-55f0-b01c-0d50c173bb03","type":"url","category":"Network activity","to_ids":true,"value":"http://info-guest44567645.com","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"ad67f7b2-9535-52d6-8ffe-4b1ebc9fcef5","type":"domain","category":"Network activity","to_ids":true,"value":"bilaskf.com","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"b20065b0-842f-52e1-8159-47ec08c63e05","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/upd","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"a1fc4c19-0fb2-547d-9238-c172236582e4","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/dllstart","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"ff2e55f0-7a89-52ac-978f-4edf2652f1cb","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/apif/a/a","comment":"https://x.com/JAMESWT_WT/status/1961292003620102532","timestamp":"1756443427","distribution":"5"},{"uuid":"34a36b15-942a-5cf3-a1c0-da7b56199336","type":"md5","category":"Payload delivery","to_ids":true,"value":"6701b9c595aeded4b1c2ff8d3b7bf44e","comment":"https://x.com/suyog41/status/1961305792210244037","timestamp":"1756446714","distribution":"5"},{"uuid":"2f39e584-a4f8-595e-ba7f-363ed88e8af6","type":"md5","category":"Payload delivery","to_ids":true,"value":"ada5bd37afdc7286a9adbda6af3ef56f","comment":"https://x.com/suyog41/status/1961305792210244037","timestamp":"1756446714","distribution":"5"},{"uuid":"3c7afaa8-c88a-56bd-955f-b09ec6b543a1","type":"md5","category":"Payload delivery","to_ids":true,"value":"22e1660a28f0e642e68b37939c7ba232","comment":"https://x.com/suyog41/status/1961305792210244037","timestamp":"1756446714","distribution":"5"},{"uuid":"9106411a-ec36-5420-8836-a199c35890e7","type":"md5","category":"Payload delivery","to_ids":true,"value":"6d7381cfb93877f3fd8522a91ffd7674","comment":"https://x.com/suyog41/status/1961305792210244037","timestamp":"1756446714","distribution":"5"},{"uuid":"312d20ba-0472-52a2-837c-fe08ad2db9db","type":"md5","category":"Payload delivery","to_ids":true,"value":"8e9c4ef77fb525142bce8a47671ff6ac","comment":"https://x.com/suyog41/status/1961305792210244037","timestamp":"1756446714","distribution":"5"},{"uuid":"1ceba1bc-ec4a-52e8-834a-6a0aa01e85e0","type":"url","category":"Network activity","to_ids":true,"value":"http://www.kanny.com.vn/wordpress/wp-content/particuliers/aces/particulier/loginform3ad6.php","comment":"https://x.com/urldna_bot/status/1961307862841303508","timestamp":"1756447208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cfa1c3f1-d12b-50bb-b893-72e668686eed","type":"domain","category":"Network activity","to_ids":true,"value":"kanny.com.vn","comment":"https://x.com/urldna_bot/status/1961307862841303508","timestamp":"1756447208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"efd66ef7-abdd-52e7-ba39-5a0baf404959","type":"md5","category":"Payload delivery","to_ids":true,"value":"25968df34eab5b2f732e42be9a8f3166","comment":"https://x.com/ReBensk/status/1961311549764829260","timestamp":"1756448087","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"af8c2ac8-df53-5816-9c01-ec59f8e324b1","type":"domain","category":"Network activity","to_ids":true,"value":"visa-lamino.liangwenqi.cn","comment":"https://x.com/Metemcyber/status/1961313889809039594","timestamp":"1756448645","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c266442-7e12-5586-b51d-b2c3a1a24222","type":"url","category":"Network activity","to_ids":true,"value":"https://visa-lamino.liangwenqi.cn/pay-with-featured/","comment":"https://x.com/Metemcyber/status/1961313889809039594","timestamp":"1756448645","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c2fb7c5-34e6-597c-bf0e-78a3065a065c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.196.186","comment":"https://x.com/Metemcyber/status/1961313889809039594","timestamp":"1756448645","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ab12886-e560-5ce6-ae96-708cb7c7f54f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.41.237","comment":"https://x.com/Metemcyber/status/1961313889809039594","timestamp":"1756448645","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"63d412b4-ca10-5e35-8ed8-889fd60f4865","type":"url","category":"Network activity","to_ids":true,"value":"https://conio.com.en.salomas.cv/cloud","comment":"https://x.com/JAMESWT_WT/status/1961314234815410290","timestamp":"1756448727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcaf6c7b-967a-5f40-83a9-a59fec519414","type":"domain","category":"Network activity","to_ids":true,"value":"conio.com.en.salomas.cv","comment":"https://x.com/JAMESWT_WT/status/1961314234815410290","timestamp":"1756448727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f373b2d-aefd-5c0a-88ae-ab99953fcdb9","type":"url","category":"Network activity","to_ids":true,"value":"https://boxfredeoma.s3.eu-north-1.amazonaws.com/mandilafrecha.html","comment":"https://x.com/JAMESWT_WT/status/1961314234815410290","timestamp":"1756448727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be1d0ea7-3178-54ae-aa32-57ed8f389ffb","type":"domain","category":"Network activity","to_ids":true,"value":"boxfredeoma.s3.eu-north-1.amazonaws.com","comment":"https://x.com/JAMESWT_WT/status/1961314234815410290","timestamp":"1756448727","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19f233d5-a4f6-53f5-9367-452b31bda1b0","type":"domain","category":"Network activity","to_ids":true,"value":"sakurago.icu","comment":"https://x.com/Metemcyber/status/1961316652823580844","timestamp":"1756449304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"330c3466-5207-50b3-ba3e-ac837382fa1c","type":"url","category":"Network activity","to_ids":true,"value":"https://sakurago.icu/TJ6RDi/","comment":"https://x.com/Metemcyber/status/1961316652823580844","timestamp":"1756449304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d07de5bb-673c-5fcc-b067-4e4ccc65e220","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.172.29","comment":"https://x.com/Metemcyber/status/1961316652823580844","timestamp":"1756449304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c63023af-0bb8-5d6b-b3d9-3c29360108e6","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.55.183","comment":"https://x.com/Metemcyber/status/1961316652823580844","timestamp":"1756449304","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea7cfb77-e13b-5137-ae68-e001a9ef71af","type":"url","category":"Network activity","to_ids":true,"value":"https://accedi-server-plansellait.parrocchiasambruson.it/manage/pagamento.php","comment":"https://x.com/JAMESWT_WT/status/1961316755055276176","timestamp":"1756449328","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3b4e73d-ac0f-554c-a3e6-78c858dea208","type":"domain","category":"Network activity","to_ids":true,"value":"accedi-server-plansellait.parrocchiasambruson.it","comment":"https://x.com/JAMESWT_WT/status/1961316755055276176","timestamp":"1756449328","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f24643a-1be2-5187-ab53-a2316fc1d3b4","type":"domain","category":"Network activity","to_ids":true,"value":"studiociuffetelli.com","comment":"https://x.com/JAMESWT_WT/status/1961316755055276176","timestamp":"1756449328","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6599807-9c32-5b75-9fc9-22d60a95941c","type":"url","category":"Network activity","to_ids":true,"value":"https://studiociuffetelli.com/?45NVN=45VBV","comment":"https://x.com/JAMESWT_WT/status/1961316755055276176","timestamp":"1756449328","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09623e9d-9dc9-5d0d-abde-3898f08f737c","type":"url","category":"Network activity","to_ids":true,"value":"http://84.252.95.68:31337","comment":"https://x.com/drb_ra/status/1961319218852274440","timestamp":"1756449915","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6c4a107a-c488-59f4-8f4d-f1c0a9aaff53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.252.95.68","comment":"https://x.com/drb_ra/status/1961319218852274440","timestamp":"1756449915","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"20c0716a-10b1-5538-b08a-1c1d2bb0c478","type":"url","category":"Network activity","to_ids":true,"value":"http://91.229.239.115:31337","comment":"https://x.com/drb_ra/status/1961319252511580268","timestamp":"1756449924","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bc3a5d35-8e1c-55ac-882b-95fb66a12a83","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.229.239.115","comment":"https://x.com/drb_ra/status/1961319252511580268","timestamp":"1756449924","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3372ed2f-8b93-5169-afae-5c625be4dc87","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.80.159","comment":"https://x.com/Metemcyber/status/1961319722001248587","timestamp":"1756450035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e4d6276-56f3-5684-b511-2c32991446a8","type":"domain","category":"Network activity","to_ids":true,"value":"www-sblsec-co-jp.ernesthamblin.com","comment":"https://x.com/Metemcyber/status/1961319722001248587","timestamp":"1756450035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb787774-78ec-56cc-af8e-2a507082104e","type":"url","category":"Network activity","to_ids":true,"value":"https://www-sblsec-co-jp.ernesthamblin.com/ETGate/","comment":"https://x.com/Metemcyber/status/1961319722001248587","timestamp":"1756450035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b8683bd-b75d-5491-a8a5-04148acbf05d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.151.117","comment":"https://x.com/Metemcyber/status/1961319722001248587","timestamp":"1756450035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"908a4db9-75a9-517e-8974-1453e85a902e","type":"domain","category":"Network activity","to_ids":true,"value":"binancevi.com","comment":"https://x.com/AmberMille78556/status/1961325230871203983","timestamp":"1756451349","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eda07539-ce02-58a6-8028-3e94d2f59cc8","type":"url","category":"Network activity","to_ids":true,"value":"http://binancevi.com","comment":"https://x.com/AmberMille78556/status/1961325230871203983","timestamp":"1756451349","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"833ed31b-6e07-5093-ac46-949c6b41d715","type":"md5","category":"Payload delivery","to_ids":true,"value":"5b6e0a1d32407cafb8aea03ebb57bd6e","comment":"https://x.com/ShanHolo/status/1961335898328461652","timestamp":"1756453892","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"1522e6e1-d6e7-5b36-a827-425e945294f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.233.164.129","comment":"https://x.com/ShanHolo/status/1961335898328461652","timestamp":"1756453892","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"4e079eb4-7a18-5fb4-b09f-f3e675ba0a6e","type":"md5","category":"Payload delivery","to_ids":true,"value":"9c4696c8d9a72d26f8b78a6e7f287e59","comment":"https://x.com/ShanHolo/status/1961335898328461652","timestamp":"1756453892","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"68c390ff-5da9-54c9-b847-423fd9a1575e","type":"url","category":"Network activity","to_ids":true,"value":"http://5.133.102.214","comment":"https://x.com/ShanHolo/status/1961335898328461652","timestamp":"1756453892","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"aaaeb103-f00f-5157-83e6-b35b4b1426e5","type":"url","category":"Network activity","to_ids":true,"value":"http://185.233.164.129","comment":"https://x.com/ShanHolo/status/1961335898328461652","timestamp":"1756453892","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"eb25b4fa-1024-5bb5-ba3a-9c040f1fe0c1","type":"url","category":"Network activity","to_ids":true,"value":"https://wakeupanddreamchallenge.info","comment":"https://x.com/urldna_bot/status/1961338072735359072","timestamp":"1756454411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f9964f18-2f15-5275-80e4-16eb40f76ef2","type":"domain","category":"Network activity","to_ids":true,"value":"wakeupanddreamchallenge.info","comment":"https://x.com/urldna_bot/status/1961338072735359072","timestamp":"1756454411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2ee5df1f-5707-5526-a54f-7550f5c86cc7","type":"domain","category":"Network activity","to_ids":true,"value":"ideal-bau.de","comment":"https://x.com/skocherhan/status/1961340544962961514","timestamp":"1756455000","distribution":"5"},{"uuid":"576f4132-69a2-590f-ba54-6aa4d9aafd4c","type":"url","category":"Network activity","to_ids":true,"value":"http://ideal-bau.de","comment":"https://x.com/skocherhan/status/1961340544962961514","timestamp":"1756455000","distribution":"5"},{"uuid":"122d1016-5141-569b-8b80-9197049a0c75","type":"domain","category":"Network activity","to_ids":true,"value":"sanjivanihospitalpune.com","comment":"https://x.com/skocherhan/status/1961340544962961514","timestamp":"1756455000","distribution":"5"},{"uuid":"9b8894fb-6903-5475-b89d-ced0357bbe7d","type":"url","category":"Network activity","to_ids":true,"value":"http://sanjivanihospitalpune.com","comment":"https://x.com/skocherhan/status/1961340544962961514","timestamp":"1756455000","distribution":"5"},{"uuid":"5bcd1561-f716-528a-af23-05f46ddf0878","type":"domain","category":"Network activity","to_ids":true,"value":"familie-pankowski.de","comment":"https://x.com/skocherhan/status/1961340592513818910","timestamp":"1756455011","distribution":"5"},{"uuid":"c699bcde-740a-5713-b814-0f5be911f562","type":"url","category":"Network activity","to_ids":true,"value":"http://familie-pankowski.de","comment":"https://x.com/skocherhan/status/1961340592513818910","timestamp":"1756455011","distribution":"5"},{"uuid":"072792cd-db30-5a4d-93d1-3749196847a2","type":"md5","category":"Payload delivery","to_ids":true,"value":"dedf4babbcd571e959ae09f3119e8f46","comment":"https://x.com/skocherhan/status/1961340592513818910","timestamp":"1756455011","distribution":"5"},{"uuid":"82e95b30-56f1-5214-b447-78294ad51284","type":"md5","category":"Payload delivery","to_ids":true,"value":"058eeb1315b354ac63b4fa22951c3f4b","comment":"https://x.com/skocherhan/status/1961340592513818910","timestamp":"1756455011","distribution":"5"},{"uuid":"9d1fd276-e33b-5c80-a416-a64e1079ff67","type":"md5","category":"Payload delivery","to_ids":true,"value":"f5f3258e0ba84d3f5b3c1bc40a6335c6","comment":"https://x.com/skocherhan/status/1961340613967655041","timestamp":"1756455016","distribution":"5","Tag":[{"name":"APT"},{"name":"phishing"}]},{"uuid":"4b76a1b6-a169-5697-907d-4ebabc1a17d0","type":"domain","category":"Network activity","to_ids":true,"value":"homeapplianceaid.com","comment":"https://x.com/urldna_bot/status/1961368271174660284","timestamp":"1756461610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fe6794b2-c0f1-5a1b-b63e-1b9e2042681c","type":"url","category":"Network activity","to_ids":true,"value":"https://homeapplianceaid.com/robot/","comment":"https://x.com/urldna_bot/status/1961368271174660284","timestamp":"1756461610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"df7532eb-be5e-596b-a1ab-49f666eaa663","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.19.69:6400","comment":"https://x.com/SarlackLab/status/1961383432807764283","timestamp":"1756465225","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"d2d4a578-857b-590c-a842-78d7745467c8","type":"domain","category":"Network activity","to_ids":true,"value":"dreem.linkpc.net","comment":"https://x.com/SarlackLab/status/1961383432807764283","timestamp":"1756465225","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"727283aa-9e1a-5df8-bf2b-95029d97ea6e","type":"url","category":"Network activity","to_ids":true,"value":"http://dreem.linkpc.net","comment":"https://x.com/SarlackLab/status/1961383432807764283","timestamp":"1756465225","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"cfb7e4c9-e76d-5cc9-9217-e618fb9de044","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.19.69","comment":"https://x.com/SarlackLab/status/1961383432807764283","timestamp":"1756465225","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"185dd4ba-641e-51c4-9052-5a417860e147","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.72.162.60","comment":"https://x.com/SarlackLab/status/1961383474905919559","timestamp":"1756465235","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"972d9353-4fe2-5dc0-8b40-803118b01c9a","type":"url","category":"Network activity","to_ids":true,"value":"http://meliodas777.zapto.org","comment":"https://x.com/SarlackLab/status/1961383474905919559","timestamp":"1756465235","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"d19bc58f-4652-512a-a50d-04c0b510d333","type":"url","category":"Network activity","to_ids":true,"value":"http://76.72.162.60:1177","comment":"https://x.com/SarlackLab/status/1961383474905919559","timestamp":"1756465235","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"a431542f-cd1c-56a6-bb7d-1ee96418741b","type":"domain","category":"Network activity","to_ids":true,"value":"meliodas777.zapto.org","comment":"https://x.com/SarlackLab/status/1961383474905919559","timestamp":"1756465235","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"b6ab9ab3-1188-5770-a9a5-fdb250232bca","type":"domain","category":"Network activity","to_ids":true,"value":"20250829131540.zip","comment":"https://x.com/harugasumi/status/1961389187686690840","timestamp":"1756466597","distribution":"5"},{"uuid":"5712261e-b729-50d9-881b-f42668ce1f32","type":"url","category":"Network activity","to_ids":true,"value":"http://20250829131540.zip","comment":"https://x.com/harugasumi/status/1961389187686690840","timestamp":"1756466597","distribution":"5"},{"uuid":"ee7464b2-3727-5c91-92cd-8bfa670c7255","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.59.88.92","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"151747d1-e414-5fee-9983-8b23f07185b3","type":"url","category":"Network activity","to_ids":true,"value":"http://15.228.243.194:2404","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"59dc838d-818a-5f7a-93fb-eef2c7fdf1b3","type":"url","category":"Network activity","to_ids":true,"value":"http://200.59.83.66:49074","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"90686331-e632-513a-a92e-dd3dc1c5401a","type":"url","category":"Network activity","to_ids":true,"value":"http://200.59.88.92:59783","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"90f65302-d6e3-50bb-a514-854bddfc1e0c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.228.243.194","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"f328343d-951b-5455-b8c3-1f1699179208","type":"ip-dst","category":"Network activity","to_ids":true,"value":"200.59.83.66","comment":"https://x.com/FalconFeedsio/status/1961394689703301141","timestamp":"1756467909","distribution":"5"},{"uuid":"1d0cb5d8-1d70-57c9-8ae8-b79fae2706b9","type":"domain","category":"Network activity","to_ids":true,"value":"365.505-606-707-808-909.canvbot.cn","comment":"https://x.com/urldna_bot/status/1961398463595176075","timestamp":"1756468809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ab5c5f7e-9a38-5343-8653-a3572fcf7b7a","type":"url","category":"Network activity","to_ids":true,"value":"https://365.505-606-707-808-909.canvbot.cn/xinym/","comment":"https://x.com/urldna_bot/status/1961398463595176075","timestamp":"1756468809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"35ca41c5-0ca7-59cc-9be9-9796cc31fef2","type":"domain","category":"Network activity","to_ids":true,"value":"anhc-leak.org","comment":"https://x.com/0x6rss/status/1961405852230853005","timestamp":"1756470570","distribution":"5"},{"uuid":"ab6bb240-c3c0-58db-aa0f-e49062fb37bc","type":"url","category":"Network activity","to_ids":true,"value":"https://anhc-leak.org","comment":"https://x.com/0x6rss/status/1961405852230853005","timestamp":"1756470570","distribution":"5"},{"uuid":"84d61104-4df6-55d2-bb2e-21f3211b08bf","type":"domain","category":"Network activity","to_ids":true,"value":"zqy.asia","comment":"https://x.com/masaomi346/status/1961413018920914953","timestamp":"1756472279","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01576bfe-3fa3-525a-ac0c-9008c8b47354","type":"url","category":"Network activity","to_ids":true,"value":"https://zqy.asia/shuiguo/","comment":"https://x.com/masaomi346/status/1961413018920914953","timestamp":"1756472279","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b33f2d47-7c5f-512f-be62-45a66d9f420e","type":"url","category":"Network activity","to_ids":true,"value":"http://s3.us-east-2.amazonaws.com/leoomainball.com/index.html?email=ZXNvcmlhbEBob2xkZXIuY29t","comment":"https://x.com/urldna_bot/status/1961428668892254223","timestamp":"1756476010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0f6ced20-bdbb-50fc-864f-eead0e5eefe6","type":"url","category":"Network activity","to_ids":true,"value":"https://www.areariservata-ing.info/LiVm7v-4s1zojM/index.html","comment":"https://x.com/JAMESWT_WT/status/1961445772676804931","timestamp":"1756480088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f53dc9e1-67ed-5b4d-a85e-ebac1959dc8e","type":"domain","category":"Network activity","to_ids":true,"value":"areariservata-ing.info","comment":"https://x.com/JAMESWT_WT/status/1961445772676804931","timestamp":"1756480088","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c176595-1341-5825-b664-8a7f09ece70f","type":"domain","category":"Network activity","to_ids":true,"value":"bedramatreez.store","comment":"https://x.com/JAMESWT_WT/status/1961448088410693857","timestamp":"1756480640","distribution":"5"},{"uuid":"e78c74bb-bf5a-5522-aee7-5d5f29759d3c","type":"url","category":"Network activity","to_ids":true,"value":"https://bedramatreez.store/wtx02/wt.php","comment":"https://x.com/JAMESWT_WT/status/1961448088410693857","timestamp":"1756480640","distribution":"5"},{"uuid":"f40049c6-248f-5699-b273-6360a62fd536","type":"domain","category":"Network activity","to_ids":true,"value":"superduperince.ru","comment":"https://x.com/JAMESWT_WT/status/1961448088410693857","timestamp":"1756480640","distribution":"5"},{"uuid":"202a18bf-1b08-5e3c-a9c0-7462e8dd1742","type":"url","category":"Network activity","to_ids":true,"value":"http://superduperince.ru/.746","comment":"https://x.com/JAMESWT_WT/status/1961448088410693857","timestamp":"1756480640","distribution":"5"},{"uuid":"391096e0-872f-5f10-82f9-d05b0bb82ae3","type":"domain","category":"Network activity","to_ids":true,"value":"mauasas35safael1.duckdns.org","comment":"https://x.com/JAMESWT_WT/status/1961469582939414657","timestamp":"1756485765","distribution":"5"},{"uuid":"1b37e3af-d0d2-5daf-a439-928f83d5ff94","type":"url","category":"Network activity","to_ids":true,"value":"http://mauasas35safael1.duckdns.org","comment":"https://x.com/JAMESWT_WT/status/1961469582939414657","timestamp":"1756485765","distribution":"5"},{"uuid":"a8d91882-be7d-55e3-a2fc-dad923152d56","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/olekfribel/test_repo111","comment":"https://x.com/RussianPanda9xx/status/1961486881537105976","timestamp":"1756489889","distribution":"5"},{"uuid":"e79d4db2-38da-58cd-8f01-7a97035bc2d4","type":"domain","category":"Network activity","to_ids":true,"value":"cmc-gomall.sbs","comment":"https://x.com/urldna_bot/status/1961489055683645934","timestamp":"1756490408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cee21887-bc0f-5e00-8510-caf9d498a1cc","type":"url","category":"Network activity","to_ids":true,"value":"https://cmc-gomall.sbs","comment":"https://x.com/urldna_bot/status/1961489055683645934","timestamp":"1756490408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"dfcc2eab-4b35-5a2f-a1e2-c208f938236f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.88.114.196","comment":"https://x.com/wavellan/status/1961499839382093838","timestamp":"1756492979","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"dbd7ed40-cea7-50d0-ada7-656d9c6bd5e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"145.82.185.205","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"6ef4d7c3-0df2-5c54-a9bb-fe365cd17978","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.242.230.250","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"cbb12655-a373-582b-985e-511b0993cda1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.153.124.230","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"86e4a70e-52e7-52d4-8e03-e4b361e0aafa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.16.12","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"6090d5c8-4d30-577b-b95e-d265fcebeb9e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.16.12:443","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"d315f4b4-adde-5912-9401-41237602c7a7","type":"url","category":"Network activity","to_ids":true,"value":"http://38.242.230.250:8808","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"2a3ddef8-0225-5214-845f-8e1dd85fc942","type":"url","category":"Network activity","to_ids":true,"value":"http://45.153.124.230:8080","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"9736e4d9-9e6d-5b9d-9788-9d44e1d9e707","type":"url","category":"Network activity","to_ids":true,"value":"http://145.82.185.205","comment":"https://x.com/FalconFeedsio/status/1961516481428045955","timestamp":"1756496947","distribution":"5"},{"uuid":"1e366d11-3953-57f3-b9b1-84600229fe88","type":"domain","category":"Network activity","to_ids":true,"value":"meine-sicherheitshinweis.web.app","comment":"https://x.com/urldna_bot/status/1961519254659842220","timestamp":"1756497608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cf1619d1-f34a-5786-82e1-e132bccb567e","type":"url","category":"Network activity","to_ids":true,"value":"https://meine-sicherheitshinweis.web.app","comment":"https://x.com/urldna_bot/status/1961519254659842220","timestamp":"1756497608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2814305a-75c7-59ef-ba64-7e10c1520f74","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.204.37","comment":"https://x.com/drb_ra/status/1961534277277163943","timestamp":"1756501189","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"973cd813-b277-5d69-b0e7-4bd7153bf803","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.204.37:443","comment":"https://x.com/drb_ra/status/1961534277277163943","timestamp":"1756501189","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83079dbc-be22-5590-9829-f3802786304e","type":"domain","category":"Network activity","to_ids":true,"value":"scan.daztar.com","comment":"https://x.com/drb_ra/status/1961534277277163943","timestamp":"1756501189","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"855750b2-a167-51d4-9273-ac6fe1ecaf04","type":"url","category":"Network activity","to_ids":true,"value":"https://scan.daztar.com/images/04.png","comment":"https://x.com/drb_ra/status/1961534277277163943","timestamp":"1756501189","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d80c446-effe-5654-a768-06bacc46dbd7","type":"url","category":"Network activity","to_ids":true,"value":"http://44.209.100.103","comment":"https://x.com/threatquery/status/1961534341403562061","timestamp":"1756501205","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"2a2c3ac4-c16e-563f-82f1-cb8c7b4cdc3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.209.100.103","comment":"https://x.com/threatquery/status/1961534341403562061","timestamp":"1756501205","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"a3d3080a-b7b2-5b9d-9caa-c038667cb3f5","type":"url","category":"Network activity","to_ids":true,"value":"http://34.47.220.91","comment":"https://x.com/threatquery/status/1961534343144198383","timestamp":"1756501205","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"f4f8666d-1cd1-59c3-9ed5-e0daa9a58142","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.105.98.64","comment":"https://x.com/threatquery/status/1961534345052631502","timestamp":"1756501206","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"7324d3cd-d383-5f55-9910-c0d23f48060e","type":"url","category":"Network activity","to_ids":true,"value":"http://186.105.98.64","comment":"https://x.com/threatquery/status/1961534345052631502","timestamp":"1756501206","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Qakbot"}]},{"uuid":"8b3dbe4c-3796-5211-b4e1-681bb2bcde32","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.187.223","comment":"https://x.com/drb_ra/status/1961534419690557454","timestamp":"1756501223","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7ae5c27-3ea8-5e71-90d7-c044ccf8e1a4","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.187.223:443","comment":"https://x.com/drb_ra/status/1961534419690557454","timestamp":"1756501223","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88818170-4850-53c9-9257-db8c56694a0f","type":"domain","category":"Network activity","to_ids":true,"value":"n3.google-analytcis.com","comment":"https://x.com/drb_ra/status/1961534840081207426","timestamp":"1756501324","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"66c50b3d-7ba1-507b-8f09-c35a31d48c0b","type":"url","category":"Network activity","to_ids":true,"value":"https://n3.google-analytcis.com/assets/i18n/js/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961534840081207426","timestamp":"1756501324","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bc712fa4-9477-599f-970d-ba93142a4799","type":"domain","category":"Network activity","to_ids":true,"value":"n2.google-analytcis.com","comment":"https://x.com/drb_ra/status/1961534980896821289","timestamp":"1756501357","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c86f9605-ba58-56b9-9c8c-9d446558f776","type":"url","category":"Network activity","to_ids":true,"value":"https://n2.google-analytcis.com/assets/i18n/js/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961534980896821289","timestamp":"1756501357","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0272c596-e804-5b4c-8dee-eed85dee1ed4","type":"url","category":"Network activity","to_ids":true,"value":"http://43.199.78.142:53","comment":"https://x.com/drb_ra/status/1961535119912833122","timestamp":"1756501390","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1ea6d2e9-b55b-52a4-bd6a-6316f5be5dbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.199.78.142","comment":"https://x.com/drb_ra/status/1961535119912833122","timestamp":"1756501390","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"af2cd978-e91f-5e0a-b350-bffc21181a26","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.pakistancode.com/rp/n21aGRCN5EKHB3qObygw029dyNU.br.js","comment":"https://x.com/drb_ra/status/1961535261839368434","timestamp":"1756501424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1d3be528-5b08-584f-badf-81e0aa16abfd","type":"url","category":"Network activity","to_ids":true,"value":"http://165.154.230.180:53","comment":"https://x.com/drb_ra/status/1961535261839368434","timestamp":"1756501424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"076100f4-38e8-5673-9840-f1c77b835a31","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.154.230.180","comment":"https://x.com/drb_ra/status/1961535261839368434","timestamp":"1756501424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d0680981-5ff0-5020-bfd5-d4faada40bbf","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.pakistancode.com","comment":"https://x.com/drb_ra/status/1961535261839368434","timestamp":"1756501424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2065b2b7-befc-5e9c-98f6-e32262f7c018","type":"url","category":"Network activity","to_ids":true,"value":"http://191.101.2.93:53","comment":"https://x.com/drb_ra/status/1961535403137343554","timestamp":"1756501458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"219c7c39-597e-534e-a5dc-4db06074e8ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.101.2.93","comment":"https://x.com/drb_ra/status/1961535403137343554","timestamp":"1756501458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"27dabc86-f11d-5438-914c-18afbb493b6a","type":"url","category":"Network activity","to_ids":true,"value":"https://auth.inmediavault.com/assets/js/jquery-3.7.1.min.js","comment":"https://x.com/drb_ra/status/1961535403137343554","timestamp":"1756501458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d373871c-b01d-5e22-a406-638b22fc7a91","type":"domain","category":"Network activity","to_ids":true,"value":"auth.inmediavault.com","comment":"https://x.com/drb_ra/status/1961535403137343554","timestamp":"1756501458","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a7425129-396e-5fae-bbd8-1a02f479b568","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.61:2404","comment":"https://x.com/drb_ra/status/1961535540840599584","timestamp":"1756501491","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9e5764f1-366f-5f56-8664-3efb9ac29a5a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.61","comment":"https://x.com/drb_ra/status/1961535540840599584","timestamp":"1756501491","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"14de1fb9-0325-59a4-9409-71a47e27cea2","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.169:2404","comment":"https://x.com/drb_ra/status/1961535680611586076","timestamp":"1756501524","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"808d5d49-a439-5ea9-934a-f24c373b7584","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.169","comment":"https://x.com/drb_ra/status/1961535680611586076","timestamp":"1756501524","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d2cee366-9910-58ba-b5da-415221cdf4a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.107.44.149","comment":"https://x.com/drb_ra/status/1961535819560489230","timestamp":"1756501557","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"8da5c8da-de50-556d-82cc-f36ce67a6ea3","type":"url","category":"Network activity","to_ids":true,"value":"http://118.107.44.149:2096","comment":"https://x.com/drb_ra/status/1961535819560489230","timestamp":"1756501557","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"d5c3fe84-d245-5a77-9508-b35ef0041ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.233.127.232","comment":"https://x.com/drb_ra/status/1961535959981592950","timestamp":"1756501591","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"20180a65-6025-5a00-8bd6-ccd03c4c8eab","type":"url","category":"Network activity","to_ids":true,"value":"http://13.233.127.232:2375","comment":"https://x.com/drb_ra/status/1961535959981592950","timestamp":"1756501591","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"fe1055a3-5cc8-5d79-9d80-564b202090c4","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/827-mh1-3t","comment":"https://x.com/skocherhan/status/1961536065442873610","timestamp":"1756501616","distribution":"5"},{"uuid":"cc5ee6c5-0f8c-5f01-8505-767593eed049","type":"url","category":"Network activity","to_ids":true,"value":"http://tinyurl.com/t1-827","comment":"https://x.com/skocherhan/status/1961536065442873610","timestamp":"1756501616","distribution":"5"},{"uuid":"079bf9ae-6778-502a-a269-d2a0572e78a4","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.151.246:48285","comment":"https://x.com/drb_ra/status/1961536099643240888","timestamp":"1756501624","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4514defa-03b0-5733-94e7-8013a26bf8cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.151.246","comment":"https://x.com/drb_ra/status/1961536099643240888","timestamp":"1756501624","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a0720ad6-1175-5dfd-8c56-34f726218070","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.129.154.181","comment":"https://x.com/drb_ra/status/1961536238860615910","timestamp":"1756501657","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"139d1bdb-fe27-52b6-944c-e956b7dc0cbe","type":"url","category":"Network activity","to_ids":true,"value":"http://47.129.154.181:58000","comment":"https://x.com/drb_ra/status/1961536238860615910","timestamp":"1756501657","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"10f2726f-b844-5d41-b010-39f5f31d6404","type":"url","category":"Network activity","to_ids":true,"value":"http://54.195.140.22:80","comment":"https://x.com/drb_ra/status/1961536516397974010","timestamp":"1756501723","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b883e725-8eec-5e9f-af44-3c071a3734d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.195.140.22","comment":"https://x.com/drb_ra/status/1961536516397974010","timestamp":"1756501723","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"47c29fa0-b14a-5808-a248-11778c5e9780","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.178.53:80","comment":"https://x.com/drb_ra/status/1961536655602716713","timestamp":"1756501756","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"51c767d6-7c8a-5cfe-b941-c8a112130f41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.178.53","comment":"https://x.com/drb_ra/status/1961536655602716713","timestamp":"1756501756","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1820c9b0-20bc-5241-b72c-5ce821a50049","type":"url","category":"Network activity","to_ids":true,"value":"http://34.127.2.13:80","comment":"https://x.com/drb_ra/status/1961536795570839954","timestamp":"1756501790","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bf776979-cf3e-5ca8-ad22-080364c6cc35","type":"url","category":"Network activity","to_ids":true,"value":"http://34.242.164.201:443","comment":"https://x.com/drb_ra/status/1961536934473265644","timestamp":"1756501823","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fa5ec5a8-1c2c-5dfa-a76d-c43867319931","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.242.164.201","comment":"https://x.com/drb_ra/status/1961536934473265644","timestamp":"1756501823","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ce566934-c274-5981-80ca-f202d6a048c8","type":"url","category":"Network activity","to_ids":true,"value":"http://54.77.114.166:80","comment":"https://x.com/drb_ra/status/1961537074223562980","timestamp":"1756501856","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ebbe6109-c114-585c-a398-1ce48d594966","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.77.114.166","comment":"https://x.com/drb_ra/status/1961537074223562980","timestamp":"1756501856","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b0796b78-d98c-59bf-a5b0-bf2211e22629","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.194.252:80","comment":"https://x.com/drb_ra/status/1961537212266549760","timestamp":"1756501889","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fc8acdd6-c106-5c99-ac30-5c9b69103e30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.194.252","comment":"https://x.com/drb_ra/status/1961537212266549760","timestamp":"1756501889","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9a5b3ebe-dc8f-54a2-92c3-75c26b6a8abe","type":"url","category":"Network activity","to_ids":true,"value":"http://47.96.72.155:6103","comment":"https://x.com/drb_ra/status/1961537351856886075","timestamp":"1756501922","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"a635d4f5-2343-53da-9c4b-947a012fcb9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.96.72.155","comment":"https://x.com/drb_ra/status/1961537351856886075","timestamp":"1756501922","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"3729e8a2-19a6-5007-bae2-b61bf9792b80","type":"url","category":"Network activity","to_ids":true,"value":"http://186.105.98.64:443","comment":"https://x.com/drb_ra/status/1961537490889638241","timestamp":"1756501956","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7b7bf4d6-bddc-5fb0-884e-bd4407e0e4dc","type":"url","category":"Network activity","to_ids":true,"value":"http://44.209.100.103:443","comment":"https://x.com/drb_ra/status/1961537630220251583","timestamp":"1756501989","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a11990c6-d504-5287-8408-15b222153aff","type":"url","category":"Network activity","to_ids":true,"value":"http://34.47.220.91:443","comment":"https://x.com/drb_ra/status/1961537769144295527","timestamp":"1756502022","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ef57a001-807d-5150-905a-60f378aa9154","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.232.159:7443","comment":"https://x.com/drb_ra/status/1961537908135137299","timestamp":"1756502055","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f04e5f5c-59b1-577a-8d3f-42e882048fcb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.232.159","comment":"https://x.com/drb_ra/status/1961537908135137299","timestamp":"1756502055","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"d6b425b1-8949-503d-9c1f-64fb3d6c3bcf","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.239.206:7443","comment":"https://x.com/drb_ra/status/1961538048384274634","timestamp":"1756502089","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"156864e6-1cc3-58a6-8848-33836acc6365","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.239.206","comment":"https://x.com/drb_ra/status/1961538048384274634","timestamp":"1756502089","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"260d1ad5-2c78-589d-9bb2-51cff186c1ac","type":"url","category":"Network activity","to_ids":true,"value":"http://65.20.75.143:7443","comment":"https://x.com/drb_ra/status/1961538187245093232","timestamp":"1756502122","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"73cc28fb-c21b-5c6f-ab1e-81ea06b191b8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.20.75.143","comment":"https://x.com/drb_ra/status/1961538187245093232","timestamp":"1756502122","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"e810dc8c-2b4a-57cf-a8fe-2d3cb8ad7cb3","type":"url","category":"Network activity","to_ids":true,"value":"http://78.141.217.70:443","comment":"https://x.com/drb_ra/status/1961538326315634955","timestamp":"1756502155","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b44d9da3-0b86-5e92-8e9a-bf2c9e59f16e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.141.217.70","comment":"https://x.com/drb_ra/status/1961538326315634955","timestamp":"1756502155","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"61cf7934-6a1b-5ff4-873c-c9bcd6bc949d","type":"url","category":"Network activity","to_ids":true,"value":"http://45.12.91.43:27763","comment":"https://x.com/drb_ra/status/1961538466514403450","timestamp":"1756502188","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ab5a3d04-7051-5bab-8e3d-7bbaadc92acc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.12.91.43","comment":"https://x.com/drb_ra/status/1961538466514403450","timestamp":"1756502188","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"461e321f-fdcf-5a3b-9195-3c63e4dc2095","type":"url","category":"Network activity","to_ids":true,"value":"https://47.94.56.36/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961538606541275375","timestamp":"1756502222","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"952908f0-db87-50e4-94d0-86ec91b22024","type":"url","category":"Network activity","to_ids":true,"value":"http://47.94.56.36:443","comment":"https://x.com/drb_ra/status/1961538606541275375","timestamp":"1756502222","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"66cecbd8-bc83-5875-bc84-1f538fab64d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.94.56.36","comment":"https://x.com/drb_ra/status/1961538606541275375","timestamp":"1756502222","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0711d3b1-fabf-50d6-ad1b-4c7700c702ef","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.231.118:443","comment":"https://x.com/drb_ra/status/1961538748132593899","timestamp":"1756502255","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4060c9d2-8a54-582a-9c2a-2ef403fc1cc0","type":"url","category":"Network activity","to_ids":true,"value":"http://81.71.159.99:81","comment":"https://x.com/drb_ra/status/1961538887895191645","timestamp":"1756502289","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93b00857-5c8a-5495-b396-ef8eddc5fd33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.159.99","comment":"https://x.com/drb_ra/status/1961538887895191645","timestamp":"1756502289","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a960116e-1284-5d6f-b95e-a2de4732bd29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.201.175.92","comment":"https://x.com/drb_ra/status/1961539027519103119","timestamp":"1756502322","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"553c7862-bc75-595c-b368-423ee5eff8c0","type":"url","category":"Network activity","to_ids":true,"value":"http://101.201.175.92:80","comment":"https://x.com/drb_ra/status/1961539027519103119","timestamp":"1756502322","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"697d50a1-f89a-50d2-8846-2faf6781f080","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.83.6:5520","comment":"https://x.com/drb_ra/status/1961539166786736178","timestamp":"1756502355","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a3b0546b-79e8-5fad-b8d6-91e8cba6ea2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.83.6","comment":"https://x.com/drb_ra/status/1961539166786736178","timestamp":"1756502355","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"83a58107-bc05-51e6-8011-74ca649d260b","type":"url","category":"Network activity","to_ids":true,"value":"https://119.29.231.118/ws/391510761054","comment":"https://x.com/drb_ra/status/1961539311461093662","timestamp":"1756502390","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d632bf74-2e9c-5fe7-9c8e-f4d0bbfe1f44","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.231.118:8443","comment":"https://x.com/drb_ra/status/1961539311461093662","timestamp":"1756502390","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6792ca5-d114-5515-abc1-953fd2b260ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.231.118","comment":"https://x.com/drb_ra/status/1961539311461093662","timestamp":"1756502390","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"403e27c4-2ab3-5558-8cbb-fc2726707ff1","type":"url","category":"Network activity","to_ids":true,"value":"https://3.134.251.168/v2/serviceworker.js","comment":"https://x.com/drb_ra/status/1961539453547086179","timestamp":"1756502424","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0499f3c4-3ca5-5554-891b-4442f6008da0","type":"url","category":"Network activity","to_ids":true,"value":"http://3.134.251.168:443","comment":"https://x.com/drb_ra/status/1961539453547086179","timestamp":"1756502424","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2bf0ae29-3dba-51ea-9670-86291c6436c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.51.45.33","comment":"https://x.com/drb_ra/status/1961539594803188066","timestamp":"1756502457","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"668ee374-0c77-5abe-a455-485eb01bc305","type":"url","category":"Network activity","to_ids":true,"value":"http://42.51.45.33:83","comment":"https://x.com/drb_ra/status/1961539594803188066","timestamp":"1756502457","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e23acc2c-a6af-532a-980e-acbf4b4d8952","type":"domain","category":"Network activity","to_ids":true,"value":"adminalis.com","comment":"https://x.com/drb_ra/status/1961539737162064379","timestamp":"1756502491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a8ade97-498b-542a-8801-bb9f44a0c17e","type":"url","category":"Network activity","to_ids":true,"value":"https://adminalis.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961539737162064379","timestamp":"1756502491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"217c5c8e-d035-514d-9dd9-a39fea51fb5c","type":"url","category":"Network activity","to_ids":true,"value":"http://8.218.122.180:443","comment":"https://x.com/drb_ra/status/1961539737162064379","timestamp":"1756502491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1d1ef8ba-ad38-5c37-a286-a25c8a19e6d2","type":"url","category":"Network activity","to_ids":true,"value":"https://43.156.59.110/fwlink","comment":"https://x.com/drb_ra/status/1961539879726104864","timestamp":"1756502525","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4fa906cd-80fb-598f-8145-886058b9cc78","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.59.110:802","comment":"https://x.com/drb_ra/status/1961539879726104864","timestamp":"1756502525","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eceed745-6710-528f-a410-11a781af7656","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.59.110","comment":"https://x.com/drb_ra/status/1961539879726104864","timestamp":"1756502525","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"80265f60-0d1f-5f9b-953f-b72192e0f76f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.143.233.205","comment":"https://x.com/drb_ra/status/1961540020827037873","timestamp":"1756502559","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"015df423-3b32-59b9-9d8c-6baac00cf577","type":"url","category":"Network activity","to_ids":true,"value":"http://45.143.233.205:888","comment":"https://x.com/drb_ra/status/1961540020827037873","timestamp":"1756502559","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e2270cf3-090e-5d4a-825c-5ba719d09489","type":"url","category":"Network activity","to_ids":true,"value":"http://39.100.74.54:80","comment":"https://x.com/drb_ra/status/1961540160342167607","timestamp":"1756502592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"79a44896-07d7-5534-b153-8338c60c1b03","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.100.74.54","comment":"https://x.com/drb_ra/status/1961540160342167607","timestamp":"1756502592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"14a120b2-9d3e-53aa-9c57-23dd6a8226d5","type":"domain","category":"Network activity","to_ids":true,"value":"c2.wifi.hypdncy.com","comment":"https://x.com/drb_ra/status/1961540160342167607","timestamp":"1756502592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fb52dc73-0f15-5d5b-827e-fc949c9457de","type":"url","category":"Network activity","to_ids":true,"value":"https://c2.wifi.hypdncy.com/pixel","comment":"https://x.com/drb_ra/status/1961540160342167607","timestamp":"1756502592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cbfe25be-c00c-5e4b-b124-042cba8ba754","type":"url","category":"Network activity","to_ids":true,"value":"http://49.235.26.82:43","comment":"https://x.com/drb_ra/status/1961540301065162930","timestamp":"1756502626","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"823b2e8f-50e3-557a-83bd-e3731598f0b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.235.26.82","comment":"https://x.com/drb_ra/status/1961540301065162930","timestamp":"1756502626","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e0d78b43-cdde-5712-bf95-23639d7f0e9d","type":"url","category":"Network activity","to_ids":true,"value":"http://16.163.145.28:4433","comment":"https://x.com/drb_ra/status/1961540440928198811","timestamp":"1756502659","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4917439d-ca8a-5c09-ab17-63bb3eb8ab65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.163.145.28","comment":"https://x.com/drb_ra/status/1961540440928198811","timestamp":"1756502659","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a88e4fca-3792-5de5-808b-b652c13fcf2b","type":"domain","category":"Network activity","to_ids":true,"value":"muma.91xs.com","comment":"https://x.com/drb_ra/status/1961540581433512393","timestamp":"1756502692","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"64f45e7e-8707-565c-beec-b92c53ee5ed8","type":"url","category":"Network activity","to_ids":true,"value":"https://muma.91xs.com/pixel.gif","comment":"https://x.com/drb_ra/status/1961540581433512393","timestamp":"1756502692","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"96af90d2-51e8-5d36-a1ca-85fb58a0890e","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.189.187:8081","comment":"https://x.com/drb_ra/status/1961540581433512393","timestamp":"1756502692","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2c71fc4d-4c88-5210-be1f-95fd670cc396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.172.26.89","comment":"https://x.com/drb_ra/status/1961540722307502225","timestamp":"1756502726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b56bd12-588a-50f3-acb8-502e9b0cac7e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.172.26.89:80","comment":"https://x.com/drb_ra/status/1961540722307502225","timestamp":"1756502726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0e39f2fb-4cd2-5e4b-8594-28f7e00ccf32","type":"url","category":"Network activity","to_ids":true,"value":"https://103.172.26.89/_/scs/mail-static/_/js/","comment":"https://x.com/drb_ra/status/1961540722307502225","timestamp":"1756502726","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc1ecd03-4ef9-5078-a520-e274ce53a9d0","type":"domain","category":"Network activity","to_ids":true,"value":"1311056882-lcqm122smr.ap-guangzhou.tencentscf.com","comment":"https://x.com/drb_ra/status/1961540863139381443","timestamp":"1756502760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a7c1f75-d44c-5295-8075-e6d7b51da6d0","type":"url","category":"Network activity","to_ids":true,"value":"http://1311056882-lcqm122smr.ap-guangzhou.tencentscf.com/DVUPQWOKVZMLMQMH/api/x","comment":"https://x.com/drb_ra/status/1961540863139381443","timestamp":"1756502760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93055644-1dd5-58e4-a797-af75c144f090","type":"url","category":"Network activity","to_ids":true,"value":"http://81.71.98.99:80","comment":"https://x.com/drb_ra/status/1961540863139381443","timestamp":"1756502760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f64d8d96-de37-5972-a500-a71a943967f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.71.98.99","comment":"https://x.com/drb_ra/status/1961540863139381443","timestamp":"1756502760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bd20871b-aec4-58e9-bc6d-98dfb25424f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.23.169.202","comment":"https://x.com/drb_ra/status/1961541003757686845","timestamp":"1756502793","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f744ef02-e469-5655-89e6-2504a140e875","type":"url","category":"Network activity","to_ids":true,"value":"https://127.0.0.1/www/handle/doc","comment":"https://x.com/drb_ra/status/1961541003757686845","timestamp":"1756502793","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1b411144-b264-556e-9fe4-40853c968116","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.169.202:22336","comment":"https://x.com/drb_ra/status/1961541003757686845","timestamp":"1756502793","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cf01de6b-1cad-5df9-a513-53bfd92490a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.98.26.48","comment":"https://x.com/drb_ra/status/1961541143654515188","timestamp":"1756502826","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"b47dcf02-f1b2-519f-a18c-07d9e4e3e984","type":"url","category":"Network activity","to_ids":true,"value":"http://91.98.26.48:8080","comment":"https://x.com/drb_ra/status/1961541143654515188","timestamp":"1756502826","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"6e4e43fe-c9d6-5fe0-935a-b75dbc4f2d7e","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.169.202:6000","comment":"https://x.com/drb_ra/status/1961541282263675209","timestamp":"1756502860","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2d5f8a8e-9c11-5757-91e0-a4d5412ab092","type":"url","category":"Network activity","to_ids":true,"value":"http://213.109.163.166:443","comment":"https://x.com/drb_ra/status/1961541423788134843","timestamp":"1756502893","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"909d1cbf-e07f-5a82-87b5-ca5a5899682b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.109.163.166","comment":"https://x.com/drb_ra/status/1961541423788134843","timestamp":"1756502893","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b165709c-4363-54ed-adfc-ad7ba75011e2","type":"url","category":"Network activity","to_ids":true,"value":"http://103.83.87.230:8090","comment":"https://x.com/drb_ra/status/1961541566998471091","timestamp":"1756502927","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"02153e07-c338-5053-9a8f-fd684b9a768c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.83.87.230","comment":"https://x.com/drb_ra/status/1961541566998471091","timestamp":"1756502927","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b0154739-39af-5f34-bcb8-88f1ac90f1e8","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.188.233:2404","comment":"https://x.com/drb_ra/status/1961541708363268231","timestamp":"1756502961","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c7206e13-a7e4-55f4-974e-f192cce295d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.188.233","comment":"https://x.com/drb_ra/status/1961541708363268231","timestamp":"1756502961","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dc4ffa58-ec2c-5e6b-8e14-dfa6c7f89d62","type":"url","category":"Network activity","to_ids":true,"value":"http://66.85.26.200:2404","comment":"https://x.com/drb_ra/status/1961541847723250028","timestamp":"1756502994","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"048ecbc4-ca52-5013-a8dc-b3665c68fa94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.85.26.200","comment":"https://x.com/drb_ra/status/1961541847723250028","timestamp":"1756502994","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"32bf79ac-c840-5e6d-b587-bc42569b33b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.47","comment":"https://x.com/drb_ra/status/1961541989234593876","timestamp":"1756503028","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e54039f6-9cbb-54bb-8b02-2d1b5637be38","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.47:33672","comment":"https://x.com/drb_ra/status/1961541989234593876","timestamp":"1756503028","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"14917aab-6644-574b-9a2b-e9356f92fd44","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.9.186:8811","comment":"https://x.com/drb_ra/status/1961542128737427782","timestamp":"1756503061","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"89ef6f6b-0210-5e16-b105-ff9f5ca5b094","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.186","comment":"https://x.com/drb_ra/status/1961542128737427782","timestamp":"1756503061","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"fefe6067-becd-57fc-9052-ce86409491bc","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.183.207:4477","comment":"https://x.com/drb_ra/status/1961542267795099708","timestamp":"1756503094","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"54d78faf-2b35-55ba-a8d9-37e4e5433dd5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.183.207","comment":"https://x.com/drb_ra/status/1961542267795099708","timestamp":"1756503094","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3bab7860-6bac-5f1e-a08c-d72050c8bb72","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.95:2404","comment":"https://x.com/drb_ra/status/1961542411295101085","timestamp":"1756503129","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"df8489b8-c6b2-55f1-a985-5e3adc4c9d49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.95","comment":"https://x.com/drb_ra/status/1961542411295101085","timestamp":"1756503129","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0c3ddd38-90d7-5797-a099-b869f8923594","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.48.69:5671","comment":"https://x.com/drb_ra/status/1961542550994710736","timestamp":"1756503162","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"cfaca934-1694-544e-a261-b9516b266a09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.48.69","comment":"https://x.com/drb_ra/status/1961542550994710736","timestamp":"1756503162","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ec068565-69f9-5aed-9f7a-4d205f0c9850","type":"url","category":"Network activity","to_ids":true,"value":"http://104.129.28.201:80","comment":"https://x.com/drb_ra/status/1961542692112146931","timestamp":"1756503196","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"ff75d4fb-1a93-5b84-b19c-462a7ac3e939","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.129.28.201","comment":"https://x.com/drb_ra/status/1961542692112146931","timestamp":"1756503196","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"754e994f-41c7-5ddb-b8ba-c01e51a57e3d","type":"url","category":"Network activity","to_ids":true,"value":"http://118.107.44.140:2096","comment":"https://x.com/drb_ra/status/1961542831824408979","timestamp":"1756503229","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"5c472563-83ed-52f0-a0e2-0bc85e93a2c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.107.44.140","comment":"https://x.com/drb_ra/status/1961542831824408979","timestamp":"1756503229","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"08aa87ce-d3ed-557c-b883-99482431b8d2","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.172.165:8080","comment":"https://x.com/drb_ra/status/1961542971947716817","timestamp":"1756503262","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cece334f-6c02-589a-8333-798cacfeacae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.172.165","comment":"https://x.com/drb_ra/status/1961542971947716817","timestamp":"1756503262","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1790a853-e3cc-52bf-bf4e-b64beb510bb4","type":"url","category":"Network activity","to_ids":true,"value":"http://54.180.140.26:9142","comment":"https://x.com/drb_ra/status/1961543111609635162","timestamp":"1756503296","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"21bbc665-30e9-5f59-bacb-82c9683e64be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.180.140.26","comment":"https://x.com/drb_ra/status/1961543111609635162","timestamp":"1756503296","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8eaf5ae9-5b10-5fc4-b90d-1dcf0f72379f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.202.1.14:59465","comment":"https://x.com/drb_ra/status/1961543251061821831","timestamp":"1756503329","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3f013792-7210-5433-bbff-b5b32fe066e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.202.1.14","comment":"https://x.com/drb_ra/status/1961543251061821831","timestamp":"1756503329","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"501c2568-f5a7-5811-94c6-5384f8934fe1","type":"url","category":"Network activity","to_ids":true,"value":"http://3.96.215.227:7547","comment":"https://x.com/drb_ra/status/1961543394616119793","timestamp":"1756503363","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"28bc131b-d5f5-525e-8eb9-a3d19dd57964","type":"url","category":"Network activity","to_ids":true,"value":"http://161.97.68.73:3328","comment":"https://x.com/drb_ra/status/1961543535402037742","timestamp":"1756503397","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"79773788-3a8c-5ab1-b62d-2992c8ca8a41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.97.68.73","comment":"https://x.com/drb_ra/status/1961543535402037742","timestamp":"1756503397","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"899dbd3b-3e33-5e64-9329-51f98ab9cfd3","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.240.19:80","comment":"https://x.com/drb_ra/status/1961543678650188011","timestamp":"1756503431","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a6aa89ae-5330-5d91-922e-e2b83cc564db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.240.19","comment":"https://x.com/drb_ra/status/1961543678650188011","timestamp":"1756503431","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dd9b03eb-a2e9-5c14-bf15-a80e31161842","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.88.203:80","comment":"https://x.com/drb_ra/status/1961543818664448173","timestamp":"1756503464","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b4770396-392a-52ae-9cc0-b6c9a3dd4076","type":"url","category":"Network activity","to_ids":true,"value":"http://161.35.196.92:443","comment":"https://x.com/drb_ra/status/1961543959735599365","timestamp":"1756503498","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a3e9b020-c034-5902-891b-ab37d2925607","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.35.196.92","comment":"https://x.com/drb_ra/status/1961543959735599365","timestamp":"1756503498","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5e38008f-14f7-5092-9318-d473f4ed9b58","type":"url","category":"Network activity","to_ids":true,"value":"http://121.136.138.22:443","comment":"https://x.com/drb_ra/status/1961544102845321426","timestamp":"1756503532","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"140467fc-4a29-5582-bf5c-073579cbf31f","type":"url","category":"Network activity","to_ids":true,"value":"http://121.136.138.22:80","comment":"https://x.com/drb_ra/status/1961544244273061948","timestamp":"1756503566","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"33f4ce3d-0ac7-5be1-a681-c32e5bb96c1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.136.138.22","comment":"https://x.com/drb_ra/status/1961544244273061948","timestamp":"1756503566","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"913c36e7-3d5b-58b9-aa1d-6825da134f0d","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.158.174:80","comment":"https://x.com/drb_ra/status/1961544385906004079","timestamp":"1756503599","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c2aab50a-56bd-5ab5-8d5c-fcd38b44ca32","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.158.174","comment":"https://x.com/drb_ra/status/1961544385906004079","timestamp":"1756503599","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b25b422f-bdb7-5c9f-8184-041ba8eab34b","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.112.227:80","comment":"https://x.com/drb_ra/status/1961544525442125909","timestamp":"1756503633","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"906c430b-f80a-550c-9879-26a0ffc654ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.112.227","comment":"https://x.com/drb_ra/status/1961544525442125909","timestamp":"1756503633","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"99e7c5f3-bfcd-5c92-aed7-0aaba902e639","type":"url","category":"Network activity","to_ids":true,"value":"http://54.74.180.17:80","comment":"https://x.com/drb_ra/status/1961544671722967228","timestamp":"1756503668","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"93d79898-df89-510b-a097-4241b4119781","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.74.180.17","comment":"https://x.com/drb_ra/status/1961544671722967228","timestamp":"1756503668","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"07d0b99f-12d7-5710-bf79-08f0848c377e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.253.146.53:443","comment":"https://x.com/drb_ra/status/1961544810042400777","timestamp":"1756503701","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e7a873a1-1166-5ee1-9bcb-32624134ee7d","type":"url","category":"Network activity","to_ids":true,"value":"http://103.253.146.53:80","comment":"https://x.com/drb_ra/status/1961544950534811842","timestamp":"1756503734","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b60cd271-2712-59d2-935f-f6bc0632209c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.253.146.53","comment":"https://x.com/drb_ra/status/1961544950534811842","timestamp":"1756503734","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e168d506-07f3-526c-8e7a-048662bde857","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.116.131:80","comment":"https://x.com/drb_ra/status/1961545092709106114","timestamp":"1756503768","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b575ef88-e7f0-50ce-85f1-f5e13bb1f677","type":"url","category":"Network activity","to_ids":true,"value":"http://18.198.219.93:465","comment":"https://x.com/drb_ra/status/1961545233344446576","timestamp":"1756503802","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2504a24d-6144-595d-9246-cb94553b26b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.198.219.93","comment":"https://x.com/drb_ra/status/1961545233344446576","timestamp":"1756503802","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"013abee3-9167-5a7c-978f-46aff85f302e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.255.189.25:80","comment":"https://x.com/drb_ra/status/1961545371961679898","timestamp":"1756503835","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5c1bfb84-e642-5b3b-84d3-f8bdcc0472f2","type":"url","category":"Network activity","to_ids":true,"value":"http://146.103.119.187:4000","comment":"https://x.com/drb_ra/status/1961545514412892273","timestamp":"1756503869","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"1ed16bec-262e-50f6-836b-329135694add","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.103.119.187","comment":"https://x.com/drb_ra/status/1961545514412892273","timestamp":"1756503869","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"04a084ff-7145-5b41-b006-fe0ab1b03907","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.74.15:8888","comment":"https://x.com/drb_ra/status/1961545656515928264","timestamp":"1756503902","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"c8ec71a9-edfa-55cf-93d9-e01b48cf8524","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.74.15","comment":"https://x.com/drb_ra/status/1961545656515928264","timestamp":"1756503902","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"12da0922-e2c5-5962-aa69-eb29866b6215","type":"url","category":"Network activity","to_ids":true,"value":"http://217.165.152.227:443","comment":"https://x.com/drb_ra/status/1961545797532598431","timestamp":"1756503936","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1cb6b0fd-2c68-522d-9813-9e08a23bd157","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.165.152.227","comment":"https://x.com/drb_ra/status/1961545797532598431","timestamp":"1756503936","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2a4e3324-87d7-5c6f-a74f-b9ff281fc64c","type":"url","category":"Network activity","to_ids":true,"value":"http://192.253.248.18:8443","comment":"https://x.com/drb_ra/status/1961545943322403275","timestamp":"1756503971","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"4040bcc5-5b67-5362-81ce-3a70858970dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.253.248.18","comment":"https://x.com/drb_ra/status/1961545943322403275","timestamp":"1756503971","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a774fddf-78a0-5cb6-8d98-aa201a46595d","type":"url","category":"Network activity","to_ids":true,"value":"http://35.71.131.235:443","comment":"https://x.com/drb_ra/status/1961546083957412195","timestamp":"1756504004","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"910cb682-0351-5392-bef1-c307b1dcdd89","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.71.131.235","comment":"https://x.com/drb_ra/status/1961546083957412195","timestamp":"1756504004","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"077595c7-d851-5d85-b72f-16a33f47f465","type":"url","category":"Network activity","to_ids":true,"value":"http://169.55.97.43:10250","comment":"https://x.com/drb_ra/status/1961546223124373504","timestamp":"1756504038","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5825319e-140d-58d8-b496-2ae82d7d90b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"169.55.97.43","comment":"https://x.com/drb_ra/status/1961546223124373504","timestamp":"1756504038","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"0bc63042-700f-5ae6-a51f-29caf4c3d85d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.33.156.40:443","comment":"https://x.com/drb_ra/status/1961546363440668711","timestamp":"1756504071","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"687543dc-2463-54b5-9821-87fba097784c","type":"url","category":"Network activity","to_ids":true,"value":"http://54.85.3.61:443","comment":"https://x.com/drb_ra/status/1961546501726888415","timestamp":"1756504104","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7a9409c5-ec94-5dc7-9705-6b29d43b10b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.85.3.61","comment":"https://x.com/drb_ra/status/1961546501726888415","timestamp":"1756504104","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b9b6775b-c23c-508b-bc8b-4a075754f215","type":"url","category":"Network activity","to_ids":true,"value":"http://182.242.50.38:10250","comment":"https://x.com/drb_ra/status/1961546640721940923","timestamp":"1756504137","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"52e43620-c9bf-57ec-9bb7-cf2401fb96f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.242.50.38","comment":"https://x.com/drb_ra/status/1961546640721940923","timestamp":"1756504137","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"854a0eb1-d384-5404-89ea-51fcd02784e7","type":"url","category":"Network activity","to_ids":true,"value":"http://209.97.175.29:7443","comment":"https://x.com/drb_ra/status/1961546782791331858","timestamp":"1756504171","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"cf865802-c64e-5959-acd3-0c6f77780719","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.97.175.29","comment":"https://x.com/drb_ra/status/1961546782791331858","timestamp":"1756504171","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a95dd313-df85-5942-91b1-743b946a88be","type":"url","category":"Network activity","to_ids":true,"value":"http://185.132.53.28:7443","comment":"https://x.com/drb_ra/status/1961546924357452277","timestamp":"1756504205","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"5dd09daf-00ae-534c-a5ea-3b7f839eb6bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.132.53.28","comment":"https://x.com/drb_ra/status/1961546924357452277","timestamp":"1756504205","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"657fcb90-d876-5b75-bbbc-01af310b65c7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.17.62.9:7443","comment":"https://x.com/drb_ra/status/1961547066724823117","timestamp":"1756504239","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"2f8de350-cdd3-5403-9cb5-2102cd95b270","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.17.62.9","comment":"https://x.com/drb_ra/status/1961547066724823117","timestamp":"1756504239","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"7e31c522-6875-5e37-b6a2-62c54788fc1a","type":"url","category":"Network activity","to_ids":true,"value":"http://46.29.160.97:31337","comment":"https://x.com/drb_ra/status/1961547209918337290","timestamp":"1756504273","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9158c735-72a3-5280-8051-ba89c1c7830b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.29.160.97","comment":"https://x.com/drb_ra/status/1961547209918337290","timestamp":"1756504273","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c9c5ee95-a10a-597d-8491-3e27b37b983f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.118.81:31337","comment":"https://x.com/drb_ra/status/1961547353225048542","timestamp":"1756504307","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d1a1956f-3099-5037-be49-fd369c434bcd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.118.81","comment":"https://x.com/drb_ra/status/1961547353225048542","timestamp":"1756504307","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"86f33968-5a96-5347-a0c3-eac1cc689d19","type":"url","category":"Network activity","to_ids":true,"value":"http://8.134.86.115:54681","comment":"https://x.com/drb_ra/status/1961547493214241026","timestamp":"1756504340","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2c81ccea-08c3-5743-8c86-5625e425e279","type":"url","category":"Network activity","to_ids":true,"value":"http://108.129.226.106:80","comment":"https://x.com/drb_ra/status/1961547634499277180","timestamp":"1756504374","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"05679199-4055-5bb8-882e-f4b9052ae2f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.129.226.106","comment":"https://x.com/drb_ra/status/1961547634499277180","timestamp":"1756504374","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2295eaa4-ea58-5406-8a84-1ff0e3ea5266","type":"url","category":"Network activity","to_ids":true,"value":"http://45.12.254.27:8443","comment":"https://x.com/drb_ra/status/1961547777239810252","timestamp":"1756504408","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7b56b095-1ab5-5ced-a8a5-2074e04ee5c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.12.254.27","comment":"https://x.com/drb_ra/status/1961547777239810252","timestamp":"1756504408","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"d5d770d6-a937-5a14-8edd-78003d8178b2","type":"url","category":"Network activity","to_ids":true,"value":"http://138.197.64.36:443","comment":"https://x.com/drb_ra/status/1961547921498759514","timestamp":"1756504442","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c44c6273-1c26-5763-97a3-dc663957103e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.197.64.36","comment":"https://x.com/drb_ra/status/1961547921498759514","timestamp":"1756504442","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"8a38b677-2ff9-52ab-8cb8-13467d035638","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.141:31337","comment":"https://x.com/drb_ra/status/1961548073965867345","timestamp":"1756504479","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3d15a8dd-0477-5b2e-bce4-c7eabd084040","type":"url","category":"Network activity","to_ids":true,"value":"http://185.163.45.141:8888","comment":"https://x.com/drb_ra/status/1961548215658086885","timestamp":"1756504513","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9089285c-477f-59cb-9abc-052e6ce70ff5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.163.45.141","comment":"https://x.com/drb_ra/status/1961548215658086885","timestamp":"1756504513","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"394a48c7-36b5-5b9e-a59a-31595909f8bb","type":"domain","category":"Network activity","to_ids":true,"value":"kcoinlogeo.webflow.io","comment":"https://x.com/urldna_bot/status/1961549463207514161","timestamp":"1756504810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f14a7249-7ca4-5406-9920-93da6aea6ce5","type":"url","category":"Network activity","to_ids":true,"value":"https://kcoinlogeo.webflow.io","comment":"https://x.com/urldna_bot/status/1961549463207514161","timestamp":"1756504810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5d025d93-e7c6-50b9-b81e-bc2c0551d809","type":"url","category":"Network activity","to_ids":true,"value":"http://192.0.78.25:80","comment":"https://x.com/SarlackLab/status/1961549503846093099","timestamp":"1756504820","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"9f460cee-f58c-5194-b1c5-64bf89ba81b9","type":"domain","category":"Network activity","to_ids":true,"value":"alongsidecoach.com","comment":"https://x.com/SarlackLab/status/1961549503846093099","timestamp":"1756504820","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"41b7321d-b51e-59d4-9e2f-0c39e56fdff6","type":"url","category":"Network activity","to_ids":true,"value":"http://alongsidecoach.com","comment":"https://x.com/SarlackLab/status/1961549503846093099","timestamp":"1756504820","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"4390375b-6bc6-5c75-bae5-be335de77af9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.0.78.25","comment":"https://x.com/SarlackLab/status/1961549503846093099","timestamp":"1756504820","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"9591faa8-fff4-50e1-bece-bf25fc48a164","type":"url","category":"Network activity","to_ids":true,"value":"http://archive.org/download/optimized_msi_20250821/optimized_MSI.png","comment":"https://x.com/skocherhan/status/1961554678107238902","timestamp":"1756506053","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"461acf75-5192-5209-b598-31de2750f55c","type":"domain","category":"Network activity","to_ids":true,"value":"bango.free.nf","comment":"https://x.com/skocherhan/status/1961554678107238902","timestamp":"1756506053","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"f3fca758-9cde-5952-a2c7-27d633b6246e","type":"url","category":"Network activity","to_ids":true,"value":"http://bango.free.nf/arquivo_20250829001752.txt","comment":"https://x.com/skocherhan/status/1961554678107238902","timestamp":"1756506053","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"1488c253-84c8-5dbf-9627-2237ec280d76","type":"url","category":"Network activity","to_ids":true,"value":"http://185.27.134.205","comment":"https://x.com/skocherhan/status/1961554678107238902","timestamp":"1756506053","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"5f1939d4-f67c-531a-8cc1-302c174e3eb6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.27.134.205","comment":"https://x.com/skocherhan/status/1961554678107238902","timestamp":"1756506053","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"9cd8cb85-c4e7-568d-a10a-2a34b1c7b4b7","type":"domain","category":"Network activity","to_ids":true,"value":"fuckrat.store","comment":"https://x.com/skocherhan/status/1961557393482957031","timestamp":"1756506701","distribution":"5"},{"uuid":"80e40824-51be-59b7-91c2-692a5031396b","type":"url","category":"Network activity","to_ids":true,"value":"http://fuckrat.store","comment":"https://x.com/skocherhan/status/1961557393482957031","timestamp":"1756506701","distribution":"5"},{"uuid":"1be3af7c-5e46-54e8-a34e-a99f7b5803e1","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.216.236","comment":"https://x.com/skocherhan/status/1961557393482957031","timestamp":"1756506701","distribution":"5"},{"uuid":"9ca4d168-f0dc-53e2-89f6-56712d1923de","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/visage23wr","comment":"https://x.com/skocherhan/status/1961557393482957031","timestamp":"1756506701","distribution":"5"},{"uuid":"a783010e-35c6-534a-b966-619aa5bfd846","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.216.236","comment":"https://x.com/skocherhan/status/1961557393482957031","timestamp":"1756506701","distribution":"5"},{"uuid":"8214809b-689c-513c-bfc0-d82131f0ff80","type":"domain","category":"Network activity","to_ids":true,"value":"eki-gramoa.mph82h.cn","comment":"https://x.com/masaomi346/status/1961560846355632537","timestamp":"1756507524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"609a78cc-6135-54aa-b11e-df84726ba296","type":"url","category":"Network activity","to_ids":true,"value":"https://eki-gramoa.mph82h.cn/Perosnal_member/","comment":"https://x.com/masaomi346/status/1961560846355632537","timestamp":"1756507524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3a2984b-2de6-544b-bc3e-fb423c07f0c7","type":"domain","category":"Network activity","to_ids":true,"value":"eki-net-carcini.ddnxw.cn","comment":"https://x.com/masaomi346/status/1961560846355632537","timestamp":"1756507524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c1d498c-89aa-58d7-bcb1-ebaa4c5382ef","type":"url","category":"Network activity","to_ids":true,"value":"https://eki-net-carcini.ddnxw.cn/Perosnal_member/","comment":"https://x.com/masaomi346/status/1961560846355632537","timestamp":"1756507524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d0054b5-dcde-57c4-99c5-f3dfe7cc9b5c","type":"url","category":"Network activity","to_ids":true,"value":"http://8.140.227.156:443","comment":"https://x.com/drb_ra/status/1961566660185174067","timestamp":"1756508910","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"59665945-425f-5e0b-8886-db4e009947ed","type":"url","category":"Network activity","to_ids":true,"value":"http://103.214.22.224:56","comment":"https://x.com/drb_ra/status/1961566800602128432","timestamp":"1756508944","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5eca75dc-597b-5168-8ff6-863a3349c4ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.214.22.224","comment":"https://x.com/drb_ra/status/1961566800602128432","timestamp":"1756508944","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da64511c-4493-55d6-830e-3c1a36f27692","type":"domain","category":"Network activity","to_ids":true,"value":"m.bureaux.fr","comment":"https://x.com/Mr_James_Cyber/status/1961568711455683021","timestamp":"1756509399","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"490fefaf-106f-5bf4-aa64-bdd26fa4e255","type":"url","category":"Network activity","to_ids":true,"value":"http://m.bureaux.fr","comment":"https://x.com/Mr_James_Cyber/status/1961568711455683021","timestamp":"1756509399","distribution":"5","Tag":[{"name":"opendir"},{"name":"malware"}]},{"uuid":"ba8d3d39-3420-54ee-9848-417e55fecfe3","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-a34c2.web.app","comment":"https://x.com/urldna_bot/status/1961579658547237145","timestamp":"1756512009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"38ce0a24-db7e-586f-ac1f-3972dde9eca7","type":"url","category":"Network activity","to_ids":true,"value":"https://cloud-a34c2.web.app","comment":"https://x.com/urldna_bot/status/1961579658547237145","timestamp":"1756512009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"af75ff33-7dae-5b32-9f5c-4d5a61d4db88","type":"url","category":"Network activity","to_ids":true,"value":"http://www.sohbetson.xyz/6x0h/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"20af466f-3aaf-506c-b8cd-14e82f75b012","type":"md5","category":"Payload delivery","to_ids":true,"value":"889f44f6532ca02e63e2f7da2b95bd72","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"958a8b6c-6e55-5638-9992-2e687714b7f1","type":"url","category":"Network activity","to_ids":true,"value":"http://www.holvia.site/29w4/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"59eed2c7-b007-5879-b593-b3b0111f6345","type":"domain","category":"Network activity","to_ids":true,"value":"holvia.site","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"ebcae2e1-28ec-5fa4-acff-829898656afe","type":"domain","category":"Network activity","to_ids":true,"value":"hepuygunkredi.xyz","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"62ef40bd-7918-575b-a667-f2cbf974fe8a","type":"domain","category":"Network activity","to_ids":true,"value":"thealnwickgarden.net","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"8c98758f-177c-5ee4-9f78-481ce35015ee","type":"domain","category":"Network activity","to_ids":true,"value":"5o3eyb.top","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"01538a26-791c-5eea-aa20-b484605dcfb5","type":"url","category":"Network activity","to_ids":true,"value":"http://www.5o3eyb.top/qk71/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"2ecb9b6c-5610-5462-86ca-fe6f9d1fe73f","type":"url","category":"Network activity","to_ids":true,"value":"http://www.723opx47.shop/6kg4/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"3e7abffb-85ea-5533-920b-72ce8c4263dd","type":"domain","category":"Network activity","to_ids":true,"value":"723opx47.shop","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"3ae35bb5-6c06-518f-a5cf-613cb091ea0b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.78452352.xyz/zio3/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"b043dac9-5cbd-544d-acf7-e28674673d10","type":"domain","category":"Network activity","to_ids":true,"value":"78452352.xyz","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"fc8e3387-d335-51d5-9058-862bc494f301","type":"domain","category":"Network activity","to_ids":true,"value":"sohbetson.xyz","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"7772ca4d-7bef-5299-b8ef-d03d4214429c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.thealnwickgarden.net/3pjr/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"5cbbb131-92bc-596c-bf0b-53c78efc1eb7","type":"url","category":"Network activity","to_ids":true,"value":"http://www.hepuygunkredi.xyz/p864/","comment":"https://x.com/skocherhan/status/1961588497640206738","timestamp":"1756514117","distribution":"5"},{"uuid":"a71fdcae-7e61-5996-b2d5-5880d15b81fc","type":"domain","category":"Network activity","to_ids":true,"value":"officialliker.co","comment":"https://x.com/urldna_bot/status/1961609856931991649","timestamp":"1756519209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5a8a6134-786a-5fca-a18a-40262b691f64","type":"url","category":"Network activity","to_ids":true,"value":"https://officialliker.co","comment":"https://x.com/urldna_bot/status/1961609856931991649","timestamp":"1756519209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"eba01324-e8eb-5a19-8701-13d1f7e7b9b6","type":"url","category":"Network activity","to_ids":true,"value":"http://ansrt.duckdns.org","comment":"https://x.com/SarlackLab/status/1961609885126209590","timestamp":"1756519216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"cb029d4f-a1ba-5334-ab6a-221687c67f5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.169.69.26","comment":"https://x.com/SarlackLab/status/1961609885126209590","timestamp":"1756519216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"b2df5c61-58f3-5172-9b7f-9e9018115ae6","type":"url","category":"Network activity","to_ids":true,"value":"http://192.169.69.26:8932","comment":"https://x.com/SarlackLab/status/1961609885126209590","timestamp":"1756519216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"096d5374-3c57-565a-ad7b-51c42f0ccb40","type":"domain","category":"Network activity","to_ids":true,"value":"ansrt.duckdns.org","comment":"https://x.com/SarlackLab/status/1961609885126209590","timestamp":"1756519216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"2a75d1ba-e834-562f-9dec-a76487c85024","type":"domain","category":"Network activity","to_ids":true,"value":"bafybeidxy4txoffnapbjhiayvu2pdpktkbor3su4m2sxplb5pmjkplilu4.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1961640053618233426","timestamp":"1756526408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a4c88931-52d6-54c1-bb9f-549c9cd758a7","type":"url","category":"Network activity","to_ids":true,"value":"https://bafybeidxy4txoffnapbjhiayvu2pdpktkbor3su4m2sxplb5pmjkplilu4.ipfs.dweb.link","comment":"https://x.com/urldna_bot/status/1961640053618233426","timestamp":"1756526408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d2c3343d-f151-56ad-9ea7-35f1cf1ebde6","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c614922dceb7b8a5dd012b55aa5acd8","comment":"https://x.com/ReBensk/status/1961657843310051756","timestamp":"1756530650","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"106020f1-dacc-5d75-ba6e-4b7afdc29774","type":"domain","category":"Network activity","to_ids":true,"value":"trust-wallet-binance.com","comment":"https://x.com/c9lab_soc/status/1961661467155206362","timestamp":"1756531514","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"164b6031-9520-5b09-b1b0-b3784a723074","type":"url","category":"Network activity","to_ids":true,"value":"http://trust-wallet-binance.com","comment":"https://x.com/c9lab_soc/status/1961661467155206362","timestamp":"1756531514","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d8dc9d4f-ef51-5e88-80b6-f49d4d7e4685","type":"domain","category":"Network activity","to_ids":true,"value":"nova-bank.online","comment":"https://x.com/c9lab_soc/status/1961661467155206362","timestamp":"1756531514","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"889fdf6a-9800-5484-b60b-820aadc10071","type":"url","category":"Network activity","to_ids":true,"value":"http://nova-bank.online","comment":"https://x.com/c9lab_soc/status/1961661467155206362","timestamp":"1756531514","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"301c64d5-bbad-52f2-862d-e9fa29be66f0","type":"domain","category":"Network activity","to_ids":true,"value":"orange-mail9.godaddysites.com","comment":"https://x.com/urldna_bot/status/1961670251134730675","timestamp":"1756533608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65be08a6-f13b-5141-b3a8-11e6504f1131","type":"url","category":"Network activity","to_ids":true,"value":"http://orange-mail9.godaddysites.com","comment":"https://x.com/urldna_bot/status/1961670251134730675","timestamp":"1756533608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0c95a9d6-8bc5-51d0-9e4c-72a25e61efda","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.225.147.190","comment":"https://x.com/drb_ra/status/1961681973551792368","timestamp":"1756536403","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"637ab641-5a24-5071-a051-65667b03c3dc","type":"url","category":"Network activity","to_ids":true,"value":"http://104.225.147.190:8888","comment":"https://x.com/drb_ra/status/1961681973551792368","timestamp":"1756536403","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"a339b130-3f12-5016-a96d-771c93cd8d4b","type":"url","category":"Network activity","to_ids":true,"value":"http://20.171.242.224:80","comment":"https://x.com/drb_ra/status/1961682111854698744","timestamp":"1756536436","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c9f8a1c8-bb5b-5587-80ee-fa23c9cdfa96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.171.242.224","comment":"https://x.com/drb_ra/status/1961682111854698744","timestamp":"1756536436","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c8e0da1a-1608-5065-9ee1-94907cd351ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.97.160.206","comment":"https://x.com/drb_ra/status/1961682249666953322","timestamp":"1756536469","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"9348438e-dc1b-5e90-b982-1c92a9a3458a","type":"url","category":"Network activity","to_ids":true,"value":"http://80.97.160.206:443","comment":"https://x.com/drb_ra/status/1961682249666953322","timestamp":"1756536469","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"c7310831-d0e9-55e7-8d03-834afa9a55bf","type":"url","category":"Network activity","to_ids":true,"value":"http://104.194.72.164:443","comment":"https://x.com/drb_ra/status/1961682387533738384","timestamp":"1756536502","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"08fe3f2b-a26f-52ab-a38a-d517e1b17468","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.194.72.164","comment":"https://x.com/drb_ra/status/1961682387533738384","timestamp":"1756536502","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"03ca2c7e-41c7-5069-975b-519d12cbbf1b","type":"url","category":"Network activity","to_ids":true,"value":"http://52.188.184.174:7443","comment":"https://x.com/drb_ra/status/1961682525912191252","timestamp":"1756536535","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"719f9665-aa2e-5115-b380-063a4b18501d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.188.184.174","comment":"https://x.com/drb_ra/status/1961682525912191252","timestamp":"1756536535","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e35fc0d9-0071-51da-8b98-7df06a58a598","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.144.55.160","comment":"https://x.com/drb_ra/status/1961682663745462696","timestamp":"1756536567","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"5867fc22-d0e9-502b-9918-fd7aa64fea20","type":"url","category":"Network activity","to_ids":true,"value":"http://45.144.55.160:7443","comment":"https://x.com/drb_ra/status/1961682663745462696","timestamp":"1756536567","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"1719dddf-4c20-58a6-97a8-26274b7c7644","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.115.36:31337","comment":"https://x.com/drb_ra/status/1961682802312638667","timestamp":"1756536601","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"72f10f50-4bd0-5844-9fb9-6ee442384a64","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.115.36","comment":"https://x.com/drb_ra/status/1961682802312638667","timestamp":"1756536601","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7e9d5b15-9c87-58f9-9f29-809cf405ec5d","type":"url","category":"Network activity","to_ids":true,"value":"http://213.252.232.249:31337","comment":"https://x.com/drb_ra/status/1961682940485673408","timestamp":"1756536633","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"62bbb34d-f242-5d3d-8540-f39fd82324a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.252.232.249","comment":"https://x.com/drb_ra/status/1961682940485673408","timestamp":"1756536633","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0774a9f6-25b1-5f5c-85dd-31da53613aea","type":"url","category":"Network activity","to_ids":true,"value":"http://54.81.68.254:8080","comment":"https://x.com/drb_ra/status/1961683593043833287","timestamp":"1756536789","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"46e735b4-7115-57ff-9b65-69f908b911a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.81.68.254","comment":"https://x.com/drb_ra/status/1961683593043833287","timestamp":"1756536789","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"caabe76b-4481-59c5-b0d2-da014d35ff0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.42.49.55","comment":"https://x.com/drb_ra/status/1961683731468456419","timestamp":"1756536822","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bf076688-4e1a-5a98-a6db-9873955f648f","type":"url","category":"Network activity","to_ids":true,"value":"http://66.42.49.55:26729","comment":"https://x.com/drb_ra/status/1961683731468456419","timestamp":"1756536822","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3811d5c3-dcca-5214-85ff-4be2d7003463","type":"md5","category":"Payload delivery","to_ids":true,"value":"c9c90ac32d5ebf22821705ad496c0f6c","comment":"https://x.com/ReBensk/status/1961683846510051597","timestamp":"1756536849","distribution":"5","Tag":[{"name":"malware"},{"name":"Trojan"},{"name":"Android"}]},{"uuid":"64968750-3fdd-57e2-93bd-d372910e3dea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.120.248.82","comment":"https://x.com/drb_ra/status/1961683869616205945","timestamp":"1756536855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"355815e1-8066-5ce4-a412-20c847e89b1d","type":"url","category":"Network activity","to_ids":true,"value":"http://20.120.248.82:8081","comment":"https://x.com/drb_ra/status/1961683869616205945","timestamp":"1756536855","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e69ea4ea-0fc5-59ba-b60c-c0fe02a28ba4","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.52.243:2404","comment":"https://x.com/drb_ra/status/1961684008720363819","timestamp":"1756536888","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7a5c6c6c-184a-5e42-80f6-fc8dd713b4b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.52.243","comment":"https://x.com/drb_ra/status/1961684008720363819","timestamp":"1756536888","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0ad526f7-f891-5a28-9f2b-c0b0f590df7d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.60","comment":"https://x.com/drb_ra/status/1961684146410914127","timestamp":"1756536921","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"31fc5294-e947-5366-84ec-d4b5d449c9a7","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.60:2404","comment":"https://x.com/drb_ra/status/1961684146410914127","timestamp":"1756536921","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"115f7377-e7e6-5125-a96b-f21e83fbcef3","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.52.221:2404","comment":"https://x.com/drb_ra/status/1961684285347283384","timestamp":"1756536954","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"797a750f-e870-5232-ad36-bcddd1f290ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.52.221","comment":"https://x.com/drb_ra/status/1961684285347283384","timestamp":"1756536954","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1749befd-b277-5cac-9d7f-526371710d45","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.96.46:2404","comment":"https://x.com/drb_ra/status/1961684424166093257","timestamp":"1756536987","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b3e6669c-c617-5145-8ee9-840bac1dda87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.46","comment":"https://x.com/drb_ra/status/1961684424166093257","timestamp":"1756536987","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1a4163c7-f36e-5e2b-9d2b-5950040b8ccd","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.165:2323","comment":"https://x.com/drb_ra/status/1961684562783740301","timestamp":"1756537020","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"1270f812-0122-591c-89c5-ce458901efc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.165","comment":"https://x.com/drb_ra/status/1961684562783740301","timestamp":"1756537020","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e149b612-cd33-5bd6-923f-7029b3c36c5b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.12.143.17:443","comment":"https://x.com/drb_ra/status/1961684701095059952","timestamp":"1756537053","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f0e3f2e6-ba4d-5489-b820-1a98f77677a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.12.143.17","comment":"https://x.com/drb_ra/status/1961684701095059952","timestamp":"1756537053","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d89cb698-66e7-5884-8faa-78f370df0001","type":"url","category":"Network activity","to_ids":true,"value":"http://134.122.207.42:3232","comment":"https://x.com/drb_ra/status/1961684843068068158","timestamp":"1756537087","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"6ee1ac53-f259-5c28-9796-de7e66a0019b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.122.207.42","comment":"https://x.com/drb_ra/status/1961684843068068158","timestamp":"1756537087","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"5ff10bdd-9227-5aea-bf08-0077b972f0df","type":"url","category":"Network activity","to_ids":true,"value":"http://8.210.214.111:3232","comment":"https://x.com/drb_ra/status/1961684982759383324","timestamp":"1756537120","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"622c7bde-a5c9-5ea8-9587-50e4872f83f0","type":"url","category":"Network activity","to_ids":true,"value":"http://13.39.161.218:34659","comment":"https://x.com/drb_ra/status/1961685123474108889","timestamp":"1756537154","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3c744b34-da94-558d-bedb-4579e5fba403","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.39.161.218","comment":"https://x.com/drb_ra/status/1961685123474108889","timestamp":"1756537154","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"88eb4db3-aa99-5c10-960e-d8948c693c6e","type":"url","category":"Network activity","to_ids":true,"value":"http://89.216.98.17:3085","comment":"https://x.com/drb_ra/status/1961685265849692422","timestamp":"1756537188","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0656e793-cd3a-5bc2-8109-4fb555635ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.216.98.17","comment":"https://x.com/drb_ra/status/1961685265849692422","timestamp":"1756537188","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"94b23a41-9af8-5171-8618-660a7d904424","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.175.137.195","comment":"https://x.com/drb_ra/status/1961685407520669989","timestamp":"1756537222","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b556e052-92c2-5929-b46d-9a3cd0b5a923","type":"url","category":"Network activity","to_ids":true,"value":"http://18.175.137.195:101","comment":"https://x.com/drb_ra/status/1961685407520669989","timestamp":"1756537222","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"1d23b5dd-9763-51a6-8915-d95fb4b73917","type":"url","category":"Network activity","to_ids":true,"value":"http://54.155.129.95:443","comment":"https://x.com/drb_ra/status/1961685548717707368","timestamp":"1756537255","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"570f29aa-bd9c-5c95-87cc-a4160324a295","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.155.129.95","comment":"https://x.com/drb_ra/status/1961685548717707368","timestamp":"1756537255","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2cc521af-8154-55a6-a69e-85fc167d2838","type":"url","category":"Network activity","to_ids":true,"value":"http://172.235.145.100:80","comment":"https://x.com/drb_ra/status/1961685688891412991","timestamp":"1756537289","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"41ce16b1-ec87-5aec-bc1f-3675930ef074","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.235.145.100","comment":"https://x.com/drb_ra/status/1961685688891412991","timestamp":"1756537289","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e8ddfc2d-250f-5cc9-adcf-5cc30dfefc1d","type":"domain","category":"Network activity","to_ids":true,"value":"sis.voizend.com","comment":"https://x.com/dylancybertech/status/1961688868987572330","timestamp":"1756538047","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"bd4f7595-54e0-5c25-a5fa-e29429cb3f28","type":"url","category":"Network activity","to_ids":true,"value":"http://sis.voizend.com/softs/","comment":"https://x.com/dylancybertech/status/1961688868987572330","timestamp":"1756538047","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"c64d57e4-df91-5dce-bdae-690262744c0e","type":"md5","category":"Payload delivery","to_ids":true,"value":"69d90ea65cf38e003e92eb7d1fc39782","comment":"https://x.com/dylancybertech/status/1961688980283388126","timestamp":"1756538073","distribution":"5","Tag":[{"name":"malware"},{"name":"RAT"}]},{"uuid":"9962c3a1-ae97-5a70-88ce-3d5107f994cd","type":"url","category":"Network activity","to_ids":true,"value":"https://sv-gt.de/wp-content/temp/app/index.","comment":"https://x.com/AddressIntel/status/1961690371525599401","timestamp":"1756538405","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c5972e49-d896-51d3-a5d8-0d268356a4d3","type":"domain","category":"Network activity","to_ids":true,"value":"sv-gt.de","comment":"https://x.com/AddressIntel/status/1961690371525599401","timestamp":"1756538405","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f413555c-73e2-5cc0-bfe1-9b3bf88405d8","type":"domain","category":"Network activity","to_ids":true,"value":"interbk.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"2f5ce9cb-6952-50e4-9928-41047b96ded4","type":"url","category":"Network activity","to_ids":true,"value":"http://interbk.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"b29f4e52-2b16-50ab-a50f-27247b0d2ab0","type":"domain","category":"Network activity","to_ids":true,"value":"aerokju.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"b8b2c026-69df-50f5-a578-fc2a7ba2d1e5","type":"url","category":"Network activity","to_ids":true,"value":"http://aerokju.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"002bc357-41ec-595b-b01f-43ca6e7dd9dc","type":"url","category":"Network activity","to_ids":true,"value":"http://genuumc.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"8fd78929-27f3-5e68-b318-f469671ffab4","type":"domain","category":"Network activity","to_ids":true,"value":"genuumc.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"411016bf-bdf0-581d-9ed3-6cd59b8123cc","type":"domain","category":"Network activity","to_ids":true,"value":"pitbubs.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"016e3cf1-f1f6-5561-913b-92f656e5510e","type":"url","category":"Network activity","to_ids":true,"value":"http://pitbubs.top","comment":"https://x.com/FalconFeedsio/status/1961692890414887168","timestamp":"1756539006","distribution":"5"},{"uuid":"1c73e5ee-10be-5982-a1a3-dd554bf36d35","type":"domain","category":"Network activity","to_ids":true,"value":"static.centbrowser.com","comment":"https://x.com/dylancybertech/status/1961693824381567335","timestamp":"1756539228","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"66c4acf7-abf0-50c7-b5a0-9dcb264140a1","type":"url","category":"Network activity","to_ids":true,"value":"https://static.centbrowser.com/SysinternalsSuite/","comment":"https://x.com/dylancybertech/status/1961693824381567335","timestamp":"1756539228","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"}]},{"uuid":"d29e5dfc-17f3-5881-806c-ad4c67c74d21","type":"url","category":"Network activity","to_ids":true,"value":"https://sv-gt.de/wp-content/temp/app/normal","comment":"https://x.com/AddressIntel/status/1961695405583761680","timestamp":"1756539605","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2a4c0e5b-111b-5969-88b9-b0959c28bbe4","type":"md5","category":"Payload delivery","to_ids":true,"value":"abb27d209e1015269e4956560f91fefe","comment":"https://x.com/ReBensk/status/1961697254294876509","timestamp":"1756540046","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"c51fddb1-2dd0-565e-afae-243bcb1b9ae7","type":"domain","category":"Network activity","to_ids":true,"value":"acanallar.cfd","comment":"https://x.com/urldna_bot/status/1961700448844251547","timestamp":"1756540808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bb7cdb68-f3be-5ff1-94de-fbefcb580006","type":"url","category":"Network activity","to_ids":true,"value":"http://acanallar.cfd/gaslini.org/gaslini.org.html","comment":"https://x.com/urldna_bot/status/1961700448844251547","timestamp":"1756540808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cdb00663-f033-586a-9020-408b3633e919","type":"url","category":"Network activity","to_ids":true,"value":"https://tronlink.com.co","comment":"https://x.com/Leon4Leon2/status/1961702571313177012","timestamp":"1756541314","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de1dd201-f7c0-55a4-9374-4fc5ad993c4c","type":"domain","category":"Network activity","to_ids":true,"value":"tronlink.com.co","comment":"https://x.com/Leon4Leon2/status/1961702571313177012","timestamp":"1756541314","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79dd0d9d-a759-5ac0-905c-819d2536bf19","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c4157fdbcc337db176dffca2d6d9adc22468302ac50ea968529e837a47d8ac5b","comment":"https://x.com/BlinkzSec/status/1961703783492206630","timestamp":"1756541603","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"80cdd4f2-8ecf-53b0-ba44-7a3a88e0c95f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"4932580f233112b8f0eb308387841a89014b6a18f83d5b5a7724fa37961278e6","comment":"https://x.com/akudryk007/status/1961707354094756010","timestamp":"1756542454","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"434658c4-9ca2-5dd5-b175-3367ed33bee6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"718ad0cf2784df900431a91a70293d3efb8581e2ef59eb83348ddba4f2026a08","comment":"https://x.com/akudryk007/status/1961707354094756010","timestamp":"1756542454","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5712261e-b729-50d9-881b-f42668ce1f32","type":"url","category":"Network activity","to_ids":true,"value":"http://20250829131540.zip","comment":"https://x.com/skocherhan/status/1961710393891394029","timestamp":"1756543179","distribution":"5"},{"uuid":"b6ab9ab3-1188-5770-a9a5-fdb250232bca","type":"domain","category":"Network activity","to_ids":true,"value":"20250829131540.zip","comment":"https://x.com/skocherhan/status/1961710393891394029","timestamp":"1756543179","distribution":"5"},{"uuid":"5b56bd12-588a-50f3-acb8-502e9b0cac7e","type":"url","category":"Network activity","to_ids":true,"value":"http://103.172.26.89:80","comment":"https://x.com/KulinskiArkadi/status/1961711460528107928","timestamp":"1756543433","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c71fc4d-4c88-5210-be1f-95fd670cc396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.172.26.89","comment":"https://x.com/KulinskiArkadi/status/1961711460528107928","timestamp":"1756543433","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e98bacc9-5d42-52ea-8728-6ea02a41bce8","type":"url","category":"Network activity","to_ids":true,"value":"http://23.254.204.138:443","comment":"https://x.com/drb_ra/status/1961720849397932263","timestamp":"1756545672","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"dfaed41e-5611-539c-9a5e-ac87e6bdcc94","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.254.204.138","comment":"https://x.com/drb_ra/status/1961720849397932263","timestamp":"1756545672","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2fe54dde-ac63-59a1-b782-95feeae481c0","type":"url","category":"Network activity","to_ids":true,"value":"https://23.254.204.138:443","comment":"https://x.com/drb_ra/status/1961720849397932263","timestamp":"1756545672","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ecc37225-223c-596a-a5e5-83811f64d460","type":"domain","category":"Network activity","to_ids":true,"value":"allegrolokalnie.pl-534634634.shop","comment":"https://x.com/urldna_bot/status/1961730657660359090","timestamp":"1756548010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c7f7cf7a-917f-5535-bc2c-7b040332cf29","type":"url","category":"Network activity","to_ids":true,"value":"https://allegrolokalnie.pl-534634634.shop","comment":"https://x.com/urldna_bot/status/1961730657660359090","timestamp":"1756548010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2815a0cc-5cc8-5055-9324-5b9e172b44c9","type":"url","category":"Network activity","to_ids":true,"value":"http://18.192.31.30:18890","comment":"https://x.com/SarlackLab/status/1961745861215473744","timestamp":"1756551635","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"2ed8177b-24cc-516e-a175-fec8284c3362","type":"url","category":"Network activity","to_ids":true,"value":"http://18.153.198.123:18890","comment":"https://x.com/SarlackLab/status/1961745861215473744","timestamp":"1756551635","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"34dd4ae6-953c-57c1-9d1e-118f412efa20","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.153.198.123","comment":"https://x.com/SarlackLab/status/1961745861215473744","timestamp":"1756551635","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"30ac4f10-7c7d-5d92-8bd3-0bab1f410a77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.192.31.30","comment":"https://x.com/SarlackLab/status/1961745861215473744","timestamp":"1756551635","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"99d52cc9-17ca-527f-8307-83e196caa75d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.71.225.231:18890","comment":"https://x.com/SarlackLab/status/1961745928584417766","timestamp":"1756551651","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"6aa81a9f-8558-50a0-afde-56e2ab46bc95","type":"url","category":"Network activity","to_ids":true,"value":"http://3.78.28.71:18890","comment":"https://x.com/SarlackLab/status/1961745928584417766","timestamp":"1756551651","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"4c1560f6-a3ad-5c93-aa42-e9f672725f07","type":"url","category":"Network activity","to_ids":true,"value":"http://52.57.120.10:18890","comment":"https://x.com/SarlackLab/status/1961745928584417766","timestamp":"1756551651","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"b6202dae-9dda-5a80-86e7-f37c3cd93ac9","type":"url","category":"Network activity","to_ids":true,"value":"http://3.74.27.83:18890","comment":"https://x.com/SarlackLab/status/1961745928584417766","timestamp":"1756551651","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"247434e7-f4fe-5983-909e-b0e636d0fe80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.57.120.10","comment":"https://x.com/SarlackLab/status/1961745928584417766","timestamp":"1756551651","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"9a89dbb1-6f29-584a-92e3-dbcdacc2e92d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.200.246.30","comment":"https://x.com/drb_ra/status/1961747869360160906","timestamp":"1756552114","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9c6d1105-bcb7-5a75-8e66-de452e4f8085","type":"url","category":"Network activity","to_ids":true,"value":"http://209.200.246.30:8888","comment":"https://x.com/drb_ra/status/1961747869360160906","timestamp":"1756552114","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4b6a95d2-0874-538a-9692-58954c2a024d","type":"url","category":"Network activity","to_ids":true,"value":"http://193.226.78.58:8001","comment":"https://x.com/drb_ra/status/1961748009982533681","timestamp":"1756552147","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"23426ad2-bee6-5896-b21f-25efb69a5cd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.226.78.58","comment":"https://x.com/drb_ra/status/1961748009982533681","timestamp":"1756552147","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8be141c6-f1e2-592a-a557-b2f67f42358c","type":"url","category":"Network activity","to_ids":true,"value":"http://179.43.186.243:80","comment":"https://x.com/drb_ra/status/1961748148528820666","timestamp":"1756552180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"778c97d2-5e40-503e-97c3-87d688caa1d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.43.186.243","comment":"https://x.com/drb_ra/status/1961748148528820666","timestamp":"1756552180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6225c97c-fb94-5f3d-a9f3-7b690cc6df28","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.159.96:8085","comment":"https://x.com/drb_ra/status/1961748288656248896","timestamp":"1756552214","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2b09d92f-399a-5d21-837b-d443b6b3adc2","type":"url","category":"Network activity","to_ids":true,"value":"https://192.168.6.177/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961748288656248896","timestamp":"1756552214","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d2f9c97c-84a8-51d9-9882-14ad73d380eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.159.96","comment":"https://x.com/drb_ra/status/1961748288656248896","timestamp":"1756552214","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7aebef2-839a-535d-9e28-de7168d30ce2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.104.214.223:443","comment":"https://x.com/drb_ra/status/1961748429249372347","timestamp":"1756552247","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"529dcabe-e069-5a25-8f10-917859953bae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.104.214.223","comment":"https://x.com/drb_ra/status/1961748429249372347","timestamp":"1756552247","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"031b62cd-1e3a-5ef0-b10e-5fc35303d1f6","type":"url","category":"Network activity","to_ids":true,"value":"http://152.136.139.105:5996","comment":"https://x.com/drb_ra/status/1961748568303075595","timestamp":"1756552280","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0371d8fa-628e-5df2-955f-55c28ba61209","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.136.139.105","comment":"https://x.com/drb_ra/status/1961748568303075595","timestamp":"1756552280","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7f3a6f1a-f683-5784-b359-627c6d003dab","type":"url","category":"Network activity","to_ids":true,"value":"http://43.255.158.38:80","comment":"https://x.com/drb_ra/status/1961748707721843146","timestamp":"1756552314","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8e86a097-d82e-5ca0-a207-3ffdb8d282bb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.255.158.38","comment":"https://x.com/drb_ra/status/1961748707721843146","timestamp":"1756552314","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b205acca-51bc-5250-bd2f-a1b71cca62eb","type":"domain","category":"Network activity","to_ids":true,"value":"flaskproxy-fedg.onrender.com","comment":"https://x.com/drb_ra/status/1961748994876473550","timestamp":"1756552382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7f250139-8fc9-5f46-8504-1a04fb76de3b","type":"url","category":"Network activity","to_ids":true,"value":"https://flaskproxy-fedg.onrender.com/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1961748994876473550","timestamp":"1756552382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b39edcec-611f-50b1-a67b-f96feabcaba6","type":"url","category":"Network activity","to_ids":true,"value":"http://154.219.109.205:443","comment":"https://x.com/drb_ra/status/1961748994876473550","timestamp":"1756552382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e874d916-e8c0-53b2-9af1-a5d9e72e7d35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.219.109.205","comment":"https://x.com/drb_ra/status/1961748994876473550","timestamp":"1756552382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2d80c446-effe-5654-a768-06bacc46dbd7","type":"url","category":"Network activity","to_ids":true,"value":"http://44.209.100.103","comment":"https://x.com/skocherhan/status/1961750025333080478","timestamp":"1756552628","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"2a2c3ac4-c16e-563f-82f1-cb8c7b4cdc3f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.209.100.103","comment":"https://x.com/skocherhan/status/1961750025333080478","timestamp":"1756552628","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"e61bcc75-854e-59ca-a04c-e6261520bb60","type":"domain","category":"Network activity","to_ids":true,"value":"egp.ppao.go.th","comment":"https://x.com/skocherhan/status/1961750081389957280","timestamp":"1756552641","distribution":"5"},{"uuid":"8dd14b81-d9f0-542d-8ad2-3924f0e8e61f","type":"url","category":"Network activity","to_ids":true,"value":"https://egp.ppao.go.th/readme.php","comment":"https://x.com/skocherhan/status/1961750081389957280","timestamp":"1756552641","distribution":"5"},{"uuid":"6668d537-e8ae-55e8-9559-9a1e4a8fbdd1","type":"domain","category":"Network activity","to_ids":true,"value":"authlobby.site","comment":"https://x.com/skocherhan/status/1961756676576485688","timestamp":"1756554214","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"659480bb-d84e-560a-a37f-6b89b6afbd50","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e44f8592680fd14373a51b9667c6e6e4ca47f84d16c1437e20d4d1bea2c6bfee","comment":"https://x.com/skocherhan/status/1961756676576485688","timestamp":"1756554214","distribution":"5"},{"uuid":"c48f9442-40da-508d-8ab8-1cfbb0ec18f8","type":"url","category":"Network activity","to_ids":true,"value":"https://authlobby.site","comment":"https://x.com/skocherhan/status/1961756676576485688","timestamp":"1756554214","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"a9482bf6-61f9-5398-8bb5-da614c8635a7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ec67aa4fcecdd7ca0838bd29101211d8f082fc44189adc1bd93cdb8fe9e50bda","comment":"https://x.com/skocherhan/status/1961756704061685771","timestamp":"1756554220","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"}]},{"uuid":"654ff7bf-58b3-5ce4-9db5-499f5f7b09a5","type":"domain","category":"Network activity","to_ids":true,"value":"rideofy.com","comment":"https://x.com/urldna_bot/status/1961760850705862885","timestamp":"1756555209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b329c2d9-314f-5a17-9b63-511f5d508d1e","type":"url","category":"Network activity","to_ids":true,"value":"http://www.rideofy.com/serviciodecorreo.es/login/","comment":"https://x.com/urldna_bot/status/1961760850705862885","timestamp":"1756555209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0f3823cf-7ccb-5b16-aa1c-97c0baa36355","type":"url","category":"Network activity","to_ids":true,"value":"http://23.160.168.174:54984","comment":"https://x.com/SarlackLab/status/1961760887854784753","timestamp":"1756555218","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"4520b13d-86b3-5aa5-a9be-1fd1b54be7ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.160.168.174","comment":"https://x.com/SarlackLab/status/1961760887854784753","timestamp":"1756555218","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"785c70c8-6107-5acd-8225-c777680b6b74","type":"domain","category":"Network activity","to_ids":true,"value":"hhhsagawanauthoritatisad.mrbasic.com","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c4b0981-04b7-52ce-886e-e641bcbed4b0","type":"url","category":"Network activity","to_ids":true,"value":"https://hhhsagawanauthoritatisad.mrbasic.com/meiluxxx/","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0fe7b85-9d5a-56f7-8a9f-a6c176d81a99","type":"domain","category":"Network activity","to_ids":true,"value":"hhhsagawanauthoritatisad.sexidude.com","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de97040e-797d-5c32-a175-e61a16a849e9","type":"url","category":"Network activity","to_ids":true,"value":"https://hhhsagawanauthoritatisad.sexidude.com/meiluxxx/","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9be8ec1-6671-57d1-8034-a466e473d4e3","type":"domain","category":"Network activity","to_ids":true,"value":"hhhsagawanauthoritatisad.toythieves.com","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35223fb1-4ae2-53f7-9bd0-680df4be3a9a","type":"url","category":"Network activity","to_ids":true,"value":"https://hhhsagawanauthoritatisad.toythieves.com/meiluxxx/","comment":"https://x.com/masaomi346/status/1961777951743369610","timestamp":"1756559286","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e171d29e-7908-5574-a62a-481b12898638","type":"url","category":"Network activity","to_ids":true,"value":"https://hhhsagawanauthoritatisad.zzux.com/meiluxxx/","comment":"https://x.com/masaomi346/status/1961778160737067126","timestamp":"1756559336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d67fd818-f8f2-5739-8a13-77e193c01fca","type":"domain","category":"Network activity","to_ids":true,"value":"hhhsagawanauthoritatisad.zzux.com","comment":"https://x.com/masaomi346/status/1961778160737067126","timestamp":"1756559336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a338be53-1562-5ecb-b03b-2a1a6bf21d40","type":"url","category":"Network activity","to_ids":true,"value":"https://hhhsagawanauthoritatisad.yourtrap.com/meiluxxx/","comment":"https://x.com/masaomi346/status/1961778160737067126","timestamp":"1756559336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dda22d17-041b-5bed-8469-8cf2f9d1889e","type":"domain","category":"Network activity","to_ids":true,"value":"hhhsagawanauthoritatisad.yourtrap.com","comment":"https://x.com/masaomi346/status/1961778160737067126","timestamp":"1756559336","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8fc1ec08-9835-5f34-8c37-05e5ced55b29","type":"url","category":"Network activity","to_ids":true,"value":"https://equushidalgo7.wixsite.com/my-site","comment":"https://x.com/urldna_bot/status/1961791047530389897","timestamp":"1756562408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1a869684-93c3-553e-8960-c6ddff3d757c","type":"domain","category":"Network activity","to_ids":true,"value":"equushidalgo7.wixsite.com","comment":"https://x.com/urldna_bot/status/1961791047530389897","timestamp":"1756562408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b6e2557e-9053-5534-9a76-31acff643e7f","type":"domain","category":"Network activity","to_ids":true,"value":"info-guest44567645.com","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"ad091cf0-8ed6-55f0-b01c-0d50c173bb03","type":"url","category":"Network activity","to_ids":true,"value":"http://info-guest44567645.com","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"ad67f7b2-9535-52d6-8ffe-4b1ebc9fcef5","type":"domain","category":"Network activity","to_ids":true,"value":"bilaskf.com","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"b20065b0-842f-52e1-8159-47ec08c63e05","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/upd","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"a1fc4c19-0fb2-547d-9238-c172236582e4","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/dllstart","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"ff2e55f0-7a89-52ac-978f-4edf2652f1cb","type":"url","category":"Network activity","to_ids":true,"value":"http://bilaskf.com/apif/a/a","comment":"https://x.com/1ZRR4H/status/1961796566173229423","timestamp":"1756563724","distribution":"5"},{"uuid":"b1887c11-0a52-5a6a-95bb-42c462b02655","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.7/icoxn/login.php","comment":"https://x.com/ViriBack/status/1961807470956814477","timestamp":"1756566324","distribution":"5","Tag":[{"name":"malware"},{"name":"Lumma"}]},{"uuid":"3f2336d9-21f1-5547-829a-f9144c7aa6af","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.7","comment":"https://x.com/ViriBack/status/1961807470956814477","timestamp":"1756566324","distribution":"5","Tag":[{"name":"malware"},{"name":"Lumma"}]},{"uuid":"f2b9c0e1-e7ba-55b3-80c8-2ea612be4a7b","type":"md5","category":"Payload delivery","to_ids":true,"value":"3337e14626b4d56b6604275de3fbfcc9","comment":"https://x.com/ViriBack/status/1961811220500975644","timestamp":"1756567218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f64d9de9-687e-5569-80df-e5cbf1a08a45","type":"url","category":"Network activity","to_ids":true,"value":"http://5.206.224.85:8080/panel_xyz123/panel.php","comment":"https://x.com/ViriBack/status/1961811220500975644","timestamp":"1756567218","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b419f6f9-3e95-5ef4-bea6-dc35d73f30da","type":"domain","category":"Network activity","to_ids":true,"value":"zsxmbra.weebly.com","comment":"https://x.com/urldna_bot/status/1961821246917595146","timestamp":"1756569608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6c2b20cb-c148-56db-968b-07d073f9ab5a","type":"url","category":"Network activity","to_ids":true,"value":"https://zsxmbra.weebly.com","comment":"https://x.com/urldna_bot/status/1961821246917595146","timestamp":"1756569608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c3ed74c6-9b00-5a6b-b806-7c90e56248df","type":"domain","category":"Network activity","to_ids":true,"value":"riosaladohp.com","comment":"https://x.com/JAMESWT_WT/status/1961834562662580472","timestamp":"1756572783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cddc313-52fe-5000-b0ef-637c0ff3d3b7","type":"url","category":"Network activity","to_ids":true,"value":"https://riosaladohp.com/suce.php","comment":"https://x.com/JAMESWT_WT/status/1961834562662580472","timestamp":"1756572783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc4b106b-99a0-561a-afb7-3a90781ca9c6","type":"url","category":"Network activity","to_ids":true,"value":"https://riosaladohp.com/Ing_it/assets/index.php","comment":"https://x.com/JAMESWT_WT/status/1961834562662580472","timestamp":"1756572783","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fa96ae9a-565b-5577-a796-55b2187954c1","type":"domain","category":"Network activity","to_ids":true,"value":"mwebonliine.weebly.com","comment":"https://x.com/urldna_bot/status/1961851443582832900","timestamp":"1756576808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a2064671-0db6-5622-86b1-6336b844e1ac","type":"url","category":"Network activity","to_ids":true,"value":"https://mwebonliine.weebly.com","comment":"https://x.com/urldna_bot/status/1961851443582832900","timestamp":"1756576808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9e5764f1-366f-5f56-8664-3efb9ac29a5a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.96.61","comment":"https://x.com/FalconFeedsio/status/1961860401856958754","timestamp":"1756578944","distribution":"5"},{"uuid":"808d5d49-a439-5ea9-934a-f24c373b7584","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.169","comment":"https://x.com/FalconFeedsio/status/1961860401856958754","timestamp":"1756578944","distribution":"5"},{"uuid":"cb350fe8-a7c8-5e55-8069-f57c4fe3b94e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.250.169.71","comment":"https://x.com/FalconFeedsio/status/1961860401856958754","timestamp":"1756578944","distribution":"5"},{"uuid":"b68d5340-ef44-5e32-a28c-75d9cf31694d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.47.114:80","comment":"https://x.com/drb_ra/status/1961863311919624540","timestamp":"1756579637","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"476c8812-ac06-5763-91ba-8cbd8dc65fb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.47.114","comment":"https://x.com/drb_ra/status/1961863311919624540","timestamp":"1756579637","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9aca5a52-e280-5c8c-b570-45a32b9a5f6b","type":"url","category":"Network activity","to_ids":true,"value":"http://52.210.190.240:80","comment":"https://x.com/drb_ra/status/1961863451027923363","timestamp":"1756579671","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"20eddf50-3287-5b51-9ed1-a9136bfcab4e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.210.190.240","comment":"https://x.com/drb_ra/status/1961863451027923363","timestamp":"1756579671","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5b90fafa-a58b-550b-b810-68bbab843ad3","type":"url","category":"Network activity","to_ids":true,"value":"http://4.248.184.170:8080","comment":"https://x.com/drb_ra/status/1961863589347631437","timestamp":"1756579704","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"db6e6edf-73a9-57e1-9157-5e8ae38dcc8f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.236.207.202:445","comment":"https://x.com/drb_ra/status/1961863728577593428","timestamp":"1756579737","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b3a1b39f-e9c2-5e2e-a929-dec0b8d48e9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.83.41.229","comment":"https://x.com/drb_ra/status/1961863867874607514","timestamp":"1756579770","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d2f7d8b1-22c7-597d-b9d1-7035bc8a729d","type":"url","category":"Network activity","to_ids":true,"value":"http://98.83.41.229:445","comment":"https://x.com/drb_ra/status/1961863867874607514","timestamp":"1756579770","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"210aa4c4-eea4-5298-bdc4-15241f7ac42f","type":"url","category":"Network activity","to_ids":true,"value":"http://62.109.3.99:40056","comment":"https://x.com/drb_ra/status/1961864005523275930","timestamp":"1756579803","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"a6bea059-7723-5930-8d76-c0c71c10c353","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.109.3.99","comment":"https://x.com/drb_ra/status/1961864005523275930","timestamp":"1756579803","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c3ce6fa1-4e2f-5fd8-aaf3-3e746fba1a8a","type":"url","category":"Network activity","to_ids":true,"value":"http://166.117.225.75:443","comment":"https://x.com/drb_ra/status/1961864143532683420","timestamp":"1756579836","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"8e4a62b2-791f-5366-96c9-90dcfaafa3c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.117.225.75","comment":"https://x.com/drb_ra/status/1961864143532683420","timestamp":"1756579836","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fcfeea29-1f83-507e-b819-7563de75f10f","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.86.248:443","comment":"https://x.com/drb_ra/status/1961864281403625610","timestamp":"1756579869","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a75ae542-0185-5c6a-a8e6-e65c6344b4b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.86.248","comment":"https://x.com/drb_ra/status/1961864281403625610","timestamp":"1756579869","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a9b403bf-feb5-584f-85e4-53d49a9f4797","type":"url","category":"Network activity","to_ids":true,"value":"http://65.87.7.5:7443","comment":"https://x.com/drb_ra/status/1961864419467571413","timestamp":"1756579901","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a61b7351-f925-51a0-b7da-04fd7f03d314","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.87.7.5","comment":"https://x.com/drb_ra/status/1961864419467571413","timestamp":"1756579901","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"1e5e38ac-9f08-5ab3-8d1f-e9dd11a55bd3","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.233.159:7443","comment":"https://x.com/drb_ra/status/1961864558076662047","timestamp":"1756579934","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"2ecb9a2f-767e-5d2a-9c2e-c4dbb24bed5e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.233.159","comment":"https://x.com/drb_ra/status/1961864558076662047","timestamp":"1756579934","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"089f36e3-20a6-5a29-8ec7-b9c01d965b98","type":"url","category":"Network activity","to_ids":true,"value":"http://178.255.127.92:443","comment":"https://x.com/drb_ra/status/1961864695507202538","timestamp":"1756579967","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"18af893a-8ed3-5979-a3aa-9ce44205cc36","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.255.127.92","comment":"https://x.com/drb_ra/status/1961864695507202538","timestamp":"1756579967","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b664e72c-d886-52f3-8b3c-a2bd21e42fb7","type":"url","category":"Network activity","to_ids":true,"value":"http://45.155.108.82:8080","comment":"https://x.com/drb_ra/status/1961865342273143147","timestamp":"1756580121","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7a581f7c-1fa5-55ca-a68c-984976ab5e82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.155.108.82","comment":"https://x.com/drb_ra/status/1961865342273143147","timestamp":"1756580121","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"651a0684-a772-5a47-b8b8-fe813f04dacc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.200.192.179","comment":"https://x.com/drb_ra/status/1961865481939190016","timestamp":"1756580155","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d33626bb-b799-59ec-bc89-25700aad3bbc","type":"url","category":"Network activity","to_ids":true,"value":"http://84.200.192.179:443","comment":"https://x.com/drb_ra/status/1961865481939190016","timestamp":"1756580155","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8c0b3fbd-a350-5545-82dd-77700abc48f9","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.52.249:2000","comment":"https://x.com/drb_ra/status/1961865619696984217","timestamp":"1756580188","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"7e06dc5f-89c4-5755-9b01-cca8b983ccdb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.52.249","comment":"https://x.com/drb_ra/status/1961865619696984217","timestamp":"1756580188","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e0b2b8dd-0097-5d2b-ba0c-7e00753fefc0","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.46:33672","comment":"https://x.com/drb_ra/status/1961865758138310728","timestamp":"1756580221","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"33e955ac-b7b6-547f-8312-80b588cd7bc9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.46","comment":"https://x.com/drb_ra/status/1961865758138310728","timestamp":"1756580221","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"eff9ada1-f6c7-5279-8d17-45bda85a5262","type":"url","category":"Network activity","to_ids":true,"value":"http://147.189.141.209:30390","comment":"https://x.com/drb_ra/status/1961865897187950763","timestamp":"1756580254","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8d8a7226-82f2-5250-b2e1-dc89bb95d774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.189.141.209","comment":"https://x.com/drb_ra/status/1961865897187950763","timestamp":"1756580254","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"95dc7241-f179-5e1b-833b-c4d7bc0656c7","type":"url","category":"Network activity","to_ids":true,"value":"http://45.88.186.199:3000","comment":"https://x.com/drb_ra/status/1961866035406999600","timestamp":"1756580287","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8cd30ca0-e33b-5ef1-a6eb-36b4b08c6f71","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.88.186.199","comment":"https://x.com/drb_ra/status/1961866035406999600","timestamp":"1756580287","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3f8b305f-860c-530b-a30d-26ab70f96e19","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.33:2404","comment":"https://x.com/drb_ra/status/1961866174452441388","timestamp":"1756580320","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"a70dfda6-1408-5daf-b981-4abe9ac78fc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.33","comment":"https://x.com/drb_ra/status/1961866174452441388","timestamp":"1756580320","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"58607f60-c54d-5c5e-b913-d496096a10ce","type":"url","category":"Network activity","to_ids":true,"value":"http://23.226.54.63:3232","comment":"https://x.com/drb_ra/status/1961866313913008339","timestamp":"1756580353","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"2ce59b1a-ab06-50cb-bd18-884d4cce4f5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.226.54.63","comment":"https://x.com/drb_ra/status/1961866313913008339","timestamp":"1756580353","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"1ff189a8-5eb4-5a56-9889-16446975c010","type":"url","category":"Network activity","to_ids":true,"value":"http://198.46.159.210:3030","comment":"https://x.com/drb_ra/status/1961866453277110763","timestamp":"1756580386","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"1e6628cc-61eb-5810-a536-162163bdc941","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.46.159.210","comment":"https://x.com/drb_ra/status/1961866453277110763","timestamp":"1756580386","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"72d3fc54-6d64-5be2-9ac3-baa2b966f2e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.84.59.12","comment":"https://x.com/drb_ra/status/1961866591982768230","timestamp":"1756580419","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fbd23e05-00e7-5d37-bb0e-d55f63c2c2da","type":"url","category":"Network activity","to_ids":true,"value":"http://45.84.59.12:8080","comment":"https://x.com/drb_ra/status/1961866591982768230","timestamp":"1756580419","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b855773e-a760-5a58-b1a9-d9857cd7084c","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.175.82:1912","comment":"https://x.com/SarlackLab/status/1961866598374899965","timestamp":"1756580421","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"38d55a43-b859-56a8-a17d-bfaf4e0068de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.175.82","comment":"https://x.com/SarlackLab/status/1961866598374899965","timestamp":"1756580421","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"dd13a186-a00f-5ff1-9f1e-9bd640aa5046","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.16.160:7707","comment":"https://x.com/drb_ra/status/1961866731363647948","timestamp":"1756580453","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"67f8cc28-ffdb-5a0c-acbc-2c0a9f3ef4f8","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.16.160:6606","comment":"https://x.com/drb_ra/status/1961866869696086158","timestamp":"1756580486","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"95f4aa3e-adbb-52ac-a055-de0be7079995","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.16.160","comment":"https://x.com/drb_ra/status/1961866869696086158","timestamp":"1756580486","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a63148fd-b675-53e2-af3b-293663f6aa8d","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.129:7707","comment":"https://x.com/drb_ra/status/1961867009781649651","timestamp":"1756580519","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a2814269-4f07-5725-a237-ebe391ad5e93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.129","comment":"https://x.com/drb_ra/status/1961867009781649651","timestamp":"1756580519","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"284eca60-afe2-5410-b16b-bf91b1a9904b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.6.168:5508","comment":"https://x.com/drb_ra/status/1961867147157684256","timestamp":"1756580552","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"103eb944-9654-5f0b-9e55-83ada18539a2","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.6.168:8808","comment":"https://x.com/drb_ra/status/1961867290749677934","timestamp":"1756580586","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"433c1195-b5be-5303-bb5f-a1cf07babb4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.6.168","comment":"https://x.com/drb_ra/status/1961867290749677934","timestamp":"1756580586","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"56cbbf7b-d2e2-5889-944f-027b8dafb3ed","type":"url","category":"Network