{"Event":{"uuid":"7bd179fd-8d3a-5b8a-8830-dcf1e80b1d69","info":"TweetFeed IOCs (week window, refreshed every 15 minutes)","date":"2026-05-02","timestamp":"1777711515","threat_level_id":"4","analysis":"2","distribution":"3","published":true,"Orgc":{"name":"TweetFeed","uuid":"76a67249-f941-5bdb-925a-51045a921c1e"},"Tag":[{"name":"TweetFeed","colour":"#1DA1F2"},{"name":"type:OSINT","colour":"#004646"},{"name":"tlp:clear","colour":"#FFFFFF"}],"Attribute":[{"uuid":"989f6956-37aa-5d78-9c71-8ae9b0e074ee","type":"domain","category":"Network activity","to_ids":true,"value":"cmdvitorborges.com","comment":"https://x.com/PhishStats/status/2048207321625497714","timestamp":"1777165620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d3db351-eb83-5e60-a69d-205b3b3ea9a2","type":"url","category":"Network activity","to_ids":true,"value":"http://cmdvitorborges.com","comment":"https://x.com/PhishStats/status/2048207321625497714","timestamp":"1777165620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8074d609-327a-51a9-84a8-8947b8f78e57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"136.243.144.249","comment":"https://x.com/PhishStats/status/2048207321625497714","timestamp":"1777165620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3044872b-c5ad-5da8-a70a-11b27b91ec00","type":"domain","category":"Network activity","to_ids":true,"value":"greenwoodsinvestmentsltd.pro","comment":"https://x.com/skocherhan/status/2048281696961745290","timestamp":"1777183380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e7a3db1-d32e-5a84-b0f0-e14c762ce462","type":"url","category":"Network activity","to_ids":true,"value":"http://greenwoodsinvestmentsltd.pro","comment":"https://x.com/skocherhan/status/2048281696961745290","timestamp":"1777183380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8afe383c-8aed-58df-a191-fc64347b4a49","type":"domain","category":"Network activity","to_ids":true,"value":"dsoqqcfd.vjxjrfyu.cn","comment":"https://x.com/masaomi346/status/2048330734994420149","timestamp":"1777195020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f611528b-0dd2-59fb-8354-fc7b944de9c9","type":"url","category":"Network activity","to_ids":true,"value":"https://dsoqqcfd.vjxjrfyu.cn/optmer-prefere_html/","comment":"https://x.com/masaomi346/status/2048330734994420149","timestamp":"1777195020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b2ff369a-a8e6-52bc-ac4a-32e8db4616dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"50.16.16.211","comment":"https://x.com/404LABSx/status/2048342737120886922","timestamp":"1777197900","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"60e4336a-69b6-52b7-8eef-70d87e23f6f1","type":"domain","category":"Network activity","to_ids":true,"value":"4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion","comment":"https://x.com/fbgwls245/status/2048362508742975738","timestamp":"1777202640","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a13fed92-388c-5710-942d-2648eb1fd345","type":"url","category":"Network activity","to_ids":true,"value":"http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion","comment":"https://x.com/fbgwls245/status/2048362508742975738","timestamp":"1777202640","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"59481a7f-896f-5412-bc6f-fc27c4f46252","type":"url","category":"Network activity","to_ids":true,"value":"https://urlhaus.abuse.ch/host/176.65.139.143/","comment":"https://x.com/BlinkzSec/status/2048382400040743096","timestamp":"1777207380","distribution":"5"},{"uuid":"af600cbd-fad9-5639-9fba-7ccd7ebcb2b9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.139.143","comment":"https://x.com/BlinkzSec/status/2048382400040743096","timestamp":"1777207380","distribution":"5"},{"uuid":"b871d557-b2d1-5a17-9259-31491284306a","type":"domain","category":"Network activity","to_ids":true,"value":"zon123.online","comment":"https://x.com/Malwarehunterr/status/2048392934865916244","timestamp":"1777209900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"de8777ae-b5d3-5136-8b7d-80ae18d1e3c6","type":"url","category":"Network activity","to_ids":true,"value":"http://zon123.online","comment":"https://x.com/Malwarehunterr/status/2048392934865916244","timestamp":"1777209900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0283cc40-b23a-57cc-a100-e33717f79a43","type":"domain","category":"Network activity","to_ids":true,"value":"pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion","comment":"https://x.com/AlvieriD/status/2048402779467620710","timestamp":"1777212240","distribution":"5"},{"uuid":"876b065c-8d8c-5986-a2eb-afe898840388","type":"url","category":"Network activity","to_ids":true,"value":"https://pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion","comment":"https://x.com/AlvieriD/status/2048402779467620710","timestamp":"1777212240","distribution":"5"},{"uuid":"14b8f8e5-6ffb-540c-bcf8-555d62098e00","type":"domain","category":"Network activity","to_ids":true,"value":"notifications.googleapis.com","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7f885cea-4c16-56dc-935a-566f8da00ba2","type":"url","category":"Network activity","to_ids":true,"value":"http://notifications.googleapis.com/email/redirect","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8ce32ac3-9d57-5e03-b224-b1e8183b65bf","type":"domain","category":"Network activity","to_ids":true,"value":"markhamkidsclinic.com","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"479429d0-dd0d-50cf-b6a6-aeea85305306","type":"url","category":"Network activity","to_ids":true,"value":"http://markhamkidsclinic.com/o1234i678z","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"329b5bcc-5fd8-5db5-92d6-02c25a41f098","type":"domain","category":"Network activity","to_ids":true,"value":"maxbarkod.com","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6fda2eb1-e95b-57e4-8674-911beca9fe4f","type":"url","category":"Network activity","to_ids":true,"value":"http://maxbarkod.com/log/login.php","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94223bfd-aa54-5c93-8119-463416288a4b","type":"url","category":"Network activity","to_ids":true,"value":"http://maxbarkod.com/log/send_login.php","comment":"https://x.com/Malwarehunterr/status/2048405527336738920","timestamp":"1777212900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c2a71f24-d36e-5927-b03f-bae5e3c92e96","type":"domain","category":"Network activity","to_ids":true,"value":"monopizzapos.online","comment":"https://x.com/Malwarehunterr/status/2048408321703731274","timestamp":"1777213560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"39b63bba-9eef-508a-b7ed-c9b5391be70a","type":"url","category":"Network activity","to_ids":true,"value":"http://monopizzapos.online/cgi/login.php","comment":"https://x.com/Malwarehunterr/status/2048408321703731274","timestamp":"1777213560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"836ca50c-62b0-5ce3-91d7-0b9af45240b6","type":"url","category":"Network activity","to_ids":true,"value":"http://42.224.7.121:44950/Mozi.m","comment":"https://x.com/sicehice/status/2048427969484304838","timestamp":"1777218240","distribution":"5"},{"uuid":"f9c25e4a-b826-5618-a618-e06dca357d75","type":"ip-dst","category":"Network activity","to_ids":true,"value":"42.224.7.121","comment":"https://x.com/sicehice/status/2048427969484304838","timestamp":"1777218240","distribution":"5"},{"uuid":"0d6d0cef-4fc9-5257-92c0-9a3faf07db3e","type":"url","category":"Network activity","to_ids":true,"value":"http://83.168.110.191/cat.sh","comment":"https://x.com/sicehice/status/2048428725658652942","timestamp":"1777218420","distribution":"5"},{"uuid":"25c79a23-feb9-5613-859d-a4b150a3e856","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.139.140","comment":"https://x.com/sicehice/status/2048428725658652942","timestamp":"1777218420","distribution":"5"},{"uuid":"e9d739d5-1138-517c-a2f0-852e2d794e35","type":"ip-dst","category":"Network activity","to_ids":true,"value":"83.168.110.191","comment":"https://x.com/sicehice/status/2048428725658652942","timestamp":"1777218420","distribution":"5"},{"uuid":"8f6b71ba-e75b-5852-b626-4ca6e63d765f","type":"md5","category":"Payload delivery","to_ids":true,"value":"dca40f08cc93bc2fba8e3f5fec18593f","comment":"https://x.com/sicehice/status/2048428725658652942","timestamp":"1777218420","distribution":"5"},{"uuid":"56e170b4-dc8f-52bf-b7be-bfc89ee7185a","type":"domain","category":"Network activity","to_ids":true,"value":"zimbra-nyatel-production.up.railway.app","comment":"https://x.com/volrant136/status/2048431910871875851","timestamp":"1777219200","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c0f86976-22d6-5ab5-848a-3a37ba4bc439","type":"url","category":"Network activity","to_ids":true,"value":"https://zimbra-nyatel-production.up.railway.app/login.html?gfjdliotrgojnghgherbegrehureert0e0ee=1","comment":"https://x.com/volrant136/status/2048431910871875851","timestamp":"1777219200","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"d0ff0c18-65c8-533f-862d-17a37ff07311","type":"url","category":"Network activity","to_ids":true,"value":"http://31.58.220.250","comment":"https://x.com/phatomcandle/status/2048462127254696300","timestamp":"1777226400","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"02b22182-37dd-5aba-aeb7-b7ec6011cf9c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.58.220.250","comment":"https://x.com/phatomcandle/status/2048462127254696300","timestamp":"1777226400","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"4c1a1583-065d-5ef4-b54f-2caca09202cd","type":"domain","category":"Network activity","to_ids":true,"value":"jer.piexlt.com","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"491cb32c-ee09-5449-bb7e-e975681e82d3","type":"url","category":"Network activity","to_ids":true,"value":"http://jer.piexlt.com","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"dac6420f-2689-55b8-9bdc-33a047b3db84","type":"domain","category":"Network activity","to_ids":true,"value":"main.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"ceb5244d-64e5-5a68-82c2-0f7f8e35e723","type":"url","category":"Network activity","to_ids":true,"value":"http://main.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"780df7ab-a70c-5538-a66c-99f6968af8d9","type":"domain","category":"Network activity","to_ids":true,"value":"master.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"ffeced36-39bf-5eca-b4ef-79853f6f6739","type":"url","category":"Network activity","to_ids":true,"value":"http://master.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"1ef7457a-a7f8-5fa7-89bc-2a0a262b347a","type":"domain","category":"Network activity","to_ids":true,"value":"servers.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"a41e4839-d04b-5150-9a84-d6fcd570fd98","type":"url","category":"Network activity","to_ids":true,"value":"http://servers.zeosshop.ir","comment":"https://x.com/skocherhan/status/2048464654775541779","timestamp":"1777227000","distribution":"5"},{"uuid":"3149db29-54c0-56d5-9a0f-307882a848bb","type":"domain","category":"Network activity","to_ids":true,"value":"ncodccpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"1ab43a06-a58a-5d01-915c-b47211a28b38","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodccpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b6a638ea-9338-5ee3-945c-283db326181c","type":"domain","category":"Network activity","to_ids":true,"value":"ncodcbpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b24cff56-7e1a-5694-ac5c-6d768ccfcffa","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodcbpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"62d233dc-217f-52b0-9f40-468cb9f2d0ad","type":"domain","category":"Network activity","to_ids":true,"value":"ncodcapass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"c85fb4eb-3322-50b1-8c69-a8880b99b0a6","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodcapass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"6b3928e5-c388-5a86-8295-a91814fd85ce","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"22fce9c6-921b-58d1-a937-cc871a4b8c77","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"ff47b6ef-e567-5bcd-b55f-a8852aef2c57","type":"domain","category":"Network activity","to_ids":true,"value":"nid.ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"85758904-9025-5d7e-99aa-176d41df111b","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bc194fbe-578c-5d53-98b7-0aaf89d985af","type":"domain","category":"Network activity","to_ids":true,"value":"nid.ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"aaa3e7df-c72d-52b5-9491-558d089182bc","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"8bd2afd8-31ba-5111-bbdc-08469d2020ff","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbypass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"94b31f8e-c46b-5323-a24e-a5ae34adb323","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbypass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"93ccaa21-0353-5695-ac78-2334420d9b87","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"10e4f74a-8d1a-55a4-b9d8-10cffa597e89","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bdf5f1aa-c9aa-5d40-9817-448070cd4ae8","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbvpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"6d6340d7-11a5-5136-870c-23870e134ee4","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbvpass.dynv6.net","comment":"https://x.com/skocherhan/status/2048466653331988537","timestamp":"1777227480","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"52e87f0d-346a-58ac-a9c0-007be20d9fe5","type":"domain","category":"Network activity","to_ids":true,"value":"previous-everywhere-achieving-bobby.trycloudflare.com","comment":"https://x.com/skocherhan/status/2048491443971305619","timestamp":"1777233394","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"820c9960-0e85-564a-b5d4-e9bbf3f2b3f7","type":"url","category":"Network activity","to_ids":true,"value":"http://previous-everywhere-achieving-bobby.trycloudflare.com/IGhhbmR5IG9ubGluZSB,0b29sIHRvIGVuY29kZSBvciBkZWNvZGUgeW91/","comment":"https://x.com/skocherhan/status/2048491443971305619","timestamp":"1777233394","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ac705ab-4cd0-57f6-92c5-a35e06187e60","type":"domain","category":"Network activity","to_ids":true,"value":"deposit-crew-appointed-princess.trycloudflare.com","comment":"https://x.com/skocherhan/status/2048492627096404397","timestamp":"1777233660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"542036bd-9442-5f8f-9201-05845177f57c","type":"url","category":"Network activity","to_ids":true,"value":"http://deposit-crew-appointed-princess.trycloudflare.com/xxace36/26sc/web/mail.php","comment":"https://x.com/skocherhan/status/2048492627096404397","timestamp":"1777233660","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34cef663-cbc4-5853-88ac-1f9fffcae74f","type":"domain","category":"Network activity","to_ids":true,"value":"smartbenefits.site","comment":"https://x.com/Malwarehunterr/status/2048502759331389910","timestamp":"1777236060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e92d24f8-d881-5f48-b5ad-84c5a362404f","type":"url","category":"Network activity","to_ids":true,"value":"http://smartbenefits.site","comment":"https://x.com/Malwarehunterr/status/2048502759331389910","timestamp":"1777236060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f35bcc92-2f0a-577e-94d2-75ba3f8fff83","type":"domain","category":"Network activity","to_ids":true,"value":"cartspecials.com","comment":"https://x.com/Malwarehunterr/status/2048502759331389910","timestamp":"1777236060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b80a0c63-8e7d-5589-8141-6395b847e665","type":"url","category":"Network activity","to_ids":true,"value":"http://cartspecials.com","comment":"https://x.com/Malwarehunterr/status/2048502759331389910","timestamp":"1777236060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36f9f734-5723-519a-ab8c-bfe9fecda9b7","type":"domain","category":"Network activity","to_ids":true,"value":"iepvirgendecopacabana.com","comment":"https://x.com/Priv8Shops/status/2048544885494747285","timestamp":"1777246080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"92fb8eb7-d500-517c-aca9-956f964bc5f8","type":"url","category":"Network activity","to_ids":true,"value":"https://iepvirgendecopacabana.com/cgibin/","comment":"https://x.com/Priv8Shops/status/2048544885494747285","timestamp":"1777246080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5cad9d67-4489-5b7f-b37c-1606bf137687","type":"url","category":"Network activity","to_ids":true,"value":"https://iepvirgendecopacabana.com/htaccess/","comment":"https://x.com/Priv8Shops/status/2048544885494747285","timestamp":"1777246080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f46d4ebf-5a2a-5676-8f7a-1e505558a0f0","type":"md5","category":"Payload delivery","to_ids":true,"value":"b3bf26bfbf7aec43379523bd18b1ec16","comment":"https://x.com/G60930953/status/2048567059684942207","timestamp":"1777251420","distribution":"5"},{"uuid":"4c693a50-f1a2-50ed-a6bb-86b8c720f077","type":"url","category":"Network activity","to_ids":true,"value":"http://87.121.79.73/ok","comment":"https://x.com/sicehice/status/2048567388187025858","timestamp":"1777251480","distribution":"5"},{"uuid":"623dc16a-9f4c-520e-aa98-3e01e9c386c5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.121.84.136","comment":"https://x.com/sicehice/status/2048567388187025858","timestamp":"1777251480","distribution":"5"},{"uuid":"a1224f8d-4322-50a3-b207-d21ca84d9991","type":"ip-dst","category":"Network activity","to_ids":true,"value":"87.121.79.73","comment":"https://x.com/sicehice/status/2048567388187025858","timestamp":"1777251480","distribution":"5"},{"uuid":"ecba1679-c410-5f62-8e3f-78257c66bddf","type":"md5","category":"Payload delivery","to_ids":true,"value":"d6fc1b8c97634893b5638fa39f47b89f","comment":"https://x.com/sicehice/status/2048567388187025858","timestamp":"1777251480","distribution":"5"},{"uuid":"964be172-0b92-557f-a4dc-844ccded33a9","type":"domain","category":"Network activity","to_ids":true,"value":"login.b9l6kfqw.shop","comment":"https://x.com/masaomi346/status/2048574924068118575","timestamp":"1777253280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"65f2e513-c8ff-5abf-9809-9bf46ed594b4","type":"url","category":"Network activity","to_ids":true,"value":"https://login.b9l6kfqw.shop/login","comment":"https://x.com/masaomi346/status/2048574924068118575","timestamp":"1777253280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6b3960e3-62cd-5a24-85f2-e2b00cdd1026","type":"url","category":"Network activity","to_ids":true,"value":"http://94.126.224.99","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"1055a6cf-31f3-584f-81fa-776c6bd18816","type":"domain","category":"Network activity","to_ids":true,"value":"mofa-go-np.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"23d0aaa0-9afb-5f41-8b16-b397588ea34c","type":"url","category":"Network activity","to_ids":true,"value":"http://mofa-go-np.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ac225bd0-51fa-5f16-9236-fc17733d78d5","type":"domain","category":"Network activity","to_ids":true,"value":"mofa-gov-np.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"c07c15ad-e85d-5af7-92e2-89d57257cc65","type":"url","category":"Network activity","to_ids":true,"value":"http://mofa-gov-np.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"70cd2ed8-1662-5db3-9a88-d08670578d01","type":"domain","category":"Network activity","to_ids":true,"value":"pakun-org.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ae23eb2b-6f2c-5e18-8a5b-53dc07a3c9ab","type":"url","category":"Network activity","to_ids":true,"value":"http://pakun-org.direct880.net","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9cfffa5f-39bc-5a58-8680-d696e6358f5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.126.224.99","comment":"https://x.com/Cyberteam008/status/2048596656141340906","timestamp":"1777258440","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"3505883b-c0ee-5362-a782-941265d229ce","type":"domain","category":"Network activity","to_ids":true,"value":"nodu1718.odns.fr","comment":"https://x.com/PhishStats/status/2048622601094742217","timestamp":"1777264620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"289b09de-6e76-568e-b3a0-213ae183263e","type":"url","category":"Network activity","to_ids":true,"value":"http://nodu1718.odns.fr/sjssjdj/alibaba/","comment":"https://x.com/PhishStats/status/2048622601094742217","timestamp":"1777264620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6f99d4e0-b496-5eda-b782-cd6da3f43c69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"109.234.164.139","comment":"https://x.com/PhishStats/status/2048622601094742217","timestamp":"1777264620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"666fc5af-ccca-529d-95bc-629979bf6a17","type":"md5","category":"Payload delivery","to_ids":true,"value":"5f44fb80dc20da875b4f7470e519e29f","comment":"https://x.com/prasad_dhakad/status/2048631468726100315","timestamp":"1777266720","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"826238e4-3943-5a74-a747-b60b66a3d879","type":"url","category":"Network activity","to_ids":true,"value":"https://rushadventure.com/cart/Pd1qtLn3XGYvDOdEKDTQ0","comment":"https://x.com/romonlyht/status/2048633016021631347","timestamp":"1777267140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9f670084-4a22-50d5-ae1b-eb3171072948","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.146.190.224","comment":"https://x.com/romonlyht/status/2048633016021631347","timestamp":"1777267140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3c11d0d5-ca3e-558c-a1e7-351f3f25f869","type":"domain","category":"Network activity","to_ids":true,"value":"rushadventure.com","comment":"https://x.com/romonlyht/status/2048633302719058241","timestamp":"1777267200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"60388b10-269a-5888-a236-e8d834c7a54d","type":"url","category":"Network activity","to_ids":true,"value":"https://rushadventure.com/goods/vT0nkA3OdO9p5CbP4fwfS","comment":"https://x.com/romonlyht/status/2048633302719058241","timestamp":"1777267200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"092dd827-1570-5cc6-9824-8c8b4a5006dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.200.36.49","comment":"https://x.com/romonlyht/status/2048633302719058241","timestamp":"1777267200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2e08184b-1dde-51e1-a438-e4f483656481","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.158.31","comment":"https://x.com/romonlyht/status/2048633302719058241","timestamp":"1777267200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb4848f3-90be-5bb2-bcbd-854667b7cdcc","type":"domain","category":"Network activity","to_ids":true,"value":"bwymenu.com","comment":"https://x.com/romonlyht/status/2048636617435525508","timestamp":"1777267980","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2fbb6fe5-de8c-542a-a22e-f9a0dbf090ec","type":"url","category":"Network activity","to_ids":true,"value":"https://bwymenu.com/read/odtgzw","comment":"https://x.com/romonlyht/status/2048636617435525508","timestamp":"1777267980","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5239306e-8258-5575-86a2-33b5dd2cb177","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.179.152.198","comment":"https://x.com/romonlyht/status/2048636617435525508","timestamp":"1777267980","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"146f664e-8039-5bd5-8947-47162ab23a7a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.167.162.143","comment":"https://x.com/romonlyht/status/2048636617435525508","timestamp":"1777267980","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3d01cc4f-d2c5-55bf-ba4a-515042dfcda0","type":"url","category":"Network activity","to_ids":true,"value":"https://sfht.mobi/kokiy1/","comment":"https://x.com/romonlyht/status/2048636623055962233","timestamp":"1777267980","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b87a134a-6d53-50fb-ba4e-fc1835061ed4","type":"domain","category":"Network