{"Event":{"uuid":"a7506a4c-ef3f-5453-b5af-baf471c80bd4","info":"TweetFeed IOCs (today window, refreshed every 15 minutes)","date":"2026-05-29","timestamp":"1780082132","threat_level_id":"4","analysis":"2","distribution":"3","published":true,"Orgc":{"name":"TweetFeed","uuid":"76a67249-f941-5bdb-925a-51045a921c1e"},"Tag":[{"name":"TweetFeed","colour":"#1DA1F2"},{"name":"type:OSINT","colour":"#004646"},{"name":"tlp:clear","colour":"#FFFFFF"}],"Attribute":[{"uuid":"39e71718-035f-52ab-ba68-a320a372989e","type":"domain","category":"Network activity","to_ids":true,"value":"bay-street-international-career-institu.webflow.io","comment":"https://x.com/urldna_bot/status/2060149170577482121","timestamp":"1780012800","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"79c87c50-e51b-5331-a4b5-6e25696d1fe1","type":"url","category":"Network activity","to_ids":true,"value":"https://bay-street-international-career-institu.webflow.io","comment":"https://x.com/urldna_bot/status/2060149170577482121","timestamp":"1780012800","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"545fac71-c407-5492-b57e-7f91d9f5ff0b","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.observer","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3d3b0f48-5e02-5cbb-93ed-7cf057753739","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.observer","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"5daf7f02-d064-5b36-927b-0059c6cbe65e","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.info","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"01dae2c6-7f49-5b1d-8887-0f28fde9005e","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.info","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3f0d9e6f-5a05-5dfa-b7a7-474cadba58ae","type":"domain","category":"Network activity","to_ids":true,"value":"u-short.net","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"98c05377-128c-5a5d-a876-1b77a679ae59","type":"url","category":"Network activity","to_ids":true,"value":"http://u-short.net","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3ca97f1a-410d-5577-87b6-fbf1f542f8dd","type":"domain","category":"Network activity","to_ids":true,"value":"urshort.live","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8b4ab99a-2a4f-54d8-a8b0-639e4ca18e51","type":"url","category":"Network activity","to_ids":true,"value":"http://urshort.live","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"fa39bdad-7527-5942-b496-69b1c2b2769e","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.company","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"8cf7051b-5818-5ec0-99c3-49ebd5b2e55c","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.company","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"d47f1196-2b78-5528-a71f-31d213cd79c6","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.today","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"dcd3add0-622a-52b4-8662-7c8bbc132401","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.today","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b0b79688-0576-542a-9249-120923fc5f60","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.com","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"7fbe5bfb-22a7-56fb-a33a-ec9174f782b9","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.com","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"b59c55d5-f7c2-54ff-bc47-379cadbe9833","type":"domain","category":"Network activity","to_ids":true,"value":"ushort.dev","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"3a9dcad5-89c5-54af-ae18-01cee2e31d71","type":"url","category":"Network activity","to_ids":true,"value":"http://ushort.dev","comment":"https://x.com/riper81/status/2060164428876951828","timestamp":"1780016400","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"53f60c2a-1b31-5b39-a149-d1195c86c1ba","type":"domain","category":"Network activity","to_ids":true,"value":"m7dhmwrggg3045bg0d0zuw55ybx.live","comment":"https://x.com/masaomi346/status/2060165506494284227","timestamp":"1780016700","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"21423331-1ca2-58f2-b2eb-289ce4c1a992","type":"url","category":"Network activity","to_ids":true,"value":"https://m7dhmwrggg3045bg0d0zuw55ybx.live","comment":"https://x.com/masaomi346/status/2060165506494284227","timestamp":"1780016700","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"a6af643c-e858-5db5-8415-57a11d8b2c77","type":"sha256","category":"Payload delivery","to_ids":true,"value":"5c80dcde0f7e0507a6ecccd462170a3da80a1c9c61f0a6e39f20e7d866467755","comment":"https://x.com/masaomi346/status/2060165506494284227","timestamp":"1780016700","distribution":"5","Tag":[{"name":"malware"}]},{"uuid":"94195de2-03b4-5ddf-a964-89dbb40d3ee2","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.2","comment":"https://x.com/mugu_reporter/status/2060174442530041961","timestamp":"1780018800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9de4048-6415-5d2e-bd8e-3973921239aa","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.5","comment":"https://x.com/mugu_reporter/status/2060174442530041961","timestamp":"1780018800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9c25a88e-6bfa-5aa6-81f8-361f60c1545e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.7","comment":"https://x.com/mugu_reporter/status/2060174442530041961","timestamp":"1780018800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d7c090ad-1a2a-51fb-a337-e2e3c400e663","type":"ip-dst","category":"Network