[ { "date": "2026-05-31 10:55:00", "user": "Fact_Finder03", "type": "url", "value": "http://178.105.37.131", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2061038770401812790" }, { "date": "2026-05-31 10:55:00", "user": "Fact_Finder03", "type": "ip", "value": "178.105.37.131", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2061038770401812790" }, { "date": "2026-05-31 11:31:00", "user": "Fact_Finder03", "type": "domain", "value": "dxhook.lol", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061047790201901378" }, { "date": "2026-05-31 11:31:00", "user": "Fact_Finder03", "type": "url", "value": "http://dxhook.lol", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061047790201901378" }, { "date": "2026-05-31 11:31:00", "user": "Fact_Finder03", "type": "url", "value": "http://172.67.212.14", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061047790201901378" }, { "date": "2026-05-31 12:10:00", "user": "Fact_Finder03", "type": "ip", "value": "2.26.53.56", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2061057604693217643" }, { "date": "2026-06-01 11:26:00", "user": "Fact_Finder03", "type": "ip", "value": "167.17.68.7", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061409135590326673" }, { "date": "2026-06-01 11:32:00", "user": "Fact_Finder03", "type": "ip", "value": "212.8.251.148", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061410494146334937" }, { "date": "2026-06-01 15:47:00", "user": "Fact_Finder03", "type": "url", "value": "http://64.90.12.202:5000", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061474833284887017" }, { "date": "2026-06-01 15:47:00", "user": "Fact_Finder03", "type": "ip", "value": "64.90.12.202", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2061474833284887017" }, { "date": "2026-06-01 18:00:00", "user": "phatomcandle", "type": "domain", "value": "nid-naverbzb.ddnsking.com", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061508091292823680" }, { "date": "2026-06-01 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://nid-naverbzb.ddnsking.com", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061508091292823680" }, { "date": "2026-06-01 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://27.102.137.150", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061508091292823680" }, { "date": "2026-06-01 18:00:00", "user": "phatomcandle", "type": "ip", "value": "27.102.137.150", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061508091292823680" }, { "date": "2026-06-02 08:48:00", "user": "Fact_Finder03", "type": "ip", "value": "80.91.79.189", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2061731618809880922" }, { "date": "2026-06-02 18:00:00", "user": "phatomcandle", "type": "domain", "value": "nid-naverqpo.servegame.com", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061870478818738211" }, { "date": "2026-06-02 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://nid-naverqpo.servegame.com", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061870478818738211" }, { "date": "2026-06-02 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://27.102.137.150", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061870478818738211" }, { "date": "2026-06-02 18:00:00", "user": "phatomcandle", "type": "ip", "value": "27.102.137.150", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2061870478818738211" }, { "date": "2026-06-03 11:48:00", "user": "etugenio", "type": "url", "value": "http://173.254.14.78", "tags": [ "#C2", "#Supershell", "#malware" ], "tweet": "https://x.com/etugenio/status/2062139399509336110" }, { "date": "2026-06-03 11:48:00", "user": "etugenio", "type": "ip", "value": "173.254.14.78", "tags": [ "#C2", "#Supershell", "#malware" ], "tweet": "https://x.com/etugenio/status/2062139399509336110" }, { "date": "2026-06-04 05:10:00", "user": "Fact_Finder03", "type": "url", "value": "http://85.192.38.178", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2062401574589313463" }, { "date": "2026-06-04 05:10:00", "user": "Fact_Finder03", "type": "ip", "value": "85.192.38.178", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2062401574589313463" }, { "date": "2026-06-04 05:30:00", "user": "Fact_Finder03", "type": "ip", "value": "209.99.186.176", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2062406492699935023" }, { "date": "2026-06-04 05:41:00", "user": "Fact_Finder03", "type": "ip", "value": "192.151.146.82", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2062409260991181104" }, { "date": "2026-06-04 14:06:00", "user": "Fact_Finder03", "type": "url", "value": "http://124.222.145.250:9080", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2062536447731925359" }, { "date": "2026-06-04 14:06:00", "user": "Fact_Finder03", "type": "ip", "value": "124.222.145.250", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2062536447731925359" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "domain", "value": "cloud-dash.xyz", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "url", "value": "http://cloud-dash.xyz", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "domain", "value": "cdn-telemetry-relaynn.online", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "url", "value": "http://cdn-telemetry-relaynn.online", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "ip", "value": "185.246.190.217", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "01aa278b07b58dc46c84bd0b1b5c8e9ee4e62ea0bf7a695862444af32e87f1fd", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "0851beaccaa81aaec0a1df819b05f26a002feba0ce7bfeb6de376d60ea4c6668", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "6adcc5eac3a3c4ec11b7c3093bd7af109db76b15a1d3c5d68d5ceba8fe6a7a96", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "806208644b10490204f2587be049f5563c88f8870b4db6aa79eb9b1b1bd5e04b", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "4193d5501148bf876a0d045bbd757a3b1f8f7d71c143780601ec5cd853a9bd35", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "bf967db4628e8b8d733353a4cc70858e18997a4f7c755da8cca55e52c03f8ce4", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "0108e2149537ec3b80f5fde7dfe0282f7d2c0f7cdbe06f5256ae83d0d5c754e3", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "87981f68e6b2838f8ed4a03ecd8d6acbd14e08057c3c51ff2090b31b3089e5e1", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "97d6b1019d3c3f06416c1a87ce77a11a10050cf8807c374e5557380c0b036544", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "30633e062e3f2d7a996b29e670914c1f52a237a76903fc0e982a5ac8f7febd53", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "a0b3c399336d9c5c580ac7eda19b4cc80557e4a004ff3d64f86d29a8e463b5ce", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "2175fdeeeabb327f4ec7b842763d0b06246c5016f39dc3b3744fab32e779d93f", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "61b5e012c8500e0bcbe89ec9adf93e3efdc409a621daff45c8b66e8a02ad9df2", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "b13c41823f7d690622202e5d2385465b125a7ccbca563909642da916ba49942e", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "f66088b710cb5266272ea7de50606ddc8c79e0ec3bd216f5c7b5221523a96112", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "99bfaa5007d78c2c1ce78008eef57f2883e03fabcb512fe487a705d119d47e4d", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "3570bcc724d692a10ba557cc5bbd5f9c337606c76cb116bd1c675f7eddab95d1", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-04 16:25:00", "user": "SansLimit3", "type": "sha256", "value": "b3a60a0b7301da4d741d4a2d778720724bab6b34d288bba70e945f4f1a3cef0f", "tags": [ "#C2", "#ClickFix" ], "tweet": "https://x.com/SansLimit3/status/2062571354994467229" }, { "date": "2026-06-05 06:09:00", "user": "Fact_Finder03", "type": "ip", "value": "185.181.11.117", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2062778820739146164" }, { "date": "2026-06-05 06:09:00", "user": "Fact_Finder03", "type": "sha256", "value": "64b3713f3ea9bd3a28cbb094d7aaaf2e554925394210eeb579c79250670d2c42", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2062778820739146164" }, { "date": "2026-06-05 06:09:00", "user": "Fact_Finder03", "type": "sha256", "value": "9acd87765564916acfe5f486984dcce2b04b7a49d9f482b01afa7a65ac91b8b6", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2062778820739146164" }, { "date": "2026-06-05 10:06:00", "user": "etugenio", "type": "ip", "value": "185.246.190.217", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2062838372142321924" }, { "date": "2026-06-05 11:51:00", "user": "Fact_Finder03", "type": "ip", "value": "161.97.158.147", "tags": [ "#C2", "#Pegasus" ], "tweet": "https://x.com/Fact_Finder03/status/2062864952625594786" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://46.226.166.45", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://66.78.40.107", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://45.61.136.7", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://199.91.220.216", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://146.19.254.84", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://94.26.90.100", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://199.217.99.189", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://199.91.220.142", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://23.227.196.107", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://2.26.119.58", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://144.31.236.42", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://144.31.236.41", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "prod.ms-telemetry-gateway-us.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://prod.ms-telemetry-gateway-us.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "ms-telemetry-gateway-us.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://ms-telemetry-gateway-us.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "aviaflightsbest.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://aviaflightsbest.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://www.aviaflightsbest.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "annaionovna.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://annaionovna.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "landmas.info", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://www.landmas.info", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "dakatawebstick.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://dakatawebstick.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "ashpaltlonpro.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://ashpaltlonpro.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "biteatits.surf", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://biteatits.surf", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "diaonline.website", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://diaonline.website", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "et-crareturn.ca", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://et-crareturn.ca", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "admiralkolchak.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://admiralkolchak.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "domain", "value": "lavrentiyberia.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "url", "value": "http://lavrentiyberia.com", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "46.226.166.45", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "66.78.40.107", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "45.61.136.7", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "199.91.220.216", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "146.19.254.84", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "94.26.90.100", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "199.217.99.189", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "199.91.220.142", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "23.227.196.107", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "2.26.119.58", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "144.31.236.42", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "ip", "value": "144.31.236.41", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "sha256", "value": "bbcc6c5249d8e8f9d52e031fabb38a42469b57526f997fb06483581e360fe3a0", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-07 