[
    {
        "date": "2026-07-26 18:02:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "exessupdate.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2081440013955240390"
    },
    {
        "date": "2026-07-26 18:02:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://exessupdate.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2081440013955240390"
    },
    {
        "date": "2026-07-27 11:13:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "Government.dc.crsorgi.gov.in-crs.live",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2081699497915150741"
    },
    {
        "date": "2026-07-27 11:13:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://Government.dc.crsorgi.gov.in-crs.live#India#ThreatIntel#APT",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2081699497915150741"
    },
    {
        "date": "2026-07-27 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "tremorcrest.click",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2081801814488580442"
    },
    {
        "date": "2026-07-27 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://tremorcrest.click",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2081801814488580442"
    },
    {
        "date": "2026-07-28 09:41:00",
        "user": "Fact_Finder03",
        "type": "ip",
        "value": "217.217.97.111",
        "tags": [
            "#AdaptixC2"
        ],
        "tweet": "https://x.com/Fact_Finder03/status/2082038603861872694"
    },
    {
        "date": "2026-07-28 18:01:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "ecliptera.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2082164540410576948"
    },
    {
        "date": "2026-07-28 18:01:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ecliptera.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2082164540410576948"
    },
    {
        "date": "2026-07-30 02:01:00",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "103.81.116.10",
        "tags": [
            "#APT",
            "#DPRK"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2082647782142455969"
    },
    {
        "date": "2026-07-30 09:08:00",
        "user": "GenThreatLabs",
        "type": "domain",
        "value": "karmactive.com",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/GenThreatLabs/status/2082755246778953792"
    },
    {
        "date": "2026-07-30 09:08:00",
        "user": "GenThreatLabs",
        "type": "url",
        "value": "http://karmactive.com",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/GenThreatLabs/status/2082755246778953792"
    },
    {
        "date": "2026-07-30 09:08:00",
        "user": "GenThreatLabs",
        "type": "domain",
        "value": "enter-code-cdn.info",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/GenThreatLabs/status/2082755246778953792"
    },
    {
        "date": "2026-07-30 09:08:00",
        "user": "GenThreatLabs",
        "type": "url",
        "value": "http://enter-code-cdn.info",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/GenThreatLabs/status/2082755246778953792"
    },
    {
        "date": "2026-07-30 09:08:00",
        "user": "GenThreatLabs",
        "type": "url",
        "value": "http://enter-code-cdn.info/4a16eb65a58595fc",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/GenThreatLabs/status/2082755246778953792"
    },
    {
        "date": "2026-07-30 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://45.64.186.26",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2082888976302768453"
    },
    {
        "date": "2026-07-30 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "softwareupdatenews.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2082888976302768453"
    },
    {
        "date": "2026-07-30 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://softwareupdatenews.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2082888976302768453"
    },
    {
        "date": "2026-07-30 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "45.64.186.26",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2082888976302768453"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "domain",
        "value": "enter-code-cdn.info",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info/d0daffaad63609f1?_=1",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info/d0daffaad63609f1",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info/7z",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info/0dabb7343f4a179b30de698b474ee7ae3b21d17f78cb6086c47cf00140e630f7",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info/p/0dabb7343f4a179b30de698b474ee7ae3b21d17f78cb6086c47cf00140e630f7",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "url",
        "value": "http://enter-code-cdn.info",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-07-31 09:47:00",
        "user": "Malwarehunterr",
        "type": "sha256",
        "value": "26817725650583d99ca3e617a618dd75c0f71bd316b5761780b7361f5f824cad",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha",
            "#malware"
        ],
        "tweet": "https://x.com/Malwarehunterr/status/2083127371347964234"
    },
    {
        "date": "2026-08-02 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "certcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2083976136669974980"
    },
    {
        "date": "2026-08-02 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://certcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2083976136669974980"
    },
    {
        "date": "2026-08-02 18:03:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "fe7e7767c04c966b808a0fc9028370f4",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2083976930345251136"
    },
    {
        "date": "2026-08-02 18:03:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "344adcc4c82a5af1a8d15908923bb7fb",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2083976930345251136"
    },
    {
        "date": "2026-08-02 18:03:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "c383f9a39f6ae2a3172de37751f93217",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2083976930345251136"
    },
    {
        "date": "2026-08-02 18:03:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "840cc227dc8e0b1a0543559696ec775c",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2083976930345251136"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "cas-edu.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://cas-edu.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "china-robot.online",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://china-robot.online",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "china-robot.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://china-robot.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "eps-expo.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://eps-expo.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "gcl-power-cn.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://gcl-power-cn.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "humanoid-robot.online",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://humanoid-robot.online",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "ljewmte.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://ljewmte.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "domain",
        "value": "tickimmazy.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://tickimmazy.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 17:34:00",
        "user": "500mk500",
        "type": "url",
        "value": "http://wtechnote.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/500mk500/status/2084332045791072370"
    },
    {
        "date": "2026-08-03 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "rvxlan.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2084338523260510410"
    },
    {
        "date": "2026-08-03 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://rvxlan.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2084338523260510410"