activity","to_ids":true,"value":"163.61.188.9","comment":"https://x.com/mugu_reporter/status/2060174442530041961","timestamp":"1780018800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"780232bc-6bd9-52cf-abce-8bae62f202f5","type":"ip-dst","category":"Network activity","to_ids":true,"value":"167.235.14.117","comment":"https://x.com/mugu_reporter/status/2060174442530041961","timestamp":"1780018800","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"99121545-1de4-5f9f-b534-03d05ac61d38","type":"domain","category":"Network activity","to_ids":true,"value":"dga0-9+.org","comment":"https://x.com/stop_spammerz/status/2060178024482345403","timestamp":"1780019640","distribution":"5"},{"uuid":"b436635e-82ec-5861-9cc1-5dd03bcd0d92","type":"domain","category":"Network activity","to_ids":true,"value":"webmail.sfr-inc.com","comment":"https://x.com/urldna_bot/status/2060179354798207195","timestamp":"1780020000","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"482d0cf0-df86-5c3e-abac-eb77b970f90d","type":"url","category":"Network activity","to_ids":true,"value":"https://webmail.sfr-inc.com","comment":"https://x.com/urldna_bot/status/2060179354798207195","timestamp":"1780020000","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"1ae91d70-c4a2-598a-9ff7-e0393c23f4ca","type":"domain","category":"Network activity","to_ids":true,"value":"davebenson688.systeme.io","comment":"https://x.com/PhishStats/status/2060188246039052561","timestamp":"1780022100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"9956a534-9eaa-5a33-8f4e-4d6721928dea","type":"url","category":"Network activity","to_ids":true,"value":"https://davebenson688.systeme.io/ba0430ed","comment":"https://x.com/PhishStats/status/2060188246039052561","timestamp":"1780022100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e5938c8b-167c-5c98-84f4-f86d6c6746e1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"18.238.80.7","comment":"https://x.com/PhishStats/status/2060188246039052561","timestamp":"1780022100","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fee14e17-145d-5b64-9f2f-c1ade650a0c4","type":"domain","category":"Network activity","to_ids":true,"value":"zom-6ep.pages.dev","comment":"https://x.com/patialavii/status/2060198653751640208","timestamp":"1780024560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"53107380-8aab-5dd3-9f77-f0925aaf402a","type":"url","category":"Network activity","to_ids":true,"value":"https://zom-6ep.pages.dev","comment":"https://x.com/patialavii/status/2060198653751640208","timestamp":"1780024560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"f96d36fa-629f-557e-b59e-c487262c1b1a","type":"sha256","category":"Payload delivery","to_ids":true,"value":"b58460ae9b171c8d3bbf500c60b512bacaeca8c24140cac99ff8f2893036801e","comment":"https://x.com/patialavii/status/2060198653751640208","timestamp":"1780024560","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7ef0f0b1-1bb4-5b03-8f51-7cb1e78370b6","type":"domain","category":"Network activity","to_ids":true,"value":"thenrpod.com","comment":"https://x.com/masaomi346/status/2060204402192052732","timestamp":"1780025940","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"ad6d5cf6-3278-57f6-9fc3-e380b3968ea8","type":"url","category":"Network activity","to_ids":true,"value":"https://thenrpod.com/captcha/go/de13717b2b4ac77e8c591a280c5e4e9c","comment":"https://x.com/masaomi346/status/2060204402192052732","timestamp":"1780025940","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"7c52ca56-0f32-5d79-8e35-cc861b7a4ce2","type":"sha256","category":"Payload delivery","to_ids":true,"value":"a2dfc9a0c1e5135fe5afa3594d5eb8c89a6018f74a72f0a3b9052f781c783291","comment":"https://x.com/masaomi346/status/2060204402192052732","timestamp":"1780025940","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"007c47c0-c4b1-5301-91dc-170c595b8df9","type":"sha256","category":"Payload delivery","to_ids":true,"value":"28d74068861889948093f3aa90acf0fc2e29c9a9cc4324191ea6c701186bca12","comment":"https://x.com/tuckner/status/2060204238924366286","timestamp":"1780025940","distribution":"5"},{"uuid":"91f345d1-cd97-551c-91ae-09a886feb0a5","type":"domain","category":"Network activity","to_ids":true,"value":"ferduitiojunmer.weebly.com","comment":"https://x.com/urldna_bot/status/2060209573093380335","timestamp":"1780027200","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"8f8c6807-a8be-52e2-aaaa-b26d653a09ab","type":"url","category":"Network activity","to_ids":true,"value":"https://ferduitiojunmer.weebly.com","comment":"https://x.com/urldna_bot/status/2060209573093380335","timestamp":"1780027200","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"a219eeac-b5f3-59db-b713-c9f2a1a24d7f","type":"domain","category":"Network activity","to_ids":true,"value":"balbxl.eubka.com","comment":"https://x.com/masaomi346/status/2060214313252720731","timestamp":"1780028340","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"eb515bc4-6fe0-581f-976a-b7d0a888bb53","type":"url","category":"Network activity","to_ids":true,"value":"https://balbxl.eubka.com/SBI.apk","comment":"https://x.com/masaomi346/status/2060214313252720731","timestamp":"1780028340","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"5b1e9788-ea45-5fb2-936a-638a1b2b626e","type":"url","category":"Network