activity","to_ids":true,"value":"haikek.com","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50afa877-93c8-544f-8fbc-e20f26a25758","type":"url","category":"Network activity","to_ids":true,"value":"https://haikek.com/awapsf/redirect","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eca5b9e5-d227-5b3a-a394-eb8adedc759c","type":"domain","category":"Network activity","to_ids":true,"value":"sfht.mobi","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1760559-080e-56dd-b07b-51df925c4533","type":"url","category":"Network activity","to_ids":true,"value":"https://sfht.mobi/kokiy1","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ef472b5c-ae72-5179-8690-4e68c9faa318","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.182.190.206","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7fdf58bb-6c2a-5df9-ae7b-bc60261a9399","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.153.172.251","comment":"https://x.com/romonlyht/status/2048636940279595352","timestamp":"1777268040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"36f9f734-5723-519a-ab8c-bfe9fecda9b7","type":"domain","category":"Network activity","to_ids":true,"value":"iepvirgendecopacabana.com","comment":"https://x.com/skocherhan/status/2048637060919996814","timestamp":"1777268111","distribution":"5"},{"uuid":"92fb8eb7-d500-517c-aca9-956f964bc5f8","type":"url","category":"Network activity","to_ids":true,"value":"https://iepvirgendecopacabana.com/cgibin/","comment":"https://x.com/skocherhan/status/2048637060919996814","timestamp":"1777268111","distribution":"5"},{"uuid":"5cad9d67-4489-5b7f-b37c-1606bf137687","type":"url","category":"Network activity","to_ids":true,"value":"https://iepvirgendecopacabana.com/htaccess/","comment":"https://x.com/skocherhan/status/2048637060919996814","timestamp":"1777268111","distribution":"5"},{"uuid":"33d197c0-2fa9-5bdf-aea7-89c307441ac2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.76.193.60","comment":"https://x.com/K_N1kolenko/status/2048637515507106100","timestamp":"1777268220","distribution":"5"},{"uuid":"a060390b-7fd0-53a9-bebb-32e739e7e597","type":"ip-dst","category":"Network activity","to_ids":true,"value":"143.92.51.15","comment":"https://x.com/K_N1kolenko/status/2048637515507106100","timestamp":"1777268220","distribution":"5"},{"uuid":"6037ce1c-d8f3-5915-84e3-b2f39aa6a628","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.23.185.75","comment":"https://x.com/K_N1kolenko/status/2048637515507106100","timestamp":"1777268220","distribution":"5"},{"uuid":"b48778ad-416e-5227-ab5f-e020cf14c2bd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"156.247.41.12","comment":"https://x.com/K_N1kolenko/status/2048637515507106100","timestamp":"1777268220","distribution":"5"},{"uuid":"187be8a4-c510-5822-b445-0839bb92999b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.238.184.216","comment":"https://x.com/K_N1kolenko/status/2048637515507106100","timestamp":"1777268220","distribution":"5"},{"uuid":"92c437e6-27f8-550d-bc1a-3fbd638a3fb7","type":"domain","category":"Network activity","to_ids":true,"value":"login.guf792lp.shop","comment":"https://x.com/masaomi346/status/2048637920891072891","timestamp":"1777268280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1b44371-e720-5565-b0ca-5a03c32eb276","type":"url","category":"Network activity","to_ids":true,"value":"https://login.guf792lp.shop/login","comment":"https://x.com/masaomi346/status/2048637920891072891","timestamp":"1777268280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f19910ad-342b-5dbe-a690-b517832d9218","type":"domain","category":"Network activity","to_ids":true,"value":"dhlnorth.com","comment":"https://x.com/romonlyht/status/2048639773473182103","timestamp":"1777268700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0d7ce367-6486-5d7d-9c84-6e9b3489efc8","type":"url","category":"Network activity","to_ids":true,"value":"https://dhlnorth.com","comment":"https://x.com/romonlyht/status/2048639773473182103","timestamp":"1777268700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc2249f2-cc75-5975-a093-26c7ffc6ef60","type":"ip-dst","category":"Network activity","to_ids":true,"value":"146.56.133.79","comment":"https://x.com/romonlyht/status/2048639773473182103","timestamp":"1777268700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c54dfdae-619b-5689-8f76-7edd52295420","type":"ip-dst","category":"Network activity","to_ids":true,"value":"148.113.136.44","comment":"https://x.com/Fact_Finder03/status/2048652847827603916","timestamp":"1777271820","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"18ae01e1-9a6a-5a2c-95a9-b5fd946ddc77","type":"domain","category":"Network activity","to_ids":true,"value":"mountainviewnursery.online","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"db4c958a-8b25-5a53-af16-637c1cce19cb","type":"url","category":"Network activity","to_ids":true,"value":"https://mountainviewnursery.online","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4e373814-b092-50f0-8806-5701f5911a04","type":"domain","category":"Network activity","to_ids":true,"value":"ktoshi110.github.io","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"96b76ed1-ca06-5f1f-aea9-d07593fe1282","type":"url","category":"Network activity","to_ids":true,"value":"https://ktoshi110.github.io/Amazons/","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7dbd882d-ed28-540a-bec8-e27dbd5b9988","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.239.151.204","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3da6cdf5-e37a-5694-8384-d9424a94762d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.181.183","comment":"https://x.com/romonlyht/status/2048654115849617635","timestamp":"1777272120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cb96651b-1fb7-5c1e-a3f4-c854ef0d749f","type":"url","category":"Network activity","to_ids":true,"value":"https://hongkewood.com/6WDicTOgYw.info.jp","comment":"https://x.com/romonlyht/status/2048654601835221159","timestamp":"1777272240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ad4725e2-b901-56ef-a47c-fae63c93719d","type":"domain","category":"Network activity","to_ids":true,"value":"beachwearcostumi.com","comment":"https://x.com/romonlyht/status/2048654601835221159","timestamp":"1777272240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d90402f2-9a9f-57a6-8f13-c76171e59aba","type":"url","category":"Network activity","to_ids":true,"value":"https://beachwearcostumi.com/bzkwzaws","comment":"https://x.com/romonlyht/status/2048654601835221159","timestamp":"1777272240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bccb9bf2-85b0-540a-a7e1-19a9a98bea9b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.233.191.151","comment":"https://x.com/romonlyht/status/2048654601835221159","timestamp":"1777272240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4ce9ed43-b05c-5791-ae5b-b7f61a297014","type":"ip-dst","category":"Network activity","to_ids":true,"value":"207.56.30.160","comment":"https://x.com/Fact_Finder03/status/2048655094300975563","timestamp":"1777272360","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"eddc6853-475d-584a-bae5-19896f1f79c0","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d944876d729809b6933ee4797afbed840d28988b68f6726be255fdf8dd799a37","comment":"https://x.com/Fact_Finder03/status/2048655094300975563","timestamp":"1777272360","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"0850ef7f-5dae-52c2-934d-3d49dfa1f64d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"ea16a69793d30869b687b607995764805c36f06b7f4205872375e9cac38662d7","comment":"https://x.com/Fact_Finder03/status/2048655094300975563","timestamp":"1777272360","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"e0c97668-4fdf-5872-b49b-b8a35d797a02","type":"url","category":"Network activity","to_ids":true,"value":"https://steamcommunity.com/profiles/76561198709529056","comment":"https://x.com/K_N1kolenko/status/2048655046028439966","timestamp":"1777272360","distribution":"5","Tag":[{"name":"Vidar"},{"name":"stealer"}]},{"uuid":"f4f53ee0-9c9e-51dd-87f6-2f440046ac87","type":"url","category":"Network activity","to_ids":true,"value":"https://telegram.me/b8bz11","comment":"https://x.com/K_N1kolenko/status/2048655046028439966","timestamp":"1777272360","distribution":"5","Tag":[{"name":"Vidar"},{"name":"stealer"}]},{"uuid":"390907a4-ec32-5522-bb16-4db24f5dce6e","type":"domain","category":"Network activity","to_ids":true,"value":"yxwhzmysgs.com","comment":"https://x.com/romonlyht/status/2048655094305243268","timestamp":"1777272360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ae719dd6-a545-5066-89f3-1287b93ccb25","type":"url","category":"Network activity","to_ids":true,"value":"https://yxwhzmysgs.com/OONOHZy5tm.digital","comment":"https://x.com/romonlyht/status/2048655094305243268","timestamp":"1777272360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74cf973f-3e76-5523-b442-10da5d2702f7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.102.64.233","comment":"https://x.com/romonlyht/status/2048655094305243268","timestamp":"1777272360","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"250923bb-6889-5cde-826b-dd2abbeaf937","type":"domain","category":"Network activity","to_ids":true,"value":"hongkewood.com","comment":"https://x.com/romonlyht/status/2048655579259040035","timestamp":"1777272480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a26d3c0b-ac53-5a0c-98d4-4b039cf36cbf","type":"url","category":"Network activity","to_ids":true,"value":"https://hongkewood.com/UHUAJOkG0a.company","comment":"https://x.com/romonlyht/status/2048655579259040035","timestamp":"1777272480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e31d6889-ac87-586b-9ede-810bcd195af3","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.236.104.208","comment":"https://x.com/romonlyht/status/2048655579259040035","timestamp":"1777272480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"40a37f3f-1c34-57cf-ac45-5aef3d99b496","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.133.191.80","comment":"https://x.com/romonlyht/status/2048655579259040035","timestamp":"1777272480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"95f97cc6-3d30-5e88-a050-5f7a2db287fd","type":"domain","category":"Network activity","to_ids":true,"value":"gamingchaircheap.com","comment":"https://x.com/romonlyht/status/2048656033980280955","timestamp":"1777272600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4a3665c3-a513-5b38-af7a-bd3a9031010c","type":"url","category":"Network activity","to_ids":true,"value":"https://gamingchaircheap.com/?track=Ozp90nsDnouw","comment":"https://x.com/romonlyht/status/2048656033980280955","timestamp":"1777272600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c1060b5d-f0c5-5d5d-b4ef-0d64523e9509","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.119.111.222","comment":"https://x.com/romonlyht/status/2048656033980280955","timestamp":"1777272600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9eeca566-8e6c-5911-af68-36aefcc0a6ee","type":"domain","category":"Network activity","to_ids":true,"value":"hombreropa.com","comment":"https://x.com/romonlyht/status/2048656414722408553","timestamp":"1777272720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5fe22330-4f06-5a3c-b405-4bdc34ad8b3a","type":"url","category":"Network activity","to_ids":true,"value":"https://hombreropa.com/media/nQiEGaeVRRY-.xml","comment":"https://x.com/romonlyht/status/2048656414722408553","timestamp":"1777272720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc92f45c-3efd-5877-a737-0bef0c56618e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.236.146.83","comment":"https://x.com/romonlyht/status/2048656414722408553","timestamp":"1777272720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3548474e-25da-5c9e-82c2-7ed700d5f1f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.133.164.105","comment":"https://x.com/romonlyht/status/2048656414722408553","timestamp":"1777272720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"97f94185-3dd2-5503-98f9-2938d58d8efa","type":"domain","category":"Network activity","to_ids":true,"value":"www-pay.zhn-wap-hth.com","comment":"https://x.com/romonlyht/status/2048658152523272698","timestamp":"1777273140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b57992df-8011-5611-aede-e892e2f8e663","type":"url","category":"Network activity","to_ids":true,"value":"https://www-pay.zhn-wap-hth.com/?TYQc1puZ.jpg","comment":"https://x.com/romonlyht/status/2048658152523272698","timestamp":"1777273140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ca237239-755a-520b-b518-0e81fcae9be1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.204.194.92","comment":"https://x.com/romonlyht/status/2048658152523272698","timestamp":"1777273140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a89a248a-0ecd-5348-9c29-4fccd110e817","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.153.49","comment":"https://x.com/romonlyht/status/2048658152523272698","timestamp":"1777273140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5372b894-bc31-53d3-b4a2-ff322709c9a7","type":"domain","category":"Network activity","to_ids":true,"value":"www2-pay.download-home-kaiyun.com","comment":"https://x.com/romonlyht/status/2048659743636676743","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"55cd7664-993f-5d87-b182-b2cb68ec3ee2","type":"url","category":"Network activity","to_ids":true,"value":"https://www2-pay.download-home-kaiyun.com/?fl9DdDjw.jpg","comment":"https://x.com/romonlyht/status/2048659743636676743","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1ebea8b2-4399-5a0c-a6fa-36f25b48475b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.178.117.125","comment":"https://x.com/romonlyht/status/2048659743636676743","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8693534b-85bf-58a1-a63a-5e6279d95cf0","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.223.118","comment":"https://x.com/romonlyht/status/2048659743636676743","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"54da754a-0dbb-5e49-bc57-9e200a799e9d","type":"url","category":"Network activity","to_ids":true,"value":"https://login.guf792lp.shop/mxh7ysng?_t=TA4qiO51OBD9pcHJj7jltfHiLdYoDiDTzV0DA1XWaCs","comment":"https://x.com/romonlyht/status/2048659745620545771","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a6795655-082f-5d4b-9727-955d23117e66","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.21.12.25","comment":"https://x.com/romonlyht/status/2048659745620545771","timestamp":"1777273500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"42807cfe-ea11-591e-acf6-0aef7d95429f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"aeb2cbf7f7031467d99c6fa29318bd51642ed5ff46b20458baab8fb2ef671f28","comment":"https://x.com/byrne_emmy12099/status/2048660186722869507","timestamp":"1777273620","distribution":"5"},{"uuid":"0bf487b9-5915-58f9-854d-6809f4ac5619","type":"domain","category":"Network activity","to_ids":true,"value":"toothbased.com","comment":"https://x.com/romonlyht/status/2048661169339305996","timestamp":"1777273800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5e19f113-102b-59f6-982b-b1e561924151","type":"url","category":"Network activity","to_ids":true,"value":"https://toothbased.com/?type=verify&key=wotdhwafcg","comment":"https://x.com/romonlyht/status/2048661169339305996","timestamp":"1777273800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b38e310-6023-5bf3-b5c1-b17534dc41cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.101.137.3","comment":"https://x.com/romonlyht/status/2048661169339305996","timestamp":"1777273800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"83a30107-59ca-5301-b01e-977a2c6ea712","type":"domain","category":"Network activity","to_ids":true,"value":"zyisykm.shop","comment":"https://x.com/malwrhunterteam/status/2048671502443180444","timestamp":"1777276320","distribution":"5"},{"uuid":"a535bcd9-c81b-53a5-9587-8bf345929e2c","type":"url","category":"Network activity","to_ids":true,"value":"https://zyisykm.shop","comment":"https://x.com/malwrhunterteam/status/2048671502443180444","timestamp":"1777276320","distribution":"5"},{"uuid":"05aa432b-fe37-57e3-83f2-844cc24be4bf","type":"domain","category":"Network activity","to_ids":true,"value":"indiagov.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"bf628517-d9b3-5cc9-9a4a-44249821f1cd","type":"url","category":"Network activity","to_ids":true,"value":"http://indiagov.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"a0a5b766-83f3-58ce-b7f5-86c3c64a100e","type":"domain","category":"Network activity","to_ids":true,"value":"xhxz.info","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"0fdd73ec-7a3c-5f0f-9934-808f6af2350f","type":"url","category":"Network activity","to_ids":true,"value":"http://xhxz.info","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"2be9165c-b0a0-5e54-b146-070c8d8e93a1","type":"domain","category":"Network activity","to_ids":true,"value":"kjrywrzx.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"055a3ae8-3878-59f0-843b-398acdaa8b2b","type":"url","category":"Network activity","to_ids":true,"value":"http://kjrywrzx.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"3e2a1efe-a875-5c0d-be92-e180fbbea749","type":"domain","category":"Network activity","to_ids":true,"value":"gooomld.top","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"5fcd8571-ec26-5dfb-8d2c-31fb7e15b2f2","type":"url","category":"Network activity","to_ids":true,"value":"http://gooomld.top","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"8715000a-e037-55b3-8330-4fd4575001fe","type":"domain","category":"Network activity","to_ids":true,"value":"goolmor.cyou","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"c608c51a-082b-5c54-97c8-351a38f95a93","type":"url","category":"Network activity","to_ids":true,"value":"http://goolmor.cyou","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"726a9126-84d1-5b45-921a-6ed31a3ed16a","type":"domain","category":"Network activity","to_ids":true,"value":"fgsdol.icu","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"9222af7b-a5d3-5e93-bc6c-d309fa733e4d","type":"url","category":"Network activity","to_ids":true,"value":"http://fgsdol.icu","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"0f9c2686-1b75-5c0c-a7a4-f570aa2a58ad","type":"domain","category":"Network activity","to_ids":true,"value":"vsdnk.top","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"a58ba0b7-361b-5068-93cd-7dc0e611439a","type":"url","category":"Network activity","to_ids":true,"value":"http://vsdnk.top","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"8f051b88-dc43-5517-8c71-f158aca96dc0","type":"domain","category":"Network activity","to_ids":true,"value":"gooomoel.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"781b2084-4c30-5c6b-87c0-65d2d7d8fd6a","type":"url","category":"Network activity","to_ids":true,"value":"http://gooomoel.shop","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"bf2030d7-dfe3-5f5c-91f3-a42d636ed63d","type":"domain","category":"Network activity","to_ids":true,"value":"Letter.zip","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"93adc3e1-5284-5c6e-af61-4ebc44f84c1a","type":"url","category":"Network activity","to_ids":true,"value":"http://Letter.zip","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"9cd7d694-7181-5710-a4dc-f4f3a27cf39d","type":"domain","category":"Network activity","to_ids":true,"value":"Check.zip","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"cc397f9a-98e3-578c-b406-2e8985dbc254","type":"url","category":"Network activity","to_ids":true,"value":"http://Check.zip","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"74bfd54a-afb9-5f3a-b5b8-c718ba919528","type":"url","category":"Network activity","to_ids":true,"value":"http://38.76.199.112","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"9de36f97-dc30-5a0b-89cb-f35914db182f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.76.199.112","comment":"https://x.com/Malwarehunterr/status/2048685639403774218","timestamp":"1777279680","distribution":"5"},{"uuid":"6a70383d-42b1-58ab-bc68-4e2cfd926c3a","type":"md5","category":"Payload delivery","to_ids":true,"value":"573dc21ae52d9d6a3607dc97655e70fd","comment":"https://x.com/suyog41/status/2048694432183234857","timestamp":"1777281780","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3cb9f863-7114-5fd8-811b-177eb09437b1","type":"domain","category":"Network activity","to_ids":true,"value":"lesoulkir.info","comment":"https://x.com/smica83/status/2048702700435411434","timestamp":"1777283760","distribution":"5"},{"uuid":"6931ae10-468d-512f-acb0-2678c9745d34","type":"url","category":"Network activity","to_ids":true,"value":"http://lesoulkir.info","comment":"https://x.com/smica83/status/2048702700435411434","timestamp":"1777283760","distribution":"5"},{"uuid":"244cb438-05ad-5971-a787-d65e5d3999fb","type":"domain","category":"Network activity","to_ids":true,"value":"imgresim.net","comment":"https://x.com/smica83/status/2048705522451271688","timestamp":"1777284420","distribution":"5"},{"uuid":"57d42a2c-0a65-5647-937f-cfea32a5892d","type":"url","category":"Network activity","to_ids":true,"value":"https://imgresim.net/Screen_Shot_1253_246469384693746_2469724.jpg.zip","comment":"https://x.com/smica83/status/2048705522451271688","timestamp":"1777284420","distribution":"5"},{"uuid":"7d6d3eaf-a6f0-56c7-8b23-7f0bd734166b","type":"domain","category":"Network activity","to_ids":true,"value":"d.tmpfile.link","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"4b5c1441-fbd3-5b4f-8bd6-07e7d062d815","type":"url","category":"Network activity","to_ids":true,"value":"https://d.tmpfile.link/public/2026-04-27/afe0c156-084a-480c-9d8a-7b94450c6a04/ghhjgr.png","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"53b0b171-4d2c-5ea9-a254-2a86c9614ec6","type":"domain","category":"Network activity","to_ids":true,"value":"lapoire6.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"d8708682-50d7-54eb-9c15-67e3660e4def","type":"url","category":"Network activity","to_ids":true,"value":"http://lapoire6.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"1018bb22-deaf-5a2b-b3a6-75b24cd6c776","type":"domain","category":"Network activity","to_ids":true,"value":"lapoire7.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"727a26e1-0a66-59f6-80e2-462b4dd5de7b","type":"url","category":"Network activity","to_ids":true,"value":"http://lapoire7.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"385f7d53-2bdb-5469-8436-eb93d1b91bef","type":"domain","category":"Network activity","to_ids":true,"value":"lapoire8.