    },
    {
        "date": "2026-08-04 07:40:00",
        "user": "Thisism23567356",
        "type": "url",
        "value": "http://204.194.50.231",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2084545110058877205"
    },
    {
        "date": "2026-08-04 07:40:00",
        "user": "Thisism23567356",
        "type": "ip",
        "value": "204.194.50.231",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2084545110058877205"
    },
    {
        "date": "2026-08-04 07:40:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "0574d29601bbc751f2664333288b75a8",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2084545110058877205"
    },
    {
        "date": "2026-08-04 07:40:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "3a092bdaa2079ff14c7acb4c72afc6e9",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2084545110058877205"
    },
    {
        "date": "2026-08-04 07:40:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "dd84762605e60ce9ed16857eca592a6a",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2084545110058877205"
    },
    {
        "date": "2026-08-04 08:05:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "2.ccew.cc",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2084551226763391417"
    },
    {
        "date": "2026-08-04 08:05:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://2.ccew.cc:6666",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2084551226763391417"
    },
    {
        "date": "2026-08-04 12:41:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "nid.elementfx.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084620818936729752"
    },
    {
        "date": "2026-08-04 12:41:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://nid.elementfx.com/indown.php?clicked=[userdomain]&who=[username]&what=xxx",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084620818936729752"
    },
    {
        "date": "2026-08-04 12:54:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "jaemoolding25863.elementfx.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084624041902813610"
    },
    {
        "date": "2026-08-04 12:54:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://jaemoolding25863.elementfx.com/indown.php?clicked=[userdomain]&who=[username]&what=xxx",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084624041902813610"
    },
    {
        "date": "2026-08-04 13:10:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "0wqs9jct2r.sportsontheweb.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084628134276825243"
    },
    {
        "date": "2026-08-04 13:10:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://0wqs9jct2r.sportsontheweb.net/peer.php?session=[username]&mac=term",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084628134276825243"
    },
    {
        "date": "2026-08-04 14:50:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://217.60.7.218",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084653107355791689"
    },
    {
        "date": "2026-08-04 14:50:00",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "217.60.7.218",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2084653107355791689"
    },
    {
        "date": "2026-08-04 14:54:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "omnbvcdsx.eu.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2084654318242705711"
    },
    {
        "date": "2026-08-04 14:54:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://omnbvcdsx.eu.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2084654318242705711"
    },
    {
        "date": "2026-08-04 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "boostgridz.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2084700913772724334"
    },
    {
        "date": "2026-08-04 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://boostgridz.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2084700913772724334"
    },
    {
        "date": "2026-08-05 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://103.30.76.194",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085063299511816542"
    },
    {
        "date": "2026-08-05 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "sowrtech.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085063299511816542"
    },
    {
        "date": "2026-08-05 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://sowrtech.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085063299511816542"
    },
    {
        "date": "2026-08-05 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "103.30.76.194",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085063299511816542"
    },
    {
        "date": "2026-08-06 15:18:00",
        "user": "joe4security",
        "type": "domain",
        "value": "defense-housing-authority.vagued.live",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/joe4security/status/2085384961570349091"
    },
    {
        "date": "2026-08-06 15:18:00",
        "user": "joe4security",
        "type": "url",
        "value": "http://defense-housing-authority.vagued.live",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/joe4security/status/2085384961570349091"
    },
    {
        "date": "2026-08-06 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "ntpack.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085425690456047898"
    },
    {
        "date": "2026-08-06 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://ntpack.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2085425690456047898"
    },
    {
        "date": "2026-08-06 18:05:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "ntpsetup.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2085426957714333877"
    },
    {
        "date": "2026-08-06 18:05:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ntpsetup.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2085426957714333877"
    },
    {
        "date": "2026-08-06 23:55:25",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://124.46.130.42/login.png",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2085515117983342884"
    },
    {
        "date": "2026-08-06 23:55:25",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://124.46.130.42/view.php?type=apple&seed=[MAC",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2085515117983342884"
    },
    {
        "date": "2026-08-06 23:55:25",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "124.46.130.42",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2085515117983342884"
    },
    {
        "date": "2026-08-07 00:02:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "f1bd5817678f498966f033f61b617dee5c8e81191901fea7c4a89146bfe91091",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2085516940597141987"
    },
    {
        "date": "2026-08-08 13:48:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "d03922043df8bc90b60236eb8c625e017151ca0f748e723745899d5e423cde6d",
        "tags": [
            "#APT",
            "#DPRK"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2086087096054460572"
    },
    {
        "date": "2026-08-08 13:52:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "fe97d502bdac69d80d2dfb2fb15065556906393d02008e00e1c9c1af59319331",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2086088124367880532"
    },
    {
        "date": "2026-08-09 15:16:36",
        "user": "etugenio",
        "type": "url",
        "value": "http://194.59.31.175",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/etugenio/status/2086471715765284982"
    },
    {
        "date": "2026-08-09 15:16:36",
        "user": "etugenio",
        "type": "ip",
        "value": "194.59.31.175",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/etugenio/status/2086471715765284982"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "domain",
        "value": "ns2.aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ns2.aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "domain",