activity","to_ids":true,"value":"http://54.235.31.86:443","comment":"https://x.com/drb_ra/status/1961867431388799321","timestamp":"1756580620","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cab705b4-2667-5352-893f-75cdd2db4ab7","type":"url","category":"Network activity","to_ids":true,"value":"http://54.235.31.86:80","comment":"https://x.com/drb_ra/status/1961867570195186078","timestamp":"1756580653","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2ced50b3-1b27-5b8f-a1b8-379080be6781","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.235.31.86","comment":"https://x.com/drb_ra/status/1961867570195186078","timestamp":"1756580653","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e5e5cc33-8c2e-54ca-a31a-cb53278482f3","type":"domain","category":"Network activity","to_ids":true,"value":"radleyfinance.com","comment":"https://x.com/AmberMille78556/status/1961871954077421911","timestamp":"1756581698","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e8be409-5596-5d5d-b96e-cf4c81741f85","type":"url","category":"Network activity","to_ids":true,"value":"https://radleyfinance.com","comment":"https://x.com/AmberMille78556/status/1961871954077421911","timestamp":"1756581698","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"640df924-012b-55c0-a1fd-898426d7d366","type":"domain","category":"Network activity","to_ids":true,"value":"binance-vipddd.top","comment":"https://x.com/urldna_bot/status/1961881643653755198","timestamp":"1756584008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7d966fef-d983-5956-b5e6-70402455bcca","type":"url","category":"Network activity","to_ids":true,"value":"http://www.binance-vipddd.top","comment":"https://x.com/urldna_bot/status/1961881643653755198","timestamp":"1756584008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"98fa8b18-08d2-5651-b2bd-7ca821108c7c","type":"domain","category":"Network activity","to_ids":true,"value":"grupopiclebrija.gov.co","comment":"https://x.com/1ZRR4H/status/1961896397420069162","timestamp":"1756587526","distribution":"5"},{"uuid":"0b1947a8-eb0b-5d47-9c31-7df70ea8923c","type":"url","category":"Network activity","to_ids":true,"value":"http://grupopiclebrija.gov.co","comment":"https://x.com/1ZRR4H/status/1961896397420069162","timestamp":"1756587526","distribution":"5"},{"uuid":"d80d1615-99fc-598f-8fc3-321a33aec3ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.50.25.25","comment":"https://x.com/threatquery/status/1961896736156192934","timestamp":"1756587606","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"227432ba-d8ff-50c2-b7d7-6a711a6374d6","type":"url","category":"Network activity","to_ids":true,"value":"http://173.243.112.43","comment":"https://x.com/threatquery/status/1961896734352642384","timestamp":"1756587606","distribution":"5","Tag":[{"name":"malware"},{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"148791fd-f4ec-505e-99ed-7385452b5f57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.243.112.43","comment":"https://x.com/threatquery/status/1961896734352642384","timestamp":"1756587606","distribution":"5","Tag":[{"name":"malware"},{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"f4e53605-27d3-5ddf-a8f2-50d25e81139d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.50.25.25","comment":"https://x.com/threatquery/status/1961896736156192934","timestamp":"1756587606","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"e1ab6f4b-c9ca-551a-a184-834149b3568d","type":"url","category":"Network activity","to_ids":true,"value":"http://216.75.145.227","comment":"https://x.com/threatquery/status/1961896738215588223","timestamp":"1756587607","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"64b4dec0-a670-5a76-a587-cda4b19de2f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.75.145.227","comment":"https://x.com/threatquery/status/1961896738215588223","timestamp":"1756587607","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"f717b7c4-0ba4-52be-9b16-5531834a544c","type":"domain","category":"Network activity","to_ids":true,"value":"dro.pm","comment":"https://x.com/skocherhan/status/1961909288680497652","timestamp":"1756590599","distribution":"5"},{"uuid":"729f19e4-b9f1-56a7-a889-af8237508d11","type":"url","category":"Network activity","to_ids":true,"value":"http://dro.pm","comment":"https://x.com/skocherhan/status/1961909288680497652","timestamp":"1756590599","distribution":"5"},{"uuid":"4b70f6c7-ee01-5389-a02d-ae8f6b211e00","type":"domain","category":"Network activity","to_ids":true,"value":"starteledgear.webflow.io","comment":"https://x.com/urldna_bot/status/1961911852591423688","timestamp":"1756591210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"62db800d-fcd6-55dd-8860-009e0fbbf640","type":"url","category":"Network activity","to_ids":true,"value":"https://starteledgear.webflow.io","comment":"https://x.com/urldna_bot/status/1961911852591423688","timestamp":"1756591210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d493521f-6107-50d3-9c16-d5bd358ba231","type":"url","category":"Network activity","to_ids":true,"value":"http://34.229.166.50:80","comment":"https://x.com/SarlackLab/status/1961926997522686032","timestamp":"1756594821","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e9ab344c-8916-50a0-a4c1-ee86af26b707","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.229.166.50","comment":"https://x.com/SarlackLab/status/1961926997522686032","timestamp":"1756594821","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"27401f26-1d96-52c2-a603-b4b1fdc71981","type":"domain","category":"Network activity","to_ids":true,"value":"po4tq2brx4rgwbdx4mac24fz34uuuf7oigosebp32n2462m2vxl6biqd.onion","comment":"https://x.com/fbgwls245/status/1961934496783351849","timestamp":"1756596609","distribution":"5"},{"uuid":"95505914-a462-55b8-9d9a-29a7565d5dcd","type":"url","category":"Network activity","to_ids":true,"value":"https://po4tq2brx4rgwbdx4mac24fz34uuuf7oigosebp32n2462m2vxl6biqd.onion","comment":"https://x.com/fbgwls245/status/1961934496783351849","timestamp":"1756596609","distribution":"5"},{"uuid":"5ef5d244-786d-52e3-8377-a437ad8ebef5","type":"domain","category":"Network activity","to_ids":true,"value":"upholljoyinlog.godaddysites.com","comment":"https://x.com/urldna_bot/status/1961942048623190104","timestamp":"1756598410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"66e313d8-318e-59b9-bb72-c7f5e80122a8","type":"url","category":"Network activity","to_ids":true,"value":"https://upholljoyinlog.godaddysites.com","comment":"https://x.com/urldna_bot/status/1961942048623190104","timestamp":"1756598410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"903ef4e2-27f1-5640-ab3c-523106898476","type":"domain","category":"Network activity","to_ids":true,"value":"oliver752.github.io","comment":"https://x.com/urldna_bot/status/1961972237889675407","timestamp":"1756605607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3c0f88c8-b0ae-54d6-996f-75f56ce09d5d","type":"url","category":"Network activity","to_ids":true,"value":"https://oliver752.github.io","comment":"https://x.com/urldna_bot/status/1961972237889675407","timestamp":"1756605607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c2f2c520-0dac-56bc-a049-9a1648b33bcb","type":"domain","category":"Network activity","to_ids":true,"value":"lockbox-worldlibertyfi.com","comment":"https://x.com/AmberMille78556/status/1961984270643188215","timestamp":"1756608476","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e0cb46b-6a80-5041-9a84-3c9ae8108006","type":"url","category":"Network activity","to_ids":true,"value":"http://lockbox-worldlibertyfi.com","comment":"https://x.com/AmberMille78556/status/1961984270643188215","timestamp":"1756608476","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d9fd616-3e5f-59a1-b57d-f8dbb59e51b2","type":"domain","category":"Network activity","to_ids":true,"value":"wh468304.ispot.cc","comment":"https://x.com/AmberMille78556/status/1961984363970621867","timestamp":"1756608498","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd720121-a800-5418-8603-ee6eb22e31dc","type":"url","category":"Network activity","to_ids":true,"value":"http://wh468304.ispot.cc","comment":"https://x.com/AmberMille78556/status/1961984363970621867","timestamp":"1756608498","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2afe863d-ba2d-59a8-9156-59dab33b69d6","type":"domain","category":"Network activity","to_ids":true,"value":"gamestoredownload.download","comment":"https://x.com/SarlackLab/status/1961987376382648478","timestamp":"1756609217","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"f26f048e-8032-549c-ae8b-862ad9d429e4","type":"url","category":"Network activity","to_ids":true,"value":"http://gamestoredownload.download","comment":"https://x.com/SarlackLab/status/1961987376382648478","timestamp":"1756609217","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"9093c870-7903-5c61-a173-3fd340f28133","type":"domain","category":"Network activity","to_ids":true,"value":"acgrenobld.weebly.com","comment":"https://x.com/urldna_bot/status/1962002442209374583","timestamp":"1756612809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"330d8a31-80bb-59e4-885c-30093ab9758f","type":"url","category":"Network activity","to_ids":true,"value":"https://acgrenobld.weebly.com","comment":"https://x.com/urldna_bot/status/1962002442209374583","timestamp":"1756612809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"daef8f3b-c427-5b5a-9aeb-7f97864503dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.142.8.214","comment":"https://x.com/SarlackLab/status/1962002523054649671","timestamp":"1756612828","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"3269dd0b-1942-5ea7-846f-b2c6f5d2758c","type":"url","category":"Network activity","to_ids":true,"value":"http://51.142.8.214:1912","comment":"https://x.com/SarlackLab/status/1962002523054649671","timestamp":"1756612828","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"cf04e76a-2b5c-57ba-afb1-1bd5bb56ce9f","type":"domain","category":"Network activity","to_ids":true,"value":"netmail-netcologne-thu-l16ysg-xw-tw.vercel.app","comment":"https://x.com/urldna_bot/status/1962032644939485301","timestamp":"1756620010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"0ffdf088-afdb-5943-a6bc-f41ce03b7fcd","type":"url","category":"Network activity","to_ids":true,"value":"https://netmail-netcologne-thu-l16ysg-xw-tw.vercel.app","comment":"https://x.com/urldna_bot/status/1962032644939485301","timestamp":"1756620010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a7ad54f6-d985-58bb-85a7-25c11f58e23a","type":"url","category":"Network activity","to_ids":true,"value":"http://216.137.253.152:443","comment":"https://x.com/drb_ra/status/1962044240805969999","timestamp":"1756622774","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"7fbbfc93-a1b0-54db-a35f-7ab63be59199","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.137.253.152","comment":"https://x.com/drb_ra/status/1962044240805969999","timestamp":"1756622774","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"3fefa69e-1195-5cfe-ab57-1e0887a13216","type":"url","category":"Network activity","to_ids":true,"value":"http://47.145.131.180:443","comment":"https://x.com/drb_ra/status/1962044380014846407","timestamp":"1756622807","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"5aa082af-1e44-5c7b-951c-d6ad710444ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.145.131.180","comment":"https://x.com/drb_ra/status/1962044380014846407","timestamp":"1756622807","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"cf3ad1d4-a232-5c3c-a5a9-ebc7ab247736","type":"url","category":"Network activity","to_ids":true,"value":"http://221.15.67.148:10250","comment":"https://x.com/drb_ra/status/1962044518540128628","timestamp":"1756622840","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"ec96906a-8ada-5d11-aa1d-e656afe0acf7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.15.67.148","comment":"https://x.com/drb_ra/status/1962044518540128628","timestamp":"1756622840","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"aa377e11-5ef8-5e9e-837b-6d6d1bca98ef","type":"url","category":"Network activity","to_ids":true,"value":"http://76.223.89.189:443","comment":"https://x.com/drb_ra/status/1962044656348258557","timestamp":"1756622873","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fe0dd453-df23-50f8-8db4-7f77a507f94e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"76.223.89.189","comment":"https://x.com/drb_ra/status/1962044656348258557","timestamp":"1756622873","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"5b68e3f0-0609-5b52-a875-86497f4e6fdc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"99.83.215.169","comment":"https://x.com/drb_ra/status/1962044794600845486","timestamp":"1756622906","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"588bec61-4f79-547d-8725-1401d6ee5181","type":"url","category":"Network activity","to_ids":true,"value":"http://99.83.215.169:8111","comment":"https://x.com/drb_ra/status/1962044794600845486","timestamp":"1756622906","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"9036a7b5-2449-5378-ac00-0a31ccdc3001","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.215.44:7443","comment":"https://x.com/drb_ra/status/1962044933222580380","timestamp":"1756622939","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"bd9a7ad1-d96c-5604-ae6a-40b02e54f5ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.215.44","comment":"https://x.com/drb_ra/status/1962044933222580380","timestamp":"1756622939","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"83ea60e8-40c1-50b6-b695-dcecc24354b5","type":"url","category":"Network activity","to_ids":true,"value":"http://193.105.134.151:80","comment":"https://x.com/drb_ra/status/1962045579397107880","timestamp":"1756623093","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"53477ff5-9e7a-50fb-86dc-4fa24630c402","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.105.134.151","comment":"https://x.com/drb_ra/status/1962045579397107880","timestamp":"1756623093","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"67f3ff4c-15b2-5445-81e6-fe68a48e04e1","type":"url","category":"Network activity","to_ids":true,"value":"http://204.44.70.159:80","comment":"https://x.com/drb_ra/status/1962045717825929667","timestamp":"1756623126","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"0fe67bfd-ea6c-5366-a9fc-9997dddc7b79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.44.70.159","comment":"https://x.com/drb_ra/status/1962045717825929667","timestamp":"1756623126","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"b3f619ae-c1b2-5c0d-a0f7-3d6fb48fc830","type":"url","category":"Network activity","to_ids":true,"value":"http://192.227.135.230:6374","comment":"https://x.com/drb_ra/status/1962045856325972409","timestamp":"1756623159","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"b7f4aa3b-da11-55bf-b35f-6d6390e7224a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.227.135.230","comment":"https://x.com/drb_ra/status/1962045856325972409","timestamp":"1756623159","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"bc4abeaa-25d8-5436-87f6-60583c05f84b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.91.82.9","comment":"https://x.com/drb_ra/status/1962045994792530363","timestamp":"1756623192","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"09ef0fe9-3e41-5b13-ac96-63056bab3278","type":"url","category":"Network activity","to_ids":true,"value":"http://144.91.82.9:31981","comment":"https://x.com/drb_ra/status/1962045994792530363","timestamp":"1756623192","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c8552789-793b-5e2c-8c6c-237f4443d2d0","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.73.97:2404","comment":"https://x.com/drb_ra/status/1962046133208797544","timestamp":"1756623225","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ab22327a-699f-5dc1-bd26-5e40f3ca0063","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.97","comment":"https://x.com/drb_ra/status/1962046133208797544","timestamp":"1756623225","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"70580875-5e3d-5bf9-bb15-a1b54a21119a","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.180.146:8080","comment":"https://x.com/drb_ra/status/1962046275072798769","timestamp":"1756623259","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ffb97390-f43c-59aa-8c71-957494f1f795","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.180.146","comment":"https://x.com/drb_ra/status/1962046275072798769","timestamp":"1756623259","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3752bb57-a66c-545e-a8fb-b8b1e5612ecb","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.114.28:2003","comment":"https://x.com/drb_ra/status/1962046413010874722","timestamp":"1756623292","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"016e16b8-4af9-5d80-80fb-4c684f747645","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.114.28","comment":"https://x.com/drb_ra/status/1962046413010874722","timestamp":"1756623292","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"146268d9-e784-54b1-a633-8a80dc6a8633","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.255.34.84","comment":"https://x.com/drb_ra/status/1962046551385133432","timestamp":"1756623325","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"36bf9cbb-4524-509b-b455-08cfd86a1083","type":"url","category":"Network activity","to_ids":true,"value":"http://38.255.34.84:3307","comment":"https://x.com/drb_ra/status/1962046551385133432","timestamp":"1756623325","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8e17a507-21b4-556e-9090-545d7c14fa55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.223.214.71","comment":"https://x.com/drb_ra/status/1962046830063042802","timestamp":"1756623392","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"b976c35f-6721-5db2-8319-bfe070debed9","type":"url","category":"Network activity","to_ids":true,"value":"http://77.223.214.71:8443","comment":"https://x.com/drb_ra/status/1962046830063042802","timestamp":"1756623392","distribution":"5","Tag":[{"name":"Evilginx"},{"name":"EvilGoPhish"},{"name":"C2"}]},{"uuid":"7e638cf6-a3a2-52df-87f5-bfec6efabd8e","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.26.40:8888","comment":"https://x.com/drb_ra/status/1962046968361877506","timestamp":"1756623424","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"30d3f265-44b6-5f34-a59e-2550b5dd938f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.26.40","comment":"https://x.com/drb_ra/status/1962046968361877506","timestamp":"1756623424","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"d74d507c-f161-5f1d-83b7-30f7e0fc4e9b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.79.23.25:8888","comment":"https://x.com/drb_ra/status/1962047108069970099","timestamp":"1756623458","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"2d0be415-5eda-5ef9-ba8b-5db020fd9439","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.23.25","comment":"https://x.com/drb_ra/status/1962047108069970099","timestamp":"1756623458","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"7db18263-985b-538c-abc9-4e1cd09ad36b","type":"domain","category":"Network activity","to_ids":true,"value":"webmailverifcatiozzx.weebly.com","comment":"https://x.com/urldna_bot/status/1962062834570817782","timestamp":"1756627207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8423c52f-d31f-56be-b610-9a95cfa733d9","type":"url","category":"Network activity","to_ids":true,"value":"https://webmailverifcatiozzx.weebly.com","comment":"https://x.com/urldna_bot/status/1962062834570817782","timestamp":"1756627207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"12562225-f793-500f-a028-1033c68ad479","type":"md5","category":"Payload delivery","to_ids":true,"value":"ef882a180b4d95e3694be055d60367f8","comment":"https://x.com/JAMESWT_WT/status/1962065143086354753","timestamp":"1756627758","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"2999b871-f823-5af4-b888-acff5452f8cf","type":"md5","category":"Payload delivery","to_ids":true,"value":"26924d58c0d5fadf5e5c96bdc7532ea5","comment":"https://x.com/JAMESWT_WT/status/1962065143086354753","timestamp":"1756627758","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"2c54c535-d1c9-5ec6-a8d0-63fa51fe6dd1","type":"url","category":"Network activity","to_ids":true,"value":"http://115.55.51.26:38084","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"387d78e8-e510-521e-8110-abca3c0bd31d","type":"url","category":"Network activity","to_ids":true,"value":"http://113.228.229.170:37386","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"8f79091e-cf56-5240-ab86-9255636f1368","type":"url","category":"Network activity","to_ids":true,"value":"http://112.248.112.204:54598","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"7f2690d2-7a74-5f45-9404-a0ff435e557f","type":"url","category":"Network activity","to_ids":true,"value":"http://61.52.98.163:50944","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"61fe5860-9ecc-504c-8b1c-7af88184dc3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.55.51.26","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"4aefc455-bf5f-59c6-a1ab-f9ec3335884c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.228.229.170","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"b033d5a5-f3ba-5ffd-bed8-2d8d2fe7d968","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.248.112.204","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"9b64cf53-6ffe-596c-86ff-7cb1b623bf8b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.52.98.163","comment":"https://x.com/FalconFeedsio/status/1962066913405591668","timestamp":"1756628180","distribution":"5"},{"uuid":"e07ad650-6e02-51d4-a8c0-87f503e61d1e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.37.97.139","comment":"https://x.com/JAMESWT_WT/status/1962071893017539035","timestamp":"1756629367","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"953dbcef-28c8-56ba-9782-6c4c9f96996f","type":"md5","category":"Payload delivery","to_ids":true,"value":"62a3ae43ca8cc202031dd911214d0410","comment":"https://x.com/JAMESWT_WT/status/1962071893017539035","timestamp":"1756629367","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"da936335-7478-5acf-9040-6410cd5bdf39","type":"md5","category":"Payload delivery","to_ids":true,"value":"c476bccc842a4ad4d6bb0cafe81719e8","comment":"https://x.com/JAMESWT_WT/status/1962071893017539035","timestamp":"1756629367","distribution":"5","Tag":[{"name":"RAT"},{"name":"NetSupport"}]},{"uuid":"7c50c4ff-98a8-5f95-967c-e0a28584e60c","type":"url","category":"Network activity","to_ids":true,"value":"http://147.30.206.125:7707","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"4aecb586-28bc-5098-a230-42442c4a7cf6","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.30:10480","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"79997485-aa91-5743-ac51-6888bea8b2f2","type":"domain","category":"Network activity","to_ids":true,"value":"a0924483.xsph.ru","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"e399de3f-6f2f-5487-983c-be22e3349db3","type":"url","category":"Network activity","to_ids":true,"value":"http://a0924483.xsph.ru/L1nc0In.php","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"0f903105-d0c4-5334-af19-ea8f659b9580","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.30.206.125","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"e4280c1e-b15c-593d-ad77-85a5d41479cc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.30","comment":"https://x.com/FalconFeedsio/status/1962079116984799450","timestamp":"1756631089","distribution":"5"},{"uuid":"4d488810-036f-5a38-9f5c-1962e799029f","type":"domain","category":"Network activity","to_ids":true,"value":"Vinegret.cz","comment":"https://x.com/FalconFeedsio/status/1962083481091240216","timestamp":"1756632130","distribution":"5"},{"uuid":"f6d054f9-f384-57bf-a9ff-bfdf4aa0cff0","type":"url","category":"Network activity","to_ids":true,"value":"http://Vinegret.cz","comment":"https://x.com/FalconFeedsio/status/1962083481091240216","timestamp":"1756632130","distribution":"5"},{"uuid":"68b5e526-a48a-5e76-8895-f648eb4a76df","type":"domain","category":"Network activity","to_ids":true,"value":"login2-authid1-webmail-posteo-oauth2onepass-ddawewerrweer.weebly.com","comment":"https://x.com/urldna_bot/status/1962093040178192767","timestamp":"1756634409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"36d400fa-1aab-5951-a819-ba812db446e0","type":"url","category":"Network activity","to_ids":true,"value":"https://login2-authid1-webmail-posteo-oauth2onepass-ddawewerrweer.weebly.com","comment":"https://x.com/urldna_bot/status/1962093040178192767","timestamp":"1756634409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"09757cb9-1c38-5fe1-a522-aac4f83cc6ad","type":"url","category":"Network activity","to_ids":true,"value":"http://18.197.239.109:14147","comment":"https://x.com/SarlackLab/status/1962093159032185235","timestamp":"1756634437","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"e9904b11-2b7f-51ef-99aa-644240439379","type":"url","category":"Network activity","to_ids":true,"value":"http://3.68.171.119:14147","comment":"https://x.com/SarlackLab/status/1962093159032185235","timestamp":"1756634437","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ae2bcc73-0a90-5394-a98c-bdd22e562e29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.197.239.109","comment":"https://x.com/SarlackLab/status/1962093159032185235","timestamp":"1756634437","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"6917f774-c6e9-5ef3-b281-6e0de64efeba","type":"url","category":"Network activity","to_ids":true,"value":"http://3.66.38.117:14147","comment":"https://x.com/SarlackLab/status/1962093201059168651","timestamp":"1756634447","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"48a3101f-73f9-5e98-8bbb-398d3a3b5c09","type":"domain","category":"Network activity","to_ids":true,"value":"bk.mufg.jp.gggame.vip","comment":"https://x.com/harugasumi/status/1962132703387758902","timestamp":"1756643865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9795e8e-685a-5046-9dff-941208c58c05","type":"url","category":"Network activity","to_ids":true,"value":"https://www.bk.mufg.jp.gggame.vip/8nklNM","comment":"https://x.com/harugasumi/status/1962132703387758902","timestamp":"1756643865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6566f74d-0e8b-560c-bea8-9c61cd013a86","type":"domain","category":"Network activity","to_ids":true,"value":"bk.mufg.jp.dvsdvz.icu","comment":"https://x.com/harugasumi/status/1962132703387758902","timestamp":"1756643865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f9c7c740-38cd-5152-9a66-32811629f1b4","type":"url","category":"Network activity","to_ids":true,"value":"https://www.bk.mufg.jp.dvsdvz.icu/2i05cP/","comment":"https://x.com/harugasumi/status/1962132703387758902","timestamp":"1756643865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75ae68e2-b77b-5d2b-a5a8-f8e2820f6cac","type":"domain","category":"Network activity","to_ids":true,"value":"xfwwqlk4csafvg7obp4uhmbn8xg8zmkh.weebly.com","comment":"https://x.com/urldna_bot/status/1962153433068118394","timestamp":"1756648808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bdda9fde-52bf-581e-bbd4-b2415e571734","type":"url","category":"Network activity","to_ids":true,"value":"https://xfwwqlk4csafvg7obp4uhmbn8xg8zmkh.weebly.com","comment":"https://x.com/urldna_bot/status/1962153433068118394","timestamp":"1756648808","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ca74906b-280c-5dbd-925e-9e2e4cd5df0c","type":"domain","category":"Network activity","to_ids":true,"value":"webkkwel.weebly.com","comment":"https://x.com/urldna_bot/status/1962183642093896075","timestamp":"1756656010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b79d04b6-0e8f-584a-bef1-d8e0fb3600df","type":"url","category":"Network activity","to_ids":true,"value":"https://webkkwel.weebly.com","comment":"https://x.com/urldna_bot/status/1962183642093896075","timestamp":"1756656010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f0c75117-169c-53da-ab29-a963fbfeb053","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.44.143:2404","comment":"https://x.com/drb_ra/status/1962232904320254419","timestamp":"1756667755","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"54787ff9-4328-5cdd-8a84-be3e5fb49a15","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.44.143:9866","comment":"https://x.com/drb_ra/status/1962233043604627525","timestamp":"1756667788","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"bbb4087f-a032-5268-9a2e-0fe124cf909a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.44.143","comment":"https://x.com/drb_ra/status/1962233043604627525","timestamp":"1756667788","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"575b6d28-fddb-5952-821a-72792011ecc4","type":"url","category":"Network activity","to_ids":true,"value":"http://84.154.177.236:82","comment":"https://x.com/drb_ra/status/1962233184315207854","timestamp":"1756667822","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"6d56cb32-f61a-5aba-ab1c-512def2387c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.154.177.236","comment":"https://x.com/drb_ra/status/1962233184315207854","timestamp":"1756667822","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c4de1c40-20f8-5e8e-aa67-633774cba24b","type":"url","category":"Network activity","to_ids":true,"value":"http://15.222.11.66:42241","comment":"https://x.com/drb_ra/status/1962233329844908284","timestamp":"1756667857","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"0a497715-f280-588f-8044-fc023205e16c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.222.11.66","comment":"https://x.com/drb_ra/status/1962233329844908284","timestamp":"1756667857","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ecbafc88-1717-5c6b-bab0-31e1b5768f79","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.101.99:7000","comment":"https://x.com/drb_ra/status/1962233471046234541","timestamp":"1756667890","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"10f6538b-bc5c-5c8c-b4e0-f3dd6cb106a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.101.99","comment":"https://x.com/drb_ra/status/1962233471046234541","timestamp":"1756667890","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c8d304eb-c45c-5eaf-8750-afe211576a41","type":"url","category":"Network activity","to_ids":true,"value":"http://185.107.74.47:8808","comment":"https://x.com/drb_ra/status/1962233612574642607","timestamp":"1756667924","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0614618f-32ed-507c-b67f-482213b50a99","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.107.74.47","comment":"https://x.com/drb_ra/status/1962233612574642607","timestamp":"1756667924","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"7c1b8925-3aac-5582-b2c9-8f9d79a65a05","type":"url","category":"Network activity","to_ids":true,"value":"http://89.169.12.238:8808","comment":"https://x.com/drb_ra/status/1962233752437817401","timestamp":"1756667957","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f7bbe57f-3168-5585-8096-079383dc93a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.169.12.238","comment":"https://x.com/drb_ra/status/1962233752437817401","timestamp":"1756667957","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0cce1c4e-6494-57dd-97c1-42ca328b34c8","type":"url","category":"Network activity","to_ids":true,"value":"http://103.149.29.226:465","comment":"https://x.com/drb_ra/status/1962233891814547766","timestamp":"1756667991","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"95f4e8e7-785e-5e55-b351-36bdde286df4","type":"url","category":"Network activity","to_ids":true,"value":"http://103.149.29.226:25","comment":"https://x.com/drb_ra/status/1962234031019266295","timestamp":"1756668024","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"3d17064a-890d-576b-a9a9-0e1ad6035979","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.149.29.226","comment":"https://x.com/drb_ra/status/1962234031019266295","timestamp":"1756668024","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b2487be3-fa1a-5d7a-8b14-38056b48b0a0","type":"url","category":"Network activity","to_ids":true,"value":"http://130.193.50.145:25","comment":"https://x.com/drb_ra/status/1962234169917927805","timestamp":"1756668057","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d71dc627-2cab-5e7d-b4ee-73823c530f72","type":"url","category":"Network activity","to_ids":true,"value":"http://130.193.50.145:465","comment":"https://x.com/drb_ra/status/1962234308476686365","timestamp":"1756668090","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"69606540-ac6a-5b18-8a54-1e90f365f66c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"130.193.50.145","comment":"https://x.com/drb_ra/status/1962234308476686365","timestamp":"1756668090","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"de20439b-9ba2-57b6-8721-7a42938acb3c","type":"url","category":"Network activity","to_ids":true,"value":"http://188.245.51.228:25","comment":"https://x.com/drb_ra/status/1962234447354372118","timestamp":"1756668123","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7c79acec-8553-5c21-9079-11d04bd527b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"188.245.51.228","comment":"https://x.com/drb_ra/status/1962234447354372118","timestamp":"1756668123","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"858bd2c3-d0e9-554a-9f61-b197b36875ff","type":"url","category":"Network activity","to_ids":true,"value":"http://68.64.176.19:443","comment":"https://x.com/drb_ra/status/1962234586609352766","timestamp":"1756668156","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"539260ff-05e6-5ce0-b99a-d78905172cf0","type":"url","category":"Network activity","to_ids":true,"value":"http://68.64.176.19:80","comment":"https://x.com/drb_ra/status/1962234727101849736","timestamp":"1756668190","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"79c19147-56b2-5968-bf9f-3cc99a2f0ec3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.64.176.19","comment":"https://x.com/drb_ra/status/1962234727101849736","timestamp":"1756668190","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"11b112de-9afd-5589-aa7c-c524c0341465","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.25.18:995","comment":"https://x.com/drb_ra/status/1962234865882972491","timestamp":"1756668223","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"9e19f7a4-9dde-577e-8203-fa93ef8990a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.187.25.18","comment":"https://x.com/drb_ra/status/1962234865882972491","timestamp":"1756668223","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"632b2d9d-23eb-5783-a6bf-aa10879a10b4","type":"url","category":"Network activity","to_ids":true,"value":"http://31.32.149.33:443","comment":"https://x.com/drb_ra/status/1962235006165680434","timestamp":"1756668256","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"30327986-bcce-50b5-800f-d1f7e40c6404","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.32.149.33","comment":"https://x.com/drb_ra/status/1962235006165680434","timestamp":"1756668256","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"83149a93-c9cd-5706-a2a0-ce75abe164a8","type":"url","category":"Network activity","to_ids":true,"value":"http://98.71.179.164:7443","comment":"https://x.com/drb_ra/status/1962235144439279655","timestamp":"1756668289","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"1ac03d62-81d0-50c6-8e02-d12771f1a305","type":"ip-dst","category":"Network activity","to_ids":true,"value":"98.71.179.164","comment":"https://x.com/drb_ra/status/1962235144439279655","timestamp":"1756668289","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"732ff203-279e-5d83-9c81-111d59232d75","type":"url","category":"Network activity","to_ids":true,"value":"https://103.73.66.43/weui.js","comment":"https://x.com/drb_ra/status/1962235285455929715","timestamp":"1756668323","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8ddcc248-1e06-50ec-aab5-5d6bca0611a3","type":"url","category":"Network activity","to_ids":true,"value":"http://103.73.66.43:4242","comment":"https://x.com/drb_ra/status/1962235285455929715","timestamp":"1756668323","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8e8c8f9b-76df-5047-ac15-2f6a241771cf","type":"domain","category":"Network activity","to_ids":true,"value":"utkssvgwlvgh.ap-northeast-1.clawcloudrun.com","comment":"https://x.com/drb_ra/status/1962235426351067173","timestamp":"1756668356","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7cbe0aec-9322-5017-917c-bf35e9683176","type":"url","category":"Network activity","to_ids":true,"value":"https://utkssvgwlvgh.ap-northeast-1.clawcloudrun.com/weui.js","comment":"https://x.com/drb_ra/status/1962235426351067173","timestamp":"1756668356","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1f1b2198-9f27-591e-9aa7-d7bcaa7e037c","type":"url","category":"Network activity","to_ids":true,"value":"http://103.73.66.43:443","comment":"https://x.com/drb_ra/status/1962235426351067173","timestamp":"1756668356","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"654a6cf4-6a17-55ef-8426-f89865c2d908","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.73.66.43","comment":"https://x.com/drb_ra/status/1962235426351067173","timestamp":"1756668356","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71c67a14-25c1-5f36-9222-442fe98e301b","type":"url","category":"Network activity","to_ids":true,"value":"https://104.233.252.24/admin/read/Server/shopper/API/UO3UVEIWYPQ0PZO","comment":"https://x.com/drb_ra/status/1962235708048871839","timestamp":"1756668424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"62856c0c-5ce8-5de0-bc5d-a74692099fea","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.11:8081","comment":"https://x.com/drb_ra/status/1962235708048871839","timestamp":"1756668424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85361462-f325-50ba-ad7d-94a1a562eea8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.11","comment":"https://x.com/drb_ra/status/1962235708048871839","timestamp":"1756668424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"33d5e455-746d-56a4-a9c2-c9dce5cd86db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.24","comment":"https://x.com/drb_ra/status/1962235708048871839","timestamp":"1756668424","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"68cc10b1-c48d-5262-be0e-42f5ac8e91c7","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.7:8081","comment":"https://x.com/drb_ra/status/1962235849472410098","timestamp":"1756668457","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"53a7c8a1-95b3-5174-a4b8-cdf18549ae43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.7","comment":"https://x.com/drb_ra/status/1962235849472410098","timestamp":"1756668457","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"87b1b30d-61d7-58bc-bb5d-fb343a9b1729","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.21:8081","comment":"https://x.com/drb_ra/status/1962235990573015428","timestamp":"1756668491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"465dcee5-d0d9-554a-8f9a-59de922ca041","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.21","comment":"https://x.com/drb_ra/status/1962235990573015428","timestamp":"1756668491","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"debc6688-aa95-5c32-bce4-06f61b377eef","type":"url","category":"Network activity","to_ids":true,"value":"http://80.78.31.67:8080","comment":"https://x.com/drb_ra/status/1962236130473947581","timestamp":"1756668524","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c7b0257a-a03c-5193-9ae8-319cd4aa185d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.78.31.67","comment":"https://x.com/drb_ra/status/1962236130473947581","timestamp":"1756668524","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"36440aac-d08f-57b1-91e3-14fe804e3b1d","type":"url","category":"Network activity","to_ids":true,"value":"http://185.242.233.128:80","comment":"https://x.com/drb_ra/status/1962236271046078656","timestamp":"1756668558","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8b102f6d-e384-565a-a831-92bd574bd64c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.242.233.128","comment":"https://x.com/drb_ra/status/1962236271046078656","timestamp":"1756668558","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"51cafe26-076d-54b6-bc4c-3fd980d91dbd","type":"url","category":"Network activity","to_ids":true,"value":"http://43.255.158.60:80","comment":"https://x.com/drb_ra/status/1962236413191090429","timestamp":"1756668592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c713827c-edce-5ec1-9799-b9fc4a3291c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.255.158.60","comment":"https://x.com/drb_ra/status/1962236413191090429","timestamp":"1756668592","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2f306628-6eda-59f3-8bcb-3da83dc2fafc","type":"url","category":"Network activity","to_ids":true,"value":"https://185.196.10.163/s/ref=nb_sb_noss_1/167-3294888-0262949/field-keywords=books","comment":"https://x.com/drb_ra/status/1962236555902218611","timestamp":"1756668626","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eca6d1d1-e8ae-51fa-a9ea-8482a01aefa0","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.163:80","comment":"https://x.com/drb_ra/status/1962236555902218611","timestamp":"1756668626","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cf1a075a-4891-5c1d-a1fa-94bb84ec31ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.163","comment":"https://x.com/drb_ra/status/1962236555902218611","timestamp":"1756668626","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b2b42ad8-85b5-5c69-8bda-523d7ad19f38","type":"url","category":"Network activity","to_ids":true,"value":"http://103.38.81.221:8888","comment":"https://x.com/drb_ra/status/1962236696503722488","timestamp":"1756668659","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7bbf3597-b5ad-5ab8-b778-6c2962cb538a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.38.81.221","comment":"https://x.com/drb_ra/status/1962236696503722488","timestamp":"1756668659","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f53dc9e1-67ed-5b4d-a85e-ebac1959dc8e","type":"domain","category":"Network activity","to_ids":true,"value":"areariservata-ing.info","comment":"https://x.com/AddressIntel/status/1962238988296634831","timestamp":"1756669206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53b1f9a6-e9d4-5be9-8c78-df4aa593308a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.areariservata-ing.info/LiVm7v-4","comment":"https://x.com/AddressIntel/status/1962238988296634831","timestamp":"1756669206","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d74e9659-2890-5019-b2b2-502e2ed9e1a5","type":"domain","category":"Network activity","to_ids":true,"value":"legrcmstit.webflow.io","comment":"https://x.com/urldna_bot/status/1962244042172817635","timestamp":"1756670411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a1d08aa6-1741-5b3b-966f-d957733998f5","type":"url","category":"Network activity","to_ids":true,"value":"https://legrcmstit.webflow.io","comment":"https://x.com/urldna_bot/status/1962244042172817635","timestamp":"1756670411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ef60c04c-9cd7-5fcf-bafb-a117ab0b31c4","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.31:34468","comment":"https://x.com/SarlackLab/status/1962244097940357235","timestamp":"1756670424","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"84e8e720-0790-552f-b264-077c0e1a3193","type":"domain","category":"Network activity","to_ids":true,"value":"wednesday-posts.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1962244097940357235","timestamp":"1756670424","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"34390cb5-6307-5a7d-a796-03308efc994c","type":"url","category":"Network activity","to_ids":true,"value":"http://wednesday-posts.gl.at.ply.gg","comment":"https://x.com/SarlackLab/status/1962244097940357235","timestamp":"1756670424","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"2a2ed3cb-2370-5b81-a9b7-c1eea1404aa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.31","comment":"https://x.com/SarlackLab/status/1962244097940357235","timestamp":"1756670424","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"1bd966a9-5f33-5f87-84ce-10a2671fc996","type":"domain","category":"Network activity","to_ids":true,"value":"mitid-sikkerhed.com","comment":"https://x.com/TeamDreier/status/1962245165382345168","timestamp":"1756670678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b192f4d-5142-559e-ac6c-d06000563fd9","type":"url","category":"Network activity","to_ids":true,"value":"https://mitid-sikkerhed.com","comment":"https://x.com/TeamDreier/status/1962245165382345168","timestamp":"1756670678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"532725c7-c69d-5e73-ae35-b1ec0b94ae6f","type":"url","category":"Network activity","to_ids":true,"value":"http://129.204.146.115:8085","comment":"https://x.com/drb_ra/status/1962257648612434357","timestamp":"1756673655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b256e784-54d2-5110-aa59-e897b5bb409e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.204.146.115","comment":"https://x.com/drb_ra/status/1962257648612434357","timestamp":"1756673655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6d351aef-4c03-506d-88a0-70b62ca61e80","type":"domain","category":"Network activity","to_ids":true,"value":"entrezorio.github.io","comment":"https://x.com/Leon4Leon2/status/1962257730887930088","timestamp":"1756673674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e00e9d12-23fb-5db1-8280-f223ff6121f1","type":"url","category":"Network activity","to_ids":true,"value":"https://entrezorio.github.io","comment":"https://x.com/Leon4Leon2/status/1962257730887930088","timestamp":"1756673674","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a4aedf8c-d63c-53f1-b224-cc5e77b39e1a","type":"url","category":"Network activity","to_ids":true,"value":"http://60.251.198.157:9999","comment":"https://x.com/drb_ra/status/1962257793492058389","timestamp":"1756673689","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"19fd021c-edf0-509f-a459-70b3d56be4db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.251.198.157","comment":"https://x.com/drb_ra/status/1962257793492058389","timestamp":"1756673689","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dc791470-dfec-55cd-9c8f-23c536afa1a8","type":"url","category":"Network activity","to_ids":true,"value":"http://103.73.66.43","comment":"https://x.com/threatquery/status/1962259127532466301","timestamp":"1756674007","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"c3c52738-e333-5206-a415-946d06ab0f20","type":"url","category":"Network activity","to_ids":true,"value":"http://83.27.208.141","comment":"https://x.com/threatquery/status/1962259131370275021","timestamp":"1756674008","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"b8f5dd55-3ea9-5b79-a24f-d2cda7d7eb48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.27.208.141","comment":"https://x.com/threatquery/status/1962259131370275021","timestamp":"1756674008","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"7e341b59-cd0f-53ab-a5ef-47842444915a","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.25.18","comment":"https://x.com/threatquery/status/1962259129621217615","timestamp":"1756674008","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"9b018194-11f8-5625-93ca-19123a1fb3af","type":"domain","category":"Network activity","to_ids":true,"value":"service790.godaddysites.com","comment":"https://x.com/urldna_bot/status/1962274240566022295","timestamp":"1756677610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5765554b-50ac-5c35-a6e4-5afb3fcaad2d","type":"url","category":"Network activity","to_ids":true,"value":"https://service790.godaddysites.com","comment":"https://x.com/urldna_bot/status/1962274240566022295","timestamp":"1756677610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"29af15d0-c1c2-5ad5-9931-24181bf8efcb","type":"domain","category":"Network activity","to_ids":true,"value":"sso-gmo-aozora.cnjaolgmo.top","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ae300f6-b0e2-5cb8-84cc-962155b9f1bb","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-gmo-aozora.cnjaolgmo.top/smallbusine/","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ffa67f0b-69b6-56c3-bda6-32c2e3eab8b2","type":"domain","category":"Network activity","to_ids":true,"value":"sso-gmo-aozora.g0oqka.top","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bcc166f3-25bb-55ba-89fa-e2ed733fc593","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-gmo-aozora.g0oqka.top/smallbusine/","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c028859f-12a0-5aba-b255-fe0aaf435e29","type":"domain","category":"Network activity","to_ids":true,"value":"sso-gmo-aozora.gosliq.top","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"742e5d1c-3f87-5928-a528-c93107a7aa7e","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-gmo-aozora.gosliq.top/smallbusine/","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b63c07db-3491-5a10-80f7-d20629abf136","type":"domain","category":"Network activity","to_ids":true,"value":"sso-gmo-aozora.mmjdj.top","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6fc75e37-9c6b-536b-913d-0cff301d4924","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-gmo-aozora.mmjdj.top/smallbusine/","comment":"https://x.com/masaomi346/status/1962275580797481120","timestamp":"1756677930","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"78e5130c-4a9d-59bb-8d08-51c2923cd045","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.1:8081","comment":"https://x.com/drb_ra/status/1962289409295806882","timestamp":"1756681227","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9f4d973b-f742-5cfd-9f97-50ad800bb60b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.1","comment":"https://x.com/drb_ra/status/1962289409295806882","timestamp":"1756681227","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b02a6431-e6fd-5126-9482-057129568d05","type":"url","category":"Network activity","to_ids":true,"value":"http://209.200.246.30:443","comment":"https://x.com/drb_ra/status/1962289550039900478","timestamp":"1756681260","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a89dbb1-6f29-584a-92e3-dbcdacc2e92d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.200.246.30","comment":"https://x.com/drb_ra/status/1962289550039900478","timestamp":"1756681260","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d868bf22-a2c4-54c9-90e1-c2b91df23c59","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.10:8081","comment":"https://x.com/drb_ra/status/1962289691274682847","timestamp":"1756681294","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b04fc59c-f796-5878-adeb-d8f57339cd37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.10","comment":"https://x.com/drb_ra/status/1962289691274682847","timestamp":"1756681294","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8ae74d10-0252-5c20-8d30-db0a875a0246","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.27:8081","comment":"https://x.com/drb_ra/status/1962289831645454835","timestamp":"1756681328","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7f78327-5049-52f8-bfb6-7817c46d53b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.27","comment":"https://x.com/drb_ra/status/1962289831645454835","timestamp":"1756681328","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"773472db-d105-5461-bdbf-00ac246ab732","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.16:8081","comment":"https://x.com/drb_ra/status/1962289974922891282","timestamp":"1756681362","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f9b84a6-a197-539e-95fa-ec6a122121b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.16","comment":"https://x.com/drb_ra/status/1962289974922891282","timestamp":"1756681362","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a37b5c9a-4247-5f45-8fe0-dd42d3804115","type":"domain","category":"Network activity","to_ids":true,"value":"xn--d1aqfkf.xn--p1ai","comment":"https://x.com/urldna_bot/status/1962304432760099277","timestamp":"1756684809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d87d2926-6355-5e0c-a209-84024faaaca9","type":"url","category":"Network activity","to_ids":true,"value":"http://xn--d1aqfkf.xn--p1ai/bitrix/.../GlobalSources/","comment":"https://x.com/urldna_bot/status/1962304432760099277","timestamp":"1756684809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bf11627d-cf21-5b3d-afbc-d5aa14955db0","type":"domain","category":"Network activity","to_ids":true,"value":"101c4a583c3acdd2afd06ca2fb183cf995sdfsdh54jkdfgh54893489h5.pages.dev","comment":"https://x.com/skocherhan/status/1962306368972497150","timestamp":"1756685270","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"db0b2231-211d-5889-92c2-8397d94fcbb7","type":"url","category":"Network activity","to_ids":true,"value":"https://101c4a583c3acdd2afd06ca2fb183cf995sdfsdh54jkdfgh54893489h5.pages.dev","comment":"https://x.com/skocherhan/status/1962306368972497150","timestamp":"1756685270","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"8b719539-3bc7-5667-8039-7cd570f66783","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/samninja666/test1/refs/heads/main/msedge.exe","comment":"https://x.com/skocherhan/status/1962317517554074030","timestamp":"1756687928","distribution":"5"},{"uuid":"3ea2d957-eceb-5870-a88a-1e5d6ec9c8e6","type":"domain","category":"Network activity","to_ids":true,"value":"fuckrat.ru:1131","comment":"https://x.com/skocherhan/status/1962317517554074030","timestamp":"1756687928","distribution":"5"},{"uuid":"00177bcf-b6ee-5755-a6af-868f26e8c414","type":"url","category":"Network activity","to_ids":true,"value":"http://fuckrat.ru:1131","comment":"https://x.com/skocherhan/status/1962317517554074030","timestamp":"1756687928","distribution":"5"},{"uuid":"77cfe337-7342-515f-b49c-6a89d396afc6","type":"domain","category":"Network activity","to_ids":true,"value":"133ex.com","comment":"https://x.com/matt_albert33/status/1962318993701711939","timestamp":"1756688280","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"e527cdb1-47bb-5f58-8066-85510bb1a9b0","type":"url","category":"Network activity","to_ids":true,"value":"http://133ex.com","comment":"https://x.com/matt_albert33/status/1962318993701711939","timestamp":"1756688280","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"4f46d78f-bac0-5517-8182-6810238c5ae0","type":"domain","category":"Network activity","to_ids":true,"value":"mail---premium--service--update.weebly.com","comment":"https://x.com/urldna_bot/status/1962334639252509139","timestamp":"1756692011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5166e296-ba18-5e85-ab07-94159478d61f","type":"url","category":"Network activity","to_ids":true,"value":"https://mail---premium--service--update.weebly.com","comment":"https://x.com/urldna_bot/status/1962334639252509139","timestamp":"1756692011","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9e413e6f-d997-5f2a-9b5b-3bdb78ee3ee6","type":"domain","category":"Network activity","to_ids":true,"value":"documentopa.weebly.com","comment":"https://x.com/urldna_bot/status/1962364837050163594","timestamp":"1756699210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b247ef71-fc18-596b-a8f2-0696441a2f47","type":"url","category":"Network activity","to_ids":true,"value":"https://documentopa.weebly.com","comment":"https://x.com/urldna_bot/status/1962364837050163594","timestamp":"1756699210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a43a5ca8-e670-59c8-85bd-dbfc870fc0fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.32.133.19","comment":"https://x.com/Fact_Finder03/status/1962369260581220403","timestamp":"1756700265","distribution":"5"},{"uuid":"e39b926a-c138-57d3-9bd4-2ab85e90b98c","type":"domain","category":"Network activity","to_ids":true,"value":"s-pan-kii-hinata.codeanyapp.com","comment":"https://x.com/AddressIntel/status/1962384949815713819","timestamp":"1756704006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efe9d65d-bb99-5c69-9eed-e05a111fb425","type":"url","category":"Network activity","to_ids":true,"value":"https://s-pan-kii-hinata.codeanyapp.com/d-/","comment":"https://x.com/AddressIntel/status/1962384949815713819","timestamp":"1756704006","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b6e15318-15ba-59e0-9e44-f1ac4fa8cea7","type":"domain","category":"Network activity","to_ids":true,"value":"web-konto74.weebly.com","comment":"https://x.com/urldna_bot/status/1962395035988525563","timestamp":"1756706410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aa7114c7-2e25-5f35-b917-cf957680e242","type":"url","category":"Network activity","to_ids":true,"value":"https://web-konto74.weebly.com","comment":"https://x.com/urldna_bot/status/1962395035988525563","timestamp":"1756706410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3ec3f795-d7c5-538c-b89b-9781324e1be7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"db92fb80cc64af1cc6e6ea6e259ac6982bc6f70be374fcc1c85cbb6fee1ec5e4","comment":"https://x.com/ShadowChasing1/status/1962395970911793385","timestamp":"1756706633","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1888b4fe-8cc5-5058-8b88-10bf6e4f00af","type":"url","category":"Network activity","to_ids":true,"value":"http://infiyou.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"594d8a50-c4b5-5272-a77d-e6386306d6e7","type":"domain","category":"Network activity","to_ids":true,"value":"noticingyou.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"410ee489-2aee-5db9-88c8-4f71c9c25e64","type":"url","category":"Network activity","to_ids":true,"value":"http://noticingyou.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"a9d6222e-4959-5f5a-a390-730639dd7ffa","type":"domain","category":"Network activity","to_ids":true,"value":"infiyou.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"8d4e6995-2c36-54b2-b7b5-59a93833c9ce","type":"url","category":"Network activity","to_ids":true,"value":"http://27.102.138.181","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"40d21f5a-b8bd-500b-9651-a60007e9f351","type":"domain","category":"Network activity","to_ids":true,"value":"inyounfo.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"b153fc85-21f6-5418-ae15-17aa72aa3a44","type":"url","category":"Network activity","to_ids":true,"value":"http://infelog.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"07bbdef6-8ef6-5532-897d-0eeb0039f90c","type":"url","category":"Network activity","to_ids":true,"value":"http://inyounfo.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"c99565a4-38da-52d5-92e5-b3acbb3cd7d3","type":"domain","category":"Network activity","to_ids":true,"value":"infelog.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"edf39b16-dbbd-5260-aa94-749dd989d5f2","type":"url","category":"Network activity","to_ids":true,"value":"http://nlink.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"2713be89-11f1-54ae-b6a2-01604e95490d","type":"domain","category":"Network activity","to_ids":true,"value":"nlink.mydns.bz","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"1d7e10cc-7ff0-56b9-887e-84cba9003e7e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.102.138.181","comment":"https://x.com/ShadowChasing1/status/1962395990859919683","timestamp":"1756706638","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"b78d6f6b-656c-5564-9d8e-df51b07c0af6","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.240.52:443","comment":"https://x.com/drb_ra/status/1962406830157500629","timestamp":"1756709222","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"cdf9ef8a-8290-57d2-987a-014cf98f8c92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.240.52","comment":"https://x.com/drb_ra/status/1962406830157500629","timestamp":"1756709222","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c42d1530-7261-5b02-a18b-d2354613f9e5","type":"url","category":"Network activity","to_ids":true,"value":"http://65.108.80.194:3333","comment":"https://x.com/drb_ra/status/1962406968930295862","timestamp":"1756709255","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"47b99672-e560-57df-be1e-31d5b46e22be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.108.80.194","comment":"https://x.com/drb_ra/status/1962406968930295862","timestamp":"1756709255","distribution":"5","Tag":[{"name":"C2"},{"name":"Evilginx"},{"name":"EvilGoPhish"}]},{"uuid":"952b4235-e584-5cdc-be7c-6eb5c734af9c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.94.111.217:8898","comment":"https://x.com/drb_ra/status/1962407106121719836","timestamp":"1756709288","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"0d3b6d92-f920-5fae-8d1b-fa2a271d6229","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.111.217","comment":"https://x.com/drb_ra/status/1962407106121719836","timestamp":"1756709288","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"d546bd79-81bb-5043-b576-74e5f0734d64","type":"url","category":"Network activity","to_ids":true,"value":"http://89.238.176.20:443","comment":"https://x.com/drb_ra/status/1962407243879506075","timestamp":"1756709321","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"6043519d-23cf-598b-b0bf-42493dc17586","type":"ip-dst","category":"Network activity","to_ids":true,"value":"89.238.176.20","comment":"https://x.com/drb_ra/status/1962407243879506075","timestamp":"1756709321","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"a6942263-e03d-5b70-bbcb-37006fdbcc67","type":"url","category":"Network activity","to_ids":true,"value":"http://84.242.44.234:443","comment":"https://x.com/drb_ra/status/1962407381217812603","timestamp":"1756709354","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"617e0f43-76b7-529f-bef3-cfbea0c85c07","type":"ip-dst","category":"Network activity","to_ids":true,"value":"84.242.44.234","comment":"https://x.com/drb_ra/status/1962407381217812603","timestamp":"1756709354","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"fc70c6c1-b472-5b69-9ffd-2158334d2999","type":"url","category":"Network activity","to_ids":true,"value":"http://109.205.181.248:7443","comment":"https://x.com/drb_ra/status/1962407519487222046","timestamp":"1756709387","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"fbeb026d-3411-5469-a7ae-918dd69279f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.205.181.248","comment":"https://x.com/drb_ra/status/1962407519487222046","timestamp":"1756709387","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"cc06286e-67d0-5d28-9148-38442e0e12b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.235.183","comment":"https://x.com/drb_ra/status/1962407658327019961","timestamp":"1756709420","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"77abdc3d-dc7f-5874-9f70-24241aaa061c","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.235.183:7443","comment":"https://x.com/drb_ra/status/1962407658327019961","timestamp":"1756709420","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b7c1dc5e-3058-5215-a86b-78a9afa9c092","type":"url","category":"Network activity","to_ids":true,"value":"http://185.245.183.186:443","comment":"https://x.com/drb_ra/status/1962407796298661941","timestamp":"1756709453","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"ac49e08c-2202-571b-b366-28a34b38ded4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.245.183.186","comment":"https://x.com/drb_ra/status/1962407796298661941","timestamp":"1756709453","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4f781353-77cc-5afe-8253-0ec0179ae544","type":"url","category":"Network activity","to_ids":true,"value":"http://34.69.221.5:31337","comment":"https://x.com/drb_ra/status/1962407935704813925","timestamp":"1756709486","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"75f677b6-9172-540b-b960-4c0c712ebd96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.86.197","comment":"https://x.com/drb_ra/status/1962408074049634455","timestamp":"1756709519","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"908ccb4d-2606-5239-9a95-c9767c55471b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.86.197:31337","comment":"https://x.com/drb_ra/status/1962408074049634455","timestamp":"1756709519","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"19c8f008-0b24-5565-80d7-ce870dd314d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.5.43.9","comment":"https://x.com/drb_ra/status/1962408719192363338","timestamp":"1756709673","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f8df4b5a-80e9-552d-b9eb-83fd1c4da305","type":"url","category":"Network activity","to_ids":true,"value":"http://72.5.43.9:443","comment":"https://x.com/drb_ra/status/1962408719192363338","timestamp":"1756709673","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e48d730d-5ec2-5b23-99e1-e295faa17724","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.101","comment":"https://x.com/drb_ra/status/1962408857772134482","timestamp":"1756709706","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9fd5b5df-cd39-547e-8824-d117a7d232e0","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.73.101:2404","comment":"https://x.com/drb_ra/status/1962408857772134482","timestamp":"1756709706","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e062d2f1-94ce-541e-b647-140de195e4be","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.26.40:3232","comment":"https://x.com/drb_ra/status/1962408996708442616","timestamp":"1756709739","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"30d3f265-44b6-5f34-a59e-2550b5dd938f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.26.40","comment":"https://x.com/drb_ra/status/1962408996708442616","timestamp":"1756709739","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"128e3075-1fbe-55db-8995-65c5152c9dde","type":"url","category":"Network activity","to_ids":true,"value":"http://192.227.152.240:3233","comment":"https://x.com/drb_ra/status/1962409135812571368","timestamp":"1756709772","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"fbc57515-8be8-522f-a6d6-5f4081b4a15f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.227.152.240","comment":"https://x.com/drb_ra/status/1962409135812571368","timestamp":"1756709772","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"25420ed4-4f63-5bd6-ae61-b6e0bfbf5740","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.62.221.203","comment":"https://x.com/drb_ra/status/1962409274979619110","timestamp":"1756709805","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9ea08c27-24d6-59b0-8fb1-8c298ec308d0","type":"url","category":"Network activity","to_ids":true,"value":"http://16.62.221.203:3587","comment":"https://x.com/drb_ra/status/1962409274979619110","timestamp":"1756709805","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"10eac9fc-a0d0-5b07-8126-c9295cedfdfd","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.148.70:443","comment":"https://x.com/drb_ra/status/1962409413718806750","timestamp":"1756709838","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5a26071e-77d6-5525-ab12-17f27194beae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.148.70","comment":"https://x.com/drb_ra/status/1962409413718806750","timestamp":"1756709838","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d79957c7-a318-52c8-8328-e78f01926ef2","type":"md5","category":"Payload delivery","to_ids":true,"value":"5add3ab0c03b9f3c796ec7c5ec148754","comment":"https://x.com/ReBensk/status/1962411944981455025","timestamp":"1756710442","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"eb2a791d-2701-5bab-8695-16fe9d654017","type":"md5","category":"Payload delivery","to_ids":true,"value":"495c77825f168a0f6ddeb1591c6c5c52","comment":"https://x.com/suyog41/status/1962415798481498380","timestamp":"1756711360","distribution":"5"},{"uuid":"c99db9e1-9325-5d9e-9053-39ae762f7f2a","type":"domain","category":"Network activity","to_ids":true,"value":"kismanmo.com","comment":"https://x.com/suyog41/status/1962415798481498380","timestamp":"1756711360","distribution":"5"},{"uuid":"3ceb6698-ebfd-5ca1-9f50-00788954f039","type":"url","category":"Network activity","to_ids":true,"value":"http://kismanmo.com","comment":"https://x.com/suyog41/status/1962415798481498380","timestamp":"1756711360","distribution":"5"},{"uuid":"88f41ae9-7c3b-5f9e-82d7-c7f3861971ad","type":"md5","category":"Payload delivery","to_ids":true,"value":"5443878ae932226f2bb65a004ef3308f","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"921ebdf5-ee6a-5652-b91a-6e751c4559d5","type":"md5","category":"Payload delivery","to_ids":true,"value":"9a2ea539862b7e54ecdf3bfb3e4a1662","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"dacd614c-555c-5e8e-990d-c94f5f1be813","type":"md5","category":"Payload delivery","to_ids":true,"value":"c90bb17597b0de16ec152c881489471e","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"41ce6c5b-7d15-5cd7-8705-e14d5e7c000c","type":"md5","category":"Payload delivery","to_ids":true,"value":"9e6759dfc2c98c3259822b4024f64f2f","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"e0300a7a-365a-5775-9f6a-9a653d6403d4","type":"md5","category":"Payload delivery","to_ids":true,"value":"f9fd4bb5263391722a8c81b1b884c1da","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"09591e9f-ea88-5dc9-a135-9e1fd0519ffc","type":"md5","category":"Payload delivery","to_ids":true,"value":"23b6fcd34eb5f4fb33a294e35974e184","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"d040bc24-a864-5124-8ced-1c0e4a4e10a3","type":"md5","category":"Payload delivery","to_ids":true,"value":"41c33251c1e1be7d0e711b456b26676b","comment":"https://x.com/suyog41/status/1962417162204955093","timestamp":"1756711686","distribution":"5"},{"uuid":"0cd8ff6a-0155-500f-9321-d2d35da1b297","type":"md5","category":"Payload delivery","to_ids":true,"value":"7dae1ce135b67d3c58ca783440415273","comment":"https://x.com/suyog41/status/1962425261825130647","timestamp":"1756713617","distribution":"5"},{"uuid":"c362dbf9-33f3-5a1a-9fcc-a40c4a760b52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.116.227.117","comment":"https://x.com/suyog41/status/1962425261825130647","timestamp":"1756713617","distribution":"5"},{"uuid":"30cdf1af-1a32-5208-ac16-e7b049cdd442","type":"url","category":"Network activity","to_ids":true,"value":"http://3.69.157.220:14147","comment":"https://x.com/SarlackLab/status/1962425326065115438","timestamp":"1756713632","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"0b9fd722-d1dc-5a01-8e20-aa90674db37d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.69.115.178:14147","comment":"https://x.com/SarlackLab/status/1962425326065115438","timestamp":"1756713632","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"3b9e8359-db04-5fe8-b5df-7b47212eb894","type":"md5","category":"Payload delivery","to_ids":true,"value":"8a78939c6576e6091a60e15a7d51ba9d","comment":"https://x.com/skocherhan/status/1962425606936645787","timestamp":"1756713699","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"b6265123-7318-5ff3-a2ba-5cdb6c5b8304","type":"md5","category":"Payload delivery","to_ids":true,"value":"96405c4669e5c3149ed0f0098c0de489","comment":"https://x.com/skocherhan/status/1962425606936645787","timestamp":"1756713699","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e4b6c5b1-69e2-5950-a6aa-647714ba1b3f","type":"md5","category":"Payload delivery","to_ids":true,"value":"7452fb632fd824f882fa12f9bebd7aa7","comment":"https://x.com/skocherhan/status/1962425606936645787","timestamp":"1756713699","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e42b0f9a-def8-599b-a31b-2da05f17e620","type":"md5","category":"Payload delivery","to_ids":true,"value":"e876ead3af7971c370bcd2aa7876d022","comment":"https://x.com/skocherhan/status/1962425606936645787","timestamp":"1756713699","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"644d7e14-58a0-51fc-bea4-a092c2f4bf99","type":"md5","category":"Payload delivery","to_ids":true,"value":"a508889861e75f3b6bbbb722faa7096e","comment":"https://x.com/skocherhan/status/1962425606936645787","timestamp":"1756713699","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5c388d7e-4bbc-54fc-9975-e99000b7d3e0","type":"domain","category":"Network activity","to_ids":true,"value":"famille17.web.app","comment":"https://x.com/yvesago/status/1962425754802675809","timestamp":"1756713734","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81749126-e15b-5a96-90b2-3842285d0a0a","type":"url","category":"Network activity","to_ids":true,"value":"https://drive.google.com/uc?export=download&id=1uMJlV0UJFQVJq0bBktHTZIH0I7quT-_8","comment":"https://x.com/yvesago/status/1962425754802675809","timestamp":"1756713734","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c3c4435-288c-5175-a971-7aa0ea253b2d","type":"domain","category":"Network activity","to_ids":true,"value":"lucky-glade-096c.blackquiet.workers.dev","comment":"https://x.com/yvesago/status/1962425754802675809","timestamp":"1756713734","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8d3fb54-5355-549f-a6e8-7a2b57221118","type":"url","category":"Network activity","to_ids":true,"value":"https://famille17.web.app/appJJ.js","comment":"https://x.com/yvesago/status/1962425754802675809","timestamp":"1756713734","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f3299ef-d1a2-5146-8e74-5a4aed2c3196","type":"url","category":"Network activity","to_ids":true,"value":"https://lucky-glade-096c.blackquiet.workers.dev","comment":"https://x.com/yvesago/status/1962425754802675809","timestamp":"1756713734","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ffc2c25-e7dd-5b36-97fb-de14c15bac80","type":"url","category":"Network activity","to_ids":true,"value":"https://bordeaux-montaign3.weebly.com","comment":"https://x.com/urldna_bot/status/1962455434897289381","timestamp":"1756720810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c8bf8d6e-0b8c-538d-9eb8-e793d8f69a0a","type":"domain","category":"Network activity","to_ids":true,"value":"bordeaux-montaign3.weebly.com","comment":"https://x.com/urldna_bot/status/1962455434897289381","timestamp":"1756720810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"06486e54-60a0-5453-867b-d6446dcc4183","type":"domain","category":"Network activity","to_ids":true,"value":"shiatsu-echt.nl","comment":"https://x.com/suyog41/status/1962456196138647909","timestamp":"1756720992","distribution":"5"},{"uuid":"5f243b9a-583b-56a9-9cb1-470f9898e6dd","type":"url","category":"Network activity","to_ids":true,"value":"http://shiatsu-echt.nl","comment":"https://x.com/suyog41/status/1962456196138647909","timestamp":"1756720992","distribution":"5"},{"uuid":"1596cac6-0ded-5ffc-977c-a2579198e802","type":"md5","category":"Payload delivery","to_ids":true,"value":"eb32e5f220eb5ac33e664139518577ec","comment":"https://x.com/suyog41/status/1962456196138647909","timestamp":"1756720992","distribution":"5"},{"uuid":"4f2dab23-e6ee-53fa-bfb5-71fe658dfafd","type":"md5","category":"Payload delivery","to_ids":true,"value":"6a93ddcd0755a9946a3c444b7331fa5d","comment":"https://x.com/suyog41/status/1962456196138647909","timestamp":"1756720992","distribution":"5"},{"uuid":"1f95aac9-9377-5163-b201-5a3b5484ca2e","type":"md5","category":"Payload delivery","to_ids":true,"value":"6d18166da354efacd541bcac622a6e43","comment":"https://x.com/suyog41/status/1962466397612834892","timestamp":"1756723424","distribution":"5","Tag":[{"name":"APT"},{"name":"Kimsuky"}]},{"uuid":"4ac12f2c-614c-5418-8d5d-46ab74a64077","type":"domain","category":"Network activity","to_ids":true,"value":"jpmorgan-access.com","comment":"https://x.com/c9lab_soc/status/1962466506308251929","timestamp":"1756723450","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"92bb706b-7319-599d-a15b-d438b7e8aa54","type":"url","category":"Network activity","to_ids":true,"value":"http://jpmorgan-access.com","comment":"https://x.com/c9lab_soc/status/1962466506308251929","timestamp":"1756723450","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"15e3b667-3682-5491-8ce2-ee90bd07f7a6","type":"domain","category":"Network activity","to_ids":true,"value":"vn-discord.asia","comment":"https://x.com/c9lab_soc/status/1962466506308251929","timestamp":"1756723450","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"22206c47-0493-5eeb-a9b4-3369c2be13fd","type":"url","category":"Network activity","to_ids":true,"value":"http://vn-discord.asia","comment":"https://x.com/c9lab_soc/status/1962466506308251929","timestamp":"1756723450","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8d797299-85e5-5d51-9b17-ca609b9ed7a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.28.180.115","comment":"https://x.com/drb_ra/status/1962469517419786637","timestamp":"1756724168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1970befb-08bd-59cd-9a41-e571583aeff0","type":"url","category":"Network activity","to_ids":true,"value":"http://129.28.180.115:8081","comment":"https://x.com/drb_ra/status/1962469517419786637","timestamp":"1756724168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c7c9c770-877c-5907-b10c-dc2a90419019","type":"url","category":"Network activity","to_ids":true,"value":"https://129.28.180.115/g.pixel","comment":"https://x.com/drb_ra/status/1962469517419786637","timestamp":"1756724168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91dcfb3b-02d8-56ba-8172-cb6bd4f0c90b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.24:8081","comment":"https://x.com/drb_ra/status/1962470170523283522","timestamp":"1756724324","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"58f923ec-8504-5728-9d2e-f4c6df057ba0","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.17:8081","comment":"https://x.com/drb_ra/status/1962470314274595073","timestamp":"1756724358","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"de444484-54db-5407-93a4-59602d1c78b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.17","comment":"https://x.com/drb_ra/status/1962470314274595073","timestamp":"1756724358","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2c5c0ea6-b7e7-55a2-b6ad-7b2f61b94d14","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.3:8081","comment":"https://x.com/drb_ra/status/1962470963854839906","timestamp":"1756724513","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"832390f1-38c2-5cf4-9840-a75ef53e680d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.3","comment":"https://x.com/drb_ra/status/1962470963854839906","timestamp":"1756724513","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c8f1af9a-fa19-5ef8-8f2d-bb0ea1c1bea9","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.18:8081","comment":"https://x.com/drb_ra/status/1962471105333010505","timestamp":"1756724547","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"65ff4f90-e35b-570a-a2c9-56a9d463d6ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.18","comment":"https://x.com/drb_ra/status/1962471105333010505","timestamp":"1756724547","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b15bae8f-8388-55db-b4e3-872ff23d7c4f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.6:8081","comment":"https://x.com/drb_ra/status/1962471246538350843","timestamp":"1756724580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5286151b-7b23-58a3-9f8a-55bddeaf5508","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.6","comment":"https://x.com/drb_ra/status/1962471246538350843","timestamp":"1756724580","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0666ea79-7195-5ae9-8bdc-93a92ec404ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.5","comment":"https://x.com/drb_ra/status/1962471386804273588","timestamp":"1756724614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"71c67a14-25c1-5f36-9222-442fe98e301b","type":"url","category":"Network activity","to_ids":true,"value":"https://104.233.252.24/admin/read/Server/shopper/API/UO3UVEIWYPQ0PZO","comment":"https://x.com/drb_ra/status/1962471386804273588","timestamp":"1756724614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"08dada45-d776-50c3-914d-fde915d2b757","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.5:8081","comment":"https://x.com/drb_ra/status/1962471386804273588","timestamp":"1756724614","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e55bfb83-9c24-5e06-a9ce-7ed135355a59","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.107:80","comment":"https://x.com/drb_ra/status/1962471526617211275","timestamp":"1756724647","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b297b5e3-54e9-589e-9a83-86af8e60dfd5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.107","comment":"https://x.com/drb_ra/status/1962471526617211275","timestamp":"1756724647","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"adccdf4d-2314-5893-803d-d1d3368060aa","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.2:8081","comment":"https://x.com/drb_ra/status/1962471666803425434","timestamp":"1756724680","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8ec8df2d-68c7-5aa3-bd03-9a5c657aea8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.2","comment":"https://x.com/drb_ra/status/1962471666803425434","timestamp":"1756724680","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"33d5e455-746d-56a4-a9c2-c9dce5cd86db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.24","comment":"https://x.com/drb_ra/status/1962471666803425434","timestamp":"1756724680","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f42a278e-7615-5be5-89fd-bfee18924a42","type":"domain","category":"Network activity","to_ids":true,"value":"banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1962476719589216383","timestamp":"1756725885","distribution":"5"},{"uuid":"b1ba09fc-121a-592b-b80a-50ef100deaab","type":"url","category":"Network activity","to_ids":true,"value":"http://banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1962476719589216383","timestamp":"1756725885","distribution":"5"},{"uuid":"95a888e2-ce36-5580-b064-a3463f0502d5","type":"url","category":"Network activity","to_ids":true,"value":"http://vivisage.store","comment":"https://x.com/skocherhan/status/1962478943795110111","timestamp":"1756726415","distribution":"5"},{"uuid":"3d930a40-5740-5ce0-9045-1fcd947b24fc","type":"domain","category":"Network activity","to_ids":true,"value":"vivisage.store","comment":"https://x.com/skocherhan/status/1962478943795110111","timestamp":"1756726415","distribution":"5"},{"uuid":"8db6246a-bb84-5c45-9529-89bbbfc2e501","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.12.221.197","comment":"https://x.com/drb_ra/status/1962483489212617188","timestamp":"1756727499","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d9f9302a-5068-5e84-aaca-583337b83a33","type":"url","category":"Network activity","to_ids":true,"value":"https://49.12.221.197:8443","comment":"https://x.com/drb_ra/status/1962483489212617188","timestamp":"1756727499","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4d4890a4-bf80-5d86-8286-09a176a212c3","type":"url","category":"Network activity","to_ids":true,"value":"http://49.12.221.197:8443","comment":"https://x.com/drb_ra/status/1962483489212617188","timestamp":"1756727499","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b0991008-0909-52cd-9ab4-6e42ee2ac457","type":"url","category":"Network activity","to_ids":true,"value":"http://149.0.16.127:445","comment":"https://x.com/drb_ra/status/1962483629424046590","timestamp":"1756727533","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"781fa6fb-e3ca-558a-b384-3694bafb276a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.0.16.127","comment":"https://x.com/drb_ra/status/1962483629424046590","timestamp":"1756727533","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"80573b2b-a656-5684-9959-950ae340eac3","type":"url","category":"Network activity","to_ids":true,"value":"https://52.176.154.82:443","comment":"https://x.com/drb_ra/status/1962483777390690374","timestamp":"1756727568","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c7121760-a13f-5dbe-b46e-44679f211cc0","type":"url","category":"Network activity","to_ids":true,"value":"http://52.176.154.82:443","comment":"https://x.com/drb_ra/status/1962483777390690374","timestamp":"1756727568","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9240843b-743f-58be-a9be-97b516bf7cf0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.176.154.82","comment":"https://x.com/drb_ra/status/1962483777390690374","timestamp":"1756727568","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0d336d14-00a8-5aae-af7f-b1e3f8ae97d9","type":"domain","category":"Network activity","to_ids":true,"value":"zimbra-98c9-3e6903ad31e1-8236ce-webos.netlify.app","comment":"https://x.com/urldna_bot/status/1962485628383236605","timestamp":"1756728009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"71461385-569b-5882-8642-400d4881d93e","type":"url","category":"Network activity","to_ids":true,"value":"http://zimbra-98c9-3e6903ad31e1-8236ce-webos.netlify.app/zm","comment":"https://x.com/urldna_bot/status/1962485628383236605","timestamp":"1756728009","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9b783f45-cafa-5dfb-b613-81d2d7275fa7","type":"md5","category":"Payload delivery","to_ids":true,"value":"57e902b30c18dc7e4a953750663b2119","comment":"https://x.com/skocherhan/status/1962490492584591617","timestamp":"1756729169","distribution":"5"},{"uuid":"12c77450-0727-5809-af2c-dbc679477612","type":"url","category":"Network activity","to_ids":true,"value":"http://uncontholoweae.com/click.php?key=d184it592fb00520an7g&type=TBN&age=&creative_id=&campaign_id=&site_id=18058&placement_id=61315773&preset_id=&click_id=57e902b30c18dc7e4a953750663b2119&entity_placement_id=142775","comment":"https://x.com/skocherhan/status/1962490492584591617","timestamp":"1756729169","distribution":"5"},{"uuid":"ecb953e8-6248-57e9-bc91-bb13881d3d2c","type":"domain","category":"Network activity","to_ids":true,"value":"uncontholoweae.com","comment":"https://x.com/skocherhan/status/1962490492584591617","timestamp":"1756729169","distribution":"5"},{"uuid":"264a1fe0-a0ab-5f2c-8456-10abae207227","type":"domain","category":"Network activity","to_ids":true,"value":"chrynks.top","comment":"https://x.com/FalconFeedsio/status/1962493488785953141","timestamp":"1756729883","distribution":"5"},{"uuid":"ea513473-4590-5aae-9e13-95ab3be94b1b","type":"url","category":"Network activity","to_ids":true,"value":"http://chrynks.top","comment":"https://x.com/FalconFeedsio/status/1962493488785953141","timestamp":"1756729883","distribution":"5"},{"uuid":"6d2941f2-b4c0-5064-aab6-eb7165cc2716","type":"url","category":"Network activity","to_ids":true,"value":"http://187.126.137.202","comment":"https://x.com/FalconFeedsio/status/1962494410471739490","timestamp":"1756730103","distribution":"5"},{"uuid":"3c9486eb-8a06-50ed-b646-9e6a8c8c0c03","type":"ip-dst","category":"Network activity","to_ids":true,"value":"187.126.137.202","comment":"https://x.com/FalconFeedsio/status/1962494410471739490","timestamp":"1756730103","distribution":"5"},{"uuid":"ffb12536-9c5f-5325-930b-51289275d8d3","type":"domain","category":"Network activity","to_ids":true,"value":"fubolai.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba4906bd-c0bf-522b-a315-6f5f86d25619","type":"url","category":"Network activity","to_ids":true,"value":"https://fubolai.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbb0465d-ff40-5056-96c2-bac254dd2cd7","type":"domain","category":"Network activity","to_ids":true,"value":"vrblv.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e150bf0-456f-5e70-b3c4-b6dc45f3739b","type":"url","category":"Network activity","to_ids":true,"value":"https://vrblv.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ab20b30-a2da-500e-8eb7-0ab775f4f2cb","type":"domain","category":"Network activity","to_ids":true,"value":"fppzj.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3ce996f-ecca-5f02-90ce-4d70f611bc44","type":"url","category":"Network activity","to_ids":true,"value":"https://fppzj.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0233d1e4-9eb3-5999-a83e-b5d50041af23","type":"domain","category":"Network activity","to_ids":true,"value":"duolalife.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d9f4315-f5ef-5df7-bd3f-b34da2ac2c95","type":"url","category":"Network activity","to_ids":true,"value":"https://duolalife.cn","comment":"https://x.com/Metemcyber/status/1962499363626004558","timestamp":"1756731284","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bda2eac4-7b8b-52d5-b8c9-67d94fb45a8f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.179.128","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"585bcaab-fa61-5816-9c72-c0ce2357f4a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f550ae6-b281-5d47-a3b9-702f2a217384","type":"domain","category":"Network activity","to_ids":true,"value":"pqrsxyz.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff568068-e7cd-5cba-8a99-3c99dc77ba83","type":"url","category":"Network activity","to_ids":true,"value":"https://nunshang.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7854665c-c66f-5726-9702-cced8183f045","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.179.128","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9085948-103e-53dd-9cf6-e2953aaf7357","type":"url","category":"Network activity","to_ids":true,"value":"https://hackwps.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3786faa-e05d-5e67-9580-dcb5d7abba56","type":"domain","category":"Network activity","to_ids":true,"value":"hackwps.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbeaa4a0-c412-5657-8ebc-271c1740435f","type":"url","category":"Network activity","to_ids":true,"value":"https://fananba.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b70fb394-351d-5a38-8d8f-6c95d396856b","type":"domain","category":"Network activity","to_ids":true,"value":"nunshang.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"807f20f4-b899-545c-be1b-d76c3fdfbc0e","type":"domain","category":"Network activity","to_ids":true,"value":"fananba.cn","comment":"https://x.com/Metemcyber/status/1962499650877018327","timestamp":"1756731352","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf17a554-68c7-5b9b-a8ee-75a22de68200","type":"domain","category":"Network activity","to_ids":true,"value":"klkpobh.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e52bb16-081b-57c1-b7d9-1419899ab5a8","type":"url","category":"Network activity","to_ids":true,"value":"https://hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9bc2cb56-c538-524c-bbf6-e1ea4bc937f4","type":"domain","category":"Network activity","to_ids":true,"value":"hbzhigu.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f82831a-fa0f-58c2-b54f-6cd42c9fb71c","type":"url","category":"Network activity","to_ids":true,"value":"https://klkpobh.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"80da2721-b46f-5a98-8e05-1fe0dfd2a316","type":"domain","category":"Network activity","to_ids":true,"value":"hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2cef9831-ce6c-52f1-b12e-0d7bff5a64b2","type":"url","category":"Network activity","to_ids":true,"value":"https://fishnew.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"52c5710d-fde0-577d-81ac-9f59ca7932a7","type":"domain","category":"Network activity","to_ids":true,"value":"fishnew.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7482a3cf-27d2-5b43-ac12-011784093978","type":"url","category":"Network activity","to_ids":true,"value":"https://hmdpqhf.cn","comment":"https://x.com/Metemcyber/status/1962499821459431454","timestamp":"1756731393","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f76c2cb5-d6c7-53bd-9467-9a4d3ec1e22c","type":"domain","category":"Network activity","to_ids":true,"value":"lihuawang.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84104d47-2a21-5a0b-a012-b20fb169cc7d","type":"url","category":"Network activity","to_ids":true,"value":"https://lihuawang.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec9ae5c8-167f-5b6a-99f4-3bad21220369","type":"domain","category":"Network activity","to_ids":true,"value":"xvelc.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be8fbcfc-1c35-526c-8dd4-82b9559c7452","type":"url","category":"Network activity","to_ids":true,"value":"https://xvelc.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c8f0fa2-2f29-5648-a3ad-22edf7868254","type":"domain","category":"Network activity","to_ids":true,"value":"liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23c4a4c4-d198-52ad-82a6-77d3056a5266","type":"url","category":"Network activity","to_ids":true,"value":"https://liuzhikun.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c30f68d3-3ca7-5fb3-a2bc-132f80c51750","type":"domain","category":"Network activity","to_ids":true,"value":"dmnopq.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d84fc4c-4223-53b8-9a83-573ee6239e79","type":"url","category":"Network activity","to_ids":true,"value":"https://dmnopq.cn","comment":"https://x.com/Metemcyber/status/1962499964225081465","timestamp":"1756731427","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8a46022a-bdd7-5e27-8682-c5ec048a69c3","type":"domain","category":"Network activity","to_ids":true,"value":"viwcr.cn","comment":"https://x.com/Metemcyber/status/1962500061268734022","timestamp":"1756731450","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6dc9129-c121-58da-b195-d94c2849ab15","type":"domain","category":"Network activity","to_ids":true,"value":"knewlog.cn","comment":"https://x.com/Metemcyber/status/1962500061268734022","timestamp":"1756731450","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51c3318d-6a29-5379-ad46-c91e7c23b434","type":"url","category":"Network activity","to_ids":true,"value":"https://knewlog.cn","comment":"https://x.com/Metemcyber/status/1962500061268734022","timestamp":"1756731450","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60f6168e-227c-5a55-b2e0-352ee63ff6fa","type":"url","category":"Network activity","to_ids":true,"value":"https://viwcr.cn","comment":"https://x.com/Metemcyber/status/1962500061268734022","timestamp":"1756731450","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c02f3201-edf5-5fd6-a329-9e500311a71e","type":"domain","category":"Network activity","to_ids":true,"value":"mishima-shochu.jp","comment":"https://x.com/AddressIntel/status/1962505747897487667","timestamp":"1756732806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df529e14-59bf-5e62-baa1-219138af9bae","type":"url","category":"Network activity","to_ids":true,"value":"https://mishima-shochu.jp/ar/aruba/aruba/de/i","comment":"https://x.com/AddressIntel/status/1962505747897487667","timestamp":"1756732806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9fae72b9-1617-54d6-9c57-92dabfbc2da9","type":"url","category":"Network activity","to_ids":true,"value":"http://bitbucket.org/regsdgfdhg/loader-ebat-ego-rot/downloads/SapphirePluginInstaller.exe","comment":"https://x.com/skocherhan/status/1962506364787245073","timestamp":"1756732953","distribution":"5"},{"uuid":"0f5cf300-ef39-5ea9-a4cd-337e9b1f2f9a","type":"domain","category":"Network activity","to_ids":true,"value":"7acrossitalia.com","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e395594-85b0-53e6-a0f8-901bf5789512","type":"url","category":"Network activity","to_ids":true,"value":"http://7acrossitalia.com","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ef723e0-3a70-5ab6-99e0-13fe694918f8","type":"domain","category":"Network activity","to_ids":true,"value":"foto-engels.de","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f63a742-8fd3-5645-ad3c-2a1e175130fb","type":"url","category":"Network activity","to_ids":true,"value":"http://foto-engels.de","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f00dd7dd-7e2a-58d7-b20e-571364047502","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.68.211.14","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54fc708d-66ff-5046-98fb-497fe9be18eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"97.74.103.4","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c6bef8e-5815-5162-9fb5-8155f7663614","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.201.71.4","comment":"https://x.com/hkayaeu/status/1962513376531132553","timestamp":"1756734625","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1aa032a5-2044-56e7-a757-b6408723dede","type":"domain","category":"Network activity","to_ids":true,"value":"verified-badges.com","comment":"https://x.com/urldna_bot/status/1962515823387435082","timestamp":"1756735208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"643663f9-d7b3-5f73-94d2-ea6567051ea7","type":"url","category":"Network activity","to_ids":true,"value":"https://verified-badges.com/606967319425038/form/wrong-login.php","comment":"https://x.com/urldna_bot/status/1962515823387435082","timestamp":"1756735208","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d56b8535-1d79-50c6-986a-a5cea33c83c2","type":"domain","category":"Network activity","to_ids":true,"value":"mccubankingonline.weebly.com","comment":"https://x.com/urldna_bot/status/1962546023676477590","timestamp":"1756742409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"30fea1e4-f209-5579-bd28-4b2a82209d4d","type":"url","category":"Network activity","to_ids":true,"value":"https://mccubankingonline.weebly.com","comment":"https://x.com/urldna_bot/status/1962546023676477590","timestamp":"1756742409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bedc7880-cd5f-52dc-a9c7-29c2a994ec50","type":"url","category":"Network activity","to_ids":true,"value":"http://193.161.193.99:43006","comment":"https://x.com/SarlackLab/status/1962561211188330682","timestamp":"1756746030","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"16081571-5b91-53ef-8d07-55e21509b238","type":"domain","category":"Network activity","to_ids":true,"value":"mhzlhhhh378-43006.portmap.host","comment":"https://x.com/SarlackLab/status/1962561211188330682","timestamp":"1756746030","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"7ee0d932-0380-54ff-b316-fd580e170372","type":"url","category":"Network activity","to_ids":true,"value":"http://mhzlhhhh378-43006.portmap.host","comment":"https://x.com/SarlackLab/status/1962561211188330682","timestamp":"1756746030","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"0cf5e635-9c5d-598d-a92f-34f66a5d5ad8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.161.193.99","comment":"https://x.com/SarlackLab/status/1962561211188330682","timestamp":"1756746030","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"aa287fb0-40e3-58dc-846c-2e9890755a0e","type":"domain","category":"Network activity","to_ids":true,"value":"dllqwoesmensdbds.weebly.com","comment":"https://x.com/urldna_bot/status/1962576221595639945","timestamp":"1756749608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"893368b4-9006-539f-9930-9791f62dcdfa","type":"url","category":"Network activity","to_ids":true,"value":"https://dllqwoesmensdbds.weebly.com","comment":"https://x.com/urldna_bot/status/1962576221595639945","timestamp":"1756749608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b3a932f5-225e-50b5-aa2b-9a45b477840b","type":"url","category":"Network activity","to_ids":true,"value":"http://35.159.113.84:41371","comment":"https://x.com/drb_ra/status/1962588056201957425","timestamp":"1756752430","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a8c592dd-4749-531a-a5c3-2b219d2b39a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.159.113.84","comment":"https://x.com/drb_ra/status/1962588056201957425","timestamp":"1756752430","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"19e3cf7f-2051-5c34-bd7c-ee250ca0e68b","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.113.7:8808","comment":"https://x.com/drb_ra/status/1962588196094476520","timestamp":"1756752463","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"92a850db-6d60-5481-b5fc-04349d5e2c5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.113.7","comment":"https://x.com/drb_ra/status/1962588196094476520","timestamp":"1756752463","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a030746f-d34a-5d1a-b542-dec81db88098","type":"url","category":"Network activity","to_ids":true,"value":"http://52.208.77.11:80","comment":"https://x.com/drb_ra/status/1962588335303540934","timestamp":"1756752496","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"27c88885-eefe-52a3-941d-a0d8b1b5d9da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.208.77.11","comment":"https://x.com/drb_ra/status/1962588335303540934","timestamp":"1756752496","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"145ff101-46c8-5b9e-8156-01dbdfe543ff","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.2:4444","comment":"https://x.com/drb_ra/status/1962588475359707323","timestamp":"1756752530","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"b5e91a79-5d5a-57ce-b60d-833975593db7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.2","comment":"https://x.com/drb_ra/status/1962588475359707323","timestamp":"1756752530","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"39a0ffd3-664a-5a2f-a0e4-5bfc1e60cd1b","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.252.69:443","comment":"https://x.com/drb_ra/status/1962588615634018321","timestamp":"1756752563","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"37317777-33ac-5be8-80a1-3844f36aec66","type":"url","category":"Network activity","to_ids":true,"value":"http://63.34.29.58:445","comment":"https://x.com/drb_ra/status/1962588755576893642","timestamp":"1756752597","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1c4c4724-a89e-57af-8055-5438ef60f7e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.34.29.58","comment":"https://x.com/drb_ra/status/1962588755576893642","timestamp":"1756752597","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"420a18a4-7f55-5f1a-aa31-64f452bc0946","type":"url","category":"Network activity","to_ids":true,"value":"http://46.17.57.37:2096","comment":"https://x.com/drb_ra/status/1962588894949450101","timestamp":"1756752630","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1357e571-6869-56cb-9ffa-23d0f6c8104f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.17.57.37","comment":"https://x.com/drb_ra/status/1962588894949450101","timestamp":"1756752630","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"4679c2fd-654b-537b-b406-0ff5b40a50ad","type":"url","category":"Network activity","to_ids":true,"value":"http://75.2.86.65:443","comment":"https://x.com/drb_ra/status/1962589034905047114","timestamp":"1756752663","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7e04e5db-f116-5bf9-8423-e062d6cb372d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.2.86.65","comment":"https://x.com/drb_ra/status/1962589034905047114","timestamp":"1756752663","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"252c58a6-7f41-50eb-aa82-4f91d214af21","type":"url","category":"Network activity","to_ids":true,"value":"http://146.59.153.194:8443","comment":"https://x.com/drb_ra/status/1962589682329411798","timestamp":"1756752818","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4ab30760-42b4-5cb5-929b-ef91727afd98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.59.153.194","comment":"https://x.com/drb_ra/status/1962589682329411798","timestamp":"1756752818","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"debdd149-207d-5dbe-a1de-a4c5bc375228","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.73.226:5000","comment":"https://x.com/drb_ra/status/1962589821920067601","timestamp":"1756752851","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4c965ec0-ef35-5cba-addf-4f36ece783d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.226","comment":"https://x.com/drb_ra/status/1962589821920067601","timestamp":"1756752851","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6ac4f1e4-3a0d-57fe-9320-b0eb3651a107","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.238:2404","comment":"https://x.com/drb_ra/status/1962590106012823617","timestamp":"1756752919","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3a9e074a-0888-5a4d-90f3-955996ed75bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.238","comment":"https://x.com/drb_ra/status/1962590106012823617","timestamp":"1756752919","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0ca81bc3-18f4-5f4a-9f5f-18eaa29c6288","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.24.225:8080","comment":"https://x.com/drb_ra/status/1962590247218250013","timestamp":"1756752952","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4d63f75e-c9e4-5d3f-9bde-ac6caaedb57c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.24.225","comment":"https://x.com/drb_ra/status/1962590247218250013","timestamp":"1756752952","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6d968cc8-9caf-5cb7-a5ff-6264bcbd671d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.23:8081","comment":"https://x.com/drb_ra/status/1962617312642498738","timestamp":"1756759405","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71958a1a-7bd5-5f5a-93df-4682c543381a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.23","comment":"https://x.com/drb_ra/status/1962617312642498738","timestamp":"1756759405","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e004175a-5ffc-5bad-88f3-2c4221c996e2","type":"url","category":"Network activity","to_ids":true,"value":"http://129.28.180.115:443","comment":"https://x.com/drb_ra/status/1962617454053425506","timestamp":"1756759439","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"84e364c2-7e01-51ce-be6e-1d996392dcb3","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.26:8081","comment":"https://x.com/drb_ra/status/1962618105621803098","timestamp":"1756759594","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"186e6d02-78ec-522d-80b1-ba8d4ada3435","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.26","comment":"https://x.com/drb_ra/status/1962618105621803098","timestamp":"1756759594","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c0c9fef5-2bcc-599e-a76a-f21ccab09bc2","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.20:8081","comment":"https://x.com/drb_ra/status/1962618246252630278","timestamp":"1756759628","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17c871e8-0c04-5c8a-8f7b-f71df88f2ad1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.20","comment":"https://x.com/drb_ra/status/1962618246252630278","timestamp":"1756759628","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f1318db7-a31d-544b-86ed-4125b4b1bb15","type":"url","category":"Network activity","to_ids":true,"value":"http://75.2.86.65","comment":"https://x.com/threatquery/status/1962621499795222822","timestamp":"1756760403","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"ff1e4a7a-5d6d-5663-8023-81e8e43ddd09","type":"url","category":"Network activity","to_ids":true,"value":"http://47.121.137.8","comment":"https://x.com/threatquery/status/1962621503922446418","timestamp":"1756760404","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5515f3ef-9b9d-5ce4-933f-13765bfdfe26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.137.8","comment":"https://x.com/threatquery/status/1962621503922446418","timestamp":"1756760404","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"14fe23e8-8719-52f9-b1f0-1e8a11943573","type":"url","category":"Network activity","to_ids":true,"value":"http://5.163.252.69","comment":"https://x.com/threatquery/status/1962621501946880313","timestamp":"1756760404","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"99283095-e544-5288-bae7-4c8a5ec2c2d4","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.5tiu6.cyou/storuiapppl","comment":"https://x.com/catnap707/status/1962657598785950108","timestamp":"1756769010","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46201102-7c1f-5624-8d4a-ebe30b95712f","type":"url","category":"Network activity","to_ids":true,"value":"http://152.32.145.217","comment":"https://x.com/catnap707/status/1962657598785950108","timestamp":"1756769010","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f438c3a-723c-5569-9e98-e33618f43b0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.32.145.217","comment":"https://x.com/catnap707/status/1962657598785950108","timestamp":"1756769010","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01f45304-486d-5d2d-8090-85a45f76378c","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.0tjdf.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b328e26-d3cc-507b-8377-fa76df8be417","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.0tjdf.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"509b7741-273d-59c9-b98e-543bdfa409bd","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.3teef.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"684240a2-321f-5c89-b4b2-f2a86be088bb","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.3teef.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb31c1d8-01cb-5196-9a33-5291ea32e9da","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.5tiu6.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c2891dd-c2d6-5b3d-a3e2-bebedc98cc40","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.5tiu6.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e72fd4aa-dc76-5846-b572-84a8f6704251","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.bjd7b.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8fbe64c-20be-5d8f-95a1-f974ed69cfeb","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.bjd7b.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40395e7a-a869-5889-b6c4-2451453373af","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.ht0jg.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04ba6663-0f79-5052-b1b4-248c5c647437","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.ht0jg.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4eab5e0a-213d-5d40-afb5-43491c359f24","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.kb8w1.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc682bd4-14db-5c0f-b736-4e3220e439b9","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.kb8w1.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c34874df-7b6e-532d-9dbb-271788e7c49b","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.s897i.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ea9f830-16ec-5a1a-9fc8-7048646562e9","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.s897i.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"46bebec9-a852-530b-b64d-ee0e427da044","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.tx0vt.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4684eb09-06b2-57c7-8c62-deb03b205568","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.tx0vt.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11a48fad-2dc0-5fab-a94f-709480910e1e","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.u1lk4.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1457a64-719c-53a5-b99b-f69631031e8e","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.u1lk4.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0b8f32c-9301-51c4-a4a7-9610e19e09d3","type":"domain","category":"Network activity","to_ids":true,"value":"app-cloud.wocs8.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c772b9d-82b5-5fbb-a3df-8465be42e132","type":"url","category":"Network activity","to_ids":true,"value":"http://app-cloud.wocs8.cyou","comment":"https://x.com/catnap707/status/1962657800573853741","timestamp":"1756769058","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"afe9d8bf-e725-5667-b0bc-62989201a95f","type":"domain","category":"Network activity","to_ids":true,"value":"fortiva.icu","comment":"https://x.com/masaomi346/status/1962662236851446104","timestamp":"1756770116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"462ac911-4cec-516f-a318-6fa578f46ce8","type":"url","category":"Network activity","to_ids":true,"value":"https://fortiva.icu/mgap-login/","comment":"https://x.com/masaomi346/status/1962662236851446104","timestamp":"1756770116","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"458858b2-d0bb-5381-a718-e94d848b79eb","type":"domain","category":"Network activity","to_ids":true,"value":"magicmailverify.weebly.com","comment":"https://x.com/urldna_bot/status/1962666833103761912","timestamp":"1756771212","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aed3badf-5a9e-5681-90d6-60f5be775422","type":"url","category":"Network activity","to_ids":true,"value":"https://magicmailverify.weebly.com","comment":"https://x.com/urldna_bot/status/1962666833103761912","timestamp":"1756771212","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9edd9a25-2dee-5f08-b3ca-a95e061222a3","type":"url","category":"Network activity","to_ids":true,"value":"http://35.240.133.88:80","comment":"https://x.com/SarlackLab/status/1962666932177338381","timestamp":"1756771235","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"9dea3769-f192-52bc-ad16-773d0fe36ce7","type":"domain","category":"Network activity","to_ids":true,"value":"jar-group.com","comment":"https://x.com/SarlackLab/status/1962666932177338381","timestamp":"1756771235","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"825449f0-4cab-55e0-a337-050fba3e3de7","type":"url","category":"Network activity","to_ids":true,"value":"http://jar-group.com","comment":"https://x.com/SarlackLab/status/1962666932177338381","timestamp":"1756771235","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"e8ea124d-ab55-54bf-9f2d-1cfd86726486","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.240.133.88","comment":"https://x.com/SarlackLab/status/1962666932177338381","timestamp":"1756771235","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"9c68f7ce-a63a-52ae-bc78-e311f8dadf00","type":"url","category":"Network activity","to_ids":true,"value":"http://68.178.145.225:80","comment":"https://x.com/SarlackLab/status/1962667034564587598","timestamp":"1756771260","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"e0d3be4a-d1d1-5f22-8f9b-8d9ef13c7f51","type":"domain","category":"Network activity","to_ids":true,"value":"earthtekniks.com","comment":"https://x.com/SarlackLab/status/1962667034564587598","timestamp":"1756771260","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"cb4aff1d-cab6-5c62-b171-d820701482ef","type":"url","category":"Network activity","to_ids":true,"value":"http://earthtekniks.com","comment":"https://x.com/SarlackLab/status/1962667034564587598","timestamp":"1756771260","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"78866e8b-f9d4-5883-8133-3f2e8c638d46","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.178.145.225","comment":"https://x.com/SarlackLab/status/1962667034564587598","timestamp":"1756771260","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"19ca88f4-f1ef-5fe0-ae3b-0f737d3d2c5d","type":"domain","category":"Network activity","to_ids":true,"value":"boletosypagos.com","comment":"https://x.com/1ZRR4H/status/1962671921696215276","timestamp":"1756772425","distribution":"5"},{"uuid":"adcf7dc0-ee33-52dc-a008-ae71fd902cad","type":"url","category":"Network activity","to_ids":true,"value":"http://boletosypagos.com","comment":"https://x.com/1ZRR4H/status/1962671921696215276","timestamp":"1756772425","distribution":"5"},{"uuid":"2c4eba32-a5ee-5375-ae8c-7a0d2d3aeebb","type":"url","category":"Network activity","to_ids":true,"value":"https://americanexpress_comjr08usxd.vaxxe9t.com/acx","comment":"https://x.com/romonlyht/status/1962677435033625001","timestamp":"1756773739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fd338cf-602f-54c9-8dd3-97d7fbcfc6da","type":"url","category":"Network activity","to_ids":true,"value":"https://americanexpress_comjr08usxd.vaxxe9t.com/tuoouffdd?qIXHNX8TPHvdMSIpreqGWOnhf&token=bdb338384bb9f110ae209c0c9","comment":"https://x.com/romonlyht/status/1962677431078395917","timestamp":"1756773739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f49ecf5-5fcf-5dfd-9e34-d4a3fc5a496f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.163.219.84","comment":"https://x.com/romonlyht/status/1962677432982663258","timestamp":"1756773739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e9ddcd7-6043-5043-8bc8-a2a5dbe5bbf1","type":"url","category":"Network activity","to_ids":true,"value":"https://americanexpress_comjr08usxd.vaxxe9t.com/process_form.php","comment":"https://x.com/romonlyht/status/1962677432982663258","timestamp":"1756773739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7abfed0a-107a-5fb6-b411-6c9346c8f88f","type":"url","category":"Network activity","to_ids":true,"value":"https://americanexpress_comjr08usxd.vaxxe9t.com/qwe?from=%2Fprocess_form.php","comment":"https://x.com/romonlyht/status/1962677435033625001","timestamp":"1756773739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f81aa8ae-b00a-52b5-a33b-721cda36143f","type":"url","category":"Network activity","to_ids":true,"value":"https://americanexpress_comjr08usxd.vaxxe9t.com/ja-jp/uuus?page=signin&from=%2Facx","comment":"https://x.com/romonlyht/status/1962677437139181739","timestamp":"1756773740","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4be87dc-2141-5ac3-bdd6-90eeccdde7d0","type":"domain","category":"Network activity","to_ids":true,"value":"americanexpress_comjr08usxd.vaxxe9t.com","comment":"https://x.com/romonlyht/status/1962677437139181739","timestamp":"1756773740","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1179e2c4-f44f-52d6-864d-d0d1c69791a1","type":"url","category":"Network activity","to_ids":true,"value":"https://bybgf.cn/Login","comment":"https://x.com/romonlyht/status/1962680786165080570","timestamp":"1756774538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4233bf6c-b3cb-536d-b898-019c9d773870","type":"url","category":"Network activity","to_ids":true,"value":"https://bybgf.cn/Login/","comment":"https://x.com/romonlyht/status/1962680786165080570","timestamp":"1756774538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93888a53-4e66-57b7-81f9-461c9b5a5f95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"171.211.57.139","comment":"https://x.com/romonlyht/status/1962680786165080570","timestamp":"1756774538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4552c32b-da02-5972-8ca3-9bc67e42e25e","type":"domain","category":"Network activity","to_ids":true,"value":"bybgf.cn","comment":"https://x.com/romonlyht/status/1962680786165080570","timestamp":"1756774538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87d0b5f1-4774-5e08-a394-7976b11d91e0","type":"domain","category":"Network activity","to_ids":true,"value":"smubxx.cn","comment":"https://x.com/romonlyht/status/1962681003627151711","timestamp":"1756774590","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74d8926c-7c86-5ca2-b9ac-e94550758164","type":"url","category":"Network activity","to_ids":true,"value":"https://smubxx.cn/Login","comment":"https://x.com/romonlyht/status/1962681003627151711","timestamp":"1756774590","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39be2452-8f60-5521-9488-25279c902988","type":"url","category":"Network activity","to_ids":true,"value":"https://smubxx.cn/Login/","comment":"https://x.com/romonlyht/status/1962681003627151711","timestamp":"1756774590","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb988cb3-b4e8-5796-9ead-5f7defe28a5a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"60.184.126.73","comment":"https://x.com/romonlyht/status/1962681003627151711","timestamp":"1756774590","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f76e962d-a886-5fbd-9588-976e1c4fa4c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.179.29","comment":"https://x.com/romonlyht/status/1962681003627151711","timestamp":"1756774590","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1d36e23-cfc5-533b-b8d8-a6a3c932011c","type":"url","category":"Network activity","to_ids":true,"value":"https://mastererdjbt.com%E2%88%95jvcpvqzr@inkngitktl.wa219.cn/naknkgdp=72st0l7/qwis4b6gbd.co.jp","comment":"https://x.com/romonlyht/status/1962686236738609418","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8bd52e9b-cf77-5ec9-94bb-706e8a926b0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.5.109.75","comment":"https://x.com/romonlyht/status/1962686236738609418","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9df2be9-3a4a-583a-96a2-46e083e5ff9e","type":"url","category":"Network activity","to_ids":true,"value":"http://inkngitktl.wa219.cn/naknkgdp=72st0l7/qwis4b6gbd.co.jp","comment":"https://x.com/romonlyht/status/1962686236738609418","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4d34573-b0cf-5425-ba8d-7d2e6ada165a","type":"url","category":"Network activity","to_ids":true,"value":"http://inkngitktl.wa219.cn/naknkgdp=72st0l7/qwis4b6gbd.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D&session_","comment":"https://x.com/romonlyht/status/1962686238483447842","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d01b5e02-0586-5c92-9a51-80333e4fd9d3","type":"domain","category":"Network activity","to_ids":true,"value":"inkngitktl.wa219.cn","comment":"https://x.com/romonlyht/status/1962686238483447842","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6078da48-d4cf-5ba7-93e5-1072da605b75","type":"domain","category":"Network activity","to_ids":true,"value":"mastererdjbt.com%E2%88%95jvcpvqzr@inkngitktl.wa219.cn","comment":"https://x.com/romonlyht/status/1962686238483447842","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5afe489e-e104-54f0-8192-f6fd96d57fca","type":"url","category":"Network activity","to_ids":true,"value":"https://mastererdjbt.com%E2%88%95jvcpvqzr@inkngitktl.wa219.cn/naknkgdp=72st0l7/qwis4b6gbd.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D&session_","comment":"https://x.com/romonlyht/status/1962686238483447842","timestamp":"1756775838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19306502-33bf-5046-ba0b-37f37e546107","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaowanshidassssa.longmusic.com/wanshidaxxx/","comment":"https://x.com/romonlyht/status/1962686240240849137","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a43cf12-72a0-51ba-bfe1-0749c7a027e5","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaowanshidassssa.longmusic.com/wanshidaxxx","comment":"https://x.com/romonlyht/status/1962686240240849137","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06811b6d-aa65-53ed-ad4d-b69825c608b7","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawanauthoritatissss.mefound.com/awkjwqejk/a213=wanshida/","comment":"https://x.com/romonlyht/status/1962686242115723634","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"992029fe-145e-548a-a888-b8cc73557157","type":"domain","category":"Network activity","to_ids":true,"value":"tiaowanshidassssa.longmusic.com","comment":"https://x.com/romonlyht/status/1962686240240849137","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b050b79b-5dea-5783-864a-21e9e0f2924e","type":"domain","category":"Network activity","to_ids":true,"value":"sagawanauthoritatissss.mefound.com","comment":"https://x.com/romonlyht/status/1962686242115723634","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cace9aa-5379-522e-b0c8-c67d543d76e2","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawanauthoritatissss.mefound.com/awkjwqejk/a213=wanshida","comment":"https://x.com/romonlyht/status/1962686242115723634","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23573286-52ba-56b5-aa87-c466ff23398f","type":"md5","category":"Payload delivery","to_ids":true,"value":"e5431f93743d1529b0d460cd91932beb","comment":"https://x.com/romonlyht/status/1962686240240849137","timestamp":"1756775839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dd1fc240-2f2f-53ed-beb6-941a11ef099a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.203.67.121","comment":"https://x.com/romonlyht/status/1962687217517944928","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"63b3da10-0407-500b-bf01-69488f11645a","type":"url","category":"Network activity","to_ids":true,"value":"http://lzoprd.wa219.cn/vxtc=7541xfp/","comment":"https://x.com/romonlyht/status/1962687217517944928","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"acad9e24-2ab7-5866-a640-98181feec14e","type":"url","category":"Network activity","to_ids":true,"value":"https://masterlbspwxiop.com%E2%88%95wmaqazutcn@lzoprd.wa219.cn/vxtc=7541xfp/","comment":"https://x.com/romonlyht/status/1962687217517944928","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"584c9aa3-2865-52a3-bd25-58677664f22b","type":"url","category":"Network activity","to_ids":true,"value":"http://lzoprd.wa219.cn/vxtc=7541xfp/qe2yo.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60121a37-88f5-5b6c-a65d-96de941bfdc2","type":"url","category":"Network activity","to_ids":true,"value":"http://qe2yo.co.jp","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6645f56b-f165-5ca3-a3e2-b246de88ca80","type":"url","category":"Network activity","to_ids":true,"value":"https://masterlbspwxiop.com%E2%88%95wmaqazutcn@lzoprd.wa219.cn/vxtc=7541xfp/qe2yo.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06f96971-7c29-5cde-950f-0aef6f7c5de0","type":"domain","category":"Network activity","to_ids":true,"value":"masterlbspwxiop.com%E2%88%95wmaqazutcn@lzoprd.wa219.cn","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cebaef87-8582-51c9-a968-f3d0b9b339d3","type":"domain","category":"Network activity","to_ids":true,"value":"lzoprd.wa219.cn","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23638ccc-f2ef-5992-ae9c-31d3e179f344","type":"domain","category":"Network activity","to_ids":true,"value":"qe2yo.co.jp","comment":"https://x.com/romonlyht/status/1962687219149553805","timestamp":"1756776072","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58a601c8-a2e9-5c6c-8a86-86f1c5d74a93","type":"domain","category":"Network activity","to_ids":true,"value":"tiaowanshidassssa.zzux.com","comment":"https://x.com/romonlyht/status/1962687220965614031","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cae6a0da-4520-5951-b4f6-854b61d93b53","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawanauthoritatissss.onedumb.com/awkjwqejk/a213=wanshida","comment":"https://x.com/romonlyht/status/1962687222710481254","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70bb22e9-abe4-5ca5-b0e7-7b66407f74a8","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawanauthoritatissss.onedumb.com/awkjwqejk/a213=wanshida/","comment":"https://x.com/romonlyht/status/1962687222710481254","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"960ac8d6-6ac4-5c8c-858e-0c4b88581b24","type":"domain","category":"Network activity","to_ids":true,"value":"sagawanauthoritatissss.onedumb.com","comment":"https://x.com/romonlyht/status/1962687222710481254","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3da3705a-d20f-5bb6-a52a-8431ea9f46c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.154.241.77","comment":"https://x.com/romonlyht/status/1962687222710481254","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0fe39fb-f6a7-50a5-8f9f-195c0765cce6","type":"md5","category":"Payload delivery","to_ids":true,"value":"d26a9284967bae0a7968c7dac67dbf35","comment":"https://x.com/romonlyht/status/1962687220965614031","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0fce9296-132c-539c-b7e1-041319c134fc","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaowanshidassssa.zzux.com/wanshidaxxx","comment":"https://x.com/romonlyht/status/1962687220965614031","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e8200dd8-c289-51ff-8e1b-a54f55c393ce","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaowanshidassssa.zzux.com/wanshidaxxx/","comment":"https://x.com/romonlyht/status/1962687220965614031","timestamp":"1756776073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e0287e3-bc21-5275-89ce-c46cafe9590d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.101.180","comment":"https://x.com/romonlyht/status/1962694473235996887","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d8dfb7f-49bb-5509-b6ea-e2d6a27af026","type":"url","category":"Network activity","to_ids":true,"value":"http://qqlgkhndigh8886.com","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41511a8f-f3c8-5d60-a31e-47a9794a12db","type":"url","category":"Network activity","to_ids":true,"value":"https://h9upyhlrr.com/Zt0qHX/","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f8ad4a49-43d0-5a40-b82f-cbc32bd242ef","type":"url","category":"Network activity","to_ids":true,"value":"https://1713room.com/kR8gVh/","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f308a5b7-3744-5473-ae43-7f1c3c7f067e","type":"domain","category":"Network activity","to_ids":true,"value":"1713room.com","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ab8ea7c-ba8c-5600-8182-5fcd11d0627a","type":"url","category":"Network activity","to_ids":true,"value":"https://h9upyhlrr.com/Zt0qHX","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"142538ec-df03-52a7-96d6-b6e30bf49b7c","type":"domain","category":"Network activity","to_ids":true,"value":"qqlgkhndigh8886.com","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7a53f5c6-07fc-57ef-9c62-72349924fc10","type":"domain","category":"Network activity","to_ids":true,"value":"h9upyhlrr.com","comment":"https://x.com/romonlyht/status/1962694475165336060","timestamp":"1756777802","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd1ca6fb-2319-50b4-8160-327d0f126ae9","type":"domain","category":"Network activity","to_ids":true,"value":"sec-sso.bunse.cn","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6861fe91-988d-5b02-bb98-901515f1afb6","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.2dongman.cn","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"673395e8-b96f-56d2-8523-65fb0052ee6e","type":"url","category":"Network activity","to_ids":true,"value":"https://sec-sso.beerprinter.cc/loginweb/","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33f76491-2ca0-554f-895f-74d1c1ab2ed2","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.2dongman.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b2cba1d-57ae-5143-a7b1-f0ad4ec7a245","type":"url","category":"Network activity","to_ids":true,"value":"https://sec-sso.bunse.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"106b976d-e23a-5f5d-b52b-5e99ce286a55","type":"domain","category":"Network activity","to_ids":true,"value":"click-sec.tdtb.cn","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28932817-8158-5e46-a3cf-5adbfeea712d","type":"url","category":"Network activity","to_ids":true,"value":"https://click-sec.ddqo.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73474d73-0509-5d6a-b069-91470792c51d","type":"domain","category":"Network activity","to_ids":true,"value":"click-sec.ddqo.cn","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"48b6f35c-5fe9-5140-8e0b-f68f84b5fea1","type":"domain","category":"Network activity","to_ids":true,"value":"sec-sso.beerprinter.cc","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f6b1779-8d1f-554d-9358-b78b869b3187","type":"url","category":"Network activity","to_ids":true,"value":"https://click-sec.tdtb.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962694845421785517","timestamp":"1756777890","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbf8d69b-1353-5683-8b58-26a61f1c6498","type":"url","category":"Network activity","to_ids":true,"value":"http://68.64.176.42:5566","comment":"https://x.com/drb_ra/status/1962695567726825949","timestamp":"1756778063","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7e7d8a76-da32-5737-8449-bcbdc729aa47","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.64.176.42","comment":"https://x.com/drb_ra/status/1962695567726825949","timestamp":"1756778063","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"53a63eab-1c14-5623-8b9f-9f2d9f8ade3b","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.zsqdswxx.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53c6cc52-a8d0-5929-8f9e-3c520d982772","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.tdtb.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6f24f293-d197-59bf-a565-46be34e53efc","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-redirect.bankloan.com.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fefc9a76-39a4-57e0-9735-5f045a768d1e","type":"domain","category":"Network activity","to_ids":true,"value":"sso-redirect.bankloan.com.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de29f529-5049-5ed1-9813-76e0283abaae","type":"domain","category":"Network activity","to_ids":true,"value":"sec-sso.tdtb.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dffcc150-f657-5fd2-bd4e-f26e4fec6608","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.tdtb.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c35a76f1-14e7-5bb0-9747-b3574f0b7e62","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.lqww.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7c30d32-9656-5e14-b9d9-b64db94c9cc8","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.bttw.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fba0b20d-d8b6-55d1-b0ce-91a2902895f4","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.bttw.cn","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f7e3a5bf-ef66-52f6-aa90-cb3502f84774","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.lqww.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69bbb55d-8b44-55bb-ad4f-b60615e90b30","type":"url","category":"Network activity","to_ids":true,"value":"https://sec-sso.tdtb.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49a73d93-2e68-5237-870d-eb5af9bd4575","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.zsqdswxx.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962695613000360373","timestamp":"1756778073","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d2f9c97c-84a8-51d9-9882-14ad73d380eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.159.96","comment":"https://x.com/drb_ra/status/1962695708668019050","timestamp":"1756778096","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5de3ed64-bb96-5ee8-be73-00bd16ace739","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.159.96:8081","comment":"https://x.com/drb_ra/status/1962695708668019050","timestamp":"1756778096","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ced79aaa-3e15-50e7-a27c-ae563d6efe23","type":"url","category":"Network activity","to_ids":true,"value":"https://click-sec.senliao.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eef0b680-2f52-5c6a-a6b8-a2d7cca9ae68","type":"domain","category":"Network activity","to_ids":true,"value":"click-sec.senliao.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9d30985-b3be-5109-a1bd-b78fc4a1040e","type":"domain","category":"Network activity","to_ids":true,"value":"sso-redirect.bttw.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0832c8af-098f-54ae-a568-3aa5a35db288","type":"domain","category":"Network activity","to_ids":true,"value":"click-sec.gryfino.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eac88391-ae03-5f03-b655-6f539c2ecb95","type":"url","category":"Network activity","to_ids":true,"value":"https://click-sec.gryfino.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d729fb8-82d6-51f8-84f2-d003b40a552e","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-redirect.bttw.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef419bdc-2b86-57ac-89a2-a7af6c975c42","type":"url","category":"Network activity","to_ids":true,"value":"https://sec-sso.cndesk.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50f861d9-633a-52d9-b2ff-c25de674d78b","type":"domain","category":"Network activity","to_ids":true,"value":"sso-redirect.senliao.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75efb781-f298-5b8b-9fc0-58d4850c022f","type":"domain","category":"Network activity","to_ids":true,"value":"sec-sso.cndesk.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ca4a474-762c-5b73-9109-f0b7c60c5bfd","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.39928.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1483168b-42d4-5d67-bdae-683b64280758","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.39928.cn","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e59369fc-36b8-537d-bc69-97337637cb30","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-redirect.senliao.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962696761224683586","timestamp":"1756778347","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34a7d40b-a22f-589c-af96-09b6895c2d28","type":"url","category":"Network activity","to_ids":true,"value":"https://htmlmyfairpoint2021updatebox.weebly.com","comment":"https://x.com/urldna_bot/status/1962697015176962264","timestamp":"1756778408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7d54b106-2154-516f-bd62-dd096a6823c5","type":"domain","category":"Network activity","to_ids":true,"value":"htmlmyfairpoint2021updatebox.weebly.com","comment":"https://x.com/urldna_bot/status/1962697015176962264","timestamp":"1756778408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8bfa1658-b629-57b3-926c-8a4a865cfb8b","type":"domain","category":"Network activity","to_ids":true,"value":"sso-click.xishuai.net.cn","comment":"https://x.com/masaomi346/status/1962697050463838224","timestamp":"1756778416","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43785b87-d953-5409-9920-d734a0ff062f","type":"url","category":"Network activity","to_ids":true,"value":"https://sso-click.xishuai.net.cn/loginweb/","comment":"https://x.com/masaomi346/status/1962697050463838224","timestamp":"1756778416","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0b039087-51bf-5328-a1ae-22ebf7fa2aa8","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.54.114:443","comment":"https://x.com/SarlackLab/status/1962697061540811242","timestamp":"1756778419","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"54284661-69f3-51e8-959f-c73e5785fddb","type":"domain","category":"Network activity","to_ids":true,"value":"8scom.link","comment":"https://x.com/SarlackLab/status/1962697061540811242","timestamp":"1756778419","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"6d00646f-fd98-5e77-9c6e-a4897c46b34f","type":"url","category":"Network activity","to_ids":true,"value":"http://8scom.link","comment":"https://x.com/SarlackLab/status/1962697061540811242","timestamp":"1756778419","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"467eb7d2-24a6-5766-bf38-29b7c5fe4b0a","type":"url","category":"Network activity","to_ids":true,"value":"http://zwbyqdo.vmrcl.cn/rfjcphmpw.co.jp","comment":"https://x.com/romonlyht/status/1962700199215931520","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"063224f6-11ec-57f6-97a7-89531efcd349","type":"url","category":"Network activity","to_ids":true,"value":"http://zwbyqdo.vmrcl.cn/rfjcphmpw.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D&session_token","comment":"https://x.com/romonlyht/status/1962700201443107321","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58559194-20a2-526c-b66c-111461b7d35e","type":"domain","category":"Network activity","to_ids":true,"value":"zwbyqdo.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962700201443107321","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d468776-d13a-550e-9922-4f6ebfd1faa4","type":"url","category":"Network activity","to_ids":true,"value":"https://gccpd.com%E2%88%95hulTQmjzyt%E2%88%95lKvOTmXx%E2%88%95zEJFi%E2%88%95jmktOMnN@zwbyqdo.vmrcl.cn/rfjcphmpw.co.jp","comment":"https://x.com/romonlyht/status/1962700199215931520","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c096820b-4abd-501b-a8de-f1aa4b644a5f","type":"url","category":"Network activity","to_ids":true,"value":"https://gccpd.com%E2%88%95hulTQmjzyt%E2%88%95lKvOTmXx%E2%88%95zEJFi%E2%88%95jmktOMnN@zwbyqdo.vmrcl.cn/rfjcphmpw.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D&session_token","comment":"https://x.com/romonlyht/status/1962700201443107321","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94e87306-7677-5320-964b-d7550cde974d","type":"domain","category":"Network activity","to_ids":true,"value":"gccpd.com%E2%88%95hulTQmjzyt%E2%88%95lKvOTmXx%E2%88%95zEJFi%E2%88%95jmktOMnN@zwbyqdo.