[
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://217.60.7.218/aes.js",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "217.60.7.218",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "28e4e19d097d6c779516e8bf1ed3611c85f536c48b7f45a882224e31f6e1f94c",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:19:47",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://194.26.192.66:8080",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088254258768720185"
    },
    {
        "date": "2026-08-14 13:19:47",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "194.26.192.66",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088254258768720185"
    },
    {
        "date": "2026-08-14 13:23:24",
        "user": "skocherhan",
        "type": "domain",
        "value": "relay.intexxxxmanifold.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2088255167879618717"
    },
    {
        "date": "2026-08-14 13:23:24",
        "user": "skocherhan",
        "type": "url",
        "value": "http://relay.intexxxxmanifold.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2088255167879618717"
    },
    {
        "date": "2026-08-14 13:53:48",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "spacemiddletechnology.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088262818076479933"
    },
    {
        "date": "2026-08-14 13:53:48",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://spacemiddletechnology.shop/front/res/bb.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088262818076479933"
    },
    {
        "date": "2026-08-16 18:00:09",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://198.23.134.117",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089049589261443145"
    },
    {
        "date": "2026-08-16 18:00:09",
        "user": "phatomcandle",
        "type": "ip",
        "value": "198.23.134.117",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089049589261443145"
    },
    {
        "date": "2026-08-17 12:43:59",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "zxcvherfgh.scienceontheweb.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2089332413138899116"
    },
    {
        "date": "2026-08-17 12:43:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://zxcvherfgh.scienceontheweb.net/indown.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2089332413138899116"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "ntdc.gov.pk.rnicrosort.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "url",
        "value": "http://ntdc.gov.pk.rnicrosort.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "pakarmy.insyaallah2k25.workers.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "url",
        "value": "http://pakarmy.insyaallah2k25.workers.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089411971171209665"
    },
    {
        "date": "2026-08-17 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089411971171209665"
    },
    {
        "date": "2026-08-18 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089774346592202787"
    },
    {
        "date": "2026-08-18 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://www.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089774346592202787"
    },
    {
        "date": "2026-08-19 13:13:28",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "lkjhgb6yu.mywebcommunity.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090064605334937877"
    },
    {
        "date": "2026-08-19 13:13:28",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://lkjhgb6yu.mywebcommunity.org/setting.php?banana=[hostname]&apple=[username]&domado=fruit",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090064605334937877"
    },
    {
        "date": "2026-08-19 14:02:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://103.67.196.25//view.php?type=apple&seed=[",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090077067652321425"
    },
    {
        "date": "2026-08-19 14:02:59",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "103.67.196.25",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090077067652321425"
    },
    {
        "date": "2026-08-21 22:41:06",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "dora0xyz.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090932231158268119"
    },
    {
        "date": "2026-08-21 22:41:06",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://dora0xyz.site/walmart/res/~",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090932231158268119"
    },
    {
        "date": "2026-08-23 14:18:59",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "tony.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2091530645600371044"
    },
    {
        "date": "2026-08-23 14:18:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://tony.stackluma.sbs/rooms/res/get-command.php?uid=[UID",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2091530645600371044"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "kids.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://kids.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "khuh.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://khuh.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "triple.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://triple.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "pas.coolnaruto.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://pas.coolnaruto.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "safe.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://safe.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi3377634.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi3377634.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "talk.narutosasuke.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://talk.narutosasuke.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "shop.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://shop.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "letitclean.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://letitclean.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "checkout.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://checkout.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "mining.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://mining.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "investment.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://investment.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cart.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cart.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "bg.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://bg.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "backend.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://backend.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "safe-document.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://safe-document.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "backend.cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://backend.cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "readermarks.xyz",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://readermarks.xyz",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "nid.naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://nid.naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "nid-naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://nid-naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vpn.mihailgolban.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vpn.mihailgolban.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "byfconsultores.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://byfconsultores.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "play.softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://play.softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi399424.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi399424.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi360243.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi360243.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://62.171.167.73",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "ip",
        "value": "62.171.167.73",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "k-cloud.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2091586296204624366"
    },
    {
        "date": "2026-08-23 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://k-cloud.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2091586296204624366"
    },
    {
        "date": "2026-08-25 13:27:13",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "217.60.36.94",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2092242395845071141"
    },
    {
        "date": "2026-08-25 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "syncrank.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2092311071759765658"
    },
    {
        "date": "2026-08-25 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://syncrank.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2092311071759765658"
    },
    {
        "date": "2026-08-26 18:00:04",
        "user": "phatomcandle",
        "type": "domain",
        "value": "k-store.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2092673446228746334"
    },
    {
        "date": "2026-08-26 18:00:04",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://k-store.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2092673446228746334"
    },
    {
        "date": "2026-08-27 18:00:04",
        "user": "phatomcandle",
        "type": "domain",
        "value": "disclousre.cyou",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2093035835629482214"
    },
    {
        "date": "2026-08-27 18:00:04",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://disclousre.cyou",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2093035835629482214"
    },
    {
        "date": "2026-08-30 18:00:06",
        "user": "phatomcandle",
        "type": "domain",
        "value": "k-store.auth-accounts.dynu.org",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094123007358943281"
    },
    {
        "date": "2026-08-30 18:00:06",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://k-store.auth-accounts.dynu.org",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094123007358943281"
    },
    {
        "date": "2026-08-31 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "xylevia.today",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094485389524549636"
    },
    {
        "date": "2026-08-31 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://xylevia.today",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094485389524549636"
    },
    {
        "date": "2026-09-01 18:00:04",
        "user": "phatomcandle",
        "type": "domain",
        "value": "kakao-user.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094847773913067957"
    },
    {
        "date": "2026-09-01 18:00:04",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://kakao-user.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2094847773913067957"
    },
    {
        "date": "2026-09-02 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "velocty.cfd",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2095210173778583863"
    },
    {
        "date": "2026-09-02 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://velocty.cfd",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2095210173778583863"
    },
    {
        "date": "2026-09-03 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2095572552567669109"
    },
    {
        "date": "2026-09-03 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://www.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2095572552567669109"
    },
    {
        "date": "2026-09-07 10:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "lucidware.click",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2096901311593943527"
    },
    {
        "date": "2026-09-07 10:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://lucidware.click",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2096901311593943527"
    },
    {
        "date": "2026-09-08 10:00:03",
        "user": "phatomcandle",
        "type": "domain",
        "value": "for8service.net",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097263690961842296"
    },
    {
        "date": "2026-09-08 10:00:03",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://for8service.net",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097263690961842296"
    },
    {
        "date": "2026-09-09 10:00:03",
        "user": "phatomcandle",
        "type": "domain",
        "value": "k-cloud.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097626078621966355"
    },
    {
        "date": "2026-09-09 10:00:03",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://k-cloud.login-accounts.dynu.net",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097626078621966355"
    },
    {
        "date": "2026-09-10 10:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "signning.cloud",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097988472032346494"
    },
    {
        "date": "2026-09-10 10:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://signning.cloud",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2097988472032346494"
    }
]