        "value": "ns1.aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ns1.aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "domain",
        "value": "aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "url",
        "value": "http://aidsp.top",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "domain",
        "value": "controllerscompetiv5.com",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "url",
        "value": "http://controllerscompetiv5.com",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 15:38:23",
        "user": "skocherhan",
        "type": "url",
        "value": "http://194.59.31.175:4444",
        "tags": [
            "#AdaptixC2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086477198542647449"
    },
    {
        "date": "2026-08-09 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://205.186.64.197",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086512859568345175"
    },
    {
        "date": "2026-08-09 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "onekey-host.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086512859568345175"
    },
    {
        "date": "2026-08-09 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://onekey-host.com",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086512859568345175"
    },
    {
        "date": "2026-08-09 18:00:05",
        "user": "phatomcandle",
        "type": "ip",
        "value": "205.186.64.197",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086512859568345175"
    },
    {
        "date": "2026-08-10 18:00:04",
        "user": "phatomcandle",
        "type": "domain",
        "value": "zandrel.bond",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086875242698572276"
    },
    {
        "date": "2026-08-10 18:00:04",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://zandrel.bond",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2086875242698572276"
    },
    {
        "date": "2026-08-11 14:01:49",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://185.92.180.145",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2087177672917192714"
    },
    {
        "date": "2026-08-11 14:01:49",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "185.92.180.145",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2087177672917192714"
    },
    {
        "date": "2026-08-11 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "flewzxdumainuie.shop",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2087237631948337434"
    },
    {
        "date": "2026-08-11 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://flewzxdumainuie.shop",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2087237631948337434"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "domain",
        "value": "firstdominha.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "url",
        "value": "http://firstdominha.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "domain",
        "value": "dywkdfue.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "url",
        "value": "http://dywkdfue.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "domain",
        "value": "flewzzxsedn.mom",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "url",
        "value": "http://flewzzxsedn.mom",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "domain",
        "value": "onlygsiend.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "url",
        "value": "http://onlygsiend.shop",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "domain",
        "value": "oenontuedo.homes",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-11 18:06:05",
        "user": "skocherhan",
        "type": "url",
        "value": "http://oenontuedo.homes",
        "tags": [
            "#APT",
            "#C2",
            "#DPRK",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087239144615383154"
    },
    {
        "date": "2026-08-12 14:03:23",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "yajxu.mailhubsec.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2087540452740526583"
    },
    {
        "date": "2026-08-12 14:03:23",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://yajxu.mailhubsec.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2087540452740526583"
    },
    {
        "date": "2026-08-12 14:03:23",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "ff188b008bed743a8e899b0d69a4e1dc29e73a52016dce6ea0c65c53a5ec71a3",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2087540452740526583"
    },
    {
        "date": "2026-08-12 18:00:03",
        "user": "phatomcandle",
        "type": "domain",
        "value": "ntpchecksum.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2087600014411616593"
    },
    {
        "date": "2026-08-12 18:00:03",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://ntpchecksum.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2087600014411616593"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "domain",
        "value": "delta-bot.duckdns.org",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "url",
        "value": "http://delta-bot.duckdns.org",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "domain",
        "value": "packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "url",
        "value": "http://packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "url",
        "value": "http://78.153.149.56",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-12 18:06:12",
        "user": "skocherhan",
        "type": "ip",
        "value": "78.153.149.56",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2087601561539051601"
    },
    {
        "date": "2026-08-13 10:19:42",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "ed28bd3fa9435b6d0164b3d6257244f137a8b0639c78e708779481ce7adc1e06",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/nextronresearch/status/2087846549501931579"
    },
    {
        "date": "2026-08-13 10:19:42",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "c350977580504f29104a7d8966891b073380496d1aefd2fd426da66f0f398c64",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/nextronresearch/status/2087846549501931579"
    },
    {
        "date": "2026-08-13 10:19:42",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "5d332aa4a0d873b73dbadbd9b712391c778eb503c61767cd252823b0e98ad7b7",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/nextronresearch/status/2087846549501931579"
    },
    {
        "date": "2026-08-13 10:19:42",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "c166a17735f6528706a9755be9e220b7d5d6bd322900290a59185c0899fd6d0e",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/nextronresearch/status/2087846549501931579"
    },
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://217.60.7.218/aes.js",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "217.60.7.218",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:02:53",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "28e4e19d097d6c779516e8bf1ed3611c85f536c48b7f45a882224e31f6e1f94c",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088250005790576702"
    },
    {
        "date": "2026-08-14 13:19:47",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://194.26.192.66:8080",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088254258768720185"
    },
    {
        "date": "2026-08-14 13:19:47",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "194.26.192.66",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088254258768720185"
    },
    {
        "date": "2026-08-14 13:23:24",
        "user": "skocherhan",
        "type": "domain",
        "value": "relay.intexxxxmanifold.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2088255167879618717"
    },
    {
        "date": "2026-08-14 13:23:24",
        "user": "skocherhan",
        "type": "url",
        "value": "http://relay.intexxxxmanifold.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2088255167879618717"