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"44447582-0305-551f-80c9-fad975bcb6bb","type":"url","category":"Network activity","to_ids":true,"value":"http://lapoire8.hopto.org","comment":"https://x.com/smica83/status/2048710333724860927","timestamp":"1777285560","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"fa621160-1f6d-5e44-b6b3-042b8cfd272d","type":"url","category":"Network activity","to_ids":true,"value":"http://104.164.55.223","comment":"https://x.com/malwrhunterteam/status/2048722660113178659","timestamp":"1777288500","distribution":"5"},{"uuid":"82360558-ff7b-54b9-a2b9-e824747883ed","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.164.55.223","comment":"https://x.com/malwrhunterteam/status/2048722660113178659","timestamp":"1777288500","distribution":"5"},{"uuid":"95ce5809-08be-5aee-9557-3b100b7d9624","type":"domain","category":"Network activity","to_ids":true,"value":"telecom-exceed-aid-charts.trycloudflare.com","comment":"https://x.com/smica83/status/2048723094185934944","timestamp":"1777288620","distribution":"5"},{"uuid":"7ecf750e-3374-59da-afdb-7728592deaad","type":"url","category":"Network activity","to_ids":true,"value":"http://telecom-exceed-aid-charts.trycloudflare.com","comment":"https://x.com/smica83/status/2048723094185934944","timestamp":"1777288620","distribution":"5"},{"uuid":"723ddaea-db90-5d2b-91d9-23f90f576985","type":"md5","category":"Payload delivery","to_ids":true,"value":"b88fa8357f083197cafc14343ab5691a","comment":"https://x.com/suyog41/status/2048736634817122775","timestamp":"1777291800","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"ace4525d-e0e0-5474-9479-1d11bc1731c7","type":"domain","category":"Network activity","to_ids":true,"value":"paragon.goodfellasdiner.com","comment":"https://x.com/masaomi346/status/2048740155817930807","timestamp":"1777292640","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8181a738-62fe-55d3-9a2f-45bfbb0fac90","type":"url","category":"Network activity","to_ids":true,"value":"http://paragon.goodfellasdiner.com","comment":"https://x.com/masaomi346/status/2048740155817930807","timestamp":"1777292640","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"035f8ac4-075c-5f94-a37a-9c24d4e4258f","type":"domain","category":"Network activity","to_ids":true,"value":"nzrcovqs.nvasz.cn","comment":"https://x.com/Metemcyber/status/2048741218151240179","timestamp":"1777292940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"28d5eb88-3ee7-525d-9e90-2f2a19e0da43","type":"url","category":"Network activity","to_ids":true,"value":"https://nzrcovqs.nvasz.cn/iiufhys/eorio/loging/","comment":"https://x.com/Metemcyber/status/2048741218151240179","timestamp":"1777292940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9a9e504-a5a2-50ee-8b04-8e1d58054c47","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.166.156","comment":"https://x.com/Metemcyber/status/2048741218151240179","timestamp":"1777292940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67a778ed-12bc-5745-aed6-1d018da22ec4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.166.156","comment":"https://x.com/Metemcyber/status/2048741218151240179","timestamp":"1777292940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"430a224b-0f47-5295-becc-973e78ce3cee","type":"domain","category":"Network activity","to_ids":true,"value":"netflix-home.info","comment":"https://x.com/Malwarehunterr/status/2048742556083925203","timestamp":"1777293240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c9ffb00-a8ff-55e9-952d-09665be51283","type":"url","category":"Network activity","to_ids":true,"value":"http://netflix-home.info","comment":"https://x.com/Malwarehunterr/status/2048742556083925203","timestamp":"1777293240","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"71b124df-ffdf-52b7-817c-5bf4e907260d","type":"domain","category":"Network activity","to_ids":true,"value":"dfumbu.fytwfj.cn","comment":"https://x.com/Metemcyber/status/2048742665014157584","timestamp":"1777293289","distribution":"5"},{"uuid":"028ddd87-49f8-5129-837b-38c17281bfbc","type":"url","category":"Network activity","to_ids":true,"value":"https://dfumbu.fytwfj.cn/nomelo/login_index/","comment":"https://x.com/Metemcyber/status/2048742665014157584","timestamp":"1777293289","distribution":"5"},{"uuid":"010c1925-1383-54a7-ad9e-d2992d1cf502","type":"domain","category":"Network activity","to_ids":true,"value":"mac-cleantool.gitlab.io","comment":"https://x.com/masaomi346/status/2048743434689949721","timestamp":"1777293420","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"fe6c35af-8f41-571c-8e3b-bff40a573f12","type":"url","category":"Network activity","to_ids":true,"value":"http://mac-cleantool.gitlab.io","comment":"https://x.com/masaomi346/status/2048743434689949721","timestamp":"1777293420","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"ab5ebb72-4723-5e56-91a9-1f8fa9e9c99d","type":"domain","category":"Network activity","to_ids":true,"value":"dpsmuz.com","comment":"https://x.com/masaomi346/status/2048743434689949721","timestamp":"1777293420","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"3d2673c5-d9cf-54af-8b28-7676260e8f38","type":"url","category":"Network activity","to_ids":true,"value":"http://dpsmuz.com","comment":"https://x.com/masaomi346/status/2048743434689949721","timestamp":"1777293420","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"96b6d731-76b1-51ec-9dcd-d1a58703ce52","type":"domain","category":"Network activity","to_ids":true,"value":"stultiern.iceaz.cn","comment":"https://x.com/Metemcyber/status/2048743709538431467","timestamp":"1777293480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4994ace8-4bff-58a2-a030-7ac502d368fc","type":"url","category":"Network activity","to_ids":true,"value":"https://stultiern.iceaz.cn/yual_login_exp/getuug/","comment":"https://x.com/Metemcyber/status/2048743709538431467","timestamp":"1777293480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3f8146dc-1d20-5938-959c-297e57dc96ca","type":"ip-dst","category":"Network activity","to_ids":true,"value":"141.147.45.169","comment":"https://x.com/Fact_Finder03/status/2048756421609807978","timestamp":"1777296540","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"9e9e08a6-c5c4-5645-b6ee-642fe9f0dad5","type":"url","category":"Network activity","to_ids":true,"value":"http://195.201.104.53","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"51698f7b-c4b2-572d-ad0e-1edf75ac3e73","type":"url","category":"Network activity","to_ids":true,"value":"http://195.201.104.53:6931","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"266e824b-c831-5bbb-a86e-c2fb55988117","type":"url","category":"Network activity","to_ids":true,"value":"http://195.201.104.53:6936","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"b85d9cfe-27aa-5eae-885f-403e7eb3c63b","type":"url","category":"Network activity","to_ids":true,"value":"http://195.201.104.53:6939","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"ac19aa44-18d7-5f44-94e7-c9c7be0a0946","type":"url","category":"Network activity","to_ids":true,"value":"http://216.126.224.220:5976","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"4810998c-9d19-565c-b860-2f5f81a2fb95","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.201.104.53","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"0c5ec1d9-ec27-5570-8507-3ec532c9173d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"216.126.224.220","comment":"https://x.com/500mk500/status/2048762621424226310","timestamp":"1777298040","distribution":"5","Tag":[{"name":"APT"},{"name":"Lazarus"}]},{"uuid":"29ea1091-aeb0-5576-9864-5a2dcf80d304","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5c9b09819b196970a867b1d459f9053da38a6a2721f21264324e0a8ffef01e20","comment":"https://x.com/Threatlabz/status/2048806728083571115","timestamp":"1777308540","distribution":"5"},{"uuid":"417e34b2-552a-5252-83c4-139da417b230","type":"domain","category":"Network activity","to_ids":true,"value":"filehappytomato.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"2f512652-de1a-5128-88ba-c89fc569d65d","type":"url","category":"Network activity","to_ids":true,"value":"http://filehappytomato.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"ed0a984e-48e9-5386-b348-47df1a948caa","type":"domain","category":"Network activity","to_ids":true,"value":"mendalik.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"3fb51d41-fef8-5bf1-9140-f6bd603453c2","type":"url","category":"Network activity","to_ids":true,"value":"http://mendalik.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"3b60fbb0-e2fd-53df-950c-9eb839ce64d8","type":"domain","category":"Network activity","to_ids":true,"value":"cvetochek75.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"709834bd-0337-58ad-8727-9b57a5147c94","type":"url","category":"Network activity","to_ids":true,"value":"http://cvetochek75.com","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"7fdd5768-340d-594f-bbc3-d2b6519f6392","type":"sha256","category":"Payload delivery","to_ids":true,"value":"f269d5f280c7f734300d3a6c769fee3f5e1f8cdc50677ed54086984b364f28d2","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"73c84bbb-71a7-5609-9fe6-da4068c95189","type":"sha256","category":"Payload delivery","to_ids":true,"value":"897c4f7ac89d96ea2378679cc7dd7accc482add46d9395271dcc5c767bb95f4c","comment":"https://x.com/brkalbyrk7/status/2048822026450657391","timestamp":"1777312200","distribution":"5"},{"uuid":"29b81656-ef74-51e0-b7ac-a48a17a7e213","type":"domain","category":"Network activity","to_ids":true,"value":"chocolatey.co.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"6d85547a-8602-5bcd-975f-e8815d874e05","type":"url","category":"Network activity","to_ids":true,"value":"http://chocolatey.co.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"e9e9dd0b-4a72-5e4d-b18e-2f2c57fc2d38","type":"domain","category":"Network activity","to_ids":true,"value":"chocolatey.net","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"fd577460-e15a-5148-b7b2-4017aaf3b53f","type":"url","category":"Network activity","to_ids":true,"value":"http://chocolatey.net","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"6cd1ae9b-48db-5921-aeb6-7f27566563e0","type":"domain","category":"Network activity","to_ids":true,"value":"api.bio9438.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"566cefb7-0b03-5890-9123-06ee84ea0d1b","type":"url","category":"Network activity","to_ids":true,"value":"http://api.bio9438.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"399e89e5-47bb-5127-8104-fd87d45c3b54","type":"domain","category":"Network activity","to_ids":true,"value":"olive3451.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"759f3345-b211-513b-bad0-181f105d0f46","type":"url","category":"Network activity","to_ids":true,"value":"http://olive3451.com","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"a51d752f-df33-5fb2-b164-f57a870d7aec","type":"domain","category":"Network activity","to_ids":true,"value":"community.chocolatey.net","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"9da7a213-6c3e-5c31-95e5-0add30ada37a","type":"url","category":"Network activity","to_ids":true,"value":"http://community.chocolatey.net/install.ps1","comment":"https://x.com/g0njxa/status/2048832122618847252","timestamp":"1777314600","distribution":"5"},{"uuid":"aa8d9215-7941-572e-a57b-5650b702fa8d","type":"domain","category":"Network activity","to_ids":true,"value":"unlockeblog12s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"5197ee98-75e4-5d3b-ac0f-2f515d5199d1","type":"url","category":"Network activity","to_ids":true,"value":"http://unlockeblog12s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"880c38ef-4277-5e6e-9bfc-3e1fc66f8bd6","type":"domain","category":"Network activity","to_ids":true,"value":"unlockeblog15s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"6528fee6-bc92-553d-a77e-8b6dc7abb1fa","type":"url","category":"Network activity","to_ids":true,"value":"http://unlockeblog15s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"72133830-6921-525a-9ee3-bc99f32b498b","type":"domain","category":"Network activity","to_ids":true,"value":"eboardreport5s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b9bcae10-7d42-552d-adb1-803f2570fe1f","type":"url","category":"Network activity","to_ids":true,"value":"http://eboardreport5s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"2dcb4787-6068-586a-a0fb-74bd948195e9","type":"domain","category":"Network activity","to_ids":true,"value":"unlockeblog10s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b8b40174-aecc-5df9-9f42-0fb847921e77","type":"url","category":"Network activity","to_ids":true,"value":"http://unlockeblog10s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"7e9adc65-0a4b-5549-9d2d-511753b8aadc","type":"domain","category":"Network activity","to_ids":true,"value":"eboardreport18s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"859b7e22-2f14-562d-87b8-19fff809fc9d","type":"url","category":"Network activity","to_ids":true,"value":"http://eboardreport18s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"7a68efea-a279-5542-b9b3-90f7bf4b8a3a","type":"domain","category":"Network activity","to_ids":true,"value":"unlockeblog19s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"4fa2e306-751b-5c72-b4fc-7333c22e6b78","type":"url","category":"Network activity","to_ids":true,"value":"http://unlockeblog19s.dynuddns.net","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"852e8859-c7ba-558d-accb-3867905af482","type":"domain","category":"Network activity","to_ids":true,"value":"enboardingreport18s.dns.army","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"e6258d92-1078-5c58-a9b7-61e3dfcd2ecf","type":"url","category":"Network activity","to_ids":true,"value":"http://enboardingreport18s.dns.army","comment":"https://x.com/skocherhan/status/2048839411962396813","timestamp":"1777316340","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"a080ef91-2a9c-562c-b6aa-c353bd4367f5","type":"sha256","category":"Payload delivery","to_ids":true,"value":"bf777e4dee6918d2373ba83433b4a7530d6e69465a1b6107ef4fd43f4ea60ec4","comment":"https://x.com/James_inthe_box/status/2048866534932779273","timestamp":"1777322820","distribution":"5"},{"uuid":"a2ba4698-71c6-519d-ac49-f626db47d705","type":"domain","category":"Network activity","to_ids":true,"value":"witch-skins-lip-coal.trycloudflare.com","comment":"https://x.com/smica83/status/2048868515348652107","timestamp":"1777323240","distribution":"5"},{"uuid":"ef5d68aa-87cd-5f7c-b2b7-9fa1af95783e","type":"url","category":"Network activity","to_ids":true,"value":"http://witch-skins-lip-coal.trycloudflare.com","comment":"https://x.com/smica83/status/2048868515348652107","timestamp":"1777323240","distribution":"5"},{"uuid":"da2ef4ae-f361-5fff-be97-96f6129e17d8","type":"domain","category":"Network activity","to_ids":true,"value":"maiden-apply-looks-education.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/2048872565095936175","timestamp":"1777324260","distribution":"5"},{"uuid":"9e086501-87bf-5f82-809a-f0771507227a","type":"url","category":"Network activity","to_ids":true,"value":"http://maiden-apply-looks-education.trycloudflare.com","comment":"https://x.com/malwrhunterteam/status/2048872565095936175","timestamp":"1777324260","distribution":"5"},{"uuid":"7aa8a451-0e02-58fa-a595-8d2f8243a10c","type":"domain","category":"Network activity","to_ids":true,"value":"dianegov.co","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"30d72adb-3a0c-59fb-8508-e9b5dfd6fe1d","type":"url","category":"Network activity","to_ids":true,"value":"http://dianegov.co","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"17544d08-60f9-5125-b0fd-c73970bb8bd8","type":"domain","category":"Network activity","to_ids":true,"value":"consultaprocesosramajudicialgov.run.place","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"95518287-621c-5b09-9e30-9090b6e1adcf","type":"url","category":"Network activity","to_ids":true,"value":"http://consultaprocesosramajudicialgov.run.place","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"d910c557-fa5c-517a-8c05-7f0e7079e7fa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.243.109.231","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"ea05d0c7-ec83-5808-af99-c9901285f8dc","type":"sha256","category":"Payload delivery","to_ids":true,"value":"02a4812ad5c4caf9f3f3887589f1b2cb9895680c10bffcd762826d4a19b4c9a0","comment":"https://x.com/hipdead010/status/2048874206431969653","timestamp":"1777324620","distribution":"5","Tag":[{"name":"AsyncRAT"},{"name":"Dcrat"}]},{"uuid":"f408d304-2614-56bc-85f4-40a8acef8375","type":"url","category":"Network activity","to_ids":true,"value":"http://38.83.112.137:443","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"fa3da443-c392-5bd0-b431-67452a924ecc","type":"url","category":"Network activity","to_ids":true,"value":"http://38.83.112.137:3000","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"aa1479c5-e963-5888-9087-460a926d0079","type":"url","category":"Network activity","to_ids":true,"value":"http://149.56.141.176:8081","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"df0bba39-c4ff-5ecc-b9a5-434db5e246b7","type":"url","category":"Network activity","to_ids":true,"value":"http://193.181.211.79:5001","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"295e894b-c797-5106-bd4b-8cb04a3036e3","type":"url","category":"Network activity","to_ids":true,"value":"http://77.110.120.34:5000","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"5df7764b-4122-5739-bd31-0eaaf546dab8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.83.112.137","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"ef7797d8-73ab-52b4-9d10-8c87295f2307","type":"ip-dst","category":"Network activity","to_ids":true,"value":"149.56.141.176","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"b91cf2e5-d412-5a7c-80a3-ea2399f48638","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.181.211.79","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"06e78ec5-e8e9-52f7-99f7-14a40f7477d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.110.120.34","comment":"https://x.com/skocherhan/status/2048878734149579050","timestamp":"1777325700","distribution":"5"},{"uuid":"94a25cca-b9c9-5988-83a9-9b3ba75fde45","type":"domain","category":"Network activity","to_ids":true,"value":"edeliever-address-verify.biz","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"f7611383-c387-5435-8a2a-e893d298ab60","type":"url","category":"Network activity","to_ids":true,"value":"http://edeliever-address-verify.biz","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"cbd996f6-02eb-5a99-9261-11dbb1b4bc55","type":"domain","category":"Network activity","to_ids":true,"value":"appleviewer.sbs","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"86134fd0-42c4-56a6-b2e2-04255fade5b4","type":"url","category":"Network activity","to_ids":true,"value":"http://appleviewer.sbs","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"717e6057-b80e-525f-bb09-c7c6cd8b5cd5","type":"domain","category":"Network activity","to_ids":true,"value":"digital-notice-kr.sbs","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"2f761ff5-73d3-5e23-b9cf-fb7442f7df79","type":"url","category":"Network activity","to_ids":true,"value":"http://digital-notice-kr.sbs","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"f3b8a7c0-9d28-5d91-9cc4-87fa250807dd","type":"domain","category":"Network activity","to_ids":true,"value":"public-revenue-info.biz","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"34b932db-f985-5e05-987a-975b729b1ada","type":"url","category":"Network activity","to_ids":true,"value":"http://public-revenue-info.biz","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"0d8b71b0-d977-54c6-9228-72de17bdbb30","type":"domain","category":"Network activity","to_ids":true,"value":"urgent-notice-check.click","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"63fc9da9-3dd4-5719-970a-2a03aecf9b78","type":"url","category":"Network activity","to_ids":true,"value":"http://urgent-notice-check.click","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"1714b67c-1830-503c-9707-865e9b68bdff","type":"domain","category":"Network activity","to_ids":true,"value":"epdf-user-view.quest","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"cb524ecd-98da-5495-8c42-1ca6410d96b2","type":"url","category":"Network activity","to_ids":true,"value":"http://epdf-user-view.quest","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"02b3c282-1711-594a-8381-3e556dcc885b","type":"domain","category":"Network activity","to_ids":true,"value":"digital-post.live","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"c8c8e4c7-0958-51a2-8e4a-0d8727aae632","type":"url","category":"Network activity","to_ids":true,"value":"http://digital-post.live","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"1e1355f9-9378-5c35-a8b3-0f65f4d5a072","type":"domain","category":"Network activity","to_ids":true,"value":"official-notice.click","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"9141ba24-4428-5364-b229-f70c415704f8","type":"url","category":"Network activity","to_ids":true,"value":"http://official-notice.click","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"c39f9470-3c72-5551-b3aa-8a597a5db058","type":"url","category":"Network activity","to_ids":true,"value":"http://152.32.243.224","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"4fcfe4b6-559a-53fb-b2d2-44a03c055989","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.32.243.224","comment":"https://x.com/skocherhan/status/2048898639506891100","timestamp":"1777330440","distribution":"5"},{"uuid":"7b2f4e16-28f5-5ce7-b307-9bbbf5c831d1","type":"domain","category":"Network activity","to_ids":true,"value":"newday.inet-mark.com","comment":"https://x.com/skocherhan/status/2048901120009880019","timestamp":"1777331040","distribution":"5"},{"uuid":"8e683be8-ed6f-5130-b6d5-b185efc2d5fa","type":"url","category":"Network activity","to_ids":true,"value":"http://newday.inet-mark.com","comment":"https://x.com/skocherhan/status/2048901120009880019","timestamp":"1777331040","distribution":"5"},{"uuid":"3e0776d3-aefe-5f95-ac48-f0a4b79e578d","type":"domain","category":"Network activity","to_ids":true,"value":"terazosine.fit","comment":"https://x.com/skocherhan/status/2048901120009880019","timestamp":"1777331040","distribution":"5"},{"uuid":"004cf49b-fc3d-51ff-88c9-305c9b9636fe","type":"url","category":"Network activity","to_ids":true,"value":"http://terazosine.fit","comment":"https://x.com/skocherhan/status/2048901120009880019","timestamp":"1777331040","distribution":"5"},{"uuid":"1e051b56-5d10-546b-8990-2be89a29ed08","type":"domain","category":"Network activity","to_ids":true,"value":"723pt5dc2plfexrfvudhdhzvesgesqbcl4yivijjubptnogukxxv3hqd.onion","comment":"https://x.com/PaduckLee/status/2048916422630466037","timestamp":"1777334700","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"a540e63b-8ba7-564c-b22d-56be565514ea","type":"url","category":"Network activity","to_ids":true,"value":"http://723pt5dc2plfexrfvudhdhzvesgesqbcl4yivijjubptnogukxxv3hqd.onion","comment":"https://x.com/PaduckLee/status/2048916422630466037","timestamp":"1777334700","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"b0ee397e-b4b5-5819-9f90-3525f5021017","type":"md5","category":"Payload delivery","to_ids":true,"value":"44b00a98918e058650aeaacc741d10e5","comment":"https://x.com/PaduckLee/status/2048916422630466037","timestamp":"1777334700","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"7238fe1f-be6e-5d3f-9d08-a86ab49a05bc","type":"domain","category":"Network activity","to_ids":true,"value":"6.accessbenefitscenter.com","comment":"https://x.com/PhishStats/status/2048917088593461541","timestamp":"1777334820","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9d8b6570-8060-5cc8-bb89-3e6751fda9ab","type":"url","category":"Network activity","to_ids":true,"value":"https://6.accessbenefitscenter.com/journey?rdrx=1&s=3b5ee3cc-638c-4c17-967f-b0e56fbfbbe2#back","comment":"https://x.com/PhishStats/status/2048917088593461541","timestamp":"1777334820","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"011f9394-07f0-5661-803f-f01754030464","type":"ip-dst","category":"Network activity","to_ids":true,"value":"34.111.175.190","comment":"https://x.com/PhishStats/status/2048917088593461541","timestamp":"1777334820","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3cc2451b-2052-5b54-9e7a-226ffd556704","type":"domain","category":"Network activity","to_ids":true,"value":"macclrupspace.gitlab.io","comment":"https://x.com/masaomi346/status/2048930503227801657","timestamp":"1777338073","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"7e01f34e-113e-5f22-88c6-fe9ed43d9deb","type":"url","category":"Network activity","to_ids":true,"value":"http://macclrupspace.gitlab.io","comment":"https://x.com/masaomi346/status/2048930503227801657","timestamp":"1777338073","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"e630af09-7ac9-5bdd-aa36-d4ea955c69ad","type":"domain","category":"Network activity","to_ids":true,"value":"termopasta.com","comment":"https://x.com/masaomi346/status/2048930503227801657","timestamp":"1777338073","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"c1eb83de-3d0c-5d93-869f-7f1c085c5293","type":"url","category":"Network