activity","to_ids":true,"value":"http://185.254.99.243:5000","comment":"https://x.com/Fact_Finder03/status/2060215552971506146","timestamp":"1780028580","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"b3e7e709-0c34-57e4-8fd6-69080bd8e38e","type":"ip-dst","category":"Network activity","to_ids":true,"value":"185.254.99.243","comment":"https://x.com/Fact_Finder03/status/2060215552971506146","timestamp":"1780028580","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"2054bc39-c497-5c4e-861b-632e66280b87","type":"url","category":"Network activity","to_ids":true,"value":"http://102.220.88.4:88","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"fab44774-5287-5a79-a519-bf90f0d6f9f9","type":"domain","category":"Network activity","to_ids":true,"value":"btmob-rat.com","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"e9f54a33-8620-5b16-be38-8779f549fcac","type":"url","category":"Network activity","to_ids":true,"value":"http://btmob-rat.com","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"17a08abd-0086-5ec4-bc74-a179d78de8bc","type":"url","category":"Network activity","to_ids":true,"value":"http://64.89.161.92","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"d71368ee-e22e-55f9-ab18-97b39e305f00","type":"ip-dst","category":"Network activity","to_ids":true,"value":"102.220.88.4","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"67c8a345-7593-5c19-8474-a31c6db72e3a","type":"ip-dst","category":"Network activity","to_ids":true,"value":"64.89.161.92","comment":"https://x.com/Fact_Finder03/status/2060239608563343468","timestamp":"1780034340","distribution":"5","Tag":[{"name":"RAT"}]},{"uuid":"e0a43095-e6ef-51dc-94ce-9b3fc24a88f6","type":"domain","category":"Network activity","to_ids":true,"value":"dupest.weebly.com","comment":"https://x.com/urldna_bot/status/2060239757217497568","timestamp":"1780034400","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"153893b7-44fe-5718-97c1-5f32e4f699ae","type":"url","category":"Network activity","to_ids":true,"value":"https://dupest.weebly.com","comment":"https://x.com/urldna_bot/status/2060239757217497568","timestamp":"1780034400","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"580840a9-7dc1-565b-8c81-b26d51f2a116","type":"url","category":"Network activity","to_ids":true,"value":"http://46.247.109.103:8080","comment":"https://x.com/Fact_Finder03/status/2060247516872909179","timestamp":"1780036260","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"ee5054f1-f407-56dc-b8a5-ab4afe0d664d","type":"ip-dst","category":"Network activity","to_ids":true,"value":"46.247.109.103","comment":"https://x.com/Fact_Finder03/status/2060247516872909179","timestamp":"1780036260","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"0b857fe7-c30e-5149-949b-676880399c9c","type":"url","category":"Network activity","to_ids":true,"value":"http://158.220.99.91:8000","comment":"https://x.com/Fact_Finder03/status/2060252298333274224","timestamp":"1780037400","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"d63c0cb7-3141-5806-8887-f7613b4229a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"158.220.99.91","comment":"https://x.com/Fact_Finder03/status/2060252298333274224","timestamp":"1780037400","distribution":"5","Tag":[{"name":"C2"},{"name":"RAT"}]},{"uuid":"da089446-c5cf-536a-a30a-c4203ef611b2","type":"domain","category":"Network activity","to_ids":true,"value":"bmqobgextpnfj.top","comment":"https://x.com/masaomi346/status/2060260420829749579","timestamp":"1780039320","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"bc65f897-967d-5f20-bff1-fb85867281a6","type":"url","category":"Network activity","to_ids":true,"value":"https://bmqobgextpnfj.top","comment":"https://x.com/masaomi346/status/2060260420829749579","timestamp":"1780039320","distribution":"5","Tag":[{"name":"malware"},{"name":"phishing"}]},{"uuid":"9289cfaf-96b6-5138-9a1e-9a12d7ee8cef","type":"url","category":"Network activity","to_ids":true,"value":"https://github.com/darealmisterj/checkingsomething/tree/main","comment":"https://x.com/smica83/status/2060262570804511214","timestamp":"1780039800","distribution":"5"},{"uuid":"b5bea53f-0f85-5488-be04-5ec73944fe4c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"d38fc9196a43e3c8c82c9cb95aa72875dcbc6cef75bbaa3015e97bdcdb6de5fa","comment":"https://x.com/smica83/status/2060262570804511214","timestamp":"1780039800","distribution":"5"},{"uuid":"7a36b8fe-d269-5b03-8f79-13be3078b247","type":"url","category":"Network activity","to_ids":true,"value":"http://31.76.93.30/l4kc27/talkingaffect.ps1","comment":"https://x.com/smica83/status/2060267657090265516","timestamp":"1780041060","distribution":"5"},{"uuid":"079930ee-87ce-52bc-a1ff-aa6ecbc970cb","type":"ip-dst","category":"Network activity","to_ids":true,"value":"31.76.93.30","comment":"https://x.com/smica83/status/2060267657090265516","timestamp":"1780041060","distribution":"5"},{"uuid":"220e553a-e319-56ea-8c42-0653f55b6f67","type":"sha256","category":"Payload delivery","to_ids":true,"value":"6f6656d811bb431becff1eb75da158b45af5655ae4c0b74a3ea64ea3d258fc02","comment":"https://x.com/smica83/status/2060267657090265516","timestamp":"1780041060","distribution":"5"},{"uuid":"b6c6609c-f940-5e17-8a88-95ae201c4d44","type":"domain","category":"Network