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962700201443107321","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e0d152a-0b5f-589d-9b0e-92a22f7e8d4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.125.170.184","comment":"https://x.com/romonlyht/status/1962700199215931520","timestamp":"1756779167","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03744b7f-bb33-522f-af48-1ef5f1fc5ea3","type":"domain","category":"Network activity","to_ids":true,"value":"nnnequireddomainsadeqweq.zzux.com","comment":"https://x.com/romonlyht/status/1962700205692002616","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"054b9fe7-3de3-5b5d-9229-f248fc57ac60","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsadeqweq.zzux.com/anaxxx/","comment":"https://x.com/romonlyht/status/1962700205692002616","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0ff7fd1-27ed-5c70-865e-8f5fc47ea1ee","type":"domain","category":"Network activity","to_ids":true,"value":"tiaoanass.longmusic.com","comment":"https://x.com/romonlyht/status/1962700203460567456","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d4795ac8-714b-5c81-b385-548c7aeaeedc","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaoanass.longmusic.com/anaxxx","comment":"https://x.com/romonlyht/status/1962700203460567456","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49834494-a1f1-5254-869f-8e0f3951af1e","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaoanass.longmusic.com/anaxxx/","comment":"https://x.com/romonlyht/status/1962700203460567456","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75ad178f-ce95-5b93-a525-2f6ebb901ccd","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsadeqweq.zzux.com/anaxxx","comment":"https://x.com/romonlyht/status/1962700203460567456","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1b9cf6a-2fd7-51e7-8297-0db825b459ba","type":"md5","category":"Payload delivery","to_ids":true,"value":"84f2c6c4a6ec28a4ae92a8381f462227","comment":"https://x.com/romonlyht/status/1962700203460567456","timestamp":"1756779168","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b78988b-9ae1-5ab5-812f-b26922757b0e","type":"url","category":"Network activity","to_ids":true,"value":"http://mfvrqa.vmrcl.cn/oxaqmk.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a677d308-7a48-505a-b4f4-fea36d8d255d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.194.91.111","comment":"https://x.com/romonlyht/status/1962701948295258593","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77537f64-f4a4-5b1d-bc1b-d7a17cd24594","type":"url","category":"Network activity","to_ids":true,"value":"http://mfvrqa.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962701948295258593","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5198a86f-c99a-5025-be89-62dd40e225f5","type":"url","category":"Network activity","to_ids":true,"value":"https://oxaqmk.co.jp","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49c8501c-0149-58f5-95a6-430146698886","type":"domain","category":"Network activity","to_ids":true,"value":"gbict.com%E2%88%95TbwaPZ%E2%88%95bmLrbfYQeI%E2%88%95yDjkdiJ%E2%88%95UtWReDQ@mfvrqa.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7f751b5-31c8-5dde-9eac-7cf3a38b71e6","type":"domain","category":"Network activity","to_ids":true,"value":"oxaqmk.co.jp","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec6c3910-d7b1-5121-920a-750926e38751","type":"domain","category":"Network activity","to_ids":true,"value":"mfvrqa.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f809d236-e34b-54af-9c6d-db03b6bab266","type":"url","category":"Network activity","to_ids":true,"value":"https://gbict.com%E2%88%95TbwaPZ%E2%88%95bmLrbfYQeI%E2%88%95yDjkdiJ%E2%88%95UtWReDQ@mfvrqa.vmrcl.cn/oxaqmk.co.jp?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D","comment":"https://x.com/romonlyht/status/1962701950035861649","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"519720de-9801-554e-9f48-c306b287949e","type":"url","category":"Network activity","to_ids":true,"value":"https://gbict.com%E2%88%95TbwaPZ%E2%88%95bmLrbfYQeI%E2%88%95yDjkdiJ%E2%88%95UtWReDQ@mfvrqa.vmrcl.cn","comment":"https://x.com/romonlyht/status/1962701948295258593","timestamp":"1756779584","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d62c48b5-9d14-59ee-be77-355c628119fd","type":"domain","category":"Network activity","to_ids":true,"value":"nnnequireddomainsadeqweq.onedumb.com","comment":"https://x.com/romonlyht/status/1962701953760362659","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8672c3d7-7033-571a-a1c7-f044ec939821","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsadeqweq.onedumb.com/anaxxx/","comment":"https://x.com/romonlyht/status/1962701953760362659","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4915cced-6716-5597-a5fa-021b7e8893f1","type":"url","category":"Network activity","to_ids":true,"value":"https://nnnequireddomainsadeqweq.onedumb.com/anaxxx","comment":"https://x.com/romonlyht/status/1962701951768109243","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb3987c1-656b-5893-8dfb-b49a702a250c","type":"domain","category":"Network activity","to_ids":true,"value":"tiaoanass.onedumb.com","comment":"https://x.com/romonlyht/status/1962701951768109243","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7bb74f0d-09fc-5647-a60d-4a6726712f61","type":"md5","category":"Payload delivery","to_ids":true,"value":"eb34b7490a3ccf1226f5f4e9d6366636","comment":"https://x.com/romonlyht/status/1962701951768109243","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25fa1e12-8121-5f79-850a-a3b6889a0685","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaoanass.onedumb.com/anaxxx","comment":"https://x.com/romonlyht/status/1962701951768109243","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e4997438-c0c6-5920-838d-fbcd55b9f5c8","type":"url","category":"Network activity","to_ids":true,"value":"https://tiaoanass.onedumb.com/anaxxx/","comment":"https://x.com/romonlyht/status/1962701951768109243","timestamp":"1756779585","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"834394a8-a690-5664-8e90-00142b8bb834","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.251.250.227","comment":"https://x.com/romonlyht/status/1962705736133407163","timestamp":"1756780487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a2534588-d94e-57c5-969f-3a54d857052d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.84.200","comment":"https://x.com/romonlyht/status/1962705736133407163","timestamp":"1756780487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb0518b5-4463-5021-933a-f745adf2ea44","type":"url","category":"Network activity","to_ids":true,"value":"https://ilyatila.com/api/welcome/fyqi3w","comment":"https://x.com/romonlyht/status/1962705736133407163","timestamp":"1756780487","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b8163ce-7759-5d47-89b0-722d3b3da9df","type":"domain","category":"Network activity","to_ids":true,"value":"ilyatila.com","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"220f8575-a8b5-5e3f-a0ff-056630e02d43","type":"url","category":"Network activity","to_ids":true,"value":"https://ilyatila.com/api/t/e74d3829b045f46d6d7633522e588ab4#/loading","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ecb301cb-53e3-54e8-837b-2706b06c6a67","type":"domain","category":"Network activity","to_ids":true,"value":"jalco.hyinet.com","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"05446d77-3de6-5076-a710-b5ac4e213b06","type":"url","category":"Network activity","to_ids":true,"value":"https://jalco.hyinet.com/xLOSIM/","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4527dd42-44cc-5f7f-b8ab-24e85a531ff0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.14.131","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"07a290af-703a-5b60-8b1c-9d6e1c2d328c","type":"md5","category":"Payload delivery","to_ids":true,"value":"e74d3829b045f46d6d7633522e588ab4","comment":"https://x.com/romonlyht/status/1962705739656634865","timestamp":"1756780488","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2afa25af-bba2-54bb-a3cf-6466e5f0465e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.99.198.184","comment":"https://x.com/romonlyht/status/1962714874553008142","timestamp":"1756782666","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e8bc82c-8ff2-5179-a619-b12b59fbcf73","type":"domain","category":"Network activity","to_ids":true,"value":"pnjjc.cn","comment":"https://x.com/romonlyht/status/1962714874553008142","timestamp":"1756782666","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3ed3f2ab-f69a-50bf-ad21-ebf4ecf2a457","type":"url","category":"Network activity","to_ids":true,"value":"https://pnjjc.cn/DyIBDPO9HV/login&getFlg=in","comment":"https://x.com/romonlyht/status/1962714874553008142","timestamp":"1756782666","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2f3bdedf-27ba-57c4-a7af-eb3d4e0e81a4","type":"url","category":"Network activity","to_ids":true,"value":"https://pnjjc.cn/DyIBDPO9HV/login&getFlg=in/","comment":"https://x.com/romonlyht/status/1962714874553008142","timestamp":"1756782666","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"26950b27-c93d-55c5-96b9-c3e600191e76","type":"url","category":"Network activity","to_ids":true,"value":"http://pagosdeboletasweb.com","comment":"https://x.com/mbec03/status/1962721245805359297","timestamp":"1756784185","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5386892-a216-530f-8703-aba73fa751f1","type":"domain","category":"Network activity","to_ids":true,"value":"pagosdeboletasweb.com","comment":"https://x.com/mbec03/status/1962721245805359297","timestamp":"1756784185","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"371556be-02de-5f81-8a37-69bf2f1f41a0","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kddi-tb.xmzysy.com/katamachi608","comment":"https://x.com/romonlyht/status/1962724763086070104","timestamp":"1756785023","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f53dd199-7097-51e6-9c8c-6d0e412d914a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.91.227.193","comment":"https://x.com/romonlyht/status/1962724763086070104","timestamp":"1756785023","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"474a8b0d-26c9-5c48-858e-c82f9174841c","type":"domain","category":"Network activity","to_ids":true,"value":"www-kd-d--l-a-u-1pay2.mhdzdt.com","comment":"https://x.com/romonlyht/status/1962724764960858177","timestamp":"1756785024","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ae583d5-9ead-5fa2-8cc0-25643f1d401a","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kd-d--l-a-u-1pay2.mhdzdt.com/aupasfnbi","comment":"https://x.com/romonlyht/status/1962724764960858177","timestamp":"1756785024","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a7eb7089-3a8b-5be8-a3f2-dfcedd383a7e","type":"domain","category":"Network activity","to_ids":true,"value":"www-kddi-tb.xmzysy.com","comment":"https://x.com/romonlyht/status/1962724764960858177","timestamp":"1756785024","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"473400e5-012c-5e94-92fd-72d6962cca42","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kddi-tb.xmzysy.com/katamachi608/","comment":"https://x.com/romonlyht/status/1962724764960858177","timestamp":"1756785024","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7512c8e1-74b0-5823-80ee-2b9fda8172f6","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kd-d--l-a-u-1pay2.mhdzdt.com/aupasfnbi/","comment":"https://x.com/romonlyht/status/1962724764960858177","timestamp":"1756785024","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"185a65ab-c577-5659-896d-858710303698","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.252.189.14","comment":"https://x.com/romonlyht/status/1962725215798247911","timestamp":"1756785131","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"05bf7e85-85a7-5cd9-bbc6-b42dc5a9a41e","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kddi-tb.szygsf.com/katamachi608","comment":"https://x.com/romonlyht/status/1962725215798247911","timestamp":"1756785131","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0c03540-7f49-57b5-a368-f9ab4fa9e5ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.91.227.16","comment":"https://x.com/romonlyht/status/1962725215798247911","timestamp":"1756785131","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56f31531-3f93-5a66-b486-4dfb98de131b","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kddi-tb.szygsf.com/katamachi608/","comment":"https://x.com/romonlyht/status/1962725217576591615","timestamp":"1756785132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"58957b8a-56d3-577c-9fe7-5b2a14591c7c","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kd-d--l-a-u-1pay2.xxfyff.com/aupasfnbi/","comment":"https://x.com/romonlyht/status/1962725217576591615","timestamp":"1756785132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de7c2e9c-2092-5217-8b4c-0c2f64f840d2","type":"url","category":"Network activity","to_ids":true,"value":"https://www-kd-d--l-a-u-1pay2.xxfyff.com/aupasfnbi","comment":"https://x.com/romonlyht/status/1962725217576591615","timestamp":"1756785132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19493995-90cd-5670-a6b0-0921405a4770","type":"domain","category":"Network activity","to_ids":true,"value":"www-kd-d--l-a-u-1pay2.xxfyff.com","comment":"https://x.com/romonlyht/status/1962725217576591615","timestamp":"1756785132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6fb5478f-a15b-5874-b262-a1fc0a9fcb56","type":"domain","category":"Network activity","to_ids":true,"value":"www-kddi-tb.szygsf.com","comment":"https://x.com/romonlyht/status/1962725217576591615","timestamp":"1756785132","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5d125ab-11ec-5318-afe3-09bb3e3e0ab1","type":"url","category":"Network activity","to_ids":true,"value":"https://safetyaccess89765e845768.weebly.com","comment":"https://x.com/urldna_bot/status/1962727227889455283","timestamp":"1756785611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"90bdb0fc-c2ab-521e-8baa-c0c9c76586d4","type":"domain","category":"Network activity","to_ids":true,"value":"safetyaccess89765e845768.weebly.com","comment":"https://x.com/urldna_bot/status/1962727227889455283","timestamp":"1756785611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cfaf134a-5c6a-50e5-a8f5-59ae2912d47f","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.70:5552","comment":"https://x.com/SarlackLab/status/1962727461050814520","timestamp":"1756785667","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"196912df-f600-5aaf-af3e-bdccb790beba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.70","comment":"https://x.com/SarlackLab/status/1962727461050814520","timestamp":"1756785667","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"a45e3497-08b7-5361-ae19-d5798c8eba71","type":"domain","category":"Network activity","to_ids":true,"value":"deshock.com","comment":"https://x.com/romonlyht/status/1962736006509273155","timestamp":"1756787704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38591ea5-b9a2-5816-a2c2-16669f783ea8","type":"url","category":"Network activity","to_ids":true,"value":"https://deshock.com/jp","comment":"https://x.com/romonlyht/status/1962736006509273155","timestamp":"1756787704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d99c07bd-8a85-5bbe-b8a4-69b389419404","type":"url","category":"Network activity","to_ids":true,"value":"https://deshock.com/jp/","comment":"https://x.com/romonlyht/status/1962736006509273155","timestamp":"1756787704","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"247f2cbe-cc31-5fd4-8c1a-4993ae427309","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.ruhermotos.com/login/","comment":"https://x.com/romonlyht/status/1962736009113936291","timestamp":"1756787705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0aa4fc8e-2fec-59f2-9ff8-e3a0c37a0f9a","type":"domain","category":"Network activity","to_ids":true,"value":"www-matsui-co-jp.ruhermotos.com","comment":"https://x.com/romonlyht/status/1962736009113936291","timestamp":"1756787705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e865a81-6839-50d1-8a8e-c81dc476eb14","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.ruhermotos.com/login","comment":"https://x.com/romonlyht/status/1962736009113936291","timestamp":"1756787705","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1e5fff2-0b9a-5bec-bcc7-63297f601309","type":"url","category":"Network activity","to_ids":true,"value":"https://xinchushen.com/jp","comment":"https://x.com/romonlyht/status/1962736432025608643","timestamp":"1756787805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34050aa8-ec90-5468-b8cf-cdcf385d0a87","type":"url","category":"Network activity","to_ids":true,"value":"https://xinchushen.com/jp/","comment":"https://x.com/romonlyht/status/1962736432025608643","timestamp":"1756787805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6f3fe17-0c58-5b12-b16b-7b8ffb525f7d","type":"domain","category":"Network activity","to_ids":true,"value":"xinchushen.com","comment":"https://x.com/romonlyht/status/1962736432025608643","timestamp":"1756787805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1b8c1a0-544c-5066-ba5f-923121934afb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.221.123.235","comment":"https://x.com/romonlyht/status/1962736432025608643","timestamp":"1756787805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df59f3c3-b044-5ca2-b262-4f28afec67bc","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.fosssig.com/login/","comment":"https://x.com/romonlyht/status/1962736433724379506","timestamp":"1756787806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51863d30-5373-585e-987f-e2201522a49f","type":"domain","category":"Network activity","to_ids":true,"value":"www-matsui-co-jp.fosssig.com","comment":"https://x.com/romonlyht/status/1962736433724379506","timestamp":"1756787806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1dd4dad9-15bd-5eec-b85c-637bc0f98fbe","type":"url","category":"Network activity","to_ids":true,"value":"https://www-matsui-co-jp.fosssig.com/login","comment":"https://x.com/romonlyht/status/1962736433724379506","timestamp":"1756787806","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"902f6895-9dc8-5f13-8d8a-bb0c6ae96c81","type":"url","category":"Network activity","to_ids":true,"value":"http://pjss.net","comment":"https://x.com/romonlyht/status/1962738867045605635","timestamp":"1756788386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f84a8fa-25ff-5075-86e5-9c8d96d0af28","type":"domain","category":"Network activity","to_ids":true,"value":"pjss.net","comment":"https://x.com/romonlyht/status/1962738867045605635","timestamp":"1756788386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ee9eaed6-0319-523e-aa23-555173b65e13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"41.145.211.81","comment":"https://x.com/romonlyht/status/1962738867045605635","timestamp":"1756788386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"970dde64-297e-5aa9-81b9-52583de187a7","type":"domain","category":"Network activity","to_ids":true,"value":"kelley-anderson-well.gracehub.com%E2%88%95btXPm%E2%88%95nVRQtG%E2%88%95kjXbhSY@pjss.net","comment":"https://x.com/romonlyht/status/1962738867045605635","timestamp":"1756788386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e4484893-df67-5e18-9e06-4df410d9123f","type":"url","category":"Network activity","to_ids":true,"value":"https://kelley-anderson-well.gracehub.com%E2%88%95btXPm%E2%88%95nVRQtG%E2%88%95kjXbhSY@pjss.net","comment":"https://x.com/romonlyht/status/1962738867045605635","timestamp":"1756788386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e4b0fee-11f9-50ce-88d9-1f3b780219db","type":"url","category":"Network activity","to_ids":true,"value":"https://yqn.asia/cte/","comment":"https://x.com/romonlyht/status/1962738871751582028","timestamp":"1756788387","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19902888-4f11-5a97-aaff-bc86b639b1e7","type":"domain","category":"Network activity","to_ids":true,"value":"yqn.asia","comment":"https://x.com/romonlyht/status/1962738871751582028","timestamp":"1756788387","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e7aee3bd-f3cf-547e-bf56-2aafc9267b49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.132.32","comment":"https://x.com/romonlyht/status/1962738871751582028","timestamp":"1756788387","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"adcf7b38-7c0d-545f-aadc-0ab6fb3d8ea2","type":"url","category":"Network activity","to_ids":true,"value":"https://secure.oamzon.co.jp.ozeldns.net/ap_signin","comment":"https://x.com/romonlyht/status/1962742786895298891","timestamp":"1756789321","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56b8fabe-ffcf-5f3d-a74c-8788032419ea","type":"domain","category":"Network activity","to_ids":true,"value":"secure.oamzon.co.jp.ozeldns.net","comment":"https://x.com/romonlyht/status/1962742788812108060","timestamp":"1756789321","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0618fbc9-f4b7-51d2-9e17-a30ce92fdcb7","type":"url","category":"Network activity","to_ids":true,"value":"https://secure.oamzon.co.jp.ozeldns.net/ap_signin/","comment":"https://x.com/romonlyht/status/1962742788812108060","timestamp":"1756789321","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b2662b4-234c-5cd9-8cc4-edacf2de36f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.145.68","comment":"https://x.com/romonlyht/status/1962743073764733105","timestamp":"1756789389","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"289e26bd-3e00-53a8-810d-f8858bf60b0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.235.122","comment":"https://x.com/romonlyht/status/1962743073764733105","timestamp":"1756789389","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32f1e347-c0a1-5036-9633-bfeacd478a20","type":"url","category":"Network activity","to_ids":true,"value":"https://secure.oamzon.co.jp.aetd.net/ap_signin/","comment":"https://x.com/romonlyht/status/1962743075350176155","timestamp":"1756789389","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cdc4c712-1bf9-55df-8844-ef34db6f3107","type":"url","category":"Network activity","to_ids":true,"value":"https://secure.oamzon.co.jp.aetd.net/ap_signin","comment":"https://x.com/romonlyht/status/1962743073764733105","timestamp":"1756789389","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6bac43de-075a-5951-814b-8b54f8cbc956","type":"domain","category":"Network activity","to_ids":true,"value":"secure.oamzon.co.jp.aetd.net","comment":"https://x.com/romonlyht/status/1962743075350176155","timestamp":"1756789389","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82336ed6-1efe-5167-a001-d60537f9d4a7","type":"url","category":"Network activity","to_ids":true,"value":"https://www.amaz0n.co.jp.tableninjas.com/apap_signin","comment":"https://x.com/romonlyht/status/1962743371501576194","timestamp":"1756789460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3fa6118f-3fdc-5f87-986e-8f1c9193e404","type":"url","category":"Network activity","to_ids":true,"value":"https://www.amaz0n.co.jp.tableninjas.com/apap_signin/","comment":"https://x.com/romonlyht/status/1962743373435211964","timestamp":"1756789460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40d4991c-8158-509a-af81-6f6dd074dde0","type":"domain","category":"Network activity","to_ids":true,"value":"amaz0n.co.jp.tableninjas.com","comment":"https://x.com/romonlyht/status/1962743373435211964","timestamp":"1756789460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba817c08-9c2a-5241-ae0b-4e08d5df3114","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.79.150.163","comment":"https://x.com/romonlyht/status/1962743371501576194","timestamp":"1756789460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a0800e4-a6c6-52db-a70b-9192e6f4da42","type":"domain","category":"Network activity","to_ids":true,"value":"forms.visme.co","comment":"https://x.com/romonlyht/status/1962745687470391305","timestamp":"1756790012","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"57dbb897-7949-5dbe-b74d-474a995affb6","type":"url","category":"Network activity","to_ids":true,"value":"https://forms.visme.co/formsPlayer/404","comment":"https://x.com/romonlyht/status/1962745687470391305","timestamp":"1756790012","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e3d99a9-bacc-5bbc-8e59-09266d0c607d","type":"url","category":"Network activity","to_ids":true,"value":"https://forms.visme.co/fv/7vgmwozx-7qvgdz","comment":"https://x.com/romonlyht/status/1962745685578821877","timestamp":"1756790012","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"172d9011-0f9c-5c1d-930a-c50a02d37649","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.93.155.73","comment":"https://x.com/romonlyht/status/1962745685578821877","timestamp":"1756790012","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67726006-3b90-5ea2-85d1-db151a78f7b4","type":"url","category":"Network activity","to_ids":true,"value":"https://czgdcj.top/jp","comment":"https://x.com/romonlyht/status/1962747699964584026","timestamp":"1756790492","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44cbb9c9-1627-506f-aff9-3704fffcdf79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.238.139.90","comment":"https://x.com/romonlyht/status/1962747699964584026","timestamp":"1756790492","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be493ba8-0b7e-55c1-bbed-2d8d9608e4a7","type":"domain","category":"Network activity","to_ids":true,"value":"czgdcj.top","comment":"https://x.com/romonlyht/status/1962747699964584026","timestamp":"1756790492","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55d479e0-aa02-5103-aa06-51477e66f1f6","type":"domain","category":"Network activity","to_ids":true,"value":"3dholovision.site","comment":"https://x.com/romonlyht/status/1962750586933350503","timestamp":"1756791180","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"923950f8-bac5-52b8-b97b-0173e87db3c7","type":"url","category":"Network activity","to_ids":true,"value":"https://3dholovision.site/z6a54f85az1f6a.php","comment":"https://x.com/romonlyht/status/1962750586933350503","timestamp":"1756791180","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6cf18604-f765-5c1b-85ff-d95afa42d437","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.106.90.44","comment":"https://x.com/romonlyht/status/1962750586933350503","timestamp":"1756791180","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eb08afa9-6e33-5717-91a9-dda4048774ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.73.9.100","comment":"https://x.com/romonlyht/status/1962750586933350503","timestamp":"1756791180","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d0d05ae-3b8b-525f-8dd5-9ff2097461ed","type":"url","category":"Network activity","to_ids":true,"value":"https://www-smbc-card.nina-roy.com/index.html","comment":"https://x.com/romonlyht/status/1962750589097660673","timestamp":"1756791181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9b01b6a-5246-57a1-a32f-89443dbe64ef","type":"domain","category":"Network activity","to_ids":true,"value":"www-smbc-card.nina-roy.com","comment":"https://x.com/romonlyht/status/1962750589097660673","timestamp":"1756791181","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31eced14-f2b2-5199-b4e5-fa5f884f0926","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.5.3.162","comment":"https://x.com/romonlyht/status/1962753550272065565","timestamp":"1756791887","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3c59bf2-b0c5-5dff-bfcd-b32ae003f57c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.247.111","comment":"https://x.com/romonlyht/status/1962753550272065565","timestamp":"1756791887","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d214a8b-11b1-5636-b2ae-d2258bcf5be9","type":"domain","category":"Network activity","to_ids":true,"value":"stonemindtree.imakeclub.com","comment":"https://x.com/romonlyht/status/1962753550272065565","timestamp":"1756791887","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8caf3ebd-624e-5966-9aa8-9d77a66096ce","type":"url","category":"Network activity","to_ids":true,"value":"https://stonemindtree.imakeclub.com","comment":"https://x.com/romonlyht/status/1962753550272065565","timestamp":"1756791887","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e6436f3-0a88-5c29-b191-6bebf994e248","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.17:8080","comment":"https://x.com/drb_ra/status/1962756812706312344","timestamp":"1756792665","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"de444484-54db-5407-93a4-59602d1c78b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.17","comment":"https://x.com/drb_ra/status/1962756812706312344","timestamp":"1756792665","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8ec8df2d-68c7-5aa3-bd03-9a5c657aea8c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.2","comment":"https://x.com/drb_ra/status/1962756812706312344","timestamp":"1756792665","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7a00ac4-61c2-5915-9fd3-2ac37ff7763b","type":"url","category":"Network activity","to_ids":true,"value":"https://jhkxjkxjhxj90.weebly.com","comment":"https://x.com/urldna_bot/status/1962757419731144859","timestamp":"1756792809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5cac7ab6-3e4a-54bf-b9bf-7f43d76cb2f1","type":"domain","category":"Network activity","to_ids":true,"value":"jhkxjkxjhxj90.weebly.com","comment":"https://x.com/urldna_bot/status/1962757419731144859","timestamp":"1756792809","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"15ec0841-5136-5453-b8a1-94ed4c0ed069","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.42.32.88","comment":"https://x.com/drb_ra/status/1962769261534851107","timestamp":"1756795633","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"11821e30-1e15-553b-b4ae-f4b6ec6d39b6","type":"url","category":"Network activity","to_ids":true,"value":"http://110.42.32.88:8888","comment":"https://x.com/drb_ra/status/1962769261534851107","timestamp":"1756795633","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"2471af41-0696-5f59-bd22-53059ae957e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.49.219.115","comment":"https://x.com/drb_ra/status/1962769414454988809","timestamp":"1756795669","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"d879135c-4737-55cf-af6d-2d0540a23a03","type":"url","category":"Network activity","to_ids":true,"value":"http://94.49.219.115:443","comment":"https://x.com/drb_ra/status/1962769414454988809","timestamp":"1756795669","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9a2b8e26-f424-5126-848d-f5582f3fdbd8","type":"url","category":"Network activity","to_ids":true,"value":"http://79.107.156.181:995","comment":"https://x.com/drb_ra/status/1962769564007100671","timestamp":"1756795705","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"c9340464-e310-53d3-86d3-976f111c6791","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.107.156.181","comment":"https://x.com/drb_ra/status/1962769564007100671","timestamp":"1756795705","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"721e85f1-11e7-543c-bbde-51c3c95601f9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"201.202.66.177","comment":"https://x.com/drb_ra/status/1962769713353687522","timestamp":"1756795740","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"81314dfa-3afe-5d57-9de5-c58233bf8e97","type":"url","category":"Network activity","to_ids":true,"value":"http://201.202.66.177:443","comment":"https://x.com/drb_ra/status/1962769713353687522","timestamp":"1756795740","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"94bd1eab-f807-5743-afa2-aebd6deaed73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.168.129.114","comment":"https://x.com/drb_ra/status/1962769862410871073","timestamp":"1756795776","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f383fd09-e75c-53a5-8dd5-b28cafe767f8","type":"url","category":"Network activity","to_ids":true,"value":"http://185.168.129.114:443","comment":"https://x.com/drb_ra/status/1962769862410871073","timestamp":"1756795776","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"5171401c-c2dc-531f-8aac-4eda571bcba2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.158.94.111","comment":"https://x.com/drb_ra/status/1962770009140195542","timestamp":"1756795811","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"7af02803-4f48-5fed-9d8d-47b955b12483","type":"url","category":"Network activity","to_ids":true,"value":"http://18.158.94.111:7443","comment":"https://x.com/drb_ra/status/1962770009140195542","timestamp":"1756795811","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"eb5f0fc8-d2de-5822-b111-053ae69c985a","type":"url","category":"Network activity","to_ids":true,"value":"http://185.170.58.214:7443","comment":"https://x.com/drb_ra/status/1962770168200732769","timestamp":"1756795849","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0c29c194-546a-5a56-96ff-cd99ac1696db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.170.58.214","comment":"https://x.com/drb_ra/status/1962770168200732769","timestamp":"1756795849","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9999cc86-f37c-5f5d-9d00-a2603e74f597","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.235.75","comment":"https://x.com/drb_ra/status/1962770310060552697","timestamp":"1756795883","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"115f7fe1-fda2-5dcb-9604-bdfc0e8850ef","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.235.75:7443","comment":"https://x.com/drb_ra/status/1962770310060552697","timestamp":"1756795883","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"bcc836bb-e553-5adf-826b-8d47c48ed4c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.190.13","comment":"https://x.com/drb_ra/status/1962770453883191699","timestamp":"1756795917","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"4e21c6bb-1786-5eb1-a29c-f6b9df582c61","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.190.13:31337","comment":"https://x.com/drb_ra/status/1962770453883191699","timestamp":"1756795917","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dc13ab7a-d674-51db-8caa-f5042a0be824","type":"url","category":"Network activity","to_ids":true,"value":"http://134.195.90.78:443","comment":"https://x.com/drb_ra/status/1962770604752351671","timestamp":"1756795953","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"b102a53d-02e8-5ba9-8a44-68d70e9c91dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.195.90.78","comment":"https://x.com/drb_ra/status/1962770604752351671","timestamp":"1756795953","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"237491d6-0e6a-5b07-b4ef-75c1cc076d5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.125.91.240","comment":"https://x.com/drb_ra/status/1962771264088547748","timestamp":"1756796110","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"9484a67b-44a8-5375-ae47-eec563f72815","type":"url","category":"Network activity","to_ids":true,"value":"http://46.125.91.240:8080","comment":"https://x.com/drb_ra/status/1962771264088547748","timestamp":"1756796110","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"6e562c69-0e6a-531e-81a0-014874f2b358","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.33:2323","comment":"https://x.com/drb_ra/status/1962771406904545706","timestamp":"1756796144","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8e5ac59c-85ac-5359-9d63-9023601e8643","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.33","comment":"https://x.com/drb_ra/status/1962771406904545706","timestamp":"1756796144","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"15a3612c-3449-5e83-86e0-5850184c962f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.95.32:2404","comment":"https://x.com/drb_ra/status/1962771552971169813","timestamp":"1756796179","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"51c76fc0-70ab-552f-815d-5ae3673aad2f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.95.32","comment":"https://x.com/drb_ra/status/1962771552971169813","timestamp":"1756796179","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e86cd0b2-8d09-58ea-b9b9-3faa74ead7b4","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.73.138:5000","comment":"https://x.com/drb_ra/status/1962771694029869253","timestamp":"1756796213","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"33104450-e388-5e18-a29b-d27e5201d6b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.73.138","comment":"https://x.com/drb_ra/status/1962771694029869253","timestamp":"1756796213","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"8e874680-669b-51e0-be88-b70517bbd87b","type":"url","category":"Network activity","to_ids":true,"value":"http://93.143.174.237:8080","comment":"https://x.com/drb_ra/status/1962771836288020844","timestamp":"1756796246","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"15c9ed1c-c88d-57dc-a810-d213b3a92e16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.143.174.237","comment":"https://x.com/drb_ra/status/1962771836288020844","timestamp":"1756796246","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d077a091-a24e-56d8-b232-530435893fc5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.188.215","comment":"https://x.com/drb_ra/status/1962771981087993859","timestamp":"1756796281","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"a86a87ef-6d2d-5b46-99b9-2393ccea7208","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.188.215:443","comment":"https://x.com/drb_ra/status/1962771981087993859","timestamp":"1756796281","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"56beb97a-1bb7-50f3-9e68-0c9c008d3855","type":"url","category":"Network activity","to_ids":true,"value":"http://13.62.19.37:5671","comment":"https://x.com/drb_ra/status/1962772125208428794","timestamp":"1756796315","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d748f2ae-b5c2-554f-9c7b-793ec6afab8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.62.19.37","comment":"https://x.com/drb_ra/status/1962772125208428794","timestamp":"1756796315","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4a349d73-2a4a-5b6e-b00e-a6f88b0daf5e","type":"url","category":"Network activity","to_ids":true,"value":"http://190.255.85.13:4000","comment":"https://x.com/drb_ra/status/1962772267269579109","timestamp":"1756796349","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"449f6969-075c-551a-96bc-1ff7f502e4cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"190.255.85.13","comment":"https://x.com/drb_ra/status/1962772267269579109","timestamp":"1756796349","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"b307b55e-8960-55c9-80b3-69b79ce2f705","type":"md5","category":"Payload delivery","to_ids":true,"value":"aa748aa0f239fad971fbf39c3178a46a","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"5ba07713-ebeb-5ae4-ae5e-f3819e351d7f","type":"md5","category":"Payload delivery","to_ids":true,"value":"5f8777764dc2fa14dcbb58b79524e0b3","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"4262051b-007b-5160-8fa8-0d3371bacf55","type":"md5","category":"Payload delivery","to_ids":true,"value":"1bdd1360b6f8418b7a88920bc82e1306","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"9897aec8-187b-521d-8441-36f257371548","type":"md5","category":"Payload delivery","to_ids":true,"value":"38555ebb15614006e0f2c0f976164a7d","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"9965e83a-84ef-57f3-af42-a8b925e5e743","type":"md5","category":"Payload delivery","to_ids":true,"value":"f178053df415d38faf265ac3d2f8ce3b","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"1004f578-d010-55ca-93e0-7a0f98a4a9ab","type":"md5","category":"Payload delivery","to_ids":true,"value":"439eb32b465cc037e4d25f12a90ce26b","comment":"https://x.com/suyog41/status/1962774385028468887","timestamp":"1756796854","distribution":"5"},{"uuid":"62d7fa83-8ca1-50ce-90cd-70dee80bea1f","type":"url","category":"Network activity","to_ids":true,"value":"https://pastebin.com/raw/xdBcvdEi","comment":"https://x.com/skocherhan/status/1962786072699515095","timestamp":"1756799641","distribution":"5"},{"uuid":"98b1b1c5-5897-5980-80f9-b7bb1e63dfa5","type":"url","category":"Network activity","to_ids":true,"value":"https://files.catbox.moe/qp12g0.zip","comment":"https://x.com/skocherhan/status/1962786072699515095","timestamp":"1756799641","distribution":"5"},{"uuid":"689882a2-5158-5a3f-b996-312a0540a5a8","type":"domain","category":"Network activity","to_ids":true,"value":"b25vvv.com","comment":"https://x.com/urldna_bot/status/1962787622255763796","timestamp":"1756800010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bd30c6a7-179d-5051-8952-6016f85afdde","type":"url","category":"Network activity","to_ids":true,"value":"https://b25vvv.com/fish/93","comment":"https://x.com/urldna_bot/status/1962787622255763796","timestamp":"1756800010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4ffd3d4b-de5f-54c4-bf74-551470a153a5","type":"url","category":"Network activity","to_ids":true,"value":"http://64.70.19.203","comment":"https://x.com/skocherhan/status/1962795196862644301","timestamp":"1756801816","distribution":"5"},{"uuid":"5e4dedc7-b349-5e81-ad42-7c8956eac346","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.70.19.203","comment":"https://x.com/skocherhan/status/1962795196862644301","timestamp":"1756801816","distribution":"5"},{"uuid":"e42b0f9a-def8-599b-a31b-2da05f17e620","type":"md5","category":"Payload delivery","to_ids":true,"value":"e876ead3af7971c370bcd2aa7876d022","comment":"https://x.com/ShadowChasing1/status/1962802439146635493","timestamp":"1756803543","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"644d7e14-58a0-51fc-bea4-a092c2f4bf99","type":"md5","category":"Payload delivery","to_ids":true,"value":"a508889861e75f3b6bbbb722faa7096e","comment":"https://x.com/ShadowChasing1/status/1962802439146635493","timestamp":"1756803543","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"b6265123-7318-5ff3-a2ba-5cdb6c5b8304","type":"md5","category":"Payload delivery","to_ids":true,"value":"96405c4669e5c3149ed0f0098c0de489","comment":"https://x.com/ShadowChasing1/status/1962802439146635493","timestamp":"1756803543","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"3b9e8359-db04-5fe8-b5df-7b47212eb894","type":"md5","category":"Payload delivery","to_ids":true,"value":"8a78939c6576e6091a60e15a7d51ba9d","comment":"https://x.com/ShadowChasing1/status/1962802439146635493","timestamp":"1756803543","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e4b6c5b1-69e2-5950-a6aa-647714ba1b3f","type":"md5","category":"Payload delivery","to_ids":true,"value":"7452fb632fd824f882fa12f9bebd7aa7","comment":"https://x.com/ShadowChasing1/status/1962802439146635493","timestamp":"1756803543","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d5fef564-78de-5a88-8c43-e28244e8d00b","type":"url","category":"Network activity","to_ids":true,"value":"http://Essens.no","comment":"https://x.com/FalconFeedsio/status/1962804262649635036","timestamp":"1756803978","distribution":"5"},{"uuid":"18ef290a-2de9-537f-a777-b2d4f5e30eab","type":"domain","category":"Network activity","to_ids":true,"value":"Essens.no","comment":"https://x.com/FalconFeedsio/status/1962804262649635036","timestamp":"1756803978","distribution":"5"},{"uuid":"7282d628-07ca-5bb6-8b25-a75cd6b763ac","type":"url","category":"Network activity","to_ids":true,"value":"http://100.27.187.56","comment":"https://x.com/ShanHolo/status/1962815816652525789","timestamp":"1756806732","distribution":"5"},{"uuid":"89ba4e4d-49ee-5f40-b73b-f96c1ee9371f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"100.27.187.56","comment":"https://x.com/ShanHolo/status/1962815816652525789","timestamp":"1756806732","distribution":"5"},{"uuid":"bdd98ca1-a8c9-5e23-a4ea-d55312de9e6c","type":"url","category":"Network activity","to_ids":true,"value":"https://crestlineenvironmental.com/wp-admin/bibi.php","comment":"https://x.com/JAMESWT_WT/status/1962823601779843317","timestamp":"1756808588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35f65800-32c9-5e9b-ba60-913c30dad7fa","type":"domain","category":"Network activity","to_ids":true,"value":"crestlineenvironmental.com","comment":"https://x.com/JAMESWT_WT/status/1962823601779843317","timestamp":"1756808588","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77af9bff-cb8d-530a-912a-f12fa39a184b","type":"url","category":"Network activity","to_ids":true,"value":"http://telluricaphelion.com","comment":"https://x.com/FalconFeedsio/status/1962824775765762514","timestamp":"1756808868","distribution":"5"},{"uuid":"9241ffc2-0e47-5f9f-9ebe-61bfdc25c414","type":"domain","category":"Network activity","to_ids":true,"value":"telluricaphelion.com","comment":"https://x.com/FalconFeedsio/status/1962824775765762514","timestamp":"1756808868","distribution":"5"},{"uuid":"25ccfe3f-67f3-5fc1-ad24-5bb20815c423","type":"url","category":"Network activity","to_ids":true,"value":"http://loadinnnhr.today","comment":"https://x.com/FalconFeedsio/status/1962824775765762514","timestamp":"1756808868","distribution":"5"},{"uuid":"2032bf63-f845-50e2-98b6-ad2f831ccc23","type":"domain","category":"Network activity","to_ids":true,"value":"loadinnnhr.today","comment":"https://x.com/FalconFeedsio/status/1962824775765762514","timestamp":"1756808868","distribution":"5"},{"uuid":"cd7b6a3f-6f45-5089-af66-97247f1d1840","type":"domain","category":"Network activity","to_ids":true,"value":"enlignenl.from-co.net","comment":"https://x.com/JAMESWT_WT/status/1962824935186813066","timestamp":"1756808906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92339611-5f8c-53aa-92dc-aa26602ebcba","type":"url","category":"Network activity","to_ids":true,"value":"https://enlignenl.from-co.net/it/","comment":"https://x.com/JAMESWT_WT/status/1962824935186813066","timestamp":"1756808906","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f56dcd79-3e80-5163-8a90-8557cf6dee08","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.14:8080","comment":"https://x.com/drb_ra/status/1962828111533269054","timestamp":"1756809664","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"12ffddd8-9f70-5752-a09d-8fb21fdb45c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.14","comment":"https://x.com/drb_ra/status/1962828111533269054","timestamp":"1756809664","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"42631edd-8a60-50fb-b4da-bdabda4a1622","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.29:8080","comment":"https://x.com/drb_ra/status/1962828342421299377","timestamp":"1756809719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8d3462f7-602f-5a44-b64b-c3c2d03455f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.29","comment":"https://x.com/drb_ra/status/1962828342421299377","timestamp":"1756809719","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"465dcee5-d0d9-554a-8f9a-59de922ca041","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.21","comment":"https://x.com/drb_ra/status/1962828579462349114","timestamp":"1756809775","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78f33d07-9ea6-5886-9daa-3bef522d88d6","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.21:8080","comment":"https://x.com/drb_ra/status/1962828579462349114","timestamp":"1756809775","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c25dfa48-b9d6-5367-a2a8-3833c2a4a4ea","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.28:8080","comment":"https://x.com/drb_ra/status/1962828861785186461","timestamp":"1756809842","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e9d4b6d7-e635-5129-b607-738b0fe0bb4e","type":"url","category":"Network activity","to_ids":true,"value":"https://104.233.252.2/admin/read/Server/shopper/API/UO3UVEIWYPQ0PZO","comment":"https://x.com/drb_ra/status/1962828861785186461","timestamp":"1756809842","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"caaad0df-070c-5ea3-9e70-d078d31aed52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.28","comment":"https://x.com/drb_ra/status/1962828861785186461","timestamp":"1756809842","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"53a7c8a1-95b3-5174-a4b8-cdf18549ae43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.7","comment":"https://x.com/drb_ra/status/1962829104454975782","timestamp":"1756809900","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9d3fa550-dab9-55ee-9a94-22bb27dcddc3","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.7:8080","comment":"https://x.com/drb_ra/status/1962829104454975782","timestamp":"1756809900","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b74a55d8-e962-5784-b2c0-a44ddca5ff00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"211.184.175.246","comment":"https://x.com/drb_ra/status/1962829316284166188","timestamp":"1756809951","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"436d21e5-e56d-52ac-ac02-5526988e2472","type":"url","category":"Network activity","to_ids":true,"value":"https://the-xxxy.uk/api/v1/search","comment":"https://x.com/drb_ra/status/1962829316284166188","timestamp":"1756809951","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a689ab31-d863-5e47-b52b-49ab3670d2e4","type":"domain","category":"Network activity","to_ids":true,"value":"the-xxxy.uk","comment":"https://x.com/drb_ra/status/1962829316284166188","timestamp":"1756809951","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"15ed4b8f-27f4-5562-9776-acd8008af96c","type":"url","category":"Network activity","to_ids":true,"value":"http://211.184.175.246:2083","comment":"https://x.com/drb_ra/status/1962829316284166188","timestamp":"1756809951","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d59420d7-7186-562c-928a-3c05d12f1482","type":"url","category":"Network activity","to_ids":true,"value":"https://180.76.244.55/ca","comment":"https://x.com/drb_ra/status/1962829547050611105","timestamp":"1756810006","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a3f0d542-f2ad-51bf-862d-b52cc87cd75d","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.244.55:443","comment":"https://x.com/drb_ra/status/1962829547050611105","timestamp":"1756810006","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fe0c8c20-95e6-53b2-afc1-eebcc2f8e04c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.244.55","comment":"https://x.com/drb_ra/status/1962829547050611105","timestamp":"1756810006","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"46eb50ac-dfe8-576c-a7c3-c01a70f9decd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.249.70.191","comment":"https://x.com/drb_ra/status/1962829755432013972","timestamp":"1756810055","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cb9ba643-9c59-5991-b7f2-33eeeead02c8","type":"url","category":"Network activity","to_ids":true,"value":"https://123.249.70.191/load","comment":"https://x.com/drb_ra/status/1962829755432013972","timestamp":"1756810055","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8426b5f4-a25b-5a53-82dd-da48bda914fd","type":"url","category":"Network activity","to_ids":true,"value":"http://123.249.70.191:8888","comment":"https://x.com/drb_ra/status/1962829755432013972","timestamp":"1756810055","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dffd4f34-5c2c-503d-8bc7-4bd0698e678c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.5:8080","comment":"https://x.com/drb_ra/status/1962830002120008176","timestamp":"1756810114","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0666ea79-7195-5ae9-8bdc-93a92ec404ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.5","comment":"https://x.com/drb_ra/status/1962830002120008176","timestamp":"1756810114","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1fc26faf-5635-5cce-a984-2791ed8d641c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.112.206.250","comment":"https://x.com/drb_ra/status/1962830208383254924","timestamp":"1756810163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"accc1823-42ff-54c6-a8a8-2d9c0fd3c191","type":"url","category":"Network activity","to_ids":true,"value":"http://193.112.206.250:24635","comment":"https://x.com/drb_ra/status/1962830208383254924","timestamp":"1756810163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8879d75c-138d-54a5-8201-e3452928126e","type":"url","category":"Network activity","to_ids":true,"value":"https://193.112.206.250/ca","comment":"https://x.com/drb_ra/status/1962830208383254924","timestamp":"1756810163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"58d7ef3c-89da-5c98-829b-966bd2a4a9ba","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.27:8080","comment":"https://x.com/drb_ra/status/1962830441162985642","timestamp":"1756810219","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f7f78327-5049-52f8-bfb6-7817c46d53b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.27","comment":"https://x.com/drb_ra/status/1962830441162985642","timestamp":"1756810219","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5849fa17-a0e8-529d-85fd-e3855c4eceea","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.16:8080","comment":"https://x.com/drb_ra/status/1962831191230312566","timestamp":"1756810398","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3f9b84a6-a197-539e-95fa-ec6a122121b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.16","comment":"https://x.com/drb_ra/status/1962831191230312566","timestamp":"1756810398","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b279d267-44cd-5780-a4a9-be85b9c2aefa","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.1:8080","comment":"https://x.com/drb_ra/status/1962831417873698847","timestamp":"1756810452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9f4d973b-f742-5cfd-9f97-50ad800bb60b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.1","comment":"https://x.com/drb_ra/status/1962831417873698847","timestamp":"1756810452","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b04fc59c-f796-5878-adeb-d8f57339cd37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.10","comment":"https://x.com/drb_ra/status/1962831669049667642","timestamp":"1756810512","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d3890e99-5325-54a4-bd78-57365a0dcc7a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.10:8080","comment":"https://x.com/drb_ra/status/1962831669049667642","timestamp":"1756810512","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c4e6e72-23e4-5b25-89e3-8928b9a15329","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.25:8080","comment":"https://x.com/drb_ra/status/1962831878391525418","timestamp":"1756810562","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3b095b7f-8771-569c-b3bb-bd6b7804fc7f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.25","comment":"https://x.com/drb_ra/status/1962831878391525418","timestamp":"1756810562","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0e39f2fb-4cd2-5e4b-8594-28f7e00ccf32","type":"url","category":"Network activity","to_ids":true,"value":"https://103.172.26.89/_/scs/mail-static/_/js/","comment":"https://x.com/drb_ra/status/1962832624273023334","timestamp":"1756810739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8c791221-2929-5342-b94f-e7830c5f1767","type":"url","category":"Network activity","to_ids":true,"value":"http://103.172.26.89:443","comment":"https://x.com/drb_ra/status/1962832624273023334","timestamp":"1756810739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2c71fc4d-4c88-5210-be1f-95fd670cc396","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.172.26.89","comment":"https://x.com/drb_ra/status/1962832624273023334","timestamp":"1756810739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d337beb8-e43f-5472-8f7e-aa2e2f814f3e","type":"url","category":"Network activity","to_ids":true,"value":"https://47.121.137.8/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1962832853315580070","timestamp":"1756810794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"82e15e4d-43ee-5c4a-bc3c-007ae79a7a2b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.121.137.8:80","comment":"https://x.com/drb_ra/status/1962832853315580070","timestamp":"1756810794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5515f3ef-9b9d-5ce4-933f-13765bfdfe26","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.121.137.8","comment":"https://x.com/drb_ra/status/1962832853315580070","timestamp":"1756810794","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"472b6822-b063-563d-9494-d9c9b6b161ac","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.23:8080","comment":"https://x.com/drb_ra/status/1962833053593612728","timestamp":"1756810842","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71958a1a-7bd5-5f5a-93df-4682c543381a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.23","comment":"https://x.com/drb_ra/status/1962833053593612728","timestamp":"1756810842","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b56ec783-f7b1-56f8-aadb-e8914e3062e4","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.20:8080","comment":"https://x.com/drb_ra/status/1962833269046567153","timestamp":"1756810893","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17c871e8-0c04-5c8a-8f7b-f71df88f2ad1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.20","comment":"https://x.com/drb_ra/status/1962833269046567153","timestamp":"1756810893","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a878911f-372b-5c95-b481-41e4f9868f3d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.18:8080","comment":"https://x.com/drb_ra/status/1962833503516610911","timestamp":"1756810949","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"65ff4f90-e35b-570a-a2c9-56a9d463d6ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.18","comment":"https://x.com/drb_ra/status/1962833503516610911","timestamp":"1756810949","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bc0c9e37-8d00-5b3d-bcc1-0069d92e8d48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.142.152.235","comment":"https://x.com/drb_ra/status/1962833707711996094","timestamp":"1756810998","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d8ffc4a-6d50-53f3-a11e-50579a1ab1a2","type":"url","category":"Network activity","to_ids":true,"value":"https://45.142.152.235/ca","comment":"https://x.com/drb_ra/status/1962833707711996094","timestamp":"1756810998","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"64870307-f30f-5b71-bfa3-f782b51cd9ae","type":"url","category":"Network activity","to_ids":true,"value":"http://45.142.152.235:8889","comment":"https://x.com/drb_ra/status/1962833707711996094","timestamp":"1756810998","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3ecbfc78-8736-54c2-a7f3-77084fdf72a8","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.11:8080","comment":"https://x.com/drb_ra/status/1962833935156568293","timestamp":"1756811052","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"85361462-f325-50ba-ad7d-94a1a562eea8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.11","comment":"https://x.com/drb_ra/status/1962833935156568293","timestamp":"1756811052","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"616af9b1-1f7a-5b6b-8055-cfe8e88602bc","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.2:8080","comment":"https://x.com/drb_ra/status/1962834155378512166","timestamp":"1756811104","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ca79233d-ecb5-5a0c-a742-801990031dd3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.15","comment":"https://x.com/drb_ra/status/1962834373243236749","timestamp":"1756811156","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1a824bd3-ada5-5fd1-a729-eacf91772977","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.15:8080","comment":"https://x.com/drb_ra/status/1962834373243236749","timestamp":"1756811156","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d7634441-2c9f-53d4-8d7c-c8b8f40b5f2f","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.3:8080","comment":"https://x.com/drb_ra/status/1962834585294602298","timestamp":"1756811207","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"832390f1-38c2-5cf4-9840-a75ef53e680d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.3","comment":"https://x.com/drb_ra/status/1962834585294602298","timestamp":"1756811207","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"33d5e455-746d-56a4-a9c2-c9dce5cd86db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.24","comment":"https://x.com/drb_ra/status/1962834800034627933","timestamp":"1756811258","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e913d3e3-dbe0-5bf4-91fa-36ac751df52a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.24:8080","comment":"https://x.com/drb_ra/status/1962834800034627933","timestamp":"1756811258","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fcb905f4-c17f-5538-830c-6e362380c592","type":"domain","category":"Network activity","to_ids":true,"value":"sunmoonlight.top-baibosports.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ed6c9e5-4968-5c99-b403-f9366b312c5c","type":"url","category":"Network activity","to_ids":true,"value":"https://sunmoonlight.top-baibosports.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6ba4779f-0141-5fb3-b4ad-fc110f1ddc8a","type":"url","category":"Network activity","to_ids":true,"value":"https://pathleafpath.jobupup.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1611713f-5511-5b0c-820f-c2397c769034","type":"domain","category":"Network activity","to_ids":true,"value":"lovebirdpower.play-yibotiyu.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc92cf7d-83da-58b4-ab91-e08842618231","type":"url","category":"Network activity","to_ids":true,"value":"https://lovebirdpower.play-yibotiyu.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60bdd44f-35bf-59b5-851e-e39d8a5079f7","type":"domain","category":"Network activity","to_ids":true,"value":"pathleafpath.jobupup.com","comment":"https://x.com/masaomi346/status/1962844645911937296","timestamp":"1756813606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b9eb79b0-3d9a-5683-a4d0-31d200797950","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.52.167.197","comment":"https://x.com/solostalking/status/1962845037710245957","timestamp":"1756813699","distribution":"5"},{"uuid":"176526b9-2cb0-5ebb-aec8-822f1a55fa6c","type":"domain","category":"Network activity","to_ids":true,"value":"uyiagfdchvdhv.vercel.app","comment":"https://x.com/urldna_bot/status/1962848018253656128","timestamp":"1756814410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8cad3fda-33c0-5e27-aee4-d48972f1ac79","type":"url","category":"Network activity","to_ids":true,"value":"https://www.uyiagfdchvdhv.vercel.app","comment":"https://x.com/urldna_bot/status/1962848018253656128","timestamp":"1756814410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9c50458c-a57d-56a8-b819-39a7dc1b25ca","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.135.177:8080","comment":"https://x.com/ViriBack/status/1962849458267271293","timestamp":"1756814753","distribution":"5"},{"uuid":"50207404-6953-57eb-a4ed-78baab38e1e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.135.177","comment":"https://x.com/ViriBack/status/1962849458267271293","timestamp":"1756814753","distribution":"5"},{"uuid":"873b9a52-02b7-5b8f-bb32-906e6f3c05f5","type":"url","category":"Network activity","to_ids":true,"value":"https://lojinhadaana.org/generate?payload=","comment":"https://x.com/ShadowOpCode/status/1962877818162843854","timestamp":"1756821515","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"f8c93f15-ba11-5fd8-b065-d39c1a7d21cc","type":"domain","category":"Network activity","to_ids":true,"value":"lojinhadaana.org","comment":"https://x.com/ShadowOpCode/status/1962877818162843854","timestamp":"1756821515","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"641c120e-4608-52de-a879-b7bacef52b22","type":"domain","category":"Network activity","to_ids":true,"value":"ia801003.us.archive.org","comment":"https://x.com/ShadowOpCode/status/1962877818162843854","timestamp":"1756821515","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ff282857-8b97-5cd6-8166-6acc733ea6c7","type":"url","category":"Network activity","to_ids":true,"value":"https://ia801003.us.archive.org/24/items/realomadrido2025/tragira.jpg","comment":"https://x.com/ShadowOpCode/status/1962877818162843854","timestamp":"1756821515","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a1060ceb-8684-533c-a88a-c35ebe235aa4","type":"domain","category":"Network activity","to_ids":true,"value":"support-premium.joviroasters.com","comment":"https://x.com/urldna_bot/status/1962878223802306807","timestamp":"1756821611","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"698637a4-8793-5a52-9bc7-8887db91ca5f","type":"url","category":"Network activity","to_ids":true,"value":"https://support-premium.joviroasters.com/1/pagopa/log/msdpweb/index.php","comment":"https://x.com/urldna_bot/status/1962878223802306807","timestamp":"1756821611","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"494f093b-9047-59b9-808c-6058f3c2dc15","type":"url","category":"Network activity","to_ids":true,"value":"https://ia903204.us.archive.org/31/items/00ea-1da-4192a-2030f-9ae-023de-3b-3143ed-647bbab_20250805/00ea1da4192a2030f9ae023de3b3143ed647bbab.txt","comment":"https://x.com/skocherhan/status/1962881675018318159","timestamp":"1756822434","distribution":"5"},{"uuid":"4535b120-e820-587b-9bd7-53c6a245aa1d","type":"domain","category":"Network activity","to_ids":true,"value":"ia903204.us.archive.org","comment":"https://x.com/skocherhan/status/1962881675018318159","timestamp":"1756822434","distribution":"5"},{"uuid":"3ff67fa3-4f77-5307-8ce9-1991f9641d1e","type":"url","category":"Network activity","to_ids":true,"value":"https://ia903204.us.archive.org/31/items/00ea-1da-4192a-20","comment":"https://x.com/skocherhan/status/1962881675018318159","timestamp":"1756822434","distribution":"5"},{"uuid":"1208285c-e3ab-545c-83ad-fd9114122059","type":"url","category":"Network activity","to_ids":true,"value":"https://pastebin.com/raw/MX2hpCgi","comment":"https://x.com/skocherhan/status/1962881771625677304","timestamp":"1756822457","distribution":"5"},{"uuid":"ea48901b-25f4-50a2-8f2e-6bf4b0df8161","type":"sha256","category":"Payload delivery","to_ids":true,"value":"E6A9C46EB4B7C44C0123DF256B7D23463FA11C4834CF175EEE2F3D87402C1317","comment":"https://x.com/skocherhan/status/1962881771625677304","timestamp":"1756822457","distribution":"5"},{"uuid":"85007675-8cbd-54c4-a244-3aed598f11e7","type":"url","category":"Network activity","to_ids":true,"value":"http://lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1962901799792521593","timestamp":"1756827232","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f535eb9e-a58c-56a5-b523-903e3d57e0d1","type":"domain","category":"Network activity","to_ids":true,"value":"lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1962901799792521593","timestamp":"1756827232","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f923e3bd-f407-574d-bc70-8a8a3c29dee4","type":"domain","category":"Network activity","to_ids":true,"value":"lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1962901799792521593","timestamp":"1756827232","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d979ac9d-c429-5d9f-92e5-45a562698e01","type":"url","category":"Network activity","to_ids":true,"value":"http://lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1962901799792521593","timestamp":"1756827232","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"709f32dd-6ef6-5fb2-b71c-9f52d73b76d2","type":"domain","category":"Network activity","to_ids":true,"value":"mytompkins-member-sec.weebly.com","comment":"https://x.com/urldna_bot/status/1962908420731699435","timestamp":"1756828811","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5639067f-d0ba-5cfe-a44f-d6b42db60ef6","type":"url","category":"Network activity","to_ids":true,"value":"https://mytompkins-member-sec.weebly.com","comment":"https://x.com/urldna_bot/status/1962908420731699435","timestamp":"1756828811","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2393fe94-78a1-5393-817e-45e4f7287cab","type":"domain","category":"Network activity","to_ids":true,"value":"ns2.microoosoft.com","comment":"https://x.com/drb_ra/status/1962936788843893011","timestamp":"1756835574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"950f4adc-854c-5b6b-915c-a17e9ccebb63","type":"url","category":"Network activity","to_ids":true,"value":"https://ns2.microoosoft.com/Manag_backend/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1962936788843893011","timestamp":"1756835574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d3721791-4663-56d5-af89-e5b51630b051","type":"url","category":"Network activity","to_ids":true,"value":"http://47.236.159.248:53","comment":"https://x.com/drb_ra/status/1962936788843893011","timestamp":"1756835574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"10e3c9b5-ef78-54b7-ab89-1a842069e224","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.236.159.248","comment":"https://x.com/drb_ra/status/1962936788843893011","timestamp":"1756835574","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cfa5bb00-30f7-5759-8d22-b6901e1e100d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.86.75.129","comment":"https://x.com/phatomcandle/status/1962938610594021465","timestamp":"1756836009","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"29563bb9-24ad-55ce-b604-4d472fa759cb","type":"domain","category":"Network activity","to_ids":true,"value":"burdyserv.info","comment":"https://x.com/phatomcandle/status/1962938610594021465","timestamp":"1756836009","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"7ae6c0f4-7422-51d7-8afb-44cda5a38adf","type":"url","category":"Network activity","to_ids":true,"value":"http://burdyserv.info","comment":"https://x.com/phatomcandle/status/1962938610594021465","timestamp":"1756836009","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"ec11d7f7-418a-5181-a231-463dfc324818","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.86.75.129","comment":"https://x.com/phatomcandle/status/1962938610594021465","timestamp":"1756836009","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"da9be1af-aff4-5503-b187-b92be04b6c5f","type":"domain","category":"Network activity","to_ids":true,"value":"messagerie8.godaddysites.com","comment":"https://x.com/urldna_bot/status/1962938622308405491","timestamp":"1756836011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"072027fe-c2c6-58cf-8699-e471f67430a2","type":"url","category":"Network activity","to_ids":true,"value":"https://messagerie8.godaddysites.com","comment":"https://x.com/urldna_bot/status/1962938622308405491","timestamp":"1756836011","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d27fe4a2-00d9-5552-9701-69c2896d0175","type":"url","category":"Network activity","to_ids":true,"value":"http://116.26.10.18:36122","comment":"https://x.com/drb_ra/status/1962950181671858597","timestamp":"1756838767","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c96921b6-0c8d-557b-be6a-8ede6fef7c47","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.26.10.18","comment":"https://x.com/drb_ra/status/1962950181671858597","timestamp":"1756838767","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f94449f9-d840-5a1d-aa38-5dca97268381","type":"url","category":"Network activity","to_ids":true,"value":"http://185.196.10.243:7443","comment":"https://x.com/drb_ra/status/1962950404376772834","timestamp":"1756838820","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"50e387a9-db77-550a-9644-0798a97049b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.196.10.243","comment":"https://x.com/drb_ra/status/1962950404376772834","timestamp":"1756838820","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a7cc062c-bf07-5473-8655-7ca27e0449db","type":"url","category":"Network activity","to_ids":true,"value":"http://73.213.108.128:8000","comment":"https://x.com/drb_ra/status/1962951128523379096","timestamp":"1756838993","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d6ec6ebd-bf71-555d-8a75-bb571b81bd6d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"73.213.108.128","comment":"https://x.com/drb_ra/status/1962951128523379096","timestamp":"1756838993","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"42bbf53e-6a57-5b89-9b2c-213a18b0e966","type":"url","category":"Network activity","to_ids":true,"value":"http://163.5.169.217:2404","comment":"https://x.com/drb_ra/status/1962951347990327311","timestamp":"1756839045","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c6738c7d-e455-54c4-82cb-24e5998d34ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.5.169.217","comment":"https://x.com/drb_ra/status/1962951347990327311","timestamp":"1756839045","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3fe1c00d-e448-5e2d-9749-23ba1a3d4efa","type":"url","category":"Network activity","to_ids":true,"value":"http://185.222.58.49:465","comment":"https://x.com/drb_ra/status/1962951554790527386","timestamp":"1756839095","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9939c101-8b94-51e5-afc8-cde35212b5b0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.222.58.49","comment":"https://x.com/drb_ra/status/1962951554790527386","timestamp":"1756839095","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"73f7d948-4ebe-5f6f-afb5-5fe4445bdf3a","type":"url","category":"Network activity","to_ids":true,"value":"http://118.184.187.173:47486","comment":"https://x.com/drb_ra/status/1962951749934682403","timestamp":"1756839141","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ad0f9901-620e-5c21-94db-c45355642daa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.184.187.173","comment":"https://x.com/drb_ra/status/1962951749934682403","timestamp":"1756839141","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"77c5a85c-7a67-5dd0-b53f-a6d49b5f776e","type":"url","category":"Network activity","to_ids":true,"value":"http://118.184.187.163:47486","comment":"https://x.com/drb_ra/status/1962951945523491296","timestamp":"1756839188","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a7153a86-ed2b-5ad4-9cd7-df012c7de232","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.184.187.163","comment":"https://x.com/drb_ra/status/1962951945523491296","timestamp":"1756839188","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"cba9002f-3de0-5186-8958-081c3e3bb61f","type":"url","category":"Network activity","to_ids":true,"value":"http://18.181.96.254:1135","comment":"https://x.com/drb_ra/status/1962952163312689224","timestamp":"1756839240","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c2e77355-9a47-5a11-84bc-8fa4ba270747","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.181.96.254","comment":"https://x.com/drb_ra/status/1962952163312689224","timestamp":"1756839240","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"6e75986c-852b-59ae-9c70-a864cbab3e14","type":"url","category":"Network activity","to_ids":true,"value":"http://178.19.236.179:33333","comment":"https://x.com/drb_ra/status/1962952353696358792","timestamp":"1756839285","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"5a6b75b8-d471-5399-91ff-deb48b2dea28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.19.236.179","comment":"https://x.com/drb_ra/status/1962952353696358792","timestamp":"1756839285","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ab9021aa-59a7-5d83-9679-e28043215841","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.215.69:888","comment":"https://x.com/drb_ra/status/1962952555928953100","timestamp":"1756839333","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"7516c00e-b068-57ca-ae8f-10831b7c13b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.215.69","comment":"https://x.com/drb_ra/status/1962952555928953100","timestamp":"1756839333","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"4e103f3d-0e76-5f34-8472-bb157e130935","type":"url","category":"Network activity","to_ids":true,"value":"http://91.198.77.151:80","comment":"https://x.com/drb_ra/status/1962952779388833991","timestamp":"1756839387","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"e958fd7d-9fcc-55a9-942e-a23025fdad18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.198.77.151","comment":"https://x.com/drb_ra/status/1962952779388833991","timestamp":"1756839387","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"f5bd7059-d9a3-51cb-80d3-07ad015fbdbd","type":"url","category":"Network activity","to_ids":true,"value":"http://39.40.153.104:995","comment":"https://x.com/drb_ra/status/1962952998474158317","timestamp":"1756839439","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"a510644d-140f-5937-be39-19e10da83199","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.40.153.104","comment":"https://x.com/drb_ra/status/1962952998474158317","timestamp":"1756839439","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"86448cb8-5557-51ba-a70e-f298d362afaa","type":"url","category":"Network activity","to_ids":true,"value":"http://197.0.85.219:443","comment":"https://x.com/drb_ra/status/1962953227613159873","timestamp":"1756839494","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d94bf3b6-1c58-54f0-b67b-b7a1e9b67f13","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.0.85.219","comment":"https://x.com/drb_ra/status/1962953227613159873","timestamp":"1756839494","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"e5b241f2-2239-5cc5-a42f-e78f73772623","type":"url","category":"Network activity","to_ids":true,"value":"http://92.161.137.94:4443","comment":"https://x.com/drb_ra/status/1962953443561066736","timestamp":"1756839545","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"fd8a023e-ea9d-5478-86a0-ea6bd6078b49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.161.137.94","comment":"https://x.com/drb_ra/status/1962953443561066736","timestamp":"1756839545","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"ff686b9b-4349-5cc1-a9b9-b89a660cf2f8","type":"url","category":"Network activity","to_ids":true,"value":"http://206.189.80.194:80","comment":"https://x.com/drb_ra/status/1962953658749898868","timestamp":"1756839596","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"a6207153-d862-5192-9d4a-cf5b6c5ffbb4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.189.80.194","comment":"https://x.com/drb_ra/status/1962953658749898868","timestamp":"1756839596","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c406edad-bbdf-52aa-9587-09724c097a06","type":"url","category":"Network activity","to_ids":true,"value":"http://107.191.60.202:443","comment":"https://x.com/drb_ra/status/1962953872311259373","timestamp":"1756839647","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f6b7b180-2b94-50e6-b1d5-a4cbcc90a341","type":"url","category":"Network activity","to_ids":true,"value":"http://107.191.60.202:80","comment":"https://x.com/drb_ra/status/1962954068441042981","timestamp":"1756839694","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f896ee20-d93b-5587-a8a2-fd9fdefb2e6d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.191.60.202","comment":"https://x.com/drb_ra/status/1962954068441042981","timestamp":"1756839694","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"72504b41-addc-58f1-a52f-b8db1e164043","type":"url","category":"Network activity","to_ids":true,"value":"http://63.178.148.142:443","comment":"https://x.com/drb_ra/status/1962954300704845968","timestamp":"1756839749","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"bb102c4a-30da-5991-ac17-f7a294952449","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.178.148.142","comment":"https://x.com/drb_ra/status/1962954300704845968","timestamp":"1756839749","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"c8ab4bc6-0714-5d05-8434-fea18aa09bc3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.22.154.73:443","comment":"https://x.com/drb_ra/status/1962954507156865410","timestamp":"1756839799","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"6eb7c002-954a-5441-8b86-e50439612054","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.22.154.73","comment":"https://x.com/drb_ra/status/1962954507156865410","timestamp":"1756839799","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"672b6d7c-6974-5aa7-ab0b-f8438b7e9147","type":"url","category":"Network activity","to_ids":true,"value":"http://112.93.133.97:23293","comment":"https://x.com/drb_ra/status/1962954713294414271","timestamp":"1756839848","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"c7ea4c57-1df6-50dc-a92d-7264a5217a34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"112.93.133.97","comment":"https://x.com/drb_ra/status/1962954713294414271","timestamp":"1756839848","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"a80ea48e-e0ed-50ec-8ea3-6e6bc011c7b9","type":"domain","category":"Network activity","to_ids":true,"value":"dota2giveaway2017.weebly.com","comment":"https://x.com/urldna_bot/status/1962968817874661393","timestamp":"1756843211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"045ecf1b-873e-5185-8af7-e0b968153c93","type":"url","category":"Network activity","to_ids":true,"value":"https://dota2giveaway2017.weebly.com","comment":"https://x.com/urldna_bot/status/1962968817874661393","timestamp":"1756843211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"37a59a2e-c3b6-5228-a480-a3289fc27a57","type":"url","category":"Network activity","to_ids":true,"value":"http://203.9.150.250:8081","comment":"https://x.com/drb_ra/status/1962982511220281559","timestamp":"1756846475","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"93e974d4-9232-5ab6-bf1b-29035cd56dbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.9.150.250","comment":"https://x.com/drb_ra/status/1962982511220281559","timestamp":"1756846475","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a80fe7ae-095e-5a83-88eb-2fe9e14e4aa0","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.94.35:8081","comment":"https://x.com/drb_ra/status/1962982732260376838","timestamp":"1756846528","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9a09433a-259b-5f61-bc08-f508e062911b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.94.35","comment":"https://x.com/drb_ra/status/1962982732260376838","timestamp":"1756846528","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7ca1738b-166f-54dd-a069-42a251a9d3b7","type":"url","category":"Network activity","to_ids":true,"value":"https://43.139.169.60/activity","comment":"https://x.com/drb_ra/status/1962982950363959503","timestamp":"1756846580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eb75ccd2-695c-5c9b-99a6-5d98a9649a4f","type":"url","category":"Network activity","to_ids":true,"value":"http://43.139.169.60:8009","comment":"https://x.com/drb_ra/status/1962982950363959503","timestamp":"1756846580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"877f2bf2-bb17-5761-8d6c-aabd19f35675","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.139.169.60","comment":"https://x.com/drb_ra/status/1962982950363959503","timestamp":"1756846580","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d7ffc4e-177d-5c89-9458-f61c3380f58d","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:5557","comment":"https://x.com/drb_ra/status/1962983186842935758","timestamp":"1756846636","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1962983186842935758","timestamp":"1756846636","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"611e8648-e7db-5679-a117-e9ae2bafdbb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.139.65.13","comment":"https://x.com/drb_ra/status/1962983186842935758","timestamp":"1756846636","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6fd6a1b5-7757-571d-8312-576a4ebb0453","type":"url","category":"Network activity","to_ids":true,"value":"http://5.75.210.165","comment":"https://x.com/threatquery/status/1962983886255694247","timestamp":"1756846803","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"181c8a4c-bfad-5c69-8f15-e65a6e46c750","type":"url","category":"Network activity","to_ids":true,"value":"http://91.212.166.160","comment":"https://x.com/threatquery/status/1962983884120899949","timestamp":"1756846803","distribution":"5","Tag":[{"name":"LummaStealer"},{"name":"C2"},{"name":"malware"}]},{"uuid":"dd4a2f3b-e4f7-50db-bc8b-a600bb03468b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.212.166.160","comment":"https://x.com/threatquery/status/1962983884120899949","timestamp":"1756846803","distribution":"5","Tag":[{"name":"LummaStealer"},{"name":"C2"},{"name":"malware"}]},{"uuid":"c8461cad-0816-5e0b-aaf0-9ef77d4dcf27","type":"url","category":"Network activity","to_ids":true,"value":"http://107.22.193.119","comment":"https://x.com/threatquery/status/1962983888050864343","timestamp":"1756846804","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"d7808fce-54fa-51c5-8e98-007f0aef567c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.22.193.119","comment":"https://x.com/threatquery/status/1962983888050864343","timestamp":"1756846804","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"},{"name":"malware"}]},{"uuid":"69236067-2173-5505-9aa0-d3b7415867e3","type":"domain","category":"Network activity","to_ids":true,"value":"gwadarport.ddns.net","comment":"https://x.com/MichalKoczwara/status/1962985306589933663","timestamp":"1756847142","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"56564384-15fa-535e-a859-ba5e78a48268","type":"url","category":"Network activity","to_ids":true,"value":"http://gwadarport.ddns.net","comment":"https://x.com/MichalKoczwara/status/1962985306589933663","timestamp":"1756847142","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"42599d75-8819-508b-bda5-e6c735c29d8b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.14.142.50","comment":"https://x.com/MichalKoczwara/status/1962985306589933663","timestamp":"1756847142","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ecdcf597-4061-5b33-9543-0b4510f12246","type":"domain","category":"Network activity","to_ids":true,"value":"corroboratedatasynpro.pages.dev","comment":"https://x.com/urldna_bot/status/1962999007355040227","timestamp":"1756850408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"57909c17-5c53-559d-a80b-dc201d63e25c","type":"url","category":"Network activity","to_ids":true,"value":"http://corroboratedatasynpro.pages.dev","comment":"https://x.com/urldna_bot/status/1962999007355040227","timestamp":"1756850408","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"497dcacd-43ad-5c7a-86f1-1942ed9d1495","type":"url","category":"Network activity","to_ids":true,"value":"http://3.222.192.211:80","comment":"https://x.com/SarlackLab/status/1962999045477032289","timestamp":"1756850417","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"49645527-d119-5788-9649-6aa74ee13495","type":"domain","category":"Network activity","to_ids":true,"value":"newhousepanel.info","comment":"https://x.com/SarlackLab/status/1962999045477032289","timestamp":"1756850417","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"c10a5daf-d597-5857-98ba-f1ecd30f6959","type":"url","category":"Network activity","to_ids":true,"value":"http://newhousepanel.info","comment":"https://x.com/SarlackLab/status/1962999045477032289","timestamp":"1756850417","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"02808e8f-3be3-5ce8-89aa-aebdb7ada181","type":"domain","category":"Network activity","to_ids":true,"value":"lexicowhite.gpwxrcc.cn","comment":"https://x.com/masaomi346/status/1963010355577467048","timestamp":"1756853114","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3f9736c-a5c3-5982-adbe-c508311c60e3","type":"url","category":"Network activity","to_ids":true,"value":"https://lexicowhite.gpwxrcc.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1963010355577467048","timestamp":"1756853114","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"909dae54-7b19-568c-8ce7-7dcb57ae737a","type":"url","category":"Network activity","to_ids":true,"value":"http://20.2.220.82:42666","comment":"https://x.com/drb_ra/status/1963012823883382960","timestamp":"1756853702","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71f3c3ad-ebe2-5934-b531-eb539bc0a87a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.2.220.82","comment":"https://x.com/drb_ra/status/1963012823883382960","timestamp":"1756853702","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"080bd463-be0a-525d-9b72-5bcf621955e3","type":"url","category":"Network activity","to_ids":true,"value":"https://20.2.220.82/s/58462514417","comment":"https://x.com/drb_ra/status/1963012823883382960","timestamp":"1756853702","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7666e4fa-bd6f-5ac4-a4a1-0a895e188cd5","type":"domain","category":"Network activity","to_ids":true,"value":"fwefwefwe.xyz","comment":"https://x.com/drb_ra/status/1963013015579640092","timestamp":"1756853748","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0228b913-c94f-56a4-be3d-4fc89bb97f79","type":"url","category":"Network activity","to_ids":true,"value":"https://www.fwefwefwe.xyz/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1963013015579640092","timestamp":"1756853748","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7c716429-2804-5125-8692-e79f11a2fdbf","type":"url","category":"Network activity","to_ids":true,"value":"http://69.67.172.235:443","comment":"https://x.com/drb_ra/status/1963013015579640092","timestamp":"1756853748","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"493f1813-d6ff-5641-937a-085b5ae3866a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.67.172.235","comment":"https://x.com/drb_ra/status/1963013015579640092","timestamp":"1756853748","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2af60850-933b-5b2c-ab7f-7953d4e0c11b","type":"url","category":"Network activity","to_ids":true,"value":"http://140.143.131.180:18443","comment":"https://x.com/drb_ra/status/1963013756813722020","timestamp":"1756853925","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f2d962a-ad1e-50de-b57d-18979b14b7ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.143.131.180","comment":"https://x.com/drb_ra/status/1963013756813722020","timestamp":"1756853925","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1cedc0e1-a337-55df-b7bb-6b34c514ba05","type":"url","category":"Network activity","to_ids":true,"value":"http://121.89.84.19:443","comment":"https://x.com/drb_ra/status/1963013943313482117","timestamp":"1756853969","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ba1f1f51-0fcc-5354-8912-5c2a7fbfbcb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.89.84.19","comment":"https://x.com/drb_ra/status/1963013943313482117","timestamp":"1756853969","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"29ecd8b3-9605-50dd-aeae-8f0c54615df8","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.227.215:56874","comment":"https://x.com/drb_ra/status/1963014143927320754","timestamp":"1756854017","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e666e307-216a-5106-8f1f-1d834d7a28e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.227.215","comment":"https://x.com/drb_ra/status/1963014143927320754","timestamp":"1756854017","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"671c590b-fbe9-5756-a13c-8221aeb0007b","type":"url","category":"Network activity","to_ids":true,"value":"https://23.95.227.215/cx","comment":"https://x.com/drb_ra/status/1963014143927320754","timestamp":"1756854017","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"83191d61-c07d-5af4-8ed4-c67368364aee","type":"url","category":"Network activity","to_ids":true,"value":"http://91.210.108.135:80","comment":"https://x.com/drb_ra/status/1963014344901530056","timestamp":"1756854065","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1103cdf9-55ec-50d0-9345-25a2fa9b077a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.210.108.135","comment":"https://x.com/drb_ra/status/1963014344901530056","timestamp":"1756854065","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0251a33f-24ce-520a-9236-4b7989baa4ad","type":"url","category":"Network activity","to_ids":true,"value":"http://8.135.13.184:8888","comment":"https://x.com/drb_ra/status/1963014550833529310","timestamp":"1756854114","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b3e1c78a-1217-5eca-b1e1-560caf4143a5","type":"url","category":"Network activity","to_ids":true,"value":"http://156.244.56.37:80","comment":"https://x.com/drb_ra/status/1963014754668024286","timestamp":"1756854163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"870e5652-1472-5bcb-b666-efdb96f20bf9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.244.56.37","comment":"https://x.com/drb_ra/status/1963014754668024286","timestamp":"1756854163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a34d2d12-fc03-5288-b519-d87e2a43afda","type":"url","category":"Network activity","to_ids":true,"value":"https://156.244.56.37/cx","comment":"https://x.com/drb_ra/status/1963014754668024286","timestamp":"1756854163","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03b0cc89-9c35-52c2-9e74-d4ffbaaca15b","type":"domain","category":"Network activity","to_ids":true,"value":"weweseaweweseaweseaweseawe.weebly.com","comment":"https://x.com/urldna_bot/status/1963029213910270005","timestamp":"1756857610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b183e889-f6b2-5bfe-8a2a-473c8268d354","type":"url","category":"Network activity","to_ids":true,"value":"https://weweseaweweseaweseaweseawe.weebly.com","comment":"https://x.com/urldna_bot/status/1963029213910270005","timestamp":"1756857610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5c39da23-6b8e-5471-b257-335f3c6522f5","type":"url","category":"Network activity","to_ids":true,"value":"http://81.68.95.163:8080","comment":"https://x.com/drb_ra/status/1963057151598788957","timestamp":"1756864271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8b99a287-6c0d-5263-aad1-b0f4ca172bd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.68.95.163","comment":"https://x.com/drb_ra/status/1963057151598788957","timestamp":"1756864271","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d7b7131d-2cdd-5378-9e99-4eb1ca3142b4","type":"domain","category":"Network activity","to_ids":true,"value":"studio-taddei.it","comment":"https://x.com/urldna_bot/status/1963059411745698135","timestamp":"1756864810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1a78d378-e9b8-5ae8-a153-9379e117f2b6","type":"url","category":"Network activity","to_ids":true,"value":"http://studio-taddei.it/hipto/New%20folder/Indexxatt.htm","comment":"https://x.com/urldna_bot/status/1963059411745698135","timestamp":"1756864810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"85007675-8cbd-54c4-a244-3aed598f11e7","type":"url","category":"Network activity","to_ids":true,"value":"http://lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1963064191561941241","timestamp":"1756865949","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f923e3bd-f407-574d-bc70-8a8a3c29dee4","type":"domain","category":"Network activity","to_ids":true,"value":"lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1963064191561941241","timestamp":"1756865949","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d979ac9d-c429-5d9f-92e5-45a562698e01","type":"url","category":"Network activity","to_ids":true,"value":"http://lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1963064191561941241","timestamp":"1756865949","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f535eb9e-a58c-56a5-b523-903e3d57e0d1","type":"domain","category":"Network activity","to_ids":true,"value":"lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1963064191561941241","timestamp":"1756865949","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"77cfe337-7342-515f-b49c-6a89d396afc6","type":"domain","category":"Network activity","to_ids":true,"value":"133ex.com","comment":"https://x.com/olaweblog/status/1963068891996848572","timestamp":"1756867070","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"e527cdb1-47bb-5f58-8066-85510bb1a9b0","type":"url","category":"Network activity","to_ids":true,"value":"http://133ex.com","comment":"https://x.com/olaweblog/status/1963068891996848572","timestamp":"1756867070","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"56564384-15fa-535e-a859-ba5e78a48268","type":"url","category":"Network activity","to_ids":true,"value":"http://gwadarport.ddns.net","comment":"https://x.com/ShadowChasing1/status/1963071865465012565","timestamp":"1756867779","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"42599d75-8819-508b-bda5-e6c735c29d8b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.14.142.50","comment":"https://x.com/ShadowChasing1/status/1963071865465012565","timestamp":"1756867779","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"69236067-2173-5505-9aa0-d3b7415867e3","type":"domain","category":"Network activity","to_ids":true,"value":"gwadarport.ddns.net","comment":"https://x.com/ShadowChasing1/status/1963071865465012565","timestamp":"1756867779","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"76134f44-efb3-5ecf-a4e8-aa729549043f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"3e2a641cbbd7b345fb9fa7e5d1baa49ff9a877f083a0117bed1ac0c687fbcfbb","comment":"https://x.com/ShadowChasing1/status/1963071892170178845","timestamp":"1756867785","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cb9bf2ea-4596-580a-8e6e-c95fc775d1dd","type":"sha256","category":"Payload delivery","to_ids":true,"value":"31924a0ca29503c6c107d95b6da68cb079a0dec8a9f05b2687433e7937079e2c","comment":"https://x.com/ShadowChasing1/status/1963071892170178845","timestamp":"1756867785","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c279971c-12b8-57fe-a600-5e1a30c8fc8e","type":"domain","category":"Network activity","to_ids":true,"value":"b35ppp.com","comment":"https://x.com/urldna_bot/status/1963089611502035381","timestamp":"1756872010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"72173b90-e4f8-5f4a-9c97-96b29f9179ed","type":"url","category":"Network activity","to_ids":true,"value":"https://b35ppp.com/fish/255","comment":"https://x.com/urldna_bot/status/1963089611502035381","timestamp":"1756872010","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2af60850-933b-5b2c-ab7f-7953d4e0c11b","type":"url","category":"Network activity","to_ids":true,"value":"http://140.143.131.180:18443","comment":"https://x.com/skocherhan/status/1963094616636305656","timestamp":"1756873203","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f2d962a-ad1e-50de-b57d-18979b14b7ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.143.131.180","comment":"https://x.com/skocherhan/status/1963094616636305656","timestamp":"1756873203","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"50207404-6953-57eb-a4ed-78baab38e1e3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.135.177","comment":"https://x.com/skocherhan/status/1963094829245563218","timestamp":"1756873254","distribution":"5"},{"uuid":"9c50458c-a57d-56a8-b819-39a7dc1b25ca","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.135.177:8080","comment":"https://x.com/skocherhan/status/1963094829245563218","timestamp":"1756873254","distribution":"5"},{"uuid":"6482bb18-7254-514f-a3bd-6784ceabf95c","type":"domain","category":"Network activity","to_ids":true,"value":"pub-1e4f784a849d4b38ac2c6b72e284d6c4.r2.dev","comment":"https://x.com/skocherhan/status/1963095636305227919","timestamp":"1756873446","distribution":"5"},{"uuid":"0d4d9f4c-4bf4-5843-a798-277932ee05aa","type":"url","category":"Network activity","to_ids":true,"value":"https://pub-1e4f784a849d4b38ac2c6b72e284d6c4.r2.dev/INVITATION.exe","comment":"https://x.com/skocherhan/status/1963095636305227919","timestamp":"1756873446","distribution":"5"},{"uuid":"5427809d-4456-50b9-a889-364df67823d1","type":"md5","category":"Payload delivery","to_ids":true,"value":"1e4f784a849d4b38ac2c6b72e284d6c4","comment":"https://x.com/skocherhan/status/1963095636305227919","timestamp":"1756873446","distribution":"5"},{"uuid":"a1060ceb-8684-533c-a88a-c35ebe235aa4","type":"domain","category":"Network activity","to_ids":true,"value":"support-premium.joviroasters.com","comment":"https://x.com/AddressIntel/status/1963104694433132784","timestamp":"1756875606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a300754e-1c1b-53cb-af92-9f063c2c155e","type":"url","category":"Network activity","to_ids":true,"value":"https://support-premium.joviroasters.com/1/pagopa/log/msdpw","comment":"https://x.com/AddressIntel/status/1963104694433132784","timestamp":"1756875606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e7d326d-78d1-5e66-a89f-6b79e0ff9c15","type":"domain","category":"Network activity","to_ids":true,"value":"zianmbra.weebly.com","comment":"https://x.com/Slvlombardo/status/1963105734888931531","timestamp":"1756875854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ded58be0-c410-5f11-a415-968f4963aeba","type":"url","category":"Network activity","to_ids":true,"value":"https://zianmbra.weebly.com","comment":"https://x.com/Slvlombardo/status/1963105734888931531","timestamp":"1756875854","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c00deb2-7cae-5a93-ab3a-6673e9f72036","type":"url","category":"Network activity","to_ids":true,"value":"https://amazon-i-mod.s3.eu-north-1.amazonaws.com/Invite+Capt+(IN)+Sandip+Kapoor+Presedent+AFWHO.zip","comment":"https://x.com/Cyberteam008/status/1963108119049064805","timestamp":"1756876423","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a6da7980-7073-591b-b185-14857affc18f","type":"md5","category":"Payload delivery","to_ids":true,"value":"f2a71b2719744765ac8a6a49b2acbce6","comment":"https://x.com/Cyberteam008/status/1963108119049064805","timestamp":"1756876423","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ba39c438-2b7c-54bf-94d6-057b0f24c2ea","type":"domain","category":"Network activity","to_ids":true,"value":"amazon-i-mod.s3.eu-north-1.amazonaws.com","comment":"https://x.com/Cyberteam008/status/1963108119049064805","timestamp":"1756876423","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5a22e8f1-fcb0-5c97-b63d-6f3177ed99c5","type":"domain","category":"Network activity","to_ids":true,"value":"africangulf.ly","comment":"https://x.com/urldna_bot/status/1963119805583520006","timestamp":"1756879209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4a08ab4b-7651-5585-8fad-09633b0d2ba6","type":"url","category":"Network activity","to_ids":true,"value":"http://africangulf.ly/account.google.com/login.html","comment":"https://x.com/urldna_bot/status/1963119805583520006","timestamp":"1756879209","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1bc0ecb7-e985-5b44-b8e4-2177a48f52e4","type":"url","category":"Network activity","to_ids":true,"value":"http://212.192.221.76:443","comment":"https://x.com/drb_ra/status/1963131431237865897","timestamp":"1756881981","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d2ce1f86-d590-525e-bfc3-b1244d624774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.192.221.76","comment":"https://x.com/drb_ra/status/1963131431237865897","timestamp":"1756881981","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"82e4a57b-bea4-5c46-8505-0a2d69e18f6f","type":"url","category":"Network activity","to_ids":true,"value":"http://49.234.26.82:443","comment":"https://x.com/drb_ra/status/1963131623492260165","timestamp":"1756882026","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"81b85feb-2edc-5ccd-8bb3-b3bed433bff7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.234.26.82","comment":"https://x.com/drb_ra/status/1963131623492260165","timestamp":"1756882026","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"9d949c34-9027-5882-b967-228d57ef38a1","type":"url","category":"Network activity","to_ids":true,"value":"http://91.199.147.16:31337","comment":"https://x.com/drb_ra/status/1963131807211082024","timestamp":"1756882070","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"98f607f6-13fb-59fe-a18a-4e31d0bad988","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.199.147.16","comment":"https://x.com/drb_ra/status/1963131807211082024","timestamp":"1756882070","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d054b0bf-127f-5428-99b8-58de802838ee","type":"url","category":"Network activity","to_ids":true,"value":"http://23.227.199.53:53262","comment":"https://x.com/drb_ra/status/1963132534260170861","timestamp":"1756882244","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a3f92302-7e83-547c-931e-91bd3726b7d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.227.199.53","comment":"https://x.com/drb_ra/status/1963132534260170861","timestamp":"1756882244","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e5072fea-caf8-519d-8995-cea69003e1b6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.74.123.212","comment":"https://x.com/drb_ra/status/1963132738535383338","timestamp":"1756882292","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d8297352-bf7c-56eb-aeba-c48feccb1c28","type":"url","category":"Network activity","to_ids":true,"value":"http://216.74.123.212:8888","comment":"https://x.com/drb_ra/status/1963132738535383338","timestamp":"1756882292","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0bdd1980-cfe6-5c55-9210-84313b637212","type":"url","category":"Network activity","to_ids":true,"value":"http://191.96.235.185:55555","comment":"https://x.com/drb_ra/status/1963132924682699183","timestamp":"1756882337","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"400a15b3-e5f6-597c-8c61-fc1a02357811","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.96.235.185","comment":"https://x.com/drb_ra/status/1963132924682699183","timestamp":"1756882337","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5687b87e-90f1-5088-af48-4ba468ff6c6c","type":"url","category":"Network activity","to_ids":true,"value":"http://216.250.252.52:2404","comment":"https://x.com/drb_ra/status/1963133117473931288","timestamp":"1756882383","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ed72b40f-d8fc-51ed-8eab-f69660dd5d4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.250.252.52","comment":"https://x.com/drb_ra/status/1963133117473931288","timestamp":"1756882383","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4cd8aee2-9718-5bd7-a512-5b2bc41e9089","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.131.166:2404","comment":"https://x.com/drb_ra/status/1963133304015638992","timestamp":"1756882427","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4b3f7e49-567c-5e3b-bd8a-5fdbe674a373","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.131.166","comment":"https://x.com/drb_ra/status/1963133304015638992","timestamp":"1756882427","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"5ebe6ee6-9b12-5cf2-b4a8-8d85e9be0aba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.67.163.29","comment":"https://x.com/drb_ra/status/1963133485041779101","timestamp":"1756882470","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7bff4b35-0977-5dfe-8b29-9b2172942e99","type":"url","category":"Network activity","to_ids":true,"value":"http://103.67.163.29:2404","comment":"https://x.com/drb_ra/status/1963133485041779101","timestamp":"1756882470","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"59e27282-8c4b-589a-ad3e-9ae553432712","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.173.65.45","comment":"https://x.com/drb_ra/status/1963133678244057564","timestamp":"1756882516","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dc9ab4ab-7cab-56e4-8da7-cbd8eaeabf20","type":"url","category":"Network activity","to_ids":true,"value":"http://216.173.65.45:2404","comment":"https://x.com/drb_ra/status/1963133678244057564","timestamp":"1756882516","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7c809e13-7258-5591-950e-9ef21e01cbad","type":"url","category":"Network activity","to_ids":true,"value":"http://34.222.42.128:6006","comment":"https://x.com/drb_ra/status/1963133887359627720","timestamp":"1756882566","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"82193b73-d3a9-5c9d-90dc-4591592ab693","type":"url","category":"Network activity","to_ids":true,"value":"http://34.222.42.128:3306","comment":"https://x.com/drb_ra/status/1963134115357638920","timestamp":"1756882621","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"7a738922-6e99-5617-bf42-72dff4de6650","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.222.42.128","comment":"https://x.com/drb_ra/status/1963134115357638920","timestamp":"1756882621","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"e91fbf2b-0899-5fe6-a515-448e00e2fd5c","type":"url","category":"Network activity","to_ids":true,"value":"http://157.254.165.140:22532","comment":"https://x.com/drb_ra/status/1963134344173686798","timestamp":"1756882675","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8414eee2-a86c-5404-b528-409ea66dfef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"157.254.165.140","comment":"https://x.com/drb_ra/status/1963134344173686798","timestamp":"1756882675","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"652c30db-26a7-56fe-a9f4-84dbb0ecb9d4","type":"url","category":"Network activity","to_ids":true,"value":"http://217.160.241.22:1231","comment":"https://x.com/drb_ra/status/1963134545600897532","timestamp":"1756882723","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"99515e02-578d-5aec-8c03-66e7f7d5c9cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.160.241.22","comment":"https://x.com/drb_ra/status/1963134545600897532","timestamp":"1756882723","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"76a711bb-4c34-5a78-abc9-26a5db040c21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.139","comment":"https://x.com/drb_ra/status/1963134748286476334","timestamp":"1756882771","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"ce9ab3b0-e242-50a0-9d18-fd44827c18ec","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.139:8808","comment":"https://x.com/drb_ra/status/1963134748286476334","timestamp":"1756882771","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0c8bae51-54b6-549d-81b0-ef028eda03b5","type":"url","category":"Network activity","to_ids":true,"value":"http://5.249.165.108:42422","comment":"https://x.com/drb_ra/status/1963134938611355925","timestamp":"1756882817","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"5c1d7020-bf7c-50cf-ad88-aab19baaa28d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.199.98.37","comment":"https://x.com/drb_ra/status/1963135134812545179","timestamp":"1756882864","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0b831fe7-d10f-5125-a6dc-87f9b28c3c64","type":"url","category":"Network activity","to_ids":true,"value":"http://109.199.98.37:8888","comment":"https://x.com/drb_ra/status/1963135134812545179","timestamp":"1756882864","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"41478829-46fc-5584-999a-8c9c4ce8dc10","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.180.17:80","comment":"https://x.com/drb_ra/status/1963135334973374522","timestamp":"1756882911","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"86bd271b-1fe1-5b3c-aa0f-136752e9ac41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.180.17","comment":"https://x.com/drb_ra/status/1963135334973374522","timestamp":"1756882911","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f5a79f04-8309-5848-92f5-b5e7d2c22e2b","type":"url","category":"Network activity","to_ids":true,"value":"http://69.164.203.75:587","comment":"https://x.com/drb_ra/status/1963135525532913675","timestamp":"1756882957","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"04db2180-42ff-57cc-913c-7c1a7fc0e42f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.164.203.75","comment":"https://x.com/drb_ra/status/1963135525532913675","timestamp":"1756882957","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"72c384e3-f347-5a2e-b42a-f1bc351107b2","type":"url","category":"Network activity","to_ids":true,"value":"http://52.22.220.69:80","comment":"https://x.com/drb_ra/status/1963135721558139284","timestamp":"1756883003","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9d6ef980-4880-5e9f-9359-92402d0b9ed5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.22.220.69","comment":"https://x.com/drb_ra/status/1963135721558139284","timestamp":"1756883003","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"97c92854-bbdc-5b9f-9ce5-7e9f89676cff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.190.121.152","comment":"https://x.com/drb_ra/status/1963135911597642106","timestamp":"1756883049","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a0f0f7f4-f734-5415-b0d0-52abb4ba8dc4","type":"url","category":"Network activity","to_ids":true,"value":"http://146.190.121.152:587","comment":"https://x.com/drb_ra/status/1963135911597642106","timestamp":"1756883049","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7f37f8c4-0da7-59b3-982f-9eff5f9f935f","type":"url","category":"Network activity","to_ids":true,"value":"http://44.244.53.143:80","comment":"https://x.com/drb_ra/status/1963136105546440839","timestamp":"1756883095","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9c64a514-5abe-5327-b39e-aaac93652a06","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.244.53.143","comment":"https://x.com/drb_ra/status/1963136105546440839","timestamp":"1756883095","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f266a1bc-0021-5143-8383-73cc2dea5ffa","type":"url","category":"Network activity","to_ids":true,"value":"http://103.241.74.160:8888","comment":"https://x.com/drb_ra/status/1963136299184922714","timestamp":"1756883141","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"54a9c25d-bb62-5db8-a031-4b2c90a0d6dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.241.74.160","comment":"https://x.com/drb_ra/status/1963136299184922714","timestamp":"1756883141","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"e6dcf6a7-fcb5-5fb5-9124-bad4c451c2ca","type":"url","category":"Network activity","to_ids":true,"value":"http://23.27.52.175:9898","comment":"https://x.com/drb_ra/status/1963136499073056776","timestamp":"1756883189","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"afc415e0-e6b5-58c8-9864-06cbe8fb2a53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.27.52.175","comment":"https://x.com/drb_ra/status/1963136499073056776","timestamp":"1756883189","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"d1df5896-f66c-5f26-8546-e132cabe68e3","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.20:3000","comment":"https://x.com/drb_ra/status/1963136707538166200","timestamp":"1756883239","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"aba09c91-6c9d-5661-b24b-2b3720115cb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.6.20","comment":"https://x.com/drb_ra/status/1963136707538166200","timestamp":"1756883239","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"0dd1fb89-1cf8-5852-8362-95b2cb904456","type":"url","category":"Network activity","to_ids":true,"value":"http://24.158.33.41:443","comment":"https://x.com/drb_ra/status/1963136900119564561","timestamp":"1756883284","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"d115d36e-548b-5448-aa5e-52253a6cc019","type":"ip-dst","category":"Network activity","to_ids":true,"value":"24.158.33.41","comment":"https://x.com/drb_ra/status/1963136900119564561","timestamp":"1756883284","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"3742f476-4b82-52c5-ae91-90c6c9b81ddb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.244.111.160","comment":"https://x.com/drb_ra/status/1963137080026169506","timestamp":"1756883327","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f03b1887-2d4a-51bb-a45e-71101ac3d18c","type":"url","category":"Network activity","to_ids":true,"value":"http://44.244.111.160:80","comment":"https://x.com/drb_ra/status/1963137080026169506","timestamp":"1756883327","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1f659245-35f3-5c59-9808-1939cdb8ced4","type":"domain","category":"Network activity","to_ids":true,"value":"24cf.netlify.app","comment":"https://x.com/JAMESWT_WT/status/1963137325577412767","timestamp":"1756883386","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f28b72b9-2049-5f25-943e-55cc5b146760","type":"url","category":"Network activity","to_ids":true,"value":"https://24cf.netlify.app/nem-metahelpcenter.com","comment":"https://x.com/JAMESWT_WT/status/1963137325577412767","timestamp":"1756883386","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a9cd62e6-456b-5426-8b6b-211ecac642e7","type":"domain","category":"Network activity","to_ids":true,"value":"242135-google.com","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"62034116-2224-5314-b886-a833ed885422","type":"url","category":"Network activity","to_ids":true,"value":"http://242135-google.com","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8789758c-1377-532f-b005-34c43e5c3a49","type":"domain","category":"Network activity","to_ids":true,"value":"telegram-verif.org","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"365b6e45-9d4e-5e17-a72d-06f0bfc96b15","type":"url","category":"Network activity","to_ids":true,"value":"http://telegram-verif.org","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"32c0239b-dc0c-58c1-875a-28b1a6008d58","type":"domain","category":"Network activity","to_ids":true,"value":"paypal-de.bid","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"88de60c9-60e4-5513-8098-8efb2e724c82","type":"url","category":"Network activity","to_ids":true,"value":"http://paypal-de.bid","comment":"https://x.com/c9lab_soc/status/1963165628375650576","timestamp":"1756890134","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e6bb5b99-5587-55ae-8614-edfe669e44fb","type":"domain","category":"Network activity","to_ids":true,"value":"seragoonupdates.com","comment":"https://x.com/suyog41/status/1963171056044109898","timestamp":"1756891428","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5d4950b0-c433-51e0-b81f-77e9ad2dffad","type":"url","category":"Network activity","to_ids":true,"value":"http://seragoonupdates.com","comment":"https://x.com/suyog41/status/1963171056044109898","timestamp":"1756891428","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ab2dbc8c-d0eb-5e89-8117-6f4c6c6f4c5f","type":"md5","category":"Payload delivery","to_ids":true,"value":"fdaedfc467b38a0564423822eed8936e","comment":"https://x.com/suyog41/status/1963171056044109898","timestamp":"1756891428","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"e5dab03c-27ee-573d-a6e1-d34d2d5f6950","type":"domain","category":"Network activity","to_ids":true,"value":"adultior.vflspcf.cn","comment":"https://x.com/masaomi346/status/1963175164755010000","timestamp":"1756892407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"27de8a89-9c4f-5bc4-8730-74ecfb5ad954","type":"url","category":"Network activity","to_ids":true,"value":"https://adultior.vflspcf.cn/customer/announcement/","comment":"https://x.com/masaomi346/status/1963175164755010000","timestamp":"1756892407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f04228d0-6a0b-5bdd-9124-0e9451ba1082","type":"domain","category":"Network activity","to_ids":true,"value":"5140390597.cyou","comment":"https://x.com/luc4m/status/1963175434696196606","timestamp":"1756892472","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00d6a869-6cb5-594f-924f-61dfc0b460d3","type":"url","category":"Network activity","to_ids":true,"value":"https://5140390597.cyou/helen.php","comment":"https://x.com/luc4m/status/1963175434696196606","timestamp":"1756892472","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b9a6152-8612-50d9-b92a-8b0cb1930bd9","type":"domain","category":"Network activity","to_ids":true,"value":"gemjadl.weebly.com","comment":"https://x.com/urldna_bot/status/1963180205842825418","timestamp":"1756893609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e3aa6476-a7b0-55cd-9412-cbe4a44f9745","type":"url","category":"Network activity","to_ids":true,"value":"https://gemjadl.weebly.com","comment":"https://x.com/urldna_bot/status/1963180205842825418","timestamp":"1756893609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3b8dbbac-eefa-544d-bc4b-3d64cc9d46dd","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.83.209:5085","comment":"https://x.com/SarlackLab/status/1963180240374489209","timestamp":"1756893618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"8ef74cff-8a55-500f-a646-7fda363b599d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.83.209","comment":"https://x.com/SarlackLab/status/1963180240374489209","timestamp":"1756893618","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"ad562563-2be8-5f95-8b23-3ee431bbba22","type":"md5","category":"Payload delivery","to_ids":true,"value":"ae2e692ecfaa7a518af0277656102063","comment":"https://x.com/suyog41/status/1963180830169219491","timestamp":"1756893758","distribution":"5"},{"uuid":"fa6ca2d1-8e14-5b1a-813a-d4d245392ac3","type":"md5","category":"Payload delivery","to_ids":true,"value":"acfbea47a3f9b36c335e897013f4917a","comment":"https://x.com/suyog41/status/1963180830169219491","timestamp":"1756893758","distribution":"5"},{"uuid":"64747ced-be29-5a78-a1ce-5cbbf453d250","type":"md5","category":"Payload delivery","to_ids":true,"value":"1db666a7a0cc9c217aaef1ac76564006","comment":"https://x.com/suyog41/status/1963180830169219491","timestamp":"1756893758","distribution":"5"},{"uuid":"d492a138-ca71-5f0d-8247-672975053a81","type":"md5","category":"Payload delivery","to_ids":true,"value":"38b54e651f4c54eb416f8b22e3abe13a","comment":"https://x.com/suyog41/status/1963180830169219491","timestamp":"1756893758","distribution":"5"},{"uuid":"cf239900-0827-5b51-8319-6fd480972ef3","type":"md5","category":"Payload delivery","to_ids":true,"value":"dea29821749bf0fe192849f67bfccaba","comment":"https://x.com/suyog41/status/1963180830169219491","timestamp":"1756893758","distribution":"5"},{"uuid":"dd4a2f3b-e4f7-50db-bc8b-a600bb03468b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.212.166.160","comment":"https://x.com/ShanHolo/status/1963186646729572570","timestamp":"1756895145","distribution":"5","Tag":[{"name":"malware"},{"name":"Lumma"}]},{"uuid":"c3558102-ee42-58a7-9bb1-1228cc53ff3e","type":"md5","category":"Payload delivery","to_ids":true,"value":"f00664cbee10be36a54af91146e165bc","comment":"https://x.com/ShanHolo/status/1963186646729572570","timestamp":"1756895145","distribution":"5","Tag":[{"name":"malware"},{"name":"Lumma"}]},{"uuid":"80715d6c-8d5a-59d4-9e31-6d8043dcca7a","type":"domain","category":"Network activity","to_ids":true,"value":"starmanx.org","comment":"https://x.com/JAMESWT_WT/status/1963188733127057785","timestamp":"1756895642","distribution":"5"},{"uuid":"c0191d64-b683-55a3-a532-fb3a64dc93fe","type":"url","category":"Network activity","to_ids":true,"value":"http://starmanx.org/comer.bat","comment":"https://x.com/JAMESWT_WT/status/1963188733127057785","timestamp":"1756895642","distribution":"5"},{"uuid":"180aff90-7dc0-5ef7-9e70-5ca68d21634c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"61ec38741f1b45c5e797ab56bedc01f63fb089d1946f978a1ba735602e2cb455","comment":"https://x.com/JAMESWT_WT/status/1963188733127057785","timestamp":"1756895642","distribution":"5"},{"uuid":"98940b48-75b4-5917-838f-1098e7f04784","type":"domain","category":"Network activity","to_ids":true,"value":"techtoolslab.com","comment":"https://x.com/illegalFawn/status/1963190317655400732","timestamp":"1756896020","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"14f446ea-de06-5ad0-8930-e1f15c91ab99","type":"url","category":"Network activity","to_ids":true,"value":"https://techtoolslab.com","comment":"https://x.com/illegalFawn/status/1963190317655400732","timestamp":"1756896020","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c72fa27f-1c20-599e-9ba6-bdba1fa9b5e2","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.254.233:80","comment":"https://x.com/drb_ra/status/1963192512438579212","timestamp":"1756896543","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a78641d9-d8a0-5242-8394-711547e78936","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.254.233","comment":"https://x.com/drb_ra/status/1963192512438579212","timestamp":"1756896543","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8c1c33b3-c6b3-5779-b261-1b73a2e51b0f","type":"url","category":"Network activity","to_ids":true,"value":"http://85.175.101.203:80","comment":"https://x.com/drb_ra/status/1963192854408208608","timestamp":"1756896625","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1c66f9fe-07e6-5421-a218-4e88ba8375d6","type":"url","category":"Network activity","to_ids":true,"value":"http://1.54.147.49:4444","comment":"https://x.com/drb_ra/status/1963193149502750801","timestamp":"1756896695","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"59a65b3c-98b7-5d99-bb1a-068bb2fb5d7d","type":"url","category":"Network activity","to_ids":true,"value":"http://123.249.33.60:8888","comment":"https://x.com/drb_ra/status/1963193472740958266","timestamp":"1756896772","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"09b77334-6bf7-5397-b4f0-945564511fde","type":"ip-dst","category":"Network activity","to_ids":true,"value":"123.249.33.60","comment":"https://x.com/drb_ra/status/1963193472740958266","timestamp":"1756896772","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cf851fc8-3a64-538a-9041-0b353d0a66f5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.205.151.171:4443","comment":"https://x.com/drb_ra/status/1963194339682553919","timestamp":"1756896979","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f8539f09-9060-502a-99f8-4d94e7e1a161","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.205.151.171","comment":"https://x.com/drb_ra/status/1963194339682553919","timestamp":"1756896979","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3789da50-8c94-5d6a-8dd5-7f9a80872d0c","type":"domain","category":"Network activity","to_ids":true,"value":"skynet-i.asuscomm.com","comment":"https://x.com/drb_ra/status/1963194709087543778","timestamp":"1756897067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78d4aef6-eb14-56ed-9d55-d535ed7e5cb5","type":"url","category":"Network activity","to_ids":true,"value":"https://skynet-i.asuscomm.com/zOMGAPT","comment":"https://x.com/drb_ra/status/1963194709087543778","timestamp":"1756897067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f6acdf88-10c7-5abb-a778-21749b1f7efa","type":"url","category":"Network activity","to_ids":true,"value":"http://85.175.101.203:443","comment":"https://x.com/drb_ra/status/1963194709087543778","timestamp":"1756897067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"548b4b06-9208-545d-a467-0080fba9b6f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.175.101.203","comment":"https://x.com/drb_ra/status/1963194709087543778","timestamp":"1756897067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4bc38984-9d56-5642-a720-7c575a515f28","type":"url","category":"Network activity","to_ids":true,"value":"http://107.148.52.35:80","comment":"https://x.com/drb_ra/status/1963195026462085161","timestamp":"1756897143","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"afb91953-9047-529c-8f4d-e256fe1bea6b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.148.52.35","comment":"https://x.com/drb_ra/status/1963195026462085161","timestamp":"1756897143","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"343b3ccb-99b2-5a96-b3c9-2e7e0041ca4b","type":"url","category":"Network activity","to_ids":true,"value":"http://43.100.27.141:443","comment":"https://x.com/drb_ra/status/1963195376950800749","timestamp":"1756897226","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eec59d82-acbd-5da0-bf08-5c887fe54ca6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.100.27.141","comment":"https://x.com/drb_ra/status/1963195376950800749","timestamp":"1756897226","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0f03bf77-af7f-53be-9a8d-177e1147da9b","type":"domain","category":"Network activity","to_ids":true,"value":"invesct.com","comment":"https://x.com/JAMESWT_WT/status/1963195605670302203","timestamp":"1756897281","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"ccc82e23-8e40-57fd-830e-b40d89bcdf89","type":"url","category":"Network activity","to_ids":true,"value":"https://invesct.com/?f=Cloudflare%2BInvest","comment":"https://x.com/JAMESWT_WT/status/1963195605670302203","timestamp":"1756897281","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"05866e4a-fd53-5b96-9ce6-1c5c25969c71","type":"domain","category":"Network activity","to_ids":true,"value":"b.globalsmartfinance.com","comment":"https://x.com/JAMESWT_WT/status/1963195605670302203","timestamp":"1756897281","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"0433e4e2-87c8-5683-8b45-4b532a83860c","type":"url","category":"Network activity","to_ids":true,"value":"https://b.globalsmartfinance.com/a/en/?f=Cloudflare+Invest","comment":"https://x.com/JAMESWT_WT/status/1963195605670302203","timestamp":"1756897281","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"013d3776-46f6-5899-8f9f-c9a02a6731fb","type":"url","category":"Network activity","to_ids":true,"value":"http://121.89.84.19:888","comment":"https://x.com/drb_ra/status/1963196206072365339","timestamp":"1756897424","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ba1f1f51-0fcc-5354-8912-5c2a7fbfbcb5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.89.84.19","comment":"https://x.com/drb_ra/status/1963196206072365339","timestamp":"1756897424","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ac58ac9b-c215-5fff-bd69-5697e431f394","type":"domain","category":"Network activity","to_ids":true,"value":"ethiopialocal.site","comment":"https://x.com/drb_ra/status/1963196527142117574","timestamp":"1756897501","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"98b7703d-eff6-557d-9aed-155f8022e297","type":"url","category":"Network activity","to_ids":true,"value":"https://ethiopialocal.site/jquery/2.0.1/jquery","comment":"https://x.com/drb_ra/status/1963196527142117574","timestamp":"1756897501","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4adea14c-17df-56f0-9d61-7073f03b609f","type":"url","category":"Network activity","to_ids":true,"value":"http://193.187.132.175:443","comment":"https://x.com/drb_ra/status/1963196527142117574","timestamp":"1756897501","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0fbbeda5-d5bd-5949-9ade-0bd8f87cc98f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.187.132.175","comment":"https://x.com/drb_ra/status/1963196527142117574","timestamp":"1756897501","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ea0a9c7d-f221-50ac-84bb-4ab62c9d7928","type":"url","category":"Network activity","to_ids":true,"value":"http://47.116.34.55:9000","comment":"https://x.com/drb_ra/status/1963196871880401136","timestamp":"1756897583","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"17e295f3-ba2d-52ba-ad9d-b1c313861ae7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.116.34.55","comment":"https://x.com/drb_ra/status/1963196871880401136","timestamp":"1756897583","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f60ac665-63de-536b-b641-43d9e1e7a44c","type":"url","category":"Network activity","to_ids":true,"value":"https://121.43.37.134/updates.rss","comment":"https://x.com/drb_ra/status/1963197235371397529","timestamp":"1756897670","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"98bbd85d-d978-547a-8fa0-eae4e7ff87f2","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.37.134:4434","comment":"https://x.com/drb_ra/status/1963197235371397529","timestamp":"1756897670","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"269ff237-f0a9-51af-8e89-1eced7412ed8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.37.134","comment":"https://x.com/drb_ra/status/1963197235371397529","timestamp":"1756897670","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a668a4db-f4bc-57be-8430-2cda90bb2abd","type":"domain","category":"Network activity","to_ids":true,"value":"doggoclaim.web.app","comment":"https://x.com/urldna_bot/status/1963210407801209051","timestamp":"1756900810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"14ac431b-5ea3-5a49-bc9b-4a53ef969f4b","type":"url","category":"Network activity","to_ids":true,"value":"https://doggoclaim.web.app","comment":"https://x.com/urldna_bot/status/1963210407801209051","timestamp":"1756900810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0965d31a-93c9-5db8-ad82-fc7a3d025452","type":"url","category":"Network activity","to_ids":true,"value":"https://gitlab.com/mrw-b2","comment":"https://x.com/suyog41/status/1963228907294835079","timestamp":"1756905221","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"1ad59786-2d4f-5cf4-8c76-cbf99b0275c8","type":"md5","category":"Payload delivery","to_ids":true,"value":"1207d9a23c8e2aadb4008db2c2b68795","comment":"https://x.com/suyog41/status/1963228907294835079","timestamp":"1756905221","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"31a54bed-082d-59d0-8099-7eef03c12678","type":"domain","category":"Network activity","to_ids":true,"value":"w-insp-upmc-fr.weebly.com","comment":"https://x.com/urldna_bot/status/1963240603530953101","timestamp":"1756908009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"89b9daaf-53ae-5bab-b84b-eef4fc5693d3","type":"url","category":"Network activity","to_ids":true,"value":"https://w-insp-upmc-fr.weebly.com","comment":"https://x.com/urldna_bot/status/1963240603530953101","timestamp":"1756908009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4ecac26c-51db-5675-9898-4eab75997586","type":"domain","category":"Network activity","to_ids":true,"value":"splendidfinancial.xyz","comment":"https://x.com/skocherhan/status/1963241726832718125","timestamp":"1756908277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fafd665d-7b1f-5015-8eff-661820746e11","type":"url","category":"Network activity","to_ids":true,"value":"http://splendidfinancial.xyz","comment":"https://x.com/skocherhan/status/1963241726832718125","timestamp":"1756908277","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b467f537-2b2f-5537-a846-360bd10d5eca","type":"domain","category":"Network activity","to_ids":true,"value":"fjdcteh.cn","comment":"https://x.com/harugasumi/status/1963247005074956555","timestamp":"1756909536","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e31f99f0-816d-5182-99f7-475d912ffe44","type":"url","category":"Network activity","to_ids":true,"value":"http://fjdcteh.cn","comment":"https://x.com/harugasumi/status/1963247005074956555","timestamp":"1756909536","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"44268c2c-4111-5bea-a70a-d054cc72fca2","type":"domain","category":"Network activity","to_ids":true,"value":"resona-reasely.mhkguao.cn","comment":"https://x.com/harugasumi/status/1963247005074956555","timestamp":"1756909536","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"08e60bec-1c38-5c10-8cd1-e5fe43b10a59","type":"url","category":"Network activity","to_ids":true,"value":"https://resona-reasely.mhkguao.cn/welcomeSCR.do","comment":"https://x.com/harugasumi/status/1963247005074956555","timestamp":"1756909536","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1e7fc012-7b9f-5927-907a-61a4408b0a97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.6.96.189","comment":"https://x.com/harugasumi/status/1963247005074956555","timestamp":"1756909536","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c91da28-ad05-50a8-bdc5-51163c55d8bd","type":"domain","category":"Network activity","to_ids":true,"value":"venus-protocol-interface-gupd1px1-poyaku.4everland.app","comment":"https://x.com/Marcus_R_crypto/status/1963250285029052788","timestamp":"1756910318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e9294687-1bb6-586d-ba66-cd6593e5b831","type":"url","category":"Network activity","to_ids":true,"value":"http://venus-protocol-interface-gupd1px1-poyaku.4everland.app","comment":"https://x.com/Marcus_R_crypto/status/1963250285029052788","timestamp":"1756910318","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53d58fb4-6e4c-556e-9d08-0c46e1e40784","type":"url","category":"Network activity","to_ids":true,"value":"http://120.77.206.185:8081","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"71f63d1a-c192-54e8-83fc-8c42a614c12c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.59.110:28443","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"bbaa38ca-3880-5db2-9e32-65d10a6ea2c9","type":"url","category":"Network activity","to_ids":true,"value":"http://77.83.240.93","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"3e9b4730-a3a7-51e9-97c1-9ab22081a5f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.77.206.185","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"eceed745-6710-528f-a410-11a781af7656","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.59.110","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"cc8fb0e5-5e85-55a9-a574-8a84d79cf16c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.83.240.93","comment":"https://x.com/FalconFeedsio/status/1963254484802433256","timestamp":"1756911319","distribution":"5"},{"uuid":"424f82f8-7e60-5814-8855-ed8ec94653f4","type":"url","category":"Network activity","to_ids":true,"value":"http://167.94.81.68:1912","comment":"https://x.com/SarlackLab/status/1963255774458622301","timestamp":"1756911626","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"026e35c8-bf89-5f1e-97d6-e6656ba312d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.94.81.68","comment":"https://x.com/SarlackLab/status/1963255774458622301","timestamp":"1756911626","distribution":"5","Tag":[{"name":"C2"},{"name":"RedLine"}]},{"uuid":"327fd631-119a-542c-8246-0ab590b9713b","type":"domain","category":"Network activity","to_ids":true,"value":"pdf-protecteddocument392025wreiuh78359zwaetfidocs468ct984dgyfe.s3-bkk.nipa.cloud","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8da67702-201a-56c3-9341-1a5372c4f237","type":"url","category":"Network activity","to_ids":true,"value":"https://pdf-protecteddocument392025wreiuh78359zwaetfidocs468ct984dgyfe.s3-bkk.nipa.cloud/pdf.html","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"046b9907-a4aa-5187-95bb-e82668d71dd0","type":"domain","category":"Network activity","to_ids":true,"value":"dubas.sk","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ec91d9a-ba0a-57af-8fad-f2f49ef4d2a3","type":"url","category":"Network activity","to_ids":true,"value":"https://dubas.sk/asset/photos/galleries/hope/preview/mic/","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f668058-5109-5ff0-93a7-b91cbfc019dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"202.94.168.110","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8b340c95-7f66-5e0e-bef6-8a158031f14e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.21.124.23","comment":"https://x.com/yvesago/status/1963256230668886069","timestamp":"1756911735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbe17b3-a58a-5b7e-b16d-401c8a9a6e46","type":"domain","category":"Network activity","to_ids":true,"value":"867599.com","comment":"https://x.com/harugasumi/status/1963262030095495306","timestamp":"1756913118","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"906e8b20-b8ad-5e18-a2f0-15c4102f99bc","type":"url","category":"Network activity","to_ids":true,"value":"https://867599.com/line-me","comment":"https://x.com/harugasumi/status/1963262030095495306","timestamp":"1756913118","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bac3199-d7e4-515b-97f0-7435e4661a26","type":"domain","category":"Network activity","to_ids":true,"value":"jellybabiesnft.web.app","comment":"https://x.com/urldna_bot/status/1963270803354513529","timestamp":"1756915209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"32f737f2-f6d4-57c1-accd-eb963ba05dec","type":"url","category":"Network activity","to_ids":true,"value":"https://jellybabiesnft.web.app","comment":"https://x.com/urldna_bot/status/1963270803354513529","timestamp":"1756915209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"36f3b6d5-0b0c-59eb-bd06-c1424ce3a06d","type":"domain","category":"Network activity","to_ids":true,"value":"8t876897678.weebly.com","comment":"https://x.com/urldna_bot/status/1963301005698723940","timestamp":"1756922410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a0c0a73b-904d-5547-976e-8ec5e547cbf9","type":"url","category":"Network activity","to_ids":true,"value":"https://8t876897678.weebly.com","comment":"https://x.com/urldna_bot/status/1963301005698723940","timestamp":"1756922410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"06ec40e7-2281-510a-af42-82da670e2c8a","type":"domain","category":"Network activity","to_ids":true,"value":"wugurgyscp5rxpihef5vl6b6m5ont3b6sezhl7boboso2enib2k3q6qd.onion","comment":"https://x.com/club31337/status/1963304169403453598","timestamp":"1756923165","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f2ecfc2a-1114-530c-aa97-b905c6ce4160","type":"url","category":"Network activity","to_ids":true,"value":"http://wugurgyscp5rxpihef5vl6b6m5ont3b6sezhl7boboso2enib2k3q6qd.onion","comment":"https://x.com/club31337/status/1963304169403453598","timestamp":"1756923165","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"7d554060-4ff1-59fa-bb49-883222bb2910","type":"url","category":"Network activity","to_ids":true,"value":"http://143.244.138.159:80","comment":"https://x.com/drb_ra/status/1963312712412434721","timestamp":"1756925201","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f622a800-af8d-5571-ae81-64c9470da98e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.244.138.159","comment":"https://x.com/drb_ra/status/1963312712412434721","timestamp":"1756925201","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"47d0ade2-4984-5259-b23e-7f076efb6a70","type":"url","category":"Network activity","to_ids":true,"value":"http://191.96.235.185:80","comment":"https://x.com/drb_ra/status/1963312914439319901","timestamp":"1756925250","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ed506049-fc3c-59f4-b3e9-f60c9998f891","type":"url","category":"Network activity","to_ids":true,"value":"http://191.96.235.185:443","comment":"https://x.com/drb_ra/status/1963313128319455240","timestamp":"1756925301","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5d27f87c-469d-5215-892a-e40290c3598f","type":"url","category":"Network