activity","to_ids":true,"value":"http://termopasta.com","comment":"https://x.com/masaomi346/status/2048930503227801657","timestamp":"1777338073","distribution":"5","Tag":[{"name":"infostealer"},{"name":"malware"}]},{"uuid":"0be94d36-f4ba-56b9-98b7-a7b8e216d3b8","type":"domain","category":"Network activity","to_ids":true,"value":"lcatscpzx.cz592401.cn","comment":"https://x.com/Metemcyber/status/2048940649949614538","timestamp":"1777340460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5dc7b6eb-4e08-5d52-8283-8220b310ac4c","type":"url","category":"Network activity","to_ids":true,"value":"https://lcatscpzx.cz592401.cn/optmer-prefere_html/","comment":"https://x.com/Metemcyber/status/2048940649949614538","timestamp":"1777340460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a9a9e504-a5a2-50ee-8b04-8e1d58054c47","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.166.156","comment":"https://x.com/Metemcyber/status/2048940649949614538","timestamp":"1777340460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67a778ed-12bc-5745-aed6-1d018da22ec4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.166.156","comment":"https://x.com/Metemcyber/status/2048940649949614538","timestamp":"1777340460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"053f7263-389e-58a2-b714-aba6e5ef5ecb","type":"domain","category":"Network activity","to_ids":true,"value":"site4-sbisec.gsy2cg1u.shop","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"71c2d15f-d36d-5ff9-b2e0-0e294becbd37","type":"url","category":"Network activity","to_ids":true,"value":"https://site4-sbisec.gsy2cg1u.shop/login","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0dcf57b2-0fb9-51ac-9bfe-cca91a08e354","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.130.142","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f377f724-0ac4-53d7-b6e7-e4c03505d097","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.8.163","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"435ba7ec-113a-59aa-8307-2b0909803375","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.130.142","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"88b2d3e9-0676-5866-b8fd-1c9068f62d70","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.21.8.163","comment":"https://x.com/Metemcyber/status/2048943310602227836","timestamp":"1777341120","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0e9fd39-8beb-538f-8742-000fa7e8864e","type":"domain","category":"Network activity","to_ids":true,"value":"pseudotachylite.cfd","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41ce7935-6390-5b54-9f69-bc2dc793f4d2","type":"url","category":"Network activity","to_ids":true,"value":"https://www.pseudotachylite.cfd/myNZ6X","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e770644e-2657-50ba-9a8e-04f211719df0","type":"url","category":"Network activity","to_ids":true,"value":"http://172.67.152.169","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7bb6efbd-11bc-59b5-827c-de8fa022ed72","type":"url","category":"Network activity","to_ids":true,"value":"http://104.21.82.38","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f82e158a-388e-59e2-9d6a-2fa46493f559","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.152.169","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0740c916-5fbd-541f-9221-8ed1ac390fbe","type":"ip-dst","category":"Network activity","to_ids":true,"value":"104.21.82.38","comment":"https://x.com/Metemcyber/status/2048946258849808698","timestamp":"1777341780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7279dfc6-0b32-5712-89ef-a17a4b399a72","type":"domain","category":"Network activity","to_ids":true,"value":"site4-sbisec.gtt6ss20.shop","comment":"https://x.com/masaomi346/status/2048969911708602441","timestamp":"1777347420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ab4085a3-4e35-5e30-845d-e62fedcc4c76","type":"url","category":"Network activity","to_ids":true,"value":"https://site4-sbisec.gtt6ss20.shop/login","comment":"https://x.com/masaomi346/status/2048969911708602441","timestamp":"1777347420","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1577983a-fad6-5f8f-a554-cb3ae2856523","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.145.227.150","comment":"https://x.com/solostalking/status/2048988205882732888","timestamp":"1777351800","distribution":"5"},{"uuid":"994370da-6758-5346-92e0-04d3a514cee7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"8.222.225.32","comment":"https://x.com/K_N1kolenko/status/2048999422495711437","timestamp":"1777354500","distribution":"5"},{"uuid":"c17d123e-58aa-5428-a73d-f0d90b877e37","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.187.4.36","comment":"https://x.com/K_N1kolenko/status/2048999422495711437","timestamp":"1777354500","distribution":"5"},{"uuid":"4a65cc3c-2a22-5954-b83a-fd4a1bc5d11f","type":"md5","category":"Payload delivery","to_ids":true,"value":"4f500333f102a9352418f14ff2973bb9","comment":"https://x.com/suyog41/status/2049003157532115232","timestamp":"1777355340","distribution":"5"},{"uuid":"b78e81a0-e20c-5fb6-9a10-9d7e125d96e1","type":"url","category":"Network activity","to_ids":true,"value":"http://r3m0t3.t3mp1a73.1nj3ct10n/89e9b490ce8568df/doc.rtf","comment":"https://x.com/suyog41/status/2049005523710939553","timestamp":"1777355940","distribution":"5"},{"uuid":"6451dac3-067d-5085-8a6f-38487ebd4ddf","type":"md5","category":"Payload delivery","to_ids":true,"value":"dd307599773b339f789d0929ffc81c79","comment":"https://x.com/suyog41/status/2049005523710939553","timestamp":"1777355940","distribution":"5"},{"uuid":"8981a96e-33c0-5682-baae-0d368aaba230","type":"ip-dst","category":"Network activity","to_ids":true,"value":"160.179.52.9","comment":"https://x.com/Fact_Finder03/status/2049008992966590860","timestamp":"1777356787","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"69747617-0198-5030-aafd-d95793ba7702","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.151.146.82","comment":"https://x.com/Fact_Finder03/status/2049025572584493443","timestamp":"1777360740","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d294bb56-5eff-5a5f-93ba-534aee69e1dc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.31.221.172","comment":"https://x.com/Fact_Finder03/status/2049030857780867342","timestamp":"1777362000","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"39177810-e989-5edf-a45f-323d1691213c","type":"domain","category":"Network activity","to_ids":true,"value":"vavny.oflndm.cn","comment":"https://x.com/Metemcyber/status/2049037385464479769","timestamp":"1777363500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"183ae399-f395-50b7-a823-83a698e50edf","type":"url","category":"Network activity","to_ids":true,"value":"https://vavny.oflndm.cn/RSV_P/smart_index.htm/","comment":"https://x.com/Metemcyber/status/2049037385464479769","timestamp":"1777363500","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2a154ccf-1a30-54b0-a7a9-fb1b50b2ceb6","type":"domain","category":"Network activity","to_ids":true,"value":"mhqajiz.bl8cz6.cn","comment":"https://x.com/Metemcyber/status/2049041046399779218","timestamp":"1777364400","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"af97c322-b29e-5ddc-a662-315688b84b4f","type":"url","category":"Network activity","to_ids":true,"value":"https://mhqajiz.bl8cz6.cn/apusetop/jupindx/","comment":"https://x.com/Metemcyber/status/2049041046399779218","timestamp":"1777364400","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b8489124-4df9-539b-a2c4-5e57081fc653","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.107.74.61","comment":"https://x.com/Fact_Finder03/status/2049048221859590380","timestamp":"1777366140","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"00835c96-3e01-5a52-ac9f-5868ae70a331","type":"domain","category":"Network activity","to_ids":true,"value":"xan3ri.cfd","comment":"https://x.com/PhishStats/status/2049052715871772726","timestamp":"1777367160","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"470eed6b-d61e-5e7f-b5f7-f7e129fc6056","type":"url","category":"Network activity","to_ids":true,"value":"https://xan3ri.cfd/dulidpgo/PbkHGx/LTjfPu","comment":"https://x.com/PhishStats/status/2049052715871772726","timestamp":"1777367160","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d852fe53-3850-5ad4-97df-24d0b35c559b","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.67.151.168","comment":"https://x.com/PhishStats/status/2049052715871772726","timestamp":"1777367160","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0e1ead8c-e728-55e8-a1ae-9d4c4ecca307","type":"domain","category":"Network activity","to_ids":true,"value":"lotuscare.com.my","comment":"https://x.com/smica83/status/2049058768508342486","timestamp":"1777368600","distribution":"5"},{"uuid":"706e30f9-c5d5-51cd-b3c1-edf61b1bd201","type":"url","category":"Network activity","to_ids":true,"value":"https://www.lotuscare.com.my/Keller.ps1","comment":"https://x.com/smica83/status/2049058768508342486","timestamp":"1777368600","distribution":"5"},{"uuid":"cad554e8-006a-5f83-8f0d-4d6dcbee24c3","type":"domain","category":"Network activity","to_ids":true,"value":"hx1.bounceme.net:4433","comment":"https://x.com/smica83/status/2049061239314076024","timestamp":"1777369200","distribution":"5"},{"uuid":"8387938f-3a98-5aa3-844f-b99317808984","type":"url","category":"Network activity","to_ids":true,"value":"https://hx1.bounceme.net:4433/victim.dll","comment":"https://x.com/smica83/status/2049061239314076024","timestamp":"1777369200","distribution":"5"},{"uuid":"b8eb0253-bc61-57af-bea1-7e5af43b32e5","type":"domain","category":"Network activity","to_ids":true,"value":"xtrafftrck.net:3000","comment":"https://x.com/malwrhunterteam/status/2049068289607737541","timestamp":"1777370880","distribution":"5"},{"uuid":"0a91c04a-71f5-5529-8531-5488121c3ca2","type":"url","category":"Network activity","to_ids":true,"value":"http://xtrafftrck.net:3000","comment":"https://x.com/malwrhunterteam/status/2049068289607737541","timestamp":"1777370880","distribution":"5"},{"uuid":"7ace57aa-1c49-587f-aa93-af3a29407caf","type":"domain","category":"Network activity","to_ids":true,"value":"vpntop.com.cn","comment":"https://x.com/smica83/status/2049068445682037229","timestamp":"1777370940","distribution":"5"},{"uuid":"b9d90f1d-3c56-57a0-a3cc-baabf5f917ef","type":"url","category":"Network activity","to_ids":true,"value":"https://vpntop.com.cn/letsvpn_v3.5.6_x64.msi","comment":"https://x.com/smica83/status/2049068445682037229","timestamp":"1777370940","distribution":"5"},{"uuid":"2d452ec4-937d-57b8-9e52-c6d6c29e228c","type":"url","category":"Network activity","to_ids":true,"value":"http://151.240.151.83","comment":"https://x.com/SansLimit3/status/2049087449234645347","timestamp":"1777375440","distribution":"5"},{"uuid":"244672c7-eee0-526e-971d-a3261f6ba216","type":"url","category":"Network activity","to_ids":true,"value":"https://151.240.151.83/:9090","comment":"https://x.com/SansLimit3/status/2049087449234645347","timestamp":"1777375440","distribution":"5"},{"uuid":"5c1b4e84-8327-56be-b10d-b47922c0fb9d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.240.151.83","comment":"https://x.com/SansLimit3/status/2049087449234645347","timestamp":"1777375440","distribution":"5"},{"uuid":"459d5281-7680-5a38-8cab-008d98f49b07","type":"domain","category":"Network activity","to_ids":true,"value":"glowmedaesthetics.com","comment":"https://x.com/suyog41/status/2049098438089073128","timestamp":"1777378080","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"cc00f852-1d86-5d06-96cf-49ba1ff4e09e","type":"url","category":"Network activity","to_ids":true,"value":"http://glowmedaesthetics.com","comment":"https://x.com/suyog41/status/2049098438089073128","timestamp":"1777378080","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"8982a8aa-58b1-5948-a5a4-49177106a85b","type":"md5","category":"Payload delivery","to_ids":true,"value":"4fd228e2bbe7eca0dc1e44c0662018bb","comment":"https://x.com/suyog41/status/2049098438089073128","timestamp":"1777378080","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"be0cf019-fa7c-5d4e-ad5a-1e4382ab058e","type":"domain","category":"Network activity","to_ids":true,"value":"barberspot.in","comment":"https://x.com/Slvlombardo/status/2049101792466571632","timestamp":"1777378860","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c2070b9a-db55-571c-ae6b-be257dc65ece","type":"url","category":"Network activity","to_ids":true,"value":"https://barberspot.in/2ininjbbv/c22f55rr/sd0x2yy/:right_arrow_curving_down","comment":"https://x.com/Slvlombardo/status/2049101792466571632","timestamp":"1777378860","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74dcc21f-57cd-59d6-981d-b34827d9deb1","type":"domain","category":"Network activity","to_ids":true,"value":"it-me-id-pagit-id.com","comment":"https://x.com/Slvlombardo/status/2049101792466571632","timestamp":"1777378860","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a924f3f8-bf25-52e2-bf71-9359cd576e8d","type":"url","category":"Network activity","to_ids":true,"value":"https://it-me-id-pagit-id.com/wenfiIT/lderIT/cellta-net/app/log.php","comment":"https://x.com/Slvlombardo/status/2049101792466571632","timestamp":"1777378860","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bb75fcb5-e9c4-558f-8cdd-9eab7871cdf0","type":"url","category":"Network activity","to_ids":true,"value":"http://43.165.7.227","comment":"https://x.com/The_lesyk/status/2049102376171135373","timestamp":"1777379040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ed180174-a74c-569e-b5b6-0a3edc094a31","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.165.7.227","comment":"https://x.com/The_lesyk/status/2049102376171135373","timestamp":"1777379040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"233ebe07-30ea-5d9b-a46f-efe4bd81e283","type":"sha256","category":"Payload delivery","to_ids":true,"value":"163cf00168d6fd28366db6c88a1216f95b10b8bb71359d161b542a67c40bffc0","comment":"https://x.com/Sandguard_malwR/status/2049110376495636846","timestamp":"1777380900","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"494677a3-8fcd-576d-a206-f10af15b2d79","type":"url","category":"Network activity","to_ids":true,"value":"http://66.179.248.120/img/","comment":"https://x.com/James_inthe_box/status/2049124737096527922","timestamp":"1777384380","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"8e5ae866-e86f-50b7-8a8f-853dad7977e2","type":"url","category":"Network activity","to_ids":true,"value":"http://23.95.62.25:7070","comment":"https://x.com/James_inthe_box/status/2049124737096527922","timestamp":"1777384380","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"401f934d-1471-5012-941b-8d95d915820c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"66.179.248.120","comment":"https://x.com/James_inthe_box/status/2049124737096527922","timestamp":"1777384380","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"1c1539c7-9f9d-5bcc-90b4-83505b7b6770","type":"ip-dst","category":"Network activity","to_ids":true,"value":"23.95.62.25","comment":"https://x.com/James_inthe_box/status/2049124737096527922","timestamp":"1777384380","distribution":"5","Tag":[{"name":"Remcos"}]},{"uuid":"31ec7f93-0aa2-58cd-a390-73e29318284b","type":"url","category":"Network activity","to_ids":true,"value":"http://78.11.101.78/Beastmode.sh","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"784daae3-e8ae-5759-87a1-c61722478175","type":"url","category":"Network activity","to_ids":true,"value":"http://78.11.10.78/Beastmode.sh","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"1b4df613-423e-53c1-ae03-7246cf13b374","type":"ip-dst","category":"Network activity","to_ids":true,"value":"137.184.20.87","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"c3271619-3695-5291-a3dd-9ed73894cb63","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.11.101.78","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"54bc94bf-c3eb-52ae-93f0-dc0ab5880522","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.11.10.78","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"6d033fd1-dda7-57ee-9981-c8e9db609488","type":"ip-dst","category":"Network activity","to_ids":true,"value":"78.11.10.7","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"c1dd6ec2-0d7e-5e2b-b74e-6acca171d7d1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.111.101.78","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"ce4e2316-6210-581c-bec9-42c1466c8f69","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.11.101.78","comment":"https://x.com/sicehice/status/2049140297595080819","timestamp":"1777388040","distribution":"5"},{"uuid":"6f0325bd-ef7c-559b-867e-c8e8bd923011","type":"domain","category":"Network activity","to_ids":true,"value":"Pastee.dev","comment":"https://x.com/vmray/status/2049141348926669126","timestamp":"1777388340","distribution":"5"},{"uuid":"24467b68-d6c4-5c32-a230-236d864e10b5","type":"url","category":"Network activity","to_ids":true,"value":"http://Pastee.dev","comment":"https://x.com/vmray/status/2049141348926669126","timestamp":"1777388340","distribution":"5"},{"uuid":"0ba25530-c822-5b41-8474-c68b26286364","type":"sha256","category":"Payload delivery","to_ids":true,"value":"42a1aded85892a80c83f741a7ac00e7e75015166c3be0bae29d93d3a4714711d","comment":"https://x.com/anylink20240604/status/2049145349793804744","timestamp":"1777389240","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"64514066-be59-544d-98d1-a234b295350e","type":"domain","category":"Network activity","to_ids":true,"value":"info@erreklamatu.com","comment":"https://x.com/Erreklamatu/status/2049146287652536675","timestamp":"1777389520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc8a2305-9831-501e-8758-24ade4a06fa1","type":"url","category":"Network activity","to_ids":true,"value":"https://info@erreklamatu.com","comment":"https://x.com/Erreklamatu/status/2049146287652536675","timestamp":"1777389520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1b6f075-1e86-54c2-a0c0-dc776910bea8","type":"domain","category":"Network activity","to_ids":true,"value":"meekys.mtffx.cn","comment":"https://x.com/harugasumi/status/2049148402471145825","timestamp":"1777390020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d8dcff19-9c8a-5d1f-8a33-2620747f3b3a","type":"url","category":"Network activity","to_ids":true,"value":"https://meekys.mtffx.cn/gpajp/accunt/lginox/","comment":"https://x.com/harugasumi/status/2049148402471145825","timestamp":"1777390020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6b893de2-d621-5bd2-955e-8b5ec32673c7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"80d5202d63558ed81be51101c65bc98a2bbda74084b46acd58ce48607da8a3a3","comment":"https://x.com/L0Psec/status/2049158325372125450","timestamp":"1777392360","distribution":"5"},{"uuid":"96ff2d8b-2e62-5846-9eca-f76448ddec3d","type":"url","category":"Network activity","to_ids":true,"value":"https://217.60.241.36/sh","comment":"https://x.com/sicehice/status/2049164321519779866","timestamp":"1777393800","distribution":"5"},{"uuid":"d7aeece9-98c4-58c9-9027-29428688a617","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.190.211.111","comment":"https://x.com/sicehice/status/2049164321519779866","timestamp":"1777393800","distribution":"5"},{"uuid":"40543067-2f15-5595-9a21-4e7fffa577d8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"217.60.241.36","comment":"https://x.com/sicehice/status/2049164321519779866","timestamp":"1777393800","distribution":"5"},{"uuid":"9d3995ec-c50c-5bb0-a196-a397b0242a63","type":"md5","category":"Payload delivery","to_ids":true,"value":"8c45305df1afb2a9d0249ba3d0576b41","comment":"https://x.com/sicehice/status/2049164321519779866","timestamp":"1777393800","distribution":"5"},{"uuid":"a6b8711c-c716-5bc3-a0f7-fb2a924eb192","type":"domain","category":"Network activity","to_ids":true,"value":"scp749.com","comment":"https://x.com/malwrhunterteam/status/2049177426706481303","timestamp":"1777396920","distribution":"5"},{"uuid":"731fdc83-a54e-5afd-b28d-e386a52367e2","type":"url","category":"Network activity","to_ids":true,"value":"http://scp749.com","comment":"https://x.com/malwrhunterteam/status/2049177426706481303","timestamp":"1777396920","distribution":"5"},{"uuid":"51e53a85-338b-573b-9f01-0fd307463d51","type":"domain","category":"Network activity","to_ids":true,"value":"vayusena.online","comment":"https://x.com/malwrhunterteam/status/2049190442084835702","timestamp":"1777400048","distribution":"5"},{"uuid":"d9026883-8e6f-59fc-91f2-463f61ea997b","type":"url","category":"Network activity","to_ids":true,"value":"https://vayusena.online/login","comment":"https://x.com/malwrhunterteam/status/2049190442084835702","timestamp":"1777400048","distribution":"5"},{"uuid":"c7341860-3de0-5f3c-aefc-a4018812e931","type":"domain","category":"Network activity","to_ids":true,"value":"inlinepol1s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"45f0c08e-b26c-53f7-8e5d-016529e27569","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol1s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"7e22fa45-af75-5983-9da5-dc543aaaec71","type":"domain","category":"Network activity","to_ids":true,"value":"docinfo.inlinepol1s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"9eac40e2-e50e-5a1e-94ff-474650838b31","type":"url","category":"Network activity","to_ids":true,"value":"http://docinfo.inlinepol1s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b6d4156b-7d6a-515e-b1ff-c1847274e7e7","type":"domain","category":"Network activity","to_ids":true,"value":"inlinepol19s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"fde0ad99-f32e-5fe7-b0b6-89ec5c980876","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol19s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"7c6f73ef-2fee-57b5-bab4-cd830073479d","type":"domain","category":"Network activity","to_ids":true,"value":"inlinepol17s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"cb268404-d0be-54d7-942b-a1ea3c817684","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol17s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"690537e3-ee1c-569e-bae7-d8b944faca68","type":"domain","category":"Network activity","to_ids":true,"value":"edoc.inlinepol14s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"7442c6c7-79d5-526c-9ce3-b4855be8fd32","type":"url","category":"Network activity","to_ids":true,"value":"http://edoc.inlinepol14s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"d3c83a10-c90a-511b-8039-935c4352a41e","type":"domain","category":"Network activity","to_ids":true,"value":"newaltercm42s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"2e9e7ed7-7bd7-5510-bd94-d84148b7b0d4","type":"url","category":"Network activity","to_ids":true,"value":"http://newaltercm42s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"af1d07a0-5edb-56eb-937a-11d4ae9b227c","type":"domain","category":"Network activity","to_ids":true,"value":"inlinepol14s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"07ae19e5-0961-5ab7-a828-f2f4a2338712","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol14s.roxa.org","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"004ef32d-25f5-5985-9683-2b650cad82dc","type":"domain","category":"Network activity","to_ids":true,"value":"uofficialerc22v.dynuddns.com","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"f3bee0e1-3ff6-5218-87b3-35a8bdb83c15","type":"url","category":"Network activity","to_ids":true,"value":"http://uofficialerc22v.dynuddns.com","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"62902ce9-5951-5b00-9bb9-530935ad3fae","type":"domain","category":"Network activity","to_ids":true,"value":"newpolinf48s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"118eea48-db7b-53b9-b849-096b06bc764a","type":"url","category":"Network activity","to_ids":true,"value":"http://newpolinf48s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049195306487853319","timestamp":"1777401180","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"91d56dbb-7e50-54ef-a180-3835793e3d96","type":"domain","category":"Network