activity","to_ids":true,"value":"officedinisacombr.weebly.com","comment":"https://x.com/urldna_bot/status/2060269967690305711","timestamp":"1780041600","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"7a259726-93b8-5375-8396-342860efb3a8","type":"url","category":"Network activity","to_ids":true,"value":"https://officedinisacombr.weebly.com","comment":"https://x.com/urldna_bot/status/2060269967690305711","timestamp":"1780041600","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"16426b0b-6d8c-50be-a550-fada045333b1","type":"url","category":"Network activity","to_ids":true,"value":"http://151.243.18.111/login.php","comment":"https://x.com/malwrhunterteam/status/2060297882582855769","timestamp":"1780048260","distribution":"5"},{"uuid":"2bf1424d-d872-5f51-81ff-9f51f91b11a1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"151.243.18.111","comment":"https://x.com/malwrhunterteam/status/2060297882582855769","timestamp":"1780048260","distribution":"5"},{"uuid":"d19fa329-bb17-5e54-96f8-3234b9dad3de","type":"domain","category":"Network activity","to_ids":true,"value":"oob.moika.tech","comment":"https://x.com/marius_benthin/status/2060301530335441191","timestamp":"1780049100","distribution":"5"},{"uuid":"bb8f6254-88fe-56ad-ae15-6f1073cb8405","type":"url","category":"Network activity","to_ids":true,"value":"http://oob.moika.tech","comment":"https://x.com/marius_benthin/status/2060301530335441191","timestamp":"1780049100","distribution":"5"},{"uuid":"600515b4-e020-51bc-af03-8be6e8013ec1","type":"sha256","category":"Payload delivery","to_ids":true,"value":"de1a5798cd3a75093abf7cec04a304b3d784ffb862a66b9967950f56955e152a","comment":"https://x.com/marius_benthin/status/2060301530335441191","timestamp":"1780049100","distribution":"5"},{"uuid":"49f1f95f-038a-514d-9fd2-c97469e2b4cf","type":"url","category":"Network activity","to_ids":true,"value":"http://170.205.37.154:8000","comment":"https://x.com/Fact_Finder03/status/2060320156635861305","timestamp":"1780053540","distribution":"5"},{"uuid":"68bdfcf4-6be0-5048-8b82-757e135ba27c","type":"ip-dst","category":"Network activity","to_ids":true,"value":"170.205.37.154","comment":"https://x.com/Fact_Finder03/status/2060320156635861305","timestamp":"1780053540","distribution":"5"},{"uuid":"e19f442e-cdec-5399-a9f5-03d181b27441","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/d-m1-1","comment":"https://x.com/suyog41/status/2060326138275299646","timestamp":"1780054980","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"54368e53-05bc-554a-abc0-46f3aafe0449","type":"url","category":"Network activity","to_ids":true,"value":"http://github.com/t1-26l1","comment":"https://x.com/suyog41/status/2060326138275299646","timestamp":"1780054980","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"cb5dd6c0-9adc-5864-b76a-e6691664883e","type":"md5","category":"Payload delivery","to_ids":true,"value":"a5c93979cce587620202bbdaad15e264","comment":"https://x.com/suyog41/status/2060326138275299646","timestamp":"1780054980","distribution":"5","Tag":[{"name":"stealer"}]},{"uuid":"df32a776-87eb-5ed3-8508-bb143334cd15","type":"domain","category":"Network activity","to_ids":true,"value":"mettamaxklogin.gitbook.io","comment":"https://x.com/urldna_bot/status/2060330350450987048","timestamp":"1780056000","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"38ced416-1b01-5ae1-bbd1-509f4a899caa","type":"url","category":"Network activity","to_ids":true,"value":"https://mettamaxklogin.gitbook.io/us/","comment":"https://x.com/urldna_bot/status/2060330350450987048","timestamp":"1780056000","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"f4199d06-fd43-598d-bd73-1e8f22919970","type":"ip-dst","category":"Network activity","to_ids":true,"value":"85.11.167.99","comment":"https://x.com/Fact_Finder03/status/2060331319469408386","timestamp":"1780056240","distribution":"5","Tag":[{"name":"C2"}]},{"uuid":"51149b2f-906a-5dbb-bcef-c7b2f2cb2059","type":"url","category":"Network activity","to_ids":true,"value":"http://139.162.182.252:8080","comment":"https://x.com/HackingLZ/status/2060334446708924742","timestamp":"1780056960","distribution":"5"},{"uuid":"fee8cf87-ecd0-5abc-b230-20a2e04b34b1","type":"ip-dst","category":"Network activity","to_ids":true,"value":"139.162.182.252","comment":"https://x.com/HackingLZ/status/2060334446708924742","timestamp":"1780056960","distribution":"5"},{"uuid":"71cd5289-3101-5259-8264-0b42ee6e35a2","type":"domain","category":"Network activity","to_ids":true,"value":"greezupdto.info","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"ad2ca2a5-bea8-56f3-b0a3-1ced39b37197","type":"url","category":"Network activity","to_ids":true,"value":"http://greezupdto.info","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"65d2f671-67ae-573d-b867-c5924cafdb5e","type":"domain","category":"Network activity","to_ids":true,"value":"shadoworkz.info","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"199b80f8-0d65-54e9-becb-b888136fedd0","type":"url","category":"Network activity","to_ids":true,"value":"http://shadoworkz.info","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"9ff7059a-7ba2-5935-a633-16f8d3e58b50","type":"md5","category":"Payload