activity","to_ids":true,"value":"http://107.174.180.190:443","comment":"https://x.com/drb_ra/status/1963313363712417963","timestamp":"1756925357","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6d2e77e2-fff3-5ae7-b477-29707def6074","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.174.180.190","comment":"https://x.com/drb_ra/status/1963313363712417963","timestamp":"1756925357","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"e75be784-420d-5f40-aeee-d3e9bf28fabd","type":"url","category":"Network activity","to_ids":true,"value":"http://104.140.154.233:30223","comment":"https://x.com/drb_ra/status/1963313604544880821","timestamp":"1756925414","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"130f80af-f192-562c-b9c3-9cec1b14b4d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.140.154.233","comment":"https://x.com/drb_ra/status/1963313604544880821","timestamp":"1756925414","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"52e53b75-6f2d-56b7-89f7-ebae81f34298","type":"url","category":"Network activity","to_ids":true,"value":"http://104.140.154.219:30219","comment":"https://x.com/drb_ra/status/1963313805620122048","timestamp":"1756925462","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"62654101-1cdc-53c0-9e85-d6bbf4cd1a04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.140.154.219","comment":"https://x.com/drb_ra/status/1963313805620122048","timestamp":"1756925462","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"b4631290-962d-568d-8a38-11ec61ba47e2","type":"url","category":"Network activity","to_ids":true,"value":"http://103.118.254.189:7443","comment":"https://x.com/drb_ra/status/1963314059237101927","timestamp":"1756925522","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"a52187b0-f110-5bfe-ba17-ac5b341dc92c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.118.254.189","comment":"https://x.com/drb_ra/status/1963314059237101927","timestamp":"1756925522","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"49f31caf-16ef-5c0b-87bb-7a01c47562e8","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.59.68:20000","comment":"https://x.com/drb_ra/status/1963314292805239037","timestamp":"1756925578","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c485271d-510e-5a6a-b646-5ca050823446","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.59.68","comment":"https://x.com/drb_ra/status/1963314292805239037","timestamp":"1756925578","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"54690fa9-b993-5668-9e3b-7321db75a066","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.239.185:443","comment":"https://x.com/drb_ra/status/1963314506895167615","timestamp":"1756925629","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b547108b-860b-5a7b-8815-e75f62777ece","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.239.185","comment":"https://x.com/drb_ra/status/1963314506895167615","timestamp":"1756925629","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2f91a51d-422e-545b-bc3b-8d5c9d494ef5","type":"url","category":"Network activity","to_ids":true,"value":"http://159.255.36.142:8888","comment":"https://x.com/drb_ra/status/1963314709743968555","timestamp":"1756925678","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"4100b326-19bf-5430-8ee5-c122de93214d","type":"url","category":"Network activity","to_ids":true,"value":"http://159.255.36.142:31337","comment":"https://x.com/drb_ra/status/1963314933862391946","timestamp":"1756925731","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f3f158c7-c20d-501d-acc4-fc6ce1c44ac9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.255.36.142","comment":"https://x.com/drb_ra/status/1963314933862391946","timestamp":"1756925731","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"736126d2-1f6e-54a1-8c8f-d0ff7011b9b1","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.89.51:443","comment":"https://x.com/drb_ra/status/1963315682025537567","timestamp":"1756925909","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d48acf7d-d671-5f20-8e52-8ccce0d94259","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.89.51","comment":"https://x.com/drb_ra/status/1963315682025537567","timestamp":"1756925909","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"19483ec9-f7d8-52a3-999f-5d45725feffc","type":"url","category":"Network activity","to_ids":true,"value":"http://2.59.134.223:11601","comment":"https://x.com/drb_ra/status/1963315921289973897","timestamp":"1756925966","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f77336f0-c55f-57fa-885f-9042655db0fd","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.211:2404","comment":"https://x.com/drb_ra/status/1963316166262186241","timestamp":"1756926025","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"08868567-6036-5995-9c7d-c1faf2a0f2e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.211","comment":"https://x.com/drb_ra/status/1963316166262186241","timestamp":"1756926025","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ac376f3f-10eb-5aee-9ec8-304c4b2a1027","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.132.198:3000","comment":"https://x.com/drb_ra/status/1963316399826501728","timestamp":"1756926081","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3cb084ec-1807-5c58-9812-30fdf015c455","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.132.198","comment":"https://x.com/drb_ra/status/1963316399826501728","timestamp":"1756926081","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"98754f38-b862-545e-9406-8c1b81039f0c","type":"url","category":"Network activity","to_ids":true,"value":"http://27.147.169.101:8080","comment":"https://x.com/drb_ra/status/1963316603354747302","timestamp":"1756926129","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"12102a57-c39e-5238-99b6-7ad1356a05e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.147.169.101","comment":"https://x.com/drb_ra/status/1963316603354747302","timestamp":"1756926129","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"ef38c191-9614-513a-8d58-7234347390d0","type":"url","category":"Network activity","to_ids":true,"value":"http://93.143.190.76:8080","comment":"https://x.com/drb_ra/status/1963316846683447796","timestamp":"1756926187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5f819a1e-f454-5dd1-8496-c4c9782be42e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.143.190.76","comment":"https://x.com/drb_ra/status/1963316846683447796","timestamp":"1756926187","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e121b67d-ee73-5c7e-a6f3-68dc1f622af9","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.58.77:42932","comment":"https://x.com/drb_ra/status/1963317081014956279","timestamp":"1756926243","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"c72dd5f0-69f9-5b8f-bcd5-d17ab8b34cbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.58.77","comment":"https://x.com/drb_ra/status/1963317081014956279","timestamp":"1756926243","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"048494b3-23d5-54db-bc52-e64e48622f25","type":"url","category":"Network activity","to_ids":true,"value":"http://52.17.47.98:81","comment":"https://x.com/drb_ra/status/1963317285646721518","timestamp":"1756926292","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5792d11a-857e-5bf7-946d-ddaf7944c302","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.17.47.98","comment":"https://x.com/drb_ra/status/1963317285646721518","timestamp":"1756926292","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9dfa55b1-e211-5b75-b0f5-3e04a540d37a","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.12.12:7087","comment":"https://x.com/drb_ra/status/1963317491796672778","timestamp":"1756926341","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b49810f8-733a-567c-86d7-6de2035da48e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.12.12","comment":"https://x.com/drb_ra/status/1963317491796672778","timestamp":"1756926341","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6ffd7af9-10ca-5dcc-b2ff-27df2f57ca4d","type":"url","category":"Network activity","to_ids":true,"value":"http://143.244.40.20:8808","comment":"https://x.com/drb_ra/status/1963317723087475113","timestamp":"1756926396","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"93ff839d-8366-5a6e-a71c-843eef70c4e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.244.40.20","comment":"https://x.com/drb_ra/status/1963317723087475113","timestamp":"1756926396","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"96f8b966-b1e4-5bc4-91d3-65b6d95b8c57","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.94.25:80","comment":"https://x.com/drb_ra/status/1963317944076648587","timestamp":"1756926449","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"da9a8437-d042-5f6e-bcb0-58e7ef9225bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.94.25","comment":"https://x.com/drb_ra/status/1963317944076648587","timestamp":"1756926449","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"e98e2ede-ba5c-5f3b-818f-a7ea50129827","type":"url","category":"Network activity","to_ids":true,"value":"http://47.101.175.133:443","comment":"https://x.com/drb_ra/status/1963318163514560781","timestamp":"1756926501","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b6dd4ca0-9fd7-52aa-a1a2-c2726b60ff07","type":"url","category":"Network activity","to_ids":true,"value":"http://47.101.175.133:80","comment":"https://x.com/drb_ra/status/1963318370025009495","timestamp":"1756926550","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"04b8dcad-b69a-5b1a-a1cd-fe648b137071","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.101.175.133","comment":"https://x.com/drb_ra/status/1963318370025009495","timestamp":"1756926550","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b8f54f63-4dec-51fc-9f1b-93d9d77060c0","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.148.99:80","comment":"https://x.com/drb_ra/status/1963318606399218039","timestamp":"1756926607","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"19d855c3-efeb-5d42-8565-41b4bd467683","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.148.99","comment":"https://x.com/drb_ra/status/1963318606399218039","timestamp":"1756926607","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d7831751-bc37-5c3e-a50a-eff3b78791cc","type":"url","category":"Network activity","to_ids":true,"value":"http://154.21.202.74:8888","comment":"https://x.com/drb_ra/status/1963318999250248032","timestamp":"1756926700","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"eaf6aec1-f0b6-5875-9ba0-0507961ceffe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.21.202.74","comment":"https://x.com/drb_ra/status/1963318999250248032","timestamp":"1756926700","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"c2ef50c8-4403-5039-821e-45138b20f14e","type":"url","category":"Network activity","to_ids":true,"value":"http://78.168.1.220:443","comment":"https://x.com/drb_ra/status/1963319215957430322","timestamp":"1756926752","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"0b668d6a-4118-5621-885b-756a2a3380ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.168.1.220","comment":"https://x.com/drb_ra/status/1963319215957430322","timestamp":"1756926752","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"f1e162a2-814b-5a4f-9519-15cf31c0282a","type":"url","category":"Network activity","to_ids":true,"value":"http://50.60.159.139:443","comment":"https://x.com/drb_ra/status/1963319429359370668","timestamp":"1756926803","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"213d8f45-bf16-5dcb-93e9-5ddf5fa75556","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.60.159.139","comment":"https://x.com/drb_ra/status/1963319429359370668","timestamp":"1756926803","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"497da57a-7dc7-5fbd-89d0-6500e2b6c342","type":"url","category":"Network activity","to_ids":true,"value":"http://191.112.7.221:443","comment":"https://x.com/drb_ra/status/1963319636126306583","timestamp":"1756926852","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"624e9c77-7b2b-56a2-a7aa-88b7164e1ef9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.112.7.221","comment":"https://x.com/drb_ra/status/1963319636126306583","timestamp":"1756926852","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"f709b843-6dd5-5039-9cc1-bcf2727c03a2","type":"url","category":"Network activity","to_ids":true,"value":"http://94.237.63.224:139","comment":"https://x.com/drb_ra/status/1963319829555024279","timestamp":"1756926898","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"73d7861d-f855-5acb-9307-7ac06aecf9f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.237.63.224","comment":"https://x.com/drb_ra/status/1963319829555024279","timestamp":"1756926898","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9f4b6816-8d77-5436-b8f5-1dbe0f831e2f","type":"domain","category":"Network activity","to_ids":true,"value":"rushrmoore.weebly.com","comment":"https://x.com/urldna_bot/status/1963331204477862115","timestamp":"1756929610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"02f6690f-095e-5c86-bc8d-ac2bb03b825b","type":"url","category":"Network activity","to_ids":true,"value":"https://rushrmoore.weebly.com","comment":"https://x.com/urldna_bot/status/1963331204477862115","timestamp":"1756929610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f143bb43-be49-5a30-bb85-acb51ea2075a","type":"domain","category":"Network activity","to_ids":true,"value":"lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion","comment":"https://x.com/RepoFlex/status/1963338867639005650","timestamp":"1756931437","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"054a15b2-a655-5c1e-8609-c1e77754102e","type":"url","category":"Network activity","to_ids":true,"value":"http://lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion","comment":"https://x.com/RepoFlex/status/1963338867639005650","timestamp":"1756931437","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3ed1ca1a-e130-5165-a069-dc3d20ecefd3","type":"domain","category":"Network activity","to_ids":true,"value":"pdfprosuite.com","comment":"https://x.com/skocherhan/status/1963342343244775871","timestamp":"1756932266","distribution":"5"},{"uuid":"9170a637-a3d0-5f1e-87b1-9f1a302101bb","type":"url","category":"Network activity","to_ids":true,"value":"http://pdfprosuite.com","comment":"https://x.com/skocherhan/status/1963342343244775871","timestamp":"1756932266","distribution":"5"},{"uuid":"6aead9c6-ed9a-5c01-b85e-f337b2c884de","type":"url","category":"Network activity","to_ids":true,"value":"http://18.67.17.53","comment":"https://x.com/skocherhan/status/1963342343244775871","timestamp":"1756932266","distribution":"5"},{"uuid":"4d8a4e7a-f37d-5a01-a040-96ca6036cbc8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.67.17.53","comment":"https://x.com/skocherhan/status/1963342343244775871","timestamp":"1756932266","distribution":"5"},{"uuid":"23c4e55f-1c1a-5b21-873c-5a9bf8d47b3e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.212.176:80","comment":"https://x.com/drb_ra/status/1963344379474526531","timestamp":"1756932751","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dfdd52df-b42b-5d03-9846-7ab73db0edbf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.212.176","comment":"https://x.com/drb_ra/status/1963344379474526531","timestamp":"1756932751","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"103eff2d-d7d0-57a5-aea6-d7051e52ef19","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.107.84:80","comment":"https://x.com/drb_ra/status/1963345151998529638","timestamp":"1756932936","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a0733c6-7cff-5570-a7d5-19478478ea5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.107.84","comment":"https://x.com/drb_ra/status/1963345151998529638","timestamp":"1756932936","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c99f7ac4-ad57-5f36-bb05-d735e0a8e8cc","type":"url","category":"Network activity","to_ids":true,"value":"https://38.54.107.84/s/58462514417","comment":"https://x.com/drb_ra/status/1963345151998529638","timestamp":"1756932936","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb82c434-66e3-578b-8669-3689c09c07a2","type":"url","category":"Network activity","to_ids":true,"value":"http://5.42.217.111","comment":"https://x.com/threatquery/status/1963346275694207064","timestamp":"1756933203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"5251a128-7bbb-5f1b-8618-0abcf34b29e7","type":"url","category":"Network activity","to_ids":true,"value":"http://78.168.1.220","comment":"https://x.com/threatquery/status/1963346273894883833","timestamp":"1756933203","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"bed8bd59-407f-5c37-aea0-4588aa215533","type":"url","category":"Network activity","to_ids":true,"value":"http://45.138.16.142","comment":"https://x.com/threatquery/status/1963346272288383253","timestamp":"1756933203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"6150bbbd-9283-5f8e-9e64-5aca497ce2db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.138.16.142","comment":"https://x.com/threatquery/status/1963346272288383253","timestamp":"1756933203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"3655260c-aa06-50e7-b852-e0b00979970b","type":"domain","category":"Network activity","to_ids":true,"value":"idf-dev.nacc.store","comment":"https://x.com/drb_ra/status/1963369209158918441","timestamp":"1756938671","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"77ac9bb9-ad14-5428-a2f9-8fcd0de6e4b5","type":"url","category":"Network activity","to_ids":true,"value":"https://idf-dev.nacc.store/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1963369209158918441","timestamp":"1756938671","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6b8cd085-f942-5b8a-a217-2554e73bbe7c","type":"url","category":"Network activity","to_ids":true,"value":"http://209.200.246.30:19999","comment":"https://x.com/drb_ra/status/1963369209158918441","timestamp":"1756938671","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9a89dbb1-6f29-584a-92e3-dbcdacc2e92d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.200.246.30","comment":"https://x.com/drb_ra/status/1963369209158918441","timestamp":"1756938671","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"16b8c0a8-bc5d-50f4-8c5c-e7f67469e311","type":"url","category":"Network activity","to_ids":true,"value":"https://8.141.15.227/pixel","comment":"https://x.com/drb_ra/status/1963369431779959215","timestamp":"1756938724","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91306f28-72c8-5393-b534-b8e6844896d4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.141.15.227:60002","comment":"https://x.com/drb_ra/status/1963369431779959215","timestamp":"1756938724","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"94447916-07be-5e51-8b62-b196d54de6fb","type":"domain","category":"Network activity","to_ids":true,"value":"toufanleaks.org","comment":"https://x.com/fbgwls245/status/1963383683143835825","timestamp":"1756942122","distribution":"5"},{"uuid":"2beca07d-1566-5897-8701-b342adc393de","type":"url","category":"Network activity","to_ids":true,"value":"http://toufanleaks.org","comment":"https://x.com/fbgwls245/status/1963383683143835825","timestamp":"1756942122","distribution":"5"},{"uuid":"9c2db222-3f92-5f31-bb10-e5949cbad652","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/CyberToufan02","comment":"https://x.com/fbgwls245/status/1963383683143835825","timestamp":"1756942122","distribution":"5"},{"uuid":"03b301e2-c8a9-5582-bf8d-fbff508bb52d","type":"domain","category":"Network activity","to_ids":true,"value":"info-monex.gdanbang.com","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"22f901c6-1c46-5cdc-a572-faa0f7d6d4d0","type":"url","category":"Network activity","to_ids":true,"value":"https://info-monex.gdanbang.com/support/","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba7ade03-8b46-59d6-8e9b-3b2d6c261d52","type":"domain","category":"Network activity","to_ids":true,"value":"open-monex.cbd-sh.com","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"617ffdea-0803-5bba-8b36-1b9d6f9b0a0e","type":"url","category":"Network activity","to_ids":true,"value":"https://open-monex.cbd-sh.com/support/","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8c52839-f6fb-5fce-8b53-800abc5f0bf4","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex.3588mall.com","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e410fdd-fcc5-5040-802c-95029f78734f","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex.3588mall.com/support/","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e431c7f4-995a-5eee-b21e-37643e2ee395","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex.shyhjdz.com","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d3fd71f-df72-5efb-9abc-80773e86c429","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex.shyhjdz.com/support/","comment":"https://x.com/masaomi346/status/1963385376133030045","timestamp":"1756942526","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f923e3bd-f407-574d-bc70-8a8a3c29dee4","type":"domain","category":"Network activity","to_ids":true,"value":"lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1963391936888238405","timestamp":"1756944090","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"85007675-8cbd-54c4-a244-3aed598f11e7","type":"url","category":"Network activity","to_ids":true,"value":"http://lunalockcccxzkpfovwzifwxcytqkiuak6wzybnniqwxcmpsetpbetid.onion","comment":"https://x.com/fbgwls245/status/1963391936888238405","timestamp":"1756944090","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f535eb9e-a58c-56a5-b523-903e3d57e0d1","type":"domain","category":"Network activity","to_ids":true,"value":"lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1963391936888238405","timestamp":"1756944090","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d979ac9d-c429-5d9f-92e5-45a562698e01","type":"url","category":"Network activity","to_ids":true,"value":"http://lunachataclss7bvlhk5zxs6pqpunxljeqhrn2bfl6wkhlwqxvgwgayd.onion","comment":"https://x.com/fbgwls245/status/1963391936888238405","timestamp":"1756944090","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"309da66b-5b03-57a3-8963-cea073294246","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.89.177","comment":"https://x.com/Metemcyber/status/1963410086220685599","timestamp":"1756948417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd9441c0-742b-5708-b8df-3add391887d0","type":"url","category":"Network activity","to_ids":true,"value":"https://monex-jp.xlplayer.com/support/","comment":"https://x.com/Metemcyber/status/1963410086220685599","timestamp":"1756948417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f17d2dd-2103-52d5-a0ca-46bc200c1003","type":"domain","category":"Network activity","to_ids":true,"value":"monex-jp.xlplayer.com","comment":"https://x.com/Metemcyber/status/1963410086220685599","timestamp":"1756948417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d8c5952-f939-5617-bc74-22e38da1af5d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.163.92","comment":"https://x.com/Metemcyber/status/1963410086220685599","timestamp":"1756948417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"05705377-df34-5ff3-ab13-ad4477ab00a5","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.49.238","comment":"https://x.com/Metemcyber/status/1963412122559520975","timestamp":"1756948903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e63362a3-e6fd-5ca7-b2d8-23575bb83e67","type":"domain","category":"Network activity","to_ids":true,"value":"jallogin-jenedpb.top","comment":"https://x.com/Metemcyber/status/1963412122559520975","timestamp":"1756948903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"48ab08db-9fd0-54ba-9c7c-2c26e05c611a","type":"url","category":"Network activity","to_ids":true,"value":"https://jallogin-jenedpb.top/jp/","comment":"https://x.com/Metemcyber/status/1963412122559520975","timestamp":"1756948903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9a06356-09c0-57a7-b033-26b83a25ece8","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.195.212","comment":"https://x.com/Metemcyber/status/1963412122559520975","timestamp":"1756948903","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4527dd42-44cc-5f7f-b8ab-24e85a531ff0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.245.14.131","comment":"https://x.com/Metemcyber/status/1963415582453170354","timestamp":"1756949728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e79b03fe-641f-504a-9b11-d4bfadc30e64","type":"url","category":"Network activity","to_ids":true,"value":"https://ana.gnzit.com/1jKTze/","comment":"https://x.com/Metemcyber/status/1963415582453170354","timestamp":"1756949728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9eae15fb-b3d6-5c11-85dc-40ed5ab52cdc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.245.14.131","comment":"https://x.com/Metemcyber/status/1963415582453170354","timestamp":"1756949728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5bf38b35-65e7-526d-99f8-a9098205169b","type":"domain","category":"Network activity","to_ids":true,"value":"ana.gnzit.com","comment":"https://x.com/Metemcyber/status/1963415582453170354","timestamp":"1756949728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c704d54c-3de6-53e2-8406-6f964e883a6c","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.175.125:81","comment":"https://x.com/drb_ra/status/1963419023158194182","timestamp":"1756950548","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5b55c982-b791-569c-8856-b11901d20e17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.175.125","comment":"https://x.com/drb_ra/status/1963419023158194182","timestamp":"1756950548","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fa7f3786-4a69-5779-a842-cb6755fad4b0","type":"domain","category":"Network activity","to_ids":true,"value":"fghj5hjjh.weebly.com","comment":"https://x.com/urldna_bot/status/1963421794838220862","timestamp":"1756951209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"04ad5972-5d24-5647-a842-abc449fa80cd","type":"url","category":"Network activity","to_ids":true,"value":"https://fghj5hjjh.weebly.com","comment":"https://x.com/urldna_bot/status/1963421794838220862","timestamp":"1756951209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d9dde13e-d895-5b10-bbd8-0b8f93ac725c","type":"domain","category":"Network activity","to_ids":true,"value":"pagosenlinea-acueducto.com","comment":"https://x.com/mbec03/status/1963429864091840644","timestamp":"1756953133","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d83b58a3-9d18-51a0-b231-7e8644872ce3","type":"url","category":"Network activity","to_ids":true,"value":"http://pagosenlinea-acueducto.com","comment":"https://x.com/mbec03/status/1963429864091840644","timestamp":"1756953133","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e62ae173-a2c5-519e-954f-fe42379c4ea1","type":"url","category":"Network activity","to_ids":true,"value":"https://895579.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b99f078f-9b57-516c-9234-a7be2b820c33","type":"url","category":"Network activity","to_ids":true,"value":"https://979868.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40332b18-d8ab-5c1c-8749-334bd698e991","type":"domain","category":"Network activity","to_ids":true,"value":"979868.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa55287d-4d61-5dc7-a66b-1713956c3f0e","type":"url","category":"Network activity","to_ids":true,"value":"https://966757.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79a25bed-5602-5664-b73f-1e342344e3a1","type":"domain","category":"Network activity","to_ids":true,"value":"966757.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c43e6c6-681e-5b39-9911-29d259d1255a","type":"url","category":"Network activity","to_ids":true,"value":"https://965756.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f607270d-4e8d-5028-bc03-4ae688b2fb6d","type":"domain","category":"Network activity","to_ids":true,"value":"965756.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a94f25c6-67c7-545d-a620-235ffd66fa07","type":"domain","category":"Network activity","to_ids":true,"value":"895579.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad9e98e6-3823-5cbb-8092-5cc332bccedc","type":"url","category":"Network activity","to_ids":true,"value":"https://759768.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14c32f12-c9f6-57fa-8efc-8272132251e1","type":"domain","category":"Network activity","to_ids":true,"value":"869957.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b98631aa-8e7f-5131-9b79-364c21108db3","type":"url","category":"Network activity","to_ids":true,"value":"https://766797.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"848fb6aa-be47-5cd3-87fb-c9e3d4ec08de","type":"domain","category":"Network activity","to_ids":true,"value":"766797.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b47c858b-ba17-5823-a996-6fae38237adc","type":"url","category":"Network activity","to_ids":true,"value":"https://869957.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"965b271a-90cd-50a9-add2-10f94fa3aff8","type":"domain","category":"Network activity","to_ids":true,"value":"759768.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"14287ccd-4dfe-5372-baf3-ef2afa2d76aa","type":"url","category":"Network activity","to_ids":true,"value":"https://758969.com/verify-line","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b307785f-e3a6-5de4-b2ce-25f913c1789b","type":"domain","category":"Network activity","to_ids":true,"value":"758969.com","comment":"https://x.com/harugasumi/status/1963436142222872790","timestamp":"1756954629","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af52370c-f62a-520d-b43e-7f55922f4a11","type":"url","category":"Network activity","to_ids":true,"value":"https://domier.biz/LIsI4i/","comment":"https://x.com/harugasumi/status/1963448213475922261","timestamp":"1756957507","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00e87533-f8df-5ca9-bf31-4296a16f1b80","type":"domain","category":"Network activity","to_ids":true,"value":"domier.biz","comment":"https://x.com/harugasumi/status/1963448213475922261","timestamp":"1756957507","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60a9aef1-5f6f-5abb-ab8d-8fa054209a9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.164.129.33","comment":"https://x.com/harugasumi/status/1963448213475922261","timestamp":"1756957507","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0da78cf6-e0e8-513e-91fa-6214b809819e","type":"domain","category":"Network activity","to_ids":true,"value":"osbm.net","comment":"https://x.com/harugasumi/status/1963448213475922261","timestamp":"1756957507","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a95112e-20c9-5b4d-8da1-987e8d47f411","type":"url","category":"Network activity","to_ids":true,"value":"https://osbm.net/RJZvW","comment":"https://x.com/harugasumi/status/1963448213475922261","timestamp":"1756957507","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"124c3a8d-bba0-537a-9fab-51d1f378220b","type":"domain","category":"Network activity","to_ids":true,"value":"gnn0-dlera01-05.com","comment":"https://x.com/harugasumi/status/1963459588272848911","timestamp":"1756960219","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6d255f58-3d5a-523d-82e8-1f2709143f25","type":"url","category":"Network activity","to_ids":true,"value":"https://gnn0-dlera01-05.com","comment":"https://x.com/harugasumi/status/1963459588272848911","timestamp":"1756960219","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf5c7160-d8e5-5181-9a42-d9e9f2842058","type":"domain","category":"Network activity","to_ids":true,"value":"gmoo-areaze.com","comment":"https://x.com/harugasumi/status/1963459588272848911","timestamp":"1756960219","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d611b50f-cac3-57ff-b8e3-33b0b457a745","type":"domain","category":"Network activity","to_ids":true,"value":"gnn0-dlera00.com","comment":"https://x.com/harugasumi/status/1963459930834235563","timestamp":"1756960301","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36f464d6-028c-5894-9567-6e8ca9454d17","type":"md5","category":"Payload delivery","to_ids":true,"value":"8199e82ee87bbb5c6d358490e22d23db","comment":"https://x.com/ReBensk/status/1963477220632268844","timestamp":"1756964423","distribution":"5","Tag":[{"name":"malware"},{"name":"Android"},{"name":"Trojan"}]},{"uuid":"41b1e0f2-da23-5d36-863f-ec4b43a7658d","type":"domain","category":"Network activity","to_ids":true,"value":"sp668002.sitebeat.crazydomains.com","comment":"https://x.com/urldna_bot/status/1963482200587825590","timestamp":"1756965611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9016b973-8a2f-5b3b-a6d0-2e6e28eba6ad","type":"url","category":"Network activity","to_ids":true,"value":"https://sp668002.sitebeat.crazydomains.com","comment":"https://x.com/urldna_bot/status/1963482200587825590","timestamp":"1756965611","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"26fc733a-bc52-5cd7-9edc-5e527cf834d4","type":"md5","category":"Payload delivery","to_ids":true,"value":"9d2e301745faaf670c76330a12010225","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"efde83a4-ba21-5140-9672-e81a786bef3a","type":"md5","category":"Payload delivery","to_ids":true,"value":"9fa14998310a94591b3648f9398eaa7a","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"53194d26-a2d9-5b5a-a133-3c34dfbfe301","type":"md5","category":"Payload delivery","to_ids":true,"value":"a6cb29387c51ba54fe68801237e97237","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"ece384f8-a177-56ca-af42-a65cb087ce51","type":"md5","category":"Payload delivery","to_ids":true,"value":"423225484d3bd42f8b9ba451c6d50b94","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"3c236679-22d1-5b51-9641-a08b5d4f8182","type":"md5","category":"Payload delivery","to_ids":true,"value":"3c8f6e49031faf5c82aac274a00775b2","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"214028b5-ceab-5104-8a6a-ce9f8780c8ff","type":"md5","category":"Payload delivery","to_ids":true,"value":"3fffa5b1d83715b6664ac5cf60a20f84","comment":"https://x.com/suyog41/status/1963482622715154694","timestamp":"1756965711","distribution":"5"},{"uuid":"b8789727-6f13-54f2-af7e-df245508fa8f","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.218:31337","comment":"https://x.com/drb_ra/status/1963493633283305474","timestamp":"1756968336","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8a399a71-ff6d-515c-a2f3-17d6f05876aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.218","comment":"https://x.com/drb_ra/status/1963493633283305474","timestamp":"1756968336","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0179353c-7c78-5eb3-997e-d1d6448d9e5a","type":"url","category":"Network activity","to_ids":true,"value":"http://49.232.95.245:443","comment":"https://x.com/drb_ra/status/1963493855535272431","timestamp":"1756968389","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"0b24435d-46c9-57e3-b126-cb3fd5392be4","type":"url","category":"Network activity","to_ids":true,"value":"http://49.232.95.245:31337","comment":"https://x.com/drb_ra/status/1963494051354759382","timestamp":"1756968436","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"df6bc573-fd6e-5903-a473-8d2981066738","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.232.95.245","comment":"https://x.com/drb_ra/status/1963494051354759382","timestamp":"1756968436","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"7264afa0-cae3-5eeb-a320-905a16328233","type":"url","category":"Network activity","to_ids":true,"value":"http://176.108.241.162:8888","comment":"https://x.com/drb_ra/status/1963494241612550394","timestamp":"1756968481","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"f8f86101-e584-5f62-97f7-24afcdb16b26","type":"url","category":"Network activity","to_ids":true,"value":"http://176.108.241.162:31337","comment":"https://x.com/drb_ra/status/1963494442943300032","timestamp":"1756968529","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"8f23bd07-1a8d-54a5-8f09-721b017be7cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.108.241.162","comment":"https://x.com/drb_ra/status/1963494442943300032","timestamp":"1756968529","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"d6e05e88-f4b6-552c-bcc9-991fa117df37","type":"url","category":"Network activity","to_ids":true,"value":"http://108.174.56.140:2404","comment":"https://x.com/drb_ra/status/1963495152623792439","timestamp":"1756968699","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e793ed9d-dcd8-5136-b193-d242862d3e86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.174.56.140","comment":"https://x.com/drb_ra/status/1963495152623792439","timestamp":"1756968699","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"53d28989-5a86-53f2-9671-4c78e2c26524","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.252.39","comment":"https://x.com/drb_ra/status/1963495366155809083","timestamp":"1756968749","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4b9f3c03-553f-5866-9aad-a0644416db40","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.252.39:34171","comment":"https://x.com/drb_ra/status/1963495366155809083","timestamp":"1756968749","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4eaf3741-6f5e-5b97-a14c-07a61cef7997","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.198.4","comment":"https://x.com/drb_ra/status/1963495577582219410","timestamp":"1756968800","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"282d6016-f343-54a8-9fbe-2897573dcb0e","type":"url","category":"Network activity","to_ids":true,"value":"http://192.3.198.4:2481","comment":"https://x.com/drb_ra/status/1963495577582219410","timestamp":"1756968800","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6d9fa899-3e85-54af-a2a3-d7af7d5bc943","type":"url","category":"Network activity","to_ids":true,"value":"http://154.21.202.74:3232","comment":"https://x.com/drb_ra/status/1963495764862087472","timestamp":"1756968844","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"eaf6aec1-f0b6-5875-9ba0-0507961ceffe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.21.202.74","comment":"https://x.com/drb_ra/status/1963495764862087472","timestamp":"1756968844","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"f1004f9b-ec34-53e6-bea4-9d390ab0cccb","type":"url","category":"Network activity","to_ids":true,"value":"http://103.241.74.160:3232","comment":"https://x.com/drb_ra/status/1963495956042621384","timestamp":"1756968890","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"54a9c25d-bb62-5db8-a031-4b2c90a0d6dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.241.74.160","comment":"https://x.com/drb_ra/status/1963495956042621384","timestamp":"1756968890","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"bb7042d7-2aef-5647-ae0a-edcd8196a731","type":"url","category":"Network activity","to_ids":true,"value":"http://93.140.171.124:8080","comment":"https://x.com/drb_ra/status/1963496177279578217","timestamp":"1756968943","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88005135-21fb-52ce-9eeb-e2119df59ad9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.140.171.124","comment":"https://x.com/drb_ra/status/1963496177279578217","timestamp":"1756968943","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"92c270c2-0a7f-598f-a94c-e3939c6479f6","type":"url","category":"Network activity","to_ids":true,"value":"http://15.156.192.129:4369","comment":"https://x.com/drb_ra/status/1963496409929273516","timestamp":"1756968998","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f203bc65-e878-5a22-a7d2-5f9cd9ef0201","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.156.192.129","comment":"https://x.com/drb_ra/status/1963496409929273516","timestamp":"1756968998","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5303ff22-be24-536a-8952-1a4ca05bd549","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.208.242.86","comment":"https://x.com/drb_ra/status/1963496610911916149","timestamp":"1756969046","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"ddb12745-67d2-566d-b278-62fb793b1bff","type":"url","category":"Network activity","to_ids":true,"value":"http://13.208.242.86:16992","comment":"https://x.com/drb_ra/status/1963496610911916149","timestamp":"1756969046","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"62e6bed0-7d8c-532e-a740-75e3dcc08ca2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.198.185.150","comment":"https://x.com/drb_ra/status/1963496833683955877","timestamp":"1756969099","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"58a06a29-cdea-5dff-b16c-85e4e88364b1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.198.185.150:1787","comment":"https://x.com/drb_ra/status/1963496833683955877","timestamp":"1756969099","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"21404bcd-4921-5ea9-b1af-cc3d4c29d817","type":"url","category":"Network activity","to_ids":true,"value":"http://3.68.149.214:102","comment":"https://x.com/drb_ra/status/1963497040152756256","timestamp":"1756969149","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8d0fb7a7-8061-558b-85ff-e10b0c6a732e","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.80.18:1000","comment":"https://x.com/drb_ra/status/1963497259707875346","timestamp":"1756969201","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"07e0866a-f3e2-56b8-8421-70ece5bf067d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.80.18","comment":"https://x.com/drb_ra/status/1963497259707875346","timestamp":"1756969201","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"72123c58-e9d2-5968-bd83-e87fa3254768","type":"url","category":"Network activity","to_ids":true,"value":"http://45.81.113.246:8080","comment":"https://x.com/drb_ra/status/1963497474699497695","timestamp":"1756969252","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b9f18893-2325-5bb1-a020-c0c0eeaa579a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.81.113.246","comment":"https://x.com/drb_ra/status/1963497474699497695","timestamp":"1756969252","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"c686cd36-9a6f-52e2-97c2-a012be16b38c","type":"url","category":"Network activity","to_ids":true,"value":"http://142.93.205.198:25","comment":"https://x.com/drb_ra/status/1963497659190129061","timestamp":"1756969296","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"017d14c0-eaa1-5891-a942-526e8dcda217","type":"ip-dst","category":"Network activity","to_ids":true,"value":"142.93.205.198","comment":"https://x.com/drb_ra/status/1963497659190129061","timestamp":"1756969296","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ebe669fd-82af-516e-8f41-9307e73bd06d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.211.249.61:80","comment":"https://x.com/drb_ra/status/1963497870218129427","timestamp":"1756969346","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"95523885-6a24-553e-964c-d96f67a773a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.211.249.61","comment":"https://x.com/drb_ra/status/1963497870218129427","timestamp":"1756969346","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7b1ac283-51d6-50e7-a094-324d684ec146","type":"url","category":"Network activity","to_ids":true,"value":"http://34.246.198.100:80","comment":"https://x.com/drb_ra/status/1963498076775075945","timestamp":"1756969396","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4f85919e-f344-590f-8a12-5a6fec0494f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.246.198.100","comment":"https://x.com/drb_ra/status/1963498076775075945","timestamp":"1756969396","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"42883e57-9bcd-5098-b747-d58a0af82dea","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.192.89:80","comment":"https://x.com/drb_ra/status/1963498301744902360","timestamp":"1756969449","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"cef091e2-6bfa-5077-9e01-f200862b06f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.60.179.44","comment":"https://x.com/drb_ra/status/1963498528648421479","timestamp":"1756969503","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"ebcaeb94-c40b-5c32-afc4-3f4c5298f087","type":"url","category":"Network activity","to_ids":true,"value":"http://62.60.179.44:80","comment":"https://x.com/drb_ra/status/1963498528648421479","timestamp":"1756969503","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"7737d315-cfbd-5bbb-9b59-93d01af7b4cb","type":"url","category":"Network activity","to_ids":true,"value":"http://8.138.185.255:8888","comment":"https://x.com/drb_ra/status/1963498724463665380","timestamp":"1756969550","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"a7844d33-d2b2-5d41-a8ab-5c34219248f9","type":"url","category":"Network activity","to_ids":true,"value":"http://8.217.222.41:8888","comment":"https://x.com/drb_ra/status/1963498940478972343","timestamp":"1756969602","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"b950e947-a22e-5866-80dc-b2c1d88fa136","type":"url","category":"Network activity","to_ids":true,"value":"http://108.165.147.181:8888","comment":"https://x.com/drb_ra/status/1963499136759591255","timestamp":"1756969648","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"84dd4b3a-6a56-534a-91de-33880363251b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.165.147.181","comment":"https://x.com/drb_ra/status/1963499136759591255","timestamp":"1756969648","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"97548fa6-924b-5a06-9420-a945b3f1a367","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.82.2:1963","comment":"https://x.com/drb_ra/status/1963499342326612138","timestamp":"1756969697","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"de39dac5-d81d-5c35-8de6-a02273fff29c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.82.2","comment":"https://x.com/drb_ra/status/1963499342326612138","timestamp":"1756969697","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"93304b11-b4d9-5cd9-8664-e4cef584df4a","type":"url","category":"Network activity","to_ids":true,"value":"http://42.96.11.48:8848","comment":"https://x.com/drb_ra/status/1963499533041651953","timestamp":"1756969743","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"569c0385-3365-5d5e-8ec7-f99de9536674","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.96.11.48","comment":"https://x.com/drb_ra/status/1963499533041651953","timestamp":"1756969743","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"f8a69f00-333a-58c6-a85d-3b559d436f1a","type":"url","category":"Network activity","to_ids":true,"value":"http://31.58.220.77:4433","comment":"https://x.com/drb_ra/status/1963499729863557191","timestamp":"1756969790","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"163e3124-992c-5b84-a56a-1386e0544b5e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.58.220.77","comment":"https://x.com/drb_ra/status/1963499729863557191","timestamp":"1756969790","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"83706f66-3249-5d17-9bec-54a46a553102","type":"url","category":"Network activity","to_ids":true,"value":"http://38.146.25.131:443","comment":"https://x.com/drb_ra/status/1963499935120101862","timestamp":"1756969839","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"095192aa-5fae-5c22-8aea-8c9500bd835a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.146.25.131","comment":"https://x.com/drb_ra/status/1963500138124472489","timestamp":"1756969887","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"32c75427-4c39-5a2a-a3e5-5e46849e3f39","type":"url","category":"Network activity","to_ids":true,"value":"http://38.146.25.131:80","comment":"https://x.com/drb_ra/status/1963500138124472489","timestamp":"1756969887","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"65fabb39-edec-539f-afae-a1e516484b6e","type":"url","category":"Network activity","to_ids":true,"value":"http://82.25.35.44:443","comment":"https://x.com/drb_ra/status/1963500344542970305","timestamp":"1756969936","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"051caa46-aa90-58ec-a312-930df1a657f8","type":"url","category":"Network activity","to_ids":true,"value":"http://82.25.35.44:80","comment":"https://x.com/drb_ra/status/1963500564190253334","timestamp":"1756969989","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a1f6cf30-f911-50ad-98ec-bffb6cc373f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"82.25.35.44","comment":"https://x.com/drb_ra/status/1963500564190253334","timestamp":"1756969989","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a6a5c603-9567-5335-8b42-b2f4f36137e6","type":"url","category":"Network activity","to_ids":true,"value":"http://195.177.94.244:3000","comment":"https://x.com/drb_ra/status/1963500767689540076","timestamp":"1756970037","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a09e2146-503d-5890-8f42-d1b26f22b017","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.177.94.244","comment":"https://x.com/drb_ra/status/1963500767689540076","timestamp":"1756970037","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"1b351855-7a50-5196-8a5d-4b4b0acddb6c","type":"url","category":"Network activity","to_ids":true,"value":"http://102.117.163.190:7443","comment":"https://x.com/drb_ra/status/1963500976670691647","timestamp":"1756970087","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"b1f42cb2-78d9-5719-96e5-c4e0a98c1724","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.117.163.190","comment":"https://x.com/drb_ra/status/1963500976670691647","timestamp":"1756970087","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"99336d32-7009-5453-8781-3190d164b6f1","type":"url","category":"Network activity","to_ids":true,"value":"http://64.227.191.31:31337","comment":"https://x.com/drb_ra/status/1963501394809303074","timestamp":"1756970187","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"c0b12f06-6c27-546d-bb73-46742e258174","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.227.191.31","comment":"https://x.com/drb_ra/status/1963501394809303074","timestamp":"1756970187","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a6472a40-538d-5ccb-93c6-c7912f153167","type":"domain","category":"Network activity","to_ids":true,"value":"dyingawkwardangel.com","comment":"https://x.com/skocherhan/status/1963501549704904793","timestamp":"1756970224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"344b5d95-0428-5568-bf73-7ed48a04f39c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.dyingawkwardangel.com/includes/common/src/list.php","comment":"https://x.com/skocherhan/status/1963501549704904793","timestamp":"1756970224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"272fe539-aceb-5386-842d-d4885aeb6dbc","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a6f91dbcdd9f0f4e525addf76e521ad8fdaaf0b561cb83a89fd3f65686156be2","comment":"https://x.com/skocherhan/status/1963501549704904793","timestamp":"1756970224","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"5c04888d-3fce-5a18-915c-87ebf8039dfc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.99.148.49","comment":"https://x.com/drb_ra/status/1963501602762850358","timestamp":"1756970236","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f21a70e4-09f5-57eb-a2e9-691d3aecb4f6","type":"url","category":"Network activity","to_ids":true,"value":"http://167.99.148.49:31337","comment":"https://x.com/drb_ra/status/1963501602762850358","timestamp":"1756970236","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"22a75818-dc19-5005-87d6-3d1c261fd8d5","type":"domain","category":"Network activity","to_ids":true,"value":"sinopakgateway.info","comment":"https://x.com/skocherhan/status/1963501763278807254","timestamp":"1756970275","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"169aca75-32ae-50b8-9293-4056c094bea8","type":"url","category":"Network activity","to_ids":true,"value":"https://sinopakgateway.info/MRTP28ZW7DH.tut","comment":"https://x.com/skocherhan/status/1963501763278807254","timestamp":"1756970275","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cb0db339-9fa2-5f4c-acec-34683064bae4","type":"domain","category":"Network activity","to_ids":true,"value":"baidunetdisk.info","comment":"https://x.com/skocherhan/status/1963501763278807254","timestamp":"1756970275","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ae8314eb-a7ca-5cfe-9fc0-ed9f22a8d1d4","type":"url","category":"Network activity","to_ids":true,"value":"https://baidunetdisk.info/NR44PZXRWND8A.tut","comment":"https://x.com/skocherhan/status/1963501763278807254","timestamp":"1756970275","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"08bc3ddf-dfbb-5efb-9527-6163ff2146f0","type":"md5","category":"Payload delivery","to_ids":true,"value":"eb4905f8e596c5771dc84c722c4071f8","comment":"https://x.com/skocherhan/status/1963501763278807254","timestamp":"1756970275","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"034577e4-b657-5a8d-ae3f-11b98cd9d75e","type":"url","category":"Network activity","to_ids":true,"value":"http://91.151.89.128:443","comment":"https://x.com/drb_ra/status/1963501822104015313","timestamp":"1756970289","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"48b46d28-0b93-5027-b70c-0ffa1eff62eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.151.89.128","comment":"https://x.com/drb_ra/status/1963501822104015313","timestamp":"1756970289","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5ae910ae-9de9-5c68-9a6b-cbc210d097f6","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.205.15:82","comment":"https://x.com/FalconFeedsio/status/1963501870376227141","timestamp":"1756970300","distribution":"5"},{"uuid":"b6e5cb51-3b58-5900-a6ce-87c4e3ece578","type":"url","category":"Network activity","to_ids":true,"value":"http://216.144.226.242:7443","comment":"https://x.com/FalconFeedsio/status/1963501870376227141","timestamp":"1756970300","distribution":"5"},{"uuid":"49715846-1be7-554f-aee8-aae2cf186e70","type":"url","category":"Network activity","to_ids":true,"value":"http://5.42.217.111:3778","comment":"https://x.com/FalconFeedsio/status/1963501870376227141","timestamp":"1756970300","distribution":"5"},{"uuid":"01187770-dcf0-5264-8c62-2ce8a2a124e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.205.15","comment":"https://x.com/FalconFeedsio/status/1963501870376227141","timestamp":"1756970300","distribution":"5"},{"uuid":"f651e274-6013-5e88-a6f2-cee76ed62b5b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.144.226.242","comment":"https://x.com/FalconFeedsio/status/1963501870376227141","timestamp":"1756970300","distribution":"5"},{"uuid":"73e04adf-3275-5ae9-870f-e84f1f92ba15","type":"ip-dst","category":"Network activity","to_ids":true,"value":"161.117.176.117","comment":"https://x.com/drb_ra/status/1963505692456759336","timestamp":"1756971211","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8e675c76-25eb-545b-b539-a1832b86aafe","type":"url","category":"Network activity","to_ids":true,"value":"http://161.117.176.117:443","comment":"https://x.com/drb_ra/status/1963505692456759336","timestamp":"1756971211","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e5ecda2-fb85-56fc-b3fc-7a12fa1a99df","type":"url","category":"Network activity","to_ids":true,"value":"https://45.86.153.106/owa/f8M-f9kh2ZMj2qIAdd6l-zyI","comment":"https://x.com/drb_ra/status/1963505908652073349","timestamp":"1756971263","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"921f32c0-d4ce-5c83-93ac-d222f74c8eee","type":"url","category":"Network activity","to_ids":true,"value":"http://45.86.153.106:80","comment":"https://x.com/drb_ra/status/1963505908652073349","timestamp":"1756971263","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c55e46bd-d348-55a4-a154-56349ba05857","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.86.153.106","comment":"https://x.com/drb_ra/status/1963505908652073349","timestamp":"1756971263","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2e4a9476-33e2-57a9-9b36-bd3f4eacfd90","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.244.55:4444","comment":"https://x.com/drb_ra/status/1963506114332385455","timestamp":"1756971312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fe0c8c20-95e6-53b2-afc1-eebcc2f8e04c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.244.55","comment":"https://x.com/drb_ra/status/1963506114332385455","timestamp":"1756971312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"33ee9ec6-7115-5331-a159-63444bac21b3","type":"url","category":"Network activity","to_ids":true,"value":"https://110.40.176.194/visit.js","comment":"https://x.com/drb_ra/status/1963506318028726571","timestamp":"1756971361","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0a81b21a-ee88-51b4-91fb-54846686b570","type":"url","category":"Network activity","to_ids":true,"value":"http://110.40.176.194:8099","comment":"https://x.com/drb_ra/status/1963506318028726571","timestamp":"1756971361","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7ba3218-24fe-5983-b25e-c6b4cced0218","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.40.176.194","comment":"https://x.com/drb_ra/status/1963506318028726571","timestamp":"1756971361","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"408cdbbb-4ba6-5ecc-afda-89eb9df32298","type":"url","category":"Network activity","to_ids":true,"value":"http://156.244.16.49:1823","comment":"https://x.com/drb_ra/status/1963507066284196258","timestamp":"1756971539","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1baf790f-e113-5ddf-b7d1-617dee5b6cd1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.244.16.49","comment":"https://x.com/drb_ra/status/1963507066284196258","timestamp":"1756971539","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eceed745-6710-528f-a410-11a781af7656","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.156.59.110","comment":"https://x.com/drb_ra/status/1963507285373681695","timestamp":"1756971591","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71f63d1a-c192-54e8-83fc-8c42a614c12c","type":"url","category":"Network activity","to_ids":true,"value":"http://43.156.59.110:28443","comment":"https://x.com/drb_ra/status/1963507285373681695","timestamp":"1756971591","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3ca31de0-cd3e-543d-ba33-c52aea6e458f","type":"url","category":"Network activity","to_ids":true,"value":"https://bpm.w0rkz.com/api/v1/get","comment":"https://x.com/drb_ra/status/1963507285373681695","timestamp":"1756971591","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ee5a4c86-7b01-5b0e-a6b1-bb5cb0bfdf5a","type":"domain","category":"Network activity","to_ids":true,"value":"bpm.w0rkz.com","comment":"https://x.com/drb_ra/status/1963507285373681695","timestamp":"1756971591","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"54ee7989-92ec-5e1d-a4c0-8e7ed25e05f4","type":"domain","category":"Network activity","to_ids":true,"value":"etc-pantie.fknqws.cn","comment":"https://x.com/Metemcyber/status/1963509711330054367","timestamp":"1756972170","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ae1fde73-15bc-540f-b862-0049564a9a8d","type":"url","category":"Network activity","to_ids":true,"value":"https://etc-pantie.fknqws.cn/Rfuncc1013000extfunc/","comment":"https://x.com/Metemcyber/status/1963509711330054367","timestamp":"1756972170","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"489df547-96b6-599c-90dd-33e9f49c4c41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.54.65","comment":"https://x.com/Metemcyber/status/1963509711330054367","timestamp":"1756972170","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53bf99de-c8b9-56e0-a10a-c27ff1db033c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.136.10","comment":"https://x.com/Metemcyber/status/1963509711330054367","timestamp":"1756972170","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ec392935-8220-57d1-ba7d-3e0adb48ddba","type":"domain","category":"Network activity","to_ids":true,"value":"kztorgteh.kz","comment":"https://x.com/urldna_bot/status/1963512388239470678","timestamp":"1756972808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fc329c16-922f-5a64-816b-c2933c503b51","type":"url","category":"Network activity","to_ids":true,"value":"https://kztorgteh.kz/itu/itauPY/","comment":"https://x.com/urldna_bot/status/1963512388239470678","timestamp":"1756972808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2c7ceaee-54a8-58d1-be26-496cf65410bc","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.221.8","comment":"https://x.com/Metemcyber/status/1963512450416046192","timestamp":"1756972823","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50f512f6-1872-5cc6-a66b-e823593f41bf","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.24.237","comment":"https://x.com/Metemcyber/status/1963512450416046192","timestamp":"1756972823","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3a9fba7-5bf5-5e21-875b-3dc49cabd585","type":"domain","category":"Network activity","to_ids":true,"value":"www3-vpass.hlhwsh.com","comment":"https://x.com/Metemcyber/status/1963512450416046192","timestamp":"1756972823","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68102040-fbcc-57a1-9cb1-01ccb3d4c8cd","type":"url","category":"Network activity","to_ids":true,"value":"https://www3-vpass.hlhwsh.com/webpc/login","comment":"https://x.com/Metemcyber/status/1963512450416046192","timestamp":"1756972823","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f19ea009-0f79-5c4b-88e8-7275849d0cd0","type":"url","category":"Network activity","to_ids":true,"value":"https://x.com/AppBeesy","comment":"https://x.com/malwrhunterteam/status/1963516195069386914","timestamp":"1756973715","distribution":"5"},{"uuid":"a9bb6b2d-6b77-5edb-bcd7-ee4007e3ae8e","type":"domain","category":"Network activity","to_ids":true,"value":"a.finanesial.com","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"934d0e00-558d-5f60-8970-b42582d915ff","type":"url","category":"Network activity","to_ids":true,"value":"https://a.finanesial.com/a/en/?f=Cloudflare+Invest","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"0f03bf77-af7f-53be-9a8d-177e1147da9b","type":"domain","category":"Network activity","to_ids":true,"value":"invesct.com","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"a512ad12-81b4-5726-bb5e-1e330a7607b8","type":"url","category":"Network activity","to_ids":true,"value":"https://invesct.com/?f=Cloudflare+Invest","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"05866e4a-fd53-5b96-9ce6-1c5c25969c71","type":"domain","category":"Network activity","to_ids":true,"value":"b.globalsmartfinance.com","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"0433e4e2-87c8-5683-8b45-4b532a83860c","type":"url","category":"Network activity","to_ids":true,"value":"https://b.globalsmartfinance.com/a/en/?f=Cloudflare+Invest","comment":"https://x.com/illegalFawn/status/1963517010031087848","timestamp":"1756973910","distribution":"5"},{"uuid":"5e164571-542e-52de-bf63-8e3310943108","type":"domain","category":"Network activity","to_ids":true,"value":"stackolkd.cc","comment":"https://x.com/urldna_bot/status/1963542591669928107","timestamp":"1756980009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"20c8b2b2-45b7-5a7d-a288-628fad9b62f1","type":"url","category":"Network activity","to_ids":true,"value":"https://stackolkd.cc/cab3981ek.php","comment":"https://x.com/urldna_bot/status/1963542591669928107","timestamp":"1756980009","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b991a5a8-ee5e-5ee5-9647-ad21bae36e00","type":"url","category":"Network activity","to_ids":true,"value":"http://150.109.103.16:443","comment":"https://x.com/drb_ra/status/1963555478169956737","timestamp":"1756983081","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a76ead0f-cc64-51e9-8aec-6d5fd100d1db","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.109.103.16","comment":"https://x.com/drb_ra/status/1963555478169956737","timestamp":"1756983081","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"70c27cd1-a5c4-530f-be80-e66a77746a66","type":"domain","category":"Network activity","to_ids":true,"value":"update.twittermisc.com","comment":"https://x.com/drb_ra/status/1963555478169956737","timestamp":"1756983081","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2b254e42-e328-5ba3-b4f9-e28c72832082","type":"url","category":"Network activity","to_ids":true,"value":"https://update.twittermisc.com/update","comment":"https://x.com/drb_ra/status/1963555478169956737","timestamp":"1756983081","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"214be2b4-8507-5386-b44d-7ce5ef173c72","type":"domain","category":"Network activity","to_ids":true,"value":"limewire.com","comment":"https://x.com/JAMESWT_WT/status/1963564605432545659","timestamp":"1756985257","distribution":"5"},{"uuid":"440708d4-616f-5dbe-a3b3-e48e4d82da25","type":"url","category":"Network activity","to_ids":true,"value":"https://limewire.com/d/d3KtD#FkbZDqyVhj","comment":"https://x.com/JAMESWT_WT/status/1963564605432545659","timestamp":"1756985257","distribution":"5"},{"uuid":"63f4a7c0-df36-54d2-ab91-0078ec013e3a","type":"md5","category":"Payload delivery","to_ids":true,"value":"78052ec759892afabd5dcd37d4bb3b59","comment":"https://x.com/JAMESWT_WT/status/1963564605432545659","timestamp":"1756985257","distribution":"5"},{"uuid":"9b90bf5c-ad6f-57ee-9959-ef689c9eda8c","type":"md5","category":"Payload delivery","to_ids":true,"value":"a842728649e862878b5568a6a5b31e48","comment":"https://x.com/JAMESWT_WT/status/1963564605432545659","timestamp":"1756985257","distribution":"5"},{"uuid":"2ea738b5-d6e6-58de-963a-60aeaf8c3bf5","type":"md5","category":"Payload delivery","to_ids":true,"value":"6049604e209ab940ea3281a834d75adc","comment":"https://x.com/JAMESWT_WT/status/1963564605432545659","timestamp":"1756985257","distribution":"5"},{"uuid":"61679c65-60f9-5318-ac49-edb111cbb470","type":"domain","category":"Network activity","to_ids":true,"value":"clockurl.com","comment":"https://x.com/urldna_bot/status/1963572798133092617","timestamp":"1756987211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b7cd2a8a-d2aa-59dc-a06a-eb2fc2d76bdf","type":"url","category":"Network activity","to_ids":true,"value":"https://clockurl.com","comment":"https://x.com/urldna_bot/status/1963572798133092617","timestamp":"1756987211","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b2e1f8f2-5d64-535e-9304-d8e73a9e2057","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.54.226:80","comment":"https://x.com/skocherhan/status/1963579176897699896","timestamp":"1756988731","distribution":"5"},{"uuid":"729796bb-3548-54f8-9c4e-5222c301bd81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.54.226","comment":"https://x.com/skocherhan/status/1963579176897699896","timestamp":"1756988731","distribution":"5"},{"uuid":"9c5ec704-d100-50be-b104-da1110bbf621","type":"url","category":"Network activity","to_ids":true,"value":"http://www.carlminiclub.com/chis.php","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"53792263-cf25-58db-92eb-7f73db01b4b2","type":"url","category":"Network activity","to_ids":true,"value":"https://sangellobrighthouse.com/c5im.php?qt=%computername%TZ","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"85c65779-1ba2-5afe-ad3e-f62765bb1369","type":"domain","category":"Network activity","to_ids":true,"value":"carlminiclub.com","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"81508e59-b211-54a0-9f5e-3a4e1fe08540","type":"url","category":"Network activity","to_ids":true,"value":"http://keeferbeautytrends.com/g5ft.php?uy=%computername%TP","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"ae432f55-dbf3-5857-a4ac-5cf684a157e0","type":"domain","category":"Network activity","to_ids":true,"value":"sangellobrighthouse.com","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"114ae67d-7d7b-5a14-8260-1ef10a3a3380","type":"domain","category":"Network activity","to_ids":true,"value":"keeferbeautytrends.com","comment":"https://x.com/ShadowChasing1/status/1963581384280375422","timestamp":"1756989258","distribution":"5"},{"uuid":"23651d4c-34d1-5abf-8009-cc7c788cab47","type":"md5","category":"Payload delivery","to_ids":true,"value":"3ef7717c8bcb26396fc50ed92e812d13","comment":"https://x.com/ShadowChasing1/status/1963581400700907552","timestamp":"1756989262","distribution":"5"},{"uuid":"dc61de58-850c-5397-b342-1a5e559afce4","type":"md5","category":"Payload delivery","to_ids":true,"value":"983a8a6f4d0a8c887536f5787a6b01a2","comment":"https://x.com/ShadowChasing1/status/1963581400700907552","timestamp":"1756989262","distribution":"5"},{"uuid":"4467c5ed-6eb0-512e-a874-b5f68a06a112","type":"md5","category":"Payload delivery","to_ids":true,"value":"b52e105bd040bda6639e958f7d9e3090","comment":"https://x.com/ShadowChasing1/status/1963581400700907552","timestamp":"1756989262","distribution":"5"},{"uuid":"876d0f83-5309-5cb4-94d7-50c5973fae35","type":"md5","category":"Payload delivery","to_ids":true,"value":"6175efd148a89ca61b6835c77acc7a8d","comment":"https://x.com/ShadowChasing1/status/1963581400700907552","timestamp":"1756989262","distribution":"5"},{"uuid":"dfac9252-6cfe-5975-b6ae-177e9a976f45","type":"domain","category":"Network activity","to_ids":true,"value":"chrome-component.net","comment":"https://x.com/malwrhunterteam/status/1963594873795178836","timestamp":"1756992474","distribution":"5"},{"uuid":"9faf7e51-7b0b-5bd0-af18-6e37468e5039","type":"url","category":"Network activity","to_ids":true,"value":"http://chrome-component.net","comment":"https://x.com/malwrhunterteam/status/1963594873795178836","timestamp":"1756992474","distribution":"5"},{"uuid":"745b311e-44e0-54c0-9e35-721c3d325a46","type":"sha256","category":"Payload delivery","to_ids":true,"value":"4008bb2399843b2361d96507754461574ea5a6a449f4611c682181d31237163f","comment":"https://x.com/malwrhunterteam/status/1963594873795178836","timestamp":"1756992474","distribution":"5"},{"uuid":"7e16c5e7-b3d2-563d-860d-95f40246a1a2","type":"sha256","category":"Payload delivery","to_ids":true,"value":"142ca3e56e3ea806f3c99fc8cc12680be1eaadf4da1cb2712f0f3be2dd26cf8f","comment":"https://x.com/malwrhunterteam/status/1963594873795178836","timestamp":"1756992474","distribution":"5"},{"uuid":"e7499daf-bd9f-549a-bf42-8c6b8e1d16c4","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d42d833854cef2a7b95ad61b14dbb9a76032ff9977361d93f33be94cb9328184","comment":"https://x.com/malwrhunterteam/status/1963594873795178836","timestamp":"1756992474","distribution":"5"},{"uuid":"1a38ff3c-114b-506f-9eaa-b4aafe672999","type":"url","category":"Network activity","to_ids":true,"value":"https://pop3.riszq.com","comment":"https://x.com/urldna_bot/status/1963603017292243407","timestamp":"1756994415","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1a378f2c-c515-5596-95bd-8d53a9bdd829","type":"domain","category":"Network activity","to_ids":true,"value":"pop3.riszq.com","comment":"https://x.com/urldna_bot/status/1963603017292243407","timestamp":"1756994415","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"73788bff-828b-57df-80fe-f8a4b7b83ed5","type":"domain","category":"Network activity","to_ids":true,"value":"Gabinet.gov.pl","comment":"https://x.com/CERT_OPL/status/1963621681324327256","timestamp":"1756998865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8344e5eb-c5aa-5199-a1dc-0f3beffa2842","type":"url","category":"Network activity","to_ids":true,"value":"http://Gabinet.gov.pl","comment":"https://x.com/CERT_OPL/status/1963621681324327256","timestamp":"1756998865","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"402d2ea4-5583-56af-9fbf-b144c92c6e84","type":"domain","category":"Network activity","to_ids":true,"value":"coin-base-live-market.vercel.app","comment":"https://x.com/urldna_bot/status/1963633187449389159","timestamp":"1757001609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9bfc3759-d379-51c9-8373-b001f415d4a7","type":"url","category":"Network activity","to_ids":true,"value":"https://www.coin-base-live-market.vercel.app","comment":"https://x.com/urldna_bot/status/1963633187449389159","timestamp":"1757001609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a004e5cc-4f29-5afe-bd5e-ec411204fdac","type":"sha256","category":"Payload delivery","to_ids":true,"value":"75d26d4380be19a776b8f0b02bcddb0e3c7d0935ec718f508d0335d935660433","comment":"https://x.com/malwrhunterteam/status/1963636463343407437","timestamp":"1757002390","distribution":"5"},{"uuid":"f3d793cb-1e18-5dea-b92c-5de1aef25ac3","type":"domain","category":"Network activity","to_ids":true,"value":"shorturl.at","comment":"https://x.com/abhishek102938/status/1963637799258574878","timestamp":"1757002708","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"069da77f-b26e-52b0-a52e-cf0e60227910","type":"url","category":"Network activity","to_ids":true,"value":"https://shorturl.at/3Kfq1","comment":"https://x.com/abhishek102938/status/1963637799258574878","timestamp":"1757002708","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b1a41ac-e5d9-5750-8ad1-aacda86daf84","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.132.171:8000","comment":"https://x.com/midnight_comms/status/1963639376392380791","timestamp":"1757003084","distribution":"5","Tag":[{"name":"Sliver"}]},{"uuid":"3e7b8e8a-a598-533d-b26c-fd077bc4ad14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.81.132.171","comment":"https://x.com/midnight_comms/status/1963639376392380791","timestamp":"1757003084","distribution":"5","Tag":[{"name":"Sliver"}]},{"uuid":"1a42f150-645a-5a23-926d-da67049b6da5","type":"url","category":"Network activity","to_ids":true,"value":"http://46.183.221.230","comment":"https://x.com/phatomcandle/status/1963663374488916465","timestamp":"1757008806","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"e106d029-f2f5-5ba9-bb4d-03b2b0472512","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.183.221.230","comment":"https://x.com/phatomcandle/status/1963663374488916465","timestamp":"1757008806","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"9cb8b76f-48bd-55bd-b49f-9d33acdc4779","type":"md5","category":"Payload delivery","to_ids":true,"value":"9e71a8c5db42c69322839d6db65f2079","comment":"https://x.com/phatomcandle/status/1963663374488916465","timestamp":"1757008806","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"5a4893e1-ec2e-5529-9813-d5d92827685e","type":"url","category":"Network activity","to_ids":true,"value":"http://electrico.co.zw","comment":"https://x.com/SarlackLab/status/1963663415320129678","timestamp":"1757008815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"772d84c8-0639-59b5-981f-31791d6efd39","type":"domain","category":"Network activity","to_ids":true,"value":"electrico.co.zw","comment":"https://x.com/SarlackLab/status/1963663415320129678","timestamp":"1757008815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"e97d39d9-44d2-56a6-a2ff-c6a37627a26d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.32.230.3","comment":"https://x.com/SarlackLab/status/1963663415320129678","timestamp":"1757008815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"469eea3a-4900-576d-bf38-9c8ae4787fc5","type":"url","category":"Network activity","to_ids":true,"value":"http://176.32.230.3:80","comment":"https://x.com/SarlackLab/status/1963663415320129678","timestamp":"1757008815","distribution":"5","Tag":[{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"acfcef55-e562-556f-9174-a49cc330e73e","type":"url","category":"Network activity","to_ids":true,"value":"https://enough-vulture-shallow.on-fleek.app/office365x.html/","comment":"https://x.com/urldna_bot/status/1963663430323204380","timestamp":"1757008819","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"02d9eb9c-51e3-5c73-844f-d7728c792d52","type":"domain","category":"Network activity","to_ids":true,"value":"enough-vulture-shallow.on-fleek.app","comment":"https://x.com/urldna_bot/status/1963663430323204380","timestamp":"1757008819","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"596b09e6-42f5-51ec-bd81-832ec31bf7aa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"052d5220529b6bd4b01e5e375b5dc3ffd50c4b137e242bbfb26655fd7f475ac6","comment":"https://x.com/malwrhunterteam/status/1963666492202889343","timestamp":"1757009549","distribution":"5"},{"uuid":"242a8863-b4b7-59d4-a121-a8c63932ad4f","type":"url","category":"Network activity","to_ids":true,"value":"http://146.59.246.133:7443","comment":"https://x.com/drb_ra/status/1963675004744450157","timestamp":"1757011579","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a7898e1d-3e58-552e-93bd-61b3dba0c5cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.59.246.133","comment":"https://x.com/drb_ra/status/1963675004744450157","timestamp":"1757011579","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"6901275d-4e3c-5aa2-a8dc-199cef091975","type":"url","category":"Network activity","to_ids":true,"value":"http://194.195.116.151:443","comment":"https://x.com/drb_ra/status/1963675149863194746","timestamp":"1757011613","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5c41d933-56f5-50a8-a14f-1febf4ce8508","type":"url","category":"Network activity","to_ids":true,"value":"http://194.195.116.151:8443","comment":"https://x.com/drb_ra/status/1963675295099306306","timestamp":"1757011648","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"cc914415-318a-5620-b500-1efa1bc508df","type":"url","category":"Network activity","to_ids":true,"value":"http://194.195.116.151:8888","comment":"https://x.com/drb_ra/status/1963675443141484866","timestamp":"1757011683","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"137966ad-6f65-535d-86e7-8d75b74c54e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.195.116.151","comment":"https://x.com/drb_ra/status/1963675443141484866","timestamp":"1757011683","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f50a9fc4-0c7c-5980-90f1-51584307b636","type":"url","category":"Network activity","to_ids":true,"value":"http://88.116.203.219:5500","comment":"https://x.com/drb_ra/status/1963676102049882580","timestamp":"1757011840","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f64861f5-2825-53cc-a24f-fbe0c05af756","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.116.203.219","comment":"https://x.com/drb_ra/status/1963676102049882580","timestamp":"1757011840","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"09eddfee-44f6-5a6b-a84f-6752f264b128","type":"url","category":"Network activity","to_ids":true,"value":"http://54.196.124.91:18244","comment":"https://x.com/drb_ra/status/1963676248737235129","timestamp":"1757011875","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b3ae99a5-aa89-5024-9897-b9867c6d55ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.196.124.91","comment":"https://x.com/drb_ra/status/1963676248737235129","timestamp":"1757011875","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"3c8fda82-4590-5a20-b561-3b1deaa27c2e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.199.91.254:554","comment":"https://x.com/drb_ra/status/1963676392027234475","timestamp":"1757011909","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4e3acbb2-fe56-5ea9-9da8-d155be21fc25","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.199.91.254","comment":"https://x.com/drb_ra/status/1963676392027234475","timestamp":"1757011909","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"b6ce3db0-d349-55e2-ad8c-82359dad5729","type":"url","category":"Network activity","to_ids":true,"value":"http://102.96.171.32:443","comment":"https://x.com/drb_ra/status/1963676537275781386","timestamp":"1757011944","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"23ce5a6f-ee73-502e-8db7-ff334ab8515c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.96.171.32","comment":"https://x.com/drb_ra/status/1963676537275781386","timestamp":"1757011944","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"904a214f-3a1e-540b-99c8-49c6179d8549","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.208.82:8090","comment":"https://x.com/drb_ra/status/1963676679962054853","timestamp":"1757011978","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"3af9bdea-c177-586b-8c75-315be004c3be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.208.82","comment":"https://x.com/drb_ra/status/1963676679962054853","timestamp":"1757011978","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"97a2f241-cd84-5cd1-b601-5e7226c1b88d","type":"url","category":"Network activity","to_ids":true,"value":"http://80.91.223.136:8808","comment":"https://x.com/drb_ra/status/1963676822874493243","timestamp":"1757012012","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"661ffec5-3e7d-5186-9e70-dc980d548f1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.91.223.136","comment":"https://x.com/drb_ra/status/1963676822874493243","timestamp":"1757012012","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"0c38c47a-e922-5b6c-b49d-fecd7fe5f5e1","type":"url","category":"Network activity","to_ids":true,"value":"http://52.19.89.230:80","comment":"https://x.com/drb_ra/status/1963676966986694971","timestamp":"1757012046","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fa2024f5-8780-537b-935a-cb4e59e4612f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.19.89.230","comment":"https://x.com/drb_ra/status/1963676966986694971","timestamp":"1757012046","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"413c5cef-8ff3-5449-8a4e-6be39045ddac","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.10.68:80","comment":"https://x.com/drb_ra/status/1963677110012358928","timestamp":"1757012081","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"67bf8c85-de2e-5589-a7b0-44d38d095ef1","type":"url","category":"Network activity","to_ids":true,"value":"http://34.247.47.254:443","comment":"https://x.com/drb_ra/status/1963677255105904648","timestamp":"1757012115","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b2695584-b3bf-5047-947f-b67a0eef10ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.247.47.254","comment":"https://x.com/drb_ra/status/1963677255105904648","timestamp":"1757012115","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"11f10602-9397-56aa-ba17-4bdc44341ed4","type":"url","category":"Network activity","to_ids":true,"value":"http://54.170.233.67:80","comment":"https://x.com/drb_ra/status/1963677399150960691","timestamp":"1757012149","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"801a24f1-2cff-5314-99ec-78856ed64db3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.170.233.67","comment":"https://x.com/drb_ra/status/1963677399150960691","timestamp":"1757012149","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4c94bb9f-57c5-5538-9045-07e575b81c43","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.166.37:80","comment":"https://x.com/drb_ra/status/1963677546840735967","timestamp":"1757012185","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7b85c5cc-2ab8-5fac-a7b6-3062d80f1e19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.166.37","comment":"https://x.com/drb_ra/status/1963677546840735967","timestamp":"1757012185","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0e72f80a-579e-5eb7-a6f3-4ac31949be3a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.217.151.124:80","comment":"https://x.com/drb_ra/status/1963677692227715379","timestamp":"1757012219","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e03e16e8-d3e4-54bb-a0a0-fe18a0b9fdb0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.217.151.124","comment":"https://x.com/drb_ra/status/1963677692227715379","timestamp":"1757012219","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"cb59e5a8-d47e-56a1-b056-3282411c75b6","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.43.253:80","comment":"https://x.com/drb_ra/status/1963677836549505198","timestamp":"1757012254","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c8a9c1c4-ca0c-524d-9b81-f0436de80b21","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.43.253","comment":"https://x.com/drb_ra/status/1963677836549505198","timestamp":"1757012254","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a08323a2-745d-57ca-b3ce-af40d203f63f","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.90.252:80","comment":"https://x.com/drb_ra/status/1963677981815062847","timestamp":"1757012288","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4ecb85fb-59ce-5bc9-b87b-7a663307f8ff","type":"url","category":"Network activity","to_ids":true,"value":"http://34.248.121.26:80","comment":"https://x.com/drb_ra/status/1963678128716582968","timestamp":"1757012323","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1734f49c-0bb7-5e5d-8b5b-6f1c1831e766","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.248.121.26","comment":"https://x.com/drb_ra/status/1963678128716582968","timestamp":"1757012323","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2074cb4d-5770-5723-b269-90e40dd2c754","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.180.178:8888","comment":"https://x.com/drb_ra/status/1963678279103070328","timestamp":"1757012359","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"7e15440e-32c9-5d57-b886-c8878c152720","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.132.180.178","comment":"https://x.com/drb_ra/status/1963678279103070328","timestamp":"1757012359","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"34a3a9d7-5efb-53aa-888b-a3f28db5e811","type":"url","category":"Network activity","to_ids":true,"value":"http://50.232.172.118:443","comment":"https://x.com/drb_ra/status/1963678425299689783","timestamp":"1757012394","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"c5da4986-3810-512c-bf00-296cfa5398b5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.232.172.118","comment":"https://x.com/drb_ra/status/1963678425299689783","timestamp":"1757012394","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"03eb0f68-7dfd-5236-af65-109b37162165","type":"url","category":"Network activity","to_ids":true,"value":"http://45.141.84.5:443","comment":"https://x.com/drb_ra/status/1963678568434823246","timestamp":"1757012428","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8797d11d-012d-5b3d-8b6c-495594081a56","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.84.5","comment":"https://x.com/drb_ra/status/1963678568434823246","timestamp":"1757012428","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"87666877-00ce-5ecf-ad4b-cb00d61a80e7","type":"url","category":"Network activity","to_ids":true,"value":"http://3.110.210.126:8080","comment":"https://x.com/drb_ra/status/1963678712022618207","timestamp":"1757012462","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"f345c55e-935c-5ab5-ac68-6c8d9b206e8f","type":"url","category":"Network activity","to_ids":true,"value":"http://39.91.200.29:10250","comment":"https://x.com/drb_ra/status/1963678855509758068","timestamp":"1757012497","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"acb29ade-e665-56ca-bea5-5b41d99780ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.91.200.29","comment":"https://x.com/drb_ra/status/1963678855509758068","timestamp":"1757012497","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7218b2cd-9fbc-566a-acf2-25068cf45815","type":"url","category":"Network activity","to_ids":true,"value":"http://162.55.189.96:80","comment":"https://x.com/drb_ra/status/1963679511373078947","timestamp":"1757012653","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"13cadd9f-872c-5bc0-b7fc-4bf06e537994","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.55.189.96","comment":"https://x.com/drb_ra/status/1963679511373078947","timestamp":"1757012653","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"55eeaf25-dd74-5a6f-bd04-3303a15e76cc","type":"url","category":"Network activity","to_ids":true,"value":"http://159.203.3.107:8080","comment":"https://x.com/drb_ra/status/1963679660140863506","timestamp":"1757012689","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"43a7429d-886e-5bca-953f-a07feee1db04","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.203.3.107","comment":"https://x.com/drb_ra/status/1963679660140863506","timestamp":"1757012689","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"d94dbeae-6853-5441-85bd-39c7e08bfb5f","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.72.158:443","comment":"https://x.com/drb_ra/status/1963679806853390475","timestamp":"1757012724","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b886c2ba-c1bc-5231-b00d-033010bfcf0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.72.158","comment":"https://x.com/drb_ra/status/1963679806853390475","timestamp":"1757012724","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5dc3af43-5fcd-5f23-87fe-62491f026141","type":"url","category":"Network activity","to_ids":true,"value":"http://154.127.56.153:443","comment":"https://x.com/drb_ra/status/1963679950294380883","timestamp":"1757012758","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"effc907c-6996-5769-b28a-5043585f2374","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.127.56.153","comment":"https://x.com/drb_ra/status/1963679950294380883","timestamp":"1757012758","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3d4f1621-00d1-5715-a18e-68ec3b2ea2f1","type":"url","category":"Network activity","to_ids":true,"value":"http://64.227.123.42:443","comment":"https://x.com/drb_ra/status/1963680091600560373","timestamp":"1757012791","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3f7b62f8-7b24-5b7f-8c0f-720c35af0738","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.227.123.42","comment":"https://x.com/drb_ra/status/1963680091600560373","timestamp":"1757012791","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"26bf88c2-0d57-5cc2-a741-08c7b6a23de2","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.12:4546","comment":"https://x.com/drb_ra/status/1963680237931446547","timestamp":"1757012826","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"43677b53-3e97-5663-b78a-a2ec241cf9aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.12","comment":"https://x.com/drb_ra/status/1963680237931446547","timestamp":"1757012826","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9a213962-38ba-5773-aa9f-38e0a8dc5a28","type":"url","category":"Network activity","to_ids":true,"value":"http://45.153.34.83:2404","comment":"https://x.com/drb_ra/status/1963680380927750540","timestamp":"1757012860","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c7dd77d4-8e65-5bea-b4f9-dc2dd4c5da92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.153.34.83","comment":"https://x.com/drb_ra/status/1963680380927750540","timestamp":"1757012860","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0fd6d895-f093-535e-a9e1-84049b8882a3","type":"url","category":"Network activity","to_ids":true,"value":"http://185.14.92.201:2000","comment":"https://x.com/drb_ra/status/1963680525664879063","timestamp":"1757012895","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"2918ca58-20b2-5a2c-82c9-7ea325790bd6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.14.92.201","comment":"https://x.com/drb_ra/status/1963680525664879063","timestamp":"1757012895","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"535eb555-dad2-5284-9076-4f9ddc45d4c3","type":"domain","category":"Network activity","to_ids":true,"value":"voicemailgmtel.weebly.com","comment":"https://x.com/urldna_bot/status/1963693583132725527","timestamp":"1757016008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8f1f624c-3ce9-5ded-98fd-848cf17cd099","type":"url","category":"Network activity","to_ids":true,"value":"https://voicemailgmtel.weebly.com","comment":"https://x.com/urldna_bot/status/1963693583132725527","timestamp":"1757016008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fda1436a-7946-5313-8943-bd2f0da1a378","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.43.13","comment":"https://x.com/malwrhunterteam/status/1963698310130356681","timestamp":"1757017135","distribution":"5"},{"uuid":"1cc20fbb-2cc0-5961-a751-51cc5a111cb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.43.13","comment":"https://x.com/malwrhunterteam/status/1963698310130356681","timestamp":"1757017135","distribution":"5"},{"uuid":"72af9d51-d913-55c3-8240-879c6559fda0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"cf368705c5cd6cd0f824d5ca8b5f187488fbd4d436a93a60f57f8cfd6a004398","comment":"https://x.com/malwrhunterteam/status/1963698310130356681","timestamp":"1757017135","distribution":"5"},{"uuid":"98ddab33-52ee-550a-80ad-f88ae993f4d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.86.162","comment":"https://x.com/skocherhan/status/1963703221127438517","timestamp":"1757018306","distribution":"5"},{"uuid":"eb19696f-dfcf-52a8-b96d-e0ae38dc1959","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.195.47.173","comment":"https://x.com/skocherhan/status/1963703221127438517","timestamp":"1757018306","distribution":"5"},{"uuid":"4cc51e17-0d50-5f43-9e5d-be866ff6c44c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.5.250","comment":"https://x.com/threatquery/status/1963708663262036416","timestamp":"1757019603","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"ad6f6dfb-5604-5b7f-9460-5a1372d57f1f","type":"url","category":"Network activity","to_ids":true,"value":"http://37.9.93.135","comment":"https://x.com/threatquery/status/1963708661202649294","timestamp":"1757019603","distribution":"5","Tag":[{"name":"malware"},{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"3499a6e8-83b5-5a0e-8769-98451c6458c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.9.93.135","comment":"https://x.com/threatquery/status/1963708661202649294","timestamp":"1757019603","distribution":"5","Tag":[{"name":"malware"},{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"d5418064-ee22-59bb-ad0c-72e5680850ce","type":"url","category":"Network activity","to_ids":true,"value":"http://176.32.230.3","comment":"https://x.com/threatquery/status/1963708665300455779","timestamp":"1757019604","distribution":"5","Tag":[{"name":"malware"},{"name":"Lokibot"},{"name":"C2"}]},{"uuid":"1fff498b-6b2a-50b0-b264-54e8b3ead44d","type":"domain","category":"Network activity","to_ids":true,"value":"pusat-bantuan-dana-9v1d.vercel.app","comment":"https://x.com/urldna_bot/status/1963723790141055140","timestamp":"1757023210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ce533274-624f-5300-95d5-f77b610335be","type":"url","category":"Network activity","to_ids":true,"value":"http://pusat-bantuan-dana-9v1d.vercel.app","comment":"https://x.com/urldna_bot/status/1963723790141055140","timestamp":"1757023210","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"3adc11ee-b9fc-535a-8024-cebc33b1855d","type":"url","category":"Network activity","to_ids":true,"value":"http://51.68.244.175:1605","comment":"https://x.com/SarlackLab/status/1963723827541582152","timestamp":"1757023219","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"5ffad7e2-9639-538f-a693-291879e0e438","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.68.244.175","comment":"https://x.com/SarlackLab/status/1963723827541582152","timestamp":"1757023219","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"3f2edf37-d7d9-56f1-a7cb-598718cb603b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.6:9090","comment":"https://x.com/drb_ra/status/1963729262432927770","timestamp":"1757024515","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5286151b-7b23-58a3-9f8a-55bddeaf5508","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.6","comment":"https://x.com/drb_ra/status/1963729262432927770","timestamp":"1757024515","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"24797a66-3014-5d4e-93e4-75de79dd4d0f","type":"url","category":"Network activity","to_ids":true,"value":"http://8.222.255.168:3333","comment":"https://x.com/drb_ra/status/1963729409661345848","timestamp":"1757024550","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4a370cff-a3b0-5531-bb41-a1a116af1039","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.5:9090","comment":"https://x.com/drb_ra/status/1963729557611036808","timestamp":"1757024585","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0666ea79-7195-5ae9-8bdc-93a92ec404ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.5","comment":"https://x.com/drb_ra/status/1963729557611036808","timestamp":"1757024585","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d171ff67-acc1-598c-b57f-dfe5278efde9","type":"url","category":"Network activity","to_ids":true,"value":"https://104.233.252.23/admin/read/Server/shopper/API/UO3UVEIWYPQ0PZO","comment":"https://x.com/drb_ra/status/1963729706190286903","timestamp":"1757024620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b419e603-b6ad-53e1-a4db-4f27234b27bf","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.27:9090","comment":"https://x.com/drb_ra/status/1963729706190286903","timestamp":"1757024620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f7f78327-5049-52f8-bfb6-7817c46d53b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.27","comment":"https://x.com/drb_ra/status/1963729706190286903","timestamp":"1757024620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ffc9292a-b273-50aa-a390-8f9112a7c352","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.13:9090","comment":"https://x.com/drb_ra/status/1963729852324057114","timestamp":"1757024655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eae92efb-fdb3-5381-a4b5-aa2ef4602f52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.13","comment":"https://x.com/drb_ra/status/1963729852324057114","timestamp":"1757024655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71958a1a-7bd5-5f5a-93df-4682c543381a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.23","comment":"https://x.com/drb_ra/status/1963729852324057114","timestamp":"1757024655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a4fb9fe8-1b23-5e81-8e3a-55eaa0a376d7","type":"domain","category":"Network activity","to_ids":true,"value":"1192md.weebly.com","comment":"https://x.com/urldna_bot/status/1963753985493357037","timestamp":"1757030409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fcf54fc1-4d29-52c4-bfec-967e1a5cdec3","type":"url","category":"Network activity","to_ids":true,"value":"https://1192md.weebly.com","comment":"https://x.com/urldna_bot/status/1963753985493357037","timestamp":"1757030409","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ca1337e4-a2df-5d27-875d-0f08e9a0d865","type":"domain","category":"Network activity","to_ids":true,"value":"contreot.dxwenva.cn","comment":"https://x.com/Metemcyber/status/1963778732076023938","timestamp":"1757036309","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c052f297-c04d-5e63-a00a-2e4bc34891e3","type":"url","category":"Network activity","to_ids":true,"value":"https://contreot.dxwenva.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1963778732076023938","timestamp":"1757036309","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc9eca45-f2d5-5552-8c55-81c61b0f4e56","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.55.180","comment":"https://x.com/Metemcyber/status/1963778732076023938","timestamp":"1757036309","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51574b07-75c3-54e1-aafd-8bd50e3c1bd4","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.172.26","comment":"https://x.com/Metemcyber/status/1963778732076023938","timestamp":"1757036309","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20e0acf2-70dd-528e-a347-17958501564f","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.181.27","comment":"https://x.com/Metemcyber/status/1963780958944985172","timestamp":"1757036840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6b589e7-c120-5b65-ba2f-93606dc80b8b","type":"url","category":"Network activity","to_ids":true,"value":"https://ujmf.uiuklv.club","comment":"https://x.com/Metemcyber/status/1963780958944985172","timestamp":"1757036840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f809e81-1dee-51d7-b9ab-0d6672b20105","type":"domain","category":"Network activity","to_ids":true,"value":"ujmf.uiuklv.club","comment":"https://x.com/Metemcyber/status/1963780958944985172","timestamp":"1757036840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d19fa674-42f8-5fd5-94a6-b32a2f966774","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.72.98","comment":"https://x.com/Metemcyber/status/1963780958944985172","timestamp":"1757036840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3d8bd50-1edc-588e-b861-70adf212ea78","type":"domain","category":"Network activity","to_ids":true,"value":"icloud-skin.ykqzql.cn","comment":"https://x.com/Metemcyber/status/1963784163678704004","timestamp":"1757037604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88e1457c-7cb6-585b-8df5-1ef35925e08c","type":"url","category":"Network activity","to_ids":true,"value":"https://icloud-skin.ykqzql.cn/gvIY2S/","comment":"https://x.com/Metemcyber/status/1963784163678704004","timestamp":"1757037604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70422739-80a3-5a38-96a7-d15a1133ca8a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.155.190","comment":"https://x.com/Metemcyber/status/1963784163678704004","timestamp":"1757037604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19742784-03f9-59f8-90e5-856347341a7d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.40.174","comment":"https://x.com/Metemcyber/status/1963784163678704004","timestamp":"1757037604","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de68381a-7886-5043-b088-979e1b6a399e","type":"url","category":"Network activity","to_ids":true,"value":"https://servicemail075.wixsite.com/system-update1","comment":"https://x.com/urldna_bot/status/1963814376311345257","timestamp":"1757044807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"655bd125-2062-5e24-afb9-3afcf82edb67","type":"domain","category":"Network activity","to_ids":true,"value":"servicemail075.wixsite.com","comment":"https://x.com/urldna_bot/status/1963814376311345257","timestamp":"1757044807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fda1436a-7946-5313-8943-bd2f0da1a378","type":"url","category":"Network activity","to_ids":true,"value":"http://27.124.43.13","comment":"https://x.com/skocherhan/status/1963817262554517583","timestamp":"1757045496","distribution":"5"},{"uuid":"1cc20fbb-2cc0-5961-a751-51cc5a111cb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.124.43.13","comment":"https://x.com/skocherhan/status/1963817262554517583","timestamp":"1757045496","distribution":"5"},{"uuid":"72af9d51-d913-55c3-8240-879c6559fda0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"cf368705c5cd6cd0f824d5ca8b5f187488fbd4d436a93a60f57f8cfd6a004398","comment":"https://x.com/skocherhan/status/1963817262554517583","timestamp":"1757045496","distribution":"5"},{"uuid":"26bf88c2-0d57-5cc2-a741-08c7b6a23de2","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.69.12:4546","comment":"https://x.com/skocherhan/status/1963823123876270352","timestamp":"1757046893","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"43677b53-3e97-5663-b78a-a2ec241cf9aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.69.12","comment":"https://x.com/skocherhan/status/1963823123876270352","timestamp":"1757046893","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"60a9aef1-5f6f-5abb-ab8d-8fa054209a9f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.164.129.33","comment":"https://x.com/harugasumi/status/1963828103597224175","timestamp":"1757048080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0da78cf6-e0e8-513e-91fa-6214b809819e","type":"domain","category":"Network activity","to_ids":true,"value":"osbm.net","comment":"https://x.com/harugasumi/status/1963828103597224175","timestamp":"1757048080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a95112e-20c9-5b4d-8da1-987e8d47f411","type":"url","category":"Network activity","to_ids":true,"value":"https://osbm.net/RJZvW","comment":"https://x.com/harugasumi/status/1963828103597224175","timestamp":"1757048080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"52348e5a-3075-56e9-b914-2e42ff491d07","type":"domain","category":"Network activity","to_ids":true,"value":"0395ou.top","comment":"https://x.com/harugasumi/status/1963828103597224175","timestamp":"1757048080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5031eac9-96d8-57cb-aea7-d25d3fc1b8c0","type":"url","category":"Network activity","to_ids":true,"value":"https://0395ou.top/LIsI4i/","comment":"https://x.com/harugasumi/status/1963828103597224175","timestamp":"1757048080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8fa08052-4860-5550-9e3d-a5ca1103c983","type":"domain","category":"Network activity","to_ids":true,"value":"spatiosity.rpwenwd.cn","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c4fa0bd7-79f9-5c85-ad61-5fbb3a981301","type":"url","category":"Network activity","to_ids":true,"value":"https://spatiosity.rpwenwd.cn/first_jalsuica-default/","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1963830611082138055","timestamp":"1757048678","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"821f1b5f-72d3-5089-8784-873fefbc2232","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.2.54","comment":"https://x.com/Metemcyber/status/1963833243503054945","timestamp":"1757049306","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"692a57e0-9563-5775-9705-cb5ce577336a","type":"url","category":"Network activity","to_ids":true,"value":"https://visa-eadyism.10495.cn/pay-with-featured/","comment":"https://x.com/Metemcyber/status/1963833243503054945","timestamp":"1757049306","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9eada95-c8ca-56f8-b999-6c421e206aab","type":"domain","category":"Network activity","to_ids":true,"value":"visa-eadyism.10495.cn","comment":"https://x.com/Metemcyber/status/1963833243503054945","timestamp":"1757049306","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3936060-cfd7-5854-baa1-268f8c0c752c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.128.204","comment":"https://x.com/Metemcyber/status/1963833243503054945","timestamp":"1757049306","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"96ba8513-097f-5b51-8dc8-1372266a7639","type":"md5","category":"Payload delivery","to_ids":true,"value":"8d4ae98ca75549aca8b867ede2f76d4b","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"3d8268e3-3ad7-52a0-b312-f8a5da175b9e","type":"md5","category":"Payload delivery","to_ids":true,"value":"6fbd6b9acfff4d0f9719acb5d7395a53","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"f4608672-a470-55ad-b45b-eceda8ddb976","type":"md5","category":"Payload delivery","to_ids":true,"value":"5fc561f93100e6fe6089018a05748c57","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"56389924-6640-572e-92e3-655227ebab03","type":"md5","category":"Payload delivery","to_ids":true,"value":"d3ecfb7faa70380a72794ccc1b99d2b9","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"3c876938-91fe-5138-8dac-d5c454528df6","type":"md5","category":"Payload delivery","to_ids":true,"value":"70925b08d4ba7030e6463ed86f8e55f1","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"a0598572-cd0d-5c36-87ec-baf9e397a55a","type":"md5","category":"Payload delivery","to_ids":true,"value":"71e39485f6bd88a2067eb36072685db1","comment":"https://x.com/suyog41/status/1963833383022137590","timestamp":"1757049339","distribution":"5"},{"uuid":"cd7b6a3f-6f45-5089-af66-97247f1d1840","type":"domain","category":"Network activity","to_ids":true,"value":"enlignenl.from-co.net","comment":"https://x.com/AddressIntel/status/1963834501739544625","timestamp":"1757049606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92339611-5f8c-53aa-92dc-aa26602ebcba","type":"url","category":"Network activity","to_ids":true,"value":"https://enlignenl.from-co.net/it/","comment":"https://x.com/AddressIntel/status/1963834501739544625","timestamp":"1757049606","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"179d7c6b-154b-53d6-bc7f-f97c2e7cfb27","type":"url","category":"Network activity","to_ids":true,"value":"https://corrioadm.weebly.com","comment":"https://x.com/urldna_bot/status/1963844574150897727","timestamp":"1757052007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"2b9295f9-3502-551f-85bf-8a4f41707ec1","type":"domain","category":"Network activity","to_ids":true,"value":"corrioadm.weebly.com","comment":"https://x.com/urldna_bot/status/1963844574150897727","timestamp":"1757052007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"edcc3323-4c78-5a9a-8fd6-b6237a455877","type":"domain","category":"Network activity","to_ids":true,"value":"youjanlixn.com","comment":"https://x.com/harugasumi/status/1963848936134955210","timestamp":"1757053047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11ba03cc-481b-5201-a6dd-025ed56cacb7","type":"url","category":"Network activity","to_ids":true,"value":"https://youjanlixn.com/jabank/Phone/Verifyidentity","comment":"https://x.com/harugasumi/status/1963848936134955210","timestamp":"1757053047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11e7c6d8-26ee-50b2-ad13-8b0595c58404","type":"domain","category":"Network activity","to_ids":true,"value":"eneal-ja.com","comment":"https://x.com/harugasumi/status/1963848936134955210","timestamp":"1757053047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ce8d789-d46a-5624-9d72-a5ddc9a41665","type":"url","category":"Network activity","to_ids":true,"value":"https://eneal-ja.com/ibclient/select","comment":"https://x.com/harugasumi/status/1963848936134955210","timestamp":"1757053047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"707d000c-6081-5176-9309-231c9c599b56","type":"domain","category":"Network activity","to_ids":true,"value":"dexpanel-ip.pages.dev","comment":"https://x.com/suyog41/status/1963849721807540345","timestamp":"1757053234","distribution":"5"},{"uuid":"ebcbcce0-2f55-57e8-a1ad-36078fac1a06","type":"url","category":"Network activity","to_ids":true,"value":"http://dexpanel-ip.pages.dev","comment":"https://x.com/suyog41/status/1963849721807540345","timestamp":"1757053234","distribution":"5"},{"uuid":"9b8469b1-31ca-5509-b886-bef37234b810","type":"md5","category":"Payload delivery","to_ids":true,"value":"9a3307a4d86ea825ff184eddfacc7ab1","comment":"https://x.com/suyog41/status/1963849721807540345","timestamp":"1757053234","distribution":"5"},{"uuid":"6b9aaa0c-e63b-50a0-9413-1c5c9f2cf129","type":"domain","category":"Network activity","to_ids":true,"value":"gnn0-delaem01-06.com","comment":"https://x.com/harugasumi/status/1963852434469802087","timestamp":"1757053881","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"748a196f-5418-56d7-b722-5ea321d5abdf","type":"url","category":"Network activity","to_ids":true,"value":"https://gnn0-delaem01-06.com","comment":"https://x.com/harugasumi/status/1963852434469802087","timestamp":"1757053881","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"01d235b6-e424-5d70-aa07-79542560a7e2","type":"domain","category":"Network activity","to_ids":true,"value":"gnn0-delaem00.com","comment":"https://x.com/harugasumi/status/1963852434469802087","timestamp":"1757053881","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74171af8-6d3e-5657-b82c-f29586434ee6","type":"url","category":"Network activity","to_ids":true,"value":"http://87.254.212.120","comment":"https://x.com/malwrhunterteam/status/1963853220775698692","timestamp":"1757054069","distribution":"5"},{"uuid":"428e7a67-f420-5835-843c-aa492fbe8db9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.254.212.120","comment":"https://x.com/malwrhunterteam/status/1963853220775698692","timestamp":"1757054069","distribution":"5"},{"uuid":"cdb51509-0155-582f-9093-213f35220281","type":"url","category":"Network activity","to_ids":true,"value":"http://8.217.237.58:31337","comment":"https://x.com/drb_ra/status/1963856115583623593","timestamp":"1757054759","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5ab23445-4659-583a-92f0-3da702ec2b8e","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.129.189:80","comment":"https://x.com/drb_ra/status/1963856769194574051","timestamp":"1757054915","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"416db731-956a-568c-a239-b83cfecc8d4e","type":"url","category":"Network activity","to_ids":true,"value":"http://77.110.114.16:80","comment":"https://x.com/drb_ra/status/1963856910664315261","timestamp":"1757054948","distribution":"5","Tag":[{"name":"C2"},{"name":"Pegasus"},{"name":"Hookbot"}]},{"uuid":"3221ad36-2c4e-5f8d-a872-0e334111d9b2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.110.114.16","comment":"https://x.com/drb_ra/status/1963856910664315261","timestamp":"1757054948","distribution":"5","Tag":[{"name":"C2"},{"name":"Pegasus"},{"name":"Hookbot"}]},{"uuid":"ea79f0dc-86a2-52d9-b425-8b7f4a6fb20a","type":"url","category":"Network activity","to_ids":true,"value":"http://114.132.250.118:8888","comment":"https://x.com/drb_ra/status/1963857058542862776","timestamp":"1757054984","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"ea9bd98b-cba3-53c7-93cf-5a5412c0def6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.132.250.118","comment":"https://x.com/drb_ra/status/1963857058542862776","timestamp":"1757054984","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"9ab1b3fa-7568-5163-8ebd-1445109cb9ae","type":"url","category":"Network activity","to_ids":true,"value":"http://204.141.229.229:8888","comment":"https://x.com/drb_ra/status/1963857203242086795","timestamp":"1757055018","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"c4e01a1e-5f8a-5ee8-a290-ede5cee63510","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.141.229.229","comment":"https://x.com/drb_ra/status/1963857203242086795","timestamp":"1757055018","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"91b65004-0e13-5722-b4dd-57b0ac5f81dd","type":"url","category":"Network activity","to_ids":true,"value":"http://86.126.224.246:443","comment":"https://x.com/drb_ra/status/1963857344732762493","timestamp":"1757055052","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"da4d6c3e-94b6-52ae-b2b2-27c17d10929e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.126.224.246","comment":"https://x.com/drb_ra/status/1963857344732762493","timestamp":"1757055052","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ab288c70-1445-5d65-9d41-03ea5bf0c4d7","type":"url","category":"Network activity","to_ids":true,"value":"http://195.206.234.39:443","comment":"https://x.com/drb_ra/status/1963857487997600094","timestamp":"1757055086","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"a7739691-34f7-5692-8d6c-8e889d2efb41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.206.234.39","comment":"https://x.com/drb_ra/status/1963857487997600094","timestamp":"1757055086","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"0f0c9a03-0a4d-5856-a96a-59c95eac06b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.247.33.220","comment":"https://x.com/drb_ra/status/1963857631056900493","timestamp":"1757055120","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"66eeb73c-2da3-5322-94b4-450e75202f26","type":"url","category":"Network activity","to_ids":true,"value":"http://38.247.33.220:16993","comment":"https://x.com/drb_ra/status/1963857631056900493","timestamp":"1757055120","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"27da972a-2636-5895-bd53-011b62bee9a8","type":"url","category":"Network activity","to_ids":true,"value":"http://195.246.230.92:7443","comment":"https://x.com/drb_ra/status/1963857773696881104","timestamp":"1757055154","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d73cd802-b20d-5934-958f-1d8a3cac25c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.246.230.92","comment":"https://x.com/drb_ra/status/1963857773696881104","timestamp":"1757055154","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d65607e8-2dd2-5cc5-bb5e-b4211c28854c","type":"url","category":"Network activity","to_ids":true,"value":"http://51.75.250.56:7443","comment":"https://x.com/drb_ra/status/1963857915363619130","timestamp":"1757055188","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"fcef209b-e959-522f-844d-3f4a963493d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.75.250.56","comment":"https://x.com/drb_ra/status/1963857915363619130","timestamp":"1757055188","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"8282d97a-a1b3-5850-b6a8-3fe9302bf284","type":"url","category":"Network activity","to_ids":true,"value":"http://167.71.214.133:7443","comment":"https://x.com/drb_ra/status/1963858057764471007","timestamp":"1757055222","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"d430122c-cc8a-5f01-a5f3-ff71868e98d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.71.214.133","comment":"https://x.com/drb_ra/status/1963858057764471007","timestamp":"1757055222","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"3b8e06d6-f7a0-5ff9-85f3-b87ec79e8166","type":"url","category":"Network activity","to_ids":true,"value":"http://118.178.231.121:4321","comment":"https://x.com/drb_ra/status/1963858710670791144","timestamp":"1757055378","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c51cd512-bdde-5b64-89c8-e918c7bfbaa2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.178.231.121","comment":"https://x.com/drb_ra/status/1963858710670791144","timestamp":"1757055378","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f6951003-8601-524f-a692-c7d5e3798ee0","type":"url","category":"Network activity","to_ids":true,"value":"http://165.232.140.218:8080","comment":"https://x.com/drb_ra/status/1963858856771039389","timestamp":"1757055412","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"ae2fadd4-fbbb-57ff-9d88-b6afc630c23a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.232.140.218","comment":"https://x.com/drb_ra/status/1963858856771039389","timestamp":"1757055412","distribution":"5","Tag":[{"name":"C2"},{"name":"Hak5_Cloud_C2"}]},{"uuid":"4c766f0b-49f7-52dd-bfb8-040ead074606","type":"url","category":"Network activity","to_ids":true,"value":"http://147.124.213.155:8080","comment":"https://x.com/drb_ra/status/1963859000929272213","timestamp":"1757055447","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"effb8d25-f901-5413-9164-8dcccd6f13d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.124.213.155","comment":"https://x.com/drb_ra/status/1963859000929272213","timestamp":"1757055447","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dcca6cee-8c87-5526-a0db-c85673d2b902","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.48","comment":"https://x.com/drb_ra/status/1963859147721445636","timestamp":"1757055482","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"9cb79cd1-e008-5486-bde9-f769f53c6774","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.48:2404","comment":"https://x.com/drb_ra/status/1963859147721445636","timestamp":"1757055482","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"216a753a-c7ca-5796-a177-dc5dea58ec94","type":"url","category":"Network activity","to_ids":true,"value":"https://144.172.116.103","comment":"https://x.com/ShanHolo/status/1963859235063620071","timestamp":"1757055503","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"},{"name":"stealer"}]},{"uuid":"42dc82b4-4643-5cf3-9eb4-6dff3d879967","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.116.103","comment":"https://x.com/ShanHolo/status/1963859235063620071","timestamp":"1757055503","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"},{"name":"stealer"}]},{"uuid":"25632b7a-8029-5a3f-b949-99c52e6b080d","type":"md5","category":"Payload delivery","to_ids":true,"value":"7fe1fe3722a9aaf4e0b882b574626b1f","comment":"https://x.com/ShanHolo/status/1963859235063620071","timestamp":"1757055503","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"},{"name":"stealer"}]},{"uuid":"eaf9c305-0b09-57fc-b7a1-9543ff32c88c","type":"md5","category":"Payload delivery","to_ids":true,"value":"a267c778f9209c317f2591bfbb9463c9","comment":"https://x.com/ShanHolo/status/1963859235063620071","timestamp":"1757055503","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"},{"name":"stealer"}]},{"uuid":"a0e6c1d8-178b-57d9-8971-3d02c6d6c011","type":"md5","category":"Payload delivery","to_ids":true,"value":"d7552e45830440a90ceacec8967e071b","comment":"https://x.com/ShanHolo/status/1963859235063620071","timestamp":"1757055503","distribution":"5","Tag":[{"name":"malware"},{"name":"opendir"},{"name":"stealer"}]},{"uuid":"d74b81bb-bbdd-531b-b36b-f30809f0a506","type":"url","category":"Network activity","to_ids":true,"value":"http://209.54.103.171:2404","comment":"https://x.com/drb_ra/status/1963859289300222231","timestamp":"1757055515","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7defc5ff-b841-572a-9d4b-c70ac7333809","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.54.103.171","comment":"https://x.com/drb_ra/status/1963859289300222231","timestamp":"1757055515","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"09923ba5-d93e-545e-9615-241335cce90a","type":"url","category":"Network activity","to_ids":true,"value":"http://198.46.173.23:2404","comment":"https://x.com/drb_ra/status/1963859433227768041","timestamp":"1757055550","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"c0e46fb6-f702-5257-bf4c-846c4fde1b9e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.46.173.23","comment":"https://x.com/drb_ra/status/1963859433227768041","timestamp":"1757055550","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"94f6b877-faad-5fb8-8500-71b00ddb249a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.23.175.50","comment":"https://x.com/drb_ra/status/1963859576605888984","timestamp":"1757055584","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"218c99ce-477b-5e83-b45c-15281021cc8d","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.175.50:4500","comment":"https://x.com/drb_ra/status/1963859576605888984","timestamp":"1757055584","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"bf2ad4ee-d6cf-5c2f-a36f-b0b8a39e2e54","type":"url","category":"Network activity","to_ids":true,"value":"http://185.241.208.35:1000","comment":"https://x.com/drb_ra/status/1963859723448356949","timestamp":"1757055619","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"537170ab-2e7b-5eff-869e-bad3506a012a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.241.208.35","comment":"https://x.com/drb_ra/status/1963859723448356949","timestamp":"1757055619","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"28ffddec-7b04-55e7-9268-9e1a36d5fd93","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.180.178:3232","comment":"https://x.com/drb_ra/status/1963859868638380343","timestamp":"1757055654","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"7e15440e-32c9-5d57-b886-c8878c152720","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.132.180.178","comment":"https://x.com/drb_ra/status/1963859868638380343","timestamp":"1757055654","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"b8f1a09a-d0c0-5cee-b59b-0431fb01b71c","type":"url","category":"Network activity","to_ids":true,"value":"http://8.217.222.41:3232","comment":"https://x.com/drb_ra/status/1963860012859596988","timestamp":"1757055688","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"b6232e0a-04b6-5e1e-a6d5-ea3b4c65e6ce","type":"url","category":"Network activity","to_ids":true,"value":"http://220.202.18.102:47486","comment":"https://x.com/drb_ra/status/1963860158754214339","timestamp":"1757055723","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d798c81a-f54b-5178-84c8-5c6797d7d807","type":"ip-dst","category":"Network activity","to_ids":true,"value":"220.202.18.102","comment":"https://x.com/drb_ra/status/1963860158754214339","timestamp":"1757055723","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d8ea5eb5-6ce6-575d-9669-d62070574471","type":"url","category":"Network activity","to_ids":true,"value":"http://221.229.196.43:47486","comment":"https://x.com/drb_ra/status/1963860300421099953","timestamp":"1757055757","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7cc3f189-8da4-52be-a913-ecaf6f5a250c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.229.196.43","comment":"https://x.com/drb_ra/status/1963860300421099953","timestamp":"1757055757","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e4cfd4ce-8566-523d-9444-15d1f8911b59","type":"url","category":"Network activity","to_ids":true,"value":"http://119.96.197.86:47486","comment":"https://x.com/drb_ra/status/1963860444617007401","timestamp":"1757055791","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"183c8db2-2246-5053-a612-ae0c45ef3550","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.96.197.86","comment":"https://x.com/drb_ra/status/1963860444617007401","timestamp":"1757055791","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2d75aac7-6a20-58a0-bded-d4aaa15dac1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.167.193.214","comment":"https://x.com/drb_ra/status/1963860587034669136","timestamp":"1757055825","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"251d37ce-5820-5a9f-aa69-e9bce52a60bd","type":"url","category":"Network activity","to_ids":true,"value":"http://18.167.193.214:47486","comment":"https://x.com/drb_ra/status/1963860587034669136","timestamp":"1757055825","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0031ebbd-5dfd-5512-9d5c-dc75e002d0af","type":"url","category":"Network activity","to_ids":true,"value":"http://93.198.188.186:81","comment":"https://x.com/drb_ra/status/1963860729078993190","timestamp":"1757055859","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"afbb761f-65b0-57c8-8974-1f99bb9bfbe8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.198.188.186","comment":"https://x.com/drb_ra/status/1963860729078993190","timestamp":"1757055859","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"c46ad7c6-f864-5b77-aaad-bd96002c8006","type":"url","category":"Network activity","to_ids":true,"value":"http://3.71.39.192:6362","comment":"https://x.com/drb_ra/status/1963860869642662017","timestamp":"1757055892","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d72896d2-8527-5525-bc1e-988083aaa183","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.37.233:8088","comment":"https://x.com/drb_ra/status/1963861011816939968","timestamp":"1757055926","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"638ecec0-4a29-5b8d-8896-643a5c144ae3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.37.233","comment":"https://x.com/drb_ra/status/1963861011816939968","timestamp":"1757055926","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b44b1160-44e1-5672-8e67-afdf6ad39b3f","type":"url","category":"Network activity","to_ids":true,"value":"http://128.90.106.233:5505","comment":"https://x.com/drb_ra/status/1963861154196844835","timestamp":"1757055960","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"49b5f79a-531c-51bd-9b45-1130385e66d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"128.90.106.233","comment":"https://x.com/drb_ra/status/1963861154196844835","timestamp":"1757055960","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"8b0a5710-f2de-510e-8b9d-6431fe491144","type":"url","category":"Network activity","to_ids":true,"value":"http://158.255.5.137:80","comment":"https://x.com/drb_ra/status/1963861295075086402","timestamp":"1757055994","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fbc35cfa-acc7-5a00-a516-2225b2950174","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.255.5.137","comment":"https://x.com/drb_ra/status/1963861295075086402","timestamp":"1757055994","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0af6bad9-e3d0-53b2-b421-7aeb228525bc","type":"url","category":"Network activity","to_ids":true,"value":"http://56.125.165.177:443","comment":"https://x.com/drb_ra/status/1963861436259557487","timestamp":"1757056027","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"dfe7aac0-7c41-5941-8cdc-235e8a3372ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.125.165.177","comment":"https://x.com/drb_ra/status/1963861577393729726","timestamp":"1757056061","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8f3a0389-4393-55f5-aaaa-ba554c23bcb1","type":"url","category":"Network activity","to_ids":true,"value":"http://56.125.165.177:80","comment":"https://x.com/drb_ra/status/1963861577393729726","timestamp":"1757056061","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"10a0032c-014f-55a5-9e8b-e0ac775086ae","type":"url","category":"Network activity","to_ids":true,"value":"http://38.14.248.18:443","comment":"https://x.com/drb_ra/status/1963861718724952530","timestamp":"1757056095","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d9afb069-71de-5882-9535-300bc9aacd95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.14.248.18","comment":"https://x.com/drb_ra/status/1963861718724952530","timestamp":"1757056095","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"596b09e6-42f5-51ec-bd81-832ec31bf7aa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"052d5220529b6bd4b01e5e375b5dc3ffd50c4b137e242bbfb26655fd7f475ac6","comment":"https://x.com/malwrhunterteam/status/1963863842011644317","timestamp":"1757056601","distribution":"5"},{"uuid":"1d6d5885-541e-5a37-b3f3-1787eeb3fcd7","type":"domain","category":"Network activity","to_ids":true,"value":"gmo-aozora.hkp0u6.top","comment":"https://x.com/harugasumi/status/1963865283149361341","timestamp":"1757056945","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f924ea86-8a52-5b29-b457-a2f0b8ad227c","type":"url","category":"Network activity","to_ids":true,"value":"https://gmo-aozora.hkp0u6.top/qbm9HQ","comment":"https://x.com/harugasumi/status/1963865283149361341","timestamp":"1757056945","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e994aac3-9742-542a-984b-dc3b799bb0ca","type":"domain","category":"Network activity","to_ids":true,"value":"mitsubishi.ammaarha.com","comment":"https://x.com/harugasumi/status/1963869169796919519","timestamp":"1757057871","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac839824-a0cb-5901-9697-db3ac9ef0532","type":"url","category":"Network activity","to_ids":true,"value":"https://mitsubishi.ammaarha.com/support","comment":"https://x.com/harugasumi/status/1963869169796919519","timestamp":"1757057871","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"455bac5d-74eb-558e-ae9d-7778c783a8b7","type":"domain","category":"Network activity","to_ids":true,"value":"y73rzz9.top","comment":"https://x.com/harugasumi/status/1963869169796919519","timestamp":"1757057871","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e62eff0a-1374-5ba4-a961-5fdd422557b1","type":"url","category":"Network activity","to_ids":true,"value":"https://y73rzz9.top/7dNpkv/","comment":"https://x.com/harugasumi/status/1963869169796919519","timestamp":"1757057871","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2c5f26c-ef3a-508e-ae81-4285aecf27f6","type":"url","category":"Network activity","to_ids":true,"value":"https://onespace.ge/it/check1/invoice.php","comment":"https://x.com/JAMESWT_WT/status/1963871403955912907","timestamp":"1757058404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f75d04d-2345-59f8-be5c-00b5d9ab1329","type":"url","category":"Network activity","to_ids":true,"value":"https://onespace.ge/it/check1/loading.php","comment":"https://x.com/JAMESWT_WT/status/1963871403955912907","timestamp":"1757058404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cb22293-d771-51dd-8369-01b3cb438cf7","type":"url","category":"Network activity","to_ids":true,"value":"https://onespace.ge/it/check1/","comment":"https://x.com/JAMESWT_WT/status/1963871403955912907","timestamp":"1757058404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"775cbdba-517e-5725-b39d-2e8283f2c72a","type":"domain","category":"Network activity","to_ids":true,"value":"onespace.ge","comment":"https://x.com/JAMESWT_WT/status/1963871403955912907","timestamp":"1757058404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb411a8a-3ec3-5b20-a655-26a720203a17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.61.162.44","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3a68d5fd-0b02-5151-8a0d-b3676f7f91a2","type":"url","category":"Network activity","to_ids":true,"value":"https://978957.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"33b7e31e-3369-5941-bd0d-580246503ba5","type":"domain","category":"Network activity","to_ids":true,"value":"978957.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04382fe3-51d4-50dd-b41c-41598b838072","type":"url","category":"Network activity","to_ids":true,"value":"https://855857.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19101285-d22a-55ca-8928-0155496736b5","type":"domain","category":"Network activity","to_ids":true,"value":"855857.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ce56540-ceb8-546b-a58b-31c103be088e","type":"url","category":"Network activity","to_ids":true,"value":"https://776765.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b124adbd-e595-5389-a9d2-43e27a167459","type":"domain","category":"Network activity","to_ids":true,"value":"776765.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d8bb551b-127f-53a0-806c-3bf3a2e79c92","type":"domain","category":"Network activity","to_ids":true,"value":"756865.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d931cbc-4a62-58e3-aea1-938162379482","type":"url","category":"Network activity","to_ids":true,"value":"https://756865.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cde0352b-f638-504a-b6b5-0e16031c2f7d","type":"domain","category":"Network activity","to_ids":true,"value":"685796.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dd3b9098-56ef-58c4-b8e0-071a5892d08f","type":"url","category":"Network activity","to_ids":true,"value":"https://655776.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d67915a5-ee41-5ca4-a546-2006167f490f","type":"domain","category":"Network activity","to_ids":true,"value":"655776.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"66f4cad6-546f-5afb-b50f-76b9a1c6fdda","type":"url","category":"Network activity","to_ids":true,"value":"https://655576.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"806ebec5-eea1-5595-9742-4310929fcdeb","type":"domain","category":"Network activity","to_ids":true,"value":"655576.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f75fb9b-f1e7-58bd-b975-6e142d970e85","type":"url","category":"Network activity","to_ids":true,"value":"https://585575.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e96d9bbf-de06-5748-91ea-32b77e48f170","type":"domain","category":"Network activity","to_ids":true,"value":"585575.com","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"718e84e3-a498-5fd1-acdd-e9aeb53e06df","type":"url","category":"Network activity","to_ids":true,"value":"https://685796.com/line","comment":"https://x.com/harugasumi/status/1963871674450809264","timestamp":"1757058468","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e65b93e-5b1f-5e40-9d2a-84fef49ac0fd","type":"domain","category":"Network activity","to_ids":true,"value":"gthackgem69.weebly.com","comment":"https://x.com/urldna_bot/status/1963874774297264638","timestamp":"1757059207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9267e40e-062e-5335-a6c9-b0ec57cecf4f","type":"url","category":"Network activity","to_ids":true,"value":"https://gthackgem69.weebly.com","comment":"https://x.com/urldna_bot/status/1963874774297264638","timestamp":"1757059207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"766881dd-13f2-5115-9981-3436415b2ba7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"74181455892ed362735d9c7aba8891903e46b71371c02b028f3df75e4792b969","comment":"https://x.com/malwrhunterteam/status/1963890982065156124","timestamp":"1757063072","distribution":"5"},{"uuid":"8c1e62ad-7bae-5177-baf8-af6f6d776dbb","type":"url","category":"Network activity","to_ids":true,"value":"http://callteve.live-on.net","comment":"https://x.com/ShadowChasing1/status/1963898065775120682","timestamp":"1757064760","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"2d05af70-62b6-5d43-8ef3-cb780008e8af","type":"domain","category":"Network activity","to_ids":true,"value":"callteve.live-on.net","comment":"https://x.com/ShadowChasing1/status/1963898065775120682","timestamp":"1757064760","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"7ab9bcca-0fb6-532c-9781-4354bb51bf99","type":"domain","category":"Network activity","to_ids":true,"value":"noteyou.live-on.net","comment":"https://x.com/ShadowChasing1/status/1963898065775120682","timestamp":"1757064760","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"d0a64df8-72dd-5bc8-a356-109d905e6dfa","type":"url","category":"Network activity","to_ids":true,"value":"http://noteyou.live-on.net","comment":"https://x.com/ShadowChasing1/status/1963898065775120682","timestamp":"1757064760","distribution":"5","Tag":[{"name":"Kimsuky"}]},{"uuid":"e814846f-dd6f-5319-a946-0cc5c46b4eab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.208.84.41","comment":"https://x.com/ShanHolo/status/1963898118514127332","timestamp":"1757064773","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3e75aab6-09c1-5834-bcf1-631cd465eef3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.46.152.46","comment":"https://x.com/ShanHolo/status/1963898118514127332","timestamp":"1757064773","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"809e0351-2cf4-520e-bcc9-a3adb6e28829","type":"md5","category":"Payload delivery","to_ids":true,"value":"54b9c02ffdbf6e365f89c5361925e2e9","comment":"https://x.com/ShanHolo/status/1963898118514127332","timestamp":"1757064773","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8edf77c4-17f3-513b-90ff-0587a866c343","type":"domain","category":"Network activity","to_ids":true,"value":"britney-dollar-brass-mat.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1963901157803266343","timestamp":"1757065498","distribution":"5"},{"uuid":"1f525523-f825-5807-85da-544a9ad1871e","type":"url","category":"Network activity","to_ids":true,"value":"https://britney-dollar-brass-mat.