08:32:00", "user": "skocherhan", "type": "sha256", "value": "cbd018a884e5314f5fb1cebf973012d7c420c6d0f633aeda37dfeff3cd739e61", "tags": [ "#APT", "#C2" ], "tweet": "https://x.com/skocherhan/status/2063539578980417973" }, { "date": "2026-06-10 16:33:00", "user": "_IMalihi_", "type": "url", "value": "http://161.248.87.10:18888", "tags": [ "#C2", "#CobaltStrike" ], "tweet": "https://x.com/_IMalihi_/status/2064747807320252780" }, { "date": "2026-06-10 16:33:00", "user": "_IMalihi_", "type": "ip", "value": "161.248.87.10", "tags": [ "#C2", "#CobaltStrike" ], "tweet": "https://x.com/_IMalihi_/status/2064747807320252780" }, { "date": "2026-06-10 16:51:00", "user": "Fact_Finder03", "type": "ip", "value": "146.19.213.198", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2059900480319561918" }, { "date": "2026-06-11 07:48:00", "user": "Fact_Finder03", "type": "ip", "value": "38.60.224.210", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2064978075104997570" }, { "date": "2026-06-11 08:30:00", "user": "Fact_Finder03", "type": "ip", "value": "204.10.194.239", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2064988506645201384" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "domain", "value": "gatuso.duckdns.org", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "url", "value": "http://gatuso.duckdns.org", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "url", "value": "http://100.56.12.144:6606", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "url", "value": "http://18.216.200.48:5111", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "ip", "value": "100.56.12.144", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-11 19:36:00", "user": "skocherhan", "type": "ip", "value": "18.216.200.48", "tags": [ "#APT", "#AsyncRAT", "#C2", "#Xworm", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065156199666921726" }, { "date": "2026-06-12 05:25:00", "user": "Fact_Finder03", "type": "ip", "value": "74.50.120.6", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2065304470955925710" }, { "date": "2026-06-12 05:41:00", "user": "Fact_Finder03", "type": "ip", "value": "142.93.123.221", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2065308363932512687" }, { "date": "2026-06-12 06:21:00", "user": "Fact_Finder03", "type": "ip", "value": "206.206.78.39", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2065318430274920891" }, { "date": "2026-06-12 06:21:00", "user": "Fact_Finder03", "type": "sha256", "value": "bb44f380c940739395a23a0154ca6aec6782e68aa31c3e6853e49333eeff40d9", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2065318430274920891" }, { "date": "2026-06-12 06:33:00", "user": "Fact_Finder03", "type": "ip", "value": "167.172.10.118", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2065321450228392274" }, { "date": "2026-06-12 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://98.92.188.200", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2065494359676694673" }, { "date": "2026-06-12 18:00:00", "user": "phatomcandle", "type": "ip", "value": "98.92.188.200", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2065494359676694673" }, { "date": "2026-06-13 03:26:00", "user": "skocherhan", "type": "ip", "value": "206.206.78.39", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/skocherhan/status/2065636787649724546" }, { "date": "2026-06-13 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://8.222.192.153", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2065856746191761817" }, { "date": "2026-06-13 18:00:00", "user": "phatomcandle", "type": "ip", "value": "8.222.192.153", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2065856746191761817" }, { "date": "2026-06-13 18:14:00", "user": "skocherhan", "type": "md5", "value": "0f384ec874171f57d331ef68f9d9d90e", "tags": [ "#C2", "#CobaltStrike", "#Havoc", "#malware" ], "tweet": "https://x.com/skocherhan/status/2065860494880088347" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "passedt.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://passedt.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "frozetk.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://frozetk.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "familbi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://familbi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "sinkeli.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://sinkeli.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "granddsd.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://granddsd.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "pitchgb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://pitchgb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "feathqz.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://feathqz.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "answebi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://answebi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "idealvs.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://idealvs.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "wilheah.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://wilheah.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "montgqd.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://montgqd.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "hardsmi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://hardsmi.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "castrkq.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://castrkq.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "genusim.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://genusim.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "seasoem.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://seasoem.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "mistjlep.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://mistjlep.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "balvlqts.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://balvlqts.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "straigxo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://straigxo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "honceybl.