https://tweetfeed.live TweetFeed collects Indicators of Compromise (IOCs) shared by the infosec community at Twitter. CC0 1.0 Public Domain - https://tweetfeed.live/tos/ https://tweetfeed.live/img/TweetFeed_card.png https://tweetfeed.live en Thu, 16 Jul 2026 13:15:29 +0000 15 https://x.com/phatomcandle/status/2077737009569808478 @phatomcandle | md5 | #APT Value: b19f080084f1a087c2b10e94fe78557f Tweet: https://x.com/phatomcandle/status/2077737009569808478 b19f080084f1a087c2b10e94fe78557f Thu, 16 Jul 2026 12:48:00 +0000 md5 #APT https://x.com/phatomcandle/status/2077737009569808478 @phatomcandle | md5 | #APT Value: ae610fc43f44509cf65750e870ecc915 Tweet: https://x.com/phatomcandle/status/2077737009569808478 ae610fc43f44509cf65750e870ecc915 Thu, 16 Jul 2026 12:48:00 +0000 md5 #APT https://x.com/phatomcandle/status/2077737009569808478 @phatomcandle | url | #APT Value: https://mofa-gov-bd.fetchdrives.info/f4fa5248/adobe-reader Tweet: https://x.com/phatomcandle/status/2077737009569808478 https://mofa-gov-bd.fetchdrives.info/f4fa5248/adobe-reader Thu, 16 Jul 2026 12:48:00 +0000 url #APT https://x.com/phatomcandle/status/2077737009569808478 @phatomcandle | domain | #APT Value: mofa-gov-bd.fetchdrives.info Tweet: https://x.com/phatomcandle/status/2077737009569808478 mofa-gov-bd.fetchdrives.info Thu, 16 Jul 2026 12:48:00 +0000 domain #APT https://x.com/smica83/status/2077735468049776710 @smica83 | sha256 | Value: d2b62eee5728ff226066619e52120810d010d149e7424eaabd15fbbaf7a64813 Tweet: https://x.com/smica83/status/2077735468049776710 d2b62eee5728ff226066619e52120810d010d149e7424eaabd15fbbaf7a64813 Thu, 16 Jul 2026 12:41:00 +0000 sha256 https://x.com/malwrhunterteam/status/2077733700544946623 @malwrhunterteam | ip | Value: 47.116.115.7 Tweet: https://x.com/malwrhunterteam/status/2077733700544946623 47.116.115.7 Thu, 16 Jul 2026 12:34:00 +0000 ip https://x.com/malwrhunterteam/status/2077733700544946623 @malwrhunterteam | url | Value: http://47.116.115.7 Tweet: https://x.com/malwrhunterteam/status/2077733700544946623 http://47.116.115.7 Thu, 16 Jul 2026 12:34:00 +0000 url https://x.com/James_inthe_box/status/2077732994375414130 @James_inthe_box | ip | #Remcos #opendir Value: 157.254.223.141 Tweet: https://x.com/James_inthe_box/status/2077732994375414130 157.254.223.141 Thu, 16 Jul 2026 12:32:00 +0000 ip #Remcos #opendir https://x.com/James_inthe_box/status/2077732994375414130 @James_inthe_box | url | #Remcos #opendir Value: http://157.254.223.141/25/ Tweet: https://x.com/James_inthe_box/status/2077732994375414130 http://157.254.223.141/25/ Thu, 16 Jul 2026 12:32:00 +0000 url #Remcos #opendir https://x.com/malwrhunterteam/status/2077718372486197256 @malwrhunterteam | ip | Value: 72.5.43.81 Tweet: https://x.com/malwrhunterteam/status/2077718372486197256 72.5.43.81 Thu, 16 Jul 2026 11:33:00 +0000 ip https://x.com/malwrhunterteam/status/2077718372486197256 @malwrhunterteam | url | Value: http://72.5.43.81 Tweet: https://x.com/malwrhunterteam/status/2077718372486197256 http://72.5.43.81 Thu, 16 Jul 2026 11:33:00 +0000 url https://x.com/dimitribest/status/2077715154628731308 @dimitribest | ip | Value: 54.39.43.117 Tweet: https://x.com/dimitribest/status/2077715154628731308 54.39.43.117 Thu, 16 Jul 2026 11:21:00 +0000 ip https://x.com/dimitribest/status/2077715154628731308 @dimitribest | url | Value: http://54.39.43.117:1224/api/checkStatus Tweet: https://x.com/dimitribest/status/2077715154628731308 http://54.39.43.117:1224/api/checkStatus Thu, 16 Jul 2026 11:21:00 +0000 url https://x.com/illegalFawn/status/2077707883504902426 @illegalFawn | md5 | #scam Value: 3c759aa6b0474f1d8ab83902ad76cfe6 Tweet: https://x.com/illegalFawn/status/2077707883504902426 3c759aa6b0474f1d8ab83902ad76cfe6 Thu, 16 Jul 2026 10:52:00 +0000 md5 #scam https://x.com/Now_on_VT/status/2077680073293865113 @Now_on_VT | sha256 | Value: ed2c4429cf27e19aa6881d86bc5b42c21470525564fc53be688b9b26c83db766 Tweet: https://x.com/Now_on_VT/status/2077680073293865113 ed2c4429cf27e19aa6881d86bc5b42c21470525564fc53be688b9b26c83db766 Thu, 16 Jul 2026 09:01:00 +0000 sha256 https://x.com/Fact_Finder03/status/2077678121432572389 @Fact_Finder03 | ip | #C2 Value: 159.198.32.215 Tweet: https://x.com/Fact_Finder03/status/2077678121432572389 159.198.32.215 Thu, 16 Jul 2026 08:54:00 +0000 ip #C2 https://x.com/Fact_Finder03/status/2077662518605123655 @Fact_Finder03 | ip | Value: 199.217.99.134 Tweet: https://x.com/Fact_Finder03/status/2077662518605123655 199.217.99.134 Thu, 16 Jul 2026 07:52:00 +0000 ip https://x.com/masaomi346/status/2077656579109957986 @masaomi346 | url | #phishing Value: https://usdpbank.com/login Tweet: https://x.com/masaomi346/status/2077656579109957986 https://usdpbank.com/login Thu, 16 Jul 2026 07:28:00 +0000 url #phishing https://x.com/masaomi346/status/2077656579109957986 @masaomi346 | domain | #phishing Value: usdpbank.com Tweet: https://x.com/masaomi346/status/2077656579109957986 usdpbank.com Thu, 16 Jul 2026 07:28:00 +0000 domain #phishing https://x.com/GroupIB/status/2077652969164571121 @GroupIB | url | #ClickFix Value: http://gsnc.eu:67 Tweet: https://x.com/GroupIB/status/2077652969164571121 http://gsnc.eu:67 Thu, 16 Jul 2026 07:14:00 +0000 url #ClickFix https://x.com/GroupIB/status/2077652969164571121 @GroupIB | domain | #ClickFix Value: gsnc.eu:67 Tweet: https://x.com/GroupIB/status/2077652969164571121 gsnc.eu:67 Thu, 16 Jul 2026 07:14:00 +0000 domain #ClickFix https://x.com/Fact_Finder03/status/2077646882869026949 @Fact_Finder03 | ip | #C2 Value: 129.121.91.245 Tweet: https://x.com/Fact_Finder03/status/2077646882869026949 129.121.91.245 Thu, 16 Jul 2026 06:49:00 +0000 ip #C2 https://x.com/Fact_Finder03/status/2077638555439161371 @Fact_Finder03 | ip | #C2 Value: 185.130.45.73 Tweet: https://x.com/Fact_Finder03/status/2077638555439161371 185.130.45.73 Thu, 16 Jul 2026 06:16:00 +0000 ip #C2 https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | url | #phishing Value: https://jre4.sw000hc13.cc/login Tweet: https://x.com/masaomi346/status/2077565315404427394 https://jre4.sw000hc13.cc/login Thu, 16 Jul 2026 01:25:00 +0000 url #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | domain | #phishing Value: jre4.sw000hc13.cc Tweet: https://x.com/masaomi346/status/2077565315404427394 jre4.sw000hc13.cc Thu, 16 Jul 2026 01:25:00 +0000 domain #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | url | #phishing Value: https://jre3.sw000hc13.cc/login Tweet: https://x.com/masaomi346/status/2077565315404427394 https://jre3.sw000hc13.cc/login Thu, 16 Jul 2026 01:25:00 +0000 url #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | domain | #phishing Value: jre3.sw000hc13.cc Tweet: https://x.com/masaomi346/status/2077565315404427394 jre3.sw000hc13.cc Thu, 16 Jul 2026 01:25:00 +0000 domain #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | url | #phishing Value: https://jre2.sw000hc13.cc/login Tweet: https://x.com/masaomi346/status/2077565315404427394 https://jre2.sw000hc13.cc/login Thu, 16 Jul 2026 01:25:00 +0000 url #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | domain | #phishing Value: jre2.sw000hc13.cc Tweet: https://x.com/masaomi346/status/2077565315404427394 jre2.sw000hc13.cc Thu, 16 Jul 2026 01:25:00 +0000 domain #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | url | #phishing Value: https://jre1.sw000hc13.cc/login Tweet: https://x.com/masaomi346/status/2077565315404427394 https://jre1.sw000hc13.cc/login Thu, 16 Jul 2026 01:25:00 +0000 url #phishing https://x.com/masaomi346/status/2077565315404427394 @masaomi346 | domain | #phishing Value: jre1.sw000hc13.cc Tweet: https://x.com/masaomi346/status/2077565315404427394 jre1.sw000hc13.cc Thu, 16 Jul 2026 01:25:00 +0000 domain #phishing