activity","to_ids":true,"value":"vayusena.online:48973","comment":"https://x.com/smica83/status/2049199564901454092","timestamp":"1777402200","distribution":"5"},{"uuid":"3aa2f2b0-7dce-53e1-999e-9c6cb36c576e","type":"url","category":"Network activity","to_ids":true,"value":"https://vayusena.online:48973/systemdd","comment":"https://x.com/smica83/status/2049199564901454092","timestamp":"1777402200","distribution":"5"},{"uuid":"64e45956-4df7-5b94-a2cb-797945d758e5","type":"domain","category":"Network activity","to_ids":true,"value":"lace-desktop.io","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"a5abdd9a-5510-5125-b76a-f51221c334bb","type":"url","category":"Network activity","to_ids":true,"value":"http://lace-desktop.io","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"7d31ea3e-5abb-535d-9359-7fb6f17981d5","type":"domain","category":"Network activity","to_ids":true,"value":"store4.gofile.io","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"dd21a112-1291-5148-a56f-c0b253f6b3e3","type":"url","category":"Network activity","to_ids":true,"value":"http://store4.gofile.io/download/direct/956fe713-cea0-4157-9f10-6a4e385b49e7/LaceDesktop-installer.msi","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"731fdc40-6487-5455-9f39-e9fdbea081ae","type":"domain","category":"Network activity","to_ids":true,"value":"lace-desktop.live","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"595569f1-bfca-555a-bc7e-1553ab5eb86a","type":"url","category":"Network activity","to_ids":true,"value":"http://lace-desktop.live","comment":"https://x.com/Malwarehunterr/status/2049220391357628591","timestamp":"1777407180","distribution":"5"},{"uuid":"745de347-26c7-5446-af8a-4b5854cefd89","type":"url","category":"Network activity","to_ids":true,"value":"http://138.201.128.249","comment":"https://x.com/smica83/status/2049221402163544167","timestamp":"1777407420","distribution":"5"},{"uuid":"babb1f74-d477-56aa-9d12-c3c883872d7c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"138.201.128.249","comment":"https://x.com/smica83/status/2049221402163544167","timestamp":"1777407420","distribution":"5"},{"uuid":"2f2d53ac-1afc-5b2f-b6f2-0a008e2b3caf","type":"domain","category":"Network activity","to_ids":true,"value":"spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com","comment":"https://x.com/malwrhunterteam/status/2049223060062970275","timestamp":"1777407780","distribution":"5"},{"uuid":"ffc6dc1c-e548-5bec-825c-33f946528a53","type":"url","category":"Network activity","to_ids":true,"value":"http://spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com","comment":"https://x.com/malwrhunterteam/status/2049223060062970275","timestamp":"1777407780","distribution":"5"},{"uuid":"9a796ae5-9204-5622-9568-8126e38530ec","type":"domain","category":"Network activity","to_ids":true,"value":"drazyland.us","comment":"https://x.com/smica83/status/2049236774271045773","timestamp":"1777411080","distribution":"5"},{"uuid":"659b9386-4233-551f-9d09-d5996f296319","type":"url","category":"Network activity","to_ids":true,"value":"http://drazyland.us","comment":"https://x.com/smica83/status/2049236774271045773","timestamp":"1777411080","distribution":"5"},{"uuid":"75cd1278-19c5-59a1-9f07-71de1aa30eef","type":"domain","category":"Network activity","to_ids":true,"value":"centralcoretech.com","comment":"https://x.com/malwrhunterteam/status/2049237054857285793","timestamp":"1777411140","distribution":"5"},{"uuid":"f43b05e2-8b2a-5aac-9a05-0c81aa947caa","type":"url","category":"Network activity","to_ids":true,"value":"http://centralcoretech.com","comment":"https://x.com/malwrhunterteam/status/2049237054857285793","timestamp":"1777411140","distribution":"5"},{"uuid":"87764b42-f359-598c-aa65-e7b9c841cb21","type":"url","category":"Network activity","to_ids":true,"value":"https://35.196.105.113/wp-admin/x64_v6","comment":"https://x.com/smica83/status/2049238817958232532","timestamp":"1777411560","distribution":"5"},{"uuid":"81d70580-16e1-5b81-9fe7-a82716760ada","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.196.105.113","comment":"https://x.com/smica83/status/2049238817958232532","timestamp":"1777411560","distribution":"5"},{"uuid":"a7c49fc4-4674-57cb-b8d9-37b179597352","type":"domain","category":"Network activity","to_ids":true,"value":"facilitandoagora.online","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"322ddc03-8230-58cb-8219-7ce1f96076aa","type":"url","category":"Network activity","to_ids":true,"value":"https://facilitandoagora.online/validacao","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"91b30d4e-4622-5117-bcfb-4e3ed4a9619d","type":"domain","category":"Network activity","to_ids":true,"value":"mercadolib-es.shop","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"498e86ab-1a9b-594e-b201-5bf75ca6ee1c","type":"url","category":"Network activity","to_ids":true,"value":"https://mercadolib-es.shop","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93a9d652-3cd4-511d-90a1-814466416518","type":"domain","category":"Network activity","to_ids":true,"value":"guepardodelivery-entregador.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"395abb52-68e5-5c82-aa9b-09d68594f687","type":"url","category":"Network activity","to_ids":true,"value":"https://guepardodelivery-entregador.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d96130f-21fe-5172-a4d2-08854959f788","type":"domain","category":"Network activity","to_ids":true,"value":"ailosapp.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2ca39497-d6c9-5ffc-9c07-b3fb246cd43f","type":"url","category":"Network activity","to_ids":true,"value":"https://ailosapp.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"444460d3-d1f5-5a17-bca5-1f1cac974777","type":"domain","category":"Network activity","to_ids":true,"value":"playstorelivelo.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1926bfb-b8e1-515d-8b59-e44dcec442ee","type":"url","category":"Network activity","to_ids":true,"value":"https://playstorelivelo.com","comment":"https://x.com/Merlax_/status/2049239733578969593","timestamp":"1777411800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"772b0a2f-27fa-502d-8422-918c2b133fde","type":"domain","category":"Network activity","to_ids":true,"value":"ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion","comment":"https://x.com/fbgwls245/status/2049279082215710749","timestamp":"1777421160","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"f89060fd-0379-5631-bc93-5f8a333f9622","type":"url","category":"Network activity","to_ids":true,"value":"http://ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion","comment":"https://x.com/fbgwls245/status/2049279082215710749","timestamp":"1777421160","distribution":"5","Tag":[{"name":"ransomware"}]},{"uuid":"398a1a7e-b95f-5fb4-b1d2-8eea6b4767aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.146.25.206","comment":"https://x.com/eKg_sec/status/2049279879141564588","timestamp":"1777421340","distribution":"5","Tag":[{"name":"ClickFix"},{"name":"malware"}]},{"uuid":"1de18587-0df6-5824-92b8-2fc8bd11aae7","type":"domain","category":"Network activity","to_ids":true,"value":"tafirizipi.z1.web.core.windows.net","comment":"https://x.com/harugasumi/status/2049295427103813988","timestamp":"1777425060","distribution":"5"},{"uuid":"7e70279b-9a3b-5ffe-874b-2f993867b0d9","type":"url","category":"Network activity","to_ids":true,"value":"https://tafirizipi.z1.web.core.windows.net","comment":"https://x.com/harugasumi/status/2049295427103813988","timestamp":"1777425060","distribution":"5"},{"uuid":"2267d713-c0d3-5669-8d5b-c7afa2833e49","type":"ip-dst","category":"Network activity","to_ids":true,"value":"52.239.251.161","comment":"https://x.com/harugasumi/status/2049295427103813988","timestamp":"1777425060","distribution":"5"},{"uuid":"8d30330a-7aa7-5ad5-b9e5-0eeb8016e0c9","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.8mpf2yml.shop","comment":"https://x.com/masaomi346/status/2049326139265720321","timestamp":"1777432380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bef64346-faa7-5a8b-8e92-212c47f55c85","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.8mpf2yml.shop/home","comment":"https://x.com/masaomi346/status/2049326139265720321","timestamp":"1777432380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"439da408-7d97-58df-b553-17cbb592deeb","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.dcch5jvl.shop","comment":"https://x.com/harugasumi/status/2049327338736013808","timestamp":"1777432680","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"26f3ccbf-673c-5751-8ab6-5d0344948fd3","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.dcch5jvl.shop","comment":"https://x.com/harugasumi/status/2049327338736013808","timestamp":"1777432680","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35d95a92-8892-5c9b-ba20-3ef66f038b8d","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.9g4icuky.shop","comment":"https://x.com/harugasumi/status/2049327338736013808","timestamp":"1777432680","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50c41b0a-17f3-5cce-bf55-33891b7702e7","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.9g4icuky.shop/oo6z309q","comment":"https://x.com/harugasumi/status/2049327338736013808","timestamp":"1777432680","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9cee4144-883c-5f1e-8a4e-0a79c116c079","type":"url","category":"Network activity","to_ids":true,"value":"http://108.181.153.57:9616","comment":"https://x.com/Cyberteam008/status/2049344545972986204","timestamp":"1777436760","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"af87f416-fd10-52ac-95a5-74905695dd34","type":"ip-dst","category":"Network activity","to_ids":true,"value":"108.181.153.57","comment":"https://x.com/Cyberteam008/status/2049344545972986204","timestamp":"1777436760","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"367ef32b-ab05-5f3c-ad97-e03e96bdf92c","type":"md5","category":"Payload delivery","to_ids":true,"value":"b915e9fe3d5541e75609b220ed2e88b0","comment":"https://x.com/Cyberteam008/status/2049344545972986204","timestamp":"1777436760","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"5bc79277-9e36-51be-982e-dce979c05860","type":"domain","category":"Network activity","to_ids":true,"value":"certifysubmited.com","comment":"https://x.com/patialavii/status/2049354999793393861","timestamp":"1777439280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"75eb8733-230f-5d08-a0f6-7e46ba203403","type":"url","category":"Network activity","to_ids":true,"value":"http://certifysubmited.com","comment":"https://x.com/patialavii/status/2049354999793393861","timestamp":"1777439280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"74a2b10a-ed73-5e42-8f91-b5e9b8bab5a8","type":"md5","category":"Payload delivery","to_ids":true,"value":"e1f3a7b45dad8aec1bf2f5e4d63f0c69","comment":"https://x.com/patialavii/status/2049354999793393861","timestamp":"1777439280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"79e403d6-87e7-57bb-b5d2-39ecf2ad6abc","type":"md5","category":"Payload delivery","to_ids":true,"value":"9a25d0d4a647745681b8db289941d407","comment":"https://x.com/suyog41/status/2049362152688156787","timestamp":"1777440987","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"f569d972-ede4-56d7-b7b9-f38eef248c16","type":"ip-dst","category":"Network activity","to_ids":true,"value":"165.245.250.220","comment":"https://x.com/Fact_Finder03/status/2049370492763840687","timestamp":"1777442940","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6d457ada-9764-5681-bbb6-05faac4b6c10","type":"domain","category":"Network activity","to_ids":true,"value":"assertive-onyx-canary.31-22-7-7.cpanel.site","comment":"https://x.com/JAMESWT_WT/status/2049375732669825206","timestamp":"1777444200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e562f215-5ccc-51ca-83ad-88e0cc0e64a7","type":"url","category":"Network activity","to_ids":true,"value":"https://assertive-onyx-canary.31-22-7-7.cpanel.site/session/","comment":"https://x.com/JAMESWT_WT/status/2049375732669825206","timestamp":"1777444200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1f7076bf-480a-5d0d-beda-6307c1f974c5","type":"url","category":"Network activity","to_ids":true,"value":"http://stake-casino.stream","comment":"https://x.com/suyog41/status/2049382164463268033","timestamp":"1777445700","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"ca2d1282-d16e-5e39-840b-60947954d2c2","type":"domain","category":"Network activity","to_ids":true,"value":"iuta.today","comment":"https://x.com/suyog41/status/2049382164463268033","timestamp":"1777445700","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"c215a9d2-1a36-557a-9095-219a7a0e7486","type":"url","category":"Network activity","to_ids":true,"value":"http://iuta.today","comment":"https://x.com/suyog41/status/2049382164463268033","timestamp":"1777445700","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"548d3dbd-4953-5725-a600-cd732ca11f28","type":"md5","category":"Payload delivery","to_ids":true,"value":"c2699723fed437cfedb0a7e6762741e7","comment":"https://x.com/suyog41/status/2049382164463268033","timestamp":"1777445700","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"b619929b-1104-5a44-b889-68652c651ef6","type":"md5","category":"Payload delivery","to_ids":true,"value":"b80700935a4ef074810583dd7e093c78","comment":"https://x.com/suyog41/status/2049382164463268033","timestamp":"1777445700","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3ad2aba0-bcc3-503b-8505-37572a857427","type":"ip-dst","category":"Network activity","to_ids":true,"value":"95.111.244.90","comment":"https://x.com/Fact_Finder03/status/2049382106619576417","timestamp":"1777445700","distribution":"5"},{"uuid":"5fb1cc69-c607-5ada-96c2-cd801cb94154","type":"domain","category":"Network activity","to_ids":true,"value":"stake-casino.stream","comment":"https://x.com/malwrhunterteam/status/2049383256441671998","timestamp":"1777446000","distribution":"5"},{"uuid":"e488ace3-43c6-567d-8d3f-4a8877c1b8ea","type":"url","category":"Network activity","to_ids":true,"value":"https://stake-casino.stream","comment":"https://x.com/malwrhunterteam/status/2049383256441671998","timestamp":"1777446000","distribution":"5"},{"uuid":"6d46a4d8-ad9d-597b-92df-e0a303ec0181","type":"domain","category":"Network activity","to_ids":true,"value":"ljbrwu.cn","comment":"https://x.com/masaomi346/status/2049391999577645422","timestamp":"1777448100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"160d7d48-9633-5653-8719-cf012470746c","type":"url","category":"Network activity","to_ids":true,"value":"https://ljbrwu.cn","comment":"https://x.com/masaomi346/status/2049391999577645422","timestamp":"1777448100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6525ec7c-3750-5cf3-99be-9572d9225fbf","type":"domain","category":"Network activity","to_ids":true,"value":"qviega.cn","comment":"https://x.com/masaomi346/status/2049391999577645422","timestamp":"1777448100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"5317dde5-b84c-584c-a779-bc8bc68d58c7","type":"url","category":"Network activity","to_ids":true,"value":"https://qviega.cn","comment":"https://x.com/masaomi346/status/2049391999577645422","timestamp":"1777448100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c596b881-88b7-5cf1-ae5f-6bc57798127d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.7.152.162","comment":"https://x.com/Fact_Finder03/status/2049395063659307421","timestamp":"1777448820","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"abda2562-a4ae-528b-aed8-90d8ca41a05b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"901fc6771ccdfc5194dfa63f949cce05298c999a813af2cec2ebf2dcc50aed1f","comment":"https://x.com/Fact_Finder03/status/2049395063659307421","timestamp":"1777448820","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2e666a99-e4c5-5bf2-9eb1-7c8a038bd389","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6c513a3caaf0e368f8336a307b1d4ccb2ad16fdc8428d8397acd0b2594bbc5c8","comment":"https://x.com/Fact_Finder03/status/2049395063659307421","timestamp":"1777448820","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"054ee136-e208-5d3f-88fe-577cabffa05a","type":"domain","category":"Network activity","to_ids":true,"value":"jif-9-dodol-7793ce.netlify.app","comment":"https://x.com/JAMESWT_WT/status/2049398435556577391","timestamp":"1777449600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"146d3567-3283-5500-b745-6cf85b522f55","type":"url","category":"Network activity","to_ids":true,"value":"https://jif-9-dodol-7793ce.netlify.app","comment":"https://x.com/JAMESWT_WT/status/2049398435556577391","timestamp":"1777449600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1b1cf38-36d6-5f06-bd1b-72161118f172","type":"domain","category":"Network activity","to_ids":true,"value":"intesasanpaolo-proteggi-la-mia-carta.netlify.app","comment":"https://x.com/JAMESWT_WT/status/2049398435556577391","timestamp":"1777449600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3dc3064a-63fd-537f-954a-0ef97b573639","type":"url","category":"Network activity","to_ids":true,"value":"https://intesasanpaolo-proteggi-la-mia-carta.netlify.app","comment":"https://x.com/JAMESWT_WT/status/2049398435556577391","timestamp":"1777449600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ac82dbeb-d236-50cf-a5bf-9eff9c7759a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.57.156.127","comment":"https://x.com/Fact_Finder03/status/2049398324990758971","timestamp":"1777449600","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"949ab6c1-0bde-5ac0-87e3-9f3c15242366","type":"sha256","category":"Payload delivery","to_ids":true,"value":"64e6353f01583ef365ee3e835cff0c21b21e523b9c466c2a6cc99910a6438c17","comment":"https://x.com/Fact_Finder03/status/2049398324990758971","timestamp":"1777449600","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"31928e33-c0cf-5479-bf53-a47978fe0a03","type":"md5","category":"Payload delivery","to_ids":true,"value":"229a945794ad056001982803a6a58a8c","comment":"https://x.com/suyog41/status/2049403329491431791","timestamp":"1777450800","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3395107f-959c-5ba9-a899-33ff8f1b20fa","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.75lcvzk6.shop","comment":"https://x.com/harugasumi/status/2049418155660103859","timestamp":"1777454280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a1a5de94-c6b3-5595-a64c-553a6bffe790","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.75lcvzk6.shop","comment":"https://x.com/harugasumi/status/2049418155660103859","timestamp":"1777454280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aace74ac-1bb9-563c-b1af-c3a3f27930e5","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.26rni3t0.shop","comment":"https://x.com/harugasumi/status/2049418155660103859","timestamp":"1777454280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e538d79-621d-55d9-82dc-d1943d23b861","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.26rni3t0.shop/2xj3nsrm","comment":"https://x.com/harugasumi/status/2049418155660103859","timestamp":"1777454280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9acdfff2-f5bb-5d9d-8c0b-7c25c792ea32","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.dcrj1bfm.shop","comment":"https://x.com/harugasumi/status/2049419493974450530","timestamp":"1777454658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d37ceec6-8b8a-55e2-9e9c-e25310a34fa1","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.dcrj1bfm.shop","comment":"https://x.com/harugasumi/status/2049419493974450530","timestamp":"1777454658","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"18acf3a1-3a95-5fd6-bc54-2e587dc252ed","type":"url","category":"Network activity","to_ids":true,"value":"http://115.175.16.26","comment":"https://x.com/malwrhunterteam/status/2049431879208616237","timestamp":"1777457580","distribution":"5"},{"uuid":"94e2d446-c40b-5e1e-8f2b-e3924119d3aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"115.175.16.26","comment":"https://x.com/malwrhunterteam/status/2049431879208616237","timestamp":"1777457580","distribution":"5"},{"uuid":"96ce145d-5503-5763-b798-50b88170cd2e","type":"url","category":"Network activity","to_ids":true,"value":"http://185.102.115.84:4000/login","comment":"https://x.com/malwrhunterteam/status/2049434562522935614","timestamp":"1777458240","distribution":"5"},{"uuid":"4557d943-6e94-562b-9ff5-7ec804e439f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.102.115.84","comment":"https://x.com/malwrhunterteam/status/2049434562522935614","timestamp":"1777458240","distribution":"5"},{"uuid":"2a537bc1-d479-5601-9030-1334a255333a","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/gdq2/F/refs/heads/main/5","comment":"https://x.com/smica83/status/2049434807977865313","timestamp":"1777458300","distribution":"5"},{"uuid":"fa17d9e6-21a3-519e-92b8-c2e13b6e130b","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-verificate.com","comment":"https://x.com/suyog41/status/2049436796225036688","timestamp":"1777458780","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"f417b9c0-7993-5e11-aeee-ead03f4190aa","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-verificate.com","comment":"https://x.com/suyog41/status/2049436796225036688","timestamp":"1777458780","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"8db6377a-4809-5535-aefb-abbaba8ecbd7","type":"md5","category":"Payload delivery","to_ids":true,"value":"f920747af86b9e42e38a530ff977b499","comment":"https://x.com/suyog41/status/2049436796225036688","timestamp":"1777458780","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"b4f32dae-eeb3-5cf9-bae8-4cec3aec6845","type":"domain","category":"Network activity","to_ids":true,"value":"heliosdue.info","comment":"https://x.com/smica83/status/2049437377546903716","timestamp":"1777458900","distribution":"5"},{"uuid":"e0e906b1-fab1-552e-a711-105ca298d60f","type":"url","category":"Network activity","to_ids":true,"value":"http://heliosdue.info","comment":"https://x.com/smica83/status/2049437377546903716","timestamp":"1777458900","distribution":"5"},{"uuid":"1179d572-a94f-5298-b5e2-a71c9eec64ef","type":"domain","category":"Network activity","to_ids":true,"value":"xeniominb.info","comment":"https://x.com/smica83/status/2049439487491510434","timestamp":"1777459380","distribution":"5"},{"uuid":"db02a68d-4ab4-5dc3-bf8a-57f4fd8deba0","type":"url","category":"Network activity","to_ids":true,"value":"http://xeniominb.info","comment":"https://x.com/smica83/status/2049439487491510434","timestamp":"1777459380","distribution":"5"},{"uuid":"9da4e185-6628-594f-a994-8dc0a503fd5a","type":"domain","category":"Network activity","to_ids":true,"value":"dashwake.info","comment":"https://x.com/smica83/status/2049445426521092596","timestamp":"1777460820","distribution":"5"},{"uuid":"67cee3cb-be0d-570b-91e9-42473c2f2ce6","type":"url","category":"Network activity","to_ids":true,"value":"http://dashwake.info","comment":"https://x.com/smica83/status/2049445426521092596","timestamp":"1777460820","distribution":"5"},{"uuid":"badf53e2-599b-5f88-8dd5-5ff9fcc12c4c","type":"domain","category":"Network activity","to_ids":true,"value":"qusetagent.com","comment":"https://x.com/suyog41/status/2049447854947848561","timestamp":"1777461420","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"409cafd5-3fcc-56ba-b040-2c478086acc1","type":"url","category":"Network activity","to_ids":true,"value":"http://qusetagent.com","comment":"https://x.com/suyog41/status/2049447854947848561","timestamp":"1777461420","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"fdf02efe-9190-5610-bd77-9abd2b6fdb50","type":"md5","category":"Payload delivery","to_ids":true,"value":"dcb3f8501b0e060ef5a180d9605d6681","comment":"https://x.com/suyog41/status/2049447854947848561","timestamp":"1777461420","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"08d19d64-e41f-5bb4-8fb6-a06f162bcebb","type":"domain","category":"Network