delivery","to_ids":true,"value":"54715f6d79797cadc8ccbcd8e8bd22d0","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"cd65860b-211d-5468-9887-c5aa3febe2f9","type":"md5","category":"Payload delivery","to_ids":true,"value":"2b420e55cacf0a6cdb04f13e6c16c79b","comment":"https://x.com/suyog41/status/2060337183874302019","timestamp":"1780057620","distribution":"5","Tag":[{"name":"APT"}]},{"uuid":"48f91dc4-d1f3-5087-8c29-7e0ecb650ccf","type":"url","category":"Network activity","to_ids":true,"value":"http://31.76.93.30/uuc4/cattopsail.ps1","comment":"https://x.com/smica83/status/2060339201120358445","timestamp":"1780058100","distribution":"5"},{"uuid":"5ed4b9e1-8814-588e-add6-e42af557d7d3","type":"url","category":"Network activity","to_ids":true,"value":"http://31.76.93.30/uuc4/hazelnutforte.ps1","comment":"https://x.com/smica83/status/2060339201120358445","timestamp":"1780058100","distribution":"5"},{"uuid":"70b4e44e-837b-53c7-b735-02fe887c334a","type":"sha256","category":"Payload delivery","to_ids":true,"value":"0274c4b51541381c299a387909e49db5bfc8cafe18e2ddbf2b26eb5dad73cd85","comment":"https://x.com/smica83/status/2060339201120358445","timestamp":"1780058100","distribution":"5"},{"uuid":"24c6055c-bd9e-5f16-910c-cf4a447a7120","type":"domain","category":"Network activity","to_ids":true,"value":"simpletskmn.com","comment":"https://x.com/smica83/status/2060340513580986577","timestamp":"1780058400","distribution":"5"},{"uuid":"fac979a5-ae61-5c0c-8403-c2bd06dc1f90","type":"url","category":"Network activity","to_ids":true,"value":"http://simpletskmn.com","comment":"https://x.com/smica83/status/2060340513580986577","timestamp":"1780058400","distribution":"5"},{"uuid":"c70644bb-a26c-5453-96ca-3c8375dfd80f","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e03366927f0fca9ed37d17d0884810a128e9c936fd55d3b642e74a9a8c076219","comment":"https://x.com/smica83/status/2060340513580986577","timestamp":"1780058400","distribution":"5"},{"uuid":"c9e0b1fa-a644-55df-b156-7ad5353928af","type":"domain","category":"Network activity","to_ids":true,"value":"bubblekip.info","comment":"https://x.com/smica83/status/2060341816415649951","timestamp":"1780058700","distribution":"5"},{"uuid":"03609a60-79c1-5a6d-bbf5-ddf383ff162f","type":"url","category":"Network activity","to_ids":true,"value":"http://bubblekip.info","comment":"https://x.com/smica83/status/2060341816415649951","timestamp":"1780058700","distribution":"5"},{"uuid":"dc965ceb-4e03-5dd8-bd42-20d2472d2134","type":"sha256","category":"Payload delivery","to_ids":true,"value":"1df1a23a24dff84ba55dadcfa90cc3df7f7ace6dde69987d125c07474c8a1388","comment":"https://x.com/smica83/status/2060341816415649951","timestamp":"1780058700","distribution":"5"},{"uuid":"db8a555d-6abe-5908-995b-e54d619c6b6e","type":"url","category":"Network activity","to_ids":true,"value":"http://194.87.57.81","comment":"https://x.com/smica83/status/2060342896532787526","timestamp":"1780059000","distribution":"5"},{"uuid":"d25eb733-b3e7-599f-8a9b-d9ddc34729fd","type":"ip-dst","category":"Network activity","to_ids":true,"value":"194.87.57.81","comment":"https://x.com/smica83/status/2060342896532787526","timestamp":"1780059000","distribution":"5"},{"uuid":"1ca737fc-30cc-52ea-8b07-7d4d5f8002d8","type":"sha256","category":"Payload delivery","to_ids":true,"value":"2f579f4f37cc12910e5142645a136ed79d60f2ad8313a89be84ebe7dbdcbe552","comment":"https://x.com/smica83/status/2060342896532787526","timestamp":"1780059000","distribution":"5"},{"uuid":"47fc99a1-df6f-52d6-b141-f5cccc1fa0c6","type":"domain","category":"Network activity","to_ids":true,"value":"netflxteam-resubscrib.help","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"b3748a99-50b6-5ed3-addb-06a095c4bf94","type":"url","category":"Network activity","to_ids":true,"value":"https://netflxteam-resubscrib.help/st/test.ps1","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"3a7650d5-a184-523b-b15e-05dedc4116a3","type":"url","category":"Network activity","to_ids":true,"value":"http://38.55.75.68:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"b2ce88bd-1f2d-5850-a67c-dadd19bf6b9c","type":"url","category":"Network activity","to_ids":true,"value":"https://netflxteam-resubscrib.help/st/statment.txt","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"fac58241-5ebd-5230-a1ae-c23e2765118f","type":"ip-dst","category":"Network activity","to_ids":true,"value":"38.55.75.68","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"ac5a01c6-439f-576b-8490-41d533db903c","type":"sha256","category":"Payload delivery","to_ids":true,"value":"e072e113a0f1681610085c6d9ec6c156d7de1b853fe935b78c2f8484d3a3fba3","comment":"https://x.com/smica83/status/2060343839420830141","timestamp":"1780059180","distribution":"5"},{"uuid":"a027a83d-afa1-5f24-9707-674857b7a59c","type":"domain","category":"Network activity","to_ids":true,"value":"notairs.com","comment":"https://x.com/smica83/status/2060344954577199168","timestamp":"1780059480","distribution":"5"},{"uuid":"583af75d-2ccd-540b-923b-040572aa664c","type":"url","category":"Network activity","to_ids":true,"value":"http://notairs.com","comment":"https://x.com/smica83/status/2060344954577199168","timestamp":"1780059480","distribution":"5"},{"uuid":"775a1d50-1a42-54ec-9193-390ab5f465ab","type":"sha256","category":"Payload