    },
    {
        "date": "2026-08-14 13:53:48",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "spacemiddletechnology.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088262818076479933"
    },
    {
        "date": "2026-08-14 13:53:48",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://spacemiddletechnology.shop/front/res/bb.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2088262818076479933"
    },
    {
        "date": "2026-08-16 18:00:09",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://198.23.134.117",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089049589261443145"
    },
    {
        "date": "2026-08-16 18:00:09",
        "user": "phatomcandle",
        "type": "ip",
        "value": "198.23.134.117",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089049589261443145"
    },
    {
        "date": "2026-08-17 12:43:59",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "zxcvherfgh.scienceontheweb.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2089332413138899116"
    },
    {
        "date": "2026-08-17 12:43:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://zxcvherfgh.scienceontheweb.net/indown.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2089332413138899116"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "ntdc.gov.pk.rnicrosort.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "url",
        "value": "http://ntdc.gov.pk.rnicrosort.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "pakarmy.insyaallah2k25.workers.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "url",
        "value": "http://pakarmy.insyaallah2k25.workers.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089411971171209665"
    },
    {
        "date": "2026-08-17 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089411971171209665"
    },
    {
        "date": "2026-08-18 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089774346592202787"
    },
    {
        "date": "2026-08-18 18:00:05",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://www.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089774346592202787"
    },
    {
        "date": "2026-08-19 13:13:28",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "lkjhgb6yu.mywebcommunity.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090064605334937877"
    },
    {
        "date": "2026-08-19 13:13:28",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://lkjhgb6yu.mywebcommunity.org/setting.php?banana=[hostname]&apple=[username]&domado=fruit",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090064605334937877"
    },
    {
        "date": "2026-08-19 14:02:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://103.67.196.25//view.php?type=apple&seed=[",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090077067652321425"
    },
    {
        "date": "2026-08-19 14:02:59",
        "user": "byrne_emmy12099",
        "type": "ip",
        "value": "103.67.196.25",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090077067652321425"
    },
    {
        "date": "2026-08-21 22:41:06",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "dora0xyz.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090932231158268119"
    },
    {
        "date": "2026-08-21 22:41:06",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://dora0xyz.site/walmart/res/~",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090932231158268119"
    },
    {
        "date": "2026-08-23 14:18:59",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "tony.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2091530645600371044"
    },
    {
        "date": "2026-08-23 14:18:59",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://tony.stackluma.sbs/rooms/res/get-command.php?uid=[UID",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2091530645600371044"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "kids.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://kids.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "khuh.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://khuh.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "triple.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://triple.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "pas.coolnaruto.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://pas.coolnaruto.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "safe.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://safe.techteeth.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi3377634.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi3377634.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "talk.narutosasuke.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://talk.narutosasuke.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "shop.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://shop.stackluma.sbs",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "letitclean.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://letitclean.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "checkout.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://checkout.nexovanta.bond",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "mining.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://mining.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "investment.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://investment.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cart.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cart.cloudmora.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "bg.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://bg.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "backend.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://backend.bytecove.cyou",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "safe-document.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://safe-document.shop",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "backend.cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://backend.cubansyndicate.group",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "readermarks.xyz",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://readermarks.xyz",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "nid.naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://nid.naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "nid-naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://nid-naver.mainguardsec.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vpn.mihailgolban.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vpn.mihailgolban.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "byfconsultores.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://byfconsultores.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "play.softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://play.softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://softcube.fr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi399424.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi399424.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi360243.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://vmi360243.contaboserver.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "url",
        "value": "http://62.171.167.73",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 14:24:01",
        "user": "skocherhan",
        "type": "ip",
        "value": "62.171.167.73",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2091531911449493728"
    },
    {
        "date": "2026-08-23 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "k-cloud.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2091586296204624366"
    },
    {
        "date": "2026-08-23 18:00:07",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://k-cloud.auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2091586296204624366"
    }
]