activity","to_ids":true,"value":"sagiw.chatcamic.com","comment":"https://x.com/malwrhunterteam/status/2049458253243810069","timestamp":"1777463880","distribution":"5"},{"uuid":"595e4a1f-9c52-5631-8fcb-2e2d6c89d5c0","type":"url","category":"Network activity","to_ids":true,"value":"http://sagiw.chatcamic.com","comment":"https://x.com/malwrhunterteam/status/2049458253243810069","timestamp":"1777463880","distribution":"5"},{"uuid":"64514066-be59-544d-98d1-a234b295350e","type":"domain","category":"Network activity","to_ids":true,"value":"info@erreklamatu.com","comment":"https://x.com/Erreklamatu/status/2049458232410669170","timestamp":"1777463894","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"dc8a2305-9831-501e-8758-24ade4a06fa1","type":"url","category":"Network activity","to_ids":true,"value":"https://info@erreklamatu.com","comment":"https://x.com/Erreklamatu/status/2049458232410669170","timestamp":"1777463894","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"87764b42-f359-598c-aa65-e7b9c841cb21","type":"url","category":"Network activity","to_ids":true,"value":"https://35.196.105.113/wp-admin/x64_v6","comment":"https://x.com/500mk500/status/2049460649885855948","timestamp":"1777464420","distribution":"5"},{"uuid":"462d60f7-58aa-5c78-a98c-12f02f6092d6","type":"url","category":"Network activity","to_ids":true,"value":"http://35.196.105.113:8000","comment":"https://x.com/500mk500/status/2049460649885855948","timestamp":"1777464420","distribution":"5"},{"uuid":"81d70580-16e1-5b81-9fe7-a82716760ada","type":"ip-dst","category":"Network activity","to_ids":true,"value":"35.196.105.113","comment":"https://x.com/500mk500/status/2049460649885855948","timestamp":"1777464420","distribution":"5"},{"uuid":"987e76dd-f53b-5995-89ea-49deca5cb733","type":"domain","category":"Network activity","to_ids":true,"value":"u.to","comment":"https://x.com/PhishStats/status/2049460843079717124","timestamp":"1777464480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c058cd3-a02a-5fe5-ad94-fea0a8eecd7f","type":"url","category":"Network activity","to_ids":true,"value":"https://u.to/FMrdIA","comment":"https://x.com/PhishStats/status/2049460843079717124","timestamp":"1777464480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c23b2fee-25d2-5f9f-8f55-370453da6d91","type":"ip-dst","category":"Network activity","to_ids":true,"value":"186.2.165.57","comment":"https://x.com/PhishStats/status/2049460843079717124","timestamp":"1777464480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"94195de2-03b4-5ddf-a964-89dbb40d3ee2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.2","comment":"https://x.com/mugu_reporter/status/2049492548498993629","timestamp":"1777472040","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b335cf7e-b491-5c39-9b97-d3f6e2c4a88e","type":"domain","category":"Network activity","to_ids":true,"value":"check.spamhaus.org","comment":"https://x.com/mugu_reporter/status/2049493067388817785","timestamp":"1777472199","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1389c5f3-5741-5936-af28-d0e5df8c65fb","type":"url","category":"Network activity","to_ids":true,"value":"https://check.spamhaus.org/results/?query=163.61.188.5","comment":"https://x.com/mugu_reporter/status/2049493067388817785","timestamp":"1777472199","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a042669d-2d5d-5ef8-a901-906027f8815e","type":"url","category":"Network activity","to_ids":true,"value":"https://check.spamhaus.org/results/?query=163.61.188.7","comment":"https://x.com/mugu_reporter/status/2049493067388817785","timestamp":"1777472199","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9de4048-6415-5d2e-bd8e-3973921239aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.5","comment":"https://x.com/mugu_reporter/status/2049493067388817785","timestamp":"1777472199","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c25a88e-6bfa-5aa6-81f8-361f60c1545e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.7","comment":"https://x.com/mugu_reporter/status/2049493067388817785","timestamp":"1777472199","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99d75203-2a3c-5c88-b8f3-8385f6d0a65c","type":"domain","category":"Network activity","to_ids":true,"value":"theoryviraleliminate.com","comment":"https://x.com/smica83/status/2049498081347919982","timestamp":"1777473360","distribution":"5"},{"uuid":"429fd6f3-de3e-5967-b7b4-27281856bd68","type":"url","category":"Network activity","to_ids":true,"value":"http://theoryviraleliminate.com","comment":"https://x.com/smica83/status/2049498081347919982","timestamp":"1777473360","distribution":"5"},{"uuid":"d98f523c-1615-5786-bee2-43682ba5af4e","type":"domain","category":"Network activity","to_ids":true,"value":"e-eslectronic.jp","comment":"https://x.com/harugasumi/status/2049506623148998973","timestamp":"1777475400","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"97b1e0aa-5fd8-506f-8e38-f880f0db2dd1","type":"url","category":"Network activity","to_ids":true,"value":"https://e-eslectronic.jp/e/Ticket/plus/etC6Fsh5","comment":"https://x.com/harugasumi/status/2049506623148998973","timestamp":"1777475400","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b88468b0-b9a6-5827-ad0f-fd2325b96f02","type":"domain","category":"Network activity","to_ids":true,"value":"onlinepaperfile.com","comment":"https://x.com/patialavii/status/2049546595520397676","timestamp":"1777484940","distribution":"5"},{"uuid":"a46f3e4f-50e0-5590-80a5-b585e5e238bf","type":"url","category":"Network activity","to_ids":true,"value":"http://onlinepaperfile.com","comment":"https://x.com/patialavii/status/2049546595520397676","timestamp":"1777484940","distribution":"5"},{"uuid":"b620374c-cc7f-5a6c-8800-9b1826227c70","type":"domain","category":"Network activity","to_ids":true,"value":"onlinepaperfiles.com","comment":"https://x.com/patialavii/status/2049546595520397676","timestamp":"1777484940","distribution":"5"},{"uuid":"e7e21244-da20-503a-b529-037976216dfd","type":"url","category":"Network activity","to_ids":true,"value":"http://onlinepaperfiles.com","comment":"https://x.com/patialavii/status/2049546595520397676","timestamp":"1777484940","distribution":"5"},{"uuid":"71338ff3-a761-5e91-8f83-f3b9b1527942","type":"url","category":"Network activity","to_ids":true,"value":"http://185.76.79.125","comment":"https://x.com/phatomcandle/status/2049549292755734604","timestamp":"1777485600","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"a8a308bc-c1e5-54a3-bd33-bd4919a8ef5e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.76.79.125","comment":"https://x.com/phatomcandle/status/2049549292755734604","timestamp":"1777485600","distribution":"5","Tag":[{"name":"APT"},{"name":"C2"},{"name":"malware"}]},{"uuid":"385a7cae-57dd-5dab-8762-0504c1760a69","type":"domain","category":"Network activity","to_ids":true,"value":"lace-wallet-aap.weebly.com","comment":"https://x.com/skocherhan/status/2049552334569513276","timestamp":"1777486330","distribution":"5"},{"uuid":"dccfbe77-3756-5e6b-a67b-2dfb62558beb","type":"url","category":"Network activity","to_ids":true,"value":"http://lace-wallet-aap.weebly.com","comment":"https://x.com/skocherhan/status/2049552334569513276","timestamp":"1777486330","distribution":"5"},{"uuid":"25146954-28ee-501f-a27f-a2404a2f0aab","type":"domain","category":"Network activity","to_ids":true,"value":"ncodcepass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"a5904008-c197-5c8c-bf82-24e8f565630c","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodcepass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"92fb6265-5c94-53c7-810e-9330a4b1c5d4","type":"domain","category":"Network activity","to_ids":true,"value":"nidloes.ncodcepass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"1c8adcfb-08d3-55d8-8929-ccf71390bb8a","type":"url","category":"Network activity","to_ids":true,"value":"http://nidloes.ncodcepass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"3149db29-54c0-56d5-9a0f-307882a848bb","type":"domain","category":"Network activity","to_ids":true,"value":"ncodccpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"1ab43a06-a58a-5d01-915c-b47211a28b38","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodccpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b6a638ea-9338-5ee3-945c-283db326181c","type":"domain","category":"Network activity","to_ids":true,"value":"ncodcbpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b24cff56-7e1a-5694-ac5c-6d768ccfcffa","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodcbpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"62d233dc-217f-52b0-9f40-468cb9f2d0ad","type":"domain","category":"Network activity","to_ids":true,"value":"ncodcapass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"c85fb4eb-3322-50b1-8c69-a8880b99b0a6","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodcapass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"6b3928e5-c388-5a86-8295-a91814fd85ce","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"22fce9c6-921b-58d1-a937-cc871a4b8c77","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"ff47b6ef-e567-5bcd-b55f-a8852aef2c57","type":"domain","category":"Network activity","to_ids":true,"value":"nid.ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"85758904-9025-5d7e-99aa-176d41df111b","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.ncodbspass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bc194fbe-578c-5d53-98b7-0aaf89d985af","type":"domain","category":"Network activity","to_ids":true,"value":"nid.ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"aaa3e7df-c72d-52b5-9491-558d089182bc","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"93ccaa21-0353-5695-ac78-2334420d9b87","type":"domain","category":"Network activity","to_ids":true,"value":"ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"10e4f74a-8d1a-55a4-b9d8-10cffa597e89","type":"url","category":"Network activity","to_ids":true,"value":"http://ncodbzpass.dynv6.net","comment":"https://x.com/skocherhan/status/2049553999653945709","timestamp":"1777486680","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"21010fb6-dfdd-5adf-8515-7ff081b1a6d1","type":"domain","category":"Network activity","to_ids":true,"value":"asdasdasz.cfd","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a6edafde-16b9-519d-97b7-4addfd47a1e5","type":"url","category":"Network activity","to_ids":true,"value":"http://asdasdasz.cfd","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"b0e02c8d-6c36-5fd5-8d69-3711268ba7b6","type":"domain","category":"Network activity","to_ids":true,"value":"binfinance.cfd","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"cbd9a401-8c5f-52dc-895c-f5afd90d6d74","type":"url","category":"Network activity","to_ids":true,"value":"http://binfinance.cfd","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"e61771a1-6fd6-5c6f-93eb-8f0e6f79af81","type":"url","category":"Network activity","to_ids":true,"value":"http://94.154.35.90","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"39f686ae-9783-54b2-9e9f-6d38df9d3398","type":"ip-dst","category":"Network activity","to_ids":true,"value":"94.154.35.90","comment":"https://x.com/Malwarehunterr/status/2049556634012401794","timestamp":"1777487340","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"354721f0-739c-57b1-bb9f-e299542b33ce","type":"url","category":"Network activity","to_ids":true,"value":"https://tmUnblock.cgi","comment":"https://x.com/sicehice/status/2049558462632218765","timestamp":"1777487760","distribution":"5"},{"uuid":"c86a0526-2b3a-57c1-9464-61d34125687d","type":"url","category":"Network activity","to_ids":true,"value":"http://88.214.20.14/bins/tux.mips","comment":"https://x.com/sicehice/status/2049558462632218765","timestamp":"1777487760","distribution":"5"},{"uuid":"003cbac8-c876-5256-a7c0-aef1bb5c9f3d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"61.58.234.15","comment":"https://x.com/sicehice/status/2049558462632218765","timestamp":"1777487760","distribution":"5"},{"uuid":"f6309dff-9fbb-513a-8e99-c410268f00ae","type":"ip-dst","category":"Network activity","to_ids":true,"value":"88.214.20.14","comment":"https://x.com/sicehice/status/2049558462632218765","timestamp":"1777487760","distribution":"5"},{"uuid":"0850fd39-367c-5ffa-8862-632c8317fe0a","type":"md5","category":"Payload delivery","to_ids":true,"value":"d372cfe6854782eb1f3b2cc341187c88","comment":"https://x.com/sicehice/status/2049558462632218765","timestamp":"1777487760","distribution":"5"},{"uuid":"8b08b6f5-9613-5af2-a038-9352f0ec9a3c","type":"domain","category":"Network activity","to_ids":true,"value":"clarifypost.forum","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"2353afc7-5d32-5357-b248-bec1ddba92b1","type":"url","category":"Network activity","to_ids":true,"value":"http://clarifypost.forum","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"0f9c470a-b198-5b3f-b6e4-bcbea4286e09","type":"domain","category":"Network activity","to_ids":true,"value":"k-admin-portal.quest","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"418f87ac-49e3-5e66-b0cf-15f9fd87e303","type":"url","category":"Network activity","to_ids":true,"value":"http://k-admin-portal.quest","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"dc64963f-9c43-558e-9124-4a315b2ad5b3","type":"domain","category":"Network activity","to_ids":true,"value":"secsettingcheck.quest","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"3d6ebedd-e211-5640-9c01-449cd239447b","type":"url","category":"Network activity","to_ids":true,"value":"http://secsettingcheck.quest","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"569560d5-e95c-5d83-936c-5de3f15ce5ee","type":"domain","category":"Network activity","to_ids":true,"value":"alarm-doc-review.site","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"9680a7a1-c258-521b-bc53-a20ff074503c","type":"url","category":"Network activity","to_ids":true,"value":"http://alarm-doc-review.site","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"9f9fa4c6-b907-50d6-a91f-810f4d11e8aa","type":"domain","category":"Network activity","to_ids":true,"value":"e-billing-service.autos","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"9eb248a3-20d8-57ab-8025-d71fcbd89d4c","type":"url","category":"Network activity","to_ids":true,"value":"http://e-billing-service.autos","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"de2c6238-c3b9-5350-b2a0-e80286aaedfb","type":"domain","category":"Network activity","to_ids":true,"value":"confirm-userorder.biz","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"5dbe2602-84d0-55a2-ac8a-60b9dafe27f0","type":"url","category":"Network activity","to_ids":true,"value":"http://confirm-userorder.biz","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"dee1ba6b-ccfb-5f00-a036-0759928e22f8","type":"domain","category":"Network activity","to_ids":true,"value":"paperless-korea.one","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"327317bb-b0c8-5fce-81d3-6fa33c844136","type":"url","category":"Network activity","to_ids":true,"value":"http://paperless-korea.one","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"01623abc-e204-5b8b-9114-f00b9f182e10","type":"domain","category":"Network activity","to_ids":true,"value":"checko.paperless-korea.one","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"faabb7cb-5d35-5e2f-bced-fe053e082caa","type":"url","category":"Network activity","to_ids":true,"value":"http://checko.paperless-korea.one","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"ae467d7f-5d18-5e6b-9b90-bdf21d8940e2","type":"domain","category":"Network activity","to_ids":true,"value":"cdn-verifying.homes","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"8371213f-4f7c-5517-b185-6a22a84a7970","type":"url","category":"Network activity","to_ids":true,"value":"http://cdn-verifying.homes","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"067247cf-0f0d-5c3b-b9a8-37baf6973cb0","type":"url","category":"Network activity","to_ids":true,"value":"http://152.32.243.169","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"61c8bf15-112a-57a6-8f6c-481feb9c7670","type":"ip-dst","category":"Network activity","to_ids":true,"value":"152.32.243.169","comment":"https://x.com/skocherhan/status/2049565434685325594","timestamp":"1777489440","distribution":"5"},{"uuid":"2b4564d3-089b-5c9c-a317-71d3cae62812","type":"domain","category":"Network activity","to_ids":true,"value":"securedoc-photos.info","comment":"https://x.com/Malwarehunterr/status/2049581740398887017","timestamp":"1777493340","distribution":"5","Tag":[{"name":"ClickFix"}]},{"uuid":"9688d89d-ef5c-569a-a1a8-2ca58e726732","type":"url","category":"Network activity","to_ids":true,"value":"http://securedoc-photos.info","comment":"https://x.com/Malwarehunterr/status/2049581740398887017","timestamp":"1777493340","distribution":"5","Tag":[{"name":"ClickFix"}]},{"uuid":"74830495-3883-5e89-a140-b2cfa413195f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"eacf50d94110e59e27c80cc8b1a10632bf4d3e51d0d887937060479b402ca0d9","comment":"https://x.com/Malwarehunterr/status/2049581740398887017","timestamp":"1777493340","distribution":"5","Tag":[{"name":"ClickFix"}]},{"uuid":"827c4eeb-27af-584c-87d2-45a5634e9f0a","type":"domain","category":"Network activity","to_ids":true,"value":"luxoriahub.shop","comment":"https://x.com/masaomi346/status/2049609513725222967","timestamp":"1777499940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d3ba6d9e-8ba9-5094-98e9-8163a15a9757","type":"url","category":"Network activity","to_ids":true,"value":"https://luxoriahub.shop","comment":"https://x.com/masaomi346/status/2049609513725222967","timestamp":"1777499940","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aace74ac-1bb9-563c-b1af-c3a3f27930e5","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.26rni3t0.shop","comment":"https://x.com/masaomi346/status/2049657818085781664","timestamp":"1777511460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8519a025-b497-5403-aa13-3bf90589fc39","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.26rni3t0.shop/home","comment":"https://x.com/masaomi346/status/2049657818085781664","timestamp":"1777511460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d30330a-7aa7-5ad5-b9e5-0eeb8016e0c9","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.8mpf2yml.shop","comment":"https://x.com/masaomi346/status/2049657818085781664","timestamp":"1777511460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bef64346-faa7-5a8b-8e92-212c47f55c85","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.8mpf2yml.shop/home","comment":"https://x.com/masaomi346/status/2049657818085781664","timestamp":"1777511460","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"77993244-25ee-5c02-aa2d-d1a8a5a2f341","type":"domain","category":"Network activity","to_ids":true,"value":"server-restore-biglobe-ne-jp.weebly.com","comment":"https://x.com/masaomi346/status/2049659323278864411","timestamp":"1777511820","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"050784e4-19d9-5a63-9a41-7a25932a7e98","type":"url","category":"Network activity","to_ids":true,"value":"https://server-restore-biglobe-ne-jp.weebly.com","comment":"https://x.com/masaomi346/status/2049659323278864411","timestamp":"1777511820","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3dd541ea-a37a-5291-96ab-b0d74ab75ce7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"116.118.47.206","comment":"https://x.com/Fact_Finder03/status/2049677620678107196","timestamp":"1777516200","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"181a99f3-af86-595c-9af9-7e4d303255f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.219.238.166","comment":"https://x.com/K_N1kolenko/status/2049725521005588913","timestamp":"1777527600","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"17df51f0-17e7-5d72-88b0-dcf6ad952c02","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.132.249","comment":"https://x.com/K_N1kolenko/status/2049725521005588913","timestamp":"1777527600","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"ad2f1f9a-336e-51c8-a5af-d8f8c711c40f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.16.52.105","comment":"https://x.com/K_N1kolenko/status/2049725521005588913","timestamp":"1777527600","distribution":"5","Tag":[{"name":"AsyncRAT"}]},{"uuid":"4081e38e-394d-5088-a7b6-043f0dffabe1","type":"url","category":"Network activity","to_ids":true,"value":"http://91.92.243.46","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"16b7e9d6-7274-532e-a606-3e9268424401","type":"domain","category":"Network activity","to_ids":true,"value":"driplin.cyou","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"ef05abd4-d8e6-513b-ab9a-e94d77d621d3","type":"url","category":"Network activity","to_ids":true,"value":"http://driplin.cyou","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"f8cfadb4-c188-506d-b544-d86cda0a291c","type":"domain","category":"Network activity","to_ids":true,"value":"pomflgf.vu","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"9a77e2cb-0d5e-5b18-bd66-4d465cf1624b","type":"url","category":"Network activity","to_ids":true,"value":"http://pomflgf.vu","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"8d0d3810-ad36-579d-b1c5-0669a80b9c3b","type":"domain","category":"Network activity","to_ids":true,"value":"ulmudhw.shop","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"231d3ac1-d24a-5fd3-8dd5-54faf61b24fb","type":"url","category":"Network activity","to_ids":true,"value":"http://ulmudhw.shop","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"67f1a685-e947-5e48-9ff4-d4fa340aec5d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.92.243.46","comment":"https://x.com/K_N1kolenko/status/2049728280052339142","timestamp":"1777528260","distribution":"5","Tag":[{"name":"LummaStealer"}]},{"uuid":"7e0b215b-70e7-514a-b8c3-ae9cbc92ac00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.240.51.74","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"80ab29b4-682d-51fd-8d4e-0d90dab235ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.247.130.219","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"a65022b5-6542-5349-a4a6-98024bc769b7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.74.61.23","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"cec14329-10e2-520c-b0f0-3b13cbbdee5f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.141.148.126","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"cf405911-d0a2-539e-b69c-a3780256cd98","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.92.120.68","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"ffaad417-597b-557c-9a28-d8846da54d8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"178.193.174.6","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"c400401d-2b48-5921-a8d1-6ac06b94b416","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.233.164.186","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"df38c761-ed5a-5a00-80f3-4219ce024023","type":"ip-dst","category":"Network activity","to_ids":true,"value":"203.202.232.149","comment":"https://x.com/K_N1kolenko/status/2049731413654524089","timestamp":"1777528980","distribution":"5","Tag":[{"name":"RAT"},{"name":"Xworm"}]},{"uuid":"a125e5f9-d011-5817-a730-b6f7a305ac89","type":"domain","category":"Network activity","to_ids":true,"value":"va.permata.bankslemansyariah.co.id","comment":"https://x.com/PhishStats/status/2049732366982091153","timestamp":"1777529220","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c50741f5-3cb9-535a-ac5f-b3e02467770a","type":"url","category":"Network activity","to_ids":true,"value":"https://www.va.permata.bankslemansyariah.co.id","comment":"https://x.com/PhishStats/status/2049732366982091153","timestamp":"1777529220","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"079f3a25-37a3-501e-b51f-368ba3b3f2f6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"153.92.13.152","comment":"https://x.com/PhishStats/status/2049732366982091153","timestamp":"1777529220","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19dd5905-bc42-555e-8043-80e7512664b5","type":"domain","category":"Network