delivery","to_ids":true,"value":"b6be096ff404b726dcc090a2bc462841afd712ec9b3c745aab24a95f943a2a03","comment":"https://x.com/smica83/status/2060344954577199168","timestamp":"1780059480","distribution":"5"},{"uuid":"eeb6d671-8466-54bb-94c2-874c05377ca8","type":"domain","category":"Network activity","to_ids":true,"value":"irsnota.com","comment":"https://x.com/smica83/status/2060345363328909426","timestamp":"1780059540","distribution":"5"},{"uuid":"f6fcc7c3-9400-5bb3-8cd7-545c59a8c6bf","type":"url","category":"Network activity","to_ids":true,"value":"http://irsnota.com","comment":"https://x.com/smica83/status/2060345363328909426","timestamp":"1780059540","distribution":"5"},{"uuid":"903a95ee-4f81-5fbb-920a-4c7d4cbbcd6b","type":"domain","category":"Network activity","to_ids":true,"value":"hexfiles.top","comment":"https://x.com/smica83/status/2060346327075082360","timestamp":"1780059780","distribution":"5"},{"uuid":"d9ddc850-1196-50f5-8906-e0d0d2a7f74b","type":"url","category":"Network activity","to_ids":true,"value":"https://hexfiles.top/d/270ed203a388","comment":"https://x.com/smica83/status/2060346327075082360","timestamp":"1780059780","distribution":"5"},{"uuid":"2761a8f7-29eb-51f0-abcf-7b3fd6bd1542","type":"url","category":"Network activity","to_ids":true,"value":"https://hexfiles.top/d/df0a2bd973a1","comment":"https://x.com/smica83/status/2060346327075082360","timestamp":"1780059780","distribution":"5"},{"uuid":"57ea0381-c062-542b-952d-053b38e2b39d","type":"sha256","category":"Payload delivery","to_ids":true,"value":"13d748226193314c6dbb551cb4ce79150bdf5d430945ef9f75ac8269211530a4","comment":"https://x.com/smica83/status/2060346327075082360","timestamp":"1780059780","distribution":"5"},{"uuid":"105f4a85-0273-553c-9f57-7280933e69d6","type":"domain","category":"Network activity","to_ids":true,"value":"flosync.io","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4dc8caf6-e9a1-5e64-8481-a2d335f60368","type":"url","category":"Network activity","to_ids":true,"value":"http://flosync.io","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7b02768f-b8c5-5a65-8f45-4a20c19f6e00","type":"domain","category":"Network activity","to_ids":true,"value":"cofraviles.com","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7622d7e4-224a-5c95-9dd1-0542a05780ae","type":"url","category":"Network activity","to_ids":true,"value":"http://cofraviles.com//cgi-bin/waggers","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"1b7b2a9a-a3d8-5e15-87f7-76c3fa68abdd","type":"domain","category":"Network activity","to_ids":true,"value":"fc263848.link.flosync.io","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e44495e-4188-57a9-9a17-d28a568499e7","type":"url","category":"Network activity","to_ids":true,"value":"http://fc263848.link.flosync.io","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"018ca199-c0ac-5161-a863-6cbf0a659743","type":"domain","category":"Network activity","to_ids":true,"value":"f70abfd6.map.travelicious.com.pk","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7e6b3420-0b9a-500a-94dc-7e07e4e4983b","type":"url","category":"Network activity","to_ids":true,"value":"http://f70abfd6.map.travelicious.com.pk","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7610d03c-b7ed-55b2-a3b5-a78c11777dba","type":"domain","category":"Network activity","to_ids":true,"value":"fatel97407-okcpress-com-s-account.workers.dev","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7a70e120-d4a5-5314-9c20-f01d5df3d1b6","type":"url","category":"Network activity","to_ids":true,"value":"http://fatel97407-okcpress-com-s-account.workers.dev","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7d769623-0539-50b0-b7bc-dd05197ebedb","type":"domain","category":"Network activity","to_ids":true,"value":"authsign-verifyemail.workers.dev","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"3ef3026d-c56c-5b80-975c-5eb0e750fc9e","type":"url","category":"Network activity","to_ids":true,"value":"http://authsign-verifyemail.workers.dev","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"72859101-40a0-5c15-842f-4d7e4f7420fa","type":"domain","category":"Network activity","to_ids":true,"value":"axiscaremn.com","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c9b3882f-d8a3-53fa-9ea7-8d19113543f8","type":"url","category":"Network activity","to_ids":true,"value":"http://axiscaremn.com/439fh92/","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"bd0edfff-08ea-529e-8287-2e1e7c3ee842","type":"domain","category":"Network activity","to_ids":true,"value":"polisradio.net","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"417eb6fc-0e1b-5721-96d7-4752b4242dbb","type":"url","category":"Network activity","to_ids":true,"value":"http://polisradio.net/wp-admin/wagger","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"c74cec10-39f1-5730-99f4-9f9833910286","type":"domain","category":"Network activity","to_ids":true,"value":"ketoannhs.com","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"cc6b777c-31d9-5a75-a1af-d95b8dc2299d","type":"url","category":"Network activity","to_ids":true,"value":"http://ketoannhs.com/wp-admin/rese/","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"066069e8-f603-5930-aa01-b93f494d283c","type":"domain","category":"Network activity","to_ids":true,"value":"gs-stellaalpina.com","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"130a6d26-10c5-52ea-839e-677c9d861c50","type":"url","category":"Network