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1963901157803266343","timestamp":"1757065498","distribution":"5"},{"uuid":"92eb86b0-6085-54b2-bc0b-71c4df509d00","type":"domain","category":"Network activity","to_ids":true,"value":"businessuite-accountmanager.com","comment":"https://x.com/urldna_bot/status/1963904985663488121","timestamp":"1757066410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"405a2d8c-30aa-546a-9215-815898cf4a60","type":"url","category":"Network activity","to_ids":true,"value":"http://businessuite-accountmanager.com","comment":"https://x.com/urldna_bot/status/1963904985663488121","timestamp":"1757066410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0a81b118-796e-5f10-8538-6853b5e54bbd","type":"sha256","category":"Payload delivery","to_ids":true,"value":"3d7ad6997b263b38ed44519f285d7a1ff6cd02c81cb752c3cd94162287498e3e","comment":"https://x.com/malwrhunterteam/status/1963905400299753654","timestamp":"1757066509","distribution":"5"},{"uuid":"2d3984f4-e07b-5029-a456-91c2e4bce28e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"fa7196e970dfa33a4976e010324af25004573d5540140242d1eeb9f536f7eeea","comment":"https://x.com/malwrhunterteam/status/1963906940183994734","timestamp":"1757066876","distribution":"5"},{"uuid":"2857924f-d62c-5e54-9b9d-97fbe242a998","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.238.243.111","comment":"https://x.com/drb_ra/status/1963916316277920223","timestamp":"1757069112","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db0c864b-53fa-5553-b16b-e3d5871fd998","type":"url","category":"Network activity","to_ids":true,"value":"http://156.238.243.111:8081","comment":"https://x.com/drb_ra/status/1963916316277920223","timestamp":"1757069112","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"836b6bac-24c7-56a3-b588-df946a24929c","type":"domain","category":"Network activity","to_ids":true,"value":"em8li.shop","comment":"https://x.com/drb_ra/status/1963916462529143175","timestamp":"1757069147","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6ac4b452-bff2-520c-b9f8-dc2bc35fcc90","type":"url","category":"Network activity","to_ids":true,"value":"https://em8li.shop/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1963916462529143175","timestamp":"1757069147","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f1444e94-4225-5d2e-960a-5ccec5d5c7a9","type":"url","category":"Network activity","to_ids":true,"value":"http://47.93.43.246:443","comment":"https://x.com/drb_ra/status/1963916462529143175","timestamp":"1757069147","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7e95c860-2755-537a-8243-ff4378297d7d","type":"url","category":"Network activity","to_ids":true,"value":"https://8.137.100.162/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1963916607652241548","timestamp":"1757069181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d69b74af-29a5-5a96-9c0d-c888560c99be","type":"url","category":"Network activity","to_ids":true,"value":"http://8.137.100.162:8011","comment":"https://x.com/drb_ra/status/1963916607652241548","timestamp":"1757069181","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d1edadc-86cc-569d-a8e7-a86b166b7772","type":"url","category":"Network activity","to_ids":true,"value":"https://47.93.43.246/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1963917267730665803","timestamp":"1757069339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"432ea284-8c37-5ba1-adcc-1f2c54974ca2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.93.43.246:80","comment":"https://x.com/drb_ra/status/1963917267730665803","timestamp":"1757069339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"66596f44-652d-52c4-9955-bcddcb31099d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.93.43.246","comment":"https://x.com/drb_ra/status/1963917267730665803","timestamp":"1757069339","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"05a0187e-e218-5f6d-aac2-a0ca5e75c30b","type":"url","category":"Network activity","to_ids":true,"value":"https://meta.com-businessverificationhelpcenter.site/meta-community-standard-588936","comment":"https://x.com/JAMESWT_WT/status/1963918441510834342","timestamp":"1757069618","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab652101-37e2-5e9e-a2fb-cf9dcb99682a","type":"domain","category":"Network activity","to_ids":true,"value":"meta.com-businessverificationhelpcenter.site","comment":"https://x.com/JAMESWT_WT/status/1963918441510834342","timestamp":"1757069618","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"797882eb-50da-54ef-847e-3cf384f3768e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.183.153.104","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"12434820-b805-5644-959e-b2af9eb6e4ea","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.41.211.53","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3399f428-3df3-501f-9035-5a5f351f14e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"36.189.205.244","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8d797299-85e5-5d51-9b17-ca609b9ed7a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.28.180.115","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"eed56aa4-0002-5374-a17c-3b6ac124c578","type":"url","category":"Network activity","to_ids":true,"value":"https://119.41.211.53/load","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"787ac2e8-b6cc-56c8-b60b-9c3e13a570f7","type":"url","category":"Network activity","to_ids":true,"value":"https://36.189.205.244/pixel","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d130fe00-ffdf-5572-8807-5d531cc35bf4","type":"url","category":"Network activity","to_ids":true,"value":"https://118.183.153.104/pixel","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e004175a-5ffc-5bad-88f3-2c4221c996e2","type":"url","category":"Network activity","to_ids":true,"value":"http://129.28.180.115:443","comment":"https://x.com/drb_ra/status/1963921992144269663","timestamp":"1757070465","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e5df7325-3d43-5fa9-b759-7ef98c0522a1","type":"url","category":"Network activity","to_ids":true,"value":"https://196.196.19.54/fwlink","comment":"https://x.com/drb_ra/status/1963922641850380627","timestamp":"1757070620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c005950-a342-5266-89a8-3dfe280900fb","type":"url","category":"Network activity","to_ids":true,"value":"http://196.196.19.54:8001","comment":"https://x.com/drb_ra/status/1963922641850380627","timestamp":"1757070620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f469df18-af0c-5f8d-8a8f-d80a65d8049d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.196.19.54","comment":"https://x.com/drb_ra/status/1963922641850380627","timestamp":"1757070620","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"09826ca7-610c-5efb-9fa9-3941001f04ae","type":"url","category":"Network activity","to_ids":true,"value":"http://209.54.105.38:80","comment":"https://x.com/drb_ra/status/1963922783697600948","timestamp":"1757070654","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"32294646-cb58-51d6-8d6f-d656ef632a68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.54.105.38","comment":"https://x.com/drb_ra/status/1963922783697600948","timestamp":"1757070654","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9416f7a8-d2f3-5e87-bce8-1fa63d155f1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.117.1.226","comment":"https://x.com/drb_ra/status/1963922926324900310","timestamp":"1757070688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6fb73cc6-9b1e-592c-86cd-5300357da3e9","type":"url","category":"Network activity","to_ids":true,"value":"http://47.117.1.226:8882","comment":"https://x.com/drb_ra/status/1963922926324900310","timestamp":"1757070688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cc455d70-7ddb-51c2-ba45-a2332a0089da","type":"url","category":"Network activity","to_ids":true,"value":"https://38.54.14.81/cx","comment":"https://x.com/drb_ra/status/1963923068801200251","timestamp":"1757070722","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d12f2de0-d487-539b-a708-e8df47bdceb8","type":"url","category":"Network activity","to_ids":true,"value":"http://38.54.14.81:443","comment":"https://x.com/drb_ra/status/1963923068801200251","timestamp":"1757070722","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c5c4ad91-79fd-5cce-baa2-3c383b0c3367","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.54.14.81","comment":"https://x.com/drb_ra/status/1963923068801200251","timestamp":"1757070722","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dcb9fc63-6770-5d04-a364-34de907cf91d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.7:9090","comment":"https://x.com/drb_ra/status/1963923211646575092","timestamp":"1757070756","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"53a7c8a1-95b3-5174-a4b8-cdf18549ae43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.7","comment":"https://x.com/drb_ra/status/1963923211646575092","timestamp":"1757070756","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"71958a1a-7bd5-5f5a-93df-4682c543381a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.23","comment":"https://x.com/drb_ra/status/1963923211646575092","timestamp":"1757070756","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ea59838f-ea79-5d8a-800b-c32c0dcce9a6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.108.198.70:33333","comment":"https://x.com/drb_ra/status/1963923354252947952","timestamp":"1757070790","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"511f133e-78a5-5148-b5d3-e7d5efb1b670","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.108.198.70","comment":"https://x.com/drb_ra/status/1963923354252947952","timestamp":"1757070790","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7986c2e6-465c-52a2-8038-034f1a91bf7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.110.229.61","comment":"https://x.com/drb_ra/status/1963923500046881165","timestamp":"1757070825","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"149ce1f8-b4bb-509e-9dcb-b6914e20780c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.110.229.61:8443","comment":"https://x.com/drb_ra/status/1963923500046881165","timestamp":"1757070825","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"822a44a3-2d4f-53b7-8d04-492fb1df6c6e","type":"url","category":"Network activity","to_ids":true,"value":"http://47.238.239.22:443","comment":"https://x.com/drb_ra/status/1963923650031341743","timestamp":"1757070860","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c115b059-e015-5cfc-a617-941aec710458","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.238.239.22","comment":"https://x.com/drb_ra/status/1963923650031341743","timestamp":"1757070860","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c125f3f-e4a8-56b5-8059-02ae633dc04b","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.20:9090","comment":"https://x.com/drb_ra/status/1963923795237883949","timestamp":"1757070895","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17c871e8-0c04-5c8a-8f7b-f71df88f2ad1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.20","comment":"https://x.com/drb_ra/status/1963923795237883949","timestamp":"1757070895","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"91941d28-7e15-5c36-abb7-bbe515435978","type":"url","category":"Network activity","to_ids":true,"value":"https://47.120.45.216/dpixel","comment":"https://x.com/drb_ra/status/1963923940503376280","timestamp":"1757070930","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"40c60018-8458-541c-ba6e-8f8356eedb21","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.45.216:8032","comment":"https://x.com/drb_ra/status/1963923940503376280","timestamp":"1757070930","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"76d53fe4-a636-5817-a42a-86aceda02eb0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.45.216","comment":"https://x.com/drb_ra/status/1963923940503376280","timestamp":"1757070930","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9e7d51cd-f70b-5a04-9a9f-a7f5b13b5914","type":"domain","category":"Network activity","to_ids":true,"value":"spacetiontonunek.github.io","comment":"https://x.com/urldna_bot/status/1963935183100338265","timestamp":"1757073610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b133b123-a3cf-58b7-81ac-3b458d863708","type":"url","category":"Network activity","to_ids":true,"value":"http://spacetiontonunek.github.io/jonsbo/","comment":"https://x.com/urldna_bot/status/1963935183100338265","timestamp":"1757073610","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7f3355f7-1ac4-5863-a1f3-06dae7473766","type":"url","category":"Network activity","to_ids":true,"value":"http://107.189.21.235:7709","comment":"https://x.com/SarlackLab/status/1963950500195225962","timestamp":"1757077262","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"937db9b5-907f-5065-bd6d-cd972bb3c266","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.189.21.235","comment":"https://x.com/SarlackLab/status/1963950500195225962","timestamp":"1757077262","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"ee137530-04a5-590b-a247-5319397bc9be","type":"url","category":"Network activity","to_ids":true,"value":"http://120.25.163.165:8080","comment":"https://x.com/midnight_comms/status/1963953695692869845","timestamp":"1757078024","distribution":"5"},{"uuid":"c22b7ef1-f524-5544-80fc-2b15e2d6e5f4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.25.163.165","comment":"https://x.com/midnight_comms/status/1963953695692869845","timestamp":"1757078024","distribution":"5"},{"uuid":"d20ec008-647c-5c78-9746-48c5dbeeb6d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"105.99.148.50","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"67c431c1-d4e5-5635-96b8-718cb014e8d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.59.31.186","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"b47d1557-45e7-5b41-9769-ba7d50dec8ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.67.162.198","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"a3139632-8bab-5002-a5f1-aaf35244d4fa","type":"url","category":"Network activity","to_ids":true,"value":"http://194.59.31.186:4449","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"93e9e278-293a-5b4a-9d88-de0d2b86dd8a","type":"url","category":"Network activity","to_ids":true,"value":"http://105.99.148.50:11111","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"df58eb63-4707-5c0e-bc5a-1624e76fb601","type":"url","category":"Network activity","to_ids":true,"value":"http://103.67.162.198:2404","comment":"https://x.com/FalconFeedsio/status/1963953759219789893","timestamp":"1757078039","distribution":"5"},{"uuid":"8b8980cb-be94-5125-9bdf-7fe9f1c759d2","type":"domain","category":"Network activity","to_ids":true,"value":"tamnoasnoua.reference-travel.com","comment":"https://x.com/masaomi346/status/1963955282737779058","timestamp":"1757078402","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fa310e67-6a26-5fdf-b09a-cbea6e9ec3da","type":"url","category":"Network activity","to_ids":true,"value":"https://tamnoasnoua.reference-travel.com","comment":"https://x.com/masaomi346/status/1963955282737779058","timestamp":"1757078402","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"72d15d28-922e-59ca-926e-0ccfe20dbde8","type":"domain","category":"Network activity","to_ids":true,"value":"tamoasnoua.haggisrugby.com","comment":"https://x.com/masaomi346/status/1963955282737779058","timestamp":"1757078402","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a556ca1d-9ff7-53f6-82b1-7544e0fa7016","type":"url","category":"Network activity","to_ids":true,"value":"https://tamoasnoua.haggisrugby.com","comment":"https://x.com/masaomi346/status/1963955282737779058","timestamp":"1757078402","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0caaa3bb-7945-58cb-a107-e1447eab058e","type":"url","category":"Network activity","to_ids":true,"value":"http://39.105.36.205:8000","comment":"https://x.com/midnight_comms/status/1963955458030354730","timestamp":"1757078444","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"c2d6e59a-e449-5ad7-aca4-db1a7fe7e01b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.105.36.205","comment":"https://x.com/midnight_comms/status/1963955458030354730","timestamp":"1757078444","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"b74e0e0a-a172-5953-ac6b-e965f8ad63f0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"789df0bfdf91c7990542d571597ab7baf8789fb114bd2426ba595d116870f22e","comment":"https://x.com/malwrhunterteam/status/1963958179831660799","timestamp":"1757079093","distribution":"5"},{"uuid":"b4350daf-c72e-5f64-9241-d56b8e2b284f","type":"md5","category":"Payload delivery","to_ids":true,"value":"172dc997ca6022ec8dff0842e4c7b887","comment":"https://x.com/suyog41/status/1963960555628109974","timestamp":"1757079659","distribution":"5"},{"uuid":"c54830b4-7841-59d0-a394-4e7fa65d2ad1","type":"md5","category":"Payload delivery","to_ids":true,"value":"3b3ca48cda26a33bc3634ad1ed8dd270","comment":"https://x.com/suyog41/status/1963960555628109974","timestamp":"1757079659","distribution":"5"},{"uuid":"d0b8f2e8-4e56-5657-94bf-dc153b05e095","type":"url","category":"Network activity","to_ids":true,"value":"http://kzloly.nmailhub.com","comment":"https://x.com/suyog41/status/1963960555628109974","timestamp":"1757079659","distribution":"5"},{"uuid":"2faf70c3-4ce4-5809-98a3-a13ce0848afd","type":"domain","category":"Network activity","to_ids":true,"value":"kzloly.nmailhub.com","comment":"https://x.com/suyog41/status/1963960555628109974","timestamp":"1757079659","distribution":"5"},{"uuid":"7c439d9d-1abf-5d7b-b7f2-1d56c350643c","type":"md5","category":"Payload delivery","to_ids":true,"value":"28b07bcfa17c2ab5716ef9cbc0ded7f0","comment":"https://x.com/suyog41/status/1963960555628109974","timestamp":"1757079659","distribution":"5"},{"uuid":"d33dd36d-6353-505d-9637-d280ecad8632","type":"domain","category":"Network activity","to_ids":true,"value":"gmxaccount15.weebly.com","comment":"https://x.com/urldna_bot/status/1963965372215730494","timestamp":"1757080808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"40570bb0-28c0-5a88-9ac4-86ad729fd793","type":"url","category":"Network activity","to_ids":true,"value":"https://gmxaccount15.weebly.com","comment":"https://x.com/urldna_bot/status/1963965372215730494","timestamp":"1757080808","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aef8d2f6-4458-5eb5-b4c5-0664f908fb1d","type":"domain","category":"Network activity","to_ids":true,"value":"kedi.mythstealer.win:9999","comment":"https://x.com/malwrhunterteam/status/1963974034183376963","timestamp":"1757082873","distribution":"5"},{"uuid":"cfe545c4-b3d4-5f9c-9cb9-fb1db53754ba","type":"url","category":"Network activity","to_ids":true,"value":"http://kedi.mythstealer.win:9999","comment":"https://x.com/malwrhunterteam/status/1963974034183376963","timestamp":"1757082873","distribution":"5"},{"uuid":"6f0a66dc-a866-5300-9e13-fc1f39b69670","type":"sha256","category":"Payload delivery","to_ids":true,"value":"264c4a730a67ed4d7ac8f589fcb52619bb75a766969975eb34cb20322b447c02","comment":"https://x.com/malwrhunterteam/status/1963974034183376963","timestamp":"1757082873","distribution":"5"},{"uuid":"65d50eee-0c86-59cf-aaaf-9c798b3a9d7e","type":"domain","category":"Network activity","to_ids":true,"value":"population-cups-lang-hearings.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1963981223254020561","timestamp":"1757084587","distribution":"5"},{"uuid":"caa203ee-7656-532b-a22a-d90ecac163ce","type":"url","category":"Network activity","to_ids":true,"value":"http://population-cups-lang-hearings.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1963981223254020561","timestamp":"1757084587","distribution":"5"},{"uuid":"76472219-c929-56fd-a7b9-26c7c28cb096","type":"sha256","category":"Payload delivery","to_ids":true,"value":"254e367cbd0d77e7423428a8421136100d95800a6cf809f85747da30605e38a0","comment":"https://x.com/malwrhunterteam/status/1963981223254020561","timestamp":"1757084587","distribution":"5"},{"uuid":"077a10c7-b5b1-5f2c-983c-b68040416273","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9d24fb50dc8fc62a8e09daf8a110cb625f87c03496fd9f6bfd9364750ad82d2b","comment":"https://x.com/malwrhunterteam/status/1963986221408858454","timestamp":"1757085778","distribution":"5"},{"uuid":"73216c65-7d3c-5448-bb54-0993a2ea78be","type":"url","category":"Network activity","to_ids":true,"value":"http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion","comment":"https://x.com/PaduckLee/status/1963995355156193452","timestamp":"1757087956","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a03ef09a-4f77-5a90-b301-b18a909eae79","type":"domain","category":"Network activity","to_ids":true,"value":"fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion","comment":"https://x.com/PaduckLee/status/1963995355156193452","timestamp":"1757087956","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"cf68b7a5-0c20-5f55-a8d3-9a06f4abd59b","type":"domain","category":"Network activity","to_ids":true,"value":"khhkkk.weebly.com","comment":"https://x.com/urldna_bot/status/1963995570659316130","timestamp":"1757088007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"de77a9a2-725d-5382-a6e6-0af5650a8837","type":"url","category":"Network activity","to_ids":true,"value":"https://khhkkk.weebly.com","comment":"https://x.com/urldna_bot/status/1963995570659316130","timestamp":"1757088007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ace43b32-0038-55ff-8ab8-6a341c741982","type":"md5","category":"Payload delivery","to_ids":true,"value":"425d28263b9cea66a259a86f0fca620f","comment":"https://x.com/PaduckLee/status/1963996066933588387","timestamp":"1757088126","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"edc2767e-71be-50ca-9cf4-5b1e1b029e2e","type":"domain","category":"Network activity","to_ids":true,"value":"ransomlook.io","comment":"https://x.com/s3curetheweb/status/1964019624149664233","timestamp":"1757093742","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"6350ecf9-6c0b-526e-882c-23e84fcccf85","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ransomlook.io/screenshots/lockbit5-lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yadonion.png","comment":"https://x.com/s3curetheweb/status/1964019624149664233","timestamp":"1757093742","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"d3a9ab2b-5759-50c8-8c17-507c905be109","type":"url","category":"Network activity","to_ids":true,"value":"http://58.22.95.122:6868","comment":"https://x.com/midnight_comms/status/1964021516716159121","timestamp":"1757094193","distribution":"5"},{"uuid":"b4d2e193-9367-57f1-b817-79bbe207a1ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"58.22.95.122","comment":"https://x.com/midnight_comms/status/1964021516716159121","timestamp":"1757094193","distribution":"5"},{"uuid":"df83709f-efdc-5a52-9655-25f9499bd41a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.243.37.31","comment":"https://x.com/smica83/status/1964025679688712234","timestamp":"1757095186","distribution":"5"},{"uuid":"3ef794e8-67e5-5556-9e87-ee03c25f65fb","type":"domain","category":"Network activity","to_ids":true,"value":"jmtykwlohydeiud.com","comment":"https://x.com/smica83/status/1964025679688712234","timestamp":"1757095186","distribution":"5"},{"uuid":"8da87123-4546-59e9-9bd2-a3e840cb6090","type":"url","category":"Network activity","to_ids":true,"value":"http://jmtykwlohydeiud.com","comment":"https://x.com/smica83/status/1964025679688712234","timestamp":"1757095186","distribution":"5"},{"uuid":"db1e67e0-3f6a-567a-b555-bc78df96e79f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.37.31","comment":"https://x.com/smica83/status/1964025679688712234","timestamp":"1757095186","distribution":"5"},{"uuid":"d6321944-6cbd-5cd4-914f-38a31af70b60","type":"sha256","category":"Payload delivery","to_ids":true,"value":"7ad87688702340e1ded1cbf04082bf455062bc546d54764ef5e3b36edfb34552","comment":"https://x.com/phatomcandle/status/1964025764728521133","timestamp":"1757095206","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"9cb8b76f-48bd-55bd-b49f-9d33acdc4779","type":"md5","category":"Payload delivery","to_ids":true,"value":"9e71a8c5db42c69322839d6db65f2079","comment":"https://x.com/phatomcandle/status/1964025764728521133","timestamp":"1757095206","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"1a42f150-645a-5a23-926d-da67049b6da5","type":"url","category":"Network activity","to_ids":true,"value":"http://46.183.221.230","comment":"https://x.com/phatomcandle/status/1964025764728521133","timestamp":"1757095206","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"e106d029-f2f5-5ba9-bb4d-03b2b0472512","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.183.221.230","comment":"https://x.com/phatomcandle/status/1964025764728521133","timestamp":"1757095206","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"f1a72da1-6699-5d35-82e8-969d4045a5bd","type":"domain","category":"Network activity","to_ids":true,"value":"vue-coinbase.vercel.app","comment":"https://x.com/urldna_bot/status/1964025771841733051","timestamp":"1757095208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e257ef26-9d68-507f-8c28-45e518b4f9b5","type":"url","category":"Network activity","to_ids":true,"value":"https://vue-coinbase.vercel.app/prices","comment":"https://x.com/urldna_bot/status/1964025771841733051","timestamp":"1757095208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5c5a4309-88e5-5f0c-9009-c5000431117c","type":"domain","category":"Network activity","to_ids":true,"value":"iswellwithme.com","comment":"https://x.com/SarlackLab/status/1964025801403154901","timestamp":"1757095215","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"23446a44-23a0-5773-a50e-e25c8865014a","type":"url","category":"Network activity","to_ids":true,"value":"http://iswellwithme.com","comment":"https://x.com/SarlackLab/status/1964025801403154901","timestamp":"1757095215","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"44de6799-1a93-5213-bbe0-302319b8b443","type":"url","category":"Network activity","to_ids":true,"value":"http://47.115.137.166:8888","comment":"https://x.com/drb_ra/status/1964037505960829175","timestamp":"1757098006","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"13a2a2a6-2290-55a4-9421-8a06987f5c2a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.115.137.166","comment":"https://x.com/drb_ra/status/1964037505960829175","timestamp":"1757098006","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"83c9c2b3-538d-57a7-a531-8b8b306de490","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.246.6.16","comment":"https://x.com/drb_ra/status/1964037646327382084","timestamp":"1757098039","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"2c0c896b-abcf-596c-84a3-866212a9dd47","type":"url","category":"Network activity","to_ids":true,"value":"http://46.246.6.16:5000","comment":"https://x.com/drb_ra/status/1964037646327382084","timestamp":"1757098039","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"35a32cfe-1a81-56ca-b957-1b798096023e","type":"url","category":"Network activity","to_ids":true,"value":"http://186.105.114.159:443","comment":"https://x.com/drb_ra/status/1964037788463948138","timestamp":"1757098073","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"96394ce0-667f-53e4-9fe0-2b3ebf5d12a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.105.114.159","comment":"https://x.com/drb_ra/status/1964037788463948138","timestamp":"1757098073","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"cc892ecd-da89-5b6b-852f-1ca7754487a9","type":"url","category":"Network activity","to_ids":true,"value":"http://86.106.85.80:443","comment":"https://x.com/drb_ra/status/1964037928822141426","timestamp":"1757098106","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"f3ea3734-d475-5e06-9606-58e061e3986d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.106.85.80","comment":"https://x.com/drb_ra/status/1964037928822141426","timestamp":"1757098106","distribution":"5","Tag":[{"name":"Havoc"},{"name":"C2"}]},{"uuid":"1afa38f2-09d4-5957-9d16-7961555d1d37","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.90.5:443","comment":"https://x.com/drb_ra/status/1964038071986311379","timestamp":"1757098141","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"888a9b60-e174-5ac3-ba78-1a48c609c224","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.90.5","comment":"https://x.com/drb_ra/status/1964038071986311379","timestamp":"1757098141","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"a7e488d4-7294-51ef-8e5d-71cb28e6eeca","type":"url","category":"Network activity","to_ids":true,"value":"http://54.175.247.131:7443","comment":"https://x.com/drb_ra/status/1964038213422420408","timestamp":"1757098174","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"e7aea721-dc79-53d8-b8c0-367f837a03d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.175.247.131","comment":"https://x.com/drb_ra/status/1964038213422420408","timestamp":"1757098174","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"08c56045-23ac-501d-a6b0-34614fbd3eb2","type":"url","category":"Network activity","to_ids":true,"value":"http://23.92.29.169:31337","comment":"https://x.com/drb_ra/status/1964038358906118264","timestamp":"1757098209","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"80b40da2-694e-5f83-9fa6-70d4cbb9a5a2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.92.29.169","comment":"https://x.com/drb_ra/status/1964038358906118264","timestamp":"1757098209","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"6c1c66f5-73e2-59b1-94be-5bfcce8d1d55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.136.6.205","comment":"https://x.com/drb_ra/status/1964038505417285881","timestamp":"1757098244","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"97831eb0-ab53-5f56-9110-46b88ce78345","type":"url","category":"Network activity","to_ids":true,"value":"http://45.136.6.205:31337","comment":"https://x.com/drb_ra/status/1964038505417285881","timestamp":"1757098244","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"5c749bbe-e117-5459-a768-e7c606e3459b","type":"url","category":"Network activity","to_ids":true,"value":"http://91.212.166.195:4332","comment":"https://x.com/drb_ra/status/1964039155953828250","timestamp":"1757098399","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ae940046-465a-50f7-9cff-cc016938f4e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.212.166.195","comment":"https://x.com/drb_ra/status/1964039155953828250","timestamp":"1757098399","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"11b8d4a0-fdba-5007-855f-66ac93bbcfdf","type":"url","category":"Network activity","to_ids":true,"value":"http://167.172.150.156:9090","comment":"https://x.com/drb_ra/status/1964039298874798354","timestamp":"1757098433","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e297719d-994f-5613-bdda-852f3a0b1751","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.172.150.156","comment":"https://x.com/drb_ra/status/1964039298874798354","timestamp":"1757098433","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a3426e1e-8eda-5af1-a883-46d8ef5bd7ca","type":"url","category":"Network activity","to_ids":true,"value":"http://149.248.79.113:2404","comment":"https://x.com/drb_ra/status/1964039442093559966","timestamp":"1757098467","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"adddf439-57bc-5f26-8748-a3f828f7fba6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.248.79.113","comment":"https://x.com/drb_ra/status/1964039442093559966","timestamp":"1757098467","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0fdf2249-6e90-5b7f-80e2-fb28173cc53f","type":"url","category":"Network activity","to_ids":true,"value":"http://93.127.143.46:2404","comment":"https://x.com/drb_ra/status/1964039584225935721","timestamp":"1757098501","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"36128441-05e2-580b-97bd-9e9f631368e6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.127.143.46","comment":"https://x.com/drb_ra/status/1964039584225935721","timestamp":"1757098501","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8a37899b-8033-5f13-bb8b-2ea9d0e88192","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.169.40.245","comment":"https://x.com/drb_ra/status/1964039724818985317","timestamp":"1757098535","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"73ad502e-adf8-5995-959c-58af17b6f2ff","type":"url","category":"Network activity","to_ids":true,"value":"http://186.169.40.245:3585","comment":"https://x.com/drb_ra/status/1964039724818985317","timestamp":"1757098535","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"62309ac0-bd1e-58b9-bead-b23b01975a00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.101.131.189","comment":"https://x.com/drb_ra/status/1964039866376687659","timestamp":"1757098568","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0dd3509a-06d9-5738-a5c3-25c4135ea683","type":"url","category":"Network activity","to_ids":true,"value":"http://191.101.131.189:2404","comment":"https://x.com/drb_ra/status/1964039866376687659","timestamp":"1757098568","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"109fba49-798d-5051-bdff-b070509abac9","type":"url","category":"Network activity","to_ids":true,"value":"http://83.147.13.105:10001","comment":"https://x.com/drb_ra/status/1964040008106434996","timestamp":"1757098602","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"767df82f-8970-589e-800e-cd00a1ebb1b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.147.13.105","comment":"https://x.com/drb_ra/status/1964040008106434996","timestamp":"1757098602","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"4792845d-11d7-5b45-a435-c3b8df66d0b4","type":"url","category":"Network activity","to_ids":true,"value":"http://18.199.40.209:47486","comment":"https://x.com/drb_ra/status/1964040151408976100","timestamp":"1757098636","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a8c04eb3-4afc-59e9-a1c1-b05482068c73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.199.40.209","comment":"https://x.com/drb_ra/status/1964040151408976100","timestamp":"1757098636","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"090e0128-6d90-5fc7-859a-77d5e24daa61","type":"url","category":"Network activity","to_ids":true,"value":"http://54.194.122.46:80","comment":"https://x.com/drb_ra/status/1964040296183795801","timestamp":"1757098671","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"91a2f18d-399b-551a-8476-1b4095fef39d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.194.122.46","comment":"https://x.com/drb_ra/status/1964040296183795801","timestamp":"1757098671","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"43e24144-8af6-591a-bd48-a4f63bb57aca","type":"url","category":"Network activity","to_ids":true,"value":"http://63.32.102.146:80","comment":"https://x.com/drb_ra/status/1964040439159210477","timestamp":"1757098705","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5e09db7f-5ec3-50db-aebd-e1e78bfc6834","type":"ip-dst","category":"Network activity","to_ids":true,"value":"63.32.102.146","comment":"https://x.com/drb_ra/status/1964040439159210477","timestamp":"1757098705","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"6ddd36a3-39dd-599d-92e6-5f9a47eb25cd","type":"url","category":"Network activity","to_ids":true,"value":"http://75.101.136.96:587","comment":"https://x.com/drb_ra/status/1964040583002861985","timestamp":"1757098739","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a598e9cc-9733-5ce2-8fbf-a416f5d1503a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"75.101.136.96","comment":"https://x.com/drb_ra/status/1964040724015395023","timestamp":"1757098773","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"8c9be6f9-577b-561e-a941-3579315cdebb","type":"url","category":"Network activity","to_ids":true,"value":"http://75.101.136.96:465","comment":"https://x.com/drb_ra/status/1964040724015395023","timestamp":"1757098773","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b04f3124-51f8-565b-8dc3-03aaa156ac95","type":"url","category":"Network activity","to_ids":true,"value":"http://34.253.187.128:80","comment":"https://x.com/drb_ra/status/1964040869012516882","timestamp":"1757098807","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d4463b32-1980-5607-9603-cdcf7dcd1cd8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.253.187.128","comment":"https://x.com/drb_ra/status/1964040869012516882","timestamp":"1757098807","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"088259b7-7695-54c4-bdf4-1cc05419cb4f","type":"url","category":"Network activity","to_ids":true,"value":"http://18.201.251.77:80","comment":"https://x.com/drb_ra/status/1964041014974222399","timestamp":"1757098842","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b99abff2-28f4-5e94-a911-6e6423f1b9a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.201.251.77","comment":"https://x.com/drb_ra/status/1964041014974222399","timestamp":"1757098842","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5779f7c1-6717-5310-9278-c9d95f9a9076","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.249.29:80","comment":"https://x.com/drb_ra/status/1964041168980726204","timestamp":"1757098879","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a561f2a0-6ff5-59c9-b602-7cad71bd2add","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.202.150:80","comment":"https://x.com/drb_ra/status/1964041316100083859","timestamp":"1757098914","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f143bb43-be49-5a30-bb85-acb51ea2075a","type":"domain","category":"Network activity","to_ids":true,"value":"lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion","comment":"https://x.com/DarkWebInformer/status/1964055630500565168","timestamp":"1757102327","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"054a15b2-a655-5c1e-8609-c1e77754102e","type":"url","category":"Network activity","to_ids":true,"value":"http://lockbitfbinpwhbyomxkiqtwhwiyetrbkb4hnqmshaonqxmsrqwg7yad.onion","comment":"https://x.com/DarkWebInformer/status/1964055630500565168","timestamp":"1757102327","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"3bb6c4f8-1037-55f3-a39c-494db797b4ec","type":"url","category":"Network activity","to_ids":true,"value":"https://itrutcaitrtailgi.webflow.io","comment":"https://x.com/urldna_bot/status/1964055980703924307","timestamp":"1757102410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f369f1ec-93d3-557f-8d1e-1b9e794e2a05","type":"domain","category":"Network activity","to_ids":true,"value":"itrutcaitrtailgi.webflow.io","comment":"https://x.com/urldna_bot/status/1964055980703924307","timestamp":"1757102410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"be1b665c-afb8-5537-af06-027cf0a1d3c5","type":"domain","category":"Network activity","to_ids":true,"value":"testcs888.com","comment":"https://x.com/drb_ra/status/1964069436937175174","timestamp":"1757105619","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8124629b-66ef-5671-bedb-6262341ebd96","type":"url","category":"Network activity","to_ids":true,"value":"https://testcs888.com/heifetz/chunks/lib-9b20c40c.536cd4ff91e1206dc093.js","comment":"https://x.com/drb_ra/status/1964069436937175174","timestamp":"1757105619","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93f5f74d-2b56-5797-b504-f6740439b4b5","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:80","comment":"https://x.com/drb_ra/status/1964069436937175174","timestamp":"1757105619","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c6b116ca-ba97-5b7e-a154-acc70f45cce9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.53","comment":"https://x.com/drb_ra/status/1964069436937175174","timestamp":"1757105619","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"782ce0ba-a37f-5410-89e5-c13004948d5e","type":"url","category":"Network activity","to_ids":true,"value":"https://119.23.123.0/24/en_US/all.js","comment":"https://x.com/drb_ra/status/1964069580541681840","timestamp":"1757105653","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5974af6c-1952-5909-bdc1-fbad4bfb778d","type":"url","category":"Network activity","to_ids":true,"value":"https://118.190.218.0/24/en_US/all.js","comment":"https://x.com/drb_ra/status/1964069729238196419","timestamp":"1757105688","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b30c6a25-e718-545a-8cb0-be25f5afddcf","type":"url","category":"Network activity","to_ids":true,"value":"https://118.190.214.0/24/ga.js","comment":"https://x.com/drb_ra/status/1964069871953612983","timestamp":"1757105722","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"03bf08df-f3ed-5252-8d61-95d26bd8d6c0","type":"url","category":"Network activity","to_ids":true,"value":"https://114.215.72.0/24/cx","comment":"https://x.com/drb_ra/status/1964070013976883468","timestamp":"1757105756","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"30e912e6-89aa-5197-9972-854ab5de3774","type":"url","category":"Network activity","to_ids":true,"value":"https://114.215.0.0/16/ptj","comment":"https://x.com/drb_ra/status/1964070157082325172","timestamp":"1757105790","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b167c739-1658-5d27-8d79-3c94378284b2","type":"url","category":"Network activity","to_ids":true,"value":"https://112.124.132.0/24/cx","comment":"https://x.com/drb_ra/status/1964070299047010352","timestamp":"1757105824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"50a657a1-9d5e-5fe4-8523-feb3f771469f","type":"url","category":"Network activity","to_ids":true,"value":"https://106.11.37.0/24/match","comment":"https://x.com/drb_ra/status/1964070441418359166","timestamp":"1757105858","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bf2f97a5-976a-5f17-b88e-a89b42e36dbe","type":"url","category":"Network activity","to_ids":true,"value":"https://101.37.183.0/24/cm","comment":"https://x.com/drb_ra/status/1964070584658055270","timestamp":"1757105892","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1f5ff0d7-d6d5-5871-95de-3f9ea46d818e","type":"url","category":"Network activity","to_ids":true,"value":"https://101.200.20.0/24/j.ad","comment":"https://x.com/drb_ra/status/1964070731244777880","timestamp":"1757105927","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ba3697a4-2d43-59c6-8af0-cfd42eaa4d0c","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.0/24/fwlink","comment":"https://x.com/drb_ra/status/1964070874589356518","timestamp":"1757105961","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0e6bb640-22bd-5e83-8dd3-218755930065","type":"url","category":"Network activity","to_ids":true,"value":"http://221.15.231.187","comment":"https://x.com/threatquery/status/1964071050448110029","timestamp":"1757106003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"507a6d6c-e8f8-569d-9aa7-b9aa7ef269fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.15.231.187","comment":"https://x.com/threatquery/status/1964071050448110029","timestamp":"1757106003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"da6933e0-5276-5c28-8748-20198f9d6b47","type":"url","category":"Network activity","to_ids":true,"value":"http://212.200.255.48","comment":"https://x.com/threatquery/status/1964071048585900543","timestamp":"1757106003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"5e73135f-7089-57ee-9791-74f03ef69d6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.200.255.48","comment":"https://x.com/threatquery/status/1964071048585900543","timestamp":"1757106003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Lokibot"}]},{"uuid":"cd510352-f92f-5948-a1ba-b3ba5b112495","type":"url","category":"Network activity","to_ids":true,"value":"http://104.41.58.66","comment":"https://x.com/threatquery/status/1964071052339814694","timestamp":"1757106004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"bbef4220-c1a0-5840-b219-cb1907487e51","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.41.58.66","comment":"https://x.com/threatquery/status/1964071052339814694","timestamp":"1757106004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"}]},{"uuid":"9f40275d-c93c-59c0-90a6-1ca2142b1543","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.43.166.60","comment":"https://x.com/drb_ra/status/1964071524995915888","timestamp":"1757106116","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"58abf0b5-65fe-5d80-ac36-d20adc25fe7f","type":"url","category":"Network activity","to_ids":true,"value":"http://101.43.166.60:8888","comment":"https://x.com/drb_ra/status/1964071524995915888","timestamp":"1757106116","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3aca1a8c-cbc4-57ad-a148-acd4a0e7f4fd","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:443","comment":"https://x.com/drb_ra/status/1964071669451944311","timestamp":"1757106151","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4d695eb-b46a-5f4e-80bc-e2b1d792f741","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:9898","comment":"https://x.com/drb_ra/status/1964071812792275438","timestamp":"1757106185","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b174ec54-3fa9-5c2f-9553-eb28b582edfa","type":"url","category":"Network activity","to_ids":true,"value":"https://127.0.0.1/introduction/edr","comment":"https://x.com/drb_ra/status/1964071812792275438","timestamp":"1757106185","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1964071812792275438","timestamp":"1757106185","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bfada97e-ffbb-5a39-970e-4040d9280bec","type":"url","category":"Network activity","to_ids":true,"value":"http://159.203.135.2:4443","comment":"https://x.com/drb_ra/status/1964080601427746944","timestamp":"1757108280","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0b7a2e0e-6b54-5724-ae0c-31d57d460e0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.203.135.2","comment":"https://x.com/drb_ra/status/1964080601427746944","timestamp":"1757108280","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ddca4cc0-f6da-503e-8cdb-1a71df90d737","type":"url","category":"Network activity","to_ids":true,"value":"https://s3.ap-east-1.amazonaws.com/woaihepijiu/CZ2IV/TGESetup_v1757008227.034778.exe","comment":"https://x.com/malwrhunterteam/status/1964085071435956541","timestamp":"1757109346","distribution":"5"},{"uuid":"3a3a4f15-5011-5e76-938f-9bae4143fa38","type":"url","category":"Network activity","to_ids":true,"value":"http://52.128.225.124","comment":"https://x.com/malwrhunterteam/status/1964085071435956541","timestamp":"1757109346","distribution":"5"},{"uuid":"326ee5ea-cd2a-5047-8368-66478bec8745","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.128.225.124","comment":"https://x.com/malwrhunterteam/status/1964085071435956541","timestamp":"1757109346","distribution":"5"},{"uuid":"7db6ef4f-3591-5ab4-8c8a-37ea1e382b32","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5a1f00cbd661fe2cc517f3cc1d996536855e895117f39d91a1ac577247de4021","comment":"https://x.com/malwrhunterteam/status/1964085071435956541","timestamp":"1757109346","distribution":"5"},{"uuid":"4093d299-ac88-5172-ae54-1897476102c9","type":"domain","category":"Network activity","to_ids":true,"value":"119642945261283233.weebly.com","comment":"https://x.com/urldna_bot/status/1964086172453384634","timestamp":"1757109609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4090192a-2378-5207-b972-d5e3e2efd3b9","type":"url","category":"Network activity","to_ids":true,"value":"https://119642945261283233.weebly.com","comment":"https://x.com/urldna_bot/status/1964086172453384634","timestamp":"1757109609","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f58265ab-0744-50fd-b896-b1aca917ae83","type":"url","category":"Network activity","to_ids":true,"value":"https://18.166.214.96/pixel","comment":"https://x.com/drb_ra/status/1964105153323155555","timestamp":"1757114134","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"32f0c99f-6c2e-5521-b79a-6cb95f4269b2","type":"url","category":"Network activity","to_ids":true,"value":"http://18.166.214.96:65531","comment":"https://x.com/drb_ra/status/1964105153323155555","timestamp":"1757114134","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c0371ef-073e-51ce-8657-2bd47799e664","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.166.214.96","comment":"https://x.com/drb_ra/status/1964105153323155555","timestamp":"1757114134","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e1d8efbb-5b30-50c2-ad7e-8cbd55403868","type":"url","category":"Network activity","to_ids":true,"value":"https://43.199.231.56/www/handle/doc","comment":"https://x.com/drb_ra/status/1964105295849767274","timestamp":"1757114168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4a0519b1-9947-575f-a786-ddbcafab10ff","type":"url","category":"Network activity","to_ids":true,"value":"http://43.199.231.56:8888","comment":"https://x.com/drb_ra/status/1964105295849767274","timestamp":"1757114168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"872c9d0d-b032-5135-83d4-fcb11686e8c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.199.231.56","comment":"https://x.com/drb_ra/status/1964105295849767274","timestamp":"1757114168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"25de0125-aaa3-5336-b68d-01edb6dcf8eb","type":"url","category":"Network activity","to_ids":true,"value":"https://178.16.55.53/heifetz/chunks/lib-9b20c40c.536cd4ff91e1206dc093.js","comment":"https://x.com/drb_ra/status/1964105439722803224","timestamp":"1757114202","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"34903cfc-5627-5b78-9357-9ae746470cd7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:8080","comment":"https://x.com/drb_ra/status/1964105439722803224","timestamp":"1757114202","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e54f3088-0741-5dd1-8453-766a2b0ae61b","type":"url","category":"Network activity","to_ids":true,"value":"http://52.63.124.130:443","comment":"https://x.com/drb_ra/status/1964106089223324139","timestamp":"1757114357","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"958bf1c2-2c66-55b4-b04d-c900229ec206","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.63.124.130","comment":"https://x.com/drb_ra/status/1964106089223324139","timestamp":"1757114357","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"27455816-208b-5fb9-b02f-da0ecb648692","type":"url","category":"Network activity","to_ids":true,"value":"https://124.223.199.39/visit.js","comment":"https://x.com/drb_ra/status/1964106232072950224","timestamp":"1757114391","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9fed5726-8cdb-599f-8cfa-29efb8683689","type":"url","category":"Network activity","to_ids":true,"value":"http://124.223.199.39:80","comment":"https://x.com/drb_ra/status/1964106232072950224","timestamp":"1757114391","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dce2f4ad-0f79-5462-9a52-8ed3507b3a5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.223.199.39","comment":"https://x.com/drb_ra/status/1964106232072950224","timestamp":"1757114391","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"94f6c46e-17ae-5625-8af5-db537245a6de","type":"url","category":"Network activity","to_ids":true,"value":"https://172.18.173.131/messages/C0527B0NM","comment":"https://x.com/drb_ra/status/1964106373861429579","timestamp":"1757114425","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"47c51e5d-9167-52ee-886a-2c5174b3d7a4","type":"url","category":"Network activity","to_ids":true,"value":"http://120.77.8.76:8088","comment":"https://x.com/drb_ra/status/1964106373861429579","timestamp":"1757114425","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"57fafb3c-3ad1-5f7d-b5ce-53615dd38d34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.77.8.76","comment":"https://x.com/drb_ra/status/1964106373861429579","timestamp":"1757114425","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e84d4558-1f36-578b-a829-18d848e78c56","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.18.173.131","comment":"https://x.com/drb_ra/status/1964106373861429579","timestamp":"1757114425","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4e95a833-081a-5e30-a21f-4893fb0ebb33","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.134.238:1099","comment":"https://x.com/drb_ra/status/1964106516950036827","timestamp":"1757114459","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7666e4fa-bd6f-5ac4-a4a1-0a895e188cd5","type":"domain","category":"Network activity","to_ids":true,"value":"fwefwefwe.xyz","comment":"https://x.com/drb_ra/status/1964106659870986294","timestamp":"1757114493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0228b913-c94f-56a4-be3d-4fc89bb97f79","type":"url","category":"Network activity","to_ids":true,"value":"https://www.fwefwefwe.xyz/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1964106659870986294","timestamp":"1757114493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e6b60867-785a-5b50-bbd1-cbf8f4ef43fd","type":"url","category":"Network activity","to_ids":true,"value":"http://193.149.189.78:443","comment":"https://x.com/drb_ra/status/1964106659870986294","timestamp":"1757114493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"076e4408-658e-5a3c-b70d-dc654aa6e04a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.149.189.78","comment":"https://x.com/drb_ra/status/1964106659870986294","timestamp":"1757114493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"716a9cec-b568-50b5-8932-7d95c88d70d3","type":"domain","category":"Network activity","to_ids":true,"value":"rushfamilylaw.com","comment":"https://x.com/dsasaki5/status/1964108664064635191","timestamp":"1757114971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5164d71e-eb2d-5428-a03b-a0675bf5115e","type":"url","category":"Network activity","to_ids":true,"value":"https://rushfamilylaw.com/v1/check","comment":"https://x.com/dsasaki5/status/1964108664064635191","timestamp":"1757114971","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12c35942-3c46-56d6-9afa-b4624b0f9b22","type":"domain","category":"Network activity","to_ids":true,"value":"bacoscarelloo30963.activehosted.com","comment":"https://x.com/urldna_bot/status/1964116373413535780","timestamp":"1757116809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"82d85adb-b731-56b4-b8ff-44637afd68be","type":"url","category":"Network activity","to_ids":true,"value":"http://bacoscarelloo30963.activehosted.com/f/1","comment":"https://x.com/urldna_bot/status/1964116373413535780","timestamp":"1757116809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5a95e806-5ec4-57f0-930d-56215e1506f0","type":"domain","category":"Network activity","to_ids":true,"value":"trip-short.sdhlugqoli.cn","comment":"https://x.com/masaomi346/status/1964131011106672838","timestamp":"1757120299","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3f36791-bfd7-5fea-8278-bf8ff5c80228","type":"url","category":"Network activity","to_ids":true,"value":"https://trip-short.sdhlugqoli.cn/customer/announcement/","comment":"https://x.com/masaomi346/status/1964131011106672838","timestamp":"1757120299","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43755dd6-d1cb-55bf-8270-321ecc23b920","type":"domain","category":"Network activity","to_ids":true,"value":"i4tvh-qyaaa-aaaap-ahmea-cai.icp0.io","comment":"https://x.com/AmberMille78556/status/1964144866444665292","timestamp":"1757123602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e011a115-41d2-575f-b701-dbc2973e259e","type":"url","category":"Network activity","to_ids":true,"value":"http://i4tvh-qyaaa-aaaap-ahmea-cai.icp0.io/index.html","comment":"https://x.com/AmberMille78556/status/1964144866444665292","timestamp":"1757123602","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38cad19b-6e6e-58f3-a473-35ae09e1816c","type":"domain","category":"Network activity","to_ids":true,"value":"refundyoursoi.co","comment":"https://x.com/AmberMille78556/status/1964148151591313836","timestamp":"1757124386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5afaec49-fcd8-544c-86d9-91d6c01a22ba","type":"url","category":"Network activity","to_ids":true,"value":"http://refundyoursoi.co","comment":"https://x.com/AmberMille78556/status/1964148151591313836","timestamp":"1757124386","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3bc80c5b-eec5-5275-87f0-dfc0368f35d5","type":"domain","category":"Network activity","to_ids":true,"value":"rewards-rekt.com","comment":"https://x.com/AmberMille78556/status/1964148228158333208","timestamp":"1757124404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a36c8db1-26d8-598a-89df-0918906ee3fd","type":"url","category":"Network activity","to_ids":true,"value":"https://rewards-rekt.com","comment":"https://x.com/AmberMille78556/status/1964148228158333208","timestamp":"1757124404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7436998e-5503-55d0-a1b5-22203ec0f376","type":"url","category":"Network activity","to_ids":true,"value":"http://rodeo.club","comment":"https://x.com/AmberMille78556/status/1964148336803364961","timestamp":"1757124430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3d86fa6-2d66-5a09-84af-a45411e83c77","type":"domain","category":"Network activity","to_ids":true,"value":"rodeo.club","comment":"https://x.com/AmberMille78556/status/1964148336803364961","timestamp":"1757124430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"487c3d13-ee7a-575d-ba8b-1742baa0fd83","type":"url","category":"Network activity","to_ids":true,"value":"https://rpcautoresolve.vercel.app","comment":"https://x.com/AmberMille78556/status/1964148435205955879","timestamp":"1757124453","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7bf81257-5e14-5ef9-9495-70ae9e266554","type":"domain","category":"Network activity","to_ids":true,"value":"rpcautoresolve.vercel.app","comment":"https://x.com/AmberMille78556/status/1964148435205955879","timestamp":"1757124453","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6193c81a-94bc-5dcf-a1fc-19332045c369","type":"domain","category":"Network activity","to_ids":true,"value":"se-pudgy.com","comment":"https://x.com/AmberMille78556/status/1964148547193848299","timestamp":"1757124480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6e15089d-8c37-5654-8d9d-516291eace31","type":"url","category":"Network activity","to_ids":true,"value":"https://se-pudgy.com","comment":"https://x.com/AmberMille78556/status/1964148547193848299","timestamp":"1757124480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"894dd4aa-10f6-5702-bff5-12f88c7c2058","type":"domain","category":"Network activity","to_ids":true,"value":"secretsnap.io","comment":"https://x.com/AmberMille78556/status/1964148629171532021","timestamp":"1757124499","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b81cbed2-22fb-5958-8f4a-f1f8f8e793be","type":"url","category":"Network activity","to_ids":true,"value":"https://secretsnap.io","comment":"https://x.com/AmberMille78556/status/1964148629171532021","timestamp":"1757124499","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cec6fa2-5ea5-5506-8ea0-b8e84def60dd","type":"url","category":"Network activity","to_ids":true,"value":"http://smn223.com","comment":"https://x.com/AmberMille78556/status/1964148728236740922","timestamp":"1757124523","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"219d1da1-37ef-548f-ad6e-a44cf8fdd11c","type":"domain","category":"Network activity","to_ids":true,"value":"smn223.com","comment":"https://x.com/AmberMille78556/status/1964148728236740922","timestamp":"1757124523","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8448066a-e110-5f76-9d87-2a01235c6bfa","type":"domain","category":"Network activity","to_ids":true,"value":"snapninja.io","comment":"https://x.com/AmberMille78556/status/1964148826622529739","timestamp":"1757124547","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70f9e05b-e766-5398-ba50-91538db5868e","type":"url","category":"Network activity","to_ids":true,"value":"https://snapninja.io","comment":"https://x.com/AmberMille78556/status/1964148826622529739","timestamp":"1757124547","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68e15e14-c9ae-50ad-b0b6-b749d174df1d","type":"url","category":"Network activity","to_ids":true,"value":"http://Snapseen.fr","comment":"https://x.com/AmberMille78556/status/1964148935368339956","timestamp":"1757124572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"743bc74d-c571-5ece-8c84-fbbd4b85dab7","type":"domain","category":"Network activity","to_ids":true,"value":"Snapseen.fr","comment":"https://x.com/AmberMille78556/status/1964148935368339956","timestamp":"1757124572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c4579cd-937e-5644-8d34-dcc97f834d81","type":"domain","category":"Network activity","to_ids":true,"value":"solantrade.com","comment":"https://x.com/AmberMille78556/status/1964149024379826422","timestamp":"1757124594","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"68d6043f-f16a-50b8-a2f6-37bf991de4b8","type":"url","category":"Network activity","to_ids":true,"value":"https://solantrade.com","comment":"https://x.com/AmberMille78556/status/1964149024379826422","timestamp":"1757124594","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c50f9894-45e3-506c-9911-d86c184de3c5","type":"domain","category":"Network activity","to_ids":true,"value":"sommia.network","comment":"https://x.com/AmberMille78556/status/1964149200867795405","timestamp":"1757124636","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"190766d2-61c8-5d13-a94e-c574f862f703","type":"url","category":"Network activity","to_ids":true,"value":"https://sommia.network","comment":"https://x.com/AmberMille78556/status/1964149200867795405","timestamp":"1757124636","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5188c93e-c7f4-59a0-b949-97001d398d7c","type":"url","category":"Network activity","to_ids":true,"value":"http://stake.meridianfinance.net","comment":"https://x.com/AmberMille78556/status/1964149268475736503","timestamp":"1757124652","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d57ca488-dc15-5d64-9ec7-b710dbfa0508","type":"domain","category":"Network activity","to_ids":true,"value":"stake.meridianfinance.net","comment":"https://x.com/AmberMille78556/status/1964149268475736503","timestamp":"1757124652","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d4940b4d-86b8-515a-87d4-8fcb4aae3f73","type":"domain","category":"Network activity","to_ids":true,"value":"stakeonlido.com","comment":"https://x.com/AmberMille78556/status/1964149356346445960","timestamp":"1757124673","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d797b1eb-0d8b-5891-b484-28c58d3e62e5","type":"url","category":"Network activity","to_ids":true,"value":"http://stakeonlido.com","comment":"https://x.com/AmberMille78556/status/1964149356346445960","timestamp":"1757124673","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2c1e793a-103e-58c1-8e9b-b99a321f848e","type":"domain","category":"Network activity","to_ids":true,"value":"stakingblockchainbets.xyz.","comment":"https://x.com/AmberMille78556/status/1964149467789107311","timestamp":"1757124699","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29e23d49-47db-5c3f-b5e5-31b093d6a1b3","type":"url","category":"Network activity","to_ids":true,"value":"http://stakingblockchainbets.xyz","comment":"https://x.com/AmberMille78556/status/1964149553071841320","timestamp":"1757124720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29ed5744-a9d1-5904-90e2-a4342f1e3952","type":"domain","category":"Network activity","to_ids":true,"value":"stakingblockchainbets.xyz","comment":"https://x.com/AmberMille78556/status/1964149553071841320","timestamp":"1757124720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"49aed1a3-55d9-52ea-9a34-454b6213a3e3","type":"domain","category":"Network activity","to_ids":true,"value":"swell-mainnet.pages.dev","comment":"https://x.com/AmberMille78556/status/1964149638195269831","timestamp":"1757124740","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b6067e42-c627-5d70-b798-654ff5149917","type":"url","category":"Network activity","to_ids":true,"value":"http://swell-mainnet.pages.dev","comment":"https://x.com/AmberMille78556/status/1964149638195269831","timestamp":"1757124740","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e5f6cdc2-c2fc-59d4-aaa8-485fa7a924c6","type":"domain","category":"Network activity","to_ids":true,"value":"taggerrewards.xyz.","comment":"https://x.com/AmberMille78556/status/1964149749893788100","timestamp":"1757124767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a41f8099-1464-5541-ab71-591c0fdac0b7","type":"domain","category":"Network activity","to_ids":true,"value":"taggerrewards.xyz","comment":"https://x.com/AmberMille78556/status/1964149840364904686","timestamp":"1757124788","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69a4b090-0231-5166-981c-e44efd49f4aa","type":"url","category":"Network activity","to_ids":true,"value":"https://taggerrewards.xyz","comment":"https://x.com/AmberMille78556/status/1964149840364904686","timestamp":"1757124788","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b4abe3a-f0b2-59f0-9d15-e4c4abc4c495","type":"url","category":"Network activity","to_ids":true,"value":"http://testnet.cometbridge.app","comment":"https://x.com/AmberMille78556/status/1964149930546606299","timestamp":"1757124810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3b63f751-23d4-5f81-b68e-ebad9a796442","type":"domain","category":"Network activity","to_ids":true,"value":"testnet.cometbridge.app","comment":"https://x.com/AmberMille78556/status/1964149930546606299","timestamp":"1757124810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9499a992-f38e-5de7-a8d9-db8fae680553","type":"domain","category":"Network activity","to_ids":true,"value":"trumpgive.com","comment":"https://x.com/AmberMille78556/status/1964150026633884126","timestamp":"1757124833","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ce9b83df-c3a8-5416-984d-02a9f1df9d20","type":"url","category":"Network activity","to_ids":true,"value":"https://trumpgive.com","comment":"https://x.com/AmberMille78556/status/1964150026633884126","timestamp":"1757124833","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4d13da31-c9b2-52cf-b847-8b265165c2d3","type":"url","category":"Network activity","to_ids":true,"value":"https://unisocks.online","comment":"https://x.com/AmberMille78556/status/1964150408709882193","timestamp":"1757124924","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5dc61cb0-3cf3-520d-b9cd-0255f74f4c1f","type":"domain","category":"Network activity","to_ids":true,"value":"unisocks.online","comment":"https://x.com/AmberMille78556/status/1964150408709882193","timestamp":"1757124924","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e23fcaef-3848-51c2-a6fc-ef3baf684f16","type":"domain","category":"Network activity","to_ids":true,"value":"unreisvvap.cc","comment":"https://x.com/AmberMille78556/status/1964150493652853183","timestamp":"1757124944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"07288df3-2e3a-5460-97ee-26ed98d429a1","type":"url","category":"Network activity","to_ids":true,"value":"https://unreisvvap.cc/?swap=88","comment":"https://x.com/AmberMille78556/status/1964150493652853183","timestamp":"1757124944","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5002eda4-2206-5325-bd08-d3c866ed7e18","type":"url","category":"Network activity","to_ids":true,"value":"https://usdena.pro","comment":"https://x.com/AmberMille78556/status/1964150604562858173","timestamp":"1757124970","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73ed7881-30f6-50cf-8d96-1d2f59d29da8","type":"domain","category":"Network activity","to_ids":true,"value":"usdena.pro","comment":"https://x.com/AmberMille78556/status/1964150604562858173","timestamp":"1757124970","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b89cc076-0ca6-5357-94df-9b1a39fd9f20","type":"domain","category":"Network activity","to_ids":true,"value":"usdut.cfd","comment":"https://x.com/AmberMille78556/status/1964150695809982734","timestamp":"1757124992","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1d31128c-4c54-516d-9154-551994035d90","type":"url","category":"Network activity","to_ids":true,"value":"https://usdut.cfd","comment":"https://x.com/AmberMille78556/status/1964150695809982734","timestamp":"1757124992","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e75be70f-3e93-5d64-a118-74e24a0dfc43","type":"domain","category":"Network activity","to_ids":true,"value":"portal.openledgerfoundations.network","comment":"https://x.com/AmberMille78556/status/1964150927020974426","timestamp":"1757125047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4ac6aeb1-9da5-5132-8b8c-6b20aafae4fd","type":"url","category":"Network activity","to_ids":true,"value":"https://portal.openledgerfoundations.network","comment":"https://x.com/AmberMille78556/status/1964150927020974426","timestamp":"1757125047","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba29327c-d2b8-51f8-a552-361c34dea113","type":"domain","category":"Network activity","to_ids":true,"value":"trustwallect.starlngs.com","comment":"https://x.com/AmberMille78556/status/1964150995773972985","timestamp":"1757125064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efa1ed94-073e-589e-ba62-6031d43753a3","type":"url","category":"Network activity","to_ids":true,"value":"http://trustwallect.starlngs.com","comment":"https://x.com/AmberMille78556/status/1964150995773972985","timestamp":"1757125064","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ae55703-1906-5d0a-950b-6d1fb14a1f8d","type":"domain","category":"Network activity","to_ids":true,"value":"uvirsnvap.cc","comment":"https://x.com/AmberMille78556/status/1964151072018080138","timestamp":"1757125082","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5596271b-e022-57ff-b61f-f60f95249de8","type":"url","category":"Network activity","to_ids":true,"value":"https://uvirsnvap.cc/?swap=88","comment":"https://x.com/AmberMille78556/status/1964151072018080138","timestamp":"1757125082","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6d9787a7-79eb-5ab7-9c4d-4a34d7db6f11","type":"url","category":"Network activity","to_ids":true,"value":"http://wjqqh.cfd","comment":"https://x.com/AmberMille78556/status/1964151188955258960","timestamp":"1757125110","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9b262635-3b6e-574d-99ea-f61d5ef46349","type":"domain","category":"Network activity","to_ids":true,"value":"wjqqh.cfd","comment":"https://x.com/AmberMille78556/status/1964151188955258960","timestamp":"1757125110","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7da96f13-c2a3-5478-9037-e14a2bcd846c","type":"url","category":"Network activity","to_ids":true,"value":"https://worldilbertyfinance.live","comment":"https://x.com/AmberMille78556/status/1964151263471321203","timestamp":"1757125128","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d092d35-a7d2-50b5-9397-f0c2fa2e72d1","type":"domain","category":"Network activity","to_ids":true,"value":"worldilbertyfinance.live","comment":"https://x.com/AmberMille78556/status/1964151263471321203","timestamp":"1757125128","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d9fb636-ff77-593a-bda3-2204217d309e","type":"url","category":"Network activity","to_ids":true,"value":"http://www-bingo63.com","comment":"https://x.com/AmberMille78556/status/1964151350922457188","timestamp":"1757125148","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f3abb91-0444-5e1b-b80f-e23387a3f03c","type":"domain","category":"Network activity","to_ids":true,"value":"www-bingo63.com","comment":"https://x.com/AmberMille78556/status/1964151350922457188","timestamp":"1757125148","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a45ff917-c7f8-5c3d-bab8-e3718b8d17e4","type":"domain","category":"Network activity","to_ids":true,"value":"antarctic.exchange","comment":"https://x.com/AmberMille78556/status/1964151467050160369","timestamp":"1757125176","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2b383aee-5d3a-56bc-8633-7cc7b95e324c","type":"url","category":"Network activity","to_ids":true,"value":"http://www.antarctic.exchange","comment":"https://x.com/AmberMille78556/status/1964151467050160369","timestamp":"1757125176","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"71913bb0-ebd8-5253-b3e2-619fc7e8b18b","type":"url","category":"Network activity","to_ids":true,"value":"http://www.dare.market/earlyaccess","comment":"https://x.com/AmberMille78556/status/1964151550059614573","timestamp":"1757125196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"269bd485-90e2-542d-8af6-8a8908710261","type":"domain","category":"Network activity","to_ids":true,"value":"dare.market","comment":"https://x.com/AmberMille78556/status/1964151550059614573","timestamp":"1757125196","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6a45393-1e0f-5e10-95dc-f9ec27d77e65","type":"url","category":"Network activity","to_ids":true,"value":"http://www.online232.com","comment":"https://x.com/AmberMille78556/status/1964151632003748147","timestamp":"1757125215","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2eef7216-d3f7-57e7-8a40-b387892dd532","type":"domain","category":"Network activity","to_ids":true,"value":"online232.com","comment":"https://x.com/AmberMille78556/status/1964151632003748147","timestamp":"1757125215","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"47b93e62-a196-5c28-acb1-e8ef42a1dd51","type":"domain","category":"Network activity","to_ids":true,"value":"y5ppo-6aaaa-aaaal-ajzmq-cai.icp0.io","comment":"https://x.com/AmberMille78556/status/1964151722894311810","timestamp":"1757125237","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d4207cc7-3fc9-5f48-8860-f4ea6b1453f4","type":"url","category":"Network activity","to_ids":true,"value":"http://y5ppo-6aaaa-aaaal-ajzmq-cai.icp0.io","comment":"https://x.com/AmberMille78556/status/1964151722894311810","timestamp":"1757125237","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f55757d-e4a7-5046-bb54-c2f61ffdd629","type":"domain","category":"Network activity","to_ids":true,"value":"api-integrate.com","comment":"https://x.com/AmberMille78556/status/1964160133681803752","timestamp":"1757127242","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"df0793ab-761c-516c-8990-22da6ea97f84","type":"url","category":"Network activity","to_ids":true,"value":"http://api-integrate.com","comment":"https://x.com/AmberMille78556/status/1964160133681803752","timestamp":"1757127242","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef2de187-c381-5a85-9181-8e820f86f8aa","type":"domain","category":"Network activity","to_ids":true,"value":"bet73083.com","comment":"https://x.com/urldna_bot/status/1964176774511694098","timestamp":"1757131210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f6a938cb-97da-5153-9b4f-c30906481d7d","type":"url","category":"Network activity","to_ids":true,"value":"https://bet73083.com","comment":"https://x.com/urldna_bot/status/1964176774511694098","timestamp":"1757131210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1aa38201-2acf-5fe6-a716-1eeea3989e9b","type":"domain","category":"Network activity","to_ids":true,"value":"dydx1.com","comment":"https://x.com/AmberMille78556/status/1964186544278843829","timestamp":"1757133539","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8306ac69-c068-5dea-9929-d8e20aa2285f","type":"url","category":"Network activity","to_ids":true,"value":"https://dydx1.com","comment":"https://x.com/AmberMille78556/status/1964186544278843829","timestamp":"1757133539","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94d56804-0a16-5f33-8f03-a6a97e02e160","type":"md5","category":"Payload delivery","to_ids":true,"value":"e593d259c6f290eb02a942ae30961a5b","comment":"https://x.com/ReBensk/status/1964194779400413321","timestamp":"1757135503","distribution":"5","Tag":[{"name":"Android"},{"name":"Trojan"},{"name":"malware"}]},{"uuid":"6e2079ee-c40b-5fcf-834a-7cad4c6f43bb","type":"domain","category":"Network activity","to_ids":true,"value":"networkfue89ejfu3rf.weebly.com","comment":"https://x.com/urldna_bot/status/1964206977749233729","timestamp":"1757138411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bad18ec8-a140-5e8c-abc5-d4f23c98efa1","type":"url","category":"Network activity","to_ids":true,"value":"https://networkfue89ejfu3rf.weebly.com","comment":"https://x.com/urldna_bot/status/1964206977749233729","timestamp":"1757138411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9a5d0ee4-67e4-5e49-8051-9afd2fd6f54b","type":"domain","category":"Network activity","to_ids":true,"value":"gamble.moonshot.win","comment":"https://x.com/AmberMille78556/status/1964217060587688404","timestamp":"1757140815","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5c6415c2-91e0-551a-9b29-d64a389f3240","type":"url","category":"Network activity","to_ids":true,"value":"http://gamble.moonshot.win","comment":"https://x.com/AmberMille78556/status/1964217060587688404","timestamp":"1757140815","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cac826c-fafb-5b93-8c90-8f66f7a741d8","type":"url","category":"Network activity","to_ids":true,"value":"http://ozakai.info","comment":"https://x.com/AmberMille78556/status/1964217158692377025","timestamp":"1757140838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8fd0bb9e-9ed3-5b76-a22b-52cf3d724eaa","type":"domain","category":"Network activity","to_ids":true,"value":"ozakai.info","comment":"https://x.com/AmberMille78556/status/1964217158692377025","timestamp":"1757140838","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c05a91ac-4349-5598-bc30-eae981ec082c","type":"domain","category":"Network activity","to_ids":true,"value":"app.drop.money","comment":"https://x.com/AmberMille78556/status/1964217234420564246","timestamp":"1757140856","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"63b70c8e-c299-5166-a5bd-180842890219","type":"url","category":"Network activity","to_ids":true,"value":"http://app.drop.money/stake","comment":"https://x.com/AmberMille78556/status/1964217234420564246","timestamp":"1757140856","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41ee0ef1-cb5c-5435-94b4-40098e9a3e33","type":"domain","category":"Network activity","to_ids":true,"value":"littepepe.com","comment":"https://x.com/AmberMille78556/status/1964217331858407803","timestamp":"1757140879","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"edc22ecb-bf9f-513b-bca3-e918af71dad4","type":"url","category":"Network activity","to_ids":true,"value":"http://littepepe.com","comment":"https://x.com/AmberMille78556/status/1964217331858407803","timestamp":"1757140879","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"47e50c9d-ea70-5d24-aedc-196798dfe00c","type":"url","category":"Network activity","to_ids":true,"value":"http://flash-stake.pages.dev","comment":"https://x.com/AmberMille78556/status/1964217423214555515","timestamp":"1757140901","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20fab275-5948-5020-bcaf-3d32f2d657aa","type":"domain","category":"Network activity","to_ids":true,"value":"flash-stake.pages.dev","comment":"https://x.com/AmberMille78556/status/1964217423214555515","timestamp":"1757140901","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"766974d5-8316-54d4-8808-6476c1e18c07","type":"domain","category":"Network activity","to_ids":true,"value":"smartdexreauth.pages.dev","comment":"https://x.com/AmberMille78556/status/1964217518978924883","timestamp":"1757140924","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55e1b110-f47e-5062-b418-1e2b1dab21f3","type":"url","category":"Network activity","to_ids":true,"value":"http://smartdexreauth.pages.dev","comment":"https://x.com/AmberMille78556/status/1964217518978924883","timestamp":"1757140924","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"04775f58-4609-5579-99cf-0f31f899a55a","type":"domain","category":"Network activity","to_ids":true,"value":"finance-distribution.com","comment":"https://x.com/AmberMille78556/status/1964217626760032680","timestamp":"1757140950","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81335d56-a83f-5814-b90d-6fb960b4dc75","type":"url","category":"Network activity","to_ids":true,"value":"http://finance-distribution.com","comment":"https://x.com/AmberMille78556/status/1964217626760032680","timestamp":"1757140950","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a3f75b2a-9580-5eb1-b166-47a481b5c3dd","type":"domain","category":"Network activity","to_ids":true,"value":"drip.tools","comment":"https://x.com/AmberMille78556/status/1964217741323153513","timestamp":"1757140977","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c840a2a0-21cf-5a31-b201-3b2ca6ea8d99","type":"url","category":"Network activity","to_ids":true,"value":"http://drip.tools","comment":"https://x.com/AmberMille78556/status/1964217741323153513","timestamp":"1757140977","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92f5b181-bd83-51e1-9d96-5ad31c06f81d","type":"domain","category":"Network activity","to_ids":true,"value":"claim.level-money.app","comment":"https://x.com/AmberMille78556/status/1964217817042952223","timestamp":"1757140995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1953f0b1-41e0-5338-8504-54c9b5544a89","type":"url","category":"Network activity","to_ids":true,"value":"http://claim.level-money.app","comment":"https://x.com/AmberMille78556/status/1964217817042952223","timestamp":"1757140995","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6df9710d-1165-5051-8ace-50470fc89482","type":"domain","category":"Network activity","to_ids":true,"value":"aave.defi.blch.ru","comment":"https://x.com/AmberMille78556/status/1964217916489941420","timestamp":"1757141019","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e32c8965-a864-56b8-886c-aa7b6a589264","type":"url","category":"Network activity","to_ids":true,"value":"http://aave.defi.blch.ru","comment":"https://x.com/AmberMille78556/status/1964217916489941420","timestamp":"1757141019","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2d058f09-615d-513c-9945-10097035a1e0","type":"url","category":"Network activity","to_ids":true,"value":"http://abstract-9fmrav.testnet.nfts2.me","comment":"https://x.com/AmberMille78556/status/1964218027190157646","timestamp":"1757141045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41a815b3-f5e0-5c33-aef7-a9fafbab928e","type":"domain","category":"Network activity","to_ids":true,"value":"abstract-9fmrav.testnet.nfts2.me","comment":"https://x.com/AmberMille78556/status/1964218027190157646","timestamp":"1757141045","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d8db09a-7a5a-5c18-98e8-f933630a3c4b","type":"url","category":"Network activity","to_ids":true,"value":"http://185.211.5.129:31337","comment":"https://x.com/drb_ra/status/1964218528090759443","timestamp":"1757141165","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"17a667aa-0136-573f-9985-a36fb35c6db4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.211.5.129","comment":"https://x.com/drb_ra/status/1964218528090759443","timestamp":"1757141165","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"529f7e19-7e88-5dce-8e1e-269d238fdd1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.209.24.66","comment":"https://x.com/drb_ra/status/1964218673008181419","timestamp":"1757141199","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"02841a5b-16c1-586f-bc82-6e2108239933","type":"url","category":"Network activity","to_ids":true,"value":"http://134.209.24.66:31337","comment":"https://x.com/drb_ra/status/1964218673008181419","timestamp":"1757141199","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0a142119-2b76-5253-9054-2c4c34102885","type":"url","category":"Network activity","to_ids":true,"value":"http://117.72.201.219:31337","comment":"https://x.com/drb_ra/status/1964218816180679156","timestamp":"1757141233","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"120a2654-fe72-55f5-828f-588c64c1483d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.72.201.219","comment":"https://x.com/drb_ra/status/1964218816180679156","timestamp":"1757141233","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0cce7ab4-1687-5593-89fe-619eaf123b9f","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.63.20:31337","comment":"https://x.com/drb_ra/status/1964218956543103109","timestamp":"1757141267","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"3229829c-c8b9-5f69-8fb8-522bbae633fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.63.20","comment":"https://x.com/drb_ra/status/1964218956543103109","timestamp":"1757141267","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"fc447ba2-4772-51ea-a9e9-d884abca7550","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.239.183","comment":"https://x.com/drb_ra/status/1964219096322437180","timestamp":"1757141300","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"19ae0072-a2be-5860-9b73-5c3b9ece2618","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.239.183:31337","comment":"https://x.com/drb_ra/status/1964219096322437180","timestamp":"1757141300","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9a3d744b-9cec-5eda-aad2-ba7dce1c6339","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.113.74.248","comment":"https://x.com/drb_ra/status/1964219236932293039","timestamp":"1757141334","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"bf967685-59b2-5e46-9e03-6046656b99bb","type":"url","category":"Network activity","to_ids":true,"value":"http://194.113.74.248:31337","comment":"https://x.com/drb_ra/status/1964219236932293039","timestamp":"1757141334","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"81a3588f-9459-59fb-9bdf-6e0ac78297b3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.40.86.133","comment":"https://x.com/drb_ra/status/1964219378708193570","timestamp":"1757141367","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"72d122c2-2c1b-5a60-b92a-447c867b9710","type":"url","category":"Network activity","to_ids":true,"value":"http://185.40.86.133:443","comment":"https://x.com/drb_ra/status/1964219378708193570","timestamp":"1757141367","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5d41435c-f6f6-5f15-a260-f3db8cc3b8f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"72.14.190.211","comment":"https://x.com/drb_ra/status/1964219519812919518","timestamp":"1757141401","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"e2d3d6a7-0f15-5a5c-a32a-2eb229563717","type":"url","category":"Network activity","to_ids":true,"value":"http://72.14.190.211:31337","comment":"https://x.com/drb_ra/status/1964219519812919518","timestamp":"1757141401","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"18ab360b-5c1f-5135-aa1f-166f8650cb1e","type":"url","category":"Network activity","to_ids":true,"value":"http://34.19.22.113:8081","comment":"https://x.com/drb_ra/status/1964220168344645818","timestamp":"1757141556","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4591d4ec-6b6d-52c5-aaee-d745a54da46f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.172.89.79","comment":"https://x.com/drb_ra/status/1964220314570666171","timestamp":"1757141591","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8cf9e478-6f25-58b7-a181-22b9d73cbd14","type":"url","category":"Network activity","to_ids":true,"value":"http://144.172.89.79:53","comment":"https://x.com/drb_ra/status/1964220314570666171","timestamp":"1757141591","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"51e66cb8-15b2-5138-97a5-02ade3c2fdea","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.243.138:40482","comment":"https://x.com/drb_ra/status/1964220454379381156","timestamp":"1757141624","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e35f5270-7b76-59c3-93e5-9a0c9a6cc905","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.243.138","comment":"https://x.com/drb_ra/status/1964220454379381156","timestamp":"1757141624","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"449f6969-075c-551a-96bc-1ff7f502e4cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"190.255.85.13","comment":"https://x.com/drb_ra/status/1964220593848397991","timestamp":"1757141657","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"18f0455d-a6be-54a5-ab1c-939b0e5d6701","type":"url","category":"Network activity","to_ids":true,"value":"http://190.255.85.13:2404","comment":"https://x.com/drb_ra/status/1964220593848397991","timestamp":"1757141657","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"4ffa5e97-dd9c-5985-9c0b-c3f0faef9860","type":"url","category":"Network activity","to_ids":true,"value":"http://204.141.229.229:3232","comment":"https://x.com/drb_ra/status/1964220733778780374","timestamp":"1757141691","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"c4e01a1e-5f8a-5ee8-a290-ede5cee63510","type":"ip-dst","category":"Network activity","to_ids":true,"value":"204.141.229.229","comment":"https://x.com/drb_ra/status/1964220733778780374","timestamp":"1757141691","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"7814fe84-545b-56d5-8a55-c3f87f394989","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.187.144:47486","comment":"https://x.com/drb_ra/status/1964220877978923015","timestamp":"1757141725","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"db97877f-6d0b-5ae1-9f4c-7ce63109adbc","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.187.144:54681","comment":"https://x.com/drb_ra/status/1964221017397539305","timestamp":"1757141758","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0067798c-3b7e-5f69-aeb2-da18907e7487","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.187.144","comment":"https://x.com/drb_ra/status/1964221017397539305","timestamp":"1757141758","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9c3de61c-cc93-5fbe-b332-b8295bff1539","type":"url","category":"Network activity","to_ids":true,"value":"http://54.238.164.29:47486","comment":"https://x.com/drb_ra/status/1964221157256683821","timestamp":"1757141792","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88ed2591-38bc-5b73-a80e-6914fc87e4f2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.238.164.29","comment":"https://x.com/drb_ra/status/1964221157256683821","timestamp":"1757141792","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a5b80423-fd03-52ce-9a10-92eba03e97a8","type":"domain","category":"Network activity","to_ids":true,"value":"mithrilcoin.xyz","comment":"https://x.com/AmberMille78556/status/1964221241826447507","timestamp":"1757141812","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a584bd1d-bf67-57c0-a894-d05fe83f4555","type":"url","category":"Network activity","to_ids":true,"value":"http://mithrilcoin.xyz","comment":"https://x.com/AmberMille78556/status/1964221241826447507","timestamp":"1757141812","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d798f9f9-873a-580c-966e-0e7303c124be","type":"url","category":"Network activity","to_ids":true,"value":"http://88.116.203.221:5500","comment":"https://x.com/drb_ra/status/1964221295920320841","timestamp":"1757141825","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a522638d-4600-596c-a1aa-741cc9e68b8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.116.203.221","comment":"https://x.com/drb_ra/status/1964221295920320841","timestamp":"1757141825","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4f8690fa-eb48-5442-8626-851d44f7b22e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.61.174.117","comment":"https://x.com/drb_ra/status/1964221435410284606","timestamp":"1757141858","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"247f7a5c-b66e-5adb-a782-06ce668fa706","type":"url","category":"Network activity","to_ids":true,"value":"http://18.61.174.117:5986","comment":"https://x.com/drb_ra/status/1964221435410284606","timestamp":"1757141858","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1d8cfa8e-3845-5e55-a974-a55078c0cd52","type":"url","category":"Network activity","to_ids":true,"value":"http://79.241.108.185:81","comment":"https://x.com/drb_ra/status/1964221577056174080","timestamp":"1757141892","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"1d593614-5936-5e3a-bee8-0b267c094209","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.241.108.185","comment":"https://x.com/drb_ra/status/1964221577056174080","timestamp":"1757141892","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a77c7094-f17b-5fcf-9452-e3ef7d2fe13e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.17.225.195","comment":"https://x.com/drb_ra/status/1964221716411883833","timestamp":"1757141925","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"d88ece5f-ebdd-5841-845e-f1c497a1c348","type":"url","category":"Network activity","to_ids":true,"value":"http://51.17.225.195:6362","comment":"https://x.com/drb_ra/status/1964221716411883833","timestamp":"1757141925","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a5ad4701-f215-5257-bc5c-c661f7239a09","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.120.15.138","comment":"https://x.com/drb_ra/status/1964221855927062674","timestamp":"1757141958","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"5996b99f-d76b-5964-830d-11fcda20facd","type":"url","category":"Network activity","to_ids":true,"value":"http://196.120.15.138:443","comment":"https://x.com/drb_ra/status/1964221855927062674","timestamp":"1757141958","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"03204f8c-90bb-53ca-bc4a-ae2e89714140","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.199","comment":"https://x.com/drb_ra/status/1964221996167782522","timestamp":"1757141992","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"2578c4e5-e120-5450-9f8d-1cfdb93fcd73","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.199:8090","comment":"https://x.com/drb_ra/status/1964221996167782522","timestamp":"1757141992","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ce2988d7-25fe-59d3-820f-f81642ae1f60","type":"url","category":"Network activity","to_ids":true,"value":"http://23.26.76.160:1010","comment":"https://x.com/drb_ra/status/1964222136152695172","timestamp":"1757142025","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f02f8c05-7929-548e-916f-6114acea9b80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.26.76.160","comment":"https://x.com/drb_ra/status/1964222136152695172","timestamp":"1757142025","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"2bee1838-61e3-5b86-ab93-4b8d04bb42c0","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.208.58:8090","comment":"https://x.com/drb_ra/status/1964222276145946772","timestamp":"1757142058","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"086ac143-6f00-5e19-adc7-73fdbc184fb0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.208.58","comment":"https://x.com/drb_ra/status/1964222276145946772","timestamp":"1757142058","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"ccf7b906-025f-5362-8168-2b9f314b3699","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.29.255","comment":"https://x.com/drb_ra/status/1964222422321713188","timestamp":"1757142093","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fced58c1-2cf1-5294-8eaa-38bb33ddce4d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.29.255:80","comment":"https://x.com/drb_ra/status/1964222422321713188","timestamp":"1757142093","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"5c29a570-717d-5d8c-9567-b3613853735a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.241.138.226:80","comment":"https://x.com/drb_ra/status/1964222563157971072","timestamp":"1757142127","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"0e9062c3-1cb5-5036-8ad5-9f4b718bc3a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.241.138.226","comment":"https://x.com/drb_ra/status/1964222563157971072","timestamp":"1757142127","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"87be549a-28f4-5bb0-9a89-4ebde8a08d40","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.17.23.16","comment":"https://x.com/drb_ra/status/1964222703289667990","timestamp":"1757142160","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"52c1b82a-5188-58fc-891c-8f20ba672a11","type":"url","category":"Network activity","to_ids":true,"value":"http://52.17.23.16:80","comment":"https://x.com/drb_ra/status/1964222703289667990","timestamp":"1757142160","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"983a24c0-2261-5952-82b5-db64a2642060","type":"url","category":"Network activity","to_ids":true,"value":"http://3.252.124.222:443","comment":"https://x.com/drb_ra/status/1964222843958247895","timestamp":"1757142194","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"f731b7ab-1ef1-506d-a9ae-cfe505b73c38","type":"domain","category":"Network activity","to_ids":true,"value":"deloreanlabs.art","comment":"https://x.com/AmberMille78556/status/1964222849738055699","timestamp":"1757142195","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcdd9c46-1606-5601-8075-69af3eb85edc","type":"url","category":"Network activity","to_ids":true,"value":"http://deloreanlabs.art","comment":"https://x.com/AmberMille78556/status/1964222849738055699","timestamp":"1757142195","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"500a478c-e6dc-509c-8ffe-e0eaaddeb3a2","type":"domain","category":"Network activity","to_ids":true,"value":"aitechpad-io.pages.dev","comment":"https://x.com/AmberMille78556/status/1964222955484844123","timestamp":"1757142220","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0da38b66-f8e1-532e-a0f4-4c549855f292","type":"url","category":"Network activity","to_ids":true,"value":"http://aitechpad-io.pages.dev","comment":"https://x.com/AmberMille78556/status/1964222955484844123","timestamp":"1757142220","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"09d8f60b-5b4e-5e17-aa0d-271cc9b6c2c8","type":"url","category":"Network activity","to_ids":true,"value":"http://dpai-migrate.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223061336469889","timestamp":"1757142245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0f8672b8-6a75-5fc4-b6eb-36ea433855a2","type":"domain","category":"Network activity","to_ids":true,"value":"dpai-migrate.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223061336469889","timestamp":"1757142245","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ab3075b-14f6-5b10-95ef-abc2f3b49c7c","type":"url","category":"Network activity","to_ids":true,"value":"http://52.215.222.156:80","comment":"https://x.com/drb_ra/status/1964223125148541047","timestamp":"1757142261","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ff6b6a66-213c-5ff6-b0d6-6b20600157d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.215.222.156","comment":"https://x.com/drb_ra/status/1964223125148541047","timestamp":"1757142261","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9a75c3b9-b19d-545b-a75f-50e0a81fc6b0","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.109.152:80","comment":"https://x.com/drb_ra/status/1964223265091502291","timestamp":"1757142294","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c302099e-d024-5d28-86a3-14c956b3c8a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.109.152","comment":"https://x.com/drb_ra/status/1964223265091502291","timestamp":"1757142294","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"4523a37b-01d3-50c0-b3df-2ebfe1a06441","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.74.16","comment":"https://x.com/drb_ra/status/1964223405386772646","timestamp":"1757142328","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"7150cbe0-8a02-54bb-bb48-0358d5369f8b","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.74.16:80","comment":"https://x.com/drb_ra/status/1964223405386772646","timestamp":"1757142328","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"eda02836-0595-56f7-ac12-3ebc6b468172","type":"url","category":"Network activity","to_ids":true,"value":"http://io-gpu.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223530041585779","timestamp":"1757142357","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b5e04f0e-b99d-5036-a626-21f25723b155","type":"domain","category":"Network activity","to_ids":true,"value":"io-gpu.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223530041585779","timestamp":"1757142357","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4cddbd2c-e21f-57ca-8750-b664e6b8574d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.146.255.76:25","comment":"https://x.com/drb_ra/status/1964223547611439458","timestamp":"1757142361","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fb867680-1dd3-5107-864d-dd53af449302","type":"sha256","category":"Payload delivery","to_ids":true,"value":"714305888273b76a4e01324cdbcc40b7e5bcf5f11734ba8ef14c539acc2e654b","comment":"https://x.com/malwrhunterteam/status/1964223579592986795","timestamp":"1757142369","distribution":"5"},{"uuid":"f3bd083d-cf58-5445-bb30-4c9f509cc7d6","type":"domain","category":"Network activity","to_ids":true,"value":"ladder-lok.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223635528245359","timestamp":"1757142382","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fca71df4-9ae4-56c8-9c73-ea157e00641d","type":"url","category":"Network activity","to_ids":true,"value":"http://ladder-lok.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223635528245359","timestamp":"1757142382","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"37ce32c6-355d-5789-828e-8be266c37c1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.75.6.228","comment":"https://x.com/drb_ra/status/1964223686661054673","timestamp":"1757142395","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d62d20f5-ea34-5dfc-b171-28ecbf5ae817","type":"url","category":"Network activity","to_ids":true,"value":"http://54.75.6.228:80","comment":"https://x.com/drb_ra/status/1964223686661054673","timestamp":"1757142395","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"48d24c5c-75b0-5a8c-801b-7baea8fb6325","type":"url","category":"Network activity","to_ids":true,"value":"http://chickennuggets.fun","comment":"https://x.com/AmberMille78556/status/1964223758014538122","timestamp":"1757142412","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41525c53-1d09-5cc8-b96d-f0052bde96a2","type":"domain","category":"Network activity","to_ids":true,"value":"chickennuggets.fun","comment":"https://x.com/AmberMille78556/status/1964223758014538122","timestamp":"1757142412","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20bed708-a57b-552e-a89d-5208388a8f80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.229.13.49","comment":"https://x.com/drb_ra/status/1964223827459571816","timestamp":"1757142428","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a9be1ccb-0c11-54c0-8349-154fce215433","type":"url","category":"Network activity","to_ids":true,"value":"http://54.229.13.49:80","comment":"https://x.com/drb_ra/status/1964223827459571816","timestamp":"1757142428","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"ee8f2688-ff34-5372-a000-4a9055a7e746","type":"url","category":"Network activity","to_ids":true,"value":"http://olivexauction.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223854550667589","timestamp":"1757142435","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c074e010-d274-5dc2-9ff1-21e432e2b933","type":"domain","category":"Network activity","to_ids":true,"value":"olivexauction.pages.dev","comment":"https://x.com/AmberMille78556/status/1964223854550667589","timestamp":"1757142435","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65ee4eda-9c65-58cd-be07-47886475ffc5","type":"domain","category":"Network activity","to_ids":true,"value":"web-git-feature-universal-farm.pancake.run","comment":"https://x.com/AmberMille78556/status/1964223964361769459","timestamp":"1757142461","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4576f3d1-6de9-58fc-8c96-46abcf4909a3","type":"url","category":"Network activity","to_ids":true,"value":"http://web-git-feature-universal-farm.pancake.run/liquid-staking","comment":"https://x.com/AmberMille78556/status/1964223964361769459","timestamp":"1757142461","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"17462605-318b-56be-937b-f41dc04d76f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.149.93.102","comment":"https://x.com/drb_ra/status/1964223968379838706","timestamp":"1757142462","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"db149ead-6da8-5971-a64a-98ba936ce0ab","type":"url","category":"Network activity","to_ids":true,"value":"http://103.149.93.102:80","comment":"https://x.com/drb_ra/status/1964223968379838706","timestamp":"1757142462","distribution":"5","Tag":[{"name":"Hookbot"},{"name":"Pegasus"},{"name":"C2"}]},{"uuid":"682026b7-e80c-543e-806a-b510080de173","type":"domain","category":"Network activity","to_ids":true,"value":"hamster-ico.pages.dev","comment":"https://x.com/AmberMille78556/status/1964224062655258725","timestamp":"1757142484","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6c45d051-e1d7-54d6-a09e-1d6c653eb59f","type":"url","category":"Network activity","to_ids":true,"value":"http://hamster-ico.pages.dev","comment":"https://x.com/AmberMille78556/status/1964224062655258725","timestamp":"1757142484","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3daa6560-00ef-5787-9b02-707be0d9a1ad","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.219.58:8888","comment":"https://x.com/drb_ra/status/1964224250119610588","timestamp":"1757142529","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"5e96004f-2198-5a19-80d6-73d65bec221c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.219.58","comment":"https://x.com/drb_ra/status/1964224250119610588","timestamp":"1757142529","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"c09d86ba-aa12-598d-90b2-3436fb350ba0","type":"domain","category":"Network activity","to_ids":true,"value":"dexcsreener.co","comment":"https://x.com/AmberMille78556/status/1964224258864759029","timestamp":"1757142531","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad0f8813-3fb3-53f0-b527-bcb5250f65b8","type":"url","category":"Network activity","to_ids":true,"value":"http://dexcsreener.co","comment":"https://x.com/AmberMille78556/status/1964224258864759029","timestamp":"1757142531","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5dc48c87-c5ac-5281-a7a2-ed80be61f54b","type":"url","category":"Network activity","to_ids":true,"value":"http://49.113.72.54:8888","comment":"https://x.com/drb_ra/status/1964224393074106640","timestamp":"1757142563","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"f5e4706a-3b31-5c51-b486-102d54914b33","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.113.72.54","comment":"https://x.com/drb_ra/status/1964224393074106640","timestamp":"1757142563","distribution":"5","Tag":[{"name":"Supershell"},{"name":"C2"}]},{"uuid":"5c71b8e6-a4f6-5746-9c24-7a8a2ea77437","type":"ip-dst","category":"Network activity","to_ids":true,"value":"189.140.28.154","comment":"https://x.com/drb_ra/status/1964224533180588314","timestamp":"1757142596","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"03c0123a-4580-5bc0-a7af-83ed14f5c2c2","type":"url","category":"Network activity","to_ids":true,"value":"http://189.140.28.154:443","comment":"https://x.com/drb_ra/status/1964224533180588314","timestamp":"1757142596","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"8010ed5d-7135-5732-9921-5035e9ca19f5","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.64.197:443","comment":"https://x.com/drb_ra/status/1964224672578347340","timestamp":"1757142630","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"cf37c9f5-12e6-5a38-93aa-fcd20a0f1eae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.64.197","comment":"https://x.com/drb_ra/status/1964224672578347340","timestamp":"1757142630","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c9bc3783-6cee-5da0-9307-28929bca4ed3","type":"url","category":"Network activity","to_ids":true,"value":"http://18.218.69.187:443","comment":"https://x.com/drb_ra/status/1964224812705804642","timestamp":"1757142663","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"4fb1f3bd-fd5d-5930-aa56-4dab4912fd18","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.218.69.187","comment":"https://x.com/drb_ra/status/1964224812705804642","timestamp":"1757142663","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"6393e25c-29a1-590a-bd02-1d2c051c16ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.159.156.173","comment":"https://x.com/drb_ra/status/1964224952455815262","timestamp":"1757142696","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"727f8a6c-8b12-50d7-8e55-75087476a2de","type":"url","category":"Network activity","to_ids":true,"value":"http://78.159.156.173:7443","comment":"https://x.com/drb_ra/status/1964224952455815262","timestamp":"1757142696","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"69567c32-0914-520e-8a69-4cdb716eec65","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.92.35.242","comment":"https://x.com/drb_ra/status/1964225092482720051","timestamp":"1757142730","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"2f62769f-368e-5da3-9514-7c00ba802c10","type":"url","category":"Network activity","to_ids":true,"value":"http://54.92.35.242:80","comment":"https://x.com/drb_ra/status/1964225092482720051","timestamp":"1757142730","distribution":"5","Tag":[{"name":"Brute_Ratel_C4"},{"name":"C2"}]},{"uuid":"d0b8f2e8-4e56-5657-94bf-dc153b05e095","type":"url","category":"Network activity","to_ids":true,"value":"http://kzloly.nmailhub.com","comment":"https://x.com/skocherhan/status/1964236082125451496","timestamp":"1757145350","distribution":"5"},{"uuid":"2faf70c3-4ce4-5809-98a3-a13ce0848afd","type":"domain","category":"Network activity","to_ids":true,"value":"kzloly.nmailhub.com","comment":"https://x.com/skocherhan/status/1964236082125451496","timestamp":"1757145350","distribution":"5"},{"uuid":"c54830b4-7841-59d0-a394-4e7fa65d2ad1","type":"md5","category":"Payload delivery","to_ids":true,"value":"3b3ca48cda26a33bc3634ad1ed8dd270","comment":"https://x.com/skocherhan/status/1964236082125451496","timestamp":"1757145350","distribution":"5"},{"uuid":"b4350daf-c72e-5f64-9241-d56b8e2b284f","type":"md5","category":"Payload delivery","to_ids":true,"value":"172dc997ca6022ec8dff0842e4c7b887","comment":"https://x.com/skocherhan/status/1964236082125451496","timestamp":"1757145350","distribution":"5"},{"uuid":"7c439d9d-1abf-5d7b-b7f2-1d56c350643c","type":"md5","category":"Payload delivery","to_ids":true,"value":"28b07bcfa17c2ab5716ef9cbc0ded7f0","comment":"https://x.com/skocherhan/status/1964236082125451496","timestamp":"1757145350","distribution":"5"},{"uuid":"b34281c0-142d-5ed8-a568-abfa859980cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.89.85.96","comment":"https://x.com/Fact_Finder03/status/1964236390062759978","timestamp":"1757145423","distribution":"5","Tag":[{"name":"Supershell"}]},{"uuid":"09b5755f-8d66-5f5b-a27e-61729bb1a8f3","type":"url","category":"Network activity","to_ids":true,"value":"https://www.darkexploits.is","comment":"https://x.com/skocherhan/status/1964236785203937786","timestamp":"1757145518","distribution":"5"},{"uuid":"ebd3ae3f-a12d-50c8-a445-7b557767cc11","type":"domain","category":"Network activity","to_ids":true,"value":"darkexploits.is","comment":"https://x.com/skocherhan/status/1964236785203937786","timestamp":"1757145518","distribution":"5"},{"uuid":"8d4c0037-8561-52ae-9dea-bcd6bdf7ac87","type":"url","category":"Network activity","to_ids":true,"value":"https://integratsys.com/mobile/front/","comment":"https://x.com/urldna_bot/status/1964237161382756644","timestamp":"1757145607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8578e153-33dc-5a0f-95d7-17bdbbf61246","type":"domain","category":"Network activity","to_ids":true,"value":"integratsys.com","comment":"https://x.com/urldna_bot/status/1964237161382756644","timestamp":"1757145607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"61d971f8-904f-5c1f-8885-4cc678ad8f62","type":"url","category":"Network activity","to_ids":true,"value":"https://120.26.23.94/dpixel","comment":"https://x.com/drb_ra/status/1964237418371932591","timestamp":"1757145668","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"96c9c44e-fac9-5985-9ab1-5db87ef1acda","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.26.23.94","comment":"https://x.com/drb_ra/status/1964237418371932591","timestamp":"1757145668","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a00fbcaf-21e8-5350-bedd-abecad1f49a7","type":"url","category":"Network activity","to_ids":true,"value":"http://120.26.23.94:8443","comment":"https://x.com/drb_ra/status/1964237418371932591","timestamp":"1757145668","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3b760711-6c9f-54b9-893d-388a919499e0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.186","comment":"https://x.com/drb_ra/status/1964238066366689516","timestamp":"1757145823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e149a599-6158-5750-b7ad-93e97a34e553","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.235.111.238","comment":"https://x.com/drb_ra/status/1964238066366689516","timestamp":"1757145823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f8e502ba-5a6d-5ea4-96fd-321c56c72568","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.186:8843","comment":"https://x.com/drb_ra/status/1964238066366689516","timestamp":"1757145823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"56731a05-591b-582f-9383-2d52f7e3b722","type":"url","category":"Network activity","to_ids":true,"value":"https://156.235.111.238/owa/","comment":"https://x.com/drb_ra/status/1964238066366689516","timestamp":"1757145823","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4977c8c7-42c5-5e27-92b3-b0c2b95b1f04","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.204:8843","comment":"https://x.com/drb_ra/status/1964238206519427336","timestamp":"1757145856","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c145f55f-c27c-537e-af0e-b69ac2dadf77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.204","comment":"https://x.com/drb_ra/status/1964238206519427336","timestamp":"1757145856","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4a96883f-f8dc-5e85-96cb-da7c9a3d1df0","type":"url","category":"Network activity","to_ids":true,"value":"http://193.37.69.42:4569","comment":"https://x.com/drb_ra/status/1964238347594858693","timestamp":"1757145890","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bdefaaa8-aa74-5d1b-96f1-af9b21f292ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.37.69.42","comment":"https://x.com/drb_ra/status/1964238347594858693","timestamp":"1757145890","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b74e0e0a-a172-5953-ac6b-e965f8ad63f0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"789df0bfdf91c7990542d571597ab7baf8789fb114bd2426ba595d116870f22e","comment":"https://x.com/skocherhan/status/1964250484321009712","timestamp":"1757148784","distribution":"5"},{"uuid":"d8064846-7a0d-5c32-970f-3c9a0e6ff33e","type":"url","category":"Network activity","to_ids":true,"value":"http://tp7mtouwvggdlm73vimqkuq7727a4ebrv4vf4cnk6lfg4fatxa6p2ryd.onion","comment":"https://x.com/skocherhan/status/1964250735421321683","timestamp":"1757148843","distribution":"5"},{"uuid":"c2e48bb1-806c-5c44-bd6d-3392407344a9","type":"domain","category":"Network activity","to_ids":true,"value":"tp7mtouwvggdlm73vimqkuq7727a4ebrv4vf4cnk6lfg4fatxa6p2ryd.onion","comment":"https://x.com/skocherhan/status/1964250735421321683","timestamp":"1757148843","distribution":"5"},{"uuid":"c6b116ca-ba97-5b7e-a154-acc70f45cce9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.55.53","comment":"https://x.com/skocherhan/status/1964251366269821174","timestamp":"1757148994","distribution":"5"},{"uuid":"9c8aca16-f77a-5b5a-8eb3-81a8695b7cdf","type":"url","category":"Network activity","to_ids":true,"value":"http://1v5sd1c2ds.com","comment":"https://x.com/skocherhan/status/1964251366269821174","timestamp":"1757148994","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"34903cfc-5627-5b78-9357-9ae746470cd7","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.55.53:8080","comment":"https://x.com/skocherhan/status/1964251366269821174","timestamp":"1757148994","distribution":"5"},{"uuid":"9ec41a12-d91b-5c52-8770-6b68e2e94fe2","type":"domain","category":"Network activity","to_ids":true,"value":"1v5sd1c2ds.com","comment":"https://x.com/skocherhan/status/1964251366269821174","timestamp":"1757148994","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a056bbf8-4a6f-5472-a38a-22814ada166e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ee4960b8b58b91c85ee01ebc6f40752dd0dcb04c2695428da507484670f1091a","comment":"https://x.com/skocherhan/status/1964256845964382364","timestamp":"1757150300","distribution":"5"},{"uuid":"6652c99b-8eab-58d6-bcf4-9dba4be268eb","type":"domain","category":"Network activity","to_ids":true,"value":"comodo.biz","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"758c9ea2-27e0-5109-82e3-e484c42b95e2","type":"url","category":"Network activity","to_ids":true,"value":"http://comodo.biz","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"03d3f027-248d-563a-8327-9c52898f47ef","type":"domain","category":"Network activity","to_ids":true,"value":"uni-bank.com","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"175990f2-ddf0-56ac-9a62-b3962461e806","type":"url","category":"Network activity","to_ids":true,"value":"http://uni-bank.com","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"f6cbbfea-97b1-5b45-b0dd-2f2dd4f97155","type":"url","category":"Network activity","to_ids":true,"value":"http://hsbc-finance.org","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"fae1b8fe-94c0-5550-9066-03de8b78f651","type":"domain","category":"Network activity","to_ids":true,"value":"hsbc-finance.org","comment":"https://x.com/c9lab_soc/status/1964258712140296428","timestamp":"1757150745","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b1ba09fc-121a-592b-b80a-50ef100deaab","type":"url","category":"Network activity","to_ids":true,"value":"http://banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1964259590708535334","timestamp":"1757150955","distribution":"5"},{"uuid":"18ef290a-2de9-537f-a777-b2d4f5e30eab","type":"domain","category":"Network activity","to_ids":true,"value":"Essens.no","comment":"https://x.com/FalconFeedsio/status/1964259590708535334","timestamp":"1757150955","distribution":"5"},{"uuid":"f42a278e-7615-5be5-89fd-bfee18924a42","type":"domain","category":"Network activity","to_ids":true,"value":"banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1964259590708535334","timestamp":"1757150955","distribution":"5"},{"uuid":"d5fef564-78de-5a88-8c43-e28244e8d00b","type":"url","category":"Network activity","to_ids":true,"value":"http://Essens.no","comment":"https://x.com/FalconFeedsio/status/1964259590708535334","timestamp":"1757150955","distribution":"5"},{"uuid":"1db92625-4deb-51b5-9158-3f2ea528498f","type":"domain","category":"Network activity","to_ids":true,"value":"96664444324410000909987.weebly.com","comment":"https://x.com/AmberMille78556/status/1964261644797710773","timestamp":"1757151444","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7e2f9972-9da7-519f-8c2f-ff87932462ea","type":"url","category":"Network activity","to_ids":true,"value":"https://96664444324410000909987.weebly.com","comment":"https://x.com/AmberMille78556/status/1964261644797710773","timestamp":"1757151444","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7774aa2d-37a0-50ac-9309-3432aece24f2","type":"domain","category":"Network activity","to_ids":true,"value":"karbo.io","comment":"https://x.com/AmberMille78556/status/1964261751462973481","timestamp":"1757151470","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"924a2bba-f824-5371-bf69-46a0a03174aa","type":"url","category":"Network activity","to_ids":true,"value":"http://karbo.io","comment":"https://x.com/AmberMille78556/status/1964261751462973481","timestamp":"1757151470","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"9bb1d7fd-20c3-5241-b47d-5807b1ab4784","type":"domain","category":"Network activity","to_ids":true,"value":"online-giris.duckdns.org","comment":"https://x.com/AmberMille78556/status/1964262217370464470","timestamp":"1757151581","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3594bae6-48ec-53d8-a722-0eaa87e3b9a8","type":"url","category":"Network activity","to_ids":true,"value":"https://online-giris.duckdns.org","comment":"https://x.com/AmberMille78556/status/1964262217370464470","timestamp":"1757151581","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"992ba8b3-335e-541b-baea-72e1058b7230","type":"url","category":"Network activity","to_ids":true,"value":"https://www-hyperliquid.org/genesis/","comment":"https://x.com/AmberMille78556/status/1964262881093980570","timestamp":"1757151739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"acb5ba22-b32c-516f-b3e9-8706cd58f178","type":"domain","category":"Network activity","to_ids":true,"value":"www-hyperliquid.org","comment":"https://x.com/AmberMille78556/status/1964262881093980570","timestamp":"1757151739","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9ae1996-077b-5e2c-bd26-a39e55f42641","type":"domain","category":"Network activity","to_ids":true,"value":"telegram.dog","comment":"https://x.com/AmberMille78556/status/1964263588261941335","timestamp":"1757151908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9147f986-571a-5486-81a7-cef443fa4bb7","type":"url","category":"Network activity","to_ids":true,"value":"https://telegram.dog/nwoxxxcollection/","comment":"https://x.com/AmberMille78556/status/1964263588261941335","timestamp":"1757151908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac192d4c-1631-55fc-8420-a559b4d9eca5","type":"url","category":"Network activity","to_ids":true,"value":"https://sgcgggdgdgdggsqyd.weebly.com","comment":"https://x.com/AmberMille78556/status/1964263797041901647","timestamp":"1757151958","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db7030b4-c991-51db-bb5b-1e8203662590","type":"domain","category":"Network activity","to_ids":true,"value":"sgcgggdgdgdggsqyd.weebly.com","comment":"https://x.com/AmberMille78556/status/1964263797041901647","timestamp":"1757151958","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c46f4602-efb9-51e4-95b8-8cfec3a13098","type":"sha256","category":"Payload delivery","to_ids":true,"value":"f093c8b57bd3011491cd4013eb5b69736609a058ce5581199f4f179d15e586e1","comment":"https://x.com/malwrhunterteam/status/1964264049446707365","timestamp":"1757152018","distribution":"5"},{"uuid":"49f23589-4cd4-5c28-82b8-706cf312b98a","type":"url","category":"Network activity","to_ids":true,"value":"https://cutt.ly/drivefilestreamGoogleDriveexe","comment":"https://x.com/skocherhan/status/1964264541748900309","timestamp":"1757152135","distribution":"5"},{"uuid":"7cde035e-c27b-5bef-9fe3-2c54e0d10108","type":"sha256","category":"Payload delivery","to_ids":true,"value":"84f34f24a7f7852ac1c5e99ec3de6e215138d7b8a39514963dc6596945b105d8","comment":"https://x.com/skocherhan/status/1964264541748900309","timestamp":"1757152135","distribution":"5"},{"uuid":"029e7f2f-a6dd-568a-a135-aed40aecb228","type":"domain","category":"Network activity","to_ids":true,"value":"gordon-allocation.xyz","comment":"https://x.com/AmberMille78556/status/1964264950530027647","timestamp":"1757152233","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73e8eac5-ffe8-545d-8d45-11d227e74715","type":"url","category":"Network activity","to_ids":true,"value":"https://gordon-allocation.xyz","comment":"https://x.com/AmberMille78556/status/1964264950530027647","timestamp":"1757152233","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dcd81bf8-1666-5207-bbf7-6c6fe59aa83c","type":"domain","category":"Network activity","to_ids":true,"value":"cards-staker.xyz","comment":"https://x.com/AmberMille78556/status/1964265991451382110","timestamp":"1757152481","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c0d28b7f-1826-5231-8a08-13dd65da7ad2","type":"url","category":"Network activity","to_ids":true,"value":"http://cards-staker.xyz","comment":"https://x.com/AmberMille78556/status/1964265991451382110","timestamp":"1757152481","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"42f89915-0ce0-5f7d-aaee-0b545024d085","type":"url","category":"Network activity","to_ids":true,"value":"https://be6pec.webwave.dev","comment":"https://x.com/urldna_bot/status/1964267373969473808","timestamp":"1757152810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"120f44c5-2add-59f1-8352-47591763f767","type":"domain","category":"Network activity","to_ids":true,"value":"be6pec.webwave.dev","comment":"https://x.com/urldna_bot/status/1964267373969473808","timestamp":"1757152810","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"123fd724-6085-5999-84cf-e97f993e4585","type":"domain","category":"Network activity","to_ids":true,"value":"FLiNG-Standalone.21.805.19893.zip","comment":"https://x.com/skocherhan/status/1964268032152277219","timestamp":"1757152967","distribution":"5"},{"uuid":"990c1a78-bd42-53f4-adad-0566c1537c61","type":"url","category":"Network activity","to_ids":true,"value":"http://198.251.84.224","comment":"https://x.com/skocherhan/status/1964268032152277219","timestamp":"1757152967","distribution":"5"},{"uuid":"bde2c3a1-2158-590f-9f4d-a248baf9f77a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.251.84.224","comment":"https://x.com/skocherhan/status/1964268032152277219","timestamp":"1757152967","distribution":"5"},{"uuid":"a4e4b65a-925d-5410-9a74-1bacc1ca48d9","type":"url","category":"Network activity","to_ids":true,"value":"http://FLiNG-Standalone.21.805.19893.zip","comment":"https://x.com/skocherhan/status/1964268032152277219","timestamp":"1757152967","distribution":"5"},{"uuid":"07ac25e3-c59d-5455-aa9a-71fc49cbe2e6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"81d0d644903a1e7c85569b60beb2eb8af3544b35b43a0cf9f9e9bf69c7a65584","comment":"https://x.com/skocherhan/status/1964268032152277219","timestamp":"1757152967","distribution":"5"},{"uuid":"5a6ecc18-b0a4-5e75-8ffb-665a605d7a10","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.236.103.234","comment":"https://x.com/drb_ra/status/1964271032845389951","timestamp":"1757153683","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e468c715-6912-54b2-ae66-9b0d17d0da91","type":"url","category":"Network activity","to_ids":true,"value":"https://172.236.103.234:8443","comment":"https://x.com/drb_ra/status/1964271032845389951","timestamp":"1757153683","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"12682f75-26d9-5d82-b395-70c8be8d1d3a","type":"url","category":"Network activity","to_ids":true,"value":"http://172.236.103.234:8443","comment":"https://x.com/drb_ra/status/1964271032845389951","timestamp":"1757153683","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"50089a11-e3e4-5b5f-a052-fb4046937249","type":"url","category":"Network activity","to_ids":true,"value":"https://reward-bio.xyz","comment":"https://x.com/AmberMille78556/status/1964273666897653803","timestamp":"1757154311","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a960721-aece-5759-87f8-39b1f0c4aff6","type":"domain","category":"Network activity","to_ids":true,"value":"reward-bio.xyz","comment":"https://x.com/AmberMille78556/status/1964273666897653803","timestamp":"1757154311","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f53995f-bd90-5ba5-8a5f-06b88cc150f9","type":"url","category":"Network activity","to_ids":true,"value":"http://47.120.32.72:8079","comment":"https://x.com/drb_ra/status/1964278809647083750","timestamp":"1757155537","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e151dc6a-baf7-527c-9be4-bd4b860676a2","type":"url","category":"Network activity","to_ids":true,"value":"https://47.120.32.72/activity","comment":"https://x.com/drb_ra/status/1964278809647083750","timestamp":"1757155537","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"278a9cfe-0088-5638-bd99-b77ffdd7d501","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.120.32.72","comment":"https://x.com/drb_ra/status/1964278809647083750","timestamp":"1757155537","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fad4787c-2783-5855-9c65-46f5c3843723","type":"sha256","category":"Payload delivery","to_ids":true,"value":"df3126e08944768d4a813dc0e8bef234ab086730d4ce40c5539769a0ad800fe6","comment":"https://x.com/skocherhan/status/1964284473534484843","timestamp":"1757156887","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"4ebf944a-990c-5472-b779-911c5a4ac4a4","type":"domain","category":"Network activity","to_ids":true,"value":"windows.system32.help:37","comment":"https://x.com/skocherhan/status/1964287080797814829","timestamp":"1757157509","distribution":"5"},{"uuid":"cf5c51ca-5f04-5a02-bcc7-be3be7de931f","type":"url","category":"Network activity","to_ids":true,"value":"http://windows.system32.help:37","comment":"https://x.com/skocherhan/status/1964287080797814829","timestamp":"1757157509","distribution":"5"},{"uuid":"6204558d-db84-5559-868f-39e29136523e","type":"url","category":"Network activity","to_ids":true,"value":"https://lewisdrugupdate.weebly.com","comment":"https://x.com/urldna_bot/status/1964297573222482216","timestamp":"1757160010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b746fb6d-9b4c-56fd-b591-b0dd1218f8cc","type":"domain","category":"Network activity","to_ids":true,"value":"lewisdrugupdate.weebly.com","comment":"https://x.com/urldna_bot/status/1964297573222482216","timestamp":"1757160010","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8d797299-85e5-5d51-9b17-ca609b9ed7a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.28.180.115","comment":"https://x.com/skocherhan/status/1964303032222470184","timestamp":"1757161312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ce28fc9f-7e33-516a-839b-68cb0fd53abc","type":"url","category":"Network activity","to_ids":true,"value":"http://tld56.cn.w.kunlunpi.com","comment":"https://x.com/skocherhan/status/1964303032222470184","timestamp":"1757161312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d43e30e7-40f4-5290-bc7e-77d2c4fd3d93","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.199.0/24/fwlink","comment":"https://x.com/skocherhan/status/1964303032222470184","timestamp":"1757161312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e004175a-5ffc-5bad-88f3-2c4221c996e2","type":"url","category":"Network activity","to_ids":true,"value":"http://129.28.180.115:443","comment":"https://x.com/skocherhan/status/1964303032222470184","timestamp":"1757161312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"26fc6cc0-6447-59f4-aed1-cb51f1ce8914","type":"domain","category":"Network activity","to_ids":true,"value":"tld56.cn.w.kunlunpi.com","comment":"https://x.com/skocherhan/status/1964303032222470184","timestamp":"1757161312","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"326ee5ea-cd2a-5047-8368-66478bec8745","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.128.225.124","comment":"https://x.com/skocherhan/status/1964303125021327671","timestamp":"1757161334","distribution":"5"},{"uuid":"3a3a4f15-5011-5e76-938f-9bae4143fa38","type":"url","category":"Network activity","to_ids":true,"value":"http://52.128.225.124","comment":"https://x.com/skocherhan/status/1964303125021327671","timestamp":"1757161334","distribution":"5"},{"uuid":"7db6ef4f-3591-5ab4-8c8a-37ea1e382b32","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5a1f00cbd661fe2cc517f3cc1d996536855e895117f39d91a1ac577247de4021","comment":"https://x.com/skocherhan/status/1964303125021327671","timestamp":"1757161334","distribution":"5"},{"uuid":"ddca4cc0-f6da-503e-8cdb-1a71df90d737","type":"url","category":"Network activity","to_ids":true,"value":"https://s3.ap-east-1.amazonaws.com/woaihepijiu/CZ2IV/TGESetup_v1757008227.034778.exe","comment":"https://x.com/skocherhan/status/1964303125021327671","timestamp":"1757161334","distribution":"5"},{"uuid":"62c13c98-73bd-51d4-a5fc-3443f00e2605","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6573136f9b804ddc637f6be3a4536ed0013da7a5592b2f3a3cd37c0c71926365","comment":"https://x.com/skocherhan/status/1964318364215513299","timestamp":"1757164967","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"aa72c369-e0ec-5b25-a4ee-95f805a156fb","type":"url","category":"Network activity","to_ids":true,"value":"http://m.123huodong.com.cloud.cdntip.com.s2-web.dogedns.com","comment":"https://x.com/skocherhan/status/1964318364215513299","timestamp":"1757164967","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"0b4fd6e3-f161-58ce-b1cb-a43a099e6dae","type":"domain","category":"Network activity","to_ids":true,"value":"m.123huodong.com.cloud.cdntip.com.s2-web.dogedns.com","comment":"https://x.com/skocherhan/status/1964318364215513299","timestamp":"1757164967","distribution":"5","Tag":[{"name":"CobaltStrike"}]},{"uuid":"ad66ef3c-806a-5dd5-bf7b-6700b3710671","type":"url","category":"Network activity","to_ids":true,"value":"https://twcv.weebly.com","comment":"https://x.com/urldna_bot/status/1964327758177124457","timestamp":"1757167207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c5d11f2f-dac6-54e8-a9c2-0d6b7675b676","type":"domain","category":"Network activity","to_ids":true,"value":"twcv.weebly.com","comment":"https://x.com/urldna_bot/status/1964327758177124457","timestamp":"1757167207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bbbfd09f-3f76-5f12-bd77-95471a476048","type":"url","category":"Network activity","to_ids":true,"value":"http://dbcoo.ddns.net","comment":"https://x.com/SarlackLab/status/1964327806709420329","timestamp":"1757167219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"c7ef9546-cad8-5af3-b8ee-d9a92573acb9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.43.119.128","comment":"https://x.com/SarlackLab/status/1964327806709420329","timestamp":"1757167219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"759a1b23-4893-54a6-800d-633118c8b0ad","type":"url","category":"Network activity","to_ids":true,"value":"http://102.43.119.128:5552","comment":"https://x.com/SarlackLab/status/1964327806709420329","timestamp":"1757167219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"32905d45-840c-56e8-8fb4-b629e74aa77c","type":"domain","category":"Network activity","to_ids":true,"value":"dbcoo.ddns.net","comment":"https://x.com/SarlackLab/status/1964327806709420329","timestamp":"1757167219","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"0bc8d70a-f324-5805-ab3b-501971a2959e","type":"md5","category":"Payload delivery","to_ids":true,"value":"200b75088588407279d4bea71ecf4416","comment":"https://x.com/ReBensk/status/1964336703872573677","timestamp":"1757169340","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"ac911856-c775-5b49-894b-b8e209644261","type":"md5","category":"Payload delivery","to_ids":true,"value":"84359f46a88c564df7798527661cd17e","comment":"https://x.com/ReBensk/status/1964337679740383421","timestamp":"1757169573","distribution":"5","Tag":[{"name":"Trojan"},{"name":"malware"},{"name":"Android"}]},{"uuid":"b6f459d3-e79b-5eb1-88a4-2c281f3d1a8e","type":"domain","category":"Network activity","to_ids":true,"value":"myaxiscardreward.com","comment":"https://x.com/ReBensk/status/1964341559333151028","timestamp":"1757170498","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"2eb42c80-4a7d-596b-a08f-25d95ab59ace","type":"url","category":"Network activity","to_ids":true,"value":"https://myaxiscardreward.com/axis.apk","comment":"https://x.com/ReBensk/status/1964341559333151028","timestamp":"1757170498","distribution":"5","Tag":[{"name":"Trojan"},{"name":"Android"},{"name":"malware"}]},{"uuid":"670060b1-54b9-5255-8a9f-82b087b6ec0c","type":"domain","category":"Network activity","to_ids":true,"value":"searchlnk.ru","comment":"https://x.com/AmberMille78556/status/1964343883699036633","timestamp":"1757171052","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e1fdd6b-50d6-5bd7-b303-ab0c31d6587d","type":"url","category":"Network activity","to_ids":true,"value":"https://ogomo.ru","comment":"https://x.com/AmberMille78556/status/1964343958949024173","timestamp":"1757171070","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8648c6c6-902c-589d-9ab9-af65c31f459c","type":"domain","category":"Network activity","to_ids":true,"value":"ogomo.ru","comment":"https://x.com/AmberMille78556/status/1964343958949024173","timestamp":"1757171070","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f5beb80c-1999-57eb-ad3b-d9071cbbcab9","type":"url","category":"Network activity","to_ids":true,"value":"https://cloudseun.com/file/12a0632","comment":"https://x.com/AmberMille78556/status/1964344295210602719","timestamp":"1757171150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4b1540b7-4bfc-509e-924c-861b72d16c7f","type":"domain","category":"Network activity","to_ids":true,"value":"cloudseun.com","comment":"https://x.com/AmberMille78556/status/1964344295210602719","timestamp":"1757171150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"211cb345-338c-5b0d-8938-02608a188590","type":"domain","category":"Network activity","to_ids":true,"value":"woana.n-e.kr","comment":"https://x.com/godeepweb/status/1964347872624697826","timestamp":"1757172003","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"},{"name":"malware"}]},{"uuid":"baa5c602-8c71-5c88-bb88-575e79bec91c","type":"url","category":"Network activity","to_ids":true,"value":"http://woana.n-e.kr","comment":"https://x.com/godeepweb/status/1964347872624697826","timestamp":"1757172003","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"APT"},{"name":"malware"}]},{"uuid":"775cbdba-517e-5725-b39d-2e8283f2c72a","type":"domain","category":"Network activity","to_ids":true,"value":"onespace.ge","comment":"https://x.com/AddressIntel/status/1964357945669361805","timestamp":"1757174404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29bcf7f5-8c85-55c1-9ed9-27d191aee7e4","type":"url","category":"Network activity","to_ids":true,"value":"https://onespace.ge/it/check2/","comment":"https://x.com/AddressIntel/status/1964357945669361805","timestamp":"1757174404","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60a4cf6f-7980-5017-81ce-219f8a821a76","type":"url","category":"Network activity","to_ids":true,"value":"https://help-nifty.weebly.com","comment":"https://x.com/urldna_bot/status/1964357962530509099","timestamp":"1757174408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"40d95d45-7c55-5809-9d4e-0c6ed937ffbb","type":"domain","category":"Network activity","to_ids":true,"value":"help-nifty.weebly.com","comment":"https://x.com/urldna_bot/status/1964357962530509099","timestamp":"1757174408","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b4684b3d-e4a4-51fc-971c-100ef313491c","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.44/pixel.gif","comment":"https://x.com/drb_ra/status/1964358794487484489","timestamp":"1757174607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e601a89-1728-5c56-93ad-ee9a0fccb76b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.44","comment":"https://x.com/drb_ra/status/1964358794487484489","timestamp":"1757174607","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"831dfdfe-5430-528f-aa91-5ab7f40f5be5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.58","comment":"https://x.com/drb_ra/status/1964358935084662960","timestamp":"1757174640","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1a8036ff-223e-5fca-bc93-9a97f0b7fe3e","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.58/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1964358935084662960","timestamp":"1757174640","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a178ecd1-4651-589d-ac84-6380ed4feec9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.72","comment":"https://x.com/drb_ra/status/1964359076718268531","timestamp":"1757174674","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"422ff555-0d16-57b6-bf9e-92f09f0b7831","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.72/ca","comment":"https://x.com/drb_ra/status/1964359076718268531","timestamp":"1757174674","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a665cd2a-cbe5-5197-825f-09a986b43dc6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.86","comment":"https://x.com/drb_ra/status/1964359216472191316","timestamp":"1757174707","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f2bfbdfd-0297-514c-9b2f-f6d496eb60de","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.86/pixel.gif","comment":"https://x.com/drb_ra/status/1964359216472191316","timestamp":"1757174707","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8be5f1ac-3e50-5b58-95ee-cc57141077da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.21","comment":"https://x.com/drb_ra/status/1964359356054462692","timestamp":"1757174741","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"90954df5-756b-5fbf-8cb4-a7bda8ff7437","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.21/cx","comment":"https://x.com/drb_ra/status/1964359356054462692","timestamp":"1757174741","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a6502273-2005-5cda-9f0b-ee2c62d914e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.45","comment":"https://x.com/drb_ra/status/1964359496387743765","timestamp":"1757174774","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"72b4b45f-7cf7-56b7-b1ff-fd32de59dfdb","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.45/en_US/all.js","comment":"https://x.com/drb_ra/status/1964359496387743765","timestamp":"1757174774","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5b5f2b24-2bbe-5af7-8af1-06aa4d9a2a8a","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.59/updates.rss","comment":"https://x.com/drb_ra/status/1964359637874200837","timestamp":"1757174808","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fbd8e788-484e-5744-86ac-f4466cd00837","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.59","comment":"https://x.com/drb_ra/status/1964359637874200837","timestamp":"1757174808","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"59bb4c3e-ec3d-51a5-b9c1-04f255b91559","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.73/dpixel","comment":"https://x.com/drb_ra/status/1964359776868983273","timestamp":"1757174841","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"39ccde1d-678a-5c12-ac89-dcf10a748775","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.73","comment":"https://x.com/drb_ra/status/1964359776868983273","timestamp":"1757174841","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7dc99f8e-bc12-535d-98b8-f56174181d20","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.14/activity","comment":"https://x.com/drb_ra/status/1964359917990809753","timestamp":"1757174875","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0b7e86c2-c44e-5e5c-bd74-c14f5f61f640","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.14","comment":"https://x.com/drb_ra/status/1964359917990809753","timestamp":"1757174875","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bc23f718-37af-5c3e-a523-e984e04c206d","type":"url","category":"Network activity","to_ids":true,"value":"https://101.133.199.74/push","comment":"https://x.com/drb_ra/status/1964360062253584823","timestamp":"1757174909","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b0794837-cbcf-51b6-b26e-e482d441815b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.133.199.74","comment":"https://x.com/drb_ra/status/1964360062253584823","timestamp":"1757174909","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6ffddd9e-f812-58da-bcdf-82b52767cbed","type":"md5","category":"Payload delivery","to_ids":true,"value":"1a4fdff112fbb16a5b12482437fa1596","comment":"https://x.com/phatomcandle/status/1964388164132569426","timestamp":"1757181609","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"9f59df25-6d4f-5926-b67c-2405bdb19dea","type":"sha256","category":"Payload delivery","to_ids":true,"value":"49cc328df01552b040dc5cc90b2becd644a83057b013bb3cf3815bacbfe8b887","comment":"https://x.com/phatomcandle/status/1964388164132569426","timestamp":"1757181609","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"ca3fb48e-7770-50b5-a583-a4efdc804ba8","type":"url","category":"Network activity","to_ids":true,"value":"https://videotronwebmai1.weebly.com","comment":"https://x.com/urldna_bot/status/1964388166523122009","timestamp":"1757181610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"50834d95-fed1-5a12-93f1-2c19df74e61b","type":"domain","category":"Network activity","to_ids":true,"value":"videotronwebmai1.weebly.com","comment":"https://x.com/urldna_bot/status/1964388166523122009","timestamp":"1757181610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ffd449b6-e82a-55fd-a767-09fa7fd2f56c","type":"domain","category":"Network activity","to_ids":true,"value":"v4swap.limited","comment":"https://x.com/AmberMille78556/status/1964395800336769521","timestamp":"1757183430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbea71ee-72f0-5a2a-9924-518a4cd48d59","type":"url","category":"Network activity","to_ids":true,"value":"https://v4swap.limited/contacts/index.html","comment":"https://x.com/AmberMille78556/status/1964395800336769521","timestamp":"1757183430","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"78cb0adf-74b3-5a11-8ee2-fe3787282a31","type":"domain","category":"Network activity","to_ids":true,"value":"unigroup.limited","comment":"https://x.com/AmberMille78556/status/1964396813185597564","timestamp":"1757183671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fd8311be-fd00-5bdd-88f9-a694eb327e3d","type":"url","category":"Network activity","to_ids":true,"value":"https://unigroup.limited/contacts/index.html","comment":"https://x.com/AmberMille78556/status/1964396813185597564","timestamp":"1757183671","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36c4210c-b6ff-53ee-aced-aa71954d3f04","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.104:2222","comment":"https://x.com/drb_ra/status/1964399868388282408","timestamp":"1757184400","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"0637ab93-bc91-526f-ac57-bf334474320e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.157.7.104","comment":"https://x.com/drb_ra/status/1964399868388282408","timestamp":"1757184400","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"1ba0940c-28a7-51d5-9b40-d3fefda85b02","type":"url","category":"Network activity","to_ids":true,"value":"http://58.217.176.47:10250","comment":"https://x.com/drb_ra/status/1964400011711828345","timestamp":"1757184434","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"999f6015-31e0-59f3-bcde-50995e5cb67b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"58.217.176.47","comment":"https://x.com/drb_ra/status/1964400011711828345","timestamp":"1757184434","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"456c5089-1ffd-5ae4-94f3-d684267627b3","type":"url","category":"Network activity","to_ids":true,"value":"http://3.32.165.153:443","comment":"https://x.com/drb_ra/status/1964400155999834498","timestamp":"1757184468","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7849ac3c-2ef4-560a-b84d-f58450f08901","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.80.135:443","comment":"https://x.com/drb_ra/status/1964400300485165423","timestamp":"1757184503","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"ee52f57e-e723-5269-ab5d-14d1a319ac32","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.80.135","comment":"https://x.com/drb_ra/status/1964400300485165423","timestamp":"1757184503","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"1cf56784-16c2-58ec-9eea-2e67d134f837","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.82.72","comment":"https://x.com/drb_ra/status/1964400445327364133","timestamp":"1757184537","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"54650a02-4d15-5be3-9e6a-09999dbbd55f","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.82.72:443","comment":"https://x.com/drb_ra/status/1964400445327364133","timestamp":"1757184537","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"7d8ac189-f68f-5f26-9919-097bee4defc6","type":"url","category":"Network activity","to_ids":true,"value":"http://85.217.171.188:7443","comment":"https://x.com/drb_ra/status/1964400588952600861","timestamp":"1757184571","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"62dc52f9-ea35-58ad-bbac-adfbb0bdba4d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.217.171.188","comment":"https://x.com/drb_ra/status/1964400588952600861","timestamp":"1757184571","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"00c42654-484f-506e-9411-62363dbcfacf","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.239.89:7443","comment":"https://x.com/drb_ra/status/1964400735426093226","timestamp":"1757184606","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"7e63fcfb-fe06-591d-9a25-4278c4de1566","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.239.89","comment":"https://x.com/drb_ra/status/1964400735426093226","timestamp":"1757184606","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"706044f7-5e7e-5369-9601-335ca6472376","type":"url","category":"Network activity","to_ids":true,"value":"http://114.67.81.245:7443","comment":"https://x.com/drb_ra/status/1964400877684609475","timestamp":"1757184640","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"db4b5093-adaa-5da8-baa9-9e1b0bd400ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.67.81.245","comment":"https://x.com/drb_ra/status/1964400877684609475","timestamp":"1757184640","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f19c19d5-7eb4-59fc-ade4-4aad0e8b8dce","type":"url","category":"Network activity","to_ids":true,"value":"http://173.212.222.49:7443","comment":"https://x.com/drb_ra/status/1964401024699158802","timestamp":"1757184675","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"f619a36e-36df-576e-9f8c-69116e360b88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.212.222.49","comment":"https://x.com/drb_ra/status/1964401024699158802","timestamp":"1757184675","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"948217cc-b304-5d51-afe3-fbf99f2fd6af","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.215:31337","comment":"https://x.com/drb_ra/status/1964401171470438846","timestamp":"1757184710","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"10e4f222-73df-5f27-8191-db453f7f4753","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.215","comment":"https://x.com/drb_ra/status/1964401171470438846","timestamp":"1757184710","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f4645f76-878a-5ce8-ae72-8889fbc57dad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.79","comment":"https://x.com/drb_ra/status/1964401824330666085","timestamp":"1757184866","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"eb2a1de7-9087-5300-951e-349e2dfd0a50","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.79:5000","comment":"https://x.com/drb_ra/status/1964401824330666085","timestamp":"1757184866","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"d1217f47-a4b3-5bb8-beeb-a253d5d97e89","type":"url","category":"Network activity","to_ids":true,"value":"http://113.45.149.249:30005","comment":"https://x.com/drb_ra/status/1964401968748646427","timestamp":"1757184900","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"45b74a7b-0b2a-5fe0-84ef-829ad97ee08c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.45.149.249","comment":"https://x.com/drb_ra/status/1964401968748646427","timestamp":"1757184900","distribution":"5","Tag":[{"name":"Reverse_SSH"},{"name":"C2"}]},{"uuid":"e1dc20e2-4043-55a4-b091-2ce0949fa67d","type":"url","category":"Network activity","to_ids":true,"value":"http://221.229.196.37:47486","comment":"https://x.com/drb_ra/status/1964402112512872746","timestamp":"1757184935","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8abffecc-7137-55e1-9b27-f54c7c13583f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.229.196.37","comment":"https://x.com/drb_ra/status/1964402112512872746","timestamp":"1757184935","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3c58258c-4c4e-5071-9089-ee188098b6b2","type":"url","category":"Network activity","to_ids":true,"value":"http://195.114.193.30:8443","comment":"https://x.com/drb_ra/status/1964402252828803432","timestamp":"1757184968","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88d72ecc-d600-5252-8913-87a8a5060f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.114.193.30","comment":"https://x.com/drb_ra/status/1964402252828803432","timestamp":"1757184968","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3ed39ce0-078e-5484-bef6-927d249f3908","type":"url","category":"Network activity","to_ids":true,"value":"http://114.55.179.139:47486","comment":"https://x.com/drb_ra/status/1964402396534055311","timestamp":"1757185002","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"a018c314-5142-5847-8234-7b46205e67f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"114.55.179.139","comment":"https://x.com/drb_ra/status/1964402396534055311","timestamp":"1757185002","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"abf4fa80-7a3e-5317-82ae-e4243aa265fa","type":"url","category":"Network activity","to_ids":true,"value":"http://111.48.61.15:47486","comment":"https://x.com/drb_ra/status/1964402537487872210","timestamp":"1757185036","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"36844d3d-fd06-5e7e-962e-10c7868825ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"111.48.61.15","comment":"https://x.com/drb_ra/status/1964402537487872210","timestamp":"1757185036","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88591d34-aa6d-59a3-875f-9fec1deb556b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.116.203.220","comment":"https://x.com/drb_ra/status/1964402680467444170","timestamp":"1757185070","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2ce25ceb-0beb-5fe1-ba0c-1069d8bf9e7f","type":"url","category":"Network activity","to_ids":true,"value":"http://88.116.203.220:5500","comment":"https://x.com/drb_ra/status/1964402680467444170","timestamp":"1757185070","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"9fbc462f-4884-563b-b826-1c872088ed1c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.231.227.244","comment":"https://x.com/drb_ra/status/1964402820813303927","timestamp":"1757185103","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"85e30895-257d-5f23-a448-53a9821b8d39","type":"url","category":"Network activity","to_ids":true,"value":"http://185.231.227.244:8808","comment":"https://x.com/drb_ra/status/1964402820813303927","timestamp":"1757185103","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"36f45fa3-ce0f-506b-8aa2-a9b5fb0c2d09","type":"url","category":"Network activity","to_ids":true,"value":"http://50.114.203.44:443","comment":"https://x.com/drb_ra/status/1964402961271927295","timestamp":"1757185137","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"8db8479a-d3f3-54ea-87ee-37ec1e57036d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.114.203.44","comment":"https://x.com/drb_ra/status/1964402961271927295","timestamp":"1757185137","distribution":"5","Tag":[{"name":"C2"},{"name":"AsyncRAT"}]},{"uuid":"f2e71aa9-a4e6-5d2a-a3a2-dddff22a984f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.56.54:80","comment":"https://x.com/drb_ra/status/1964403104746787011","timestamp":"1757185171","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d0f42a1b-6f79-52eb-81f0-f027c76149bf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.56.54","comment":"https://x.com/drb_ra/status/1964403104746787011","timestamp":"1757185171","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"87160156-8b5d-50e5-9093-e2a114a8a667","type":"url","category":"Network activity","to_ids":true,"value":"http://34.243.190.248:80","comment":"https://x.com/drb_ra/status/1964403247734476914","timestamp":"1757185205","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c525dd19-583d-597e-8ebc-59639ff26265","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.243.190.248","comment":"https://x.com/drb_ra/status/1964403247734476914","timestamp":"1757185205","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8f34adb2-d586-5ebd-96c9-83b0cf6b62f4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.251.87.162:80","comment":"https://x.com/drb_ra/status/1964403388315037792","timestamp":"1757185239","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"9b827feb-0ff4-5aa3-961a-23a648d90244","type":"url","category":"Network activity","to_ids":true,"value":"http://54.216.87.50:443","comment":"https://x.com/drb_ra/status/1964403529441038634","timestamp":"1757185272","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"305dba52-2258-5930-be54-056f5b86906b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.216.87.50","comment":"https://x.com/drb_ra/status/1964403529441038634","timestamp":"1757185272","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a957a154-56b5-5d4b-8c90-d602abc93a26","type":"url","category":"Network activity","to_ids":true,"value":"http://118.89.85.96:8888","comment":"https://x.com/drb_ra/status/1964403671120445560","timestamp":"1757185306","distribution":"5","Tag":[{"name":"C2"},{"name":"Supershell"}]},{"uuid":"1ce4432d-9787-5652-9959-ab4194bebbdb","type":"url","category":"Network activity","to_ids":true,"value":"http://104.194.153.225:7000","comment":"https://x.com/drb_ra/status/1964403811214115103","timestamp":"1757185340","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"ed212f5b-fa21-5556-8171-b8a8cf3ae814","type":"url","category":"Network activity","to_ids":true,"value":"http://104.194.153.225:6000","comment":"https://x.com/drb_ra/status/1964403953111597422","timestamp":"1757185373","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"5cef3360-7b45-5dd4-b10f-bd0ee49a8b48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.194.153.225","comment":"https://x.com/drb_ra/status/1964403953111597422","timestamp":"1757185373","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"d130098d-956c-5341-a7df-532dfe16987f","type":"url","category":"Network activity","to_ids":true,"value":"http://103.236.70.158:8000","comment":"https://x.com/drb_ra/status/1964404099383718247","timestamp":"1757185408","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"e7a9d504-fe11-5eea-8848-8378a4aade97","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.236.70.158","comment":"https://x.com/drb_ra/status/1964404099383718247","timestamp":"1757185408","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"9b8e3cfb-8234-58c9-8c72-709d66fcf3f7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d7d69379dc023fea6781f20c060a85d3b4215220bfefc40acefae3dc9e5867a4","comment":"https://x.com/malwrhunterteam/status/1964408885839888555","timestamp":"1757186549","distribution":"5"},{"uuid":"dc28d040-dc08-5210-af84-44433e276465","type":"md5","category":"Payload delivery","to_ids":true,"value":"20e6e0e166533a95ac01383310adf13f","comment":"https://x.com/petikvx/status/1964411199610917184","timestamp":"1757187101","distribution":"5","Tag":[{"name":"ransomware"},{"name":"Trojan"},{"name":"RAT"},{"name":"AsyncRAT"},{"name":"stealer"}]},{"uuid":"9a0c0a0c-9e9f-5913-b500-a9e1452ee8a0","type":"domain","category":"Network activity","to_ids":true,"value":"errenase.com","comment":"https://x.com/AmberMille78556/status/1964413323711222125","timestamp":"1757187608","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6be8b8d9-f894-575b-a3ab-ac49b3dffe68","type":"url","category":"Network activity","to_ids":true,"value":"https://errenase.com/contacts/index.html","comment":"https://x.com/AmberMille78556/status/1964413323711222125","timestamp":"1757187608","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3505cb3d-76a4-55a0-bf79-26d107a4646b","type":"domain","category":"Network activity","to_ids":true,"value":"sparegletamentocottapos.weebly.com","comment":"https://x.com/urldna_bot/status/1964418353990160837","timestamp":"1757188807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"65d2d1c5-660f-5d23-9302-b094a27d0b5c","type":"url","category":"Network activity","to_ids":true,"value":"https://sparegletamentocottapos.weebly.com","comment":"https://x.com/urldna_bot/status/1964418353990160837","timestamp":"1757188807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fd3c8576-0245-5867-b0b1-6ec5d35ba566","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.104","comment":"https://x.com/threatquery/status/1964433438510928163","timestamp":"1757192403","distribution":"5","Tag":[{"name":"malware"},{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"9d276a9a-b458-5146-83f3-b4e867fad5bb","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.199.21","comment":"https://x.com/threatquery/status/1964433442101190816","timestamp":"1757192404","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"a058f5e3-a4b4-5d74-a6d1-225134c16e87","type":"url","category":"Network activity","to_ids":true,"value":"http://101.133.199.14","comment":"https://x.com/threatquery/status/1964433440381555071","timestamp":"1757192404","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"},{"name":"malware"}]},{"uuid":"8c1a406a-e44a-5a9f-bef6-a9921900d2ae","type":"domain","category":"Network activity","to_ids":true,"value":"generatedice.blogspot.com","comment":"https://x.com/urldna_bot/status/1964448554891506031","timestamp":"1757196007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7ee730ff-6e89-5a1c-a3c4-5385a2c486bb","type":"url","category":"Network activity","to_ids":true,"value":"https://generatedice.blogspot.com/?m=1","comment":"https://x.com/urldna_bot/status/1964448554891506031","timestamp":"1757196007","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a2c7a288-6063-523a-9bdd-a24fd471b1cd","type":"url","category":"Network activity","to_ids":true,"value":"http://212.64.215.198:6849","comment":"https://x.com/SarlackLab/status/1964464040895271034","timestamp":"1757199699","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"12d193cd-dc6d-5854-9cb4-44d697578ed7","type":"domain","category":"Network activity","to_ids":true,"value":"3stbnor9x.localto.net","comment":"https://x.com/SarlackLab/status/1964464040895271034","timestamp":"1757199699","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"44800f5a-bf53-5f70-95e1-5a3d051a3f78","type":"url","category":"Network activity","to_ids":true,"value":"http://3stbnor9x.localto.net","comment":"https://x.com/SarlackLab/status/1964464040895271034","timestamp":"1757199699","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7adcee42-2215-53e5-983c-e422c8cd2a43","type":"ip-dst","category":"Network activity","to_ids":true,"value":"212.64.215.198","comment":"https://x.com/SarlackLab/status/1964464040895271034","timestamp":"1757199699","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"ebc54a5c-c0d4-532e-a371-c24f711a89cf","type":"domain","category":"Network activity","to_ids":true,"value":"afteracle.dongguanai.cn","comment":"https://x.com/masaomi346/status/1964466523780837842","timestamp":"1757200291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3e544ba5-5775-5636-b2a6-67b3d32b2d6d","type":"url","category":"Network activity","to_ids":true,"value":"https://afteracle.dongguanai.