activity","to_ids":true,"value":"rhythmite.cfd","comment":"https://x.com/harugasumi/status/2049735138163200263","timestamp":"1777529880","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0790b9c2-f66e-5b78-8f2f-91d63531fd74","type":"url","category":"Network activity","to_ids":true,"value":"https://www.rhythmite.cfd/duodmqqglfugMcsjfekhdt","comment":"https://x.com/harugasumi/status/2049735138163200263","timestamp":"1777529880","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"56372510-1633-593b-9668-4217b2fa2b39","type":"url","category":"Network activity","to_ids":true,"value":"http://45.150.66.241","comment":"https://x.com/malwrhunterteam/status/2049747425431081322","timestamp":"1777532820","distribution":"5"},{"uuid":"efcd2f04-4b58-5e4a-a058-abfa037dffd5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.150.66.241","comment":"https://x.com/malwrhunterteam/status/2049747425431081322","timestamp":"1777532820","distribution":"5"},{"uuid":"f5e2128a-1fd4-5e2a-b20b-9a980017a8cf","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.e3ed5msd.shop","comment":"https://x.com/harugasumi/status/2049754658357600647","timestamp":"1777534560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34960a83-294d-5bcc-b025-feb0f6c9619e","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.e3ed5msd.shop","comment":"https://x.com/harugasumi/status/2049754658357600647","timestamp":"1777534560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ceb0bb6-6314-5df2-80c4-8bc50bbf8a5c","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.8mpf2yml.shop/oo6z309q","comment":"https://x.com/harugasumi/status/2049754658357600647","timestamp":"1777534560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"289b1b4c-685b-554d-972f-1481988d06ba","type":"url","category":"Network activity","to_ids":true,"value":"http://185.29.10.77/VbnpIdAHD29.bin","comment":"https://x.com/ShadowOpCode/status/2049769546609832080","timestamp":"1777538117","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"1c89673d-f63d-5926-8d33-00bf6561628f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.29.10.77","comment":"https://x.com/ShadowOpCode/status/2049769546609832080","timestamp":"1777538117","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"4cc75b42-2990-5ff8-ae6b-f24096232567","type":"sha256","category":"Payload delivery","to_ids":true,"value":"1da4f7f001d239a54fab50eb7c3cbc985db392a3d4405e19c3a5d2035d591004","comment":"https://x.com/nextronresearch/status/2049769824952148131","timestamp":"1777538160","distribution":"5"},{"uuid":"7ba79604-e742-5357-8ad6-93d73869f8d6","type":"ip-dst","category":"Network activity","to_ids":true,"value":"192.229.87.227","comment":"https://x.com/Fact_Finder03/status/2049771804743614790","timestamp":"1777538640","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"41cdc469-7f66-574d-931f-4bcc510daab1","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5fc61384dd6f15e6bb510e0421000c1301a40d7acf05cedbeb6bc789c0a99d00","comment":"https://x.com/nextronresearch/status/2049775774027124938","timestamp":"1777539600","distribution":"5"},{"uuid":"4557d943-6e94-562b-9ff5-7ec804e439f1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.102.115.84","comment":"https://x.com/Fact_Finder03/status/2049777575980118322","timestamp":"1777540020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1d68509b-b4d7-5523-bc4c-a2f08165397b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"3b9bbec828c3c3bde9f909fd785953629a88de4bbdcf338fa9ed92973ca212df","comment":"https://x.com/Fact_Finder03/status/2049777575980118322","timestamp":"1777540020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"c372d24a-d554-502c-90dd-8f5329ea05b1","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e06e46d24342407c6b491440b33a7d68c5424c5e92c07906488389d347bdf8db","comment":"https://x.com/Fact_Finder03/status/2049777575980118322","timestamp":"1777540020","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"f6f8e03f-86ce-5307-9839-9cce8ebbd314","type":"domain","category":"Network activity","to_ids":true,"value":"oilorigin.cfd","comment":"https://x.com/masaomi346/status/2049777983947514020","timestamp":"1777540080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0399fdd-8e60-5089-9ffc-c15226d986a6","type":"url","category":"Network activity","to_ids":true,"value":"https://www.oilorigin.cfd/qgidteclapbsMnhhpcrrvt","comment":"https://x.com/masaomi346/status/2049777983947514020","timestamp":"1777540080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e6dce45f-6813-59f1-916c-152f210eea0d","type":"url","category":"Network activity","to_ids":true,"value":"https://www.rhythmite.cfd/alidsesglnzuMuxypptgtt","comment":"https://x.com/masaomi346/status/2049777983947514020","timestamp":"1777540080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"81c07a04-ae84-54ca-8f28-5a2b2b15ed77","type":"domain","category":"Network activity","to_ids":true,"value":"kunden-accounts-dkb.ddns.info","comment":"https://x.com/malwrhunterteam/status/2049778430892183767","timestamp":"1777540200","distribution":"5"},{"uuid":"b7eeb3c9-fa07-5673-99cb-a17e10a2c626","type":"url","category":"Network activity","to_ids":true,"value":"http://kunden-accounts-dkb.ddns.info","comment":"https://x.com/malwrhunterteam/status/2049778430892183767","timestamp":"1777540200","distribution":"5"},{"uuid":"8fc20c4b-1f62-53e2-a17d-7058f240a275","type":"ip-dst","category":"Network activity","to_ids":true,"value":"209.99.184.44","comment":"https://x.com/Fact_Finder03/status/2049783567618912741","timestamp":"1777541460","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6b190aa6-730a-5a0d-beea-f36fe3f7f987","type":"sha256","category":"Payload delivery","to_ids":true,"value":"73a0f53968477f796f87a9fbd825ad41e204b246a3cd293460d79a9c56daa210","comment":"https://x.com/Fact_Finder03/status/2049799170320687111","timestamp":"1777545180","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"980fdc1f-cc46-595a-b147-8e9bb4203b20","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e3db497158afe3307a90ab2b1aaf40e9cbc76374a837d876fbe7eb3b02518e8b","comment":"https://x.com/BlinkzSec/status/2049806355435782537","timestamp":"1777546860","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"9227b57f-eac5-57dd-9852-a0aaec8cd7e5","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e375467b0f62e04c62c73564f61fd4fbaf664cdfb2fbdf3edc75a1d6454ac40e","comment":"https://x.com/BlinkzSec/status/2049806355435782537","timestamp":"1777546860","distribution":"5","Tag":[{"name":"opendir"}]},{"uuid":"155982b6-c7ca-56fb-918e-362b502be819","type":"domain","category":"Network activity","to_ids":true,"value":"ftp.abcebikes.com","comment":"https://x.com/JAMESWT_WT/status/2049826752688456080","timestamp":"1777551720","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"a4004a27-1092-5242-b40b-c34aa0884217","type":"url","category":"Network activity","to_ids":true,"value":"ftp://ftp.abcebikes.com","comment":"https://x.com/JAMESWT_WT/status/2049826752688456080","timestamp":"1777551720","distribution":"5","Tag":[{"name":"AgentTesla"}]},{"uuid":"fcf50b00-8dfe-51e7-b239-42c2b132c636","type":"url","category":"Network activity","to_ids":true,"value":"http://193.58.122.24","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"6571eeb7-2bed-5511-b1eb-a0bfe4067e0b","type":"url","category":"Network activity","to_ids":true,"value":"http://144.31.165.219","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"d3f415aa-6c92-5a33-b716-184b27129f45","type":"url","category":"Network activity","to_ids":true,"value":"http://144.31.165.210","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"84b9c5e4-bc15-5966-9d0c-03e5b2fa367d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"193.58.122.24","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"390e480c-5387-5700-b8e2-c88bcf6ac0cd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.31.165.219","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"9777435a-2ece-5d84-ad24-2f0dacb3abee","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.31.165.210","comment":"https://x.com/ViriBack/status/2049832350817624516","timestamp":"1777553091","distribution":"5"},{"uuid":"436b83cb-2ba0-5a25-99b5-174acc72fe9a","type":"url","category":"Network activity","to_ids":true,"value":"https://bazaar.abuse/.ch/sample/a793c1a77afeb7d85ee525d6333339e40e2fec841a9d79d87d02524cf9034909/","comment":"https://x.com/BlinkzSec/status/2049840780060115265","timestamp":"1777555080","distribution":"5","Tag":[{"name":"Rhadamanthys"}]},{"uuid":"c56c5e53-f933-5525-8a1d-493fe9771d91","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a793c1a77afeb7d85ee525d6333339e40e2fec841a9d79d87d02524cf9034909","comment":"https://x.com/BlinkzSec/status/2049840780060115265","timestamp":"1777555080","distribution":"5","Tag":[{"name":"Rhadamanthys"}]},{"uuid":"9609d153-b6ad-534b-a7e7-a7dcf72e75da","type":"domain","category":"Network activity","to_ids":true,"value":"wordpress-1617813-6377570.cloudwaysapps.com","comment":"https://x.com/AddressIntel/status/2049841222022254881","timestamp":"1777555200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cfa827d8-de5f-5770-a32c-1fc879a18c00","type":"url","category":"Network activity","to_ids":true,"value":"https://wordpress-1617813-6377570.cloudwaysapps.com/PAGI/au","comment":"https://x.com/AddressIntel/status/2049841222022254881","timestamp":"1777555200","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a60e5c39-d4b2-56b7-99c9-959a7e12e414","type":"domain","category":"Network activity","to_ids":true,"value":"autos-gateway-enhanced-governor.trycloudflare.com","comment":"https://x.com/smica83/status/2049861452186472895","timestamp":"1777560000","distribution":"5"},{"uuid":"0daaa5cc-250b-52e0-972c-1d5de227542b","type":"url","category":"Network activity","to_ids":true,"value":"http://autos-gateway-enhanced-governor.trycloudflare.com","comment":"https://x.com/smica83/status/2049861452186472895","timestamp":"1777560000","distribution":"5"},{"uuid":"302901d3-4e7e-5468-adcf-250e68476240","type":"domain","category":"Network activity","to_ids":true,"value":"web.mufgbkjp.com","comment":"https://x.com/kubotaa3/status/2049868968803119210","timestamp":"1777561800","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"0fa4fd27-08d9-5bd8-8c8e-d3a1eda8c08c","type":"url","category":"Network activity","to_ids":true,"value":"https://web.mufgbkjp.com","comment":"https://x.com/kubotaa3/status/2049868968803119210","timestamp":"1777561800","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"414fbb8b-e68f-5191-a2ea-8711d06d592e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"175.41.25.174","comment":"https://x.com/kubotaa3/status/2049868968803119210","timestamp":"1777561800","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"7550a09d-a857-5061-a0b4-186475990380","type":"domain","category":"Network activity","to_ids":true,"value":"amaisromao.com.br","comment":"https://x.com/skocherhan/status/2049923187933130970","timestamp":"1777574748","distribution":"5"},{"uuid":"0fab45b8-5404-50da-988e-3b9ec080898c","type":"url","category":"Network activity","to_ids":true,"value":"https://amaisromao.com.br/ika/complete.php","comment":"https://x.com/skocherhan/status/2049923187933130970","timestamp":"1777574748","distribution":"5"},{"uuid":"cdc90adc-22a1-5fff-93af-da9dedfdac35","type":"domain","category":"Network activity","to_ids":true,"value":"inlinepol4s.roxa.org","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575060","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"381f83dc-da05-541c-bae2-1516c69fcf1c","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol4s.roxa.org","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575060","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"3e3e8e5f-4c4a-5f13-9a3e-254cbcaf550e","type":"domain","category":"Network activity","to_ids":true,"value":"newpolinf9s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"0e491c36-f49e-5418-ba08-829dce981e80","type":"url","category":"Network activity","to_ids":true,"value":"http://newpolinf9s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"e748aa77-6c7c-5e02-b3e9-a46aea11166e","type":"domain","category":"Network activity","to_ids":true,"value":"emspol4s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"e96bff0b-25da-5e7e-8981-222bf354b299","type":"url","category":"Network activity","to_ids":true,"value":"http://emspol4s.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"efdbaeb1-952c-5428-ab73-0e5f84cbf213","type":"domain","category":"Network activity","to_ids":true,"value":"docinfo.ntdepchk87s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"d52e039b-f33e-5a21-a3bd-b887c99e1036","type":"url","category":"Network activity","to_ids":true,"value":"http://docinfo.ntdepchk87s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b4bd45f7-bce0-5a78-b87e-18fa6fcff329","type":"domain","category":"Network activity","to_ids":true,"value":"ntdepchk65s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"2f4a27bf-53d5-57c3-9baa-4d3369f77d33","type":"url","category":"Network activity","to_ids":true,"value":"http://ntdepchk65s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bf926598-5c73-5c0e-95b1-c4b056f3c352","type":"domain","category":"Network activity","to_ids":true,"value":"ntdepchk87s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"83b393fa-755e-51b7-9b4a-efd6abe351b4","type":"url","category":"Network activity","to_ids":true,"value":"http://ntdepchk87s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b39d9984-f356-5ce0-a90f-485d1bd4a76c","type":"domain","category":"Network activity","to_ids":true,"value":"ntdepchk17s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"5e5fc240-ff84-540b-8592-6fcab818c248","type":"url","category":"Network activity","to_ids":true,"value":"http://ntdepchk17s.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"43ba2ca1-a2f7-5752-a746-15025fbf1dd0","type":"domain","category":"Network activity","to_ids":true,"value":"nhpolercm6v.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"20dd6773-49fa-5cb8-910f-dfbf106c5477","type":"url","category":"Network activity","to_ids":true,"value":"http://nhpolercm6v.dynv6.net","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"5432e9f7-7711-582d-aeaa-ecb557a6fde3","type":"domain","category":"Network activity","to_ids":true,"value":"nmethodsrc15v.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"764c5464-1bd2-585d-85ca-7bcd6a11658a","type":"url","category":"Network activity","to_ids":true,"value":"http://nmethodsrc15v.dynuddns.com","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"5a3b7766-a1ae-5714-a50f-e1a270058b9e","type":"url","category":"Network activity","to_ids":true,"value":"http://inlinepol4s.roxa.or","comment":"https://x.com/skocherhan/status/2049924547810299999","timestamp":"1777575072","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"3361aa00-9dfc-55bc-9a34-ba34222405f7","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a567d09b15f6e4440e70c9f2aa8edec8ed59f53301952df05c719aa3911687f9","comment":"https://x.com/skocherhan/status/2049943537936994453","timestamp":"1777579600","distribution":"5"},{"uuid":"0c4e8eea-1529-5121-a7fc-67b9a1a128d4","type":"url","category":"Network activity","to_ids":true,"value":"http://105.119.41.0","comment":"https://x.com/skocherhan/status/2049961066994471238","timestamp":"1777583760","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"3bcabe81-27d7-5b8f-8834-a01cb0694b42","type":"ip-dst","category":"Network activity","to_ids":true,"value":"105.119.41.0","comment":"https://x.com/skocherhan/status/2049961066994471238","timestamp":"1777583760","distribution":"5","Tag":[{"name":"scam"}]},{"uuid":"f533fcdf-6a57-5105-bf06-a4caea80e0ae","type":"sha256","category":"Payload delivery","to_ids":true,"value":"784d9273c75e983f2b4730d1f2198cc44e9599709f4a5519a2bd3049095dc9d5","comment":"https://x.com/byrne_emmy12099/status/2049981598288969754","timestamp":"1777588620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"84092740-b6f2-52e1-9a87-875251488d21","type":"domain","category":"Network activity","to_ids":true,"value":"dai-iichi-lifei.co.jp.geraiqawti.com","comment":"https://x.com/masaomi346/status/2049984555831198075","timestamp":"1777589340","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"328b5cc4-b553-5052-874d-c5d16bec6650","type":"url","category":"Network activity","to_ids":true,"value":"https://dai-iichi-lifei.co.jp.geraiqawti.com/legal/keiei/success/index_html","comment":"https://x.com/masaomi346/status/2049984555831198075","timestamp":"1777589340","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4088ca94-2f70-5417-b71b-34324cbddca9","type":"domain","category":"Network activity","to_ids":true,"value":"dai-iichi-lifei.co.jp.loiaseuise.com","comment":"https://x.com/masaomi346/status/2049984555831198075","timestamp":"1777589340","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"41613ac1-06e8-5caa-866a-68ceecc7e9e9","type":"url","category":"Network activity","to_ids":true,"value":"https://dai-iichi-lifei.co.jp.loiaseuise.com/legal/keiei/success/index_html","comment":"https://x.com/masaomi346/status/2049984555831198075","timestamp":"1777589340","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"19c99b31-2878-5f98-a04e-eb6e277b0c31","type":"domain","category":"Network activity","to_ids":true,"value":"nedabaci.z4.web.core.windows.net","comment":"https://x.com/harugasumi/status/2050044303926505846","timestamp":"1777603620","distribution":"5"},{"uuid":"26b66ae6-3c49-565b-b7ab-cacd0227c089","type":"url","category":"Network activity","to_ids":true,"value":"https://nedabaci.z4.web.core.windows.net","comment":"https://x.com/harugasumi/status/2050044303926505846","timestamp":"1777603620","distribution":"5"},{"uuid":"9ba00b9f-20a0-5cf0-a7be-1a9853ec70b5","type":"domain","category":"Network activity","to_ids":true,"value":"creassociates.us","comment":"https://x.com/patialavii/status/2050064510095118705","timestamp":"1777608442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4f5b66f6-07e9-5025-bee6-e40c3a046fb1","type":"url","category":"Network activity","to_ids":true,"value":"https://www.creassociates.us/ssa","comment":"https://x.com/patialavii/status/2050064510095118705","timestamp":"1777608442","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"93f561e3-1252-5a08-8ea7-5273933a015e","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.f58vo5v9.shop","comment":"https://x.com/harugasumi/status/2050100796789031128","timestamp":"1777617060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"588412a1-f8e7-526e-b801-f56389cb4a72","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.f58vo5v9.shop","comment":"https://x.com/harugasumi/status/2050100796789031128","timestamp":"1777617060","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"43966fe5-de94-595a-af61-0264a781b677","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.26mwt3v0.shop","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fc44c9ce-af59-5b50-a31b-a5e4aa99f665","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.26mwt3v0.shop/2xj3nsrm","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8d30330a-7aa7-5ad5-b9e5-0eeb8016e0c9","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.8mpf2yml.shop","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9ceb0bb6-6314-5df2-80c4-8bc50bbf8a5c","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.8mpf2yml.shop/oo6z309q","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"35d95a92-8892-5c9b-ba20-3ef66f038b8d","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.9g4icuky.shop","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"50c41b0a-17f3-5cce-bf55-33891b7702e7","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.9g4icuky.shop/oo6z309q","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"aace74ac-1bb9-563c-b1af-c3a3f27930e5","type":"domain","category":"Network activity","to_ids":true,"value":"e-stat.26rni3t0.shop","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8e538d79-621d-55d9-82dc-d1943d23b861","type":"url","category":"Network activity","to_ids":true,"value":"https://e-stat.26rni3t0.shop/2xj3nsrm","comment":"https://x.com/harugasumi/status/2050104822515564575","timestamp":"1777618020","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"eecb7a80-c379-550c-81f9-62d27184bc04","type":"domain","category":"Network activity","to_ids":true,"value":"eva-dmc4.halfmoon.jp","comment":"https://x.com/harugasumi/status/2050110480988213610","timestamp":"1777619400","distribution":"5"},{"uuid":"a307621a-694c-5c18-ad0a-d952d15489b5","type":"url","category":"Network activity","to_ids":true,"value":"http://eva-dmc4.halfmoon.jp/eva-dmc4/cutlinks/rank.php?url=","comment":"https://x.com/harugasumi/status/2050110480988213610","timestamp":"1777619400","distribution":"5"},{"uuid":"3fbea6ea-507b-52d5-bb41-ff7fbe439873","type":"md5","category":"Payload delivery","to_ids":true,"value":"dce129d76376530da2eb46a61574675b","comment":"https://x.com/suyog41/status/2050121536791790020","timestamp":"1777621980","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"0ac0f1a8-4157-5470-8d90-45d416827382","type":"domain","category":"Network activity","to_ids":true,"value":"reliable-queijadas.netlify.app","comment":"https://x.com/Malwarehunterr/status/2050130180778410354","timestamp":"1777624080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"2c64a8c8-d8bd-5651-aa1d-5e9b7fb6c1e3","type":"url","category":"Network activity","to_ids":true,"value":"http://reliable-queijadas.netlify.app","comment":"https://x.com/Malwarehunterr/status/2050130180778410354","timestamp":"1777624080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0ed2ac60-7103-5519-bd8a-33efedf0aa6f","type":"url","category":"Network activity","to_ids":true,"value":"http://reliable-queijadas.netlify.app/1st.php","comment":"https://x.com/Malwarehunterr/status/2050130180778410354","timestamp":"1777624080","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"31928e33-c0cf-5479-bf53-a47978fe0a03","type":"md5","category":"Payload delivery","to_ids":true,"value":"229a945794ad056001982803a6a58a8c","comment":"https://x.com/skocherhan/status/2050143313093664849","timestamp":"1777627230","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"3689b8c2-52d8-53ff-8f92-35b1095d2132","type":"domain","category":"Network activity","to_ids":true,"value":"windowsupdate.sh:18888","comment":"https://x.com/ctrlaltintel/status/2050143909209317439","timestamp":"1777627320","distribution":"5"},{"uuid":"1195250a-d063-5cb7-a438-83ffeea83419","type":"url","category":"Network activity","to_ids":true,"value":"http://windowsupdate.sh:18888/sub_shell.py","comment":"https://x.com/ctrlaltintel/status/2050143909209317439","timestamp":"1777627320","distribution":"5"},{"uuid":"337d83c7-9759-5b87-bcb3-26face8574cf","type":"ip-dst","category":"Network activity","to_ids":true,"value":"154.18.187.239","comment":"https://x.com/ctrlaltintel/status/2050143909209317439","timestamp":"1777627320","distribution":"5"},{"uuid":"ce647a68-535d-503c-82d1-74480cb8bea9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"172.94.9.250","comment":"https://x.com/suyog41/status/2050149887099166925","timestamp":"1777628760","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"7a4ac2f2-0743-5a4f-9360-56c98a753d0b","type":"md5","category":"Payload delivery","to_ids":true,"value":"0671651cc75808d90f9177fad493ec53","comment":"https://x.com/suyog41/status/2050149887099166925","timestamp":"1777628760","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"fc4c10b9-8332-5cf5-832d-8494c40d8a52","type":"domain","category":"Network activity","to_ids":true,"value":"8888.com","comment":"https://x.com/skocherhan/status/2050151395370672170","timestamp":"1777629157","distribution":"5"},{"uuid":"58d4241f-35ae-51df-840d-38877bd52406","type":"url","category":"Network