activity","to_ids":true,"value":"http://gs-stellaalpina.com/wp-admin/arinola/","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d1e231f0-fff3-5afe-9e57-2f5b558fc344","type":"domain","category":"Network activity","to_ids":true,"value":"pohana.de","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"8c5da4ad-22c8-5fc0-baf8-03de676f1b22","type":"url","category":"Network activity","to_ids":true,"value":"http://pohana.de/wp-admin/herc","comment":"https://x.com/Kb4Threatlabs/status/2060346253071073733","timestamp":"1780059780","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"45e379be-1dd5-55e5-ad18-721c0b2e661c","type":"domain","category":"Network activity","to_ids":true,"value":"xn--zb0b93v.weebly.com","comment":"https://x.com/urldna_bot/status/2060360556737970543","timestamp":"1780063200","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"021685cc-a76e-5f21-924d-abe31555144c","type":"url","category":"Network activity","to_ids":true,"value":"https://xn--zb0b93v.weebly.com","comment":"https://x.com/urldna_bot/status/2060360556737970543","timestamp":"1780063200","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"5aad2c3c-5e8b-5af7-a6ec-435d32e5742b","type":"domain","category":"Network activity","to_ids":true,"value":"slndcdnclaud.beer","comment":"https://x.com/CyberIL/status/2060365226856370603","timestamp":"1780064280","distribution":"5"},{"uuid":"70b9cc81-6760-59a1-be7c-7010db63bbbd","type":"url","category":"Network activity","to_ids":true,"value":"http://slndcdnclaud.beer","comment":"https://x.com/CyberIL/status/2060365226856370603","timestamp":"1780064280","distribution":"5"},{"uuid":"070edb5b-3e12-5600-8ffb-cd1dcfca1bca","type":"sha256","category":"Payload delivery","to_ids":true,"value":"8145a7920d69ee42e12533f5ef8d5e1168cd574db3586cb30af82f54c66d2f1d","comment":"https://x.com/L0Psec/status/2060365751073075271","timestamp":"1780064400","distribution":"5"},{"uuid":"39ef2b95-154f-505e-b08e-0a3261924c73","type":"domain","category":"Network activity","to_ids":true,"value":"boostamber7.com","comment":"https://x.com/L0Psec/status/2060365757012164981","timestamp":"1780064400","distribution":"5"},{"uuid":"67d733cc-4584-52bc-8a1b-9384d53ffe85","type":"url","category":"Network activity","to_ids":true,"value":"http://boostamber7.com","comment":"https://x.com/L0Psec/status/2060365757012164981","timestamp":"1780064400","distribution":"5"},{"uuid":"b6f1752a-a372-5ea4-95c8-61af499c1f5b","type":"domain","category":"Network activity","to_ids":true,"value":"blueprintmesh.com","comment":"https://x.com/L0Psec/status/2060365757012164981","timestamp":"1780064400","distribution":"5"},{"uuid":"0c4eb970-140b-5e26-b28a-15a514382185","type":"url","category":"Network activity","to_ids":true,"value":"http://blueprintmesh.com","comment":"https://x.com/L0Psec/status/2060365757012164981","timestamp":"1780064400","distribution":"5"},{"uuid":"8efaa6ff-4c89-50e0-acf1-2dbe7053264b","type":"sha256","category":"Payload delivery","to_ids":true,"value":"402eb798bba7b4cb44dc5aa098743b8d6395f9c57220737ce931639cc5cc1eff","comment":"https://x.com/L0Psec/status/2060365757012164981","timestamp":"1780064400","distribution":"5"},{"uuid":"01a84c80-4d58-5426-aed1-2291d75c6511","type":"domain","category":"Network activity","to_ids":true,"value":"ns1.domainnamens.com","comment":"https://x.com/TeamDreier/status/2060377653895373256","timestamp":"1780067280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"67375a59-d872-521f-9dc1-2b0db1a4951d","type":"url","category":"Network activity","to_ids":true,"value":"http://ns1.domainnamens.com","comment":"https://x.com/TeamDreier/status/2060377653895373256","timestamp":"1780067280","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"d0c7bcb6-b71b-508a-89cf-72fc913a9b78","type":"domain","category":"Network activity","to_ids":true,"value":"soportetuexperto-orange-es.webflow.io","comment":"https://x.com/urldna_bot/status/2060390754636186079","timestamp":"1780070400","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"60da7b20-bae2-5487-8e2a-abd328352ad6","type":"url","category":"Network activity","to_ids":true,"value":"https://soportetuexperto-orange-es.webflow.io","comment":"https://x.com/urldna_bot/status/2060390754636186079","timestamp":"1780070400","distribution":"5","Tag":[{"name":"phishing"},{"name":"scam"}]},{"uuid":"fabd4448-4ff3-5cd8-84d8-bb844b0eb8c8","type":"sha256","category":"Payload delivery","to_ids":true,"value":"61da5fd1cbfea2f8b18e0fb1722c82d82fa0291985d788edb5c7c9ee2f1f1d1e","comment":"https://x.com/akudryk007/status/2060404979743994138","timestamp":"1780073760","distribution":"5","Tag":[{"name":"malware"},{"name":"ransomware"}]},{"uuid":"eff8c40c-8d46-50d1-835e-48a133c54c89","type":"domain","category":"Network activity","to_ids":true,"value":"workspaceviewer.com","comment":"https://x.com/patialavii/status/2060416552948887895","timestamp":"1780076520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"0bd64786-2746-5c52-a41c-516ad61bfadb","type":"url","category":"Network activity","to_ids":true,"value":"https://workspaceviewer.com/ftx/page.html","comment":"https://x.com/patialavii/status/2060416552948887895","timestamp":"1780076520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"82902394-afdf-5ffb-aa18-cc53cdb2b2f1","type":"domain","category":"Network