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/masaomi346/status/1964466523780837842","timestamp":"1757200291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f4b2799-b56a-55d6-83e9-e3fe6e30359e","type":"domain","category":"Network activity","to_ids":true,"value":"foreier.jriguvg.cn","comment":"https://x.com/masaomi346/status/1964466523780837842","timestamp":"1757200291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69c273d2-2baf-510d-9032-81cc9c27cfa5","type":"url","category":"Network activity","to_ids":true,"value":"https://foreier.jriguvg.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/masaomi346/status/1964466523780837842","timestamp":"1757200291","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff9fae65-7a8e-5e02-b19a-d11755b1ee55","type":"url","category":"Network activity","to_ids":true,"value":"http://8.138.222.215:443","comment":"https://x.com/drb_ra/status/1964468259585216821","timestamp":"1757200705","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1e650b2a-4ecc-525b-bc30-ae68b43bd2f7","type":"url","category":"Network activity","to_ids":true,"value":"https://179.43.186.223/pixel","comment":"https://x.com/drb_ra/status/1964468400559968425","timestamp":"1757200739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f5055eb2-828f-5300-aa65-ab336e9157ad","type":"url","category":"Network activity","to_ids":true,"value":"http://179.43.186.223:34758","comment":"https://x.com/drb_ra/status/1964468400559968425","timestamp":"1757200739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"37587bf3-06fc-5105-8d04-84eedff082a9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.43.186.223","comment":"https://x.com/drb_ra/status/1964468400559968425","timestamp":"1757200739","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"62470f50-60d9-5d73-856e-ee2ddfee07b8","type":"url","category":"Network activity","to_ids":true,"value":"http://154.82.81.162:8080","comment":"https://x.com/drb_ra/status/1964468541132066920","timestamp":"1757200772","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"80a4ab5b-603d-5218-bae2-97dde6952d19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.82.81.162","comment":"https://x.com/drb_ra/status/1964468541132066920","timestamp":"1757200772","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"517b8bf4-b225-58ba-9dce-617a16d55925","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.134.238:10088","comment":"https://x.com/drb_ra/status/1964468681792245834","timestamp":"1757200806","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0848b1c2-e94a-5903-9986-a76cb1e32976","type":"domain","category":"Network activity","to_ids":true,"value":"uniswap-register.limited","comment":"https://x.com/AmberMille78556/status/1964469061238288498","timestamp":"1757200896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d03b8eb5-0ba4-551a-a098-db8d8ed58838","type":"url","category":"Network activity","to_ids":true,"value":"https://uniswap-register.limited/contacts/index.html","comment":"https://x.com/AmberMille78556/status/1964469061238288498","timestamp":"1757200896","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab3314e6-74d7-5bc9-b923-3bbea1d768ab","type":"url","category":"Network activity","to_ids":true,"value":"http://120.48.24.227:80","comment":"https://x.com/drb_ra/status/1964469329900294501","timestamp":"1757200960","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2ac88ece-dbca-552d-a2f1-82fc8f749f8e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"120.48.24.227","comment":"https://x.com/drb_ra/status/1964469329900294501","timestamp":"1757200960","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ccf55f06-00dd-50fc-8088-ca6ad60e4b30","type":"domain","category":"Network activity","to_ids":true,"value":"myyahoo75647.activehosted.com","comment":"https://x.com/urldna_bot/status/1964478759647527323","timestamp":"1757203209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a8ac7af7-a940-51bd-8cfb-c09a656256e5","type":"url","category":"Network activity","to_ids":true,"value":"http://myyahoo75647.activehosted.com/f/1","comment":"https://x.com/urldna_bot/status/1964478759647527323","timestamp":"1757203209","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b12f28ec-6c6b-5699-8acf-4d3e77c5a872","type":"domain","category":"Network activity","to_ids":true,"value":"leethomason.com","comment":"https://x.com/ir0n_fe/status/1964479596830872030","timestamp":"1757203408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b7a678ff-6737-502f-9a13-7e94fdf47d59","type":"url","category":"Network activity","to_ids":true,"value":"https://leethomason.com/ja","comment":"https://x.com/ir0n_fe/status/1964479596830872030","timestamp":"1757203408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"385b4adc-e60f-5430-a3b8-4a984166c076","type":"domain","category":"Network activity","to_ids":true,"value":"somean-ja.com","comment":"https://x.com/ir0n_fe/status/1964479596830872030","timestamp":"1757203408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b43a9ae-87bc-51dd-bab0-c39346a8b701","type":"url","category":"Network activity","to_ids":true,"value":"https://somean-ja.com/ibclient/select","comment":"https://x.com/ir0n_fe/status/1964479596830872030","timestamp":"1757203408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c6955f6d-4d20-57ad-9385-324c941ede13","type":"url","category":"Network activity","to_ids":true,"value":"http://1.15.134.238:1234","comment":"https://x.com/drb_ra/status/1964505533312082314","timestamp":"1757209592","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cfc1a0f9-0c3c-50af-a010-7aff17621f02","type":"domain","category":"Network activity","to_ids":true,"value":"arvignjhjkjkjk.weebly.com","comment":"https://x.com/urldna_bot/status/1964508952114176149","timestamp":"1757210407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"53483452-477d-5e1f-8c61-eeff3ef704f1","type":"url","category":"Network activity","to_ids":true,"value":"https://arvignjhjkjkjk.weebly.com","comment":"https://x.com/urldna_bot/status/1964508952114176149","timestamp":"1757210407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"6349112f-2392-56bb-9515-3457582ae6e0","type":"domain","category":"Network activity","to_ids":true,"value":"resonabank.co.jp.alchademy.com","comment":"https://x.com/oroshi0064/status/1964534346452521381","timestamp":"1757216462","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3de741f4-d8ab-52be-958f-a57acb25f5d3","type":"url","category":"Network activity","to_ids":true,"value":"https://www.resonabank.co.jp.alchademy.com/web/0102/0102_010_00","comment":"https://x.com/oroshi0064/status/1964534346452521381","timestamp":"1757216462","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc36094f-0dab-5995-b2d6-4f92dafe1c41","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.185.55","comment":"https://x.com/oroshi0064/status/1964534346452521381","timestamp":"1757216462","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbce817c-a19a-5b44-ae47-3e0462f5a3fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.185.55","comment":"https://x.com/oroshi0064/status/1964534346452521381","timestamp":"1757216462","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aa382bc4-2a7b-5b09-a847-c3534d5e26c2","type":"domain","category":"Network activity","to_ids":true,"value":"cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/FsecIntelEs/status/1964534879582093527","timestamp":"1757216589","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"ecb7b703-6cf8-5a7f-8d7e-05ea1c5a9322","type":"url","category":"Network activity","to_ids":true,"value":"http://cephalus6oiypuwumqlwurvbmwsfglg424zjdmywfgqm4iehkqivsjyd.onion","comment":"https://x.com/FsecIntelEs/status/1964534879582093527","timestamp":"1757216589","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a7a01156-8da2-5ee5-b2d0-0f5cc72963aa","type":"domain","category":"Network activity","to_ids":true,"value":"attttttttttt1.weebly.com","comment":"https://x.com/urldna_bot/status/1964539161928417778","timestamp":"1757217610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d54d5239-6138-53fa-941e-e4121a38d3d3","type":"url","category":"Network activity","to_ids":true,"value":"https://attttttttttt1.weebly.com","comment":"https://x.com/urldna_bot/status/1964539161928417778","timestamp":"1757217610","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7e61e64e-603b-5584-aed8-3323cdfef60d","type":"domain","category":"Network activity","to_ids":true,"value":"saludable.udd.cl","comment":"https://x.com/1ZRR4H/status/1964564217685823612","timestamp":"1757223583","distribution":"5"},{"uuid":"95cd8d1a-3fa5-5788-b9be-619f6071f9d9","type":"url","category":"Network activity","to_ids":true,"value":"http://saludable.udd.cl","comment":"https://x.com/1ZRR4H/status/1964564217685823612","timestamp":"1757223583","distribution":"5"},{"uuid":"c401dafa-7e88-5a98-a85c-719895048f9f","type":"domain","category":"Network activity","to_ids":true,"value":"ggfgeryrkddfqqqefghe.weebly.com","comment":"https://x.com/urldna_bot/status/1964569347772297470","timestamp":"1757224807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a82cfbb1-8015-54d5-869f-9553732371e9","type":"url","category":"Network activity","to_ids":true,"value":"https://ggfgeryrkddfqqqefghe.weebly.com","comment":"https://x.com/urldna_bot/status/1964569347772297470","timestamp":"1757224807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c190f117-d051-5c46-893e-5faf23633eb1","type":"url","category":"Network activity","to_ids":true,"value":"http://15.206.72.142:7443","comment":"https://x.com/drb_ra/status/1964580874265166172","timestamp":"1757227555","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"0026f262-bce8-5ae5-ac2b-360cf4f8b4c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.206.72.142","comment":"https://x.com/drb_ra/status/1964580874265166172","timestamp":"1757227555","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"9e96a28b-af7d-5e67-8e1b-3b182a0b9a2d","type":"url","category":"Network activity","to_ids":true,"value":"http://18.214.2.45:7443","comment":"https://x.com/drb_ra/status/1964581013570670781","timestamp":"1757227588","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"d17d16b0-e4c7-5a63-936c-9c8f2ed60752","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.214.2.45","comment":"https://x.com/drb_ra/status/1964581013570670781","timestamp":"1757227588","distribution":"5","Tag":[{"name":"C2"},{"name":"Covenant"}]},{"uuid":"ae46e470-dbfb-57f5-b6a7-a6c92cadaa73","type":"url","category":"Network activity","to_ids":true,"value":"http://95.217.97.220:31337","comment":"https://x.com/drb_ra/status/1964581153375203667","timestamp":"1757227621","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"c4def95c-d6ff-55c0-836b-9d55106daec4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.217.97.220","comment":"https://x.com/drb_ra/status/1964581153375203667","timestamp":"1757227621","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a959f573-bf75-5b50-ad64-899ce1871251","type":"url","category":"Network activity","to_ids":true,"value":"http://164.92.197.38:3578","comment":"https://x.com/drb_ra/status/1964581801453813787","timestamp":"1757227776","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"6851e790-260a-5c48-896e-acaaf37919ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"164.92.197.38","comment":"https://x.com/drb_ra/status/1964581801453813787","timestamp":"1757227776","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"93a9b44b-6a8a-58ac-9602-78236a71302b","type":"url","category":"Network activity","to_ids":true,"value":"http://192.3.177.145:9090","comment":"https://x.com/drb_ra/status/1964581942206353793","timestamp":"1757227809","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0c88ae48-4069-5788-a15f-b6b4959b4874","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.177.145","comment":"https://x.com/drb_ra/status/1964581942206353793","timestamp":"1757227809","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"4b7c6715-5149-561b-ad64-b66dc9633cb1","type":"url","category":"Network activity","to_ids":true,"value":"http://178.128.219.58:3232","comment":"https://x.com/drb_ra/status/1964582082828783890","timestamp":"1757227843","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"5e96004f-2198-5a19-80d6-73d65bec221c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.128.219.58","comment":"https://x.com/drb_ra/status/1964582082828783890","timestamp":"1757227843","distribution":"5","Tag":[{"name":"C2"},{"name":"Reverse_SSH"}]},{"uuid":"36fb3c7e-4880-5306-b736-c8cd5f3b54b6","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.102.38:54681","comment":"https://x.com/drb_ra/status/1964582222180298792","timestamp":"1757227876","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"48e80f67-b0bc-594c-9fb4-cda25a12aebb","type":"url","category":"Network activity","to_ids":true,"value":"http://47.109.102.38:47486","comment":"https://x.com/drb_ra/status/1964582366246293666","timestamp":"1757227910","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3015af0e-af3b-5c2a-89f0-a1ced6c45c58","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.109.102.38","comment":"https://x.com/drb_ra/status/1964582366246293666","timestamp":"1757227910","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"01b02e5c-5492-5bb2-94d7-b288fc517033","type":"url","category":"Network activity","to_ids":true,"value":"http://15.152.46.24:58609","comment":"https://x.com/drb_ra/status/1964582507451732288","timestamp":"1757227944","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"80d90f5b-39bd-5fbf-ba27-4976187e3010","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.152.46.24","comment":"https://x.com/drb_ra/status/1964582507451732288","timestamp":"1757227944","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"3b3381bf-8c7b-5638-8fa1-ea808ad312da","type":"url","category":"Network activity","to_ids":true,"value":"http://56.155.92.53:47851","comment":"https://x.com/drb_ra/status/1964582647575060783","timestamp":"1757227978","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"8cb7a5ab-dee1-51ee-9eeb-bfc8ca7e5c0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"56.155.92.53","comment":"https://x.com/drb_ra/status/1964582647575060783","timestamp":"1757227978","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"2475a4f9-0326-57f0-9453-185300014dc4","type":"url","category":"Network activity","to_ids":true,"value":"http://40.176.189.140:11102","comment":"https://x.com/drb_ra/status/1964582788369437030","timestamp":"1757228011","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d3acd28e-63af-54a6-bbfc-6d68e48214a0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"40.176.189.140","comment":"https://x.com/drb_ra/status/1964582788369437030","timestamp":"1757228011","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"eb03ec48-2a4d-5b6f-bdfc-44822f75d072","type":"url","category":"Network activity","to_ids":true,"value":"http://79.241.107.250:82","comment":"https://x.com/drb_ra/status/1964582930518593560","timestamp":"1757228045","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"dc340f02-402d-54de-aa6d-6baaae749834","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.241.107.250","comment":"https://x.com/drb_ra/status/1964582930518593560","timestamp":"1757228045","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"e9434bfd-1399-5d01-84b0-b6edee918acb","type":"url","category":"Network activity","to_ids":true,"value":"http://16.171.236.166:20256","comment":"https://x.com/drb_ra/status/1964583070516072724","timestamp":"1757228078","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d2a6e34e-a40d-576c-956a-04e41ae4c4fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.171.236.166","comment":"https://x.com/drb_ra/status/1964583070516072724","timestamp":"1757228078","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"db46ae51-0bdf-5aea-be12-5d62bed3c09d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.255.209.150:80","comment":"https://x.com/drb_ra/status/1964583214028349850","timestamp":"1757228113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"e974de6b-3a0a-5f83-9844-83bc4cc83683","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.255.209.150","comment":"https://x.com/drb_ra/status/1964583214028349850","timestamp":"1757228113","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f2741b4f-5091-5050-bf82-b143c45c4a12","type":"url","category":"Network activity","to_ids":true,"value":"http://54.171.61.251:80","comment":"https://x.com/drb_ra/status/1964583357163196605","timestamp":"1757228147","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"94caef26-fee9-5bb0-b994-7df9b394aa53","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.171.61.251","comment":"https://x.com/drb_ra/status/1964583357163196605","timestamp":"1757228147","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"2e7af725-2067-5571-8b38-979783f4eb0f","type":"url","category":"Network activity","to_ids":true,"value":"http://91.99.115.18:443","comment":"https://x.com/drb_ra/status/1964583499626946932","timestamp":"1757228181","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0635c25c-c4ad-542f-899a-27fcdaf55892","type":"url","category":"Network activity","to_ids":true,"value":"http://91.99.115.18:80","comment":"https://x.com/drb_ra/status/1964583640169664608","timestamp":"1757228214","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"662e1280-646b-5909-b39d-a082022bb5dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.99.115.18","comment":"https://x.com/drb_ra/status/1964583640169664608","timestamp":"1757228214","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b9879fba-f36d-529b-80d9-809d0614e556","type":"url","category":"Network activity","to_ids":true,"value":"http://38.242.213.185:587","comment":"https://x.com/drb_ra/status/1964583780829843686","timestamp":"1757228248","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c97e0576-2cb9-51ec-a70f-5732c480c95c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.242.213.185","comment":"https://x.com/drb_ra/status/1964583780829843686","timestamp":"1757228248","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4ae43663-cefe-5461-8486-d1198125a818","type":"url","category":"Network activity","to_ids":true,"value":"http://150.40.119.238:80","comment":"https://x.com/drb_ra/status/1964583923243241582","timestamp":"1757228282","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"e4ab39dd-f4d4-504c-8f10-d9baa611fa5d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.40.119.238","comment":"https://x.com/drb_ra/status/1964583923243241582","timestamp":"1757228282","distribution":"5","Tag":[{"name":"Pegasus"},{"name":"C2"},{"name":"Hookbot"}]},{"uuid":"2a6efe7b-d2d3-5bd2-a84b-5cc08818aea2","type":"url","category":"Network activity","to_ids":true,"value":"http://192.159.99.13:8848","comment":"https://x.com/drb_ra/status/1964584064285053235","timestamp":"1757228315","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"cc7cd47f-fd73-598b-9649-b357160e8cfb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.159.99.13","comment":"https://x.com/drb_ra/status/1964584064285053235","timestamp":"1757228315","distribution":"5","Tag":[{"name":"C2"},{"name":"Dcrat"}]},{"uuid":"3ac065fb-542f-518d-a150-3ba5fe7fd801","type":"url","category":"Network activity","to_ids":true,"value":"http://90.48.210.177:80","comment":"https://x.com/drb_ra/status/1964584204320243811","timestamp":"1757228349","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"807a4519-0f54-5c11-93d5-518c059a81d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"90.48.210.177","comment":"https://x.com/drb_ra/status/1964584204320243811","timestamp":"1757228349","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"50489413-c308-54b4-83fd-c39816debcaf","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.82.172:443","comment":"https://x.com/drb_ra/status/1964584344980435249","timestamp":"1757228382","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"21229b07-c222-5b3a-9f52-1e433ae99e95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.82.172","comment":"https://x.com/drb_ra/status/1964584344980435249","timestamp":"1757228382","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"4822b6ce-4921-5b8d-afee-3a6d3000e400","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.49.203:443","comment":"https://x.com/drb_ra/status/1964584485166735581","timestamp":"1757228416","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"572b163a-6183-5c09-a1f2-275cd1f928c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.49.203","comment":"https://x.com/drb_ra/status/1964584485166735581","timestamp":"1757228416","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"0291826e-54a7-5bc0-bc56-df39a789aee6","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.55.222:443","comment":"https://x.com/drb_ra/status/1964584626124710243","timestamp":"1757228449","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"1d4997b4-8a5e-5ee3-9148-28702ba8b2ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.55.222","comment":"https://x.com/drb_ra/status/1964584626124710243","timestamp":"1757228449","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"ba2da9f7-779d-52b5-b3f0-b41d46b7da3b","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.66.219:443","comment":"https://x.com/drb_ra/status/1964584766369661173","timestamp":"1757228483","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"dd82fce1-a836-571e-ad6f-a8e12c75f638","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.66.219","comment":"https://x.com/drb_ra/status/1964584766369661173","timestamp":"1757228483","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"30290180-6722-5543-b39b-37b15d18e176","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.66.199:443","comment":"https://x.com/drb_ra/status/1964584906308391182","timestamp":"1757228516","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"6a3877c2-ceab-5dcf-88a6-283d3b2c95d5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.66.199","comment":"https://x.com/drb_ra/status/1964584906308391182","timestamp":"1757228516","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"f6c213f6-da1a-51b7-b4eb-a695b38f7ca5","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.53.213:443","comment":"https://x.com/drb_ra/status/1964585046888894804","timestamp":"1757228550","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"fac8ab8b-8c20-5b44-819a-47ce4fc9a277","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.53.213","comment":"https://x.com/drb_ra/status/1964585046888894804","timestamp":"1757228550","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"00a04ebf-8be6-5c07-bc61-2b762c361ab5","type":"url","category":"Network activity","to_ids":true,"value":"http://54.190.133.237:7443","comment":"https://x.com/drb_ra/status/1964585187423207863","timestamp":"1757228583","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"778e34b4-ea5f-5b7c-a799-2e2d2b05cc1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.190.133.237","comment":"https://x.com/drb_ra/status/1964585187423207863","timestamp":"1757228583","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"eeb70b74-7b2e-5f8e-8af8-67a54476f6a7","type":"url","category":"Network activity","to_ids":true,"value":"http://37.27.202.104:7443","comment":"https://x.com/drb_ra/status/1964585327097761909","timestamp":"1757228616","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a4a7e7b5-064a-50f4-893a-99d3279793c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.27.202.104","comment":"https://x.com/drb_ra/status/1964585327097761909","timestamp":"1757228616","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"61c5f088-0645-503f-8676-be9a6ea638c7","type":"url","category":"Network activity","to_ids":true,"value":"http://95.111.197.8:8888","comment":"https://x.com/drb_ra/status/1964585975558131983","timestamp":"1757228771","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f17e46e9-3460-5ad0-88df-a39cee345073","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.197.8","comment":"https://x.com/drb_ra/status/1964585975558131983","timestamp":"1757228771","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"20847e40-1ad1-537e-8a5f-8e669c742181","type":"url","category":"Network activity","to_ids":true,"value":"http://154.127.53.68:2404","comment":"https://x.com/drb_ra/status/1964586116352528727","timestamp":"1757228805","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d56ef741-570c-5c8a-bef5-1a4613a6e55a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.127.53.68","comment":"https://x.com/drb_ra/status/1964586116352528727","timestamp":"1757228805","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"0d6d8620-286f-570f-b0c5-c78054bb10db","type":"url","category":"Network activity","to_ids":true,"value":"http://149.28.70.98:2404","comment":"https://x.com/drb_ra/status/1964586256350007624","timestamp":"1757228838","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3e25cbc5-301d-52b6-a497-57fd8efe68a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.28.70.98","comment":"https://x.com/drb_ra/status/1964586256350007624","timestamp":"1757228838","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"b6adc527-6286-55bf-971e-f37dc3a15a5a","type":"url","category":"Network activity","to_ids":true,"value":"http://124.198.131.244:1000","comment":"https://x.com/drb_ra/status/1964586396934644032","timestamp":"1757228871","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"77ba529c-91ef-5305-81f8-10f2c1105d2e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"124.198.131.244","comment":"https://x.com/drb_ra/status/1964586396934644032","timestamp":"1757228871","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"04099dbc-1ff6-5a96-bf8c-5f586d5f7d5d","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/tsgjm123/am/refs/heads/main/ShellHost.exe","comment":"https://x.com/smica83/status/1964587007507910877","timestamp":"1757229017","distribution":"5"},{"uuid":"2de55696-477e-5f2a-a4b7-1f770a544235","type":"domain","category":"Network activity","to_ids":true,"value":"anonam39-21749.portmap.io","comment":"https://x.com/smica83/status/1964587007507910877","timestamp":"1757229017","distribution":"5"},{"uuid":"89b3404e-cf75-5e74-a90f-90b63a7990fc","type":"url","category":"Network activity","to_ids":true,"value":"http://anonam39-21749.portmap.io","comment":"https://x.com/smica83/status/1964587007507910877","timestamp":"1757229017","distribution":"5"},{"uuid":"7a98df89-2b06-5151-80f4-fbe003c51f07","type":"domain","category":"Network activity","to_ids":true,"value":"google-play.shop","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"169e5198-dda5-5d94-973c-98f950bbea0f","type":"url","category":"Network activity","to_ids":true,"value":"http://google-play.shop","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"db1af64a-7b33-5089-9e74-9a2e13947117","type":"domain","category":"Network activity","to_ids":true,"value":"signal-pro.online","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"95bde4f0-fbb7-5013-b69e-edd39819d67a","type":"url","category":"Network activity","to_ids":true,"value":"http://signal-pro.online","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fe3596bf-3d3c-598d-91ca-7fb4a3094755","type":"domain","category":"Network activity","to_ids":true,"value":"spotify-de.com","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"2d4a6684-b1f1-5f91-9704-0c990979686b","type":"url","category":"Network activity","to_ids":true,"value":"http://spotify-de.com","comment":"https://x.com/c9lab_soc/status/1964608898960421153","timestamp":"1757234236","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"04524bba-45e8-5345-8702-207c401b9598","type":"domain","category":"Network activity","to_ids":true,"value":"locatel.weebly.com","comment":"https://x.com/urldna_bot/status/1964629744265175120","timestamp":"1757239206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"65eb294c-39ee-5a7c-bdcd-bd4b9343b06d","type":"url","category":"Network activity","to_ids":true,"value":"https://locatel.weebly.com","comment":"https://x.com/urldna_bot/status/1964629744265175120","timestamp":"1757239206","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6aba8d00-6250-5d5a-ae4d-17de35ee70c2","type":"domain","category":"Network activity","to_ids":true,"value":"dpaste.org","comment":"https://x.com/smica83/status/1964650183939031283","timestamp":"1757244079","distribution":"5"},{"uuid":"aac87ee4-8316-5cf4-8627-43a66a01894b","type":"url","category":"Network activity","to_ids":true,"value":"https://dpaste.org/Yyyb0/raw","comment":"https://x.com/smica83/status/1964650183939031283","timestamp":"1757244079","distribution":"5"},{"uuid":"1e3e0662-afc4-57af-95db-ca593612ad7a","type":"domain","category":"Network activity","to_ids":true,"value":"kuikooiislogonm.webflow.io","comment":"https://x.com/urldna_bot/status/1964659945065918718","timestamp":"1757246407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"9de85082-a679-5a83-88e2-5a71b74da585","type":"url","category":"Network activity","to_ids":true,"value":"http://kuikooiislogonm.webflow.io","comment":"https://x.com/urldna_bot/status/1964659945065918718","timestamp":"1757246407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"261f2d10-6677-5c89-b8e5-12efa82d52ca","type":"domain","category":"Network activity","to_ids":true,"value":"download-wallett-home-zh-hk.webflow.io","comment":"https://x.com/destroyphishing/status/1964673222814888244","timestamp":"1757249572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2644894d-123c-53b3-8df6-24dbe383f717","type":"url","category":"Network activity","to_ids":true,"value":"https://download-wallett-home-zh-hk.webflow.io","comment":"https://x.com/destroyphishing/status/1964673222814888244","timestamp":"1757249572","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5bd63911-ffc5-5b38-b507-3508781dd7b3","type":"domain","category":"Network activity","to_ids":true,"value":"app.eoibuy-vs.cc","comment":"https://x.com/destroyphishing/status/1964673486175211791","timestamp":"1757249635","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbf35030-6a78-559d-88a4-abab9f7e2738","type":"url","category":"Network activity","to_ids":true,"value":"https://app.eoibuy-vs.cc/account/login","comment":"https://x.com/destroyphishing/status/1964673486175211791","timestamp":"1757249635","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"938d8b42-709a-5586-80b6-93335d994945","type":"url","category":"Network activity","to_ids":true,"value":"http://3.127.181.115:14415","comment":"https://x.com/SarlackLab/status/1964675157345079709","timestamp":"1757250034","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"e25fd139-5364-5e8d-bcea-91033d4d3234","type":"domain","category":"Network activity","to_ids":true,"value":"gggggptioeqnsadmeqweinas.zzux.com","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92a3377e-a709-5ec8-a70d-b68c2db2d864","type":"url","category":"Network activity","to_ids":true,"value":"https://gggggptioeqnsadmeqweinas.zzux.com/qwekh/23d/ewq23=liness/","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"51ecc677-51ed-5546-b034-9ddb14b18c22","type":"domain","category":"Network activity","to_ids":true,"value":"gggggptioeqnsadmeqweinas.longmusic.com","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d4ad2ea-369c-5344-9aab-3975a55f64e4","type":"url","category":"Network activity","to_ids":true,"value":"https://gggggptioeqnsadmeqweinas.longmusic.com/qwekh/23d/ewq23=liness/","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79510e80-09a2-5b25-8b8c-af40faf0c8f7","type":"domain","category":"Network activity","to_ids":true,"value":"gggggptioeqnsadmeqweinas.mefound.com","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38dd88d0-92b2-5132-8453-3ece94fc2962","type":"url","category":"Network activity","to_ids":true,"value":"https://gggggptioeqnsadmeqweinas.mefound.com/qwekh/23d/ewq23=liness/","comment":"https://x.com/masaomi346/status/1964686495362806083","timestamp":"1757252737","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f05576a2-ad55-53f8-843b-3634c2ce9dd3","type":"domain","category":"Network activity","to_ids":true,"value":"rrrrrragawanauthoritati.mrslove.com","comment":"https://x.com/masaomi346/status/1964686604116930745","timestamp":"1757252763","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"faeae042-00cc-5ec6-8304-207b1dd871e7","type":"url","category":"Network activity","to_ids":true,"value":"https://rrrrrragawanauthoritati.mrslove.com/qwekh/23d/ewq23=liness/","comment":"https://x.com/masaomi346/status/1964686604116930745","timestamp":"1757252763","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b99224a0-47f8-52b9-8796-64e738ee12cf","type":"domain","category":"Network activity","to_ids":true,"value":"convention-securitaire-franc.web.app","comment":"https://x.com/urldna_bot/status/1964690145099034691","timestamp":"1757253607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"13390bd7-3f0d-5a86-9568-4dcb819f98c8","type":"url","category":"Network activity","to_ids":true,"value":"https://convention-securitaire-franc.web.app","comment":"https://x.com/urldna_bot/status/1964690145099034691","timestamp":"1757253607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b99bc702-ed4a-5fdc-b49e-b1d2a290c3e0","type":"url","category":"Network activity","to_ids":true,"value":"http://198.55.98.77:1912","comment":"https://x.com/SarlackLab/status/1964690214481248756","timestamp":"1757253623","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"142d83fd-d9a5-575e-9757-029f08f71a7a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.55.98.77","comment":"https://x.com/SarlackLab/status/1964690214481248756","timestamp":"1757253623","distribution":"5","Tag":[{"name":"RedLine"},{"name":"C2"}]},{"uuid":"f42a278e-7615-5be5-89fd-bfee18924a42","type":"domain","category":"Network activity","to_ids":true,"value":"banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1964694466947899422","timestamp":"1757254637","distribution":"5"},{"uuid":"b1ba09fc-121a-592b-b80a-50ef100deaab","type":"url","category":"Network activity","to_ids":true,"value":"http://banenorlogger.no","comment":"https://x.com/FalconFeedsio/status/1964694466947899422","timestamp":"1757254637","distribution":"5"},{"uuid":"18ef290a-2de9-537f-a777-b2d4f5e30eab","type":"domain","category":"Network activity","to_ids":true,"value":"Essens.no","comment":"https://x.com/FalconFeedsio/status/1964694466947899422","timestamp":"1757254637","distribution":"5"},{"uuid":"d5fef564-78de-5a88-8c43-e28244e8d00b","type":"url","category":"Network activity","to_ids":true,"value":"http://Essens.no","comment":"https://x.com/FalconFeedsio/status/1964694466947899422","timestamp":"1757254637","distribution":"5"},{"uuid":"a106ab4f-b7c4-5357-9e85-3157c61da23d","type":"domain","category":"Network activity","to_ids":true,"value":"serdegogozedeytidtelerstore.marina.am","comment":"https://x.com/AddressIntel/status/1964705234896179675","timestamp":"1757257205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ccfd0fdd-4202-57c7-b39f-96eb32815f92","type":"url","category":"Network activity","to_ids":true,"value":"https://serdegogozedeytidtelerstore.marina.am/sd/auth/log.p","comment":"https://x.com/AddressIntel/status/1964705234896179675","timestamp":"1757257205","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"73adc1c9-0201-50bc-a8b7-5e946694865b","type":"domain","category":"Network activity","to_ids":true,"value":"mail.oosapat.gob.mx","comment":"https://x.com/mbec03/status/1964705989003010421","timestamp":"1757257384","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"887558db-20e8-554d-b158-b428d30f1ae3","type":"url","category":"Network activity","to_ids":true,"value":"http://mail.oosapat.gob.mx","comment":"https://x.com/mbec03/status/1964705989003010421","timestamp":"1757257384","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"ece92327-971e-5383-bb43-c07e065a1559","type":"domain","category":"Network activity","to_ids":true,"value":"chainresolver.xyz","comment":"https://x.com/destroyphishing/status/1964708143969206598","timestamp":"1757257898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"682f4c91-ad02-520b-bd94-e41e3995e292","type":"url","category":"Network activity","to_ids":true,"value":"http://chainresolver.xyz","comment":"https://x.com/destroyphishing/status/1964708143969206598","timestamp":"1757257898","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"775cbdba-517e-5725-b39d-2e8283f2c72a","type":"domain","category":"Network activity","to_ids":true,"value":"onespace.ge","comment":"https://x.com/AddressIntel/status/1964715304832942222","timestamp":"1757259605","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cb22293-d771-51dd-8369-01b3cb438cf7","type":"url","category":"Network activity","to_ids":true,"value":"https://onespace.ge/it/check1/","comment":"https://x.com/AddressIntel/status/1964715304832942222","timestamp":"1757259605","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3ebb0749-4722-51a6-ae17-6a8c63ffcb48","type":"domain","category":"Network activity","to_ids":true,"value":"lavern123.duckdns.org","comment":"https://x.com/skocherhan/status/1964719966600753433","timestamp":"1757260717","distribution":"5"},{"uuid":"fa4de1a6-71ad-594f-aacf-534b73193e46","type":"url","category":"Network activity","to_ids":true,"value":"http://lavern123.duckdns.org","comment":"https://x.com/skocherhan/status/1964719966600753433","timestamp":"1757260717","distribution":"5"},{"uuid":"7b41e8f9-3b6c-5961-8191-e8575a34ae9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.235.98.224","comment":"https://x.com/skocherhan/status/1964719966600753433","timestamp":"1757260717","distribution":"5"},{"uuid":"5ec014ca-31dd-5b93-835d-4bf62e459f66","type":"domain","category":"Network activity","to_ids":true,"value":"mn8xt8.webwave.dev","comment":"https://x.com/urldna_bot/status/1964720357106999764","timestamp":"1757260810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4a78e6f0-1b81-5095-9523-6a50de261ac3","type":"url","category":"Network activity","to_ids":true,"value":"https://mn8xt8.webwave.dev","comment":"https://x.com/urldna_bot/status/1964720357106999764","timestamp":"1757260810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"cb85adf4-1f39-5495-8a02-dedced7b2b08","type":"md5","category":"Payload delivery","to_ids":true,"value":"5e98e5851b420fe117b4bc5b446dc6eb","comment":"https://x.com/ReBensk/status/1964723123376607469","timestamp":"1757261470","distribution":"5","Tag":[{"name":"Android"},{"name":"malware"},{"name":"Trojan"}]},{"uuid":"dc7a9696-c8b2-5f50-b8a1-95b38bb339e5","type":"domain","category":"Network activity","to_ids":true,"value":"wmail00000000works.weebly.com","comment":"https://x.com/urldna_bot/status/1964750541117911535","timestamp":"1757268006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"838ba4e2-21c3-538e-94a4-24fce7817bf0","type":"url","category":"Network activity","to_ids":true,"value":"https://wmail00000000works.weebly.com","comment":"https://x.com/urldna_bot/status/1964750541117911535","timestamp":"1757268006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"66107bef-8dde-575f-aea6-9da5458a470e","type":"url","category":"Network activity","to_ids":true,"value":"http://139.84.175.201","comment":"https://x.com/phatomcandle/status/1964750538685513953","timestamp":"1757268006","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"97fc9f69-a0d8-5d6c-be0b-34cc6b42815a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.84.175.201","comment":"https://x.com/phatomcandle/status/1964750538685513953","timestamp":"1757268006","distribution":"5","Tag":[{"name":"malware"},{"name":"APT"}]},{"uuid":"a52f0a42-ab36-5904-b8b5-3d26018889ad","type":"domain","category":"Network activity","to_ids":true,"value":"site-a1d4gvtfp.godaddysites.com","comment":"https://x.com/urldna_bot/status/1964780738961609089","timestamp":"1757275206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"45759bb5-bea9-53c5-9437-0b6375cd9314","type":"url","category":"Network activity","to_ids":true,"value":"https://site-a1d4gvtfp.godaddysites.com","comment":"https://x.com/urldna_bot/status/1964780738961609089","timestamp":"1757275206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"31bcb5d7-e439-5be2-a3ee-fc5654cba374","type":"domain","category":"Network activity","to_ids":true,"value":"news-metaverse.com","comment":"https://x.com/cybercrime_INC1/status/1964789182175609017","timestamp":"1757277219","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"073684c8-5ebb-5c44-adda-6edfdd67c63c","type":"url","category":"Network activity","to_ids":true,"value":"http://news-metaverse.com","comment":"https://x.com/cybercrime_INC1/status/1964789182175609017","timestamp":"1757277219","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"928b8eb5-65ec-5efe-a10a-50cd84e187ed","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunity.com/profiles/76561199872628623/","comment":"https://x.com/skocherhan/status/1964794373004288410","timestamp":"1757278457","distribution":"5"},{"uuid":"33a6f95a-6cd1-5174-9472-839c82cb4304","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.182.87","comment":"https://x.com/threatquery/status/1964795830356853165","timestamp":"1757278804","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"238c3d61-04f5-5901-b471-227c0489e935","type":"url","category":"Network activity","to_ids":true,"value":"http://52.63.111.178","comment":"https://x.com/threatquery/status/1964795834291130790","timestamp":"1757278805","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"malware"},{"name":"C2"}]},{"uuid":"caefc2dd-aec9-5feb-9beb-c3e8bed2dc24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.63.111.178","comment":"https://x.com/threatquery/status/1964795834291130790","timestamp":"1757278805","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"malware"},{"name":"C2"}]},{"uuid":"abdeb029-9f8e-55b5-af15-ce68970c92d6","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.143.187","comment":"https://x.com/threatquery/status/1964795832412037336","timestamp":"1757278805","distribution":"5","Tag":[{"name":"malware"},{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"561dfdec-c5a1-5271-9cbf-9b173fb089d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.143.187","comment":"https://x.com/threatquery/status/1964795832412037336","timestamp":"1757278805","distribution":"5","Tag":[{"name":"malware"},{"name":"Bianlian"},{"name":"C2"}]},{"uuid":"603482e2-ddd0-57a6-a661-87cb76e0f4f5","type":"domain","category":"Network activity","to_ids":true,"value":"processing1.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"bbcd62bf-83e5-523a-8a70-d9117589e291","type":"url","category":"Network activity","to_ids":true,"value":"http://processing1.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"599ac7b0-9243-5549-862c-cd58b644d355","type":"domain","category":"Network activity","to_ids":true,"value":"restoreacc.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"d37edd69-8ec1-594f-916f-6c737b9fd860","type":"url","category":"Network activity","to_ids":true,"value":"http://restoreacc.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"b63f980a-0c37-522d-b167-56fb09505322","type":"domain","category":"Network activity","to_ids":true,"value":"secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"f628bf65-6697-5a1b-87b2-f920c9ce44ba","type":"url","category":"Network activity","to_ids":true,"value":"http://secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"fbd28445-4899-5ab2-a7f3-e298e43ebed8","type":"domain","category":"Network activity","to_ids":true,"value":"paypal.com.secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"a6efe62f-b9ea-5938-9a0b-5b0483826af0","type":"url","category":"Network activity","to_ids":true,"value":"http://paypal.com.secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"2709703b-add2-55ef-a839-c167effd12a4","type":"domain","category":"Network activity","to_ids":true,"value":"cybersecmaterial.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"c443d5e1-5a4c-5197-87a3-3002b676b0d8","type":"url","category":"Network activity","to_ids":true,"value":"http://cybersecmaterial.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"32a0a3aa-9769-542c-90bd-a0fb0b5ee2a3","type":"domain","category":"Network activity","to_ids":true,"value":"paypal.secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"d996c7ce-9f7f-5cb5-8d94-d901d5b7a61a","type":"url","category":"Network activity","to_ids":true,"value":"http://paypal.secureupdate.us","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"f1e4d0fe-2357-5675-b1c7-a1eb1398c02c","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunity.com/profiles/76561199878714104/","comment":"https://x.com/skocherhan/status/1964796457674047676","timestamp":"1757278954","distribution":"5"},{"uuid":"16812ff5-21be-5022-97f4-d26f8d60afc7","type":"url","category":"Network activity","to_ids":true,"value":"http://steamcommunity.com/profiles/76561199884432485","comment":"https://x.com/skocherhan/status/1964801156561154048","timestamp":"1757280074","distribution":"5"},{"uuid":"22b8120d-e63a-5b2c-ae78-229b9bb3b865","type":"url","category":"Network activity","to_ids":true,"value":"http://5.75.222.190","comment":"https://x.com/skocherhan/status/1964801156561154048","timestamp":"1757280074","distribution":"5"},{"uuid":"806dc925-d373-5408-8647-3c06a3f57a0f","type":"md5","category":"Payload delivery","to_ids":true,"value":"68e72fba3a0a2ef45d7a05eda4545224","comment":"https://x.com/skocherhan/status/1964801156561154048","timestamp":"1757280074","distribution":"5"},{"uuid":"40f47f21-7252-566b-9781-088845abecf3","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/gen00b","comment":"https://x.com/skocherhan/status/1964802115618103757","timestamp":"1757280303","distribution":"5"},{"uuid":"5f9dd305-881b-5820-9066-e74f10c11003","type":"domain","category":"Network activity","to_ids":true,"value":"load.granivit.hu","comment":"https://x.com/skocherhan/status/1964802115618103757","timestamp":"1757280303","distribution":"5"},{"uuid":"e615afef-981d-50f3-9fbb-a79b6eae04ca","type":"url","category":"Network activity","to_ids":true,"value":"http://load.granivit.hu","comment":"https://x.com/skocherhan/status/1964802115618103757","timestamp":"1757280303","distribution":"5"},{"uuid":"e0846960-48ea-5ec6-ace8-2282b127cb06","type":"domain","category":"Network activity","to_ids":true,"value":"resolverauthpanel.web.app","comment":"https://x.com/urldna_bot/status/1964810955625283938","timestamp":"1757282410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cf40fb52-8c59-52ac-896f-6b88a396c1ad","type":"url","category":"Network activity","to_ids":true,"value":"https://resolverauthpanel.web.app","comment":"https://x.com/urldna_bot/status/1964810955625283938","timestamp":"1757282410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5f8bc0a7-b8a7-5e72-86a7-fa0433114c50","type":"domain","category":"Network activity","to_ids":true,"value":"679587.com","comment":"https://x.com/ir0n_fe/status/1964824675655278855","timestamp":"1757285682","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3970f1df-3d79-5697-81e9-e98fb5522204","type":"url","category":"Network activity","to_ids":true,"value":"https://679587.com","comment":"https://x.com/ir0n_fe/status/1964824675655278855","timestamp":"1757285682","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4daf9d8-0fae-540b-9d5e-c7edee698dfb","type":"domain","category":"Network activity","to_ids":true,"value":"triptality.erioydo.cn","comment":"https://x.com/masaomi346/status/1964830011728572635","timestamp":"1757286954","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9172d7de-f302-524e-ad31-cba78646a234","type":"url","category":"Network activity","to_ids":true,"value":"https://triptality.erioydo.cn/authuo/cgiarlonidlogin/","comment":"https://x.com/masaomi346/status/1964830011728572635","timestamp":"1757286954","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6a20e2ba-be7f-58d7-9e70-0a5f454808e1","type":"domain","category":"Network activity","to_ids":true,"value":"p307a1.webwave.dev","comment":"https://x.com/urldna_bot/status/1964841140961624177","timestamp":"1757289607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"41729cda-9192-5f1b-abe8-dd871de0a9a9","type":"url","category":"Network activity","to_ids":true,"value":"https://p307a1.webwave.dev","comment":"https://x.com/urldna_bot/status/1964841140961624177","timestamp":"1757289607","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e39a0174-e957-5eae-9493-af23de571db5","type":"domain","category":"Network activity","to_ids":true,"value":"knowkeren.xyz","comment":"https://x.com/SarlackLab/status/1964841192245375453","timestamp":"1757289619","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"5913f406-89a5-5a0a-97ec-108e3e69ca8e","type":"url","category":"Network activity","to_ids":true,"value":"http://knowkeren.xyz","comment":"https://x.com/SarlackLab/status/1964841192245375453","timestamp":"1757289619","distribution":"5","Tag":[{"name":"C2"},{"name":"Lokibot"}]},{"uuid":"23e4f5ba-d82b-5a74-9c08-02ff3124719e","type":"domain","category":"Network activity","to_ids":true,"value":"mysitecentrum.weebly.com","comment":"https://x.com/urldna_bot/status/1964871335538049097","timestamp":"1757296806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bad3b5cb-4cad-52b3-9572-64bc6f1b6827","type":"url","category":"Network activity","to_ids":true,"value":"https://mysitecentrum.weebly.com","comment":"https://x.com/urldna_bot/status/1964871335538049097","timestamp":"1757296806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"75c371a9-9b35-583e-bebd-b7dabfc20d89","type":"domain","category":"Network activity","to_ids":true,"value":"hasanahtcl.com","comment":"https://x.com/urldna_bot/status/1964901537928372432","timestamp":"1757304007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aa6b050e-eafe-5aff-926f-a29c9a46169b","type":"url","category":"Network activity","to_ids":true,"value":"https://hasanahtcl.com","comment":"https://x.com/urldna_bot/status/1964901537928372432","timestamp":"1757304007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7c8d7fe9-1154-59df-ad39-7f942b10a674","type":"url","category":"Network activity","to_ids":true,"value":"https://gitlab.com/3t-new","comment":"https://x.com/suyog41/status/1964918036433076522","timestamp":"1757307940","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"4c864618-0de2-59cd-bc31-bf024d6b1a9f","type":"md5","category":"Payload delivery","to_ids":true,"value":"853705c1b3e982ce44538f1e3c0a441a","comment":"https://x.com/suyog41/status/1964918036433076522","timestamp":"1757307940","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"42a82d64-bf59-5034-a444-3375b41012f0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"b21a5a30f13904a128f4caa600eb55e044b2a121f0da847bffc33b68ca32acea","comment":"https://x.com/malwrhunterteam/status/1964930966071496899","timestamp":"1757311023","distribution":"5"},{"uuid":"a931a136-4f54-5431-8283-f45639d6103a","type":"domain","category":"Network activity","to_ids":true,"value":"bittvavo.com","comment":"https://x.com/urldna_bot/status/1964931753438560582","timestamp":"1757311211","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e0d07628-46fb-5500-af01-4dfcdb0c7f24","type":"url","category":"Network activity","to_ids":true,"value":"https://bittvavo.com/public/pages/?d=bitvavo&p=index","comment":"https://x.com/urldna_bot/status/1964931753438560582","timestamp":"1757311211","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"6d8cd69e-ba68-5a0e-8f3a-3ee174d544e9","type":"domain","category":"Network activity","to_ids":true,"value":"lofiufueyer.blog","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"7f018e14-7284-5161-bf00-463cfc517278","type":"url","category":"Network activity","to_ids":true,"value":"http://lofiufueyer.blog","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"810fa068-eeeb-5a90-9734-fd8452cffaeb","type":"domain","category":"Network activity","to_ids":true,"value":"github-desktop.com","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"554c562f-8226-568b-92b0-38b4bba9d0fd","type":"url","category":"Network activity","to_ids":true,"value":"http://github-desktop.com","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"103c4715-c428-5253-8c57-6fe589401c4e","type":"domain","category":"Network activity","to_ids":true,"value":"oqiwquwqey.xyz","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"c954293e-ee95-5913-b0ad-a8b709c1b89a","type":"url","category":"Network activity","to_ids":true,"value":"http://oqiwquwqey.xyz","comment":"https://x.com/500mk500/status/1964958184571130347","timestamp":"1757317513","distribution":"5"},{"uuid":"95bc6cf5-ff56-56d9-b7b2-8e13ff91ef8b","type":"domain","category":"Network activity","to_ids":true,"value":"loginswebmailstelstrarespaceacquire.weebly.com","comment":"https://x.com/urldna_bot/status/1964961951361962236","timestamp":"1757318411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b0e355e6-ccbd-5478-88e4-a0d5c9c73ad5","type":"url","category":"Network activity","to_ids":true,"value":"https://loginswebmailstelstrarespaceacquire.weebly.com","comment":"https://x.com/urldna_bot/status/1964961951361962236","timestamp":"1757318411","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"31bcb5d7-e439-5be2-a3ee-fc5654cba374","type":"domain","category":"Network activity","to_ids":true,"value":"news-metaverse.com","comment":"https://x.com/cryptohackrecov/status/1964962281856589898","timestamp":"1757318489","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"073684c8-5ebb-5c44-adda-6edfdd67c63c","type":"url","category":"Network activity","to_ids":true,"value":"http://news-metaverse.com","comment":"https://x.com/cryptohackrecov/status/1964962281856589898","timestamp":"1757318489","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"12415834-a4f8-5da7-9e20-4f9fedca84cb","type":"domain","category":"Network activity","to_ids":true,"value":"mad777.online","comment":"https://x.com/Alien_D_0/status/1964966462021664803","timestamp":"1757319486","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"69b28bd4-ed3f-5b28-917e-f4fb20f928b1","type":"url","category":"Network activity","to_ids":true,"value":"https://mad777.online","comment":"https://x.com/Alien_D_0/status/1964966462021664803","timestamp":"1757319486","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b366d850-2e8a-525b-a6f1-902c9af2ae15","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8458e7351be79746bb9e95fc59a8da74bdadbe398dcd93dea9d9adc69ccbccd7","comment":"https://x.com/skocherhan/status/1964970788441985111","timestamp":"1757320518","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"364ff0da-3540-544e-9705-3ee5156761ea","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c4a4ee1eabbd46e6a575c82ba8c5c08f293ac554179e965b04d7c4d2432d3691","comment":"https://x.com/skocherhan/status/1964970788441985111","timestamp":"1757320518","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d1cad0d9-904e-5147-abef-0c8407b8bd22","type":"url","category":"Network activity","to_ids":true,"value":"http://cryymd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7c2e2032-dc85-5fe1-96e1-bc91ae5e09e8","type":"domain","category":"Network activity","to_ids":true,"value":"renohhde.xin","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1a93f1cb-a919-50fb-8a4f-d78d150844eb","type":"url","category":"Network activity","to_ids":true,"value":"http://renohhde.xin","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"44627189-002c-56f0-869f-63af38a33374","type":"domain","category":"Network activity","to_ids":true,"value":"heartp.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"af6f1bfa-9c44-5d90-8d50-a100fbbf802e","type":"url","category":"Network activity","to_ids":true,"value":"http://heartp.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bff54ac7-aae7-58ea-864c-d0bc488d30a2","type":"url","category":"Network activity","to_ids":true,"value":"http://46.28.71.142","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2a187891-eaa7-594c-97ae-88172879f59e","type":"url","category":"Network activity","to_ids":true,"value":"http://stomrnd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5946d376-6083-5db3-8c91-8fd47f68ae41","type":"domain","category":"Network activity","to_ids":true,"value":"exodjhbn.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"20875232-514b-5ce9-9886-b2cfe5d5f938","type":"domain","category":"Network activity","to_ids":true,"value":"proqei.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b7900116-99ba-59d3-919d-a21442e32a57","type":"url","category":"Network activity","to_ids":true,"value":"http://exodjhbn.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3a63f7e5-40ba-5dd4-8cf5-97b17df75035","type":"url","category":"Network activity","to_ids":true,"value":"http://psalgd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"be028b4d-562c-5864-b25b-9bb4e56c84fd","type":"domain","category":"Network activity","to_ids":true,"value":"stomrnd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c0f8feb0-5129-5156-a26e-953c47412dbb","type":"domain","category":"Network activity","to_ids":true,"value":"thuyrxi.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8bea78cb-92b7-55a2-982e-f243537dcc6c","type":"url","category":"Network activity","to_ids":true,"value":"http://thuyrxi.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ab8241b2-0def-52f9-a504-a18f998ec671","type":"url","category":"Network activity","to_ids":true,"value":"http://proqei.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"187e4d15-5947-5722-84a2-352dcac1720e","type":"domain","category":"Network activity","to_ids":true,"value":"psalgd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b4c41655-716c-558b-b6f4-bbe31aa0c0f6","type":"domain","category":"Network activity","to_ids":true,"value":"cryymd.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"744e8ef9-c23f-5931-8d2f-1e76fd953c25","type":"url","category":"Network activity","to_ids":true,"value":"http://sbexv.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f2f91b55-f9ae-5a46-b2f5-0eac139a6428","type":"url","category":"Network activity","to_ids":true,"value":"http://squafu.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"08b9322e-afad-5212-a192-c9948c858785","type":"domain","category":"Network activity","to_ids":true,"value":"depjjda.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4aebf4b0-906a-599a-a7f8-b987f6ad91b3","type":"url","category":"Network activity","to_ids":true,"value":"http://depjjda.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"524e6652-fae9-5b77-a9c1-5820cfbc40f2","type":"domain","category":"Network activity","to_ids":true,"value":"liqz.lat","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b901a76e-a9f8-50f3-8a68-3c81ddaf25b3","type":"url","category":"Network activity","to_ids":true,"value":"http://liqz.lat","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b66762f2-6d14-5759-a6f8-c8b3cac32342","type":"domain","category":"Network activity","to_ids":true,"value":"sbexv.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"139a2806-8a25-542e-8d19-f650102557fb","type":"domain","category":"Network activity","to_ids":true,"value":"shaypy.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2a19cbdb-b968-541f-8a7e-d04041360fce","type":"domain","category":"Network activity","to_ids":true,"value":"naturuk.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"df23f1d4-8abe-547e-bb0f-430a3eb5a1e8","type":"domain","category":"Network activity","to_ids":true,"value":"dicyth.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dfde369b-60db-5d0d-8aad-784f3d430a15","type":"url","category":"Network activity","to_ids":true,"value":"http://shaypy.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d611a17a-0813-5983-9630-e2b9be193023","type":"domain","category":"Network activity","to_ids":true,"value":"privypbomg.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a3f55309-9114-509e-8dc1-cb991e9d4717","type":"url","category":"Network activity","to_ids":true,"value":"http://dicyth.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2dbb132a-b9f3-5efe-a6f5-110f0298340b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.28.71.142","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"60fc47ad-6a1a-54c0-b1c0-de5441c888f8","type":"url","category":"Network activity","to_ids":true,"value":"http://naturuk.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b593bd2c-e441-5186-ae9c-0d9da8388163","type":"url","category":"Network activity","to_ids":true,"value":"http://privypbomg.top","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4cea0c1b-edb5-5ca8-9910-d4cb8d73ddc1","type":"domain","category":"Network activity","to_ids":true,"value":"squafu.xyz","comment":"https://x.com/skocherhan/status/1964972672334410112","timestamp":"1757320967","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"fe79b6bc-3dad-5578-b33c-8aabface362e","type":"domain","category":"Network activity","to_ids":true,"value":"hone32.work.gd:3601","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"24358b91-6572-5828-87a7-0338dd9b7c71","type":"domain","category":"Network activity","to_ids":true,"value":"hone32.work.gd:3602","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"b262db22-340a-597e-8594-0960e0e469cc","type":"url","category":"Network activity","to_ids":true,"value":"http://hone32.work.gd:3602","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"c35b650d-13b3-5954-aa82-4478c1f31238","type":"url","category":"Network activity","to_ids":true,"value":"http://hone32.work.gd:3601","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"fcbf7496-db81-5787-8157-1e70097a3c35","type":"url","category":"Network activity","to_ids":true,"value":"http://mora1987.work.gd:3601","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"039d4560-147d-59a2-a40e-6afdf67a62ee","type":"domain","category":"Network activity","to_ids":true,"value":"mora1987.work.gd:3602","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"c25bcc96-e1cd-541c-8499-4d6d9f78c80e","type":"domain","category":"Network activity","to_ids":true,"value":"mora1987.work.gd:3601","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"cc86adce-6555-5b81-9296-dd32607c4bb3","type":"url","category":"Network activity","to_ids":true,"value":"http://mora1987.work.gd:3602","comment":"https://x.com/smica83/status/1964972745588088890","timestamp":"1757320984","distribution":"5"},{"uuid":"cbc72e25-2d24-5544-bf57-b4acc0665f57","type":"domain","category":"Network activity","to_ids":true,"value":"polgen.linkpc.net","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"0e8fc990-e106-5c0e-aa6e-198b5d4eb6b3","type":"url","category":"Network activity","to_ids":true,"value":"http://45.74.8.89","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"e60d5768-8ed1-54c3-8d80-d10af517ff6c","type":"domain","category":"Network activity","to_ids":true,"value":"jaber.work.gd","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"aa57dea0-17d9-52db-9ba7-bc485d85c61b","type":"domain","category":"Network activity","to_ids":true,"value":"mierwos.loseyourip.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"79b0f402-5805-5c3c-be0d-1c2887411e65","type":"domain","category":"Network activity","to_ids":true,"value":"morad.mywire.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"8dad6d88-5810-51db-93cd-d894403a4960","type":"url","category":"Network activity","to_ids":true,"value":"http://jaber.work.gd","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"e90de5fd-a30d-5f0d-a75d-f29d57311edc","type":"url","category":"Network activity","to_ids":true,"value":"http://mierwos.loseyourip.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"c9ef58bb-1a0c-5abf-9756-f9a9f2a1cfc3","type":"domain","category":"Network activity","to_ids":true,"value":"amyer.mywire.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"1e6ab4bf-a670-5dbe-822d-b19c3ac5eb1a","type":"url","category":"Network activity","to_ids":true,"value":"http://amyer.mywire.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"794f39a6-89b1-5671-8a95-62a99cf3cda0","type":"url","category":"Network activity","to_ids":true,"value":"http://polgen.linkpc.net","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"405ccdc8-e7fa-50e0-8922-6708970606f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.8.89","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"2a5cdcc2-8d24-5345-a69c-ccdd4335b5e1","type":"domain","category":"Network activity","to_ids":true,"value":"marten1.loseyourip.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"769db3f3-6b6d-5af0-afe4-c011120e0a3d","type":"url","category":"Network activity","to_ids":true,"value":"http://screenconecctserv.giize.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"3fb0de9f-cd4b-5427-8d36-5d0097bf1f78","type":"domain","category":"Network activity","to_ids":true,"value":"minto1.publicvm.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"5fad19e8-3f90-5d97-bfea-f11495552ada","type":"domain","category":"Network activity","to_ids":true,"value":"marten1.freeddns.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"0a6a7ea3-4ddd-50c4-9cc0-310d53d8d9f3","type":"url","category":"Network activity","to_ids":true,"value":"http://marten1.freeddns.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"36a54492-caf9-5c46-aee8-baccb8fe0479","type":"url","category":"Network activity","to_ids":true,"value":"http://marten1.loseyourip.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"cc277559-5326-5436-893e-ff00752fbc6d","type":"domain","category":"Network activity","to_ids":true,"value":"screenconecctserv.giize.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"aecb0064-9d70-5505-b4ce-536e3cb3ecd9","type":"url","category":"Network activity","to_ids":true,"value":"http://morad.mywire.org","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"2328d57f-3c1c-5439-a6c7-e57fd7580f51","type":"url","category":"Network activity","to_ids":true,"value":"http://minto1.publicvm.com","comment":"https://x.com/skocherhan/status/1964974507409453472","timestamp":"1757321404","distribution":"5"},{"uuid":"ebf6d2e6-fe24-583a-86ab-69e795b9f791","type":"domain","category":"Network activity","to_ids":true,"value":"ghost-tsushima.com","comment":"https://x.com/skocherhan/status/1964977311377453373","timestamp":"1757322073","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"b5e95a7c-d17e-5154-9df3-b61f51e13854","type":"url","category":"Network activity","to_ids":true,"value":"http://ghost-tsushima.com","comment":"https://x.com/skocherhan/status/1964977311377453373","timestamp":"1757322073","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"8134cb8b-f180-5d3a-bf6f-f9b712e120e1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.218.76.102:790","comment":"https://x.com/skocherhan/status/1964978489892966665","timestamp":"1757322354","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"b0bd4b08-923b-57c8-a845-550e0e794c86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.218.76.102","comment":"https://x.com/skocherhan/status/1964978489892966665","timestamp":"1757322354","distribution":"5","Tag":[{"name":"NetSupport"}]},{"uuid":"6f21cb9f-cc9e-5750-a68a-d0e18964f442","type":"domain","category":"Network activity","to_ids":true,"value":"consnbx.su","comment":"https://x.com/K_N1kolenko/status/1964980481503769078","timestamp":"1757322829","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"cbc3fe04-e4f9-5436-8b6b-653cac05b496","type":"url","category":"Network activity","to_ids":true,"value":"http://consnbx.su/sawo","comment":"https://x.com/K_N1kolenko/status/1964980481503769078","timestamp":"1757322829","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"a084b999-ed7b-5908-a29a-353bd162717b","type":"domain","category":"Network activity","to_ids":true,"value":"vpsdns.casacam.net","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"acdce9ca-597b-529a-9a2e-dade2632d0bd","type":"url","category":"Network activity","to_ids":true,"value":"http://vpsdns.casacam.net","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"7ccffc2b-1398-5a07-96e0-57ef8bb8ab09","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:6606","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"b3af079e-bc12-544e-8cd4-11760c856713","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:7707","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"734f2692-5901-5a1c-91f2-468690814138","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:1020","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"dec09e64-91eb-5911-b7b1-8af606082b7d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:302","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"35a43c25-f7a0-5f74-8569-f41f30720762","type":"md5","category":"Payload delivery","to_ids":true,"value":"18a80f9879b308b3343d3a906dbcad01","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"7c635868-4d3e-5752-8cea-0e5fbecf1533","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:1177","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"e37c9bf0-8442-55f8-bb4c-9db79029b463","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:8808","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"92d91e60-bf66-5b79-bed2-50836adb76fa","type":"url","category":"Network activity","to_ids":true,"value":"http://172.81.60.199:301","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"e7cda0a0-692f-5e37-a4e3-10aab72e3f6f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.81.60.199","comment":"https://x.com/skocherhan/status/1964983443999301881","timestamp":"1757323535","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"243b7e1d-5489-557b-8b91-93b47fc15100","type":"domain","category":"Network activity","to_ids":true,"value":"starshipcrown.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2da1149c-af9a-5b6c-9340-b179823cc1b7","type":"url","category":"Network activity","to_ids":true,"value":"http://87.120.126.216","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c3840db7-6358-5513-beed-16b7d6db879f","type":"domain","category":"Network activity","to_ids":true,"value":"americovespucci.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e8f58e88-6381-5691-a7cd-87502107cc17","type":"domain","category":"Network activity","to_ids":true,"value":"libertyquality.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"97084d3f-29fe-5a04-a783-b62edee70b86","type":"url","category":"Network activity","to_ids":true,"value":"http://libertyquality.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b88bf779-5370-5a5f-84d0-7481d8bd3ac9","type":"domain","category":"Network activity","to_ids":true,"value":"trainisshit.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6a537864-f130-572a-9006-611a9697ec7e","type":"url","category":"Network activity","to_ids":true,"value":"http://trainisshit.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a970459d-a225-5ea6-91c7-ab6ad5255dc5","type":"domain","category":"Network activity","to_ids":true,"value":"chimerasound.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8549e088-8c16-5a45-b947-6dd74e40e9fb","type":"url","category":"Network activity","to_ids":true,"value":"http://chimerasound.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2f5f2346-7c96-5305-a98e-5c3214e768ec","type":"url","category":"Network activity","to_ids":true,"value":"http://starshipcrown.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4e52d399-1dc7-5e94-b899-7b61e2ba4ad1","type":"url","category":"Network activity","to_ids":true,"value":"http://suspendedclash.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d9af85bd-068e-5844-8f13-049e8cc36778","type":"domain","category":"Network activity","to_ids":true,"value":"suspendedclash.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7ddae387-665c-591c-8f87-b826a9ab154f","type":"url","category":"Network activity","to_ids":true,"value":"http://americovespucci.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6b398e77-b08a-5499-bd9c-e44cad09d7be","type":"domain","category":"Network activity","to_ids":true,"value":"closeddoors.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d3062b80-637b-5583-a028-564ac61cb262","type":"url","category":"Network activity","to_ids":true,"value":"http://wseveneleven.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0db8b3c8-6f30-514e-a421-b1c6efdd9edf","type":"domain","category":"Network activity","to_ids":true,"value":"flyinglotuss.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c35cf8e9-1577-58e9-a8fa-43d719edff9a","type":"url","category":"Network activity","to_ids":true,"value":"http://flyinglotuss.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"538bfd95-87c0-562c-8147-76dbd4bbf217","type":"domain","category":"Network activity","to_ids":true,"value":"openedhouses.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"002fc60d-ced1-5ae0-8551-3786c2cf62d4","type":"url","category":"Network activity","to_ids":true,"value":"http://closeddoors.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"53e9b559-a7c7-5af7-b681-f7b1332297b5","type":"url","category":"Network activity","to_ids":true,"value":"http://openedhouses.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"19b213ec-0953-5529-94c3-736318d6911d","type":"domain","category":"Network activity","to_ids":true,"value":"weathersouth.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b0564a9c-e8f2-56bd-b879-0e1ebee05064","type":"url","category":"Network activity","to_ids":true,"value":"http://weathersouth.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3e9da319-f75c-522c-8722-9628d140bbe2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.120.126.216","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0972b3d4-9d82-5689-b7dc-98e7a59547ae","type":"domain","category":"Network activity","to_ids":true,"value":"wseveneleven.shop","comment":"https://x.com/skocherhan/status/1964984916032036909","timestamp":"1757323886","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"842bee83-2bcf-5d8e-abb8-37daf2eea97b","type":"domain","category":"Network activity","to_ids":true,"value":"disloef.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"309281d5-af17-54eb-9561-98b8b3bc10ae","type":"url","category":"Network activity","to_ids":true,"value":"http://backfvb.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c759c010-4447-5bb5-a990-82ecca13b304","type":"domain","category":"Network activity","to_ids":true,"value":"genuysf.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dcda7e33-1e80-53fa-8ac3-f35cad3ac311","type":"domain","category":"Network activity","to_ids":true,"value":"dogcded.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"25a7909b-0879-57e1-b3ab-f85193a97c58","type":"url","category":"Network activity","to_ids":true,"value":"http://dogcded.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1515a0bc-a738-5a80-986c-12bc5592ad78","type":"url","category":"Network activity","to_ids":true,"value":"http://genuysf.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3da52e45-f071-5266-82fd-83eb988aa386","type":"domain","category":"Network activity","to_ids":true,"value":"backfvb.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5c5b8bc7-6034-5187-80e2-87be8587ddc8","type":"domain","category":"Network activity","to_ids":true,"value":"polypef.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1f177609-74b1-5c13-99ac-83b6c65fcb5b","type":"url","category":"Network activity","to_ids":true,"value":"http://polypef.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"47b44674-970e-5474-bc66-73bbab2faab4","type":"url","category":"Network activity","to_ids":true,"value":"http://disloef.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"17d230bc-6b2e-5281-94a6-01e4550b9727","type":"url","category":"Network activity","to_ids":true,"value":"http://134.209.165.152","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e5b2e91b-7dbe-5ea2-ab9a-7d46f9737691","type":"ip-dst","category":"Network activity","to_ids":true,"value":"134.209.165.152","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9a0840a3-a519-5596-a6e4-aff2158aba37","type":"url","category":"Network activity","to_ids":true,"value":"http://keoghvg.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"8e585774-a3e5-5493-bc07-8cab3c3a05cd","type":"domain","category":"Network activity","to_ids":true,"value":"ideofvb.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"fdd4579c-d358-58bf-924e-e364098d190e","type":"url","category":"Network activity","to_ids":true,"value":"http://inoffek.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9a0d2133-66c8-50f3-abb1-9e964c9761b1","type":"url","category":"Network activity","to_ids":true,"value":"http://kennetk.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5f0b9e7a-5d6b-5c61-9752-e02faf096be9","type":"domain","category":"Network activity","to_ids":true,"value":"keoghvg.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c076ecf9-a848-56c2-a79a-f6436dc6f6af","type":"domain","category":"Network activity","to_ids":true,"value":"kennetk.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"16c0c9af-3af8-5314-a622-0bedb0285550","type":"domain","category":"Network activity","to_ids":true,"value":"lapsqyq.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f5ab10c2-0ad5-5c2e-9b07-204c0c4c0c21","type":"url","category":"Network activity","to_ids":true,"value":"http://lapsqyq.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"58de3803-1ced-5340-855c-e633c0e4dc17","type":"domain","category":"Network activity","to_ids":true,"value":"inoffek.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0735a2fe-f93c-53df-ac23-17b68abde356","type":"url","category":"Network activity","to_ids":true,"value":"http://ideofvb.bet","comment":"https://x.com/skocherhan/status/1964985662039302480","timestamp":"1757324064","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5bd9b28e-1229-5559-82ea-f004f2530914","type":"url","category":"Network activity","to_ids":true,"value":"http://voando.in","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d6b1786b-7e67-528e-9c1e-ba2afed046af","type":"domain","category":"Network activity","to_ids":true,"value":"kamenduk.com","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7e28bdbe-40af-56d2-9304-960bd056e6fe","type":"url","category":"Network activity","to_ids":true,"value":"http://kamenduk.com","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b01ca2b3-88de-5267-9fcb-7f1b0351c291","type":"domain","category":"Network activity","to_ids":true,"value":"voando.in","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"71fb4205-b06b-50e8-930a-08ff2fd22bc4","type":"domain","category":"Network activity","to_ids":true,"value":"dalocoz.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a6f73fab-8ba3-5725-b48c-00c14cb6b28a","type":"url","category":"Network activity","to_ids":true,"value":"http://dalocoz.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a667e0c4-da09-59e8-b13b-1caff69962a3","type":"domain","category":"Network activity","to_ids":true,"value":"mandmqq.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e8aafb87-c2dd-582d-9624-d9ea68e9d9ff","type":"url","category":"Network activity","to_ids":true,"value":"http://mandmqq.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"0dbaa964-cabd-54d2-ab5e-36ead1293148","type":"url","category":"Network activity","to_ids":true,"value":"http://polytgh.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"923ba850-e974-5b62-9160-2e09c47aa057","type":"url","category":"Network activity","to_ids":true,"value":"http://genulop.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"71b716e7-f000-5eec-bb32-4ecc2e6b9920","type":"domain","category":"Network activity","to_ids":true,"value":"genulop.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"04627508-d3a3-52c7-961c-7bf3e64efa9f","type":"url","category":"Network activity","to_ids":true,"value":"http://radialz.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"9baaf88d-c2b9-5f8e-acb8-12de254e4901","type":"url","category":"Network activity","to_ids":true,"value":"http://pyscalp.com","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"14cf2b1f-3941-5472-ad40-a9a88509d559","type":"url","category":"Network activity","to_ids":true,"value":"http://193.24.123.239","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"09591fbf-8772-5151-822d-010a2da4a4a2","type":"domain","category":"Network activity","to_ids":true,"value":"pyscalp.com","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dd475325-39a4-5530-a4f7-1c314f75502f","type":"domain","category":"Network activity","to_ids":true,"value":"polytgh.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"71f4d3f7-b275-5f61-889e-2292ce6f4c02","type":"domain","category":"Network activity","to_ids":true,"value":"radialz.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c5c6fb0d-026a-512e-9610-17ccdeb8fdbb","type":"url","category":"Network activity","to_ids":true,"value":"http://takepdq.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bfea2026-f6e1-520b-810d-c0ad9d85ed40","type":"domain","category":"Network activity","to_ids":true,"value":"lactoxn.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"607f2a06-bc3f-58bf-8345-bccb2fb622a8","type":"url","category":"Network activity","to_ids":true,"value":"http://trimoeb.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"aa4327d2-6a07-5bcd-8216-e115e3882c82","type":"url","category":"Network activity","to_ids":true,"value":"http://scepxmo.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ecd8483c-5c85-5d00-a5f8-762b5b1914d4","type":"url","category":"Network activity","to_ids":true,"value":"http://lactoxn.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b15a3be6-ce52-54c9-bd69-7d290890b542","type":"domain","category":"Network activity","to_ids":true,"value":"scepxmo.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b4b45a63-1fe2-502f-ab6a-cd9b54acd965","type":"domain","category":"Network activity","to_ids":true,"value":"explodd.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b5b6c4aa-b1af-5f22-b6cc-3febeccde0d9","type":"url","category":"Network activity","to_ids":true,"value":"http://mugbool.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c95fc6fa-3da0-5bb5-ad67-9386a5e5c912","type":"url","category":"Network activity","to_ids":true,"value":"http://explodd.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"61fe09fb-4b84-5711-9280-37c79585e94a","type":"url","category":"Network activity","to_ids":true,"value":"http://subtehi.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"710dd45c-abb3-5150-a1d9-5eb0631b7d99","type":"url","category":"Network activity","to_ids":true,"value":"http://innervn.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"199ad2f6-9644-5c34-9784-ea9b0879fe84","type":"domain","category":"Network activity","to_ids":true,"value":"mugbool.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f3688308-2bca-542e-ae07-aefe38e0ca86","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.24.123.239","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"378cacea-01db-5aec-b63d-afc2f2e45f5f","type":"domain","category":"Network activity","to_ids":true,"value":"innervn.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"17707eaa-266c-59de-9663-df9d8afce397","type":"domain","category":"Network activity","to_ids":true,"value":"trimoeb.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f70ba8f4-22cb-5fb4-9ebb-5789bb8b06dd","type":"domain","category":"Network activity","to_ids":true,"value":"subtehi.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"57001481-708e-5d6c-8e27-46e541a2ae78","type":"domain","category":"Network activity","to_ids":true,"value":"takepdq.bet","comment":"https://x.com/skocherhan/status/1964986718630588492","timestamp":"1757324316","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d29a3ae0-08f9-5339-9216-a53d74d59719","type":"url","category":"Network activity","to_ids":true,"value":"http://paypal-securecheck-update.com","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7b5b5490-181b-5f53-8a74-56a1761ea0bd","type":"domain","category":"Network activity","to_ids":true,"value":"paypal-securecheck-update.com","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f2cdf90d-5a7a-5131-9a0c-9a2cb99b4634","type":"domain","category":"Network activity","to_ids":true,"value":"watch-youtube.link","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"dd3b9cbb-4460-5662-bfef-43181551ee7e","type":"domain","category":"Network activity","to_ids":true,"value":"union-ec.com","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d39c7e1a-2088-5235-85f6-da8664f41843","type":"url","category":"Network activity","to_ids":true,"value":"http://watch-youtube.link","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ae67be75-2c0e-583b-957e-5dc6d056bc13","type":"url","category":"Network activity","to_ids":true,"value":"http://union-ec.com","comment":"https://x.com/c9lab_soc/status/1964991650746528000","timestamp":"1757325491","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f590c12f-0839-5c89-8ce9-334c52cb17be","type":"domain","category":"Network activity","to_ids":true,"value":"tryjhytyjctfhdrxtse46ysxfgjxfyjfyjxdthtrterrthfhhhfff.weebly.com","comment":"https://x.com/urldna_bot/status/1964992139885977922","timestamp":"1757325608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"98b461b3-bd4e-597a-8c73-167a439345eb","type":"url","category":"Network activity","to_ids":true,"value":"https://tryjhytyjctfhdrxtse46ysxfgjxfyjfyjxdthtrterrthfhhhfff.weebly.com","comment":"https://x.com/urldna_bot/status/1964992139885977922","timestamp":"1757325608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ff4f36c6-07ef-50ee-a76d-8df15ad309aa","type":"domain","category":"Network activity","to_ids":true,"value":"facilin.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7f7ecc8c-f381-5d4c-a0bb-c10ba85d04fe","type":"url","category":"Network activity","to_ids":true,"value":"http://facilin.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3ca44daa-7837-5520-b983-02a150b49a2a","type":"domain","category":"Network activity","to_ids":true,"value":"mindhlo.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e41cede5-806b-54a6-99af-23312d166795","type":"url","category":"Network activity","to_ids":true,"value":"http://mindhlo.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c066cbc4-1f21-5610-a215-ddfd9368953c","type":"domain","category":"Network activity","to_ids":true,"value":"anticlk.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ac047273-c6ee-55cf-adc8-120e4066459c","type":"domain","category":"Network activity","to_ids":true,"value":"damagex.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"d6bbd338-dc59-598a-9698-6bdf229c6560","type":"url","category":"Network activity","to_ids":true,"value":"http://enthrqe.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2a749c40-5148-53bf-ac6b-1bda357fbacb","type":"domain","category":"Network activity","to_ids":true,"value":"enthrqe.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"da31fb75-1931-58fc-ad94-ef1e1d04f9a7","type":"domain","category":"Network activity","to_ids":true,"value":"orienlc.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"57a83969-31b8-53a2-bc7b-71d2123b37e3","type":"url","category":"Network activity","to_ids":true,"value":"http://anticlk.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7b345ee5-e6cc-5e52-9f8a-d6ff71827a23","type":"url","category":"Network activity","to_ids":true,"value":"http://orienlc.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"515567f8-6b05-5865-be1f-a5e473c19a41","type":"url","category":"Network activity","to_ids":true,"value":"http://curdlep.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"5f577c11-df99-5348-8d92-1f00501ca8d4","type":"url","category":"Network activity","to_ids":true,"value":"http://64.227.2.250","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f7586346-9922-5183-8bdb-d8d5a381a4f5","type":"url","category":"Network activity","to_ids":true,"value":"http://damagex.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"e21edcf0-b51a-578c-96e8-7d3a1c4306e2","type":"domain","category":"Network activity","to_ids":true,"value":"curdlep.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1fe6f5c2-dbfb-570a-878f-e4e3d48d06e0","type":"domain","category":"Network activity","to_ids":true,"value":"sculcib.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6499aa90-9407-5aef-b052-c6ac3c2b4c5e","type":"url","category":"Network activity","to_ids":true,"value":"http://stupide.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1e7369b4-82bf-540b-9ab4-3b2e7e3a129d","type":"domain","category":"Network activity","to_ids":true,"value":"stupide.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"81e2abae-85e3-5f8e-af33-b3d3f64a7cd0","type":"url","category":"Network activity","to_ids":true,"value":"http://sculcib.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"23df13c1-d1cf-5c5f-be01-e373a9573499","type":"domain","category":"Network activity","to_ids":true,"value":"capitam.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"107340c4-afe4-5b37-97a7-bf7de15485ae","type":"url","category":"Network activity","to_ids":true,"value":"http://batonra.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"ca11fe9d-ed6e-5870-88b0-dd4f13452343","type":"url","category":"Network activity","to_ids":true,"value":"http://capitam.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3164750b-1908-5aa3-aaa5-b3f04eae33e3","type":"domain","category":"Network activity","to_ids":true,"value":"burkeax.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1e379c5f-2b43-5722-afe5-f8f09fca329f","type":"url","category":"Network activity","to_ids":true,"value":"http://ravishl.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"71780072-ab3c-5fb6-abbb-7da614263774","type":"url","category":"Network activity","to_ids":true,"value":"http://burkeax.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"bae48722-33a9-5b5d-944c-960af301ea12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.227.2.250","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"20bb6195-4c77-54c6-89c1-f8e876630cae","type":"domain","category":"Network activity","to_ids":true,"value":"batonra.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4b991249-9621-5cdc-ba05-6ddda77101fa","type":"domain","category":"Network activity","to_ids":true,"value":"bluejwh.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"eb655e97-9e17-56c8-81ca-f15cd0c0efb1","type":"domain","category":"Network activity","to_ids":true,"value":"ravishl.qpon","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"17b8d6b9-23e1-5647-8436-51079d3eb29e","type":"url","category":"Network activity","to_ids":true,"value":"http://bluejwh.bet","comment":"https://x.com/skocherhan/status/1964992828574142832","timestamp":"1757325772","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"f6fe14ea-6823-5caf-aa46-2446dc2d90c4","type":"domain","category":"Network activity","to_ids":true,"value":"benibekeandco.com","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"607b5e2d-4d25-5fbc-8561-316fd5d0f64f","type":"url","category":"Network activity","to_ids":true,"value":"https://www.kmet-vn.com","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0e53296-e052-5b92-b871-7e4f3aa601cc","type":"url","category":"Network activity","to_ids":true,"value":"https://www.kmet-vn.com/#su@gmail.com","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"32f2a64d-ccda-5b50-932b-b0f700761ad9","type":"domain","category":"Network activity","to_ids":true,"value":"kmet-vn.com","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f3af3009-e414-57dc-b7a1-cbe49ee4dbb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.185.146.13","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3e7aaa13-f8dd-50f9-9aa0-376ae265bd27","type":"url","category":"Network activity","to_ids":true,"value":"https://benibekeandco.com/wp-content/themes/xzx/","comment":"https://x.com/yvesago/status/1964994189751710189","timestamp":"1757326097","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3df0af96-aa91-5242-8c67-4ff1441d56b3","type":"url","category":"Network activity","to_ids":true,"value":"http://averiryvx.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a8218528-b60a-50fd-9c53-b55cc0745930","type":"url","category":"Network activity","to_ids":true,"value":"http://diadtuky.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"dd71bb7b-2081-54fb-926f-f4b8179c0cc8","type":"domain","category":"Network activity","to_ids":true,"value":"diadtuky.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"045d23d5-f9cb-576e-9613-94cfdd408a53","type":"domain","category":"Network activity","to_ids":true,"value":"digitbasket.com","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"4b852a68-3194-51a2-aa3d-2dd70fabaebd","type":"url","category":"Network activity","to_ids":true,"value":"http://phenkce.top","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"3c106f72-9ce4-532d-885d-8551e0d17c0e","type":"domain","category":"Network activity","to_ids":true,"value":"prebwle.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"73c0a272-a2fe-5e25-9252-1bf4819b34a9","type":"url","category":"Network activity","to_ids":true,"value":"http://prebwle.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"b34234c9-6af7-54cf-aa51-b8601fbcf235","type":"domain","category":"Network activity","to_ids":true,"value":"todoexy.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"88eb9e08-4bbc-5fa2-affa-d8d06f04292a","type":"url","category":"Network activity","to_ids":true,"value":"http://todoexy.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"67dcbed4-f625-5fdc-bba8-6736501e9758","type":"domain","category":"Network activity","to_ids":true,"value":"averiryvx.su","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"7f317f2d-41cc-560f-9ddd-00d785344733","type":"url","category":"Network activity","to_ids":true,"value":"http://129.226.128.168","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"86ea8298-b6ba-5533-b4f3-0b185ee50264","type":"url","category":"Network activity","to_ids":true,"value":"http://unctyou.shop","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a92416c7-9d6f-53ea-ab14-bc14fcba814d","type":"url","category":"Network activity","to_ids":true,"value":"http://lzh.fr","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"752ffe8b-7db1-544e-b257-57bcda8ec34a","type":"domain","category":"Network activity","to_ids":true,"value":"phoenix-brands.dev","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"cb85aec8-711b-57e2-b4bf-334f8feb2dcd","type":"url","category":"Network activity","to_ids":true,"value":"http://phoenix-brands.dev","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"10a9b968-e6b4-520f-b449-fdd31c39b692","type":"domain","category":"Network activity","to_ids":true,"value":"unctyou.shop","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"c1ef9d7f-8036-5561-9e73-31928b91a9da","type":"url","category":"Network activity","to_ids":true,"value":"http://streamin.style","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"2ae356bd-1c14-585e-ab44-c9df7ad2365a","type":"domain","category":"Network activity","to_ids":true,"value":"phenkce.top","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"1bde22a0-58f8-5603-b40f-64874ef854c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"129.226.128.168","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"6c169285-90a0-5adc-a857-61e5edcec87a","type":"domain","category":"Network activity","to_ids":true,"value":"lzh.fr","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"a725db0d-f56f-55bc-94df-ee7c8b7905de","type":"url","category":"Network activity","to_ids":true,"value":"http://digitbasket.com","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"172e0690-796a-51ec-b059-5073b6d4478b","type":"domain","category":"Network activity","to_ids":true,"value":"streamin.style","comment":"https://x.com/skocherhan/status/1964994478634062237","timestamp":"1757326166","distribution":"5","Tag":[{"name":"Lumma"}]},{"uuid":"395914da-b3c1-5133-affb-7855f725e5c1","type":"md5","category":"Payload delivery","to_ids":true,"value":"792474b0279d2587f7695049e4d62c5e","comment":"https://x.com/suyog41/status/1964998632417157258","timestamp":"1757327156","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"5db94e06-3dfa-57c5-ba91-3a3aa8bb8d61","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d12af789ffa55828debceb3cd888f2794f5ee3165ed4f8973da103e7638f6136","comment":"https://x.com/skocherhan/status/1965003099833274553","timestamp":"1757328221","distribution":"5"},{"uuid":"b7e82b1b-4460-5c40-b388-49ebbfaf3201","type":"url","category":"Network activity","to_ids":true,"value":"https://khoancatbetong89.vn/us/zoom/Windows/invite.php","comment":"https://x.com/skocherhan/status/1965003099833274553","timestamp":"1757328221","distribution":"5"},{"uuid":"7db79b52-ca07-5b2c-ae0b-2a8c7aa4caf8","type":"domain","category":"Network activity","to_ids":true,"value":"khoancatbetong89.vn","comment":"https://x.com/skocherhan/status/1965003099833274553","timestamp":"1757328221","distribution":"5"},{"uuid":"731398e6-fde6-51db-bf8f-61f5857f76e0","type":"domain","category":"Network activity","to_ids":true,"value":"\u5e38\u76e4\u6ce8\u6587\u66f80687-080925.zip","comment":"https://x.com/harugasumi/status/1965004294723437001","timestamp":"1757328506","distribution":"5"},{"uuid":"bb30274f-3459-56fe-9582-69232fdce1df","type":"url","category":"Network activity","to_ids":true,"value":"http://\u5e38\u76e4\u6ce8\u6587\u66f80687-080925.zip","comment":"https://x.com/harugasumi/status/1965004294723437001","timestamp":"1757328506","distribution":"5"},{"uuid":"62ade304-31f3-5cf4-835c-091b41acbdb4","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-niche.duckdns.org","comment":"https://x.com/smica83/status/1965005272692441316","timestamp":"1757328739","distribution":"5"},{"uuid":"10b40317-2ccb-5568-8580-77bec4e7ffa6","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-niche.duckdns.org","comment":"https://x.com/smica83/status/1965005272692441316","timestamp":"1757328739","distribution":"5"},{"uuid":"1abe0ed2-7378-5462-afa1-bada83e6b644","type":"domain","category":"Network activity","to_ids":true,"value":"serralux.pt","comment":"https://x.com/harugasumi/status/1965012212243988621","timestamp":"1757330394","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"80f2bb05-04d8-541a-b869-f476155c5408","type":"url","category":"Network activity","to_ids":true,"value":"https://serralux.pt/Tarter.inf","comment":"https://x.com/harugasumi/status/1965012212243988621","timestamp":"1757330394","distribution":"5","Tag":[{"name":"GuLoader"}]},{"uuid":"ad573ea7-ac62-5b88-9c2d-84b4bcd7bf90","type":"domain","category":"Network activity","to_ids":true,"value":"miyfedrincom-cre-whp-wb.weebly.com","comment":"https://x.com/urldna_bot/status/1965022336115003472","timestamp":"1757332807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8fb207cc-2d26-558e-80db-1619f75105b1","type":"url","category":"Network activity","to_ids":true,"value":"https://miyfedrincom-cre-whp-wb.weebly.com","comment":"https://x.com/urldna_bot/status/1965022336115003472","timestamp":"1757332807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1bd67b6a-8e06-526b-a4a9-bd460f958d6a","type":"url","category":"Network activity","to_ids":true,"value":"http://162.218.115.218","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"aa27007a-fd9d-5398-a07c-e24c7bb278f2","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ebc3a6999612cc73ab2162c2e461018967748245cd150798c268c5821f8af10b","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"ab707fdb-db2d-5291-9eb1-cb4a2b9460ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.0.184.127","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"086e4ef5-4393-56aa-a027-6d902d5d9d18","type":"url","category":"Network activity","to_ids":true,"value":"http://bestsaleshoppingday.com","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"290f6819-21fd-5f7b-9353-d7d110929d90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.218.115.218","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"08839789-5b0c-5c0f-9b07-dfc7aa67e1bd","type":"domain","category":"Network activity","to_ids":true,"value":"bestsaleshoppingday.com","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"e5c62952-34ed-5076-b114-d00372cb3368","type":"url","category":"Network activity","to_ids":true,"value":"http://166.0.184.127","comment":"https://x.com/malwrhunterteam/status/1965024327268766078","timestamp":"1757333282","distribution":"5"},{"uuid":"461f22e6-a566-5b8a-9699-0b1fcc635860","type":"url","category":"Network activity","to_ids":true,"value":"http://192.252.181.65","comment":"https://x.com/malwrhunterteam/status/1965025070365220946","timestamp":"1757333459","distribution":"5"},{"uuid":"1b33d015-9115-5dce-8ea5-19bb61f3559e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.252.181.65","comment":"https://x.com/malwrhunterteam/status/1965025070365220946","timestamp":"1757333459","distribution":"5"},{"uuid":"2744b441-ed36-5b3b-94b4-304dc4072a2c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e3a44cb80cdb955c23e48e1e3ab3d21dc3189b6a7617662c02bfa9635417841c","comment":"https://x.com/malwrhunterteam/status/1965025070365220946","timestamp":"1757333459","distribution":"5"},{"uuid":"ac6c49fd-e71f-5948-843f-45b3b927a511","type":"domain","category":"Network activity","to_ids":true,"value":"rostrish.ofujvmdw.cn","comment":"https://x.com/Metemcyber/status/1965033093972263309","timestamp":"1757335372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"622a2ee7-1e2a-52e1-b4b2-78861387b529","type":"url","category":"Network activity","to_ids":true,"value":"https://rostrish.ofujvmdw.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1965033093972263309","timestamp":"1757335372","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de10c89f-a366-552d-bed1-43d78fe6c043","type":"domain","category":"Network activity","to_ids":true,"value":"everything.ifwenvi.cn","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1c989c4d-81ff-51f5-9b10-72b027d28fbd","type":"url","category":"Network activity","to_ids":true,"value":"https://everything.ifwenvi.cn/features-benefits/","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1965033190810329118","timestamp":"1757335395","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6c23cbf6-f7d0-5d1b-859d-e9be08ccbbe1","type":"domain","category":"Network activity","to_ids":true,"value":"orico-wallkin.0rtdp4.cn","comment":"https://x.com/Metemcyber/status/1965034854376223077","timestamp":"1757335792","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e9b807c-ca6b-5e65-8582-9bc34f8a8b6a","type":"url","category":"Network activity","to_ids":true,"value":"https://orico-wallkin.0rtdp4.cn/eorico/login/","comment":"https://x.com/Metemcyber/status/1965034854376223077","timestamp":"1757335792","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f330eda-1958-5f37-8b3e-bbb66b43763e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.69.23","comment":"https://x.com/Metemcyber/status/1965034854376223077","timestamp":"1757335792","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2735ef66-8f1c-5157-b6e7-e0d769cf48a3","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.202.214","comment":"https://x.com/Metemcyber/status/1965034854376223077","timestamp":"1757335792","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"184a46f0-0bec-528b-ae00-d28b9bfc0c1b","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.214.205","comment":"https://x.com/Metemcyber/status/1965034955286937704","timestamp":"1757335816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4bae7bc9-1db1-5de7-87d5-a9a177399953","type":"domain","category":"Network activity","to_ids":true,"value":"orico-indeedor.rbbxkwa.cn","comment":"https://x.com/Metemcyber/status/1965034955286937704","timestamp":"1757335816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fcd6e5bc-ebb5-5765-81eb-c554e345dd00","type":"url","category":"Network activity","to_ids":true,"value":"https://orico-indeedor.rbbxkwa.cn/eorico/login/","comment":"https://x.com/Metemcyber/status/1965034955286937704","timestamp":"1757335816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28728f67-1d67-5297-8d33-7155da3dfd10","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.83.51","comment":"https://x.com/Metemcyber/status/1965034955286937704","timestamp":"1757335816","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1801142-275a-57cd-8fc7-4340fbf3fe49","type":"domain","category":"Network activity","to_ids":true,"value":"Netlify.app","comment":"https://x.com/skocherhan/status/1965043994855113214","timestamp":"1757337971","distribution":"5"},{"uuid":"a9cf6162-7c4e-5f6d-be51-e1e5b797e8e3","type":"url","category":"Network activity","to_ids":true,"value":"http://Netlify.app","comment":"https://x.com/skocherhan/status/1965043994855113214","timestamp":"1757337971","distribution":"5"},{"uuid":"21839e19-dca9-53e8-b89c-b0b18a536b3d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.173.181.149","comment":"https://x.com/skocherhan/status/1965048359921873394","timestamp":"1757339012","distribution":"5"},{"uuid":"a2c56ffd-76b7-5916-bcf1-9711e772a277","type":"url","category":"Network activity","to_ids":true,"value":"http://107.173.181.149","comment":"https://x.com/skocherhan/status/1965048359921873394","timestamp":"1757339012","distribution":"5"},{"uuid":"5c2f9b85-a03d-5db5-a063-6e19099f6d56","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6adc16d1082326285b771f52eb9128089b9cc260b77e45972ec46656244ce7d6","comment":"https://x.com/skocherhan/status/1965048359921873394","timestamp":"1757339012","distribution":"5"},{"uuid":"f88f6081-9796-5c24-a65d-175733698754","type":"url","category":"Network activity","to_ids":true,"value":"http://iuh234.medianewsonline.com","comment":"https://x.com/naumovax/status/1965055436039839952","timestamp":"1757340699","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"stealer"}]},{"uuid":"1d47fd6a-c361-5b9c-999e-da18e1ad1154","type":"domain","category":"Network activity","to_ids":true,"value":"iuh234.medianewsonline.com","comment":"https://x.com/naumovax/status/1965055436039839952","timestamp":"1757340699","distribution":"5","Tag":[{"name":"Kimsuky"},{"name":"stealer"}]},{"uuid":"1c75fc96-9519-5db2-a282-588f14986685","type":"url","category":"Network activity","to_ids":true,"value":"https://221.132.29.137/dot.gif","comment":"https://x.com/drb_ra/status/1965058834902528454","timestamp":"1757341509","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"77907db3-be41-5bae-801c-171ff447e88d","type":"url","category":"Network activity","to_ids":true,"value":"http://221.132.29.137:80","comment":"https://x.com/drb_ra/status/1965058834902528454","timestamp":"1757341509","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9da81a03-17cd-5c9c-a184-4694257383ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.132.29.137","comment":"https://x.com/drb_ra/status/1965058834902528454","timestamp":"1757341509","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"42ff5eec-3638-5536-9bb3-5e76b349161f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.183:8843","comment":"https://x.com/drb_ra/status/1965058979295531176","timestamp":"1757341544","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"05e93eb8-ba40-5f37-a9db-fd088bde59f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.183","comment":"https://x.com/drb_ra/status/1965058979295531176","timestamp":"1757341544","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"779f7998-6949-5acd-980a-96978106f0cf","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.179:8843","comment":"https://x.com/drb_ra/status/1965059120555503824","timestamp":"1757341578","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6d45ac24-69b9-56c0-98af-b3eab4d8554e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.179","comment":"https://x.com/drb_ra/status/1965059120555503824","timestamp":"1757341578","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e149a599-6158-5750-b7ad-93e97a34e553","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.235.111.238","comment":"https://x.com/drb_ra/status/1965059261622575309","timestamp":"1757341611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9944c7e6-a47d-5d98-a42e-90c6f5781c50","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.201","comment":"https://x.com/drb_ra/status/1965059261622575309","timestamp":"1757341611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"df5913db-7301-50c3-957c-53a6d1b68118","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.201:8843","comment":"https://x.com/drb_ra/status/1965059261622575309","timestamp":"1757341611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"56731a05-591b-582f-9383-2d52f7e3b722","type":"url","category":"Network activity","to_ids":true,"value":"https://156.235.111.238/owa/","comment":"https://x.com/drb_ra/status/1965059261622575309","timestamp":"1757341611","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"95ec22c1-2c55-5cde-8f95-4d6513bad673","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.186:8843","comment":"https://x.com/drb_ra/status/1965059401884340669","timestamp":"1757341645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"02754bb2-fd82-5e9a-9d6a-cc83233e30e8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.186","comment":"https://x.com/drb_ra/status/1965059401884340669","timestamp":"1757341645","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"af7a5b8c-a0da-5c6d-aa73-6c0a74f18350","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.196:8843","comment":"https://x.com/drb_ra/status/1965059542645133433","timestamp":"1757341678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4bc0058c-cd88-5f7c-8d55-5043089e3193","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.196","comment":"https://x.com/drb_ra/status/1965059542645133433","timestamp":"1757341678","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dc5c6a32-57af-5273-a252-9e5e031474fc","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.201:8843","comment":"https://x.com/drb_ra/status/1965059683804422359","timestamp":"1757341712","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c01c68c9-bfc0-52f6-b554-6f381d8fae28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.201","comment":"https://x.com/drb_ra/status/1965059683804422359","timestamp":"1757341712","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c638d2df-a3e7-54c4-975d-32b4bf552fca","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.203:8843","comment":"https://x.com/drb_ra/status/1965059824804303063","timestamp":"1757341745","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ba8569a5-6a67-5722-9841-40a1f96fe0c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.203","comment":"https://x.com/drb_ra/status/1965059824804303063","timestamp":"1757341745","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"766cb6cd-cf01-5154-ac04-1ed9ba6af216","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.192:8843","comment":"https://x.com/drb_ra/status/1965059964927725639","timestamp":"1757341779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4803c71-fbb1-5dc9-8687-6795233b6bbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.192","comment":"https://x.com/drb_ra/status/1965059964927725639","timestamp":"1757341779","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8f27cb7d-a8b6-5fa2-a559-45ba3fdccea5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.194:8843","comment":"https://x.com/drb_ra/status/1965060108733513928","timestamp":"1757341813","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bdee51a9-f55f-58db-ac6a-05315887c53a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.194","comment":"https://x.com/drb_ra/status/1965060108733513928","timestamp":"1757341813","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"535a834e-f8cb-5a91-b5a0-0b6318ee1399","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.199:8843","comment":"https://x.com/drb_ra/status/1965060249414758712","timestamp":"1757341847","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3b9f8f7d-29e9-5c79-91f8-ed8273a6d417","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.199","comment":"https://x.com/drb_ra/status/1965060249414758712","timestamp":"1757341847","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"519ae7a3-4b25-5289-8af0-4de713f6604c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.190","comment":"https://x.com/drb_ra/status/1965060394046947416","timestamp":"1757341881","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"deff7f9e-a18b-53ea-8511-a85f6f50cc64","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.190:8843","comment":"https://x.com/drb_ra/status/1965060394046947416","timestamp":"1757341881","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1269233e-d10e-5268-ab63-a6e5a7586f98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.178","comment":"https://x.com/drb_ra/status/1965060534816129227","timestamp":"1757341915","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d4beee0f-73cc-57a5-836a-36f05785dd14","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.178:8843","comment":"https://x.com/drb_ra/status/1965060534816129227","timestamp":"1757341915","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9dfba01e-3049-554c-a22d-30355b0fc507","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.180","comment":"https://x.com/drb_ra/status/1965060675224719595","timestamp":"1757341948","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7066a9e9-f698-5b08-9e5a-cc75664cf638","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.180:8843","comment":"https://x.com/drb_ra/status/1965060675224719595","timestamp":"1757341948","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"72df9463-833f-5e10-ab9c-44f3402f87c9","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.202:8843","comment":"https://x.com/drb_ra/status/1965060816862138622","timestamp":"1757341982","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c58a0796-7edc-55b5-b806-b6f6ee287d9a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.202","comment":"https://x.com/drb_ra/status/1965060816862138622","timestamp":"1757341982","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fdb6f022-1b8a-52fd-b4a0-e85e1c609a53","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.176:8843","comment":"https://x.com/drb_ra/status/1965060956679234041","timestamp":"1757342015","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f4b659a7-a722-571d-ab49-568abc00f45b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.176","comment":"https://x.com/drb_ra/status/1965060956679234041","timestamp":"1757342015","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b44d0e36-c714-58f9-96b2-2bd1a1a59a7b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.203:8843","comment":"https://x.com/drb_ra/status/1965061097679130674","timestamp":"1757342049","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8c7512c2-c199-5079-82ba-7f5700340a61","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.203","comment":"https://x.com/drb_ra/status/1965061097679130674","timestamp":"1757342049","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a1bb8ecb-388c-5a47-911a-da5829716944","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.195","comment":"https://x.com/drb_ra/status/1965061238842703874","timestamp":"1757342083","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f9ea8c4-5772-5a57-a171-e684b6e06099","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.195:8843","comment":"https://x.com/drb_ra/status/1965061238842703874","timestamp":"1757342083","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1dfac957-f3b8-55a3-a8e0-5cb9ea13683f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.189","comment":"https://x.com/drb_ra/status/1965061378592649704","timestamp":"1757342116","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"80b0f293-171a-5c06-8e79-99be92715b44","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.189:8843","comment":"https://x.com/drb_ra/status/1965061378592649704","timestamp":"1757342116","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"65e1b1a0-1221-5aae-b9e6-9375e9dfca43","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.195:8843","comment":"https://x.com/drb_ra/status/1965061518636281881","timestamp":"1757342149","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"22825f30-7355-5318-8261-edbf3e458cb7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.195","comment":"https://x.com/drb_ra/status/1965061518636281881","timestamp":"1757342149","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"47cbd419-eb96-5c6c-a6ca-e4e696a4677b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.184:8843","comment":"https://x.com/drb_ra/status/1965061659896201424","timestamp":"1757342183","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"89fbffd1-182d-5683-8f06-ee6742cc9801","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.184","comment":"https://x.com/drb_ra/status/1965061659896201424","timestamp":"1757342183","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fc350cb6-ec7e-525f-96cc-4fd92de170ee","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.197:8843","comment":"https://x.com/drb_ra/status/1965061799755268121","timestamp":"1757342216","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4c2ca482-c2d4-5926-bb51-becc0a187bf2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.197","comment":"https://x.com/drb_ra/status/1965061799755268121","timestamp":"1757342216","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8cb439b5-657c-5504-8362-c8caf7d51301","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.196:8843","comment":"https://x.com/drb_ra/status/1965061947281580296","timestamp":"1757342251","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"55c90c83-0021-51bb-b186-971eaa5c010c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.196","comment":"https://x.com/drb_ra/status/1965061947281580296","timestamp":"1757342251","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4658881a-ce22-52c3-8f82-cac05ed63bd4","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.178:8843","comment":"https://x.com/drb_ra/status/1965062087140659459","timestamp":"1757342285","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c7d31618-e33a-5150-8407-914246a51a28","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.178","comment":"https://x.com/drb_ra/status/1965062087140659459","timestamp":"1757342285","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"064cd9fd-9754-53d4-a55f-c0fe60e06bfd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.188","comment":"https://x.com/drb_ra/status/1965062227624693924","timestamp":"1757342318","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f9ada8b0-c577-5a4b-bbaa-d4f1ae4e1690","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.188:8843","comment":"https://x.com/drb_ra/status/1965062227624693924","timestamp":"1757342318","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"287ddc6d-d603-5320-b912-b3d3c1e16cdc","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.178:8843","comment":"https://x.com/drb_ra/status/1965062368129626149","timestamp":"1757342352","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4d422b64-4f32-5a5a-89ae-ca068bcccbc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.178","comment":"https://x.com/drb_ra/status/1965062368129626149","timestamp":"1757342352","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"88480e43-16ca-5673-b5eb-458cf520b98c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.193:8843","comment":"https://x.com/drb_ra/status/1965062508324237590","timestamp":"1757342385","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"03ddde35-0dcd-52e7-a7c8-9fea2a65378a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.193","comment":"https://x.com/drb_ra/status/1965062508324237590","timestamp":"1757342385","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"dce7442d-f450-51f0-80df-4ee099a11276","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.204:8843","comment":"https://x.com/drb_ra/status/1965062649613562073","timestamp":"1757342419","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8e8aa6d8-3238-53e2-ae52-fe1cac39167f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.204","comment":"https://x.com/drb_ra/status/1965062649613562073","timestamp":"1757342419","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b5ae7ddf-5d84-5d7f-be29-63b41d592c12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.183","comment":"https://x.com/drb_ra/status/1965062791838183649","timestamp":"1757342453","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"5ec2af4a-c738-5176-965e-c0123510c702","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.183:8843","comment":"https://x.com/drb_ra/status/1965062791838183649","timestamp":"1757342453","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"35cec37a-abf2-54ef-b0af-8aaae6457bc1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.176","comment":"https://x.com/drb_ra/status/1965062934490710060","timestamp":"1757342487","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e02f3666-1923-5b84-9019-2e501b78f824","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.176:8843","comment":"https://x.com/drb_ra/status/1965062934490710060","timestamp":"1757342487","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b855c115-ce06-53f9-8cf1-d69905935101","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.188:8843","comment":"https://x.com/drb_ra/status/1965063075750629594","timestamp":"1757342521","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"01fcffde-0b5b-5219-9042-89c388ca91c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.188","comment":"https://x.com/drb_ra/status/1965063075750629594","timestamp":"1757342521","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d67b0d93-b7a6-571c-89f8-712fef4d6aa9","type":"domain","category":"Network activity","to_ids":true,"value":"facturasdgasnatural.top","comment":"https://x.com/mbec03/status/1965063150040203612","timestamp":"1757342538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c3d47c65-4680-5b02-a630-1ef48501dfb7","type":"url","category":"Network