activity","to_ids":true,"value":"http://8888.com","comment":"https://x.com/skocherhan/status/2050151395370672170","timestamp":"1777629157","distribution":"5"},{"uuid":"8c083b62-eb04-5b54-a123-4705c185fea8","type":"domain","category":"Network activity","to_ids":true,"value":"dpdlocajs.shop","comment":"https://x.com/PhishStats/status/2050153362759324057","timestamp":"1777629600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0a976644-c925-5b86-b3ef-410fdb970ee6","type":"url","category":"Network activity","to_ids":true,"value":"https://www.dpdlocajs.shop/com/","comment":"https://x.com/PhishStats/status/2050153362759324057","timestamp":"1777629600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"ccba281d-84dd-5866-aa4c-59e99d0eeb8d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.133.55.35","comment":"https://x.com/PhishStats/status/2050153362759324057","timestamp":"1777629600","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7c68e0ad-921e-5f75-860e-be228d35e200","type":"domain","category":"Network activity","to_ids":true,"value":"hebsbsbzjsjshduxbs.xyz","comment":"https://x.com/suyog41/status/2050158465805607301","timestamp":"1777630843","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"b9a23365-5dab-5dfb-a3e8-218f3e66c34c","type":"url","category":"Network activity","to_ids":true,"value":"http://hebsbsbzjsjshduxbs.xyz","comment":"https://x.com/suyog41/status/2050158465805607301","timestamp":"1777630843","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"4fe24762-78ec-5832-94ac-ad372dd29623","type":"md5","category":"Payload delivery","to_ids":true,"value":"199449965acb7ab2ce7d45b70729c784","comment":"https://x.com/suyog41/status/2050158465805607301","timestamp":"1777630843","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"d329d069-9fde-5479-9eee-c74852ece95a","type":"url","category":"Network activity","to_ids":true,"value":"http://205.237.106.117","comment":"https://x.com/adversarialy/status/2050194983278313501","timestamp":"1777639500","distribution":"5"},{"uuid":"c7e6befe-cae7-5392-bc36-67a34d3d42a7","type":"ip-dst","category":"Network activity","to_ids":true,"value":"205.237.106.117","comment":"https://x.com/adversarialy/status/2050194983278313501","timestamp":"1777639500","distribution":"5"},{"uuid":"67424e67-f4e2-5f8f-a032-c20299fc82ac","type":"url","category":"Network activity","to_ids":true,"value":"http://92.88.98.199/GuruITDDoS/RpcSecurity.x86_64","comment":"https://x.com/sicehice/status/2050195448544034820","timestamp":"1777639620","distribution":"5"},{"uuid":"c7bf0330-f45f-590c-a91b-659bf9f99849","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.171.169.207","comment":"https://x.com/sicehice/status/2050195448544034820","timestamp":"1777639620","distribution":"5"},{"uuid":"42635fdb-a5ad-5681-836a-f29a3983957d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"92.88.98.199","comment":"https://x.com/sicehice/status/2050195448544034820","timestamp":"1777639620","distribution":"5"},{"uuid":"2a7816a6-c786-5d51-891c-eb069f01f1e9","type":"md5","category":"Payload delivery","to_ids":true,"value":"6a7a32cee9c2dcd46784a93edc339c0e","comment":"https://x.com/sicehice/status/2050195448544034820","timestamp":"1777639620","distribution":"5"},{"uuid":"31b94bbb-a2f2-523b-a10c-1b4396d393a9","type":"domain","category":"Network activity","to_ids":true,"value":"xlabslover.lol","comment":"https://x.com/TuringAlex/status/2050195660285391332","timestamp":"1777639680","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"eeb352fb-ae3a-5fb6-a0e0-31e3dcbf96db","type":"url","category":"Network activity","to_ids":true,"value":"http://xlabslover.lol","comment":"https://x.com/TuringAlex/status/2050195660285391332","timestamp":"1777639680","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"1fe24863-8ce4-5662-ba5d-edc5c3178903","type":"url","category":"Network activity","to_ids":true,"value":"https://aruba-renwal-domain.kfoslemicoekd","comment":"https://x.com/AddressIntel/status/2050203612609970361","timestamp":"1777641606","distribution":"5"},{"uuid":"3cd7070c-36b7-5b2c-b2a4-4f59fc479eac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"43.1.1.1","comment":"https://x.com/harugasumi/status/2050216833681404140","timestamp":"1777644758","distribution":"5"},{"uuid":"e2db3e89-4247-5758-a79d-19905f300d7c","type":"url","category":"Network activity","to_ids":true,"value":"https://213.202.211.231","comment":"https://x.com/TeamDreier/status/2050220625063559286","timestamp":"1777645620","distribution":"5","Tag":[{"name":"Evilginx"}]},{"uuid":"c8c2e7bc-bc58-5e50-8428-8875bd3e9ea1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"213.202.211.231","comment":"https://x.com/TeamDreier/status/2050220625063559286","timestamp":"1777645620","distribution":"5","Tag":[{"name":"Evilginx"}]},{"uuid":"7b53435c-4090-5a6d-986b-595bee11f666","type":"domain","category":"Network activity","to_ids":true,"value":"api.drazyland.us","comment":"https://x.com/smica83/status/2050225617069633840","timestamp":"1777646820","distribution":"5"},{"uuid":"f28ece9a-b13d-57ce-82b8-3a7f0ccda56e","type":"url","category":"Network activity","to_ids":true,"value":"https://api.drazyland.us/cdn/java-7byA72.exe","comment":"https://x.com/smica83/status/2050225617069633840","timestamp":"1777646820","distribution":"5"},{"uuid":"1b01f28a-2a1b-55c2-ac45-4ae8885fb958","type":"url","category":"Network activity","to_ids":true,"value":"http://85.239.144.105/controlld","comment":"https://x.com/smica83/status/2050227237236961290","timestamp":"1777647180","distribution":"5"},{"uuid":"ef74b7b0-a903-5b12-aa6d-4d56b75f7e2e","type":"url","category":"Network activity","to_ids":true,"value":"http://176.65.144.30","comment":"https://x.com/smica83/status/2050227237236961290","timestamp":"1777647180","distribution":"5"},{"uuid":"e607369f-52a9-5f53-8240-69b5ec6d333a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.239.144.105","comment":"https://x.com/smica83/status/2050227237236961290","timestamp":"1777647180","distribution":"5"},{"uuid":"f0b03898-92e2-57d0-b18f-83651c1c9ff9","type":"ip-dst","category":"Network activity","to_ids":true,"value":"176.65.144.30","comment":"https://x.com/smica83/status/2050227237236961290","timestamp":"1777647180","distribution":"5"},{"uuid":"0665f6de-cc44-5417-a482-ea8c4f171109","type":"domain","category":"Network activity","to_ids":true,"value":"svnegociosappempresa.duckdns.org:5045","comment":"https://x.com/smica83/status/2050228268184354916","timestamp":"1777647480","distribution":"5"},{"uuid":"2d8440d9-220f-5b9f-af6b-2993730f319c","type":"url","category":"Network activity","to_ids":true,"value":"http://svnegociosappempresa.duckdns.org:5045","comment":"https://x.com/smica83/status/2050228268184354916","timestamp":"1777647480","distribution":"5"},{"uuid":"783ff74b-83ad-513a-9d2d-9e43168bc06a","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.controlpanel.sbs","comment":"https://x.com/mugu_reporter/status/2050230209748652254","timestamp":"1777647900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fb9956a8-f449-56d3-b762-41fe9446e981","type":"url","category":"Network activity","to_ids":true,"value":"http://ns1.controlpanel.sbs","comment":"https://x.com/mugu_reporter/status/2050230209748652254","timestamp":"1777647900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d6db145f-cb31-5b21-8bba-9922b4418359","type":"domain","category":"Network activity","to_ids":true,"value":"riverstonetrusts.icu","comment":"https://x.com/mugu_reporter/status/2050230209748652254","timestamp":"1777647900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b4d43444-cbec-5e01-9c53-7067f2e73301","type":"url","category":"Network activity","to_ids":true,"value":"http://riverstonetrusts.icu","comment":"https://x.com/mugu_reporter/status/2050230209748652254","timestamp":"1777647900","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f538f5c3-cb27-572c-9a7e-a8654670d6fc","type":"url","category":"Network activity","to_ids":true,"value":"http://67.102.7.106:41762/Mozi.m","comment":"https://x.com/sicehice/status/2050235883580743815","timestamp":"1777649280","distribution":"5"},{"uuid":"13ffab08-38e4-53d2-aa4b-f93ac6b3fd14","type":"ip-dst","category":"Network activity","to_ids":true,"value":"67.102.7.106","comment":"https://x.com/sicehice/status/2050235883580743815","timestamp":"1777649280","distribution":"5"},{"uuid":"a9c4307b-ea10-562a-8038-bb15841c335a","type":"url","category":"Network activity","to_ids":true,"value":"http://180.93.243.75:8080","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5a2b69b5-3882-5e89-95f7-c033fb26e38e","type":"url","category":"Network activity","to_ids":true,"value":"http://45.140.164.151:8080/IXhwpJOUk4/blue.drx","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"01df0067-1efa-5055-b95b-c40dfdbc3b9d","type":"url","category":"Network activity","to_ids":true,"value":"http://180.93.243.75:8080/ovh","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"44a88a11-36b0-5f81-bce2-60490550a9dd","type":"url","category":"Network activity","to_ids":true,"value":"https://raw.githubusercontent.com/nezhahq/scripts/main/agent/install.sh","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3ee4980b-9b4f-5039-8801-e4e1d2a4ab6c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"180.93.243.75","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"2abe3219-98cd-5325-a04b-970031f189de","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.140.164.151","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"33db9f77-c744-5d0e-9068-bbd20d24f12c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"68.183.190.253","comment":"https://x.com/hawktrace/status/2050248847629193233","timestamp":"1777652391","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"864cd766-c7f4-5801-bc52-73d4c5402779","type":"ip-dst","category":"Network activity","to_ids":true,"value":"37.49.229.75","comment":"https://x.com/PhishStats/status/2050253436386513153","timestamp":"1777653480","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c596b881-88b7-5cf1-ae5f-6bc57798127d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"79.7.152.162","comment":"https://x.com/4_n_0_n_1_3_3_7/status/2050254806078435423","timestamp":"1777653780","distribution":"5"},{"uuid":"568ffda2-293d-5a32-a105-a5659174831e","type":"domain","category":"Network activity","to_ids":true,"value":"fulcrumsec.net","comment":"https://x.com/fbgwls245/status/2050256021852164191","timestamp":"1777654102","distribution":"5"},{"uuid":"d9c90828-72fc-5d37-b864-a4e5a6f4a185","type":"url","category":"Network activity","to_ids":true,"value":"http://fulcrumsec.net","comment":"https://x.com/fbgwls245/status/2050256021852164191","timestamp":"1777654102","distribution":"5"},{"uuid":"bde86048-f722-5313-a156-6465d4763ec7","type":"domain","category":"Network activity","to_ids":true,"value":"4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion","comment":"https://x.com/fbgwls245/status/2050256021852164191","timestamp":"1777654102","distribution":"5"},{"uuid":"cb1583bf-f110-5f63-8e47-2126a048eda3","type":"url","category":"Network activity","to_ids":true,"value":"http://4e3p3in2bl67hxchuwza7qvnpe7pyeloyztr5fnh257fxkovfhappjyd.onion","comment":"https://x.com/fbgwls245/status/2050256021852164191","timestamp":"1777654102","distribution":"5"},{"uuid":"bc173d76-2884-5ea7-bf44-4ac85b76e56b","type":"domain","category":"Network activity","to_ids":true,"value":"drazygang.space","comment":"https://x.com/smica83/status/2050260261995528353","timestamp":"1777655113","distribution":"5"},{"uuid":"0b89efcf-6aa9-5ec5-8f72-b2ecc09bfce0","type":"url","category":"Network activity","to_ids":true,"value":"http://drazygang.space","comment":"https://x.com/smica83/status/2050260261995528353","timestamp":"1777655113","distribution":"5"},{"uuid":"1aa179fd-50b2-53e0-bcac-42add4e21862","type":"domain","category":"Network activity","to_ids":true,"value":"opt5ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"87557fb9-6725-50fc-8609-bc5ecfe30a29","type":"url","category":"Network activity","to_ids":true,"value":"http://opt5ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"af69701a-d8f2-5a01-a3b6-5c489c2d660f","type":"domain","category":"Network activity","to_ids":true,"value":"nids.opt5ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"37c92d7d-9e3c-5575-8929-ed95dd813526","type":"url","category":"Network activity","to_ids":true,"value":"http://nids.opt5ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"8c02807a-aff5-5e3b-aa4f-cb1165d79280","type":"domain","category":"Network activity","to_ids":true,"value":"opt17ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"9f3cabee-58b3-53b9-8a9f-5cb029ce0b72","type":"url","category":"Network activity","to_ids":true,"value":"http://opt17ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"0110313f-ae73-5dab-8b74-5ef4027ef5cb","type":"domain","category":"Network activity","to_ids":true,"value":"nids.opt17ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"23454d60-4d49-5fc6-96a8-7e4d8194afa4","type":"url","category":"Network activity","to_ids":true,"value":"http://nids.opt17ntesx.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"6ab1e0c4-ad38-5ac8-b571-9091b018fc0d","type":"domain","category":"Network activity","to_ids":true,"value":"htr6ies.dynv6.net","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"a2562798-1932-5491-a5cb-57b43c4a36be","type":"url","category":"Network activity","to_ids":true,"value":"http://htr6ies.dynv6.net","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"f083480a-7ce6-5b58-a1ad-5c1e26b9d61e","type":"domain","category":"Network activity","to_ids":true,"value":"htr19ies.dynuddns.com","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"840fd5bb-afa3-5fd7-a237-7b2cd3cdcbeb","type":"url","category":"Network activity","to_ids":true,"value":"http://htr19ies.dynuddns.com","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"05c543f0-1af0-5ee5-8876-1c18f24e9645","type":"domain","category":"Network activity","to_ids":true,"value":"itx26ps.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"716fba16-d20a-5e82-a7e2-a6703d67dd0b","type":"url","category":"Network activity","to_ids":true,"value":"http://itx26ps.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"587c4695-fc55-5f58-960e-b41e64067062","type":"domain","category":"Network activity","to_ids":true,"value":"nid-login.itx26ps.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"19a53879-d52e-5faf-8256-bd16d828aeac","type":"url","category":"Network activity","to_ids":true,"value":"http://nid-login.itx26ps.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bf4ce767-90dc-5857-99cb-4c2b529160ce","type":"domain","category":"Network activity","to_ids":true,"value":"trx16nts.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"961c11cb-fbf8-5fce-9d3b-c3c6c7a8d72e","type":"url","category":"Network activity","to_ids":true,"value":"http://trx16nts.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"f7ce43d9-3f8a-5b25-b62b-9aac5570b107","type":"domain","category":"Network activity","to_ids":true,"value":"nids.trx16nts.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"da0ea29b-61cf-5517-b71c-d8770e5f28b4","type":"url","category":"Network activity","to_ids":true,"value":"http://nids.trx16nts.dns.army","comment":"https://x.com/skocherhan/status/2050283519348261205","timestamp":"1777660620","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"f9dcc2eb-1063-55da-b564-a1a5260d7345","type":"domain","category":"Network activity","to_ids":true,"value":"connect-sncf.my","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e916160d-c193-5c34-9bf9-7b12a59877c2","type":"url","category":"Network activity","to_ids":true,"value":"http://connect-sncf.my","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4c2bf04f-f13a-50f1-99ef-c9c7249e25f5","type":"domain","category":"Network activity","to_ids":true,"value":"api.connect-sncf.my","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a2791012-f172-53c6-87e5-13722c4bfffd","type":"url","category":"Network activity","to_ids":true,"value":"http://api.connect-sncf.my","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"318fd33f-612f-5ba5-8c25-f8b491c6c6e4","type":"domain","category":"Network activity","to_ids":true,"value":"api.sncfconnect.cam","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8971f927-c2f8-5c9d-ba2c-c6a459ccc290","type":"url","category":"Network activity","to_ids":true,"value":"http://api.sncfconnect.cam","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"12b2aa5c-7c1e-51b1-a390-7c4de932280f","type":"domain","category":"Network activity","to_ids":true,"value":"connect-sncf.me","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"295cc224-7f89-53ff-ba58-cba81afd94f0","type":"url","category":"Network activity","to_ids":true,"value":"http://connect-sncf.me","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"07c7b3ea-b043-5d94-9fed-6006a648b11a","type":"domain","category":"Network activity","to_ids":true,"value":"api.connect-sncf.me","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"62181a16-590d-57ce-a893-5b81b2ae7777","type":"url","category":"Network activity","to_ids":true,"value":"http://api.connect-sncf.me","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"b65d0383-46d6-5dad-91bf-234a04142bf1","type":"domain","category":"Network activity","to_ids":true,"value":"connect-sncf.net","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e1b5c8d6-9c98-5235-8367-c8a3ac4b6ac2","type":"url","category":"Network activity","to_ids":true,"value":"http://connect-sncf.net","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7130c4dc-9fb6-5790-9ca1-936929540d56","type":"domain","category":"Network activity","to_ids":true,"value":"sncfconnect.cam","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d33e57c3-bde2-54fb-bddd-1ed570ae7dd8","type":"url","category":"Network activity","to_ids":true,"value":"http://sncfconnect.cam","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c86305ce-816f-56a9-8495-ce52b150aff1","type":"url","category":"Network activity","to_ids":true,"value":"http://91.92.21.11","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"6eaad95e-a0a9-54b5-8924-fd6005e118dd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"91.92.21.11","comment":"https://x.com/skocherhan/status/2050288025951781301","timestamp":"1777661700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f78678af-ecd0-5d43-880d-2de241e37267","type":"url","category":"Network activity","to_ids":true,"value":"http://ns1.contr","comment":"https://x.com/skocherhan/status/2050288190171312635","timestamp":"1777661771","distribution":"5"},{"uuid":"fa17d9e6-21a3-519e-92b8-c2e13b6e130b","type":"domain","category":"Network activity","to_ids":true,"value":"cloud-verificate.com","comment":"https://x.com/skocherhan/status/2050298678246551859","timestamp":"1777664272","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"f417b9c0-7993-5e11-aeee-ead03f4190aa","type":"url","category":"Network activity","to_ids":true,"value":"http://cloud-verificate.com","comment":"https://x.com/skocherhan/status/2050298678246551859","timestamp":"1777664272","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"8db6377a-4809-5535-aefb-abbaba8ecbd7","type":"md5","category":"Payload delivery","to_ids":true,"value":"f920747af86b9e42e38a530ff977b499","comment":"https://x.com/skocherhan/status/2050298678246551859","timestamp":"1777664272","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"982b4c61-ea3a-5a9c-9bf5-e822666e8dc3","type":"domain","category":"Network activity","to_ids":true,"value":"departure-protocol-pursuit-instructors.trycloudflare.com","comment":"https://x.com/smica83/status/2050316052337192967","timestamp":"1777668414","distribution":"5"},{"uuid":"a2448d5c-2002-52e2-bf52-9fed182a2219","type":"url","category":"Network activity","to_ids":true,"value":"http://departure-protocol-pursuit-instructors.trycloudflare.com","comment":"https://x.com/smica83/status/2050316052337192967","timestamp":"1777668414","distribution":"5"},{"uuid":"844be553-d1d8-59d8-95a4-db11a84ea001","type":"domain","category":"Network activity","to_ids":true,"value":"accommodate-barely-parents-wma.trycloudflare.com","comment":"https://x.com/smica83/status/2050317116532781453","timestamp":"1777668668","distribution":"5"},{"uuid":"87a99a0c-099e-5d12-a2b2-f0d7791644b3","type":"url","category":"Network activity","to_ids":true,"value":"http://accommodate-barely-parents-wma.trycloudflare.com","comment":"https://x.com/smica83/status/2050317116532781453","timestamp":"1777668668","distribution":"5"},{"uuid":"6ea7175b-feac-5a57-a1d6-853b02b01501","type":"domain","category":"Network activity","to_ids":true,"value":"gfdlqx.cn","comment":"https://x.com/masaomi346/status/2050445976452882515","timestamp":"1777699380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"a80e57af-3cfd-5acf-b951-c462c090cce0","type":"url","category":"Network activity","to_ids":true,"value":"https://gfdlqx.cn","comment":"https://x.com/masaomi346/status/2050445976452882515","timestamp":"1777699380","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1a7e6b50-6324-522e-a3ad-c08e6e8098ce","type":"ip-dst","category":"Network activity","to_ids":true,"value":"140.235.16.55","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4bf69ef5-f13c-5902-ad7b-c42f3d799aec","type":"ip-dst","category":"Network activity","to_ids":true,"value":"77.91.97.160","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"101118a3-b6a0-5a47-8d85-32980c28857d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"144.31.223.27","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"71a28287-d6bc-5e6f-826e-7df42bce079a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"2.26.252.12","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"47d65255-8efb-5b73-bdc3-31bb26a466e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"195.3.221.225","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"baad4d9d-a43b-5c7e-b4df-7d3d8732908f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"45.133.174.129","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6eec325f-f0f9-59dd-8fc1-ef674c631aab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.46.243.15","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"78f5682c-1cfa-51a0-98f9-ea501bd9fb92","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.46.243.99","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"7febcbe8-dcd2-5a42-96c1-05d9da961ec8","type":"ip-dst","category":"Network activity","to_ids":true,"value":"198.13.159.226","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"8032f172-e27b-5f10-925f-71f5eb4dd3ab","type":"ip-dst","category":"Network activity","to_ids":true,"value":"62.60.226.253","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"6d7b8372-a6fe-5574-971d-6418ae748cbc","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.137.252.158","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"d9243030-38bb-5096-b48d-ca8c1f3852ac","type":"ip-dst","category":"Network activity","to_ids":true,"value":"191.101.130.68","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"3ed479da-a0f1-5c99-aa80-e63afaa90b57","type":"ip-dst","category":"Network activity","to_ids":true,"value":"65.109.103.93","comment":"https://x.com/Fact_Finder03/status/2050466356064383201","timestamp":"1777704240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"4cec4706-ed7a-5802-a16b-d60396d8ef17","type":"domain","category":"Network activity","to_ids":true,"value":"backedupweb3quantumledger.com","comment":"https://x.com/skocherhan/status/2050472241624748218","timestamp":"1777705620","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d624dd8c-4e09-5715-97ad-5dd481fdb6f3","type":"url","category":"Network activity","to_ids":true,"value":"http://backedupweb3quantumledger.com","comment":"https://x.com/skocherhan/status/2050472241624748218","timestamp":"1777705620","distribution":"5","Tag":[{"name":"phishing"}]}]}}