activity","to_ids":true,"value":"pub-ab1bb580d3434929a2d068c06669ddb2.r2.dev","comment":"https://x.com/patialavii/status/2060416552948887895","timestamp":"1780076520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"7cacdc4f-6e77-5a6f-bab5-5a767e6b55c2","type":"url","category":"Network activity","to_ids":true,"value":"https://pub-ab1bb580d3434929a2d068c06669ddb2.r2.dev/setup_DocusignInstall.msi","comment":"https://x.com/patialavii/status/2060416552948887895","timestamp":"1780076520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"fdcc2f31-802f-5abd-bdac-2c7abef975de","type":"sha256","category":"Payload delivery","to_ids":true,"value":"1efd83aeebd71f5c6e6ac28e6d1637ba866399e63b0f3360b1c386a917b5d4ae","comment":"https://x.com/patialavii/status/2060416552948887895","timestamp":"1780076520","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"34a0e01b-5b9a-58dc-abbb-5818d348b2d7","type":"url","category":"Network activity","to_ids":true,"value":"http://15.204.230.53","comment":"https://x.com/skocherhan/status/2060429927397105903","timestamp":"1780079700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"4aa9aea3-270b-5f2a-ae30-504caa9226e4","type":"ip-dst","category":"Network activity","to_ids":true,"value":"15.204.230.53","comment":"https://x.com/skocherhan/status/2060429927397105903","timestamp":"1780079700","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"e0a1f7cc-2e47-56a2-aa15-242c0993c0c3","type":"domain","category":"Network activity","to_ids":true,"value":"kr-edoc.xubi.org","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"43832ec3-9282-5342-ac00-a8728479ad0e","type":"url","category":"Network activity","to_ids":true,"value":"http://kr-edoc.xubi.org","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"36f7ea3b-7afe-5254-a35f-584a88ab2d84","type":"domain","category":"Network activity","to_ids":true,"value":"nid.kr-edoc.xubi.org","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"c1071d60-8977-5a39-95ac-363d877b4f58","type":"url","category":"Network activity","to_ids":true,"value":"http://nid.kr-edoc.xubi.org","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"e8b8798f-7ee2-5b04-911b-fa098630af75","type":"domain","category":"Network activity","to_ids":true,"value":"access.edoc.korea-app.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"3a07aff0-458c-511a-9c1c-5cfced1a32ed","type":"url","category":"Network activity","to_ids":true,"value":"http://access.edoc.korea-app.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bfc76d8e-b944-5f3d-9fe8-d1439d9ab2e7","type":"domain","category":"Network activity","to_ids":true,"value":"jfzb.coupang.dns.navy","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"cb394bec-5512-538c-8d2d-8edd747bb449","type":"url","category":"Network activity","to_ids":true,"value":"http://jfzb.coupang.dns.navy","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"453490e2-ee31-5ece-b14a-23fa3fcbbabd","type":"domain","category":"Network activity","to_ids":true,"value":"dmf.ips-cert.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"64c91fa7-3e9c-5676-8c09-5d45bf90dc6a","type":"url","category":"Network activity","to_ids":true,"value":"http://dmf.ips-cert.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"90623e3c-6176-5603-83c3-ec15df805718","type":"domain","category":"Network activity","to_ids":true,"value":"view.ips-nifty.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"e856e2e2-cdcd-538e-90d6-63a76b904af6","type":"url","category":"Network activity","to_ids":true,"value":"http://view.ips-nifty.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"26f619ad-9b5a-5bfa-bf93-2c9957e89664","type":"domain","category":"Network activity","to_ids":true,"value":"cp10523.epost-kr.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"aa055a85-4230-5378-92bc-7f90e945080f","type":"url","category":"Network activity","to_ids":true,"value":"http://cp10523.epost-kr.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"b24f0c1f-3931-53ee-8632-a83e48f759ea","type":"domain","category":"Network activity","to_ids":true,"value":"xpo.coupang.dns.navy","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"9fc9a27b-59a5-5586-a61f-88ce07054ad8","type":"url","category":"Network activity","to_ids":true,"value":"http://xpo.coupang.dns.navy","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"2e1dd712-1342-503e-aaf1-603f3267fda3","type":"domain","category":"Network activity","to_ids":true,"value":"htax-login.nts-kr.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"bb98a655-a69a-57f6-9ebb-478995a3599e","type":"url","category":"Network activity","to_ids":true,"value":"http://htax-login.nts-kr.dns.army","comment":"https://x.com/skocherhan/status/2060432300375150977","timestamp":"1780080300","distribution":"5","Tag":[{"name":"DPRK"},{"name":"Kimsuky"}]},{"uuid":"f61a1749-98f9-5833-b8c6-9bb373a54565","type":"domain","category":"Network activity","to_ids":true,"value":"usdt916.com","comment":"https://x.com/skocherhan/status/2060434204626747769","timestamp":"1780080720","distribution":"5","Tag":[{"name":"phishing"}]},{"uuid":"235e678e-56e4-5c98-b7ef-0e5cd6df3bd9","type":"url","category":"Network activity","to_ids":true,"value":"http://usdt916.com","comment":"https://x.com/skocherhan/status/2060434204626747769","timestamp":"1780080720","distribution":"5","Tag":[{"name":"phishing"}]}]}}