activity","to_ids":true,"value":"https://facturasdgasnatural.top","comment":"https://x.com/mbec03/status/1965063150040203612","timestamp":"1757342538","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f75ea276-10c9-578e-98b0-27e74a37ce73","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.200:8843","comment":"https://x.com/drb_ra/status/1965063218952650874","timestamp":"1757342555","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"1c35cb0d-7f24-55ba-8467-a63de48b6c78","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.200","comment":"https://x.com/drb_ra/status/1965063218952650874","timestamp":"1757342555","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d9809424-4b82-589d-a558-079848fc8dc1","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.197:8843","comment":"https://x.com/drb_ra/status/1965063358027300882","timestamp":"1757342588","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"69393a81-3450-5bdb-9d49-637641c6f6a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.197","comment":"https://x.com/drb_ra/status/1965063358027300882","timestamp":"1757342588","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fe5dd2fb-71c3-59d7-87ac-984d2fcfe952","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.193","comment":"https://x.com/drb_ra/status/1965063498255478875","timestamp":"1757342621","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"49514ee5-c78c-5fea-876f-53e670ed3784","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.193:8843","comment":"https://x.com/drb_ra/status/1965063498255478875","timestamp":"1757342621","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7d6c506f-a289-5985-b3a6-060b2281c007","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.202:8843","comment":"https://x.com/drb_ra/status/1965063638831751330","timestamp":"1757342655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"187d6a54-1f55-5a0b-8b55-8a1893c6df11","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.202","comment":"https://x.com/drb_ra/status/1965063638831751330","timestamp":"1757342655","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"90676bf6-5c38-5f54-ba52-fca016f28048","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.203:8843","comment":"https://x.com/drb_ra/status/1965063779429048630","timestamp":"1757342688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"39a4579f-a8b1-57da-b7e1-fac6c41f9def","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.203","comment":"https://x.com/drb_ra/status/1965063779429048630","timestamp":"1757342688","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2357e070-0be7-5647-86c7-7ba69ff07a4f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.190:8843","comment":"https://x.com/drb_ra/status/1965063920663839166","timestamp":"1757342722","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6bbb6816-89ff-57f5-acd2-e62a5d2495ff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.190","comment":"https://x.com/drb_ra/status/1965063920663839166","timestamp":"1757342722","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e11a396a-17de-5fda-995a-488657c842d0","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.180:8843","comment":"https://x.com/drb_ra/status/1965064062573932695","timestamp":"1757342756","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d2ee779d-5c7b-56cd-97d1-8d299ba87875","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.180","comment":"https://x.com/drb_ra/status/1965064062573932695","timestamp":"1757342756","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"fa152c8f-3d78-5bb7-a1f1-732596fccc81","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.189","comment":"https://x.com/drb_ra/status/1965064203284439122","timestamp":"1757342789","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3422eb37-4477-5716-bf73-061c5d86e4e1","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.189:8843","comment":"https://x.com/drb_ra/status/1965064203284439122","timestamp":"1757342789","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9591f788-edd5-538b-bdfd-39f651058c82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.194","comment":"https://x.com/drb_ra/status/1965064343550316636","timestamp":"1757342823","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ff4c1aad-110c-530d-843a-31921ecadd9f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.194:8843","comment":"https://x.com/drb_ra/status/1965064343550316636","timestamp":"1757342823","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2e68f19c-edf7-5653-9a70-12d234a15385","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c987932f28c239a591214c0b5504890af61b146dd43ce9bcdaba1789c6223b0c","comment":"https://x.com/fbgwls245/status/1965064434210238524","timestamp":"1757342844","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"dead0917-0643-5603-b795-359e32901335","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.193:8843","comment":"https://x.com/drb_ra/status/1965065890552242480","timestamp":"1757343192","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d6987b4c-9af5-5204-a0fd-26f6b4881134","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.193","comment":"https://x.com/drb_ra/status/1965065890552242480","timestamp":"1757343192","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"11e351f0-c50d-58ad-94e5-7abeaf78548b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.191:8843","comment":"https://x.com/drb_ra/status/1965066030751101128","timestamp":"1757343225","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"76caf52c-fc90-504a-9f35-f0f2450c6c9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.191","comment":"https://x.com/drb_ra/status/1965066030751101128","timestamp":"1757343225","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"538ce8c6-2e07-5c9d-80c7-5ac385c14691","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.202:8843","comment":"https://x.com/drb_ra/status/1965066171243483169","timestamp":"1757343259","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c265efa-7cc4-50ae-b6b9-f3034ad765f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.202","comment":"https://x.com/drb_ra/status/1965066171243483169","timestamp":"1757343259","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e22de239-393c-50fa-ac59-ef5fcef2609b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.200:8843","comment":"https://x.com/drb_ra/status/1965066311077400662","timestamp":"1757343292","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dbc1c449-1a35-5276-9a18-d2ceb256ea41","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.200","comment":"https://x.com/drb_ra/status/1965066311077400662","timestamp":"1757343292","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"536f1d81-f4cb-538a-b8da-3b3633e48fd8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.181","comment":"https://x.com/drb_ra/status/1965066451938943258","timestamp":"1757343325","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c8e64702-25dd-5ccb-b9d1-af65d7852dd3","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.181:8843","comment":"https://x.com/drb_ra/status/1965066451938943258","timestamp":"1757343325","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b74811e7-9d2d-5a1e-ae8e-2b5cf43afc63","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.193:8843","comment":"https://x.com/drb_ra/status/1965066592989151403","timestamp":"1757343359","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f679bfad-47b0-5bc0-9128-34b3a402926f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.193","comment":"https://x.com/drb_ra/status/1965066592989151403","timestamp":"1757343359","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e1aaed17-87fd-5e7c-999e-2b32f688e510","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.191","comment":"https://x.com/drb_ra/status/1965066732974006310","timestamp":"1757343392","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1895a6e3-1052-5e0c-b8c3-756c30849c07","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.191:8843","comment":"https://x.com/drb_ra/status/1965066732974006310","timestamp":"1757343392","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2a27afa2-1a4c-5b85-86d1-1d078f26e252","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.199:8843","comment":"https://x.com/drb_ra/status/1965066872543752615","timestamp":"1757343426","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"dfdca3d2-709a-583f-9a64-e8f34ee5d7be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.199","comment":"https://x.com/drb_ra/status/1965066872543752615","timestamp":"1757343426","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6a02353-3b94-5f5d-a5f5-f7f3b8f7ea09","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.199:8843","comment":"https://x.com/drb_ra/status/1965067013090623767","timestamp":"1757343459","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1fba7a02-4177-51bf-96f3-4b29dc4d5604","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.199","comment":"https://x.com/drb_ra/status/1965067013090623767","timestamp":"1757343459","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"29328fa7-9d7a-54e6-bf19-3ae367d115ad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.202","comment":"https://x.com/drb_ra/status/1965067154774253788","timestamp":"1757343493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"97673c87-3b43-5693-85f4-85ed4079f329","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.202:8843","comment":"https://x.com/drb_ra/status/1965067154774253788","timestamp":"1757343493","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0346bf66-8349-528c-98ba-6064ddd67426","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.194:8843","comment":"https://x.com/drb_ra/status/1965067296516526308","timestamp":"1757343527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"30d5e85d-d5e6-53b8-b346-d1ac49eab671","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.194","comment":"https://x.com/drb_ra/status/1965067296516526308","timestamp":"1757343527","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"91a4469c-c0ad-591d-bc02-375c0c477558","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.180:8843","comment":"https://x.com/drb_ra/status/1965067437872984278","timestamp":"1757343561","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1b853441-4c3b-5bdb-bf18-d4a049f43755","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.180","comment":"https://x.com/drb_ra/status/1965067437872984278","timestamp":"1757343561","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5f685dde-50ad-5e9a-9012-cf2249cd7bb4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.183","comment":"https://x.com/drb_ra/status/1965067579220980185","timestamp":"1757343594","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eaebea20-5f9d-5a31-b4c3-92e1844eb286","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.183:8843","comment":"https://x.com/drb_ra/status/1965067579220980185","timestamp":"1757343594","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fe37ed99-081a-56f7-8794-13b8b7edefa9","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.196:8843","comment":"https://x.com/drb_ra/status/1965067720564826206","timestamp":"1757343628","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da385da4-0c78-565e-a427-8961b5af5e52","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.196","comment":"https://x.com/drb_ra/status/1965067720564826206","timestamp":"1757343628","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f511096f-e830-5476-84d3-ab23faed3191","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.180","comment":"https://x.com/drb_ra/status/1965067861971652911","timestamp":"1757343662","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"54c85791-01b0-5268-bb06-db183cd580b9","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.180:8843","comment":"https://x.com/drb_ra/status/1965067861971652911","timestamp":"1757343662","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ea9f7edd-a51c-52fe-b58b-8bc20cd89178","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.198:8843","comment":"https://x.com/drb_ra/status/1965068003541963212","timestamp":"1757343695","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aa2c4f04-cae1-5260-a2dd-c641a3a0c637","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.198","comment":"https://x.com/drb_ra/status/1965068003541963212","timestamp":"1757343695","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"433d9558-4372-5954-adbc-96346938b6d8","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.177:8843","comment":"https://x.com/drb_ra/status/1965068146827780250","timestamp":"1757343730","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2ded2a38-88dc-56d4-84d7-e9e4ce3127d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.177","comment":"https://x.com/drb_ra/status/1965068146827780250","timestamp":"1757343730","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ed941519-6ae7-59f4-b9b9-86ce3e5a3c4d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.192:8843","comment":"https://x.com/drb_ra/status/1965068289161429260","timestamp":"1757343763","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f75810ff-f775-5d47-892d-2b9e5598b9c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.192","comment":"https://x.com/drb_ra/status/1965068289161429260","timestamp":"1757343763","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0c5bc6ad-4b8d-5443-96a5-93e681b1bee4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.187","comment":"https://x.com/drb_ra/status/1965068429762981998","timestamp":"1757343797","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e8bc0237-c995-5812-9b11-fe695d7fa46c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.187:8843","comment":"https://x.com/drb_ra/status/1965068429762981998","timestamp":"1757343797","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f1ad9b3-37b8-5224-9d61-0107a022131f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.201","comment":"https://x.com/drb_ra/status/1965068571513692275","timestamp":"1757343831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"98b564b2-e121-5316-9e28-6db0bd550e83","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.201:8843","comment":"https://x.com/drb_ra/status/1965068571513692275","timestamp":"1757343831","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d691880f-87a1-5046-83fc-92fc4f9e6f90","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.180","comment":"https://x.com/drb_ra/status/1965068713297863014","timestamp":"1757343865","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3b296225-3f34-5447-857f-a3946a23109f","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.180:8843","comment":"https://x.com/drb_ra/status/1965068713297863014","timestamp":"1757343865","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c3e3806d-7607-51e6-ae2b-d9a5f57f26a0","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.194:8843","comment":"https://x.com/drb_ra/status/1965068855769965053","timestamp":"1757343899","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6c117d7a-4599-5646-a2df-66f9da720bc2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.194","comment":"https://x.com/drb_ra/status/1965068855769965053","timestamp":"1757343899","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9b3eb05f-f85c-5b18-87c8-cce70341f353","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.178:8843","comment":"https://x.com/drb_ra/status/1965068996769988671","timestamp":"1757343932","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"834128cd-4aa6-599b-a292-755cbd88d3f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.178","comment":"https://x.com/drb_ra/status/1965068996769988671","timestamp":"1757343932","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5bb243a2-9810-5d78-b50a-2620c56120c4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.204","comment":"https://x.com/drb_ra/status/1965069138096963585","timestamp":"1757343966","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5dbae402-c1a9-5bf2-b045-34113ebf0f46","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.204:8843","comment":"https://x.com/drb_ra/status/1965069138096963585","timestamp":"1757343966","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"39a266e8-612b-5ae4-ba7a-fd03a50cfbf4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.194","comment":"https://x.com/drb_ra/status/1965069278694261013","timestamp":"1757343999","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"df81a80f-fcd8-5d06-a0c4-c608c941f8f6","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.194:8843","comment":"https://x.com/drb_ra/status/1965069278694261013","timestamp":"1757343999","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"29f51522-eb2f-58c3-98d5-4a56f6f73f88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.190","comment":"https://x.com/drb_ra/status/1965069420260462958","timestamp":"1757344033","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b9e6a89e-d88f-5be6-82f2-2e08ede6ec09","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.190:8843","comment":"https://x.com/drb_ra/status/1965069420260462958","timestamp":"1757344033","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8ad4fa6b-2262-51fd-9a66-1d930212e028","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.177:8843","comment":"https://x.com/drb_ra/status/1965069561725861922","timestamp":"1757344067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6cc435ab-fd4e-5e80-90a9-529edfd9e6b4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.177","comment":"https://x.com/drb_ra/status/1965069561725861922","timestamp":"1757344067","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b54caea5-820b-554e-ba2f-de00a7b44da9","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.195:8843","comment":"https://x.com/drb_ra/status/1965069701886996542","timestamp":"1757344100","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9efd0cf2-f7b9-5d73-9d2f-ab637a6cea87","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.195","comment":"https://x.com/drb_ra/status/1965069701886996542","timestamp":"1757344100","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"432998c4-07a9-5912-8356-7d73e2917acb","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.202:8843","comment":"https://x.com/drb_ra/status/1965069843075621040","timestamp":"1757344134","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d6287190-9df7-508b-93ba-31f4dd9c1a95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.202","comment":"https://x.com/drb_ra/status/1965069843075621040","timestamp":"1757344134","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d143f00d-00c0-5121-b3f9-aa814facf7fb","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.176:8843","comment":"https://x.com/drb_ra/status/1965069983685210150","timestamp":"1757344168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3b53cee0-b24f-5798-9f59-5f57112b6950","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.176","comment":"https://x.com/drb_ra/status/1965069983685210150","timestamp":"1757344168","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1e8bf493-dd45-553f-9032-d26cd95a967e","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.177:8843","comment":"https://x.com/drb_ra/status/1965070125817876869","timestamp":"1757344201","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4007ab8d-59e1-5fca-b163-6dcc757c64dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.177","comment":"https://x.com/drb_ra/status/1965070125817876869","timestamp":"1757344201","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a4b5348b-5741-50da-ad9b-626f928fac44","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.192:8843","comment":"https://x.com/drb_ra/status/1965070265693679852","timestamp":"1757344235","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"27c9fc0d-9866-51ec-be5b-e97612624792","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.192","comment":"https://x.com/drb_ra/status/1965070265693679852","timestamp":"1757344235","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fba0d571-1b35-5831-825c-de32f6066f0d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.199:8843","comment":"https://x.com/drb_ra/status/1965070406140006890","timestamp":"1757344268","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"de144fb5-79e4-5a8f-93d4-6e19541a6508","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.199","comment":"https://x.com/drb_ra/status/1965070406140006890","timestamp":"1757344268","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"88d64f92-d877-5c08-acd4-ef3076b4e3b2","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.179:8843","comment":"https://x.com/drb_ra/status/1965070547517411393","timestamp":"1757344302","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"034b8822-3c48-588d-bbc9-504c339ad6e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.179","comment":"https://x.com/drb_ra/status/1965070547517411393","timestamp":"1757344302","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7800d4ec-1d2f-56fd-8dec-645717d7834e","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.182:8843","comment":"https://x.com/drb_ra/status/1965070687984627767","timestamp":"1757344335","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"af93c228-4279-5f95-8121-756409a8d5bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.182","comment":"https://x.com/drb_ra/status/1965070687984627767","timestamp":"1757344335","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9fa3272a-c503-51d0-9c56-07163de46105","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.196","comment":"https://x.com/drb_ra/status/1965070830792245692","timestamp":"1757344369","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f2ec63e7-f4f2-5e02-bc30-f4fa39c6555c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.196:8843","comment":"https://x.com/drb_ra/status/1965070830792245692","timestamp":"1757344369","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"08331d22-0c92-5ab6-af7b-23ebba858def","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.194","comment":"https://x.com/drb_ra/status/1965070974283657491","timestamp":"1757344404","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5e243403-cfca-54e1-aed0-7c9c89e29733","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.194:8843","comment":"https://x.com/drb_ra/status/1965070974283657491","timestamp":"1757344404","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a2cd1420-67c4-5be9-8811-cbde0354d2ed","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.191:8843","comment":"https://x.com/drb_ra/status/1965071115484790836","timestamp":"1757344437","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a485b71c-fd09-5a23-8cdd-7e72be64f6ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.191","comment":"https://x.com/drb_ra/status/1965071115484790836","timestamp":"1757344437","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2ea6047e-3de2-53a8-81cf-d7062db89ce2","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.189:8843","comment":"https://x.com/drb_ra/status/1965071256405123133","timestamp":"1757344471","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2a850895-731e-53b2-9c8c-5a217f2ec316","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.189","comment":"https://x.com/drb_ra/status/1965071256405123133","timestamp":"1757344471","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ac4b04b8-d19f-5406-b9d5-29b4db15ab33","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.185:8843","comment":"https://x.com/drb_ra/status/1965071400554967150","timestamp":"1757344505","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cee8998b-27f0-51b7-ba9f-d9349062986a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.185","comment":"https://x.com/drb_ra/status/1965071400554967150","timestamp":"1757344505","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a81eede9-472b-5a8e-8368-0f98196621f1","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.184:8843","comment":"https://x.com/drb_ra/status/1965071540598485027","timestamp":"1757344539","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9e1ac633-35de-583f-9899-bab4e2ebe583","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.184","comment":"https://x.com/drb_ra/status/1965071540598485027","timestamp":"1757344539","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4ea40613-74b9-5fd2-9315-1500fb16d6e5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.192:8843","comment":"https://x.com/drb_ra/status/1965071681854243221","timestamp":"1757344572","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2f95946f-69ae-56b1-a2bc-1133a1103290","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.192","comment":"https://x.com/drb_ra/status/1965071681854243221","timestamp":"1757344572","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ec68e360-1baa-5b28-b30b-ecdc2172cd57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.204","comment":"https://x.com/drb_ra/status/1965071827799355784","timestamp":"1757344607","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"77fe817d-c8ac-5d66-826d-229a37d0a501","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.204:8843","comment":"https://x.com/drb_ra/status/1965071827799355784","timestamp":"1757344607","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4aac9721-7a33-5851-b4d7-aa12af43cd7c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.195:8843","comment":"https://x.com/drb_ra/status/1965071968954360275","timestamp":"1757344641","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"99d2dfdd-8a9c-584d-b78d-4dba4cec6b48","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.195","comment":"https://x.com/drb_ra/status/1965071968954360275","timestamp":"1757344641","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d66df92-6f77-5c43-83bf-0f3f3e34fcc8","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.190:8843","comment":"https://x.com/drb_ra/status/1965072108729544892","timestamp":"1757344674","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d3a06dc6-7f69-5582-bdab-7b020e35fb42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.190","comment":"https://x.com/drb_ra/status/1965072108729544892","timestamp":"1757344674","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1ed6bab5-6e20-52e3-bd4f-cace32d4e3ba","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.196:8843","comment":"https://x.com/drb_ra/status/1965072250559975620","timestamp":"1757344708","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fcd42f23-8f05-581b-93b7-e20cfb4c9c6a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.196","comment":"https://x.com/drb_ra/status/1965072250559975620","timestamp":"1757344708","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cd843d49-db68-5f45-86c2-30fd93d1c1ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.191","comment":"https://x.com/drb_ra/status/1965072533474119885","timestamp":"1757344775","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6ff8178c-5e53-579b-a7e2-05333d2fe0b5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.191:8843","comment":"https://x.com/drb_ra/status/1965072533474119885","timestamp":"1757344775","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2e6bed88-cdbb-5b07-9b11-45e783bb3fd4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.190","comment":"https://x.com/drb_ra/status/1965072676600590841","timestamp":"1757344810","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4cf26039-93f9-5d1a-b845-eee84ed28bb5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.190:8843","comment":"https://x.com/drb_ra/status/1965072676600590841","timestamp":"1757344810","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ef92afbc-3de6-5582-ab75-1de8828d412a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.190","comment":"https://x.com/drb_ra/status/1965072818695242095","timestamp":"1757344843","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"551ef441-c92d-5b7c-9aa4-41e5d644c439","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.190:8843","comment":"https://x.com/drb_ra/status/1965072818695242095","timestamp":"1757344843","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2af07418-1911-53c2-a7c3-821cf4e30d4d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.188:8843","comment":"https://x.com/drb_ra/status/1965072960395591821","timestamp":"1757344877","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f5b1ccc4-733c-567d-bc1d-fe6d4db9feab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.188","comment":"https://x.com/drb_ra/status/1965072960395591821","timestamp":"1757344877","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a4c010c-88bb-5f5d-8526-f24988c45a6d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.183:8843","comment":"https://x.com/drb_ra/status/1965073101299028099","timestamp":"1757344911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e507e895-4952-572a-a625-9f0b47932f68","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.183","comment":"https://x.com/drb_ra/status/1965073101299028099","timestamp":"1757344911","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb0e3617-9146-5d59-99b5-4c8141aebc19","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.185:8843","comment":"https://x.com/drb_ra/status/1965073241489440776","timestamp":"1757344944","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b44e4b37-588e-50bb-9282-5e833e59a3ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.185","comment":"https://x.com/drb_ra/status/1965073241489440776","timestamp":"1757344944","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0848261f-566d-5efd-962d-69d63443cd73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.182","comment":"https://x.com/drb_ra/status/1965073382032224764","timestamp":"1757344978","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"23138cfa-eaa0-5404-be86-b365125e7c1b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.182:8843","comment":"https://x.com/drb_ra/status/1965073382032224764","timestamp":"1757344978","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7c4354bd-65d9-5536-87c5-b5c2d126bae0","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.184:8843","comment":"https://x.com/drb_ra/status/1965073524781167067","timestamp":"1757345012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a8828a52-968c-5605-a718-91f408509839","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.184","comment":"https://x.com/drb_ra/status/1965073524781167067","timestamp":"1757345012","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d33cc65c-2e24-5bbd-8bb7-9bd9b3a9c9a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.197","comment":"https://x.com/drb_ra/status/1965073666041065495","timestamp":"1757345045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"56f7926e-e31d-53bc-a30a-f8fcbd98fb35","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.197:8843","comment":"https://x.com/drb_ra/status/1965073666041065495","timestamp":"1757345045","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"52b10c67-9c7e-5d1a-a03c-73a3130f8f61","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.193:8843","comment":"https://x.com/drb_ra/status/1965073806185447707","timestamp":"1757345079","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7502b50f-a0cd-5518-bcc2-dbc968dbfa17","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.193","comment":"https://x.com/drb_ra/status/1965073806185447707","timestamp":"1757345079","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1213e58-0931-563a-bf70-6714fa194585","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.188:8843","comment":"https://x.com/drb_ra/status/1965073948489720034","timestamp":"1757345113","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f9751c4e-d504-5dc9-bef8-f5dccf0f55dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.188","comment":"https://x.com/drb_ra/status/1965073948489720034","timestamp":"1757345113","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"300187b2-d831-5a37-8ffd-711f30319f49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.196","comment":"https://x.com/drb_ra/status/1965074089502236963","timestamp":"1757345146","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6fbc0b54-250e-57ad-ba48-a2c8d8dce773","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.196:8843","comment":"https://x.com/drb_ra/status/1965074089502236963","timestamp":"1757345146","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ca6f1bb2-9d34-517e-8f2d-33e264d96caa","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.189:8843","comment":"https://x.com/drb_ra/status/1965074230682476568","timestamp":"1757345180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0804f017-ab00-51ee-a10f-6ee2ebe95485","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.189","comment":"https://x.com/drb_ra/status/1965074230682476568","timestamp":"1757345180","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d3756a5-7979-5fb0-9ecd-14f2d9ac9c88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.189","comment":"https://x.com/drb_ra/status/1965074371502027074","timestamp":"1757345214","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"789427fe-d511-5c19-ab97-377d1c3a2d62","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.189:8843","comment":"https://x.com/drb_ra/status/1965074371502027074","timestamp":"1757345214","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"70664085-3d61-52d3-a8d4-5c0aa241c665","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.177","comment":"https://x.com/drb_ra/status/1965074512267116668","timestamp":"1757345247","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7c68f46d-1a0c-5639-8741-7f70b8f26b88","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.177:8843","comment":"https://x.com/drb_ra/status/1965074512267116668","timestamp":"1757345247","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"84bb4574-94cc-5b1f-9e89-217a5e16dbaf","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.177:8843","comment":"https://x.com/drb_ra/status/1965074653111882236","timestamp":"1757345281","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b9e3b7b3-64c7-58f4-a28e-4afa3f38edbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.177","comment":"https://x.com/drb_ra/status/1965074653111882236","timestamp":"1757345281","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"86fe48d3-0c08-57a4-9a7e-4825c9db27ac","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.179:8843","comment":"https://x.com/drb_ra/status/1965074794036277571","timestamp":"1757345314","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"98651501-68e3-53f9-8e2d-934a1fb247c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.179","comment":"https://x.com/drb_ra/status/1965074794036277571","timestamp":"1757345314","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ee7370d4-1f88-50e9-aea9-b4a49ce864f0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.182","comment":"https://x.com/drb_ra/status/1965074936021831766","timestamp":"1757345348","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5aaf16c1-352f-5aa0-b847-10e5dbdbe1fe","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.182:8843","comment":"https://x.com/drb_ra/status/1965074936021831766","timestamp":"1757345348","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eb945829-4184-5c92-b50a-bb8b1da9e1c5","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.202:8843","comment":"https://x.com/drb_ra/status/1965075077655155154","timestamp":"1757345382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3a07ef9b-c044-52cb-a0a2-a9eb67c8c7be","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.202","comment":"https://x.com/drb_ra/status/1965075077655155154","timestamp":"1757345382","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6b9ef3fc-2d50-55d5-b985-56726ff35979","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.179:8843","comment":"https://x.com/drb_ra/status/1965075218143346928","timestamp":"1757345415","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"79bed798-6328-538c-a9c1-a4d0ed749f4b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.179","comment":"https://x.com/drb_ra/status/1965075218143346928","timestamp":"1757345415","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5af6db79-f89c-55f9-a20b-a875ec4120d7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.182","comment":"https://x.com/drb_ra/status/1965075359025742243","timestamp":"1757345449","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e12ad2bf-2aa8-545e-941c-15c589767015","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.182:8843","comment":"https://x.com/drb_ra/status/1965075359025742243","timestamp":"1757345449","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"259f3d3c-9c35-5b98-97c5-93dbec9f2238","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.201:8843","comment":"https://x.com/drb_ra/status/1965075499899817992","timestamp":"1757345483","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"80f1bcf3-14f3-5dcf-bc7d-7e628de6e791","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.201","comment":"https://x.com/drb_ra/status/1965075499899817992","timestamp":"1757345483","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f5fd700a-ae2c-55aa-b9e3-ed5c694db0ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.190.197","comment":"https://x.com/drb_ra/status/1965075641289859453","timestamp":"1757345516","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"13ed1eaf-c9d6-5136-af25-a061bd8fe51d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.190.197:8843","comment":"https://x.com/drb_ra/status/1965075641289859453","timestamp":"1757345516","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"87f4340e-5655-57d3-a064-b5471f01152c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.191:8843","comment":"https://x.com/drb_ra/status/1965075781832655049","timestamp":"1757345550","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1d2481fe-5356-58e5-b8e4-617864f479c2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.191","comment":"https://x.com/drb_ra/status/1965075781832655049","timestamp":"1757345550","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"95e8f0f4-c24a-5243-be88-cc22ccdb2a1b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.189:8843","comment":"https://x.com/drb_ra/status/1965075922773737561","timestamp":"1757345583","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2fde7669-715e-53d7-8ad3-edf0a0af63e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.189","comment":"https://x.com/drb_ra/status/1965075922773737561","timestamp":"1757345583","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc33da95-4f72-5507-ab3d-f5f342a08fe0","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.200:8843","comment":"https://x.com/drb_ra/status/1965076062825791938","timestamp":"1757345617","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0e49c15c-d72a-56bd-8ae5-d782955ee029","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.200","comment":"https://x.com/drb_ra/status/1965076062825791938","timestamp":"1757345617","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"61c022d6-34be-5214-a909-0854dbcc3593","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.182","comment":"https://x.com/drb_ra/status/1965076204425510958","timestamp":"1757345651","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bf84f8f5-b646-5d60-b71e-ce0844d34183","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.182:8843","comment":"https://x.com/drb_ra/status/1965076204425510958","timestamp":"1757345651","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"8bb3e915-4dba-5121-ad29-ff0a6e223096","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.194","comment":"https://x.com/drb_ra/status/1965076348000768209","timestamp":"1757345685","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cc9876f0-f042-53ef-ae8b-e7fbd615f0b3","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.194:8843","comment":"https://x.com/drb_ra/status/1965076348000768209","timestamp":"1757345685","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d402e46-79a4-54c6-b601-cba7ffce4b7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.178","comment":"https://x.com/drb_ra/status/1965076495522820600","timestamp":"1757345720","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2742174c-5852-5c02-a2fa-4a61449b1479","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.178:8843","comment":"https://x.com/drb_ra/status/1965076495522820600","timestamp":"1757345720","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5035bb8d-674d-505e-8903-728bd3b11656","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.185:8843","comment":"https://x.com/drb_ra/status/1965076635641839743","timestamp":"1757345753","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2b957df4-4cd4-5960-9daf-75f130511be2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.185","comment":"https://x.com/drb_ra/status/1965076635641839743","timestamp":"1757345753","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"20b0df2f-297c-505a-b85d-87fba94c9e79","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.185:8843","comment":"https://x.com/drb_ra/status/1965076786150273346","timestamp":"1757345789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"faf756f9-ae0e-5e08-acec-67030df7347c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.185","comment":"https://x.com/drb_ra/status/1965076786150273346","timestamp":"1757345789","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e97737ea-9286-5e91-a0f7-f8a1da11fd31","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.196:8843","comment":"https://x.com/drb_ra/status/1965076933353648575","timestamp":"1757345824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"aab721a4-4296-5557-97b8-8e1f7d5b0eac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.196","comment":"https://x.com/drb_ra/status/1965076933353648575","timestamp":"1757345824","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7e818382-715f-582c-8a66-12b1d1c444d2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.200","comment":"https://x.com/drb_ra/status/1965077074307420443","timestamp":"1757345858","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bb875f2b-11b8-5fec-8220-be5cd1ab3c38","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.200:8843","comment":"https://x.com/drb_ra/status/1965077074307420443","timestamp":"1757345858","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4e85d777-4e97-5e59-b22d-e5616f24cb9a","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.195:8843","comment":"https://x.com/drb_ra/status/1965077216330735670","timestamp":"1757345892","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"72c3d25e-5ef1-5b0e-99f1-7ecf957fc412","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.195","comment":"https://x.com/drb_ra/status/1965077216330735670","timestamp":"1757345892","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6e9dfb17-6521-5114-8790-d84875f8e007","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.198","comment":"https://x.com/drb_ra/status/1965077356961226859","timestamp":"1757345925","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"48b30144-b66d-5ae2-927d-86996496d32c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.198:8843","comment":"https://x.com/drb_ra/status/1965077356961226859","timestamp":"1757345925","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7c556b0e-12ea-5c6d-a531-657cbbdc3a49","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.182:8843","comment":"https://x.com/drb_ra/status/1965077497588105420","timestamp":"1757345959","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"d69fa60c-346d-552d-80dc-30cc8c33f019","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.182","comment":"https://x.com/drb_ra/status/1965077497588105420","timestamp":"1757345959","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2bfa501a-ca97-585d-8fe6-4232d3a922aa","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.192:8843","comment":"https://x.com/drb_ra/status/1965077638298685874","timestamp":"1757345993","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7fc5d6fc-b306-53f6-bd87-b51aa1e18d51","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.192","comment":"https://x.com/drb_ra/status/1965077638298685874","timestamp":"1757345993","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e6c1628a-6eb9-5d70-8607-6f3b9b317e0e","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.199:8843","comment":"https://x.com/drb_ra/status/1965077778912682074","timestamp":"1757346026","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"307fe6f4-70f3-5c69-860e-391bc103cfc3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.199","comment":"https://x.com/drb_ra/status/1965077778912682074","timestamp":"1757346026","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"17efa817-0764-5911-abf7-235364d57561","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.185","comment":"https://x.com/drb_ra/status/1965078061101256832","timestamp":"1757346093","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"725f72a5-d1c9-5728-8e7b-0f079736f21b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.185:8843","comment":"https://x.com/drb_ra/status/1965078061101256832","timestamp":"1757346093","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3149262a-fef7-5ca5-89ff-5cd8d80b137b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.185.181","comment":"https://x.com/drb_ra/status/1965078201937629266","timestamp":"1757346127","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6434e316-af64-5a85-bc27-c324ea03eb02","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.185.181:8843","comment":"https://x.com/drb_ra/status/1965078201937629266","timestamp":"1757346127","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"cc0b9f20-56bf-5489-b5f5-c323be670611","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.188.192:8843","comment":"https://x.com/drb_ra/status/1965078343625351204","timestamp":"1757346161","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c893b2b4-7214-52df-97d6-491ce1798131","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.188.192","comment":"https://x.com/drb_ra/status/1965078343625351204","timestamp":"1757346161","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0352fb4a-0a92-54bc-bb2d-dbd5dad85024","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.197:8843","comment":"https://x.com/drb_ra/status/1965078483991965855","timestamp":"1757346194","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"de162128-f5d6-5e5f-a9b3-d9d6866d2344","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.197","comment":"https://x.com/drb_ra/status/1965078483991965855","timestamp":"1757346194","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"c63370bb-7fff-5282-bbd8-2396b4968d7c","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.191.186:8843","comment":"https://x.com/drb_ra/status/1965078624379543863","timestamp":"1757346228","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e2b78b78-4024-5ce8-aa41-8b29b1d5259d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.191.186","comment":"https://x.com/drb_ra/status/1965078624379543863","timestamp":"1757346228","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"3d003097-85aa-5ded-bf4b-0a92b2a5cb92","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.187.186:8843","comment":"https://x.com/drb_ra/status/1965078765954081111","timestamp":"1757346261","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ade8a5ff-48ab-5e02-9573-e6071b044f84","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.187.186","comment":"https://x.com/drb_ra/status/1965078765954081111","timestamp":"1757346261","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a0ca0816-f928-5106-a469-5906b223708f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.184.184","comment":"https://x.com/drb_ra/status/1965078906480066952","timestamp":"1757346295","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"45f46191-e69a-55e4-9b11-ddd46135530b","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.184.184:8843","comment":"https://x.com/drb_ra/status/1965078906480066952","timestamp":"1757346295","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8bc3ba9b-273f-5b63-9d59-db0137620829","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.186.182","comment":"https://x.com/drb_ra/status/1965079047333085542","timestamp":"1757346328","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"db2c1c84-0feb-5dfc-866d-0accf200f14e","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.186.182:8843","comment":"https://x.com/drb_ra/status/1965079047333085542","timestamp":"1757346328","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"da8735bc-8f06-5aea-a60e-fc04d8437c5d","type":"url","category":"Network activity","to_ids":true,"value":"http://154.89.189.198:8843","comment":"https://x.com/drb_ra/status/1965079330809397653","timestamp":"1757346396","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bf6f566f-114b-516d-8ecd-9d9a304f2881","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.89.189.198","comment":"https://x.com/drb_ra/status/1965079330809397653","timestamp":"1757346396","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"0c98c2d5-7b1c-5c0d-aaf4-3c71301cf7e6","type":"url","category":"Network activity","to_ids":true,"value":"http://85.202.193.88:4321","comment":"https://x.com/drb_ra/status/1965079470651650510","timestamp":"1757346429","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"868ad6a3-f967-55b3-ab7b-9943e561de4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.202.193.88","comment":"https://x.com/drb_ra/status/1965079470651650510","timestamp":"1757346429","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"88b31a5f-6407-564a-baeb-494c208083e6","type":"url","category":"Network activity","to_ids":true,"value":"http://69.48.204.225:8088","comment":"https://x.com/drb_ra/status/1965079611416682907","timestamp":"1757346463","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"53319294-438d-592c-a3d8-3092259c4942","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.48.204.225","comment":"https://x.com/drb_ra/status/1965079611416682907","timestamp":"1757346463","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"0c79ce60-dafd-5cf6-bc9f-96a4efcac282","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.70.233:2404","comment":"https://x.com/drb_ra/status/1965079750638260245","timestamp":"1757346496","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"3310bc33-7451-5cc7-a8ea-aaf3a7d07bd7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.70.233","comment":"https://x.com/drb_ra/status/1965079750638260245","timestamp":"1757346496","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"dcc7393f-ad2d-510a-987e-dc20296d331f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.227.203.207","comment":"https://x.com/drb_ra/status/1965079891520672230","timestamp":"1757346530","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"217ef29e-df77-5272-bffa-d3c5dd5d2abe","type":"url","category":"Network activity","to_ids":true,"value":"http://23.227.203.207:443","comment":"https://x.com/drb_ra/status/1965079891520672230","timestamp":"1757346530","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"e9dc6c93-e9ff-53c7-b4f7-f74758fda4bc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.80.39","comment":"https://x.com/drb_ra/status/1965080031769874478","timestamp":"1757346563","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"d6efc518-93af-5c93-ad4d-fc80a614613b","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.80.39:2404","comment":"https://x.com/drb_ra/status/1965080031769874478","timestamp":"1757346563","distribution":"5","Tag":[{"name":"C2"},{"name":"Remcos"}]},{"uuid":"7c35c3b8-8839-548b-8a04-00226e7e18f1","type":"url","category":"Network activity","to_ids":true,"value":"http://18.190.176.112:40000","comment":"https://x.com/drb_ra/status/1965080171536634239","timestamp":"1757346596","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"ca389f45-4ee9-50b0-b6f3-6f94d90e91e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.190.176.112","comment":"https://x.com/drb_ra/status/1965080171536634239","timestamp":"1757346596","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"4ce36a52-7c74-56b4-b5e1-05d42e440778","type":"url","category":"Network activity","to_ids":true,"value":"http://16.52.42.81:6960","comment":"https://x.com/drb_ra/status/1965080312226189513","timestamp":"1757346630","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"48e84113-4384-5522-aace-36e51e593fb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.52.42.81","comment":"https://x.com/drb_ra/status/1965080312226189513","timestamp":"1757346630","distribution":"5","Tag":[{"name":"C2"},{"name":"NetSupportRAT"}]},{"uuid":"d469932a-c59e-5346-8fcb-e9c514ca60f1","type":"url","category":"Network activity","to_ids":true,"value":"http://96.62.214.246:6606","comment":"https://x.com/drb_ra/status/1965080452408218106","timestamp":"1757346663","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b5adb39a-3111-5d69-94f0-6f7686da5bab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"96.62.214.246","comment":"https://x.com/drb_ra/status/1965080452408218106","timestamp":"1757346663","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f8eb5cc6-075a-5841-ac5b-87da33ed8a0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.17.169.112","comment":"https://x.com/drb_ra/status/1965080731006460370","timestamp":"1757346730","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"4f329901-e7d0-5fb7-88ba-265122652469","type":"url","category":"Network activity","to_ids":true,"value":"http://52.17.169.112:80","comment":"https://x.com/drb_ra/status/1965080731006460370","timestamp":"1757346730","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5a37947b-e2d3-5822-814c-bba1c19ea70c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.250.34.172:80","comment":"https://x.com/drb_ra/status/1965080871674978606","timestamp":"1757346763","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"bd528493-83a4-5f99-8bfe-66bfa2fdce0f","type":"url","category":"Network activity","to_ids":true,"value":"http://34.251.204.198:443","comment":"https://x.com/drb_ra/status/1965081011588587635","timestamp":"1757346797","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"81145ac2-efff-512a-b9c0-fd381161aa0a","type":"url","category":"Network activity","to_ids":true,"value":"http://34.251.204.198:25","comment":"https://x.com/drb_ra/status/1965081152081084892","timestamp":"1757346830","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9a18695f-d39f-5cbe-b06c-e8e3f76fa2ef","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.251.204.198","comment":"https://x.com/drb_ra/status/1965081152081084892","timestamp":"1757346830","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"b7fe9071-ee63-5f3b-82df-94bab465cfb4","type":"url","category":"Network activity","to_ids":true,"value":"http://172.234.220.197:587","comment":"https://x.com/drb_ra/status/1965081293802323974","timestamp":"1757346864","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"7e2cbbe4-5e3e-5125-9ec0-8a899d09772c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.234.220.197:443","comment":"https://x.com/drb_ra/status/1965081434588381554","timestamp":"1757346898","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"00b79cd8-98cb-5ceb-8d48-0f2c1abac244","type":"url","category":"Network activity","to_ids":true,"value":"http://172.234.220.197:25","comment":"https://x.com/drb_ra/status/1965081576360022245","timestamp":"1757346931","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"a52723cf-8f8a-565d-8540-b0d6b9161f22","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.234.220.197","comment":"https://x.com/drb_ra/status/1965081576360022245","timestamp":"1757346931","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"9252640f-184f-5672-b6ae-bf54015e7cf2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.253.44.12:80","comment":"https://x.com/drb_ra/status/1965081717896892646","timestamp":"1757346965","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"49167f32-1e70-5cf0-a903-5dfce507d0fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.98.67.23","comment":"https://x.com/drb_ra/status/1965081857927815675","timestamp":"1757346999","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7b54c573-46a8-59bf-b662-66d409f6853a","type":"url","category":"Network activity","to_ids":true,"value":"http://94.98.67.23:443","comment":"https://x.com/drb_ra/status/1965081857927815675","timestamp":"1757346999","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"ad47c244-2ab8-5e02-9fff-d71e25fa90b0","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.238.178:7443","comment":"https://x.com/drb_ra/status/1965081998533562470","timestamp":"1757347032","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"733b7bf1-41d4-5365-882c-8b2f72426103","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.238.178","comment":"https://x.com/drb_ra/status/1965081998533562470","timestamp":"1757347032","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"b18bb54c-1e7a-5520-ac43-b90d876b940b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.68.99.67","comment":"https://x.com/drb_ra/status/1965082139101458712","timestamp":"1757347066","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"62e3c189-4abe-5b36-8ff9-939e0344fc45","type":"url","category":"Network activity","to_ids":true,"value":"http://52.68.99.67:80","comment":"https://x.com/drb_ra/status/1965082139101458712","timestamp":"1757347066","distribution":"5","Tag":[{"name":"C2"},{"name":"Brute_Ratel_C4"}]},{"uuid":"234c48f6-759c-590b-b53d-281e34d0537c","type":"url","category":"Network activity","to_ids":true,"value":"http://47.115.221.235:8088","comment":"https://x.com/drb_ra/status/1965082279589683573","timestamp":"1757347099","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"bdefaaa8-aa74-5d1b-96f1-af9b21f292ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.37.69.42","comment":"https://x.com/drb_ra/status/1965082420824387997","timestamp":"1757347133","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f9db6fc3-d9ae-5692-bc6f-4cf9d69f9774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.63.196.47","comment":"https://x.com/drb_ra/status/1965082420824387997","timestamp":"1757347133","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9cd73efa-f0ed-56d7-bf03-7c8618f01242","type":"url","category":"Network activity","to_ids":true,"value":"https://92.63.196.47/push","comment":"https://x.com/drb_ra/status/1965082420824387997","timestamp":"1757347133","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"97c50ea4-0000-56a1-96c9-752911112fc0","type":"url","category":"Network activity","to_ids":true,"value":"http://193.37.69.42:2396","comment":"https://x.com/drb_ra/status/1965082420824387997","timestamp":"1757347133","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"acc01097-7613-5f51-abfd-7e2c41cd8a7c","type":"url","category":"Network activity","to_ids":true,"value":"https://47.110.229.61/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1965082562952577308","timestamp":"1757347167","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"e723191e-564d-5abf-840a-468203c87a38","type":"url","category":"Network activity","to_ids":true,"value":"http://47.110.229.61:8080","comment":"https://x.com/drb_ra/status/1965082562952577308","timestamp":"1757347167","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7986c2e6-465c-52a2-8038-034f1a91bf7b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.110.229.61","comment":"https://x.com/drb_ra/status/1965082562952577308","timestamp":"1757347167","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"ce478f83-0e6e-5d79-8a92-47af2c9446cb","type":"url","category":"Network activity","to_ids":true,"value":"http://20.255.212.138:32256","comment":"https://x.com/drb_ra/status/1965082707727441970","timestamp":"1757347201","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"21029445-cc39-56b9-a07c-820473f46ffc","type":"url","category":"Network activity","to_ids":true,"value":"https://s1.wmw.sh/api/metting/5ad625w14417","comment":"https://x.com/drb_ra/status/1965082707727441970","timestamp":"1757347201","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"718c1cdc-fd74-50e9-a38c-f41df70684ee","type":"domain","category":"Network activity","to_ids":true,"value":"s1.wmw.sh","comment":"https://x.com/drb_ra/status/1965082707727441970","timestamp":"1757347201","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"7f821386-e63e-509d-ae77-82a99eb46c01","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.255.212.138","comment":"https://x.com/drb_ra/status/1965082707727441970","timestamp":"1757347201","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"a81d6fc2-dea1-55bc-9bbc-c3673e711ed3","type":"url","category":"Network activity","to_ids":true,"value":"http://47.115.221.235:8090","comment":"https://x.com/drb_ra/status/1965082849662636081","timestamp":"1757347235","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"376e5d20-2de7-5dd0-9e84-3073ce0754ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.115.221.235","comment":"https://x.com/drb_ra/status/1965082849662636081","timestamp":"1757347235","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"4977ff2e-c2bc-51e8-8aae-a4ff6050f62e","type":"url","category":"Network activity","to_ids":true,"value":"https://47.115.221.235/g.pixel","comment":"https://x.com/drb_ra/status/1965082849662636081","timestamp":"1757347235","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"38c2de37-700c-50c5-bab5-e5feb3ddceb1","type":"url","category":"Network activity","to_ids":true,"value":"http://217.138.204.165:54533","comment":"https://x.com/drb_ra/status/1965083130102182281","timestamp":"1757347302","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"3dc69b8b-436a-5a98-b9f0-6e90bdc1cc55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.138.204.165","comment":"https://x.com/drb_ra/status/1965083130102182281","timestamp":"1757347302","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"abb57f70-459a-57ed-8f0d-2ef5f2dbb5d4","type":"url","category":"Network activity","to_ids":true,"value":"http://159.223.171.199:5000","comment":"https://x.com/drb_ra/status/1965083269789360161","timestamp":"1757347335","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"0df4395d-2314-5ad4-a9e6-95a0f1dd277e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"159.223.171.199","comment":"https://x.com/drb_ra/status/1965083269789360161","timestamp":"1757347335","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"637ddc4b-8c96-5c45-82ad-719720281671","type":"url","category":"Network activity","to_ids":true,"value":"http://185.128.106.44:2404","comment":"https://x.com/drb_ra/status/1965083410671825035","timestamp":"1757347369","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"6a538fa8-df4e-5ee9-8c16-9641ad3dcf3e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.128.106.44","comment":"https://x.com/drb_ra/status/1965083410671825035","timestamp":"1757347369","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"37d1248f-1eda-57b7-a481-61668976b2a8","type":"url","category":"Network activity","to_ids":true,"value":"http://206.123.152.103:2565","comment":"https://x.com/drb_ra/status/1965083550958715052","timestamp":"1757347402","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"ee74ab69-13ca-5c24-923f-c19a4c2e6bdc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"206.123.152.103","comment":"https://x.com/drb_ra/status/1965083550958715052","timestamp":"1757347402","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"cf60399c-0830-5d25-b704-85f02ef8b630","type":"url","category":"Network activity","to_ids":true,"value":"http://173.249.9.44:2961","comment":"https://x.com/drb_ra/status/1965083690339647515","timestamp":"1757347435","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"5e3ddb26-7763-50f3-883d-36b6339e5a5a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.249.9.44","comment":"https://x.com/drb_ra/status/1965083690339647515","timestamp":"1757347435","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"204aed3a-8f77-5d3d-b811-ec744db0b7b7","type":"url","category":"Network activity","to_ids":true,"value":"http://52.63.111.178:31022","comment":"https://x.com/drb_ra/status/1965083830643204375","timestamp":"1757347469","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"caefc2dd-aec9-5feb-9beb-c3e8bed2dc24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.63.111.178","comment":"https://x.com/drb_ra/status/1965083830643204375","timestamp":"1757347469","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"b7345b27-bcc5-586d-a998-5fab3f1a04f7","type":"url","category":"Network activity","to_ids":true,"value":"http://13.39.104.25:9779","comment":"https://x.com/drb_ra/status/1965083970737156597","timestamp":"1757347502","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"2119abdf-e440-5d52-b0a0-f74fbed137d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"13.39.104.25","comment":"https://x.com/drb_ra/status/1965083970737156597","timestamp":"1757347502","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f6611d37-666d-5b66-82bf-159ce0373013","type":"url","category":"Network activity","to_ids":true,"value":"http://16.50.237.232:790","comment":"https://x.com/drb_ra/status/1965084111372206225","timestamp":"1757347536","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"f6a1f763-3826-5c1a-85f3-146020d77ae4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.50.237.232","comment":"https://x.com/drb_ra/status/1965084111372206225","timestamp":"1757347536","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"8052456b-32b5-520a-b42f-bc8806d9dc38","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.225.157.146","comment":"https://x.com/drb_ra/status/1965084252036616423","timestamp":"1757347569","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a6cd964e-7308-5302-bccf-cbf87089b8d0","type":"url","category":"Network activity","to_ids":true,"value":"http://43.225.157.146:8808","comment":"https://x.com/drb_ra/status/1965084252036616423","timestamp":"1757347569","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"90b1ce3d-ef9f-5f76-9bee-3933c07fb481","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.104.214:8808","comment":"https://x.com/drb_ra/status/1965084392247996452","timestamp":"1757347603","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"a24a9d25-18f9-5139-be71-5535bb4136a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.104.214","comment":"https://x.com/drb_ra/status/1965084392247996452","timestamp":"1757347603","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"875e118e-04d7-52f6-918b-9a72c17a4b39","type":"url","category":"Network activity","to_ids":true,"value":"http://185.18.222.5:8848","comment":"https://x.com/drb_ra/status/1965084532727763390","timestamp":"1757347636","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"ff915efa-4943-5dca-ac64-96382766883a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.18.222.5","comment":"https://x.com/drb_ra/status/1965084532727763390","timestamp":"1757347636","distribution":"5","Tag":[{"name":"Dcrat"},{"name":"C2"}]},{"uuid":"cb1beacd-dc7c-5642-84c7-4c0e9f1e6e4a","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.143.187:80","comment":"https://x.com/drb_ra/status/1965084673681547271","timestamp":"1757347670","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"561dfdec-c5a1-5271-9cbf-9b173fb089d3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.143.187","comment":"https://x.com/drb_ra/status/1965084673681547271","timestamp":"1757347670","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"254f58f5-0840-5d80-86ab-85b3e7b4bc97","type":"url","category":"Network activity","to_ids":true,"value":"http://90.48.210.177:7443","comment":"https://x.com/drb_ra/status/1965084814123692080","timestamp":"1757347703","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"807a4519-0f54-5c11-93d5-518c059a81d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"90.48.210.177","comment":"https://x.com/drb_ra/status/1965084814123692080","timestamp":"1757347703","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"a8ac3317-8318-5c09-a233-03e4c5afb682","type":"url","category":"Network activity","to_ids":true,"value":"http://80.78.18.25:443","comment":"https://x.com/drb_ra/status/1965084954574078132","timestamp":"1757347737","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"a8f22617-f727-521d-95e1-ad34b9e89191","type":"ip-dst","category":"Network activity","to_ids":true,"value":"80.78.18.25","comment":"https://x.com/drb_ra/status/1965084954574078132","timestamp":"1757347737","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"80a4ab5b-603d-5218-bae2-97dde6952d19","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.82.81.162","comment":"https://x.com/drb_ra/status/1965085237526102040","timestamp":"1757347804","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"62470f50-60d9-5d73-856e-ee2ddfee07b8","type":"url","category":"Network activity","to_ids":true,"value":"http://154.82.81.162:8080","comment":"https://x.com/drb_ra/status/1965085237526102040","timestamp":"1757347804","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a53264f7-e927-5136-9c86-f7be0c233a9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.175.102.148","comment":"https://x.com/drb_ra/status/1965085379301912833","timestamp":"1757347838","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2d20f0de-f3dc-55db-819c-bf50228b7844","type":"url","category":"Network activity","to_ids":true,"value":"http://137.175.102.148:443","comment":"https://x.com/drb_ra/status/1965085379301912833","timestamp":"1757347838","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d5358bfe-207e-53e2-835f-69afdac6527e","type":"url","category":"Network activity","to_ids":true,"value":"https://10.0.0.4/updates.rss","comment":"https://x.com/drb_ra/status/1965085521761509703","timestamp":"1757347872","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"89acd802-a6c8-52a8-8d02-204892e63f9c","type":"url","category":"Network activity","to_ids":true,"value":"http://20.151.73.4:1234","comment":"https://x.com/drb_ra/status/1965085521761509703","timestamp":"1757347872","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7403870d-db03-53ed-9203-b185ab193006","type":"ip-dst","category":"Network activity","to_ids":true,"value":"20.151.73.4","comment":"https://x.com/drb_ra/status/1965085521761509703","timestamp":"1757347872","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b0334da5-d322-5ae6-be57-351f8b0e589e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"10.0.0.4","comment":"https://x.com/drb_ra/status/1965085521761509703","timestamp":"1757347872","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"50a301c3-8c33-5f25-b18b-84eeeecde6cc","type":"url","category":"Network activity","to_ids":true,"value":"https://20.151.73.4/cm","comment":"https://x.com/drb_ra/status/1965085521761509703","timestamp":"1757347872","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"611e8648-e7db-5679-a117-e9ae2bafdbb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.139.65.13","comment":"https://x.com/drb_ra/status/1965085663004635259","timestamp":"1757347906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1965085663004635259","timestamp":"1757347906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"11a04fb6-4ce3-53a9-a19f-b45139370cc1","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:5556","comment":"https://x.com/drb_ra/status/1965085663004635259","timestamp":"1757347906","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ea381bdb-cc1b-5675-84db-f9c3381d7eb2","type":"url","category":"Network activity","to_ids":true,"value":"http://104.233.252.10:81","comment":"https://x.com/drb_ra/status/1965085805720064336","timestamp":"1757347940","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b04fc59c-f796-5878-adeb-d8f57339cd37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.233.252.10","comment":"https://x.com/drb_ra/status/1965085805720064336","timestamp":"1757347940","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"9206bf25-8755-595d-842c-8aa7ca34ac5b","type":"url","category":"Network activity","to_ids":true,"value":"https://104.233.252.10/admin/Recursive/Server/Education/API/CXUT4KH22B1M","comment":"https://x.com/drb_ra/status/1965085805720064336","timestamp":"1757347940","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7760e4dc-c481-5ab6-993c-f0d1278558d1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.138.223.155:8443","comment":"https://x.com/drb_ra/status/1965085945851674845","timestamp":"1757347973","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"026fabac-0773-54f8-82fa-4cafaac249c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.138.223.155","comment":"https://x.com/drb_ra/status/1965085945851674845","timestamp":"1757347973","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3f71cec3-36d8-5175-a40d-bc85108fc1c2","type":"url","category":"Network activity","to_ids":true,"value":"http://3.101.190.245:443","comment":"https://x.com/drb_ra/status/1965086597654958210","timestamp":"1757348129","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"56e2b083-0853-5601-a5c1-34c00d946c35","type":"url","category":"Network activity","to_ids":true,"value":"https://3.94.159.32/ga.js","comment":"https://x.com/drb_ra/status/1965086597654958210","timestamp":"1757348129","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"43cc8f8b-f171-574d-86e4-f4367dd3c4c0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.126.144.111","comment":"https://x.com/drb_ra/status/1965086739384639774","timestamp":"1757348162","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0b0ba6b0-0115-54de-89a0-c3abd744d055","type":"url","category":"Network activity","to_ids":true,"value":"http://101.126.144.111:80","comment":"https://x.com/drb_ra/status/1965086739384639774","timestamp":"1757348162","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ea3bc363-bc8b-5402-8446-4a42ecf8acb5","type":"domain","category":"Network activity","to_ids":true,"value":"test111-1302872009.cos.ap-shanghai.myqcloud.com.eo.dnse2.com","comment":"https://x.com/drb_ra/status/1965086739384639774","timestamp":"1757348162","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f1f8afc7-eea6-5bbb-815f-3224989f1138","type":"url","category":"Network activity","to_ids":true,"value":"https://test111-1302872009.cos.ap-shanghai.myqcloud.com.eo.dnse2.com/j.ad","comment":"https://x.com/drb_ra/status/1965086739384639774","timestamp":"1757348162","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fc2bc059-53b9-53a8-9d7a-fc31e39bc533","type":"domain","category":"Network activity","to_ids":true,"value":"accountrecheck.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"12b4befd-0f7f-5067-9633-4118e636af4b","type":"url","category":"Network activity","to_ids":true,"value":"http://27.102.137.214","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"2761ebf5-836a-5e86-9274-6761cd3476dc","type":"url","category":"Network activity","to_ids":true,"value":"http://accountrecheck.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"5a7df148-cd28-5e54-acf5-9665574aeff3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.102.137.214","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"b236f443-3f37-5465-be9c-79cb4c572ca9","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.accountrecheck.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"6be4fd04-7144-5af0-ba19-c9065c5c22d1","type":"domain","category":"Network activity","to_ids":true,"value":"nid.accountrecheck.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"7699df6c-bd4d-5f36-b141-24dcc6e57804","type":"domain","category":"Network activity","to_ids":true,"value":"google.onlinegdrive.kro.kr","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"7edaec4e-d742-5674-b247-55e67ed92239","type":"domain","category":"Network activity","to_ids":true,"value":"google.secureverification.kro.kr","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"cfe69812-b0b0-545c-b01e-69be665557a0","type":"url","category":"Network activity","to_ids":true,"value":"http://google.secureverification.kro.kr","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"b6a4cd87-7897-5e56-bd4c-8a6cb4295143","type":"domain","category":"Network activity","to_ids":true,"value":"account-v3sign.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"06a0750c-2cfd-5dab-ae55-51e8cafc6b53","type":"url","category":"Network activity","to_ids":true,"value":"http://account-v3sign.server-on.net","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"9bae9a98-1737-547f-be83-b1fbdea83005","type":"url","category":"Network activity","to_ids":true,"value":"http://google.onlinegdrive.kro.kr","comment":"https://x.com/phatomcandle/status/1965112919160660086","timestamp":"1757354404","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"},{"name":"Kimsuky"}]},{"uuid":"1d678a6e-52fe-52a9-b533-26ee007f707e","type":"url","category":"Network activity","to_ids":true,"value":"https://logon-posteo-webmail-anmeldung-oauth2onepass-asfasfsafsafa.weebly.com","comment":"https://x.com/urldna_bot/status/1965112931474907536","timestamp":"1757354407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e9c3508c-97d0-59fd-9011-7aa784d207a9","type":"domain","category":"Network activity","to_ids":true,"value":"logon-posteo-webmail-anmeldung-oauth2onepass-asfasfsafsafa.weebly.com","comment":"https://x.com/urldna_bot/status/1965112931474907536","timestamp":"1757354407","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"88c16bf1-9637-57ee-b901-3e33de35e615","type":"url","category":"Network activity","to_ids":true,"value":"http://64.52.80.101:7443","comment":"https://x.com/drb_ra/status/1965124448669126976","timestamp":"1757357153","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"5bb9063c-5087-51aa-85df-5b52009f90ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.52.80.101","comment":"https://x.com/drb_ra/status/1965124448669126976","timestamp":"1757357153","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f5f98cd2-9bc2-58b7-8afc-85cc7f861dff","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.44.225.147","comment":"https://x.com/drb_ra/status/1965124587307573491","timestamp":"1757357186","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"1b8b6f25-bc97-5aba-8a96-c09ee0f43db7","type":"url","category":"Network activity","to_ids":true,"value":"http://93.44.225.147:443","comment":"https://x.com/drb_ra/status/1965124587307573491","timestamp":"1757357186","distribution":"5","Tag":[{"name":"C2"},{"name":"Sliver"}]},{"uuid":"dbee99fd-0445-57af-b2f1-84681693b778","type":"url","category":"Network activity","to_ids":true,"value":"https://files.catbox.moe/9tl0p1.dll","comment":"https://x.com/smica83/status/1965124616319631409","timestamp":"1757357193","distribution":"5"},{"uuid":"2017e299-6beb-5602-90bb-2df98a6c16b4","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.60.83:25","comment":"https://x.com/drb_ra/status/1965125236267122862","timestamp":"1757357341","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"ca71db2e-414b-5562-9246-117783ebed29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.60.83","comment":"https://x.com/drb_ra/status/1965125236267122862","timestamp":"1757357341","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0eeb7b75-6406-5cba-8a3d-b663e2637e0d","type":"url","category":"Network activity","to_ids":true,"value":"http://34.244.226.146:80","comment":"https://x.com/drb_ra/status/1965125375975153911","timestamp":"1757357374","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"fdd64b59-0bd0-5e04-95db-bbffdb1ccb51","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.244.226.146","comment":"https://x.com/drb_ra/status/1965125375975153911","timestamp":"1757357374","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"612346db-ff84-5fa1-90b7-d3315e87f6af","type":"url","category":"Network activity","to_ids":true,"value":"http://104.248.84.169:587","comment":"https://x.com/drb_ra/status/1965125516580860183","timestamp":"1757357408","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"44b7cbe4-eb0f-57f1-b2ff-6bbd20b4d34d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.248.84.169:465","comment":"https://x.com/drb_ra/status/1965125660982317286","timestamp":"1757357442","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"54c0e9a7-d1e5-57a7-a974-36bc44dcdc17","type":"url","category":"Network activity","to_ids":true,"value":"http://104.248.84.169:80","comment":"https://x.com/drb_ra/status/1965125800933605461","timestamp":"1757357475","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"f9822f1e-5300-5739-8bac-9e574aec6cbd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.248.84.169","comment":"https://x.com/drb_ra/status/1965125941954576853","timestamp":"1757357509","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"d2670ec1-7f25-57a5-8817-d41da196456c","type":"url","category":"Network activity","to_ids":true,"value":"http://104.248.84.169:25","comment":"https://x.com/drb_ra/status/1965125941954576853","timestamp":"1757357509","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5ec3f8c0-ff5c-5724-a9df-537bf77925fc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.130.25.202","comment":"https://x.com/drb_ra/status/1965126080710517192","timestamp":"1757357542","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"1b6f6daa-9d1b-5542-9003-73159e3faac1","type":"url","category":"Network activity","to_ids":true,"value":"http://108.130.25.202:80","comment":"https://x.com/drb_ra/status/1965126080710517192","timestamp":"1757357542","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"5274ba97-b776-53a9-aa6a-d972e49e4d5e","type":"url","category":"Network activity","to_ids":true,"value":"http://162.19.246.238:25","comment":"https://x.com/drb_ra/status/1965126219806249100","timestamp":"1757357575","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"32d264b2-f9b4-5705-b16f-f3e625abb394","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.19.246.238","comment":"https://x.com/drb_ra/status/1965126219806249100","timestamp":"1757357575","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"0d978194-031e-5c82-93fa-dd021ab51665","type":"url","category":"Network activity","to_ids":true,"value":"http://81.69.184.180:8081","comment":"https://x.com/drb_ra/status/1965126359409369128","timestamp":"1757357609","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"c413ffb7-b2db-5da4-b853-de6f7a36ddca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"81.69.184.180","comment":"https://x.com/drb_ra/status/1965126359409369128","timestamp":"1757357609","distribution":"5","Tag":[{"name":"C2"},{"name":"Interactsh"}]},{"uuid":"92d93525-8941-5af6-b915-3647f171697e","type":"url","category":"Network activity","to_ids":true,"value":"http://69.157.7.180:2222","comment":"https://x.com/drb_ra/status/1965126500073734197","timestamp":"1757357642","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"4a92e795-2434-566a-9015-5b564916aada","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.157.7.180","comment":"https://x.com/drb_ra/status/1965126500073734197","timestamp":"1757357642","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"c1338a02-a5ae-5b48-a5df-114bcf6f0b19","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.161.19:443","comment":"https://x.com/drb_ra/status/1965126640100647071","timestamp":"1757357675","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"7e06b4c9-7595-56b2-beaa-b987c8f11a4c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.161.19","comment":"https://x.com/drb_ra/status/1965126640100647071","timestamp":"1757357675","distribution":"5","Tag":[{"name":"C2"},{"name":"Qakbot"}]},{"uuid":"2371191a-ada3-53f4-990e-31d4d5e4be5a","type":"url","category":"Network activity","to_ids":true,"value":"http://18.202.166.12:445","comment":"https://x.com/drb_ra/status/1965126779959750845","timestamp":"1757357709","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7a837927-3247-512a-9355-4cf9d983a0a3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.202.166.12","comment":"https://x.com/drb_ra/status/1965126779959750845","timestamp":"1757357709","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9a255bf8-ff72-5a16-88e6-ae47117053d4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.60.217.35","comment":"https://x.com/drb_ra/status/1965126919508427087","timestamp":"1757357742","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"7e9e5e2d-b22b-5309-8f57-5a4adcf6d0c2","type":"url","category":"Network activity","to_ids":true,"value":"http://38.60.217.35:443","comment":"https://x.com/drb_ra/status/1965126919508427087","timestamp":"1757357742","distribution":"5","Tag":[{"name":"C2"},{"name":"Havoc"}]},{"uuid":"52425228-2912-5b3a-b9c2-9b7428fd1c02","type":"url","category":"Network activity","to_ids":true,"value":"http://90.156.225.238:443","comment":"https://x.com/drb_ra/status/1965127063289167900","timestamp":"1757357776","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"93695c2b-516d-55bb-85b5-e8bc2aa88015","type":"ip-dst","category":"Network activity","to_ids":true,"value":"90.156.225.238","comment":"https://x.com/drb_ra/status/1965127063289167900","timestamp":"1757357776","distribution":"5","Tag":[{"name":"C2"},{"name":"Bianlian"}]},{"uuid":"4db7f6ad-f5a2-58d7-8d0a-2f871e7b28fa","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.94.17:443","comment":"https://x.com/drb_ra/status/1965127203773096318","timestamp":"1757357810","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"2fb45498-4657-5aee-a3aa-68b1926891dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.94.17","comment":"https://x.com/drb_ra/status/1965127203773096318","timestamp":"1757357810","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"3dbf113e-2bcd-504a-b38a-ad8f739a4bd8","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.94.3:443","comment":"https://x.com/drb_ra/status/1965127343586078895","timestamp":"1757357843","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"014309b4-cec0-5025-8752-e42b12cf131f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.94.3","comment":"https://x.com/drb_ra/status/1965127343586078895","timestamp":"1757357843","distribution":"5","Tag":[{"name":"C2"},{"name":"Deimos"}]},{"uuid":"7b8b5c70-64a9-59a2-952e-3204164183d0","type":"url","category":"Network activity","to_ids":true,"value":"http://18.184.8.83:7443","comment":"https://x.com/drb_ra/status/1965127483235389853","timestamp":"1757357876","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"f79343f0-99fa-5062-af14-defb311ae202","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.184.8.83","comment":"https://x.com/drb_ra/status/1965127483235389853","timestamp":"1757357876","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"70484a75-88f9-5acf-92e5-6cacb06f0ef2","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.78.105:7443","comment":"https://x.com/drb_ra/status/1965127623102861759","timestamp":"1757357910","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"463be87e-d806-5c12-ae82-72299042cde0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.78.105","comment":"https://x.com/drb_ra/status/1965127623102861759","timestamp":"1757357910","distribution":"5","Tag":[{"name":"C2"},{"name":"Mythic"}]},{"uuid":"571cb80d-c5f7-580d-8a4f-65b102f4fba7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.203.75.116","comment":"https://x.com/drb_ra/status/1965128272154689569","timestamp":"1757358065","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"69ac2af8-95d9-5f13-bea8-aeace193b196","type":"url","category":"Network activity","to_ids":true,"value":"http://34.203.75.116:5000","comment":"https://x.com/drb_ra/status/1965128272154689569","timestamp":"1757358065","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1fa89403-8611-5b11-8777-759cd9ca4d60","type":"url","category":"Network activity","to_ids":true,"value":"http://91.207.183.197:11601","comment":"https://x.com/drb_ra/status/1965128412613538137","timestamp":"1757358098","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1c8d7ad2-d37d-5c38-b299-f7a9d2d16d96","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.207.183.197","comment":"https://x.com/drb_ra/status/1965128412613538137","timestamp":"1757358098","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7f21409c-0532-53cf-a394-ec63f4aa6425","type":"url","category":"Network activity","to_ids":true,"value":"http://198.135.51.150:2404","comment":"https://x.com/drb_ra/status/1965128553487560897","timestamp":"1757358132","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"23895dae-c4ed-509b-ab06-0f05c7f3f3d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.135.51.150","comment":"https://x.com/drb_ra/status/1965128553487560897","timestamp":"1757358132","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"84b1a82f-ed39-5ca4-96e3-d53ebb0a5c1d","type":"url","category":"Network activity","to_ids":true,"value":"http://103.60.15.107:2005","comment":"https://x.com/drb_ra/status/1965128693006958856","timestamp":"1757358165","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"050594c4-a598-52d2-b342-ba0a543b572f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.60.15.107","comment":"https://x.com/drb_ra/status/1965128693006958856","timestamp":"1757358165","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"08f33bba-a51e-5f24-a519-86656ac6d226","type":"url","category":"Network activity","to_ids":true,"value":"http://86.54.42.38:2404","comment":"https://x.com/drb_ra/status/1965128832824025226","timestamp":"1757358198","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"69cd0490-4e71-57b7-80c4-645eba1a8577","type":"ip-dst","category":"Network activity","to_ids":true,"value":"86.54.42.38","comment":"https://x.com/drb_ra/status/1965128832824025226","timestamp":"1757358198","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8566e9c2-1651-5e14-af5b-bf711d1adc24","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.211.70.100","comment":"https://x.com/drb_ra/status/1965128972720898377","timestamp":"1757358232","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7893d041-3d08-5621-b4e4-159002f1186f","type":"url","category":"Network activity","to_ids":true,"value":"http://173.211.70.100:8443","comment":"https://x.com/drb_ra/status/1965128972720898377","timestamp":"1757358232","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"49afb147-8764-5a83-821f-6c2cc7587eef","type":"url","category":"Network activity","to_ids":true,"value":"http://162.33.179.177:8080","comment":"https://x.com/drb_ra/status/1965129112785469863","timestamp":"1757358265","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d36ed65e-f012-5a4a-a562-718712249930","type":"ip-dst","category":"Network activity","to_ids":true,"value":"162.33.179.177","comment":"https://x.com/drb_ra/status/1965129112785469863","timestamp":"1757358265","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"5ce1c12f-205f-56d4-9baa-32960411a6fe","type":"url","category":"Network activity","to_ids":true,"value":"http://179.95.203.166:9990","comment":"https://x.com/drb_ra/status/1965129254120870306","timestamp":"1757358299","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"472235c8-8370-55ef-9338-61f130f4df1a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.95.203.166","comment":"https://x.com/drb_ra/status/1965129254120870306","timestamp":"1757358299","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"dc904d63-cd76-55c7-a603-14d425f0ab2c","type":"url","category":"Network activity","to_ids":true,"value":"http://3.249.47.225:80","comment":"https://x.com/drb_ra/status/1965129533931286844","timestamp":"1757358365","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"a10012fb-c48f-5043-a484-cce3e4686dad","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.12.48","comment":"https://x.com/SpamAuditor/status/1965134026311958710","timestamp":"1757359436","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"49e9be39-65c3-579b-92a2-a7b2fc18146c","type":"domain","category":"Network activity","to_ids":true,"value":"signon-gb-mail-authusr1onepass-dmmetn1wltkzgi.weebly.com","comment":"https://x.com/urldna_bot/status/1965143130522436044","timestamp":"1757361607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f2cd9c03-285c-5817-8d1e-b49f5c5012cc","type":"url","category":"Network activity","to_ids":true,"value":"https://signon-gb-mail-authusr1onepass-dmmetn1wltkzgi.weebly.com","comment":"https://x.com/urldna_bot/status/1965143130522436044","timestamp":"1757361607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5a72702d-98ef-590e-a1ca-3b69d4927066","type":"domain","category":"Network activity","to_ids":true,"value":"emprotel.net.bo","comment":"https://x.com/1ZRR4H/status/1965148796662546794","timestamp":"1757362958","distribution":"5"},{"uuid":"82ec0493-8ebb-5450-9548-46e6406c280b","type":"url","category":"Network activity","to_ids":true,"value":"http://emprotel.net.bo","comment":"https://x.com/1ZRR4H/status/1965148796662546794","timestamp":"1757362958","distribution":"5"},{"uuid":"85ab1459-65e1-5978-a79c-5b22319ddf68","type":"url","category":"Network activity","to_ids":true,"value":"http://ongmanibeimeihong.microsolt.org","comment":"https://x.com/1ZRR4H/status/1965148827754877438","timestamp":"1757362965","distribution":"5"},{"uuid":"44fe1621-b667-5014-9b5e-a122677d9369","type":"domain","category":"Network activity","to_ids":true,"value":"ongmanibeimeihong.microsolt.org","comment":"https://x.com/1ZRR4H/status/1965148827754877438","timestamp":"1757362965","distribution":"5"},{"uuid":"e25de368-f2b3-538f-9ab7-7654d8743589","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/ProcessusT/Venoma/tree/main","comment":"https://x.com/skocherhan/status/1965154068327981364","timestamp":"1757364215","distribution":"5","Tag":[{"name":"malware"},{"name":"CobaltStrike"}]},{"uuid":"5e4cbde3-4033-5958-8bbd-0aae28c9a4a4","type":"url","category":"Network activity","to_ids":true,"value":"http://45.77.135.88:50100","comment":"https://x.com/drb_ra/status/1965158130372989232","timestamp":"1757365183","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7ca188c4-ce65-59dd-a203-ae718fbd9fbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.77.135.88","comment":"https://x.com/drb_ra/status/1965158130372989232","timestamp":"1757365183","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"1d0436a1-8bb9-58e2-803f-42306df10acd","type":"url","category":"Network activity","to_ids":true,"value":"http://23.94.95.185","comment":"https://x.com/threatquery/status/1965158211192766625","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"2fbefdda-df62-5465-8bd7-cc0706a03d14","type":"url","category":"Network activity","to_ids":true,"value":"http://143.244.214.49","comment":"https://x.com/threatquery/status/1965158214724411421","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"6fc24fcd-4ab7-5200-84f0-40920a8ff1f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.244.214.49","comment":"https://x.com/threatquery/status/1965158214724411421","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"0fadd853-3f64-5415-bf64-9901338b40c5","type":"url","category":"Network activity","to_ids":true,"value":"http://222.118.241.116","comment":"https://x.com/threatquery/status/1965158212904075763","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"83385505-8dca-5378-b89f-3690aaed6ce0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"222.118.241.116","comment":"https://x.com/threatquery/status/1965158212904075763","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"96e3ee58-52a9-5997-a13e-222ae7b8e7df","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.94.95.185","comment":"https://x.com/threatquery/status/1965158211192766625","timestamp":"1757365203","distribution":"5","Tag":[{"name":"malware"},{"name":"C2"}]},{"uuid":"b3658622-69f8-57a7-9cd5-d84e748e5586","type":"sha256","category":"Payload delivery","to_ids":true,"value":"2b099d436267dc35c92a1409eb35cf74b3b2f58c34f30fc7ab3adbc4b7a44d49","comment":"https://x.com/malwrhunterteam/status/1965166259273957710","timestamp":"1757367121","distribution":"5"},{"uuid":"ac75d3e8-a3e7-523f-96fc-75b3d339047c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5907944373d327917b8bbac448b56548206c30da715d2a400318dda0a46906a8","comment":"https://x.com/malwrhunterteam/status/1965167752798474432","timestamp":"1757367477","distribution":"5"},{"uuid":"2ded8971-f715-567d-a511-14c0ddd34d45","type":"domain","category":"Network activity","to_ids":true,"value":"securechatchannel.com","comment":"https://x.com/malwrhunterteam/status/1965167752798474432","timestamp":"1757367477","distribution":"5"},{"uuid":"16e34624-1e5f-5867-a76f-e938d83f8779","type":"url","category":"Network activity","to_ids":true,"value":"https://securechatchannel.com/gxL5EumWANH46T3tjskyFB/krm.exe","comment":"https://x.com/malwrhunterteam/status/1965167752798474432","timestamp":"1757367477","distribution":"5"},{"uuid":"e37eccfd-8405-5ff6-94a8-b5bb16583a03","type":"domain","category":"Network activity","to_ids":true,"value":"ucacue-ec.weebly.com","comment":"https://x.com/urldna_bot/status/1965173330664718805","timestamp":"1757368807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"aff0c1ac-818c-589a-8a93-dac2a7ff4a4e","type":"url","category":"Network activity","to_ids":true,"value":"https://ucacue-ec.weebly.com","comment":"https://x.com/urldna_bot/status/1965173330664718805","timestamp":"1757368807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cfd9da8b-372b-5589-a027-b01d3c03ef93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.241.227.83","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"fdf5aa3d-12db-5318-b591-c0b530e281d5","type":"url","category":"Network activity","to_ids":true,"value":"http://107.178.110.167","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"d45915ca-12a8-5642-a734-3cfb20413288","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.178.110.167","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"1cc834f4-0985-5612-9153-867e8074af76","type":"url","category":"Network activity","to_ids":true,"value":"http://logs.quickdocshare.com","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"3adaed33-75f2-5729-b7ed-fe04aba83a30","type":"domain","category":"Network activity","to_ids":true,"value":"logs.quickdocshare.com","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"3dfefd26-cc31-55ad-9586-a2bfa6360a5e","type":"url","category":"Network activity","to_ids":true,"value":"http://150.241.227.83","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"7d0a0e97-c7ab-5319-bd44-a05792759df6","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c937f0d432d995264566baf13c5512a590c72f638f1a0967c57fbe8e1bc75d92","comment":"https://x.com/malwrhunterteam/status/1965174199619912102","timestamp":"1757369015","distribution":"5"},{"uuid":"2d6f434b-ab3c-5c40-8015-f301560dc682","type":"url","category":"Network activity","to_ids":true,"value":"http://drivfixer.sh","comment":"https://x.com/ShadowChasing1/status/1965183490976350695","timestamp":"1757371230","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"08792dab-a1c6-585b-a45b-32b09a047296","type":"domain","category":"Network activity","to_ids":true,"value":"drivfixer.sh","comment":"https://x.com/ShadowChasing1/status/1965183490976350695","timestamp":"1757371230","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"fadbd033-f8d6-5ede-91f5-62ecb9311dc6","type":"domain","category":"Network activity","to_ids":true,"value":"avalabs-digital.store","comment":"https://x.com/ShadowChasing1/status/1965183490976350695","timestamp":"1757371230","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"eb9fc3b6-78a7-5af8-8c72-8db46fabcfcf","type":"url","category":"Network activity","to_ids":true,"value":"http://avalabs-digital.store","comment":"https://x.com/ShadowChasing1/status/1965183490976350695","timestamp":"1757371230","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"9bb3c1ea-11bf-55bb-8f62-1defc6a61c8a","type":"url","category":"Network activity","to_ids":true,"value":"http://154.64.254.216:8995","comment":"https://x.com/drb_ra/status/1965185715773612145","timestamp":"1757371760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f619ac3c-d992-561d-9c24-19e4b4c94354","type":"url","category":"Network activity","to_ids":true,"value":"https://154.64.254.216/pixel.gif","comment":"https://x.com/drb_ra/status/1965185715773612145","timestamp":"1757371760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"fb122715-1ca0-5ac4-a4ec-7b8e9620fee3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.64.254.216","comment":"https://x.com/drb_ra/status/1965185715773612145","timestamp":"1757371760","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e6eaf62d-5058-55ed-afb8-da1411fe7184","type":"domain","category":"Network activity","to_ids":true,"value":"nmbt-onliwebsverify.weebly.com","comment":"https://x.com/urldna_bot/status/1965203531079528849","timestamp":"1757376008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d12cb1eb-d624-5419-9609-9f7ef2c2a652","type":"url","category":"Network activity","to_ids":true,"value":"https://nmbt-onliwebsverify.weebly.com","comment":"https://x.com/urldna_bot/status/1965203531079528849","timestamp":"1757376008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7a53ba36-2662-5ece-9817-8fcc162408fe","type":"domain","category":"Network activity","to_ids":true,"value":"quadreous.ckohlvv.cn","comment":"https://x.com/catnap707/status/1965204127895749101","timestamp":"1757376150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3595db22-7131-506f-ab6d-0ac8490f4600","type":"url","category":"Network activity","to_ids":true,"value":"http://quadreous.ckohlvv.cn/gvIY2S/","comment":"https://x.com/catnap707/status/1965204127895749101","timestamp":"1757376150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff30a861-baed-5519-bb89-a961fd54f8a1","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.179.163","comment":"https://x.com/catnap707/status/1965204127895749101","timestamp":"1757376150","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6aba8d00-6250-5d5a-ae4d-17de35ee70c2","type":"domain","category":"Network activity","to_ids":true,"value":"dpaste.org","comment":"https://x.com/1ZRR4H/status/1965218219616350544","timestamp":"1757379510","distribution":"5"},{"uuid":"95868555-2947-5add-8469-7c2aee65d1e7","type":"url","category":"Network activity","to_ids":true,"value":"https://dpaste.org/91oib/raw","comment":"https://x.com/1ZRR4H/status/1965218219616350544","timestamp":"1757379510","distribution":"5"},{"uuid":"de0bdf50-b359-5607-afcc-2bdab3cb6923","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.156.139.48","comment":"https://x.com/1ZRR4H/status/1965218219616350544","timestamp":"1757379510","distribution":"5"},{"uuid":"05160c17-b6fb-5433-babd-09efff0c51c7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"dd02a90046f25dc155dbf80cbfabea52453c9ea377eb14a0590217a55bbe2c03","comment":"https://x.com/1ZRR4H/status/1965218219616350544","timestamp":"1757379510","distribution":"5"},{"uuid":"d77ac51d-efb9-5454-907a-82bd49343d21","type":"url","category":"Network activity","to_ids":true,"value":"https://djfssoadlpaadl.weebly.com","comment":"https://x.com/urldna_bot/status/1965233725874037021","timestamp":"1757383207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cf53522e-049a-5df1-b042-5a97c6c7f60a","type":"domain","category":"Network activity","to_ids":true,"value":"djfssoadlpaadl.weebly.com","comment":"https://x.com/urldna_bot/status/1965233725874037021","timestamp":"1757383207","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ebcd002b-a33f-5092-93f0-3897b69def47","type":"domain","category":"Network activity","to_ids":true,"value":"jmw.lk","comment":"https://x.com/JAMESWT_WT/status/1965248267601789350","timestamp":"1757386674","distribution":"5"},{"uuid":"5cbf2ec8-03e6-5883-8eb4-68fd6840f3cc","type":"url","category":"Network activity","to_ids":true,"value":"http://jmw.lk","comment":"https://x.com/JAMESWT_WT/status/1965248267601789350","timestamp":"1757386674","distribution":"5"},{"uuid":"866e0b72-189b-53d2-acf2-a2aa5de82d3b","type":"domain","category":"Network activity","to_ids":true,"value":"it.gesybue11.ru","comment":"https://x.com/JAMESWT_WT/status/1965253811569819881","timestamp":"1757387995","distribution":"5"},{"uuid":"3cf2473e-76be-5fa2-88a1-68b2ed3a7225","type":"url","category":"Network activity","to_ids":true,"value":"https://it.gesybue11.ru/rost.google?t=pbbdntsl","comment":"https://x.com/JAMESWT_WT/status/1965253811569819881","timestamp":"1757387995","distribution":"5"},{"uuid":"f8684617-7fdf-55d6-862d-16825c87dd3c","type":"domain","category":"Network activity","to_ids":true,"value":"instaproapk.su","comment":"https://x.com/urldna_bot/status/1965263936871137697","timestamp":"1757390410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"69cea7f9-3059-5df7-9448-0ae3bc7be18d","type":"url","category":"Network activity","to_ids":true,"value":"https://instaproapk.su/om-instagram-download-apk/","comment":"https://x.com/urldna_bot/status/1965263936871137697","timestamp":"1757390410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a03ef09a-4f77-5a90-b301-b18a909eae79","type":"domain","category":"Network activity","to_ids":true,"value":"fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion","comment":"https://x.com/JAMESWT_WT/status/1965269289034023269","timestamp":"1757391686","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"73216c65-7d3c-5448-bb54-0993a2ea78be","type":"url","category":"Network activity","to_ids":true,"value":"http://fewcriet5rhoy66k6c4cyvb2pqrblxtx4mekj3s5l4jjt4t4kn4vheyd.onion","comment":"https://x.com/JAMESWT_WT/status/1965269289034023269","timestamp":"1757391686","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"5a72702d-98ef-590e-a1ca-3b69d4927066","type":"domain","category":"Network activity","to_ids":true,"value":"emprotel.net.bo","comment":"https://x.com/JAMESWT_WT/status/1965270291502039134","timestamp":"1757391925","distribution":"5"},{"uuid":"82ec0493-8ebb-5450-9548-46e6406c280b","type":"url","category":"Network activity","to_ids":true,"value":"http://emprotel.net.bo","comment":"https://x.com/JAMESWT_WT/status/1965270291502039134","timestamp":"1757391925","distribution":"5"},{"uuid":"eb9fc3b6-78a7-5af8-8c72-8db46fabcfcf","type":"url","category":"Network activity","to_ids":true,"value":"http://avalabs-digital.store","comment":"https://x.com/MichalKoczwara/status/1965275263748768076","timestamp":"1757393110","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"fadbd033-f8d6-5ede-91f5-62ecb9311dc6","type":"domain","category":"Network activity","to_ids":true,"value":"avalabs-digital.store","comment":"https://x.com/MichalKoczwara/status/1965275263748768076","timestamp":"1757393110","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"08792dab-a1c6-585b-a45b-32b09a047296","type":"domain","category":"Network activity","to_ids":true,"value":"drivfixer.sh","comment":"https://x.com/MichalKoczwara/status/1965275263748768076","timestamp":"1757393110","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"2d6f434b-ab3c-5c40-8015-f301560dc682","type":"url","category":"Network activity","to_ids":true,"value":"http://drivfixer.sh","comment":"https://x.com/MichalKoczwara/status/1965275263748768076","timestamp":"1757393110","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"fa368d37-9b19-5860-a691-823856e29f3c","type":"domain","category":"Network activity","to_ids":true,"value":"megalaco.online","comment":"https://x.com/suyog41/status/1965288168640639045","timestamp":"1757396187","distribution":"5"},{"uuid":"85aaab03-3526-54ef-8939-9fb0df021582","type":"url","category":"Network activity","to_ids":true,"value":"http://megalaco.online","comment":"https://x.com/suyog41/status/1965288168640639045","timestamp":"1757396187","distribution":"5"},{"uuid":"6753784b-e554-5e67-a75b-c64be4946082","type":"md5","category":"Payload delivery","to_ids":true,"value":"4bd6bb6791c7ec93f87d8d759f541aa6","comment":"https://x.com/suyog41/status/1965288168640639045","timestamp":"1757396187","distribution":"5"},{"uuid":"679add91-f1b0-53ff-95f3-d723bc5406ec","type":"domain","category":"Network activity","to_ids":true,"value":"nvgtws.web.app","comment":"https://x.com/urldna_bot/status/1965294124355010863","timestamp":"1757397607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ed540a94-f226-5403-949c-4e62f1b7e77f","type":"url","category":"Network activity","to_ids":true,"value":"https://nvgtws.web.app","comment":"https://x.com/urldna_bot/status/1965294124355010863","timestamp":"1757397607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"bfbe17b3-a58a-5b7e-b16d-401c8a9a6e46","type":"domain","category":"Network activity","to_ids":true,"value":"867599.com","comment":"https://x.com/masaomi346/status/1965301909633597657","timestamp":"1757399463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"468a5752-9410-57ce-b6df-a26b34083285","type":"url","category":"Network activity","to_ids":true,"value":"https://867599.com/bk-cgi-bin/ORIXLOGINP/","comment":"https://x.com/masaomi346/status/1965301909633597657","timestamp":"1757399463","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54052813-b030-5efb-8903-b60b2cf7cacc","type":"url","category":"Network activity","to_ids":true,"value":"http://45.154.98.48:7443","comment":"https://x.com/drb_ra/status/1965305710696432010","timestamp":"1757400369","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"a026e98a-0f7d-5e3c-9854-b024dfdc64cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.154.98.48","comment":"https://x.com/drb_ra/status/1965305710696432010","timestamp":"1757400369","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"08198888-7138-587f-a974-f77e177a9613","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.224.238.59","comment":"https://x.com/drb_ra/status/1965305850886848837","timestamp":"1757400403","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"cf7cee1f-f69c-5548-9f19-912372577bc7","type":"url","category":"Network activity","to_ids":true,"value":"http://197.224.238.59:7443","comment":"https://x.com/drb_ra/status/1965305850886848837","timestamp":"1757400403","distribution":"5","Tag":[{"name":"Mythic"},{"name":"C2"}]},{"uuid":"c09c4bdf-9659-5bbb-946c-04163ea84513","type":"url","category":"Network activity","to_ids":true,"value":"http://139.59.104.5:7443","comment":"https://x.com/drb_ra/status/1965305991626649602","timestamp":"1757400436","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"401c2158-32d8-506a-8233-381526edca0d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.59.104.5","comment":"https://x.com/drb_ra/status/1965305991626649602","timestamp":"1757400436","distribution":"5","Tag":[{"name":"Covenant"},{"name":"C2"}]},{"uuid":"faaf5910-8421-53c1-9dfe-771bd6601ca8","type":"url","category":"Network activity","to_ids":true,"value":"http://172.86.90.22:31337","comment":"https://x.com/drb_ra/status/1965306131338973537","timestamp":"1757400469","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"9e560d0a-c57d-5b51-b327-a9f3b73b3ca0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.86.90.22","comment":"https://x.com/drb_ra/status/1965306131338973537","timestamp":"1757400469","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"1ecd0dcd-8bfe-5742-afe9-85019d9e5cc1","type":"md5","category":"Payload delivery","to_ids":true,"value":"8D989ED59450840BF69D360795383CB5","comment":"https://x.com/siri_urz/status/1965306648953848277","timestamp":"1757400593","distribution":"5"},{"uuid":"98453b27-b204-57c1-85f5-91be8e4498e5","type":"url","category":"Network activity","to_ids":true,"value":"http://44.232.202.232:8080","comment":"https://x.com/drb_ra/status/1965306785654604119","timestamp":"1757400625","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"38263ed7-0eac-5fab-b24c-08f71d08cfb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"44.232.202.232","comment":"https://x.com/drb_ra/status/1965306785654604119","timestamp":"1757400625","distribution":"5","Tag":[{"name":"Hak5_Cloud_C2"},{"name":"C2"}]},{"uuid":"09addc33-0cbb-5ca7-b7ef-29d0743239f8","type":"url","category":"Network activity","to_ids":true,"value":"http://91.151.89.128:80","comment":"https://x.com/drb_ra/status/1965306926545448968","timestamp":"1757400659","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"48b46d28-0b93-5027-b70c-0ffa1eff62eb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.151.89.128","comment":"https://x.com/drb_ra/status/1965306926545448968","timestamp":"1757400659","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1bd64719-6bc8-506b-8515-4d5c76124f2d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.53.140","comment":"https://x.com/drb_ra/status/1965307067268562971","timestamp":"1757400693","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"9e8cd43d-47c3-52d0-ac6b-708cbae2ffe4","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.53.140:2407","comment":"https://x.com/drb_ra/status/1965307067268562971","timestamp":"1757400693","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c65eb02e-226a-5cc4-9b93-dc2ac001b53d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"16.51.152.223","comment":"https://x.com/drb_ra/status/1965307206880084286","timestamp":"1757400726","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"a00926f9-bf57-5697-968e-4bc7bed22fc4","type":"url","category":"Network activity","to_ids":true,"value":"http://16.51.152.223:17811","comment":"https://x.com/drb_ra/status/1965307206880084286","timestamp":"1757400726","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"4e970dea-1244-5d30-b0e2-140b06553569","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.117.78.125","comment":"https://x.com/drb_ra/status/1965307346709860665","timestamp":"1757400759","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"fa963a22-bbf8-5d14-93a3-0040fca3474e","type":"url","category":"Network activity","to_ids":true,"value":"http://18.117.78.125:21214","comment":"https://x.com/drb_ra/status/1965307346709860665","timestamp":"1757400759","distribution":"5","Tag":[{"name":"NetSupportRAT"},{"name":"C2"}]},{"uuid":"485d4302-295c-5588-ab31-17e03f79e202","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.200:8090","comment":"https://x.com/drb_ra/status/1965307487814656066","timestamp":"1757400793","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"59352633-e892-54cc-8209-8ea27b37be12","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.200","comment":"https://x.com/drb_ra/status/1965307487814656066","timestamp":"1757400793","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"b06b5b1d-d4c7-51fe-93d9-32d497f95568","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.197:8090","comment":"https://x.com/drb_ra/status/1965307628894204311","timestamp":"1757400827","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"d3c76c31-da0b-580e-a289-e4c6ca1b4e79","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.197","comment":"https://x.com/drb_ra/status/1965307628894204311","timestamp":"1757400827","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"bb741f94-2348-5152-a302-7d8a2c2ae5cc","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.208.80:8090","comment":"https://x.com/drb_ra/status/1965307770091307334","timestamp":"1757400860","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"81972aad-1881-5138-9cc9-f1e8a3548e1b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.208.80","comment":"https://x.com/drb_ra/status/1965307770091307334","timestamp":"1757400860","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"6d2449f7-2a07-50ed-a239-e7511a17f0ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.198","comment":"https://x.com/drb_ra/status/1965307911682613613","timestamp":"1757400894","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"73e76d9f-b13d-57cf-ac43-33c21347b082","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.198:8090","comment":"https://x.com/drb_ra/status/1965307911682613613","timestamp":"1757400894","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9710d97a-b5ee-5988-8c64-1294f02ed831","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.202:8090","comment":"https://x.com/drb_ra/status/1965308052434997413","timestamp":"1757400928","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"2f9c0d4c-d439-510d-b871-e2e245158cd2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.202","comment":"https://x.com/drb_ra/status/1965308052434997413","timestamp":"1757400928","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"7fde545a-892e-5cad-9a25-6f6294fddf08","type":"md5","category":"Payload delivery","to_ids":true,"value":"59e1714f04f1bcd0676c57231005a4e7","comment":"https://x.com/suyog41/status/1965308088015356202","timestamp":"1757400936","distribution":"5"},{"uuid":"37c4f018-8f6f-54f9-8f13-4ab61b571512","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.210.203:8090","comment":"https://x.com/drb_ra/status/1965308192738701807","timestamp":"1757400961","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"3247d91d-e9cd-5c1c-9741-cc65700c8a30","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.210.203","comment":"https://x.com/drb_ra/status/1965308192738701807","timestamp":"1757400961","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"f58562e1-4edb-562d-ade4-6bb0108e523b","type":"url","category":"Network activity","to_ids":true,"value":"http://102.219.208.81:8090","comment":"https://x.com/drb_ra/status/1965308333054988584","timestamp":"1757400994","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"1e4a7801-db03-5f79-82ea-ba084a0286cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.219.208.81","comment":"https://x.com/drb_ra/status/1965308333054988584","timestamp":"1757400994","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"9e16ed7d-d459-5ea2-865b-fa24e192610a","type":"url","category":"Network activity","to_ids":true,"value":"http://179.13.4.196:8081","comment":"https://x.com/drb_ra/status/1965308473652248638","timestamp":"1757401028","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"79cf0458-7d29-5786-b310-0c40175a745f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"179.13.4.196","comment":"https://x.com/drb_ra/status/1965308473652248638","timestamp":"1757401028","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"C2"}]},{"uuid":"e0e2a6ef-4c83-54cb-b285-f039a73b25c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.227.215.220","comment":"https://x.com/drb_ra/status/1965308614945767617","timestamp":"1757401062","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"adf02685-936f-50b6-90b5-df78a06ceb7a","type":"url","category":"Network activity","to_ids":true,"value":"http://54.227.215.220:80","comment":"https://x.com/drb_ra/status/1965308614945767617","timestamp":"1757401062","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"b6c718eb-d484-5cb9-95ed-c929891410af","type":"url","category":"Network activity","to_ids":true,"value":"http://54.246.71.113:80","comment":"https://x.com/drb_ra/status/1965308755115172020","timestamp":"1757401095","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d73bd060-4322-5712-998e-f7a91efbd9e9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"54.246.71.113","comment":"https://x.com/drb_ra/status/1965308755115172020","timestamp":"1757401095","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"19673c71-4242-5ab5-932a-1ee661a66a18","type":"url","category":"Network activity","to_ids":true,"value":"http://34.251.108.189:80","comment":"https://x.com/drb_ra/status/1965308895351767151","timestamp":"1757401128","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"648dec7a-89d2-55e2-917a-3f05d3ffb856","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.251.108.189","comment":"https://x.com/drb_ra/status/1965308895351767151","timestamp":"1757401128","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"c2e1ec62-a376-5415-89fa-5550c755bcae","type":"url","category":"Network activity","to_ids":true,"value":"http://3.254.170.173:80","comment":"https://x.com/drb_ra/status/1965309035475087635","timestamp":"1757401162","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"88d86f8a-0ebe-5a31-91a6-54436a78f528","type":"url","category":"Network activity","to_ids":true,"value":"http://176.34.159.3:80","comment":"https://x.com/drb_ra/status/1965309174927294657","timestamp":"1757401195","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"d070aa56-a5f4-51d1-bb40-9d5b4eba1412","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.34.159.3","comment":"https://x.com/drb_ra/status/1965309174927294657","timestamp":"1757401195","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"8628068c-5796-5f01-b712-fc74ae540be9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.245.63.38","comment":"https://x.com/drb_ra/status/1965309315163849181","timestamp":"1757401229","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"96cdf6d3-7193-5d8e-a43e-1b2b64b787ae","type":"url","category":"Network activity","to_ids":true,"value":"http://34.245.63.38:80","comment":"https://x.com/drb_ra/status/1965309315163849181","timestamp":"1757401229","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"2989224c-b443-5b9f-a39f-72ddf4e4c72d","type":"url","category":"Network activity","to_ids":true,"value":"http://52.30.26.123:80","comment":"https://x.com/drb_ra/status/1965309462308421938","timestamp":"1757401264","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"3bd891a0-8ecc-5fe2-b4ad-a6be50c21387","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.30.26.123","comment":"https://x.com/drb_ra/status/1965309462308421938","timestamp":"1757401264","distribution":"5","Tag":[{"name":"Interactsh"},{"name":"C2"}]},{"uuid":"fe22d52e-1a88-5427-b77c-c9ba555b69c3","type":"url","category":"Network activity","to_ids":true,"value":"http://173.187.24.232:995","comment":"https://x.com/drb_ra/status/1965309602440077645","timestamp":"1757401297","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"8ee7fee2-37df-56d0-ba02-1348b597803c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"173.187.24.232","comment":"https://x.com/drb_ra/status/1965309602440077645","timestamp":"1757401297","distribution":"5","Tag":[{"name":"Qakbot"},{"name":"C2"}]},{"uuid":"46e8a82e-6c1f-506a-9df3-c49ec846724e","type":"url","category":"Network activity","to_ids":true,"value":"http://194.113.74.78:139","comment":"https://x.com/drb_ra/status/1965309744740282697","timestamp":"1757401331","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"fda6bfc6-14f5-5c04-ae39-2fdf8541b3ec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.113.74.78","comment":"https://x.com/drb_ra/status/1965309744740282697","timestamp":"1757401331","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"bd26e44e-ef86-5356-a4ba-021f0c9c0803","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.64.81:443","comment":"https://x.com/drb_ra/status/1965309883307397138","timestamp":"1757401364","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"cb4784a7-cf59-57aa-a64a-22920e2da3f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.64.81","comment":"https://x.com/drb_ra/status/1965309883307397138","timestamp":"1757401364","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"f9ae5dc1-9105-56f8-b260-1a79fe4e2905","type":"url","category":"Network activity","to_ids":true,"value":"http://148.178.80.62:443","comment":"https://x.com/drb_ra/status/1965310024013791711","timestamp":"1757401398","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"753bbe5c-d653-55fc-88a3-d1d58f968d29","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.178.80.62","comment":"https://x.com/drb_ra/status/1965310024013791711","timestamp":"1757401398","distribution":"5","Tag":[{"name":"Deimos"},{"name":"C2"}]},{"uuid":"c6524d3e-0c24-56e3-843b-524318c92b52","type":"url","category":"Network activity","to_ids":true,"value":"http://104.225.129.150","comment":"https://x.com/malwrhunterteam/status/1965312606878515542","timestamp":"1757402013","distribution":"5"},{"uuid":"db18f6ee-c289-56bb-9c48-67f70d28890f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.225.129.150","comment":"https://x.com/malwrhunterteam/status/1965312606878515542","timestamp":"1757402013","distribution":"5"},{"uuid":"f61028af-67ec-55c1-a5b7-ee08d6ebff50","type":"sha256","category":"Payload delivery","to_ids":true,"value":"f5219aee1dcb6104e9a819857a53c50e2805763dffee8b8fad9223c245ed2d7d","comment":"https://x.com/malwrhunterteam/status/1965312606878515542","timestamp":"1757402013","distribution":"5"},{"uuid":"55fc378d-b3b3-508f-8bcf-60b883e44764","type":"url","category":"Network activity","to_ids":true,"value":"http://1.95.135.26:8888","comment":"https://x.com/FalconFeedsio/status/1965313213974937975","timestamp":"1757402158","distribution":"5"},{"uuid":"11fd1ab3-e24f-53ad-ae57-d9f0748fce27","type":"url","category":"Network activity","to_ids":true,"value":"http://39.74.51.168:35229","comment":"https://x.com/FalconFeedsio/status/1965313213974937975","timestamp":"1757402158","distribution":"5"},{"uuid":"4dae9796-52df-55e3-b82e-cad85782b84a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"39.74.51.168","comment":"https://x.com/FalconFeedsio/status/1965313213974937975","timestamp":"1757402158","distribution":"5"},{"uuid":"e26440b7-376e-5aa7-bb09-99b9b910634f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.1.195.210","comment":"https://x.com/solostalking/status/1965313810832769121","timestamp":"1757402300","distribution":"5"},{"uuid":"1a2d114b-3939-57a8-ad30-c050b5317b0e","type":"sha256","category":"Payload delivery","to_ids":true,"value":"934185683e2294f063bcb60b883b7cd518a2ec468597441adfbadc679c0112c8","comment":"https://x.com/solostalking/status/1965313810832769121","timestamp":"1757402300","distribution":"5"},{"uuid":"698c0073-1c79-5ab4-9740-17640c1d2c86","type":"sha256","category":"Payload delivery","to_ids":true,"value":"bfd3fe4ff947e29d3d33bf36c54be271bfec5885378990b3799570b402ab38bd","comment":"https://x.com/solostalking/status/1965313810832769121","timestamp":"1757402300","distribution":"5"},{"uuid":"08c214a2-8cae-52fa-be79-b2447a3cf293","type":"url","category":"Network activity","to_ids":true,"value":"http://170.205.37.29","comment":"https://x.com/malwrhunterteam/status/1965314944695763052","timestamp":"1757402571","distribution":"5"},{"uuid":"33de7c56-60f7-5965-8cd5-1894c3bdc87c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.205.37.29","comment":"https://x.com/malwrhunterteam/status/1965314944695763052","timestamp":"1757402571","distribution":"5"},{"uuid":"577247aa-27ed-55fb-9b09-4a544447e61b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"69b040693bed49cf65b604a41588b08bb33d3cdd121f571be44b10006c38d53b","comment":"https://x.com/malwrhunterteam/status/1965314944695763052","timestamp":"1757402571","distribution":"5"},{"uuid":"f6e0cd2d-f40c-54b4-a478-14a90fd9f3ff","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9a60a8a0fb90e3ae3460d19e8b90c3ea502873de1d24ecf29562954b19ed4fc5","comment":"https://x.com/malwrhunterteam/status/1965319167592308860","timestamp":"1757403578","distribution":"5"},{"uuid":"bfea2026-f6e1-520b-810d-c0ad9d85ed40","type":"domain","category":"Network activity","to_ids":true,"value":"lactoxn.bet","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"ecd8483c-5c85-5d00-a5f8-762b5b1914d4","type":"url","category":"Network activity","to_ids":true,"value":"http://lactoxn.bet","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"c076ecf9-a848-56c2-a79a-f6436dc6f6af","type":"domain","category":"Network activity","to_ids":true,"value":"kennetk.bet","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"9a0d2133-66c8-50f3-abb1-9e964c9761b1","type":"url","category":"Network activity","to_ids":true,"value":"http://kennetk.bet","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"e3d89e5d-0619-55f3-a116-826417689d7a","type":"domain","category":"Network activity","to_ids":true,"value":"sec.b.xifuhalim.com","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"eef99a4d-fa3b-5b65-ad53-26eba5e45ce5","type":"url","category":"Network activity","to_ids":true,"value":"http://sec.b.xifuhalim.com","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"bab53469-3984-5cc3-9902-7a28c1be554d","type":"domain","category":"Network activity","to_ids":true,"value":"pow.t.xifuhalim.com","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"a02780a8-1f34-51c0-bcb4-720454bc5cd3","type":"url","category":"Network activity","to_ids":true,"value":"http://pow.t.xifuhalim.com","comment":"https://x.com/FalconFeedsio/status/1965319207635075545","timestamp":"1757403587","distribution":"5"},{"uuid":"1d42753c-9777-509a-8b14-5b8b97942356","type":"domain","category":"Network activity","to_ids":true,"value":"govermentcy.web.app","comment":"https://x.com/urldna_bot/status/1965324319396950066","timestamp":"1757404806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"ac439834-28e2-505c-af58-362af669fc9b","type":"url","category":"Network activity","to_ids":true,"value":"https://govermentcy.web.app","comment":"https://x.com/urldna_bot/status/1965324319396950066","timestamp":"1757404806","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"88cb7894-620e-5f6c-ad98-92081d8db313","type":"url","category":"Network activity","to_ids":true,"value":"http://147.45.177.39","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"047273c7-d4af-52a3-a48b-04410fc73a80","type":"domain","category":"Network activity","to_ids":true,"value":"documents.serveftp.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"693791e5-2c27-5ebc-bc07-8ea4d94e5389","type":"url","category":"Network activity","to_ids":true,"value":"http://documents.serveftp.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"e6ba4790-11d4-5378-8e3b-722199af5bb1","type":"domain","category":"Network activity","to_ids":true,"value":"document-open.serveftp.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"25a15cfe-4686-57ab-85f1-f2de22eae877","type":"url","category":"Network activity","to_ids":true,"value":"http://document-open.serveftp.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"8e97b7c2-d543-5a21-a8aa-ad59b19f0cb9","type":"domain","category":"Network activity","to_ids":true,"value":"conf-documents.servebeer.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"4420449f-f6b8-5c2d-bec8-978086722c7f","type":"url","category":"Network activity","to_ids":true,"value":"http://conf-documents.servebeer.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"cd4f6482-0e93-5488-b2c1-426b659e6a2f","type":"domain","category":"Network activity","to_ids":true,"value":"documets-write.servebeer.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"51ac4885-f726-5bbe-abfc-d45050238b47","type":"url","category":"Network activity","to_ids":true,"value":"http://documets-write.servebeer.com","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"1b36c7bb-f3f0-56e3-97fd-a9301dce4cbb","type":"domain","category":"Network activity","to_ids":true,"value":"document-send.myftp.org","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"c8a6b34f-f669-5fd4-8b62-7925059aef85","type":"url","category":"Network activity","to_ids":true,"value":"http://document-send.myftp.org","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"d6a88db1-65f2-5197-994c-1dadc94c5b64","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.45.177.39","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"0f617a9d-aa59-583e-810c-fc31ce108ef1","type":"md5","category":"Payload delivery","to_ids":true,"value":"3adc9a5ddb93a9f599c90e05bebc4b08","comment":"https://x.com/skocherhan/status/1965326400002330834","timestamp":"1757405302","distribution":"5"},{"uuid":"a4cf70b0-17b7-5d87-8926-29270a5305c7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"f35a91aa6b720f33fb971deee228e48a07d51df9762de6d616481fad1008b7ea","comment":"https://x.com/smica83/status/1965326835723764178","timestamp":"1757405406","distribution":"5"},{"uuid":"940c7afb-a97b-5ad1-a989-7806aa26443b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"77cc139ab837833e325334c7d7ddeeff7eba32e73f0957e1033a6263eabe901a","comment":"https://x.com/malwrhunterteam/status/1965332823725985907","timestamp":"1757406833","distribution":"5"},{"uuid":"6d81218a-c3f8-51eb-9490-2495873434a7","type":"url","category":"Network activity","to_ids":true,"value":"http://91.244.190.132","comment":"https://x.com/malwrhunterteam/status/1965334081576780163","timestamp":"1757407133","distribution":"5"},{"uuid":"7d564cdb-b99a-5ee2-a827-1a7d121391ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.244.190.132","comment":"https://x.com/malwrhunterteam/status/1965334081576780163","timestamp":"1757407133","distribution":"5"},{"uuid":"32210862-7a62-58a2-98ac-1b4552601cbe","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6f9ae9393224a2273c0a03e631708f36bc6257af992455f92c75adbee7d5f91f","comment":"https://x.com/malwrhunterteam/status/1965335159068319888","timestamp":"1757407390","distribution":"5"},{"uuid":"11f19407-7aef-5e27-b416-9593998f2ae2","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.80.182","comment":"https://x.com/malwrhunterteam/status/1965335937443156130","timestamp":"1757407576","distribution":"5"},{"uuid":"b1100c4f-1320-5034-9831-20b8e0e1d960","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.80.182","comment":"https://x.com/malwrhunterteam/status/1965335937443156130","timestamp":"1757407576","distribution":"5"},{"uuid":"dce66da3-ce08-5833-9371-17598ed3b452","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a7aebfc50c092bc62707d0da426197bfe93212a6d5a0103c6a278bf48b680e22","comment":"https://x.com/malwrhunterteam/status/1965335937443156130","timestamp":"1757407576","distribution":"5"},{"uuid":"7af585ff-f1ba-552b-9b31-5ab45e410e84","type":"domain","category":"Network activity","to_ids":true,"value":"api.tam.cityway.fr","comment":"https://x.com/FalconFeedsio/status/1965340367827747255","timestamp":"1757408632","distribution":"5"},{"uuid":"a76d5a0e-7a2a-5c2e-a956-3fa31146ba33","type":"url","category":"Network activity","to_ids":true,"value":"http://api.tam.cityway.fr","comment":"https://x.com/FalconFeedsio/status/1965340367827747255","timestamp":"1757408632","distribution":"5"},{"uuid":"abb096a8-24f2-534d-9fcf-f96f27242a00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.98.11.175","comment":"https://x.com/JAMESWT_WT/status/1965350312862253313","timestamp":"1757411003","distribution":"5","Tag":[{"name":"NetSupport"},{"name":"RAT"}]},{"uuid":"3155ba09-ea24-5a3e-b4cd-08e4cc9fea36","type":"md5","category":"Payload delivery","to_ids":true,"value":"1bbaaefeaa6cc19451eb65ebb88a69b3","comment":"https://x.com/JAMESWT_WT/status/1965350312862253313","timestamp":"1757411003","distribution":"5","Tag":[{"name":"NetSupport"},{"name":"RAT"}]},{"uuid":"bb2115b2-15e8-5e0c-a714-aeb64b20fddb","type":"domain","category":"Network activity","to_ids":true,"value":"abbankverify.weebly.com","comment":"https://x.com/urldna_bot/status/1965354526736531959","timestamp":"1757412008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bb6c45f6-dae0-5e90-a6cf-ace6f713f593","type":"url","category":"Network activity","to_ids":true,"value":"https://abbankverify.weebly.com","comment":"https://x.com/urldna_bot/status/1965354526736531959","timestamp":"1757412008","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"44ee9157-aaa8-57b1-8d8d-d0453f36772f","type":"domain","category":"Network activity","to_ids":true,"value":"icr-wetter.de","comment":"https://x.com/suyog41/status/1965355891013951546","timestamp":"1757412333","distribution":"5"},{"uuid":"8f47abd6-7aee-5a1b-ba05-0a95e03b1f6d","type":"url","category":"Network activity","to_ids":true,"value":"http://icr-wetter.de","comment":"https://x.com/suyog41/status/1965355891013951546","timestamp":"1757412333","distribution":"5"},{"uuid":"20f0963a-f841-5ddc-9779-82be1e5afc69","type":"md5","category":"Payload delivery","to_ids":true,"value":"6a8107cd9f3dda086c27abd0255b59fc","comment":"https://x.com/suyog41/status/1965355891013951546","timestamp":"1757412333","distribution":"5"},{"uuid":"6519d5cf-1b56-56fb-858e-50bf2bd2a76f","type":"url","category":"Network activity","to_ids":true,"value":"http://38.14.248.98:80","comment":"https://x.com/drb_ra/status/1965368161806799142","timestamp":"1757415259","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"78ea84e2-2803-5b79-92db-f75de2a663e5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.14.248.98","comment":"https://x.com/drb_ra/status/1965368161806799142","timestamp":"1757415259","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"197b8cb5-0113-5f38-8482-7792fc74d5d9","type":"url","category":"Network activity","to_ids":true,"value":"http://121.4.24.78:8123","comment":"https://x.com/drb_ra/status/1965368814809612503","timestamp":"1757415414","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"36db85cc-6f91-5caa-a62f-0f20395fd606","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.4.24.78","comment":"https://x.com/drb_ra/status/1965368814809612503","timestamp":"1757415414","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f5bbf59f-549c-506b-8e3b-96980c87cc35","type":"url","category":"Network activity","to_ids":true,"value":"https://163.181.81.114/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965368958703600105","timestamp":"1757415449","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2af5f697-c3ae-511a-a29b-d6cb135a18d0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.181.81.114","comment":"https://x.com/drb_ra/status/1965368958703600105","timestamp":"1757415449","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"b657def8-3d51-59bb-bc69-24cfc260bd5a","type":"url","category":"Network activity","to_ids":true,"value":"https://155.102.30.11/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369104040362029","timestamp":"1757415483","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"20055d58-6d4a-54e7-a791-19166ca57877","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.102.30.11","comment":"https://x.com/drb_ra/status/1965369104040362029","timestamp":"1757415483","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a8092e2-f878-560c-8f38-8b1c94643706","type":"url","category":"Network activity","to_ids":true,"value":"https://47.246.23.133/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369245463904402","timestamp":"1757415517","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7080d3b1-1185-5b47-a3a9-43a18aa6a817","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.246.23.133","comment":"https://x.com/drb_ra/status/1965369245463904402","timestamp":"1757415517","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e7b3d0a4-de97-510b-b4d7-0f302104025a","type":"url","category":"Network activity","to_ids":true,"value":"https://163.181.228.216/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369390196764720","timestamp":"1757415552","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d2f2297b-bb09-57ef-95d0-74d4746c9512","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.181.228.216","comment":"https://x.com/drb_ra/status/1965369390196764720","timestamp":"1757415552","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"49f37ecc-d2b6-507b-97fa-e7c8f1a32a25","type":"url","category":"Network activity","to_ids":true,"value":"https://155.102.4.89/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369533470048454","timestamp":"1757415586","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"21929475-946c-5236-abd1-7aeed5855eb1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.102.4.89","comment":"https://x.com/drb_ra/status/1965369533470048454","timestamp":"1757415586","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e3ed9e5b-b872-5dfb-b0be-6421d1c57b84","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.118.105:5085","comment":"https://x.com/SarlackLab/status/1965369667700101412","timestamp":"1757415618","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"1a7bd0ef-5177-5282-b687-c7cf2718117a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.118.105","comment":"https://x.com/SarlackLab/status/1965369667700101412","timestamp":"1757415618","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"5475acd4-fad1-574b-8ade-8a1baaae48c9","type":"url","category":"Network activity","to_ids":true,"value":"https://163.181.35.239/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369679201141137","timestamp":"1757415620","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3ae468f3-e834-56cc-b8eb-fb5df13f2493","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.181.35.239","comment":"https://x.com/drb_ra/status/1965369679201141137","timestamp":"1757415620","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5fd835f1-7e7e-5c38-a3c7-983f214a605e","type":"url","category":"Network activity","to_ids":true,"value":"https://155.102.4.178/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965369827377434837","timestamp":"1757415656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"52cf7e88-e0e6-5908-90c3-5c063a18ed23","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.173.62:443","comment":"https://x.com/drb_ra/status/1965369827377434837","timestamp":"1757415656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"2d0f767e-9bb2-59df-a140-9d177f7ceaf7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.132.173.62","comment":"https://x.com/drb_ra/status/1965369827377434837","timestamp":"1757415656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6f84d658-0a47-5719-adea-1a5d2cf78b0e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"155.102.4.178","comment":"https://x.com/drb_ra/status/1965369827377434837","timestamp":"1757415656","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4dfc992b-5146-5627-a3a3-8806077d7ade","type":"url","category":"Network activity","to_ids":true,"value":"http://119.29.254.242:8083","comment":"https://x.com/drb_ra/status/1965369971451855094","timestamp":"1757415690","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"3c1aa014-0d47-51d6-a832-d9e3c15c9d80","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.29.254.242","comment":"https://x.com/drb_ra/status/1965369971451855094","timestamp":"1757415690","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"48d22555-075e-5762-9183-e2a4886bb3a4","type":"url","category":"Network activity","to_ids":true,"value":"https://119.29.254.242/introduction/edr","comment":"https://x.com/drb_ra/status/1965369971451855094","timestamp":"1757415690","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e8d358c9-d406-51e9-a3e0-5048a13b6921","type":"domain","category":"Network activity","to_ids":true,"value":"c12-poc.com","comment":"https://x.com/malwrhunterteam/status/1965374268394569807","timestamp":"1757416715","distribution":"5"},{"uuid":"38977cec-4cd4-5be7-9afe-ea7570c63b05","type":"url","category":"Network activity","to_ids":true,"value":"http://c12-poc.com","comment":"https://x.com/malwrhunterteam/status/1965374268394569807","timestamp":"1757416715","distribution":"5"},{"uuid":"816b200b-70f0-5b59-8a55-923ee1b787ee","type":"url","category":"Network activity","to_ids":true,"value":"http://116.96.45.156","comment":"https://x.com/malwrhunterteam/status/1965374268394569807","timestamp":"1757416715","distribution":"5"},{"uuid":"3c1c0140-2dc4-53b3-adcd-ad706a39dcdd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.96.45.156","comment":"https://x.com/malwrhunterteam/status/1965374268394569807","timestamp":"1757416715","distribution":"5"},{"uuid":"c1600cae-354c-5a18-9f02-d50d77e4d876","type":"url","category":"Network activity","to_ids":true,"value":"http://175.178.112.168:443","comment":"https://x.com/drb_ra/status/1965374699502027111","timestamp":"1757416817","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"427af4b7-1d09-5d8a-b734-79c87d5f1cb6","type":"url","category":"Network activity","to_ids":true,"value":"http://175.178.112.168:80","comment":"https://x.com/drb_ra/status/1965374842368311794","timestamp":"1757416851","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"da44fc28-b224-5185-8b7c-2fd66030b13c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.178.112.168","comment":"https://x.com/drb_ra/status/1965374842368311794","timestamp":"1757416851","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e071b1dc-a825-5b64-b071-5b878c145491","type":"url","category":"Network activity","to_ids":true,"value":"http://121.43.244.221:7777","comment":"https://x.com/drb_ra/status/1965374990519558548","timestamp":"1757416887","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"897a7547-a3a8-54f6-a327-ceb1118cdb93","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.43.244.221","comment":"https://x.com/drb_ra/status/1965374990519558548","timestamp":"1757416887","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"158bfab2-83c3-5dea-8026-58bd4a413b82","type":"url","category":"Network activity","to_ids":true,"value":"http://180.76.99.230:443","comment":"https://x.com/drb_ra/status/1965375136951058928","timestamp":"1757416922","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a0170572-be4a-55a1-8867-bf2e5631e6ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.76.99.230","comment":"https://x.com/drb_ra/status/1965375136951058928","timestamp":"1757416922","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d9cde097-18ea-582a-89a7-3d5df410e3da","type":"url","category":"Network activity","to_ids":true,"value":"https://180.76.99.230/pixel","comment":"https://x.com/drb_ra/status/1965375136951058928","timestamp":"1757416922","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a20e380b-2a58-5712-b0c8-eb085274164b","type":"url","category":"Network activity","to_ids":true,"value":"http://47.86.7.10:8888","comment":"https://x.com/drb_ra/status/1965375937039810805","timestamp":"1757417112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0c96a408-58d0-56bb-802b-2f75fb2ff0a5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.86.7.10","comment":"https://x.com/drb_ra/status/1965375937039810805","timestamp":"1757417112","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"a0701561-5835-5474-831f-1cc2a7f2d7c7","type":"url","category":"Network activity","to_ids":true,"value":"https://gitlab.com/namc2931-group","comment":"https://x.com/suyog41/status/1965382542607163424","timestamp":"1757418687","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"e686fd58-4060-5e64-b8be-028517571466","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c0404530e506e18cdaf18d28f1f9ed0","comment":"https://x.com/suyog41/status/1965382542607163424","timestamp":"1757418687","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"40c5b3c2-f4c9-5e16-b346-7acb4012d190","type":"domain","category":"Network activity","to_ids":true,"value":"lwrencegfbnk.weebly.com","comment":"https://x.com/urldna_bot/status/1965384736295039168","timestamp":"1757419210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"16ce75e1-2601-55f0-aac2-cb65814db4af","type":"url","category":"Network activity","to_ids":true,"value":"https://lwrencegfbnk.weebly.com","comment":"https://x.com/urldna_bot/status/1965384736295039168","timestamp":"1757419210","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5f7d1adf-3cc0-5f5d-8f05-4eef8be457c4","type":"domain","category":"Network activity","to_ids":true,"value":"h5.mfsaotc.com","comment":"https://x.com/Anlegerhelfer/status/1965387313653100968","timestamp":"1757419825","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"fafb1fc0-2312-5c39-b8ad-77b624c5f411","type":"url","category":"Network activity","to_ids":true,"value":"http://h5.mfsaotc.com","comment":"https://x.com/Anlegerhelfer/status/1965387313653100968","timestamp":"1757419825","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"6395271b-249b-5302-ba20-f83f8f31a982","type":"domain","category":"Network activity","to_ids":true,"value":"fintech.ing","comment":"https://x.com/c9lab_soc/status/1965395250610143604","timestamp":"1757421717","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"05e35aa1-e3d5-5f60-bc1f-36f4521a00c8","type":"url","category":"Network activity","to_ids":true,"value":"http://fintech.ing","comment":"https://x.com/c9lab_soc/status/1965395250610143604","timestamp":"1757421717","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"402aa6d8-0a4d-5657-af04-92eaca46f0f6","type":"domain","category":"Network activity","to_ids":true,"value":"oppo.watch","comment":"https://x.com/c9lab_soc/status/1965395250610143604","timestamp":"1757421717","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"b89688e0-fd2b-5b0f-961d-640a99534c37","type":"url","category":"Network activity","to_ids":true,"value":"http://oppo.watch","comment":"https://x.com/c9lab_soc/status/1965395250610143604","timestamp":"1757421717","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"13d6ebd7-580f-59d5-99a2-ee4a367bf079","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e19ce3bd1cbd980082d3c55a4ac1eb3af4d9e7adf108afb1861372f9c7fe0b76","comment":"https://x.com/malwrhunterteam/status/1965402950781583439","timestamp":"1757423553","distribution":"5"},{"uuid":"5fc812ca-81d2-5a41-988a-d815ba2c8ef9","type":"domain","category":"Network activity","to_ids":true,"value":"umarktch.weebly.com","comment":"https://x.com/urldna_bot/status/1965414921966882922","timestamp":"1757426407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0b35052a-a892-5319-898f-9641de3b4fc5","type":"url","category":"Network activity","to_ids":true,"value":"https://umarktch.weebly.com","comment":"https://x.com/urldna_bot/status/1965414921966882922","timestamp":"1757426407","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8a3bae1c-1f13-54c4-b2c7-03f73756a8c4","type":"url","category":"Network activity","to_ids":true,"value":"http://8.147.232.28:39001","comment":"https://x.com/drb_ra/status/1965442751555837962","timestamp":"1757433042","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7784bca6-9afc-5f89-984a-ff2ce25596e3","type":"url","category":"Network activity","to_ids":true,"value":"http://107.175.158.208:2086","comment":"https://x.com/drb_ra/status/1965443407071019246","timestamp":"1757433199","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6377e38b-bd9a-5c51-84c3-4f5d1adde5ee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.175.158.208","comment":"https://x.com/drb_ra/status/1965443407071019246","timestamp":"1757433199","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"5a900dfe-75e8-547f-b1bb-5dc220ccc9f8","type":"url","category":"Network activity","to_ids":true,"value":"http://49.235.159.185:8031","comment":"https://x.com/drb_ra/status/1965443548494659745","timestamp":"1757433232","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e3109b8f-e5d8-5003-b96a-52c371644119","type":"ip-dst","category":"Network activity","to_ids":true,"value":"49.235.159.185","comment":"https://x.com/drb_ra/status/1965443548494659745","timestamp":"1757433232","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e560102f-1a65-580d-b429-149efbea892b","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.193.77:8030","comment":"https://x.com/drb_ra/status/1965443845564629010","timestamp":"1757433303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d932ec36-4429-5e89-924d-d1dd89cc78fb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.193.77","comment":"https://x.com/drb_ra/status/1965443845564629010","timestamp":"1757433303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6150003-7e5d-58bd-8edd-f02b74bb1f55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.193.92","comment":"https://x.com/drb_ra/status/1965443845564629010","timestamp":"1757433303","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"391475c0-069c-5b87-a0ec-fea24ed9adb1","type":"url","category":"Network activity","to_ids":true,"value":"http://43.153.26.136:7778","comment":"https://x.com/drb_ra/status/1965443987847958924","timestamp":"1757433337","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"c145193d-6921-5c78-ab62-6fe3cc7a514b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.153.26.136","comment":"https://x.com/drb_ra/status/1965443987847958924","timestamp":"1757433337","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"19a318e0-6230-50b7-af8c-39d51e4177a8","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.194.157:443","comment":"https://x.com/drb_ra/status/1965444135344898407","timestamp":"1757433372","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b19d2aa8-e784-5f24-b540-80e5a1a0891b","type":"url","category":"Network activity","to_ids":true,"value":"http://166.108.200.194:80","comment":"https://x.com/drb_ra/status/1965444277158514813","timestamp":"1757433406","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"93cedfcf-5ae2-5b82-b9d6-63db056009ba","type":"ip-dst","category":"Network activity","to_ids":true,"value":"166.108.200.194","comment":"https://x.com/drb_ra/status/1965444277158514813","timestamp":"1757433406","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"d4a9a72f-017e-5233-b177-023434aa9212","type":"domain","category":"Network activity","to_ids":true,"value":"114030coinbase.com","comment":"https://x.com/destroyphishing/status/1965444322578629020","timestamp":"1757433417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"42300a55-c7db-5311-a66b-102943cf38f9","type":"url","category":"Network activity","to_ids":true,"value":"https://114030coinbase.com/c/app/","comment":"https://x.com/destroyphishing/status/1965444322578629020","timestamp":"1757433417","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e68f19c-edf7-5653-9a70-12d234a15385","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c987932f28c239a591214c0b5504890af61b146dd43ce9bcdaba1789c6223b0c","comment":"https://x.com/fbgwls245/status/1965444323421594106","timestamp":"1757433417","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"35f7d70a-b306-5dc1-bb32-09ed1017e210","type":"domain","category":"Network activity","to_ids":true,"value":"ledger-com-start-10s.pages.dev","comment":"https://x.com/destroyphishing/status/1965448391514882496","timestamp":"1757434387","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eddc3510-7776-5552-a9bf-cd08e87553d8","type":"url","category":"Network activity","to_ids":true,"value":"https://ledger-com-start-10s.pages.dev","comment":"https://x.com/destroyphishing/status/1965448391514882496","timestamp":"1757434387","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4df7f61-a090-5834-bc5c-cf150f390f16","type":"domain","category":"Network activity","to_ids":true,"value":"ledger-live-wallet-come.pages.dev","comment":"https://x.com/destroyphishing/status/1965448480908099673","timestamp":"1757434408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ed5795e-d6e2-5b61-b054-b9c782e21691","type":"url","category":"Network activity","to_ids":true,"value":"https://ledger-live-wallet-come.pages.dev","comment":"https://x.com/destroyphishing/status/1965448480908099673","timestamp":"1757434408","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0a97b7c-6d9f-535f-a608-18dde1888f5e","type":"domain","category":"Network activity","to_ids":true,"value":"lgiin-coinbase-welcome.pages.dev","comment":"https://x.com/destroyphishing/status/1965448586042417576","timestamp":"1757434433","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c2cfbf5d-db39-5507-8e33-63546e4a0b06","type":"url","category":"Network activity","to_ids":true,"value":"https://lgiin-coinbase-welcome.pages.dev","comment":"https://x.com/destroyphishing/status/1965448586042417576","timestamp":"1757434433","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ad44a1e-f5f6-5268-950f-551fdee99dc6","type":"domain","category":"Network activity","to_ids":true,"value":"linea-hub.web.app","comment":"https://x.com/destroyphishing/status/1965448680896700922","timestamp":"1757434456","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc82a3d1-ecc9-59d6-bd9d-5c5eb877e0ee","type":"url","category":"Network activity","to_ids":true,"value":"https://linea-hub.web.app","comment":"https://x.com/destroyphishing/status/1965448680896700922","timestamp":"1757434456","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"26949706-0969-5e4a-b22b-b0b4080e0c7b","type":"domain","category":"Network activity","to_ids":true,"value":"mainwebchainportal.top","comment":"https://x.com/destroyphishing/status/1965448774358368442","timestamp":"1757434478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af369072-66cb-5348-b841-0e2818d10a9f","type":"url","category":"Network activity","to_ids":true,"value":"https://mainwebchainportal.top","comment":"https://x.com/destroyphishing/status/1965448774358368442","timestamp":"1757434478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5043bb4-44cf-543b-b795-d08f761b7340","type":"domain","category":"Network activity","to_ids":true,"value":"matchain.me","comment":"https://x.com/destroyphishing/status/1965448857116193172","timestamp":"1757434498","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c05e71bd-2bab-5d13-95af-886adf43b933","type":"url","category":"Network activity","to_ids":true,"value":"https://matchain.me","comment":"https://x.com/destroyphishing/status/1965448857116193172","timestamp":"1757434498","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d67ea17-0855-58d0-83fd-7edcb509cff2","type":"domain","category":"Network activity","to_ids":true,"value":"metamask-ch-rome-extension.pages.dev","comment":"https://x.com/destroyphishing/status/1965448931640574336","timestamp":"1757434516","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"789edb37-12d8-56a9-978d-d2594cebbf3e","type":"url","category":"Network activity","to_ids":true,"value":"https://metamask-ch-rome-extension.pages.dev","comment":"https://x.com/destroyphishing/status/1965448931640574336","timestamp":"1757434516","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79651fef-61ca-540d-9c37-7226d90594c0","type":"domain","category":"Network activity","to_ids":true,"value":"metamask-exten-sion-9tn.pages.dev","comment":"https://x.com/destroyphishing/status/1965449028734517419","timestamp":"1757434539","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ae3834f3-8d95-5d3f-999d-74c4ae32b5c9","type":"url","category":"Network activity","to_ids":true,"value":"https://metamask-exten-sion-9tn.pages.dev","comment":"https://x.com/destroyphishing/status/1965449028734517419","timestamp":"1757434539","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9919b17b-e584-5eb2-a9db-6753cc8d4d59","type":"domain","category":"Network activity","to_ids":true,"value":"meteora.trade","comment":"https://x.com/destroyphishing/status/1965449122271690908","timestamp":"1757434561","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1649e95-fc7a-58b4-9a88-5915cf3648f7","type":"url","category":"Network activity","to_ids":true,"value":"https://meteora.trade","comment":"https://x.com/destroyphishing/status/1965449122271690908","timestamp":"1757434561","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"84987a7a-3eb1-5dd4-b3f3-9542771f40da","type":"domain","category":"Network activity","to_ids":true,"value":"myx-claim.xyz","comment":"https://x.com/destroyphishing/status/1965449228500828278","timestamp":"1757434587","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54f67fc3-7da3-5a00-bbf9-96d1de2e4f3b","type":"url","category":"Network activity","to_ids":true,"value":"https://myx-claim.xyz","comment":"https://x.com/destroyphishing/status/1965449228500828278","timestamp":"1757434587","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f9ab898-3ac7-51e8-858b-03c50369f7b5","type":"domain","category":"Network activity","to_ids":true,"value":"no-kyc-swap.ru","comment":"https://x.com/destroyphishing/status/1965449333253484905","timestamp":"1757434611","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d5eea7a5-36c9-5d88-ba26-ed002d4ed8fb","type":"url","category":"Network activity","to_ids":true,"value":"https://no-kyc-swap.ru","comment":"https://x.com/destroyphishing/status/1965449333253484905","timestamp":"1757434611","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"417159a4-1a09-5483-a66a-aa74cdb6dba4","type":"domain","category":"Network activity","to_ids":true,"value":"okxeru.com","comment":"https://x.com/destroyphishing/status/1965449444872388756","timestamp":"1757434638","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff5b30e4-ff91-5527-856a-6d11a4372189","type":"url","category":"Network activity","to_ids":true,"value":"https://okxeru.com","comment":"https://x.com/destroyphishing/status/1965449444872388756","timestamp":"1757434638","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c48fe7b-cf96-5e19-a9fa-e604fdf63abd","type":"domain","category":"Network activity","to_ids":true,"value":"ky.drivera.cc","comment":"https://x.com/JCyberSec_/status/1965452130418131049","timestamp":"1757435278","distribution":"5"},{"uuid":"f974153f-543a-5d6f-ae14-1630894aedfb","type":"url","category":"Network activity","to_ids":true,"value":"https://ky.drivera.cc/pay","comment":"https://x.com/JCyberSec_/status/1965452130418131049","timestamp":"1757435278","distribution":"5"},{"uuid":"5ad35e7d-02bd-5dab-9b90-c007fbda7133","type":"domain","category":"Network activity","to_ids":true,"value":"bankd.me","comment":"https://x.com/urldna_bot/status/1965475317599867302","timestamp":"1757440807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"7077c7e5-d8e9-5773-b1e4-20f79b8b3ecf","type":"url","category":"Network activity","to_ids":true,"value":"https://bankd.me","comment":"https://x.com/urldna_bot/status/1965475317599867302","timestamp":"1757440807","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"8ff5c039-4df6-57ab-9960-695f8e195979","type":"domain","category":"Network activity","to_ids":true,"value":"ferragensportugal.com","comment":"https://x.com/Coolcarlos17/status/1965502189906067757","timestamp":"1757447213","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"c3f2be7e-3ce2-5ddd-9aab-0dece129db15","type":"url","category":"Network activity","to_ids":true,"value":"https://www.ferragensportugal.com","comment":"https://x.com/Coolcarlos17/status/1965502189906067757","timestamp":"1757447213","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"592be20e-09fe-5817-acd1-ee7cd44ccf03","type":"url","category":"Network activity","to_ids":true,"value":"https://storage.googleapis.com/dedebbn/index.html#info@google.com.tw","comment":"https://x.com/urldna_bot/status/1965505515930234928","timestamp":"1757448006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"5c57d309-c9fc-5ca9-a296-486710941f7b","type":"url","category":"Network activity","to_ids":true,"value":"http://185.198.234.215","comment":"https://x.com/FalconFeedsio/status/1965506122741416330","timestamp":"1757448151","distribution":"5"},{"uuid":"00aa8519-e5c5-593a-a705-e5ee234f5d8a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.198.234.215","comment":"https://x.com/FalconFeedsio/status/1965506122741416330","timestamp":"1757448151","distribution":"5"},{"uuid":"74c08ac9-5c7b-5f75-8687-cce10dbe9c64","type":"domain","category":"Network activity","to_ids":true,"value":"hjfhewuhahgfurhgeaorfdkgjdgy234.botnet.world","comment":"https://x.com/malwrhunterteam/status/1965507896156062103","timestamp":"1757448574","distribution":"5"},{"uuid":"06b62319-d141-54b9-b6e3-b297ff14bdd4","type":"url","category":"Network activity","to_ids":true,"value":"http://hjfhewuhahgfurhgeaorfdkgjdgy234.botnet.world","comment":"https://x.com/malwrhunterteam/status/1965507896156062103","timestamp":"1757448574","distribution":"5"},{"uuid":"3b9d0578-abc2-5ae5-ad41-2670a19675cc","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6d2409b581ca3760f50e2a06513ecab2714aae3dd84e90e4fd4f4edb6cba70dc","comment":"https://x.com/malwrhunterteam/status/1965507896156062103","timestamp":"1757448574","distribution":"5"},{"uuid":"3ef48b74-7ce2-53a6-a63a-132e1894d80c","type":"url","category":"Network activity","to_ids":true,"value":"http://45.77.135.88:50101","comment":"https://x.com/drb_ra/status/1965518199811649837","timestamp":"1757451031","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7ca188c4-ce65-59dd-a203-ae718fbd9fbb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.77.135.88","comment":"https://x.com/drb_ra/status/1965518199811649837","timestamp":"1757451031","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"78324013-5720-5715-9245-65fdb5185da3","type":"url","category":"Network activity","to_ids":true,"value":"http://49.235.159.185","comment":"https://x.com/threatquery/status/1965520598068605218","timestamp":"1757451602","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"malware"},{"name":"C2"}]},{"uuid":"ac5b00ef-21a6-5430-a7a2-63807fe67027","type":"url","category":"Network activity","to_ids":true,"value":"http://141.105.143.97","comment":"https://x.com/threatquery/status/1965520596344672577","timestamp":"1757451602","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"b3843676-5306-598f-bff5-e50687ad51c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.105.143.97","comment":"https://x.com/threatquery/status/1965520596344672577","timestamp":"1757451602","distribution":"5","Tag":[{"name":"Xworm"},{"name":"malware"},{"name":"C2"}]},{"uuid":"6dde57fc-b12e-5893-9351-bb2075258f49","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.193.77","comment":"https://x.com/threatquery/status/1965520599742066735","timestamp":"1757451603","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"malware"},{"name":"C2"}]},{"uuid":"2a015922-2832-5926-a84b-94436cc39243","type":"domain","category":"Network activity","to_ids":true,"value":"asmpa1net001.weebly.com","comment":"https://x.com/urldna_bot/status/1965535714990252239","timestamp":"1757455206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b35524bf-7c6b-5363-a340-c2c3f3be7c2f","type":"url","category":"Network activity","to_ids":true,"value":"https://asmpa1net001.weebly.com","comment":"https://x.com/urldna_bot/status/1965535714990252239","timestamp":"1757455206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"c1801142-275a-57cd-8fc7-4340fbf3fe49","type":"domain","category":"Network activity","to_ids":true,"value":"Netlify.app","comment":"https://x.com/skocherhan/status/1965545608879669471","timestamp":"1757457565","distribution":"5"},{"uuid":"a9cf6162-7c4e-5f6d-be51-e1e5b797e8e3","type":"url","category":"Network activity","to_ids":true,"value":"http://Netlify.app","comment":"https://x.com/skocherhan/status/1965545608879669471","timestamp":"1757457565","distribution":"5"},{"uuid":"8d967c41-fe47-572d-b535-7e73d7d76e65","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5e6a06d908400de73e90e2fa0de1fe6641d14286edf88b97a8be74f87efdd12d","comment":"https://x.com/skocherhan/status/1965546618121584666","timestamp":"1757457806","distribution":"5"},{"uuid":"24a0d1cf-a4d4-5bbf-ac29-fad70090b3b7","type":"domain","category":"Network activity","to_ids":true,"value":"rascalsnft.web.app","comment":"https://x.com/urldna_bot/status/1965565929334456564","timestamp":"1757462410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bcb92df8-4ebd-5023-86d3-ba4cb908050b","type":"url","category":"Network activity","to_ids":true,"value":"https://rascalsnft.web.app","comment":"https://x.com/urldna_bot/status/1965565929334456564","timestamp":"1757462410","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"bf57da7c-ae17-5944-830b-7c4ccf9006b3","type":"url","category":"Network activity","to_ids":true,"value":"http://178.16.54.21","comment":"https://x.com/skocherhan/status/1965580745751265526","timestamp":"1757465943","distribution":"5"},{"uuid":"b155b3e8-7e5e-5658-8857-cf556d82b346","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.54.21","comment":"https://x.com/skocherhan/status/1965580745751265526","timestamp":"1757465943","distribution":"5"},{"uuid":"239648a3-f052-56a5-ba36-f74d7838ea64","type":"sha256","category":"Payload delivery","to_ids":true,"value":"43c54973dba44702605bba74f80fadb95ef14c7035a0b3d1ad679299762a55f3","comment":"https://x.com/skocherhan/status/1965580745751265526","timestamp":"1757465943","distribution":"5"},{"uuid":"3b4418d6-4303-5f88-a90c-5e6e183bbe1f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"182.148.208.70","comment":"https://x.com/romonlyht/status/1965593182756053035","timestamp":"1757468908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"da226216-f501-5861-8d6c-46264cff963b","type":"url","category":"Network activity","to_ids":true,"value":"https://ocwrhh.cn/jkuos/","comment":"https://x.com/romonlyht/status/1965593182756053035","timestamp":"1757468908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"16dbb350-a3bd-5a4e-89a3-15ce7e402ed4","type":"url","category":"Network activity","to_ids":true,"value":"https://ocwrhh.cn/jkuos","comment":"https://x.com/romonlyht/status/1965593182756053035","timestamp":"1757468908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"42f923db-8963-5889-9f0c-01a64c1e83b8","type":"domain","category":"Network activity","to_ids":true,"value":"ocwrhh.cn","comment":"https://x.com/romonlyht/status/1965593182756053035","timestamp":"1757468908","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1d9603c-38d6-57c0-b63f-5f908550574c","type":"domain","category":"Network activity","to_ids":true,"value":"helqrp.cn","comment":"https://x.com/romonlyht/status/1965593395835142617","timestamp":"1757468959","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"231d7e26-c869-5212-94c4-62a6437e2774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.189.107","comment":"https://x.com/romonlyht/status/1965593395835142617","timestamp":"1757468959","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e11ce9c1-44df-518a-9acf-4663a511fb64","type":"url","category":"Network activity","to_ids":true,"value":"https://helqrp.cn/jkuos/","comment":"https://x.com/romonlyht/status/1965593395835142617","timestamp":"1757468959","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"25716a29-7a16-5402-b495-30d9c2791651","type":"url","category":"Network activity","to_ids":true,"value":"https://helqrp.cn/jkuos","comment":"https://x.com/romonlyht/status/1965593395835142617","timestamp":"1757468959","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"90709ad7-79ad-5a8e-95e2-08599e56c7c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"118.120.231.181","comment":"https://x.com/romonlyht/status/1965593395835142617","timestamp":"1757468959","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"529dcabe-e069-5a25-8f10-917859953bae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"47.104.214.223","comment":"https://x.com/drb_ra/status/1965593598206083577","timestamp":"1757469007","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"f7aebef2-839a-535d-9e28-de7168d30ce2","type":"url","category":"Network activity","to_ids":true,"value":"http://47.104.214.223:443","comment":"https://x.com/drb_ra/status/1965593598206083577","timestamp":"1757469007","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"323a8a50-036d-5648-aa32-6427a5e0c080","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.239.154.6","comment":"https://x.com/romonlyht/status/1965597087548289272","timestamp":"1757469839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e12df835-dc86-5665-9a44-482488953d0a","type":"url","category":"Network activity","to_ids":true,"value":"https://eppoos.d2io4.info/%F0%9D%90%A2%F0%9D%90%A7%F0%9D%90%9D%F0%9D%90%9E%F0%9D%90","comment":"https://x.com/romonlyht/status/1965597087548289272","timestamp":"1757469839","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef76f112-c38a-59bc-a402-b5415b66f9a5","type":"domain","category":"Network activity","to_ids":true,"value":"eppoos.d2io4.info","comment":"https://x.com/romonlyht/status/1965597092271014258","timestamp":"1757469840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"090f671e-7e58-5476-9dc7-fad523939637","type":"url","category":"Network activity","to_ids":true,"value":"https://eppoos.d2io4.info/%F0%9D%90%A2%F0%9D%90%A7%F0%9D%90%9D%F0%9D%90%9E%F0%9D%90%B1.%F0%9D%90%A1%F0%9D%90%AD%F0%9D%90%A6%F0%9D%90%A5/","comment":"https://x.com/romonlyht/status/1965597092271014258","timestamp":"1757469840","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c501e7b7-4386-5cc3-96de-ced613844568","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.239.154.120","comment":"https://x.com/romonlyht/status/1965597519075033492","timestamp":"1757469942","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d376dc31-6e25-5007-adf8-10c74fa255de","type":"url","category":"Network activity","to_ids":true,"value":"https://eppoos.zn1a7.info/%F0%9D%90%A2%F0%9D%90%A7%F0%9D%90%9D%F0","comment":"https://x.com/romonlyht/status/1965597519075033492","timestamp":"1757469942","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6ca03723-e370-5396-a3a8-517ef4bc8d09","type":"domain","category":"Network activity","to_ids":true,"value":"eppoos.zn1a7.info","comment":"https://x.com/romonlyht/status/1965597523751661826","timestamp":"1757469943","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4661a7ca-e43c-529d-8bdc-e0782968ae93","type":"url","category":"Network activity","to_ids":true,"value":"https://eppoos.zn1a7.info/%F0%9D%90%A2%F0%9D%90%A7%F0%9D%90%9D%F0%9D%90%9E%F0%9D%90%B1.%F0%9D%90%A1%F0%9D%90%AD%F0%9D%90%A6%F0%9D%90%A5/","comment":"https://x.com/romonlyht/status/1965597523751661826","timestamp":"1757469943","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8223b65e-ab36-5154-b830-876f6eb381df","type":"domain","category":"Network activity","to_ids":true,"value":"rosemic.com","comment":"https://x.com/romonlyht/status/1965599030798647394","timestamp":"1757470302","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cef005ea-5e95-54f9-8d5f-7dd19bb2ff3d","type":"url","category":"Network activity","to_ids":true,"value":"https://rosemic.com/web/0102","comment":"https://x.com/romonlyht/status/1965599030798647394","timestamp":"1757470302","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef793840-01e3-5b4a-ac5f-be3a17dbe971","type":"url","category":"Network activity","to_ids":true,"value":"https://rosemic.com/web/0102/","comment":"https://x.com/romonlyht/status/1965599030798647394","timestamp":"1757470302","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fbce817c-a19a-5b44-ae47-3e0462f5a3fe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.185.55","comment":"https://x.com/romonlyht/status/1965599030798647394","timestamp":"1757470302","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b3e1497d-8837-5908-bab5-81cd698285ad","type":"domain","category":"Network activity","to_ids":true,"value":"tuspuntosplus.com","comment":"https://x.com/mbec03/status/1965599280313573424","timestamp":"1757470362","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c7dfa24a-1cfa-53c5-a358-9d633d90f5e4","type":"url","category":"Network activity","to_ids":true,"value":"http://tuspuntosplus.com","comment":"https://x.com/mbec03/status/1965599280313573424","timestamp":"1757470362","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d9afa4aa-4a24-5fb4-bf4d-3b082403c4c4","type":"domain","category":"Network activity","to_ids":true,"value":"ijvyuw.com%E2%88%95qohDPWwOL%E2%88%95gJHtI%E2%88%95mSrEOaQfe@g9ab7.ywtcd.cn","comment":"https://x.com/romonlyht/status/1965605349895045151","timestamp":"1757471809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"16526108-daf4-54d3-9a22-2f472cb773fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"119.113.199.184","comment":"https://x.com/romonlyht/status/1965605349895045151","timestamp":"1757471809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bcc17646-1f7a-532b-86fa-c0403783ee64","type":"url","category":"Network activity","to_ids":true,"value":"https://ijvyuw.com%E2%88%95qohDPWwOL%E2%88%95gJHtI%E2%88%95mSrEOaQfe@g9ab7.ywtcd.cn/UmPXT6/profile/0k4q31J/","comment":"https://x.com/romonlyht/status/1965605349895045151","timestamp":"1757471809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f81226d-d343-579c-92b3-90b6e828fe0d","type":"url","category":"Network activity","to_ids":true,"value":"http://g9ab7.ywtcd.cn/UmPXT6/profile/0k4q31J/","comment":"https://x.com/romonlyht/status/1965605349895045151","timestamp":"1757471809","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f356b23b-3261-5662-a71d-7e98080a4f4f","type":"domain","category":"Network activity","to_ids":true,"value":"dddduthoritati.longmusic.com","comment":"https://x.com/romonlyht/status/1965605357180649517","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5f57a788-a066-591d-b95d-bcf5b77cc22f","type":"url","category":"Network activity","to_ids":true,"value":"https://dddduthoritati.longmusic.com/twheekaq/das=23=dhl","comment":"https://x.com/romonlyht/status/1965605357180649517","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45563f04-4d48-5340-b53e-f2291d9392dc","type":"url","category":"Network activity","to_ids":true,"value":"https://dddduthoritati.longmusic.com/twheekaq/das=23=dhl/","comment":"https://x.com/romonlyht/status/1965605357180649517","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3da3705a-d20f-5bb6-a52a-8431ea9f46c3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.154.241.77","comment":"https://x.com/romonlyht/status/1965605357180649517","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f31ba1c8-95d9-5836-be25-7d1b94d8b4f3","type":"md5","category":"Payload delivery","to_ids":true,"value":"c0ebebcf6af84a36326f7b04de3b8df0","comment":"https://x.com/romonlyht/status/1965605357180649517","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31256161-bc57-5eeb-8898-178fcc524799","type":"domain","category":"Network activity","to_ids":true,"value":"g9ab7.ywtcd.cn","comment":"https://x.com/romonlyht/status/1965605355104378919","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab2b332f-bf5f-5e57-8b0a-4fa1ce11f37f","type":"url","category":"Network activity","to_ids":true,"value":"http://g9ab7.ywtcd.cn/UmPXT6/profile/0k4q31J/profile/uua2zVhJ/cart/oTA730/product/5FKvwC7wm7Xvc/yF6eP-T0/coupons/341NZddHFlldIlc?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=QXNpYS9Ub2t5b2phaVBhZA%3D%3D","comment":"https://x.com/romonlyht/status/1965605355104378919","timestamp":"1757471810","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f2461d1d-19c3-5cba-8e4c-b81a46f56789","type":"url","category":"Network activity","to_ids":true,"value":"https://logolina.com/index.html","comment":"https://x.com/romonlyht/status/1965610176515579985","timestamp":"1757472960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e5e2aa79-316d-5ccb-86f5-3efa8e4c7a71","type":"url","category":"Network activity","to_ids":true,"value":"https://logolina.com/index.html/","comment":"https://x.com/romonlyht/status/1965610180600889813","timestamp":"1757472960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ef76e29-6ad3-563b-bc1d-b263bc012f72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.128.213","comment":"https://x.com/romonlyht/status/1965610176515579985","timestamp":"1757472960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94927ead-086d-5848-97cc-e4df87391563","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.153.212.108","comment":"https://x.com/romonlyht/status/1965610176515579985","timestamp":"1757472960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea1e2013-f3e4-50cd-bd86-db2924bc0926","type":"domain","category":"Network activity","to_ids":true,"value":"logolina.com","comment":"https://x.com/romonlyht/status/1965610180600889813","timestamp":"1757472960","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28ab60ee-a399-5754-8191-2d4023653f4d","type":"domain","category":"Network activity","to_ids":true,"value":"airdrops.nadirealx.io","comment":"https://x.com/destroyphishing/status/1965610497082048881","timestamp":"1757473036","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ae0c3392-a5bc-501b-a1d7-47e9581f66bf","type":"url","category":"Network activity","to_ids":true,"value":"http://airdrops.nadirealx.io","comment":"https://x.com/destroyphishing/status/1965610497082048881","timestamp":"1757473036","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"263aa107-6341-515c-98a6-2536bfb8d205","type":"url","category":"Network activity","to_ids":true,"value":"http://43.226.229.133:20251","comment":"https://x.com/SarlackLab/status/1965611251477651944","timestamp":"1757473216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"eee0ba4d-7005-51f2-91c5-ce11635b2d31","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.226.229.133","comment":"https://x.com/SarlackLab/status/1965611251477651944","timestamp":"1757473216","distribution":"5","Tag":[{"name":"C2"},{"name":"NanoCore"}]},{"uuid":"024a6e8e-f5f6-5e4f-923b-2c5413397b42","type":"domain","category":"Network activity","to_ids":true,"value":"claimairdrop.io","comment":"https://x.com/destroyphishing/status/1965616834276983086","timestamp":"1757474547","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f0caf26c-eeb4-5a34-a34c-ebbd44cb2fab","type":"url","category":"Network activity","to_ids":true,"value":"https://claimairdrop.io","comment":"https://x.com/destroyphishing/status/1965616834276983086","timestamp":"1757474547","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c602aa43-0685-5388-bb0d-25b56ff02eef","type":"domain","category":"Network activity","to_ids":true,"value":"kymtra-hochwalt.mode-airdrop.com","comment":"https://x.com/destroyphishing/status/1965617594528100388","timestamp":"1757474728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d0917aa-924c-5826-9c59-7ad715fb9e3c","type":"url","category":"Network activity","to_ids":true,"value":"http://kymtra-hochwalt.mode-airdrop.com","comment":"https://x.com/destroyphishing/status/1965617594528100388","timestamp":"1757474728","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c21eafc1-11ed-582e-8aec-95889f559900","type":"domain","category":"Network activity","to_ids":true,"value":"ledger-support-portal.com","comment":"https://x.com/destroyphishing/status/1965621510464553267","timestamp":"1757475662","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"495c1b80-bc38-571d-9bb8-cb6ad0dc3b10","type":"url","category":"Network activity","to_ids":true,"value":"https://ledger-support-portal.com","comment":"https://x.com/destroyphishing/status/1965621510464553267","timestamp":"1757475662","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"aa64d046-ad08-5909-8698-8d20ad0851ac","type":"url","category":"Network activity","to_ids":true,"value":"https://eng-ledger.io","comment":"https://x.com/destroyphishing/status/1965621584762470557","timestamp":"1757475679","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"70aff6e2-7e01-582e-8e69-e3cb258dcfe8","type":"domain","category":"Network activity","to_ids":true,"value":"eng-ledger.io","comment":"https://x.com/destroyphishing/status/1965621584762470557","timestamp":"1757475679","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c4e8d32f-a403-5f25-b98d-95c19e0ffd0c","type":"url","category":"Network activity","to_ids":true,"value":"https://lsm.d2wnkmujzml98.amplifyapp.com","comment":"https://x.com/destroyphishing/status/1965621730703278364","timestamp":"1757475714","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e95803f4-73fd-5758-85a0-61201ee1458d","type":"domain","category":"Network activity","to_ids":true,"value":"lsm.d2wnkmujzml98.amplifyapp.com","comment":"https://x.com/destroyphishing/status/1965621730703278364","timestamp":"1757475714","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e9467dd5-259d-52fd-ab35-556efe591500","type":"domain","category":"Network activity","to_ids":true,"value":"checkbnbusdt.com","comment":"https://x.com/destroyphishing/status/1965621816854196698","timestamp":"1757475735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ee136ba-3132-5ec6-947b-e19087b805fd","type":"url","category":"Network activity","to_ids":true,"value":"https://checkbnbusdt.com","comment":"https://x.com/destroyphishing/status/1965621816854196698","timestamp":"1757475735","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9a033f80-a8b5-5a7d-9434-0d544a00e50f","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawadfack.com%E2%88%95brcmwysdqu@zeiwzlaf.robodelta.cn/XJUCT/profile/gnDpH/rewards/9a4KEY9IhB1/lz7Gf","comment":"https://x.com/romonlyht/status/1965623876949578042","timestamp":"1757476226","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20742c8d-8380-5e87-a891-dedb75feaa2f","type":"url","category":"Network activity","to_ids":true,"value":"http://zeiwzlaf.robodelta.cn/XJUCT/profile/gnDpH/rewards/9a4KEY9IhB1/lz7Gf","comment":"https://x.com/romonlyht/status/1965623876949578042","timestamp":"1757476226","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5994e6d8-24d8-5a31-82c5-832afa657a88","type":"ip-dst","category":"Network activity","to_ids":true,"value":"27.155.34.127","comment":"https://x.com/romonlyht/status/1965623876949578042","timestamp":"1757476226","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5d244760-0fd6-5eed-bae3-e2ad4278bfb9","type":"domain","category":"Network activity","to_ids":true,"value":"dddduthoritati.yourtrap.com","comment":"https://x.com/romonlyht/status/1965623887573733659","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e8e4e380-1093-5ee9-9db4-bd18d54cbf45","type":"url","category":"Network activity","to_ids":true,"value":"https://dddduthoritati.yourtrap.com/dskjhwkq/231/ewq=sagawaa","comment":"https://x.com/romonlyht/status/1965623887573733659","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"69b32256-6c79-5383-b2da-541701c09832","type":"domain","category":"Network activity","to_ids":true,"value":"zeiwzlaf.robodelta.cn","comment":"https://x.com/romonlyht/status/1965623884155335151","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5eeed934-a917-598e-92a2-52fa65f3145c","type":"md5","category":"Payload delivery","to_ids":true,"value":"6fef0f58a33df9db3d969c835f71e9f2","comment":"https://x.com/romonlyht/status/1965623887573733659","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9758eae1-dcae-5ede-8ffa-09da54210a3b","type":"url","category":"Network activity","to_ids":true,"value":"https://sagawadfack.com%E2%88%95brcmwysdqu@zeiwzlaf.robodelta.cn/XJUCT/profile/gnDpH/rewards/9a4KEY9IhB1/lz7Gf/inbox/1dSATeZiWxC9jM/QQ_oRoL/feedback/yBISaHh/product/W0jNJc/promo?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=","comment":"https://x.com/romonlyht/status/1965623884155335151","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb068adb-de37-5e3c-ab63-2097b968a8aa","type":"url","category":"Network activity","to_ids":true,"value":"http://zeiwzlaf.robodelta.cn/XJUCT/profile/gnDpH/rewards/9a4KEY9IhB1/lz7Gf/inbox/1dSATeZiWxC9jM/QQ_oRoL/feedback/yBISaHh/product/W0jNJc/promo?timezone=Asia%2FTokyo&lang=ja&platform=iPad&signed=","comment":"https://x.com/romonlyht/status/1965623884155335151","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c2181a00-395e-5c37-b9ba-ba7c988c5957","type":"domain","category":"Network activity","to_ids":true,"value":"sagawadfack.com%E2%88%95brcmwysdqu@zeiwzlaf.robodelta.cn","comment":"https://x.com/romonlyht/status/1965623884155335151","timestamp":"1757476228","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c8539771-4119-5fa8-8b8d-dd8d77ad116c","type":"domain","category":"Network activity","to_ids":true,"value":"wallet.web-rabby.to","comment":"https://x.com/destroyphishing/status/1965625277343785348","timestamp":"1757476560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b42f9c5c-537e-55c6-ad05-5dab8ffa46b6","type":"url","category":"Network activity","to_ids":true,"value":"https://wallet.web-rabby.to","comment":"https://x.com/destroyphishing/status/1965625277343785348","timestamp":"1757476560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d563fd72-36ae-5b4c-a507-301db246ae1f","type":"domain","category":"Network activity","to_ids":true,"value":"perfcthungry111.weebly.com","comment":"https://x.com/urldna_bot/status/1965626325667876870","timestamp":"1757476810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"833feb59-c9f3-5eec-ad86-b27b8bde6cc8","type":"url","category":"Network activity","to_ids":true,"value":"https://perfcthungry111.weebly.com","comment":"https://x.com/urldna_bot/status/1965626325667876870","timestamp":"1757476810","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a0701561-5835-5474-831f-1cc2a7f2d7c7","type":"url","category":"Network activity","to_ids":true,"value":"https://gitlab.com/namc2931-group","comment":"https://x.com/skocherhan/status/1965628782934704203","timestamp":"1757477396","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"e686fd58-4060-5e64-b8be-028517571466","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c0404530e506e18cdaf18d28f1f9ed0","comment":"https://x.com/skocherhan/status/1965628782934704203","timestamp":"1757477396","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"4b5bfae2-8b16-507b-9d02-653f96dd9228","type":"domain","category":"Network activity","to_ids":true,"value":"chomars.com","comment":"https://x.com/romonlyht/status/1965629401787466026","timestamp":"1757477543","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7fe27c62-3319-565c-8e41-fe91a66a164a","type":"url","category":"Network activity","to_ids":true,"value":"https://chomars.com/jp","comment":"https://x.com/romonlyht/status/1965629401787466026","timestamp":"1757477543","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af843a41-0d8f-5266-97f7-49669642a551","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.251.3","comment":"https://x.com/romonlyht/status/1965629401787466026","timestamp":"1757477543","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ba669c76-418e-556c-85bc-4ccdd35b2f44","type":"url","category":"Network activity","to_ids":true,"value":"https://chomars.com/jp/","comment":"https://x.com/romonlyht/status/1965629401787466026","timestamp":"1757477543","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6de58854-c363-5217-9722-a2b678679715","type":"domain","category":"Network activity","to_ids":true,"value":"smoochiezz.com","comment":"https://x.com/romonlyht/status/1965629841920983274","timestamp":"1757477648","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41130177-6335-5fc0-acb9-34c33fe418b0","type":"url","category":"Network activity","to_ids":true,"value":"https://smoochiezz.com/jp","comment":"https://x.com/romonlyht/status/1965629841920983274","timestamp":"1757477648","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"03f15f9f-d5bc-593d-9285-ba02d7f6366b","type":"url","category":"Network activity","to_ids":true,"value":"https://smoochiezz.com/jp/","comment":"https://x.com/romonlyht/status/1965629841920983274","timestamp":"1757477648","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc7109f1-831d-50d7-885b-aecb8e7837fa","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.rpmms.com","comment":"https://x.com/romonlyht/status/1965629846144651317","timestamp":"1757477649","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ca75c3db-d174-5cc4-baa4-743221414dcc","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.rpmms.com/Login","comment":"https://x.com/romonlyht/status/1965629846144651317","timestamp":"1757477649","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bf50c4c0-db3a-514c-b4a8-e455d3a72a3c","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.rpmms.com/Login/","comment":"https://x.com/romonlyht/status/1965629846144651317","timestamp":"1757477649","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30792ae6-0d13-5889-9222-52f2d8d679aa","type":"domain","category":"Network activity","to_ids":true,"value":"ftpbbs.com","comment":"https://x.com/romonlyht/status/1965630254460051655","timestamp":"1757477746","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45f7e91b-a00c-57bd-84c1-0a30b359d9b1","type":"url","category":"Network activity","to_ids":true,"value":"https://ftpbbs.com/jp","comment":"https://x.com/romonlyht/status/1965630254460051655","timestamp":"1757477746","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"29813fd8-6670-5364-bce5-137020ec72fd","type":"url","category":"Network activity","to_ids":true,"value":"https://ftpbbs.com/jp/","comment":"https://x.com/romonlyht/status/1965630254460051655","timestamp":"1757477746","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6979bf46-1e46-53bd-8ada-79929e1a32c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.160.251.30","comment":"https://x.com/romonlyht/status/1965630277356822814","timestamp":"1757477752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ac48f1b-3e21-5e04-a2dd-a49b7c6e8cd7","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex-co-jp.mozmorris.com","comment":"https://x.com/romonlyht/status/1965630277356822814","timestamp":"1757477752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e1ee391-6201-57e6-824e-8a40e5b3f0c8","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.mozmorris.com/Login/","comment":"https://x.com/romonlyht/status/1965630277356822814","timestamp":"1757477752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d22f4282-6410-540c-87bb-9d8f093096fc","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex-co-jp.mozmorris.com/Login","comment":"https://x.com/romonlyht/status/1965630277356822814","timestamp":"1757477752","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"be7375e0-a92a-5e38-9fe2-fa2e16d4d29c","type":"url","category":"Network activity","to_ids":true,"value":"https://rakutenoywjodtmvt.com%E2%88%95fluja@dyfrp.zxnfq.cn/JIOEaeR/shipping/DVxUdK2s_j/EtlAjhQx/promo/P9ce0t/","comment":"https://x.com/romonlyht/status/1965636022706077903","timestamp":"1757479122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9fd2f4e-0053-515d-961d-8c91a47a6d6e","type":"url","category":"Network activity","to_ids":true,"value":"http://dyfrp.zxnfq.cn/JIOEaeR/shipping/DVxUdK2s_j/EtlAjhQx/promo/P9ce0t/","comment":"https://x.com/romonlyht/status/1965636022706077903","timestamp":"1757479122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"76286941-912d-5100-afab-dd7cee345637","type":"ip-dst","category":"Network activity","to_ids":true,"value":"121.63.232.236","comment":"https://x.com/romonlyht/status/1965636022706077903","timestamp":"1757479122","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6bf4f122-7e0c-5f95-8017-9187389789fa","type":"domain","category":"Network activity","to_ids":true,"value":"dyfrp.zxnfq.cn","comment":"https://x.com/romonlyht/status/1965636026975785383","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f444eb08-8663-5a72-946b-5248338a4e29","type":"url","category":"Network activity","to_ids":true,"value":"https://rakutenoywjodtmvt.com%E2%88%95fluja@dyfrp.zxnfq.cn/JIOEaeR/shipping/DVxUdK2s_j/EtlAjhQx/promo/P9ce0t/user/OFam5drOaAt/n3Leirca/promo/uN1kqGPtvQ/XNVNKofX/payment/-YAdvOj/feedback/QCQQ-R5RhQ?timezone=Asia%2FTokyo&lang=ja&","comment":"https://x.com/romonlyht/status/1965636026975785383","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"954ff6cc-6be8-5246-a62e-cdc8f4d84e57","type":"domain","category":"Network activity","to_ids":true,"value":"rakutenoywjodtmvt.com%E2%88%95fluja@dyfrp.zxnfq.cn","comment":"https://x.com/romonlyht/status/1965636026975785383","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2953396a-0685-5cd1-975f-65de880dd43e","type":"url","category":"Network activity","to_ids":true,"value":"http://dyfrp.zxnfq.cn/JIOEaeR/shipping/DVxUdK2s_j/EtlAjhQx/promo/P9ce0t/user/OFam5drOaAt/n3Leirca/promo/uN1kqGPtvQ/XNVNKofX/payment/-YAdvOj/feedback/QCQQ-R5RhQ?timezone=Asia%2FTokyo&lang=ja&","comment":"https://x.com/romonlyht/status/1965636026975785383","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a19f2712-cdc1-5112-a4e1-64dba9b6c72b","type":"url","category":"Network activity","to_ids":true,"value":"https://pppsagawanauthoritatiwwsss.jkub.com/wzkhetoz/weqw321=youju","comment":"https://x.com/romonlyht/status/1965636029073039393","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"615cccd3-e0c8-572d-9d95-a479646aabe0","type":"domain","category":"Network activity","to_ids":true,"value":"pppsagawanauthoritatiwwsss.jkub.com","comment":"https://x.com/romonlyht/status/1965636029073039393","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"30a26da2-f561-5065-b7cb-7f5ba27a1bb9","type":"md5","category":"Payload delivery","to_ids":true,"value":"3f68a0141bce7cb710821ca4c099fdea","comment":"https://x.com/romonlyht/status/1965636029073039393","timestamp":"1757479123","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"776436e4-2482-5140-b1df-f5ded788e560","type":"domain","category":"Network activity","to_ids":true,"value":"maxdesushi.com","comment":"https://x.com/romonlyht/status/1965640086890184810","timestamp":"1757480091","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5a3ec24c-0441-5599-a7f2-0c7f2392ace1","type":"url","category":"Network activity","to_ids":true,"value":"https://maxdesushi.com/jp","comment":"https://x.com/romonlyht/status/1965640086890184810","timestamp":"1757480091","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f77a6fd7-1e79-5d48-9eab-d3839dcd1bce","type":"url","category":"Network activity","to_ids":true,"value":"https://maxdesushi.com/jp/","comment":"https://x.com/romonlyht/status/1965640086890184810","timestamp":"1757480091","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91caf46c-aa91-5f0a-9ca9-f3048b537215","type":"domain","category":"Network activity","to_ids":true,"value":"my-goodnight.com","comment":"https://x.com/harugasumi/status/1965641971206422882","timestamp":"1757480540","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9e5329a6-dcf7-5767-bea8-b610c0467393","type":"url","category":"Network activity","to_ids":true,"value":"https://my-goodnight.com/yahoo-mail","comment":"https://x.com/harugasumi/status/1965641971206422882","timestamp":"1757480540","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88fd0468-6d2f-5bff-b989-1d38413604ab","type":"domain","category":"Network activity","to_ids":true,"value":"drainer.website","comment":"https://x.com/destroyphishing/status/1965643176724893814","timestamp":"1757480827","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0c26bd0c-50a8-5873-a1ec-461637daabd5","type":"url","category":"Network activity","to_ids":true,"value":"https://www.drainer.website","comment":"https://x.com/destroyphishing/status/1965643176724893814","timestamp":"1757480827","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c82cbf4a-e873-540f-865b-edfcda159f47","type":"md5","category":"Payload delivery","to_ids":true,"value":"f4d0603cce9b9880c56bdffac38030b8","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"cb39c1ef-30f3-57a5-998e-1fdb0c850c1a","type":"md5","category":"Payload delivery","to_ids":true,"value":"227a84d83fb209cafb1c917ebb0d61e1","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"4818e0ef-5758-5e28-8db2-57cafdb1a144","type":"md5","category":"Payload delivery","to_ids":true,"value":"6e80dcb76958221dcb3bcd7a42f68dee","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"87336348-bd03-5d4f-97ab-306aec1ec587","type":"md5","category":"Payload delivery","to_ids":true,"value":"dc8ce09b815f77f0eba01fc93d88973b","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"9b1baa29-be3a-5d47-b272-ad814274d351","type":"md5","category":"Payload delivery","to_ids":true,"value":"f4205320b43433db504018ba8f0275b8","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"1bc7c294-661b-5540-88ef-6dea24e4c42f","type":"md5","category":"Payload delivery","to_ids":true,"value":"184bf6c1e0bb523ccc742ad432ad3080","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"db5e8d0e-fd69-5f4e-9bde-f1ba76c5de09","type":"md5","category":"Payload delivery","to_ids":true,"value":"b1f2f69fcab86d5bae208f8c9f58fa29","comment":"https://x.com/suyog41/status/1965643383227228448","timestamp":"1757480877","distribution":"5"},{"uuid":"e99f69b3-7d72-5602-904f-c4a2defa6925","type":"domain","category":"Network activity","to_ids":true,"value":"walletscouter.com","comment":"https://x.com/destroyphishing/status/1965648127412891868","timestamp":"1757482008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"02ac7b2f-1fb3-51e5-8c63-14b14c7c7d03","type":"url","category":"Network activity","to_ids":true,"value":"https://www.walletscouter.com","comment":"https://x.com/destroyphishing/status/1965648127412891868","timestamp":"1757482008","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7e09090-e0f3-5e18-aa4b-8b458b79ce38","type":"domain","category":"Network activity","to_ids":true,"value":"orangecountyscu.weebly.com","comment":"https://x.com/urldna_bot/status/1965656511037772073","timestamp":"1757484007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b2f9ce01-800d-5369-b0bc-26c17a0d2808","type":"url","category":"Network activity","to_ids":true,"value":"https://orangecountyscu.weebly.com","comment":"https://x.com/urldna_bot/status/1965656511037772073","timestamp":"1757484007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"359f2c8f-62de-5594-8bb6-d7a7967dda8a","type":"md5","category":"Payload delivery","to_ids":true,"value":"e2837b0d247093a5b1536bd4ff3c703b","comment":"https://x.com/suyog41/status/1965659170914648419","timestamp":"1757484641","distribution":"5"},{"uuid":"1743ac36-980e-5a40-a7d6-0c1a4d608d99","type":"domain","category":"Network activity","to_ids":true,"value":"escortsunitha.com","comment":"https://x.com/destroyphishing/status/1965660842982342993","timestamp":"1757485039","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3abd4eab-c871-561c-8f99-84f4698b4692","type":"url","category":"Network activity","to_ids":true,"value":"https://www.escortsunitha.com","comment":"https://x.com/destroyphishing/status/1965660842982342993","timestamp":"1757485039","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8081d4ff-6947-5cd7-b432-1f5a3a5094d0","type":"url","category":"Network activity","to_ids":true,"value":"https://xrpma.mystagingwebsite.com/wp-admin/xrpm/login.php","comment":"https://x.com/JAMESWT_WT/status/1965667465289236761","timestamp":"1757486618","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6f5f8a0-ec93-51e1-b9d2-cdb96f5b4322","type":"domain","category":"Network activity","to_ids":true,"value":"xrpma.mystagingwebsite.com","comment":"https://x.com/JAMESWT_WT/status/1965667465289236761","timestamp":"1757486618","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40f3c30a-7b40-53f0-8150-8398096d5709","type":"domain","category":"Network activity","to_ids":true,"value":"londonefr.s3.eu-north-1.amazonaws.com","comment":"https://x.com/JAMESWT_WT/status/1965669710755934555","timestamp":"1757487154","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"15ca4e1d-0998-599d-9a6a-92c2e20d2663","type":"url","category":"Network activity","to_ids":true,"value":"https://londonefr.s3.eu-north-1.amazonaws.com/maillerloginsfreafree.html","comment":"https://x.com/JAMESWT_WT/status/1965669710755934555","timestamp":"1757487154","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d95ba3b6-a5bb-5092-98bd-955ae8761320","type":"domain","category":"Network activity","to_ids":true,"value":"sump.loginsaton.staffpromo.cv","comment":"https://x.com/JAMESWT_WT/status/1965669710755934555","timestamp":"1757487154","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cfad26b5-28c5-59f3-8fa4-63f3426861af","type":"url","category":"Network activity","to_ids":true,"value":"https://sump.loginsaton.staffpromo.cv","comment":"https://x.com/JAMESWT_WT/status/1965669710755934555","timestamp":"1757487154","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8f87467a-5b64-53bc-9967-e4956eb65f84","type":"url","category":"Network activity","to_ids":true,"value":"https://s3.us-east-2.amazonaws.com/eu-west-1.console.aws.amazon.com001/urchindex.html","comment":"https://x.com/JAMESWT_WT/status/1965670772833386613","timestamp":"1757487407","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb2d708b-e081-5e3a-b288-ecc1c5ac1222","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a3f5013a472753bc401da42afc05b0d2d3728bf43d63b3b34aab4d76dfbf6783","comment":"https://x.com/malwrhunterteam/status/1965682468738269467","timestamp":"1757490195","distribution":"5"},{"uuid":"dd2f5d89-5080-5f12-9f3b-42813143ba0a","type":"sha256","category":"Payload delivery","to_ids":true,"value":"473351bdc8c28259e3c0eacf0f85e83067c5e1b2b612b65bd196b9a6fc9dcad2","comment":"https://x.com/smica83/status/1965685605972713683","timestamp":"1757490943","distribution":"5"},{"uuid":"d4f532dd-fc11-56d6-b6ac-f5429e947f67","type":"sha256","category":"Payload delivery","to_ids":true,"value":"4c6f0497d3903bb7a51466a78aa288bc564b7403ed2dc0682aee37c4e6648e01","comment":"https://x.com/solostalking/status/1965686151853076890","timestamp":"1757491073","distribution":"5"},{"uuid":"740b0bbb-4b7b-5593-940e-ea4a82b985c8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.136.81.217","comment":"https://x.com/solostalking/status/1965686151853076890","timestamp":"1757491073","distribution":"5"},{"uuid":"c02e7c36-ef37-5a2c-aa93-7f0e556dd30a","type":"domain","category":"Network activity","to_ids":true,"value":"cailai.org","comment":"https://x.com/smica83/status/1965689344540492234","timestamp":"1757491835","distribution":"5"},{"uuid":"d730f2c5-5583-5bfe-b4a1-e3341c645a9a","type":"url","category":"Network activity","to_ids":true,"value":"http://cailai.org/1.bin","comment":"https://x.com/smica83/status/1965689344540492234","timestamp":"1757491835","distribution":"5"},{"uuid":"b71e29d4-8b99-54a3-bb0a-933ddf32dc3d","type":"domain","category":"Network activity","to_ids":true,"value":"dmoneii.com","comment":"https://x.com/smica83/status/1965689344540492234","timestamp":"1757491835","distribution":"5"},{"uuid":"3dda8585-e018-5842-af25-350b9556c39c","type":"url","category":"Network activity","to_ids":true,"value":"http://dmoneii.com/1.bin","comment":"https://x.com/smica83/status/1965689344540492234","timestamp":"1757491835","distribution":"5"},{"uuid":"95bd2ba5-2367-5dc0-9e21-8d38d307fa0f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.192.202.220:8030","comment":"https://x.com/drb_ra/status/1965695962619298085","timestamp":"1757493413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"743a38cf-28d9-5ae2-b1ce-60f5f5a32ba7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.202.220","comment":"https://x.com/drb_ra/status/1965695962619298085","timestamp":"1757493413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b6150003-7e5d-58bd-8edd-f02b74bb1f55","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.192.193.92","comment":"https://x.com/drb_ra/status/1965695962619298085","timestamp":"1757493413","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"e00884e7-d997-5489-9488-0b2cc90f0652","type":"url","category":"Network activity","to_ids":true,"value":"https://1.95.135.26/IE9CompatViewList.xml","comment":"https://x.com/drb_ra/status/1965696132580819450","timestamp":"1757493453","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"55fc378d-b3b3-508f-8bcf-60b883e44764","type":"url","category":"Network activity","to_ids":true,"value":"http://1.95.135.26:8888","comment":"https://x.com/drb_ra/status/1965696132580819450","timestamp":"1757493453","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"06b30765-e593-526d-958f-5179e11121a1","type":"domain","category":"Network activity","to_ids":true,"value":"apexku.rllc.top","comment":"https://x.com/smica83/status/1965710627869261828","timestamp":"1757496909","distribution":"5"},{"uuid":"bf29a737-7bd3-54f9-a875-230a7748061c","type":"url","category":"Network activity","to_ids":true,"value":"http://apexku.rllc.top","comment":"https://x.com/smica83/status/1965710627869261828","timestamp":"1757496909","distribution":"5"},{"uuid":"880eed9d-ede3-53c4-8884-ef171d068713","type":"url","category":"Network activity","to_ids":true,"value":"http://discover.sale","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a001f239-7af9-5743-a88c-7f643c62aa3e","type":"domain","category":"Network activity","to_ids":true,"value":"payoneer.host","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ac33d586-a76a-5aaf-a550-8c3b8e437e63","type":"domain","category":"Network activity","to_ids":true,"value":"discover.sale","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"655a2717-f0e1-5e91-90d0-adbc6896ccf9","type":"domain","category":"Network activity","to_ids":true,"value":"bank-australia.net","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"3f8a7ade-ffaa-52ab-8aff-8b0958f91bbc","type":"url","category":"Network activity","to_ids":true,"value":"http://bank-australia.net","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d825f8bd-1b4f-5cc2-81db-c6b83012d4f1","type":"url","category":"Network activity","to_ids":true,"value":"http://payoneer.host","comment":"https://x.com/c9lab_soc/status/1965722612862238902","timestamp":"1757499766","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"be5bb9ea-09fb-5d5d-beee-e8e2390a11c9","type":"url","category":"Network activity","to_ids":true,"value":"https://221.132.29.137/view.jsp","comment":"https://x.com/drb_ra/status/1965729246132760976","timestamp":"1757501348","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"77907db3-be41-5bae-801c-171ff447e88d","type":"url","category":"Network activity","to_ids":true,"value":"http://221.132.29.137:80","comment":"https://x.com/drb_ra/status/1965729246132760976","timestamp":"1757501348","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9da81a03-17cd-5c9c-a184-4694257383ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"221.132.29.137","comment":"https://x.com/drb_ra/status/1965729246132760976","timestamp":"1757501348","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"9284e5e1-9926-5cc5-9359-f05a6203b320","type":"url","category":"Network activity","to_ids":true,"value":"http://103.171.35.26:6443","comment":"https://x.com/drb_ra/status/1965729263530762583","timestamp":"1757501352","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f492ecc8-a2f9-56cd-9109-de186a46fdd9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.171.35.26","comment":"https://x.com/drb_ra/status/1965729263530762583","timestamp":"1757501352","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"f19f271a-4e29-5a5a-8203-8a035e3f03e2","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.173.62:8001","comment":"https://x.com/drb_ra/status/1965729352806539404","timestamp":"1757501373","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2d0f767e-9bb2-59df-a140-9d177f7ceaf7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"101.132.173.62","comment":"https://x.com/drb_ra/status/1965729352806539404","timestamp":"1757501373","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"60fa6473-699d-5e52-b7bd-dcf3444408f8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.100.27.142","comment":"https://x.com/drb_ra/status/1965729387598221314","timestamp":"1757501382","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c519985-eec1-5a88-91ab-f7b706e77a70","type":"url","category":"Network activity","to_ids":true,"value":"http://43.100.27.142:443","comment":"https://x.com/drb_ra/status/1965729387598221314","timestamp":"1757501382","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"90202d0d-24ed-5f28-8af0-aa89a67d6c55","type":"sha256","category":"Payload delivery","to_ids":true,"value":"f9e9709e71c934719c20812d0fb6f98f4e58721d651b04cf0395430607d7951b","comment":"https://x.com/malwrhunterteam/status/1965729764670628137","timestamp":"1757501472","distribution":"5"},{"uuid":"c4acb9de-c499-5f40-b99d-610dda807a82","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.106.100.214","comment":"https://x.com/malwrhunterteam/status/1965729764670628137","timestamp":"1757501472","distribution":"5"},{"uuid":"9c2ac0bd-0376-5555-bbe7-4fcaa2dda06d","type":"url","category":"Network activity","to_ids":true,"value":"http://87.106.100.214","comment":"https://x.com/malwrhunterteam/status/1965729764670628137","timestamp":"1757501472","distribution":"5"},{"uuid":"a8999657-fd52-5c4a-9726-1a11a33756fb","type":"url","category":"Network activity","to_ids":true,"value":"http://193.218.188.246","comment":"https://x.com/malwrhunterteam/status/1965736613851668866","timestamp":"1757503105","distribution":"5"},{"uuid":"7bb7de52-05c4-561c-8354-35fc70bd1030","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.218.188.246","comment":"https://x.com/malwrhunterteam/status/1965736613851668866","timestamp":"1757503105","distribution":"5"},{"uuid":"a618b2ba-2b52-5c9c-8ec3-2a0475b3e4d3","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9032cfc2074c405dbcb967bfda8c8295d34db4f6cf56727d3a2f7fe4ce49abd9","comment":"https://x.com/malwrhunterteam/status/1965736613851668866","timestamp":"1757503105","distribution":"5"},{"uuid":"ec6c1ea9-9811-5808-87ea-7223e03e2734","type":"domain","category":"Network activity","to_ids":true,"value":"ace052025.ddns.net","comment":"https://x.com/malwrhunterteam/status/1965740560117023221","timestamp":"1757504045","distribution":"5"},{"uuid":"b439d9c6-2dd2-5dd5-8beb-07f4cf5ba78b","type":"url","category":"Network activity","to_ids":true,"value":"http://ace052025.ddns.net","comment":"https://x.com/malwrhunterteam/status/1965740560117023221","timestamp":"1757504045","distribution":"5"},{"uuid":"eb9f247c-dc50-5231-b0bc-59ba7ce74ec3","type":"url","category":"Network activity","to_ids":true,"value":"http://203.96.177.203","comment":"https://x.com/malwrhunterteam/status/1965740560117023221","timestamp":"1757504045","distribution":"5"},{"uuid":"f1ecc038-9917-5003-98bf-8b76a6697cb2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.96.177.203","comment":"https://x.com/malwrhunterteam/status/1965740560117023221","timestamp":"1757504045","distribution":"5"},{"uuid":"694bda6f-6702-58c8-8874-1300de9a7daa","type":"sha256","category":"Payload delivery","to_ids":true,"value":"c407e14578785bb299e8cf32937529d23da5023d0aceb50e63063c41317263ac","comment":"https://x.com/malwrhunterteam/status/1965740560117023221","timestamp":"1757504045","distribution":"5"},{"uuid":"3b8d11b1-1322-51c2-ad36-04ab0be5d55c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.245.152.60","comment":"https://x.com/malwrhunterteam/status/1965744952312508576","timestamp":"1757505093","distribution":"5"},{"uuid":"c9c9652b-5240-516c-95db-1a8e98253344","type":"domain","category":"Network activity","to_ids":true,"value":"ichvill.icu","comment":"https://x.com/malwrhunterteam/status/1965744952312508576","timestamp":"1757505093","distribution":"5"},{"uuid":"576e7081-fce5-587a-a319-a6ebc564bfe4","type":"url","category":"Network activity","to_ids":true,"value":"http://ichvill.icu","comment":"https://x.com/malwrhunterteam/status/1965744952312508576","timestamp":"1757505093","distribution":"5"},{"uuid":"4ef3d039-ea0b-5af3-8480-485c94b9ede9","type":"url","category":"Network activity","to_ids":true,"value":"http://172.245.152.60","comment":"https://x.com/malwrhunterteam/status/1965744952312508576","timestamp":"1757505093","distribution":"5"},{"uuid":"b556e3b4-9d0b-5e74-9d9b-350767007a76","type":"url","category":"Network activity","to_ids":true,"value":"https://f-capture.com/img/","comment":"https://x.com/ShadowOpCode/status/1965746843348050318","timestamp":"1757505543","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"755eb088-8217-5504-9034-cd1d4df498b0","type":"domain","category":"Network activity","to_ids":true,"value":"f-capture.com","comment":"https://x.com/ShadowOpCode/status/1965746843348050318","timestamp":"1757505543","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"1ecf2e26-752a-52dd-b60e-c181c4b483d9","type":"url","category":"Network activity","to_ids":true,"value":"https://heuang.unaux.com/docx/file2.jpg","comment":"https://x.com/ShadowOpCode/status/1965746843348050318","timestamp":"1757505543","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"174a254b-a8db-5595-b55f-b01707b8ca19","type":"domain","category":"Network activity","to_ids":true,"value":"spotify-02.vercel.app","comment":"https://x.com/urldna_bot/status/1965747112898974175","timestamp":"1757505608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0ed6c4b2-a01c-5b39-ac64-b31310bf810b","type":"url","category":"Network activity","to_ids":true,"value":"https://spotify-02.vercel.app","comment":"https://x.com/urldna_bot/status/1965747112898974175","timestamp":"1757505608","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"db0ab9c1-ab1f-5801-95cd-8f924f48d0c1","type":"url","category":"Network activity","to_ids":true,"value":"http://31.ip.gl.ply.gg","comment":"https://x.com/SarlackLab/status/1965747160831427007","timestamp":"1757505619","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"1e421b51-5361-5344-8973-cf1c9553616f","type":"domain","category":"Network activity","to_ids":true,"value":"31.ip.gl.ply.gg","comment":"https://x.com/SarlackLab/status/1965747160831427007","timestamp":"1757505619","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"6342d13c-bcde-5125-9953-7dbe06a177ba","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.31:30983","comment":"https://x.com/SarlackLab/status/1965747160831427007","timestamp":"1757505619","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"2a2ed3cb-2370-5b81-a9b7-c1eea1404aa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.31","comment":"https://x.com/SarlackLab/status/1965747160831427007","timestamp":"1757505619","distribution":"5","Tag":[{"name":"C2"},{"name":"Njrat"}]},{"uuid":"d608ee03-8771-59c8-9878-1d209eef8859","type":"domain","category":"Network activity","to_ids":true,"value":"heuang.unaux.com","comment":"https://x.com/JAMESWT_WT/status/1965747964233891946","timestamp":"1757505811","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"064d99fb-f37c-539c-b686-0eb3f17af67e","type":"url","category":"Network activity","to_ids":true,"value":"https://heuang.unaux.com/docx/","comment":"https://x.com/JAMESWT_WT/status/1965747964233891946","timestamp":"1757505811","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"ad49f84c-db30-5de6-98d7-782c06a8960a","type":"domain","category":"Network activity","to_ids":true,"value":"securedocusharex.com","comment":"https://x.com/malwrhunterteam/status/1965749053687570440","timestamp":"1757506070","distribution":"5"},{"uuid":"5dbf2ac1-ccd9-56cf-9743-c3c133baff22","type":"url","category":"Network activity","to_ids":true,"value":"https://securedocusharex.com/atera/","comment":"https://x.com/malwrhunterteam/status/1965749053687570440","timestamp":"1757506070","distribution":"5"},{"uuid":"0a631f4b-143c-57da-bf5c-96e4ac66f67b","type":"domain","category":"Network activity","to_ids":true,"value":"energy777.duckdns.org","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"ef036058-0ac0-5de3-881a-168df80aee03","type":"url","category":"Network activity","to_ids":true,"value":"http://energy777.duckdns.org","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"2ad6eb70-331f-50f5-9d8a-d2100021cc06","type":"domain","category":"Network activity","to_ids":true,"value":"wormoni.lms-austria.com:60736","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"fddd6092-1568-5005-8dcb-cd67f694e609","type":"url","category":"Network activity","to_ids":true,"value":"http://wormoni.lms-austria.com:60736","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"c7e12d90-7b0b-531b-95a3-e7f0075ac49f","type":"url","category":"Network activity","to_ids":true,"value":"http://192.145.124.5","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"f32bdde4-c063-5d9b-acd7-f4db255f629f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.145.124.5","comment":"https://x.com/skocherhan/status/1965764004007268438","timestamp":"1757509635","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"17123230-837e-5c2a-80fa-b9dd1d2a5889","type":"domain","category":"Network activity","to_ids":true,"value":"dmoneff.com","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"66b74c89-f767-588b-a757-5d91eeceae45","type":"url","category":"Network activity","to_ids":true,"value":"http://dmoneff.com","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"013e5e94-624d-5394-8705-886d948ff01a","type":"url","category":"Network activity","to_ids":true,"value":"http://dmoneii.com","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"a52555fb-292c-5bb1-9efb-29a6b3db7dc9","type":"url","category":"Network activity","to_ids":true,"value":"http://103.68.181.198","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"54b770ad-23d7-54f1-9dec-f477b203158f","type":"url","category":"Network activity","to_ids":true,"value":"http://110.92.65.18:1688","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"617cecad-3ea4-5016-ab94-c5c3a8a93e73","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.68.181.198","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"3f5b663e-f534-5fef-871e-df6fa15e5aa9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"110.92.65.18","comment":"https://x.com/skocherhan/status/1965766168041660913","timestamp":"1757510151","distribution":"5"},{"uuid":"a317b15d-0d49-53f5-8f98-df88537ff38b","type":"domain","category":"Network activity","to_ids":true,"value":"laicai.ddo.jp","comment":"https://x.com/skocherhan/status/1965767380153634954","timestamp":"1757510440","distribution":"5"},{"uuid":"4ca94c04-e583-5b2f-adc7-2568a7bfd7bf","type":"url","category":"Network activity","to_ids":true,"value":"http://laicai.ddo.jp","comment":"https://x.com/skocherhan/status/1965767380153634954","timestamp":"1757510440","distribution":"5"},{"uuid":"c47bf1e5-2fde-54ef-aa01-b8b102ff5a6b","type":"url","category":"Network activity","to_ids":true,"value":"http://107.148.50.12","comment":"https://x.com/skocherhan/status/1965767380153634954","timestamp":"1757510440","distribution":"5"},{"uuid":"d7509cf1-8101-54a6-a90a-5c971fe71618","type":"ip-dst","category":"Network activity","to_ids":true,"value":"107.148.50.12","comment":"https://x.com/skocherhan/status/1965767380153634954","timestamp":"1757510440","distribution":"5"},{"uuid":"abd1118d-138b-5d01-98a8-0a448cc5f11b","type":"url","category":"Network activity","to_ids":true,"value":"http://148.135.66.227","comment":"https://x.com/malwrhunterteam/status/1965767493466968552","timestamp":"1757510467","distribution":"5"},{"uuid":"81b7a163-d70b-5ff5-a694-906d9a80b8ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.135.66.227","comment":"https://x.com/malwrhunterteam/status/1965767493466968552","timestamp":"1757510467","distribution":"5"},{"uuid":"8e99853d-6cc7-5b24-a9a7-07fe520aeee7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"029dc53d3abeacb1cc64996a143b895d2c86eee9e74f95b87412619105d7077b","comment":"https://x.com/malwrhunterteam/status/1965767493466968552","timestamp":"1757510467","distribution":"5"},{"uuid":"8c809bde-9cc2-51fd-8266-05f411123491","type":"sha256","category":"Payload delivery","to_ids":true,"value":"9089449f924cdfa352c72baef5aec7459fd3dcaf01427efe07f387272968703e","comment":"https://x.com/malwrhunterteam/status/1965768698813415840","timestamp":"1757510754","distribution":"5"},{"uuid":"1e861dfd-6de1-5148-8f7a-2c87eea30b31","type":"domain","category":"Network activity","to_ids":true,"value":"wybverwrer.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"b6ac86d9-a0ae-5b51-8aa1-2b4723887a1d","type":"url","category":"Network activity","to_ids":true,"value":"http://wybverwrer.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"e79649dc-7255-5d55-b023-12f76f109ec8","type":"domain","category":"Network activity","to_ids":true,"value":"zskxth.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"3c367b43-c481-56fd-9a11-16c4c991723d","type":"url","category":"Network activity","to_ids":true,"value":"http://zskxth.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"56d85735-ed48-5e7a-8958-2b286e9e64ed","type":"domain","category":"Network activity","to_ids":true,"value":"jdvertert.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"24d593b6-2331-51fa-ad67-ffa21def5d29","type":"url","category":"Network activity","to_ids":true,"value":"http://jdvertert.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"ab021463-3899-5848-968e-328c2c6cc6a3","type":"domain","category":"Network activity","to_ids":true,"value":"zskodv.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"8c2f275d-7cc1-59f5-8085-849df432fb85","type":"url","category":"Network activity","to_ids":true,"value":"http://zskodv.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"31902bbf-fc65-5fa8-a18a-0a934765b09f","type":"domain","category":"Network activity","to_ids":true,"value":"jdcubo.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"60203cf4-701a-5020-b8a7-3663ec9060ec","type":"url","category":"Network activity","to_ids":true,"value":"http://jdcubo.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"328f23a1-7e96-584c-9f73-b08e1a2d0597","type":"domain","category":"Network activity","to_ids":true,"value":"fyxbbw.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"8aa5b6c2-4a6a-5784-9a90-cb421d0eeff1","type":"url","category":"Network activity","to_ids":true,"value":"http://fyxbbw.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"fe0df9e2-7d1b-5444-a555-3fd98c2e4114","type":"domain","category":"Network activity","to_ids":true,"value":"ssyodq.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"5fb1140f-17b7-54bf-a36a-92fcd4b39e49","type":"url","category":"Network activity","to_ids":true,"value":"http://ssyodq.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"13028fb8-a221-599e-b346-2ffe89f0acda","type":"domain","category":"Network activity","to_ids":true,"value":"jmddfgg.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"163712e7-77bd-511e-875e-bedd463fd557","type":"url","category":"Network activity","to_ids":true,"value":"http://jmddfgg.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"bbc38b20-7845-59b7-b22d-1e0f547621d2","type":"domain","category":"Network activity","to_ids":true,"value":"sgszfgd.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"8665a64d-d4a1-578c-b38d-a455029bd25d","type":"url","category":"Network activity","to_ids":true,"value":"http://sgszfgd.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"76c23870-1bc8-5e82-882c-36cfa68f695a","type":"domain","category":"Network activity","to_ids":true,"value":"aqhdsff.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"12feaed7-3ab5-5851-a3e6-d7b5b3a540f9","type":"url","category":"Network activity","to_ids":true,"value":"http://aqhdsff.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"e7a44757-1a86-56d7-a124-e720e5f7d734","type":"domain","category":"Network activity","to_ids":true,"value":"ssdfgdr.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"b0fef854-7e59-58a1-b617-19ec45549db0","type":"url","category":"Network activity","to_ids":true,"value":"http://ssdfgdr.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"afa69ae0-da81-5d1d-8f39-0a17e7f13e6a","type":"domain","category":"Network activity","to_ids":true,"value":"ygsheu.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"77ecbf11-c087-5649-a6d7-caf645befc9c","type":"url","category":"Network activity","to_ids":true,"value":"http://ygsheu.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"dd4d3e7e-4385-5cc7-b90d-d99e6076483a","type":"domain","category":"Network activity","to_ids":true,"value":"xxsrwer.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"2910408d-c9fa-518c-a440-20fdac0e8015","type":"url","category":"Network activity","to_ids":true,"value":"http://xxsrwer.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"ac62c877-5fa9-522a-9b75-6f3ac6828e49","type":"domain","category":"Network activity","to_ids":true,"value":"wybdsfsadf.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"0ff427a3-a1fc-562e-874f-9fa79bfe6267","type":"url","category":"Network activity","to_ids":true,"value":"http://wybdsfsadf.top","comment":"https://x.com/skocherhan/status/1965770429164917077","timestamp":"1757511167","distribution":"5"},{"uuid":"58d33b34-7e39-5e49-a913-db94f85c03f8","type":"url","category":"Network activity","to_ids":true,"value":"http://t.me/s/pywzcgihbg","comment":"https://x.com/suyog41/status/1965772774196027426","timestamp":"1757511726","distribution":"5"},{"uuid":"ae032ddc-d3c2-5afc-8004-f253bdaad2ef","type":"domain","category":"Network activity","to_ids":true,"value":"mueller-effizient-investment.de","comment":"https://x.com/suyog41/status/1965772774196027426","timestamp":"1757511726","distribution":"5"},{"uuid":"e9d1dffe-df10-56c0-94f8-530eea371029","type":"url","category":"Network activity","to_ids":true,"value":"http://mueller-effizient-investment.de","comment":"https://x.com/suyog41/status/1965772774196027426","timestamp":"1757511726","distribution":"5"},{"uuid":"eca92054-0250-5ec8-b3d3-bf5a283220a6","type":"md5","category":"Payload delivery","to_ids":true,"value":"f43a1db5ef50eed77441919c1e43821b","comment":"https://x.com/suyog41/status/1965772774196027426","timestamp":"1757511726","distribution":"5"},{"uuid":"b45b78c3-4426-5ebf-a47f-6366f3682e69","type":"domain","category":"Network activity","to_ids":true,"value":"2sn.top","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"e7c2e835-8eda-57e5-b79c-7be32d61e0ee","type":"url","category":"Network activity","to_ids":true,"value":"http://2sn.top/get.exe","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"dc7a0d25-cfff-54cc-a92d-77ec9b13e138","type":"url","category":"Network activity","to_ids":true,"value":"http://2sn.top/tepqing.exe","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"8b8dee31-0f90-5eaf-908d-7e95ee3ceff2","type":"url","category":"Network activity","to_ids":true,"value":"http://8.218.231.88","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"51a04c96-b031-5db8-8021-4c6761f4a6ec","type":"url","category":"Network activity","to_ids":true,"value":"http://154.23.127.134/1.bin","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"4bc1f36e-5ef6-519c-a537-81b508c848fc","type":"url","category":"Network activity","to_ids":true,"value":"http://154.23.127.134/Updatt.ahk","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"6a206498-7341-58fa-b4c3-bb2cfd225de7","type":"url","category":"Network activity","to_ids":true,"value":"http://154.23.127.134/Updatt.exe","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"7ffca571-65c9-506c-bf95-70479303f407","type":"url","category":"Network activity","to_ids":true,"value":"http://154.23.127.134/get.exe","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"cc7e0be0-3c2c-5972-b81e-d4c193e32755","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.23.127.134","comment":"https://x.com/skocherhan/status/1965773899708461410","timestamp":"1757511994","distribution":"5"},{"uuid":"0ca38ffc-b48d-5c18-a035-6c6cbb467cda","type":"domain","category":"Network activity","to_ids":true,"value":"9f-5d-7q-2c-8x-tyc00885.shop","comment":"https://x.com/masaomi346/status/1965774334217379942","timestamp":"1757512098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e9184ea-5b0f-5568-9a0e-fdba9b500cb1","type":"url","category":"Network activity","to_ids":true,"value":"https://9f-5d-7q-2c-8x-tyc00885.shop/index-Vpass/","comment":"https://x.com/masaomi346/status/1965774334217379942","timestamp":"1757512098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b0d9e55a-cb32-5c17-b3d1-2621400726d1","type":"domain","category":"Network activity","to_ids":true,"value":"tianma8v-8a-v6-9d-4k.shop","comment":"https://x.com/masaomi346/status/1965774334217379942","timestamp":"1757512098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4faec347-f60c-5c04-b555-089d2190f3cf","type":"url","category":"Network activity","to_ids":true,"value":"https://tianma8v-8a-v6-9d-4k.shop/index-Vpass/","comment":"https://x.com/masaomi346/status/1965774334217379942","timestamp":"1757512098","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8fcbbc93-dbc9-57f6-9801-57a0a2323769","type":"domain","category":"Network activity","to_ids":true,"value":"xn--ix3bm9khtaiv.weebly.com","comment":"https://x.com/urldna_bot/status/1965777310218432964","timestamp":"1757512807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"0d9be5b3-36e8-5a1b-857c-b21b6541d256","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--ix3bm9khtaiv.weebly.com","comment":"https://x.com/urldna_bot/status/1965777310218432964","timestamp":"1757512807","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"d8c2fe48-a390-5709-9e95-97fc97b443a9","type":"url","category":"Network activity","to_ids":true,"value":"http://103.97.89.98:443","comment":"https://x.com/SarlackLab/status/1965778655554007134","timestamp":"1757513128","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"edf0da0f-6d15-59ae-9861-83ebad0b7ed1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"103.97.89.98","comment":"https://x.com/SarlackLab/status/1965778655554007134","timestamp":"1757513128","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"324fe69e-92f2-5949-9c18-9d624b0b0e9e","type":"url","category":"Network activity","to_ids":true,"value":"https://127.0.0.1/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965803358058360842","timestamp":"1757519018","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"7bc6d69e-aba0-5f0c-b849-9de2c2e286f8","type":"url","category":"Network activity","to_ids":true,"value":"http://101.132.173.62:4444","comment":"https://x.com/drb_ra/status/1965803358058360842","timestamp":"1757519018","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"84ef6f19-686e-5b2f-89b7-108a5f778654","type":"domain","category":"Network activity","to_ids":true,"value":"mytravelingdate.com","comment":"https://x.com/urldna_bot/status/1965807506992583075","timestamp":"1757520007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ca976e02-97ea-5ff7-9ec5-972e98fc3e67","type":"url","category":"Network activity","to_ids":true,"value":"https://mytravelingdate.com/css/mycss/sa/mycss/","comment":"https://x.com/urldna_bot/status/1965807506992583075","timestamp":"1757520007","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a93e139c-ace6-5bee-bb2d-fd5523433e6c","type":"url","category":"Network activity","to_ids":true,"value":"https://londonefr.s3.eu-north-1.amazonaws.com","comment":"https://x.com/skocherhan/status/1965809447915422090","timestamp":"1757520470","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6a3e4c3-121b-5b63-9e1f-568c4f3f69b2","type":"md5","category":"Payload delivery","to_ids":true,"value":"3e966f088d46a0eb482e3dc4af266c0f","comment":"https://x.com/banthisguy9349/status/1965821050715083187","timestamp":"1757523236","distribution":"5"},{"uuid":"44fe1621-b667-5014-9b5e-a122677d9369","type":"domain","category":"Network activity","to_ids":true,"value":"ongmanibeimeihong.microsolt.org","comment":"https://x.com/skocherhan/status/1965830722226409626","timestamp":"1757525542","distribution":"5"},{"uuid":"85ab1459-65e1-5978-a79c-5b22319ddf68","type":"url","category":"Network activity","to_ids":true,"value":"http://ongmanibeimeihong.microsolt.org","comment":"https://x.com/skocherhan/status/1965830722226409626","timestamp":"1757525542","distribution":"5"},{"uuid":"1945ac96-b195-5feb-856f-833d742c0033","type":"domain","category":"Network activity","to_ids":true,"value":"patrickhicks.org","comment":"https://x.com/malwrhunterteam/status/1965830860269359129","timestamp":"1757525575","distribution":"5"},{"uuid":"f96e3abb-5773-54ae-996f-36773f8bbc59","type":"url","category":"Network activity","to_ids":true,"value":"https://patrickhicks.org/pdfshare/Documents.ps1","comment":"https://x.com/malwrhunterteam/status/1965830860269359129","timestamp":"1757525575","distribution":"5"},{"uuid":"c985d258-95b3-57a0-8b69-18b1d9e926ed","type":"sha256","category":"Payload delivery","to_ids":true,"value":"35c10882732b9631c2b411e22e7796a0feb9abcb820f654daae43f3091b403d2","comment":"https://x.com/malwrhunterteam/status/1965830860269359129","timestamp":"1757525575","distribution":"5"},{"uuid":"077d8c5b-0963-5ed0-953b-40c5d82df7c7","type":"domain","category":"Network activity","to_ids":true,"value":"servicepluscare-24x7.github.io","comment":"https://x.com/urldna_bot/status/1965837704374964611","timestamp":"1757527206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8fd87051-9dfa-5de8-bc7e-c4901b4a982a","type":"url","category":"Network activity","to_ids":true,"value":"http://servicepluscare-24x7.github.io","comment":"https://x.com/urldna_bot/status/1965837704374964611","timestamp":"1757527206","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7ea0542c-452a-5565-8ba0-a8cc5701ad7d","type":"domain","category":"Network activity","to_ids":true,"value":"heilkerionhd.lima.zone","comment":"https://x.com/JAMESWT_WT/status/1965840148303863851","timestamp":"1757527789","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9eaa30a0-0ad5-5349-8873-4a28024af6e1","type":"url","category":"Network activity","to_ids":true,"value":"https://heilkerionhd.lima.zone/aa-seo/bpm/web/login.php","comment":"https://x.com/JAMESWT_WT/status/1965840148303863851","timestamp":"1757527789","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e53cf4b4-a9bb-52bc-8163-4861a8fafb21","type":"url","category":"Network activity","to_ids":true,"value":"http://192.3.229.231:58888","comment":"https://x.com/midnight_comms/status/1965842985444323723","timestamp":"1757528465","distribution":"5"},{"uuid":"dd3f6f02-59dd-529b-8931-9d0e11e050b5","type":"url","category":"Network activity","to_ids":true,"value":"http://192.3.98.53","comment":"https://x.com/midnight_comms/status/1965842985444323723","timestamp":"1757528465","distribution":"5"},{"uuid":"6f3765f8-b6e5-5f06-b908-cae830843e1d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.229.231","comment":"https://x.com/midnight_comms/status/1965842985444323723","timestamp":"1757528465","distribution":"5"},{"uuid":"5dac7ec5-6235-5a53-bff1-ca5ff3783db4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.3.98.53","comment":"https://x.com/midnight_comms/status/1965842985444323723","timestamp":"1757528465","distribution":"5"},{"uuid":"52c62acc-7274-582b-87a1-73903129c91d","type":"domain","category":"Network activity","to_ids":true,"value":"zyrupoe.ru","comment":"https://x.com/FalconFeedsio/status/1965851855264821275","timestamp":"1757530580","distribution":"5"},{"uuid":"a2b672ac-bb29-540e-a679-86346da362b3","type":"url","category":"Network activity","to_ids":true,"value":"http://zyrupoe.ru","comment":"https://x.com/FalconFeedsio/status/1965851855264821275","timestamp":"1757530580","distribution":"5"},{"uuid":"8088bfbe-a716-50c6-91bc-7fd19bace7a7","type":"domain","category":"Network activity","to_ids":true,"value":"rfwklaw.com","comment":"https://x.com/FalconFeedsio/status/1965851855264821275","timestamp":"1757530580","distribution":"5"},{"uuid":"81ca3b4e-7985-527e-b229-d7e4174c32e8","type":"url","category":"Network activity","to_ids":true,"value":"http://rfwklaw.com","comment":"https://x.com/FalconFeedsio/status/1965851855264821275","timestamp":"1757530580","distribution":"5"},{"uuid":"07d194ab-babb-55fa-bc95-aa4c33f5b3c7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"117.50.213.233","comment":"https://x.com/FalconFeedsio/status/1965851855264821275","timestamp":"1757530580","distribution":"5"},{"uuid":"f9af0bcd-e2e9-5ab2-8a5c-3589ddff80cb","type":"domain","category":"Network activity","to_ids":true,"value":"sweepstakes641.godaddysites.com","comment":"https://x.com/urldna_bot/status/1965867919054676446","timestamp":"1757534410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5614f21e-e4c4-5e47-b6dd-323958e7e358","type":"url","category":"Network activity","to_ids":true,"value":"https://sweepstakes641.godaddysites.com","comment":"https://x.com/urldna_bot/status/1965867919054676446","timestamp":"1757534410","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e066bf39-d7bd-5943-96bb-80b59c40586c","type":"domain","category":"Network activity","to_ids":true,"value":"logsapi.azurewebsites.net","comment":"https://x.com/banthisguy9349/status/1965871360259051878","timestamp":"1757535231","distribution":"5"},{"uuid":"1dd1ce8d-9e37-5be4-8573-759ee2d039af","type":"url","category":"Network activity","to_ids":true,"value":"http://logsapi.azurewebsites.net","comment":"https://x.com/banthisguy9349/status/1965871360259051878","timestamp":"1757535231","distribution":"5"},{"uuid":"9b0d6d95-57d1-5b02-a6a9-1b43c7c151d7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"0ba328aeb0867def650694c5a43fdd47d719c6b3c55a845903646ccdbf3ec239","comment":"https://x.com/banthisguy9349/status/1965871360259051878","timestamp":"1757535231","distribution":"5"},{"uuid":"888b0c60-4bcc-5b69-8937-50d01ddeb8fd","type":"url","category":"Network activity","to_ids":true,"value":"http://185.43.207.58","comment":"https://x.com/threatquery/status/1965882990455611536","timestamp":"1757538003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Havoc"}]},{"uuid":"50d012bd-43d5-5b5c-9add-ff4b4189d1d9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.43.207.58","comment":"https://x.com/threatquery/status/1965882990455611536","timestamp":"1757538003","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Havoc"}]},{"uuid":"fe0c1fa8-b942-5356-a298-3fd6e3b84ae1","type":"url","category":"Network activity","to_ids":true,"value":"http://69.166.223.19","comment":"https://x.com/threatquery/status/1965882992410149214","timestamp":"1757538004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Havoc"}]},{"uuid":"31973b47-528a-5dae-8d24-30f32e94f068","type":"ip-dst","category":"Network activity","to_ids":true,"value":"69.166.223.19","comment":"https://x.com/threatquery/status/1965882992410149214","timestamp":"1757538004","distribution":"5","Tag":[{"name":"C2"},{"name":"malware"},{"name":"Havoc"}]},{"uuid":"8b20efdb-6ef9-5ad0-bc70-7a6f317c8a7c","type":"url","category":"Network activity","to_ids":true,"value":"http://181.161.25.228","comment":"https://x.com/skocherhan/status/1965888157100159102","timestamp":"1757539235","distribution":"5"},{"uuid":"2bb17acc-8e8e-5e25-9edb-4067fe67e0f3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"181.161.25.228","comment":"https://x.com/skocherhan/status/1965888157100159102","timestamp":"1757539235","distribution":"5"},{"uuid":"968044ef-38ad-5cfc-8d5e-f2c7ec013a70","type":"domain","category":"Network activity","to_ids":true,"value":"adobe-online-viewer.on-fleek.app","comment":"https://x.com/urldna_bot/status/1965898107247382660","timestamp":"1757541608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"97bcc420-08c2-5913-99f5-b6e81103f5fb","type":"url","category":"Network activity","to_ids":true,"value":"https://adobe-online-viewer.on-fleek.app","comment":"https://x.com/urldna_bot/status/1965898107247382660","timestamp":"1757541608","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"d87afc5b-24aa-5e14-a1da-97810a05eb15","type":"url","category":"Network activity","to_ids":true,"value":"http://67.205.154.243:49761","comment":"https://x.com/SarlackLab/status/1965898369403932930","timestamp":"1757541670","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"b3a46f0a-daa3-56ce-b81f-393694c550da","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.205.154.243","comment":"https://x.com/SarlackLab/status/1965898369403932930","timestamp":"1757541670","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"cd533f63-bc57-58d2-93b8-c79ee17cc4e2","type":"url","category":"Network activity","to_ids":true,"value":"http://93.88.75.252","comment":"https://x.com/skocherhan/status/1965902216235241857","timestamp":"1757542587","distribution":"5"},{"uuid":"419d2f81-b269-538c-9800-08d51016a632","type":"url","category":"Network activity","to_ids":true,"value":"http://148.72.172.53","comment":"https://x.com/skocherhan/status/1965902216235241857","timestamp":"1757542587","distribution":"5"},{"uuid":"a4e78002-eb88-593c-bff5-f5afad313c2e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"93.88.75.252","comment":"https://x.com/skocherhan/status/1965902216235241857","timestamp":"1757542587","distribution":"5"},{"uuid":"51a6b68e-15c9-56b6-8456-d3fb6b920216","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.72.172.53","comment":"https://x.com/skocherhan/status/1965902216235241857","timestamp":"1757542587","distribution":"5"},{"uuid":"f47ee4ab-9f4f-57bc-aae3-6de380adf75e","type":"domain","category":"Network activity","to_ids":true,"value":"motherness.pgiyuwd.cn","comment":"https://x.com/masaomi346/status/1965920477983158574","timestamp":"1757546941","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"992ed944-8f76-550b-a0e6-6711ac02b31d","type":"url","category":"Network activity","to_ids":true,"value":"https://motherness.pgiyuwd.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1965920477983158574","timestamp":"1757546941","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"564b44d5-108d-5362-a6a0-05bd08a77d29","type":"domain","category":"Network activity","to_ids":true,"value":"neverious.jetj.cn","comment":"https://x.com/masaomi346/status/1965920477983158574","timestamp":"1757546941","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceb7d8d1-285e-5be0-bc7b-b76b19986cad","type":"url","category":"Network activity","to_ids":true,"value":"https://neverious.jetj.cn/RSV_P/smart_index.htm/","comment":"https://x.com/masaomi346/status/1965920477983158574","timestamp":"1757546941","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"71780123-5059-5a0a-8c65-1d928629d782","type":"domain","category":"Network activity","to_ids":true,"value":"nbvcvbnkjh.weebly.com","comment":"https://x.com/urldna_bot/status/1965928313794244995","timestamp":"1757548809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"e0d2926f-7a62-5a4c-90ca-9b1008570fe9","type":"url","category":"Network activity","to_ids":true,"value":"https://nbvcvbnkjh.weebly.com","comment":"https://x.com/urldna_bot/status/1965928313794244995","timestamp":"1757548809","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1c2377a7-4bab-5894-a968-d3323ca75398","type":"domain","category":"Network activity","to_ids":true,"value":"america-expresss.crg3j.info","comment":"https://x.com/Metemcyber/status/1965946387901853886","timestamp":"1757553119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"628b494c-3575-563b-be8c-a7ada359e02f","type":"url","category":"Network activity","to_ids":true,"value":"https://america-expresss.crg3j.info/%F0%9D%99%98%F0%9D%99%A4.%F0%9D%99%9F%F0%9D%99%A5","comment":"https://x.com/Metemcyber/status/1965946387901853886","timestamp":"1757553119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aae75bf2-cb07-5807-8edb-1e70a75f1ee5","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.6.122","comment":"https://x.com/Metemcyber/status/1965946387901853886","timestamp":"1757553119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1cad6ef6-ea6f-5da3-831e-9cbb7a95b01d","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.134.214","comment":"https://x.com/Metemcyber/status/1965946387901853886","timestamp":"1757553119","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"38f422dc-0447-58cf-b43a-394211899a76","type":"md5","category":"Payload delivery","to_ids":true,"value":"b9900bef33c6cc9911a5cd7eeda8e093","comment":"https://x.com/skocherhan/status/1965948162948083793","timestamp":"1757553542","distribution":"5"},{"uuid":"516c6af2-1e41-5db2-98b5-fc1036aa3455","type":"domain","category":"Network activity","to_ids":true,"value":"d3mz4xlnkh0ejb.cloudfront.net","comment":"https://x.com/Metemcyber/status/1965949107090170038","timestamp":"1757553767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ab10378-79f0-528b-86ce-ed61a2005712","type":"url","category":"Network activity","to_ids":true,"value":"http://3.168.243.46","comment":"https://x.com/Metemcyber/status/1965949107090170038","timestamp":"1757553767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ceee267e-bf3f-514f-9690-644813d8cae4","type":"url","category":"Network activity","to_ids":true,"value":"http://3.168.243.229","comment":"https://x.com/Metemcyber/status/1965949107090170038","timestamp":"1757553767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"525c12ab-8c69-593e-a0e0-d19e2558058d","type":"url","category":"Network activity","to_ids":true,"value":"http://3.168.243.32","comment":"https://x.com/Metemcyber/status/1965949107090170038","timestamp":"1757553767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e615ac4d-78a9-54dc-95d2-67cc5cd7f2f2","type":"url","category":"Network activity","to_ids":true,"value":"https://d3mz4xlnkh0ejb.cloudfront.net/index.html?code=icnsho","comment":"https://x.com/Metemcyber/status/1965949107090170038","timestamp":"1757553767","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1dea3cb5-d9e3-5633-8ec5-ba10607da170","type":"url","category":"Network activity","to_ids":true,"value":"http://8.148.194.157:8081","comment":"https://x.com/drb_ra/status/1965950246787125394","timestamp":"1757554039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"6c798db5-6d6d-5dfe-be6b-08ee5a9bb90f","type":"url","category":"Network activity","to_ids":true,"value":"https://8.148.194.157/jquery-3.3.1.min.js","comment":"https://x.com/drb_ra/status/1965950246787125394","timestamp":"1757554039","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"8d93f0ec-b845-5045-bce8-4944524406d8","type":"domain","category":"Network activity","to_ids":true,"value":"www-monex.zunshengsw.com","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c83dd6b3-c8a5-5fb9-95b2-5bd1e0f3095e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.112.1","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8bf9f13-8e7b-504b-95ce-b5d1c4dcef74","type":"url","category":"Network activity","to_ids":true,"value":"https://www-monex.zunshengsw.com/support/","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8cdab16f-b34f-5362-b105-7e7ec35e9b9a","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.16.1","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bfbd6242-08e2-5180-afc0-cc6996124d41","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.48.1","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bc329dee-69cd-5db6-a021-b6165340410e","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.32.1","comment":"https://x.com/Metemcyber/status/1965952088413999241","timestamp":"1757554478","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ea366590-bea6-551f-9491-e673fe78f00c","type":"url","category":"Network activity","to_ids":true,"value":"http://3bnusfu2lgk5at43ceu7cdok5yv4gfbono2jv57ho74ucjvc7czirfid.onion","comment":"https://x.com/fbgwls245/status/1965955932892147853","timestamp":"1757555394","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"cb4f5f99-0cf9-5148-8ab6-97e34173f052","type":"domain","category":"Network activity","to_ids":true,"value":"3bnusfu2lgk5at43ceu7cdok5yv4gfbono2jv57ho74ucjvc7czirfid.onion","comment":"https://x.com/fbgwls245/status/1965955932892147853","timestamp":"1757555394","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"ab723911-da80-5747-bdb2-d217cde6ec1d","type":"domain","category":"Network activity","to_ids":true,"value":"servlce-update74.weebly.com","comment":"https://x.com/urldna_bot/status/1965958499440935348","timestamp":"1757556006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a14108c1-17a2-5eba-bf5c-4f97e776de07","type":"url","category":"Network activity","to_ids":true,"value":"https://servlce-update74.weebly.com","comment":"https://x.com/urldna_bot/status/1965958499440935348","timestamp":"1757556006","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"791b977f-1929-530d-8b12-1ed244b8afae","type":"url","category":"Network activity","to_ids":true,"value":"https://qpumuaeh.web.app","comment":"https://x.com/urldna_bot/status/1965988703811096709","timestamp":"1757563207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1e677db0-a8ed-5446-93cf-2ecc13feca77","type":"domain","category":"Network activity","to_ids":true,"value":"qpumuaeh.web.app","comment":"https://x.com/urldna_bot/status/1965988703811096709","timestamp":"1757563207","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"4c4e356a-c396-581e-b4aa-03fa08c8a192","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.93.89.62","comment":"https://x.com/suyog41/status/1966010149455208567","timestamp":"1757568320","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"24cc7141-c27c-56e0-b101-64ce0a499cd7","type":"md5","category":"Payload delivery","to_ids":true,"value":"1fa2337e518007fa58372131884b1442","comment":"https://x.com/suyog41/status/1966010149455208567","timestamp":"1757568320","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"7ec802ad-a7ad-54a2-998a-4000726a9f7d","type":"md5","category":"Payload delivery","to_ids":true,"value":"8ffcb23193ba6f242afe79cd285585c9","comment":"https://x.com/suyog41/status/1966010258104410128","timestamp":"1757568346","distribution":"5","Tag":[{"name":"stealer"},{"name":"AmosStealer"}]},{"uuid":"2e2ab7ce-e7f9-5998-9eb8-6771eac43aaa","type":"md5","category":"Payload delivery","to_ids":true,"value":"f0142070fca0700d439b56543311c75d","comment":"https://x.com/suyog41/status/1966010258104410128","timestamp":"1757568346","distribution":"5","Tag":[{"name":"stealer"},{"name":"AmosStealer"}]},{"uuid":"6530c4c8-6c8b-50ed-8439-cab2f7bb3fa8","type":"md5","category":"Payload delivery","to_ids":true,"value":"40f37c4f5f9643f521316369d486d9fb","comment":"https://x.com/suyog41/status/1966011418383114716","timestamp":"1757568623","distribution":"5"},{"uuid":"4f3cbb7e-dc26-54e7-be43-1f54b001176e","type":"domain","category":"Network activity","to_ids":true,"value":"jobdescriptionboohoo.com","comment":"https://x.com/suyog41/status/1966011418383114716","timestamp":"1757568623","distribution":"5"},{"uuid":"982e863c-a3a9-528e-b059-16a5f5719440","type":"url","category":"Network activity","to_ids":true,"value":"http://jobdescriptionboohoo.com","comment":"https://x.com/suyog41/status/1966011418383114716","timestamp":"1757568623","distribution":"5"},{"uuid":"b263fc02-54a9-5e6a-b76a-7a1d3f784d14","type":"md5","category":"Payload delivery","to_ids":true,"value":"9021c9c1bc08ff874db8e1677f25923c","comment":"https://x.com/salmanvsf/status/1966012500966781433","timestamp":"1757568881","distribution":"5"},{"uuid":"70f8a4e7-da73-5c28-92d4-85d49f1afe7b","type":"md5","category":"Payload delivery","to_ids":true,"value":"cafc9d45da602fdf794421fc90375024","comment":"https://x.com/salmanvsf/status/1966012500966781433","timestamp":"1757568881","distribution":"5"},{"uuid":"bb688467-db4c-525f-aea8-02986231b5a6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.76.180.12","comment":"https://x.com/salmanvsf/status/1966012500966781433","timestamp":"1757568881","distribution":"5"},{"uuid":"5caada62-f65f-54a5-871c-7df35febf7ce","type":"md5","category":"Payload delivery","to_ids":true,"value":"4237219a330b61e02294897eccfafcd0","comment":"https://x.com/salmanvsf/status/1966012500966781433","timestamp":"1757568881","distribution":"5"},{"uuid":"12ad8e85-ec40-545f-80ab-f2256ae1dc6d","type":"url","category":"Network activity","to_ids":true,"value":"https://uusa1l.weebly.com","comment":"https://x.com/urldna_bot/status/1966018909116440872","timestamp":"1757570409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"1742adbd-45bc-5198-bb05-0cb31afeb815","type":"domain","category":"Network activity","to_ids":true,"value":"uusa1l.weebly.com","comment":"https://x.com/urldna_bot/status/1966018909116440872","timestamp":"1757570409","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"59d989ca-67a7-583f-bde5-adab081cb8c3","type":"url","category":"Network activity","to_ids":true,"value":"https://eki-piacrosssive.lzdcw.cn/Perosnal_member/","comment":"https://x.com/Metemcyber/status/1966021534566461618","timestamp":"1757571035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b6fde222-9f09-513b-a6e7-bf8afbeaf4af","type":"domain","category":"Network activity","to_ids":true,"value":"eki-piacrosssive.lzdcw.cn","comment":"https://x.com/Metemcyber/status/1966021534566461618","timestamp":"1757571035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0bfb9869-546e-5eed-935b-6b22bd660277","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.179.138","comment":"https://x.com/Metemcyber/status/1966021534566461618","timestamp":"1757571035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5a480c8a-fa98-5fb5-81af-b117d3624992","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.43.130","comment":"https://x.com/Metemcyber/status/1966021534566461618","timestamp":"1757571035","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"554c0c4b-46fe-5384-9919-5d1f71549097","type":"url","category":"Network activity","to_ids":true,"value":"https://zszs01.cn/open/KZA2/input1.html/","comment":"https://x.com/Metemcyber/status/1966024634702369235","timestamp":"1757571774","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a8889f4d-98de-552d-a47a-1102ac8ea7fc","type":"domain","category":"Network activity","to_ids":true,"value":"zszs01.cn","comment":"https://x.com/Metemcyber/status/1966024634702369235","timestamp":"1757571774","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d4c7289-2275-5e8b-ba78-d65ff429c3d8","type":"domain","category":"Network activity","to_ids":true,"value":"didivip.cc","comment":"https://x.com/masaomi346/status/1966026329264103550","timestamp":"1757572178","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"06081d42-1d53-5a5d-927d-3e20af87c82d","type":"url","category":"Network activity","to_ids":true,"value":"https://didivip.cc/bk-cgi-bin/ORIXLOGINP/","comment":"https://x.com/masaomi346/status/1966026329264103550","timestamp":"1757572178","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"530cc802-c0ca-50f7-a01c-379423e56b78","type":"domain","category":"Network activity","to_ids":true,"value":"jabank-org.top","comment":"https://x.com/318oneone1/status/1966026735688048791","timestamp":"1757572275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e39345e5-c493-5d4e-8d12-3781e8be03dc","type":"url","category":"Network activity","to_ids":true,"value":"http://jabank-org.top","comment":"https://x.com/318oneone1/status/1966026735688048791","timestamp":"1757572275","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"64bd6b14-c63b-5fb8-afd8-7b0814b32ef6","type":"url","category":"Network activity","to_ids":true,"value":"https://zicwng.cn/jkuos/","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd72f3b1-802e-552e-8b25-85349caf99b5","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.189.107","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"374ad6ab-9b5c-5109-9ab2-da528a71240e","type":"domain","category":"Network activity","to_ids":true,"value":"zicwng.cn","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"11971d33-d0a3-5fac-bd5d-4e79d442c20c","type":"url","category":"Network activity","to_ids":true,"value":"https://gkqq63y.cn/jkuos/","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"231d7e26-c869-5212-94c4-62a6437e2774","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.189.107","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"603514bb-d33e-516e-b8db-f00b0ba4a82f","type":"domain","category":"Network activity","to_ids":true,"value":"njhrlr.cn","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2589d3ef-28cc-5d34-98de-2b9da74f633a","type":"domain","category":"Network activity","to_ids":true,"value":"gkqq63y.cn","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"582df267-ade7-5c5a-bfac-573d686408c0","type":"domain","category":"Network activity","to_ids":true,"value":"onwian.cn","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e81dfcb-0209-5b99-993b-6a2c841d0af7","type":"url","category":"Network activity","to_ids":true,"value":"https://njhrlr.cn/jkuos/","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"748d94a7-88c4-5ba3-86cf-b75f310ade05","type":"url","category":"Network activity","to_ids":true,"value":"https://onwian.cn/jkuos/","comment":"https://x.com/Metemcyber/status/1966028956978786778","timestamp":"1757572805","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"20977261-ecc7-5995-b06e-65e256700de4","type":"url","category":"Network activity","to_ids":true,"value":"http://197.244.77.63","comment":"https://x.com/malwrhunterteam/status/1966033530028462387","timestamp":"1757573895","distribution":"5"},{"uuid":"c9f1dfef-d4cf-5f98-bd23-545882b1e86f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"197.244.77.63","comment":"https://x.com/malwrhunterteam/status/1966033530028462387","timestamp":"1757573895","distribution":"5"},{"uuid":"77487908-3658-5799-ab95-de40ba2bf2b6","type":"domain","category":"Network activity","to_ids":true,"value":"clientserver678.duckdns.org","comment":"https://x.com/malwrhunterteam/status/1966033530028462387","timestamp":"1757573895","distribution":"5"},{"uuid":"eb01f5ab-c42c-5464-ab77-4bdd6eb84f04","type":"url","category":"Network activity","to_ids":true,"value":"http://clientserver678.duckdns.org","comment":"https://x.com/malwrhunterteam/status/1966033530028462387","timestamp":"1757573895","distribution":"5"},{"uuid":"f1decca6-9771-531c-90a4-b13fde8414db","type":"domain","category":"Network activity","to_ids":true,"value":"365-notifcation.com","comment":"https://x.com/urldna_bot/status/1966049100429725766","timestamp":"1757577607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"32564d97-7df3-577f-b2fd-42fd4a4386d5","type":"url","category":"Network activity","to_ids":true,"value":"https://365-notifcation.com/f4cdb7fc183/4e35e1257709ac83f1733f3f/index.php?id=d83f287c4066fac3d8cdb85f61482763","comment":"https://x.com/urldna_bot/status/1966049100429725766","timestamp":"1757577607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b88ccd14-b9e2-518e-951f-61858f2b3641","type":"md5","category":"Payload delivery","to_ids":true,"value":"d83f287c4066fac3d8cdb85f61482763","comment":"https://x.com/urldna_bot/status/1966049100429725766","timestamp":"1757577607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"ee44b5bf-5b99-5d1b-a8af-cb467ad0b78d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.243.32.21","comment":"https://x.com/solostalking/status/1966051218490265996","timestamp":"1757578112","distribution":"5"},{"uuid":"95438d11-b495-59f2-b802-405aecdda757","type":"sha256","category":"Payload delivery","to_ids":true,"value":"fac62d26cd757a11fa5fc8ae35feeac03f633f0cbdf34ded6d0e2eb330076e64","comment":"https://x.com/malwrhunterteam/status/1966056968659112418","timestamp":"1757579483","distribution":"5"},{"uuid":"de0bdf50-b359-5607-afcc-2bdab3cb6923","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.156.139.48","comment":"https://x.com/netresec/status/1966059393352405316","timestamp":"1757580061","distribution":"5","Tag":[{"name":"Xworm"}]},{"uuid":"6e0261fa-9b07-5f52-a500-3edd370cd01e","type":"url","category":"Network activity","to_ids":true,"value":"http://113.44.87.199:80","comment":"https://x.com/drb_ra/status/1966088881658307064","timestamp":"1757587092","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"aa656c82-95c6-573c-9019-3a64efff0e77","type":"ip-dst","category":"Network activity","to_ids":true,"value":"113.44.87.199","comment":"https://x.com/drb_ra/status/1966088881658307064","timestamp":"1757587092","distribution":"5","Tag":[{"name":"C2"},{"name":"CobaltStrike"}]},{"uuid":"2f505f66-c1d7-59fc-9ea7-b3dfe8630dc9","type":"url","category":"Network activity","to_ids":true,"value":"https://storage.googleapis.com/denariph/index.html","comment":"https://x.com/JAMESWT_WT/status/1966090326336025039","timestamp":"1757587436","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"efbbf497-67ae-54eb-a14c-7e5d28b0c30c","type":"url","category":"Network activity","to_ids":true,"value":"http://172.86.93.139","comment":"https://x.com/malwrhunterteam/status/1966095946544197973","timestamp":"1757588776","distribution":"5"},{"uuid":"24d6883f-7bbb-5751-90cc-5435b653416a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.86.93.139","comment":"https://x.com/malwrhunterteam/status/1966095946544197973","timestamp":"1757588776","distribution":"5"},{"uuid":"8dffdaa3-deea-5034-bb83-e681011ade84","type":"sha256","category":"Payload delivery","to_ids":true,"value":"05ae07783d30b37aa5f0ffff86adde57d0d497fe915537a3fc010230b54e1ee8","comment":"https://x.com/malwrhunterteam/status/1966095946544197973","timestamp":"1757588776","distribution":"5"},{"uuid":"e4c96a32-3551-5ab2-94af-8a6d4f8ba531","type":"url","category":"Network activity","to_ids":true,"value":"http://storage.googleapis.com/asaaq00123.appspot.com/39605.html","comment":"https://x.com/JAMESWT_WT/status/1966097502488158264","timestamp":"1757589147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67079f37-8248-533c-a9f6-59d182923da9","type":"url","category":"Network activity","to_ids":true,"value":"http://storage.googleapis.com/hhassjdskdk0085.appspot.com/39307.html","comment":"https://x.com/JAMESWT_WT/status/1966097502488158264","timestamp":"1757589147","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b66b0221-9d17-5229-b617-879f62c203fd","type":"domain","category":"Network activity","to_ids":true,"value":"newkayguyupdates.s3.us-east-1.amazonaws.com","comment":"https://x.com/JAMESWT_WT/status/1966098188349399411","timestamp":"1757589311","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f5db5ad-b6ce-5cf9-8527-4bee151a38c4","type":"url","category":"Network activity","to_ids":true,"value":"http://newkayguyupdates.s3.us-east-1.amazonaws.com/index.html","comment":"https://x.com/JAMESWT_WT/status/1966098188349399411","timestamp":"1757589311","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ff93aed9-8d1e-58b0-9919-3376eda6446d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.77.55.12","comment":"https://x.com/JAMESWT_WT/status/1966103279273718213","timestamp":"1757590524","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"184c8fe3-6a24-5ab0-b4ef-9e4a5a5dff70","type":"url","category":"Network activity","to_ids":true,"value":"https://verifyemails-8qm8bjqsvi.edgeone.app/index6","comment":"https://x.com/JAMESWT_WT/status/1966105125484732603","timestamp":"1757590965","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"23bebbb8-8287-5dce-99af-521ca85dfbb6","type":"domain","category":"Network activity","to_ids":true,"value":"verifyemails-8qm8bjqsvi.edgeone.app","comment":"https://x.com/JAMESWT_WT/status/1966105125484732603","timestamp":"1757590965","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d93c384f-5152-56ac-8d1a-8b1cf6b70fe5","type":"url","category":"Network activity","to_ids":true,"value":"https://autoridade-tributaria-pt.org/SET-FAT/818.php","comment":"https://x.com/smica83/status/1966107477084115364","timestamp":"1757591525","distribution":"5"},{"uuid":"78dd1610-94ff-5326-838f-0a8c756cd619","type":"domain","category":"Network activity","to_ids":true,"value":"autoridade-tributaria-pt.org","comment":"https://x.com/smica83/status/1966107477084115364","timestamp":"1757591525","distribution":"5"},{"uuid":"5405cf25-b7aa-53c8-b460-8f941b3dbafb","type":"url","category":"Network activity","to_ids":true,"value":"http://getcon.registid.com","comment":"https://x.com/urldna_bot/status/1966109501100007874","timestamp":"1757592008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"49aced30-2b0a-51e9-afaf-c3943fd2b672","type":"domain","category":"Network activity","to_ids":true,"value":"getcon.registid.com","comment":"https://x.com/urldna_bot/status/1966109501100007874","timestamp":"1757592008","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5c6b8cf3-002e-5f99-b8d1-f7251e0a2b66","type":"domain","category":"Network activity","to_ids":true,"value":"any-subdomain.mailvoiceserver.com","comment":"https://x.com/mszustak/status/1966110054165221669","timestamp":"1757592140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"edf749e1-20cb-541c-8e9d-577a391a8475","type":"url","category":"Network activity","to_ids":true,"value":"https://any-subdomain.mailvoiceserver.com","comment":"https://x.com/mszustak/status/1966110054165221669","timestamp":"1757592140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"315c03a0-62a5-56da-9f94-1cbbcbdbadda","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5cf533f0f7e5258979c279515cd9fff248895a085e69589b3481e6236de93d59","comment":"https://x.com/skocherhan/status/1966122599697760557","timestamp":"1757595131","distribution":"5"},{"uuid":"1dd1ce8d-9e37-5be4-8573-759ee2d039af","type":"url","category":"Network activity","to_ids":true,"value":"http://logsapi.azurewebsites.net","comment":"https://x.com/skocherhan/status/1966127489018651116","timestamp":"1757596296","distribution":"5"},{"uuid":"9b0d6d95-57d1-5b02-a6a9-1b43c7c151d7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"0ba328aeb0867def650694c5a43fdd47d719c6b3c55a845903646ccdbf3ec239","comment":"https://x.com/skocherhan/status/1966127489018651116","timestamp":"1757596296","distribution":"5"},{"uuid":"e066bf39-d7bd-5943-96bb-80b59c40586c","type":"domain","category":"Network activity","to_ids":true,"value":"logsapi.azurewebsites.net","comment":"https://x.com/skocherhan/status/1966127489018651116","timestamp":"1757596296","distribution":"5"},{"uuid":"39e8356c-888a-5c93-b2f9-beceb9b6cfd7","type":"domain","category":"Network activity","to_ids":true,"value":"silogovernance.net","comment":"https://x.com/destroyphishing/status/1966130187038331036","timestamp":"1757596940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a91e1a7-f7cc-54c6-b4ad-84b539cc2969","type":"url","category":"Network activity","to_ids":true,"value":"http://silogovernance.net","comment":"https://x.com/destroyphishing/status/1966130187038331036","timestamp":"1757596940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cf9c9977-44ef-5914-b3eb-1422464085b5","type":"domain","category":"Network activity","to_ids":true,"value":"freemaillllal.weebly.com","comment":"https://x.com/urldna_bot/status/1966139700030198213","timestamp":"1757599208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"98ff7fae-3cc3-5ebb-8994-31be56009e13","type":"url","category":"Network activity","to_ids":true,"value":"https://freemaillllal.weebly.com","comment":"https://x.com/urldna_bot/status/1966139700030198213","timestamp":"1757599208","distribution":"5","Tag":[{"name":"scam"},{"name":"phishing"}]},{"uuid":"a51aa453-26a5-5a61-8ccc-fbeb6bae1d08","type":"url","category":"Network activity","to_ids":true,"value":"http://Abantecapitals.com","comment":"https://x.com/Tino_jazz/status/1966140110908555278","timestamp":"1757599306","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"1c8b341b-aafc-50b8-ab94-9a47d0400dad","type":"domain","category":"Network activity","to_ids":true,"value":"Abantecapitals.com","comment":"https://x.com/Tino_jazz/status/1966140110908555278","timestamp":"1757599306","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"eb665a62-6aa6-58f2-8dcb-2c903fe39d78","type":"domain","category":"Network activity","to_ids":true,"value":"lxj5lf.top","comment":"https://x.com/masaomi346/status/1966155927914184959","timestamp":"1757603077","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6895299-f735-5bf0-abe7-01c1be04d05b","type":"url","category":"Network activity","to_ids":true,"value":"https://lxj5lf.top/akxvtexe/","comment":"https://x.com/masaomi346/status/1966155927914184959","timestamp":"1757603077","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f16128ff-84dd-51b7-ab29-1b5187187e72","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.159.92.22","comment":"https://x.com/drb_ra/status/1966164895423996406","timestamp":"1757605215","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"bdeaf309-144b-500b-9fc1-4facbb7e53cb","type":"url","category":"Network activity","to_ids":true,"value":"https://115.159.92.22/en_US/all.js","comment":"https://x.com/drb_ra/status/1966164895423996406","timestamp":"1757605215","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"63f7c879-cf1c-51a4-b3a3-ce96f9ad7bc8","type":"url","category":"Network activity","to_ids":true,"value":"http://115.159.92.22:80","comment":"https://x.com/drb_ra/status/1966164895423996406","timestamp":"1757605215","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"b62a797c-a7af-54fd-a021-3c3e32c97a3d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.3.34.19","comment":"https://x.com/drb_ra/status/1966164977963659340","timestamp":"1757605234","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"4abc880d-8e83-543f-8262-f3a77d53d2ab","type":"url","category":"Network activity","to_ids":true,"value":"http://154.3.34.19:8090","comment":"https://x.com/drb_ra/status/1966164977963659340","timestamp":"1757605234","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"307232a0-f60a-51f1-a11d-8d4c8819d780","type":"url","category":"Network activity","to_ids":true,"value":"https://45.204.222.196/pixel","comment":"https://x.com/drb_ra/status/1966165148311118171","timestamp":"1757605275","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"ac0e2a6b-97b6-5b75-983a-61782054431f","type":"url","category":"Network activity","to_ids":true,"value":"http://45.204.222.196:443","comment":"https://x.com/drb_ra/status/1966165148311118171","timestamp":"1757605275","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"21f372fa-11fc-5d05-815e-d16e94f42d0b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.204.222.196","comment":"https://x.com/drb_ra/status/1966165148311118171","timestamp":"1757605275","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"cfb3b905-5759-558d-8d21-8e6113496661","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.120.228.220","comment":"https://x.com/drb_ra/status/1966165165285540010","timestamp":"1757605279","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"6d0dfb15-368e-55fa-abe9-51457eee4e01","type":"url","category":"Network activity","to_ids":true,"value":"http://85.120.228.220:8011","comment":"https://x.com/drb_ra/status/1966165165285540010","timestamp":"1757605279","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"750f125c-4689-546d-8bb3-2d4cf06729a0","type":"url","category":"Network activity","to_ids":true,"value":"http://8.155.165.8:9999","comment":"https://x.com/drb_ra/status/1966165368260489379","timestamp":"1757605328","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"eee824fa-4416-5476-8a95-5e8146eae7ff","type":"url","category":"Network activity","to_ids":true,"value":"https://8.155.165.8/ptj","comment":"https://x.com/drb_ra/status/1966165368260489379","timestamp":"1757605328","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"20c1f8e9-d953-5b7e-a60c-3e2aaab140c1","type":"url","category":"Network activity","to_ids":true,"value":"http://196.251.72.219:443","comment":"https://x.com/drb_ra/status/1966165387373908437","timestamp":"1757605332","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0fcc94e4-3b98-5091-90b0-2f96a3fc39c6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"196.251.72.219","comment":"https://x.com/drb_ra/status/1966165387373908437","timestamp":"1757605332","distribution":"5","Tag":[{"name":"CobaltStrike"},{"name":"C2"}]},{"uuid":"0aadce89-09e1-5d22-9609-fdd7898e0b2d","type":"url","category":"Network activity","to_ids":true,"value":"https://didivip.cc","comment":"https://x.com/harugasumi/status/1966169624074133808","timestamp":"1757606342","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dbb62f16-b3cb-59a3-abb8-83572a4bdcbd","type":"sha256","category":"Payload delivery","to_ids":true,"value":"93f9703cc7339014cd1bc82da0ab8909957112b93fba2430b5ee90a1d424a5ed","comment":"https://x.com/executemalware/status/1966176370687615139","timestamp":"1757607951","distribution":"5"},{"uuid":"bbb67853-0d72-55c4-ac8b-caad4cc44b4e","type":"domain","category":"Network activity","to_ids":true,"value":"wrote-kernel-extend-designation.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1966184115298058713","timestamp":"1757609797","distribution":"5"},{"uuid":"94e24b5d-107c-5bd7-b6be-93f6a5270457","type":"url","category":"Network activity","to_ids":true,"value":"https://wrote-kernel-extend-designation.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/1966184115298058713","timestamp":"1757609797","distribution":"5"},{"uuid":"6982a4ee-c959-5386-82fc-ba8926b4c9d4","type":"url","category":"Network activity","to_ids":true,"value":"http://192.169.69.26:53810","comment":"https://x.com/SarlackLab/status/1966185034924073195","timestamp":"1757610016","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"ae94f692-af61-54bf-9cdc-132b89a292db","type":"domain","category":"Network activity","to_ids":true,"value":"new1novermber12.duckdns.org","comment":"https://x.com/SarlackLab/status/1966185034924073195","timestamp":"1757610016","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"d7e4958b-d376-5161-a682-05152d188885","type":"url","category":"Network activity","to_ids":true,"value":"http://new1novermber12.duckdns.org","comment":"https://x.com/SarlackLab/status/1966185034924073195","timestamp":"1757610016","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"cb029d4f-a1ba-5334-ab6a-221687c67f5c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.169.69.26","comment":"https://x.com/SarlackLab/status/1966185034924073195","timestamp":"1757610016","distribution":"5","Tag":[{"name":"NanoCore"},{"name":"C2"}]},{"uuid":"4d5ade47-06a4-5b26-a357-6c2a3c0cd958","type":"url","category":"Network activity","to_ids":true,"value":"http://147.185.221.31:25234","comment":"https://x.com/SarlackLab/status/1966185106705461648","timestamp":"1757610034","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"2a2ed3cb-2370-5b81-a9b7-c1eea1404aa1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"147.185.221.31","comment":"https://x.com/SarlackLab/status/1966185106705461648","timestamp":"1757610034","distribution":"5","Tag":[{"name":"Njrat"},{"name":"C2"}]},{"uuid":"06dc2bbd-cd15-53f7-a744-a7719c3224e3","type":"url","category":"Network activity","to_ids":true,"value":"https://875645758-gob-mx.weebly.com","comment":"https://x.com/urldna_bot/status/1966200093343727882","timestamp":"1757613607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4fde87aa-5338-53a4-b58b-4eb18235d33d","type":"domain","category":"Network activity","to_ids":true,"value":"875645758-gob-mx.weebly.com","comment":"https://x.com/urldna_bot/status/1966200093343727882","timestamp":"1757613607","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"4c7e424b-5b6d-5eff-8e29-472520693e2b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.165.46.210","comment":"https://x.com/1ZRR4H/status/1966201322241204540","timestamp":"1757613900","distribution":"5"},{"uuid":"edf65ca4-bc59-5e12-815f-ebdcea846f7b","type":"url","category":"Network activity","to_ids":true,"value":"https://javascriptupdate.cloud","comment":"https://x.com/1ZRR4H/status/1966201322241204540","timestamp":"1757613900","distribution":"5"},{"uuid":"180c8022-ad93-587c-9c04-67f80e01596c","type":"domain","category":"Network activity","to_ids":true,"value":"javascriptupdate.cloud","comment":"https://x.com/1ZRR4H/status/1966201322241204540","timestamp":"1757613900","distribution":"5"},{"uuid":"948163bd-8d3e-5e78-9b5d-15431196bdb7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"918ff11c0924d51456268c0b6879b18be4a5dd5e344690abb007ddbe908d46d6","comment":"https://x.com/1ZRR4H/status/1966201322241204540","timestamp":"1757613900","distribution":"5"},{"uuid":"0e62ef35-7e84-5a06-a220-0e5ea5be15cf","type":"sha256","category":"Payload delivery","to_ids":true,"value":"45e50aaff3991801924650d05d84750ae94f0900c6238eaed4fc79fd2fb9cdc3","comment":"https://x.com/1ZRR4H/status/1966203460875071530","timestamp":"1757614410","distribution":"5"},{"uuid":"3dbc21c0-797d-5c92-b528-e61275120842","type":"url","category":"Network activity","to_ids":true,"value":"http://59.110.113.178","comment":"https://x.com/malwrhunterteam/status/1966207590649704887","timestamp":"1757615394","distribution":"5"},{"uuid":"6f7c6a2b-759c-5aff-8209-2abdc218f2dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"59.110.113.178","comment":"https://x.com/malwrhunterteam/status/1966207590649704887","timestamp":"1757615394","distribution":"5"},{"uuid":"c58fd25f-6418-5705-b61e-c7285e8bd073","type":"sha256","category":"Payload delivery","to_ids":true,"value":"078bdf9b8fbcd12418a978bdbf30b191794f354873d28ca85d753fee2ff1af5b","comment":"https://x.com/malwrhunterteam/status/1966207590649704887","timestamp":"1757615394","distribution":"5"},{"uuid":"5043cb1a-9722-5c86-ae3a-e01ffa2be6ab","type":"url","category":"Network activity","to_ids":true,"value":"http://137.184.185.121:31337","comment":"https://x.com/drb_ra/status/1966211427967844386","timestamp":"1757616309","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"369e5908-104c-5768-b813-bcc7b2675897","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.184.185.121","comment":"https://x.com/drb_ra/status/1966211432262893911","timestamp":"1757616310","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b18cb466-05aa-54a3-be44-441eff000975","type":"url","category":"Network activity","to_ids":true,"value":"http://137.184.185.121:443","comment":"https://x.com/drb_ra/status/1966211432262893911","timestamp":"1757616310","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"2b2cf70f-34a0-5198-a172-29c2f264825e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"150.129.80.83","comment":"https://x.com/drb_ra/status/1966211461782380899","timestamp":"1757616317","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"b3dcd107-c874-5b71-bc84-132a6fee2f22","type":"url","category":"Network activity","to_ids":true,"value":"http://150.129.80.83:20000","comment":"https://x.com/drb_ra/status/1966211461782380899","timestamp":"1757616317","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5aa86744-6bf6-5518-88de-dde17e4bbea9","type":"url","category":"Network activity","to_ids":true,"value":"http://192.142.54.85:35389","comment":"https://x.com/drb_ra/status/1966211476068143535","timestamp":"1757616320","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"dc062e98-b05e-5afa-9c60-e8b418048817","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.142.54.85","comment":"https://x.com/drb_ra/status/1966211476068143535","timestamp":"1757616320","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"22456f91-83c9-55ac-96c9-a2b9be68c5c4","type":"url","category":"Network activity","to_ids":true,"value":"http://176.113.82.154:8888","comment":"https://x.com/drb_ra/status/1966211494049194187","timestamp":"1757616325","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"0eebd4e5-c877-5839-a1c0-d7d5ca7a36ac","type":"url","category":"Network activity","to_ids":true,"value":"http://176.113.82.154:31337","comment":"https://x.com/drb_ra/status/1966211498427994598","timestamp":"1757616326","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"05ca731f-42a0-52f0-a60c-81c1fbf6e7c1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.113.82.154","comment":"https://x.com/drb_ra/status/1966211498427994598","timestamp":"1757616326","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"990c50b9-4113-5051-9a0c-a5a24bec7069","type":"url","category":"Network activity","to_ids":true,"value":"http://43.135.79.17:31337","comment":"https://x.com/drb_ra/status/1966211510016811502","timestamp":"1757616329","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"6f384dc2-4c92-54ed-84b4-c7963c89bfe2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.135.79.17","comment":"https://x.com/drb_ra/status/1966211510016811502","timestamp":"1757616329","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"997f5c5f-ca1a-58ff-822e-c57cd2724ba8","type":"url","category":"Network activity","to_ids":true,"value":"http://64.176.56.179:31337","comment":"https://x.com/drb_ra/status/1966211528471769302","timestamp":"1757616333","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"a9fd04c4-d618-5d86-80b0-52e7de62d8e2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.176.56.179","comment":"https://x.com/drb_ra/status/1966211528471769302","timestamp":"1757616333","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"5af04bd9-385b-587c-8788-7686781d87a0","type":"url","category":"Network activity","to_ids":true,"value":"http://31.57.33.95:31337","comment":"https://x.com/drb_ra/status/1966211537086878126","timestamp":"1757616335","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"f819b3be-e9a0-558f-8c90-ca77036974d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.33.95","comment":"https://x.com/drb_ra/status/1966211537086878126","timestamp":"1757616335","distribution":"5","Tag":[{"name":"Sliver"},{"name":"C2"}]},{"uuid":"d6073935-6d59-5092-b520-2c00306c304f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"51.178.11.177","comment":"https://x.com/drb_ra/status/1966218771510735229","timestamp":"1757618060","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"e76af3f5-06f7-5dba-a4ab-8a479167c74b","type":"url","category":"Network activity","to_ids":true,"value":"http://51.178.11.177:2404","comment":"https://x.com/drb_ra/status/1966218771510735229","timestamp":"1757618060","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c3cfd736-5ede-525d-bc2c-0b5f874c71de","type":"url","category":"Network activity","to_ids":true,"value":"http://152.42.143.4:2404","comment":"https://x.com/drb_ra/status/1966218909897609544","timestamp":"1757618093","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"99ea9c19-a414-5357-9750-6fa5c4ab85a4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.42.143.4","comment":"https://x.com/drb_ra/status/1966218909897609544","timestamp":"1757618093","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"684bc093-d4b2-5614-a997-c14776f15200","type":"url","category":"Network activity","to_ids":true,"value":"http://185.174.101.224:2404","comment":"https://x.com/drb_ra/status/1966219049358250408","timestamp":"1757618126","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"8d8cb887-985f-54dd-8f6a-bb46ce04d332","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.174.101.224","comment":"https://x.com/drb_ra/status/1966219049358250408","timestamp":"1757618126","distribution":"5","Tag":[{"name":"Remcos"},{"name":"C2"}]},{"uuid":"c1947f9e-ec4a-5e16-acae-ce67d2aef090","type":"url","category":"Network activity","to_ids":true,"value":"http://198.23.175