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://honceybl.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "pantofr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://pantofr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "privahtc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://privahtc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "razefti.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://razefti.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "consuus.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://consuus.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "weekfoc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://weekfoc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "domain", "value": "diplokb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://diplokb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "url", "value": "http://2.27.5.219", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:36:00", "user": "skocherhan", "type": "ip", "value": "2.27.5.219", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065911091750957163" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "pricelou.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://pricelou.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "bahaisda.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://bahaisda.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "maloneyr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://maloneyr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "trotskxt.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://trotskxt.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "brakyfaw.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://brakyfaw.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "attrakc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://attrakc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "strainug.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://strainug.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "analipr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://analipr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "hustjonr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://hustjonr.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "mexzicaj.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://mexzicaj.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "lovesozp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://lovesozp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "heavywbp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://heavywbp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "oncolonb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://oncolonb.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "psychozc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://psychozc.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "famiszp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://famiszp.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "milnleny.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://milnleny.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "perfecpl.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://perfecpl.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "fourdigs.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://fourdigs.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "genxetia.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://genxetia.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "leypuuq.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://leypuuq.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "tramoqj.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://tramoqj.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "elgccyx.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://elgccyx.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "brechfo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://brechfo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "deternx.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://deternx.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "carytui.vu", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://carytui.vu", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "tangmwp.club", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://tangmwp.club", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "cudbweeo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://cudbweeo.cyou", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "domain", "value": "pomflgf.vu", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://pomflgf.vu", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "url", "value": "http://64.89.160.194", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-13 21:42:00", "user": "skocherhan", "type": "ip", "value": "64.89.160.194", "tags": [ "#C2", "#Lumma" ], "tweet": "https://x.com/skocherhan/status/2065912682809848121" }, { "date": "2026-06-14 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://45.152.243.170", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2066219136569757752" }, { "date": "2026-06-14 18:00:00", "user": "phatomcandle", "type": "ip", "value": "45.152.243.170", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2066219136569757752" }, { "date": "2026-06-15 06:22:00", "user": "etugenio", "type": "url", "value": "http://112.213.124.132", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2066406081044062327" }, { "date": "2026-06-15 06:22:00", "user": "etugenio", "type": "ip", "value": "112.213.124.132", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2066406081044062327" }, { "date": "2026-06-15 06:48:00", "user": "Fact_Finder03", "type": "ip", "value": "45.144.222.126", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2066412486069571893" }, { "date": "2026-06-15 07:29:00", "user": "Fact_Finder03", "type": "ip", "value": "41.216.188.213", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2066422706682105997" }, { "date": "2026-06-15 08:40:00", "user": "etugenio", "type": "url", "value": "https://49.232.4.71", "tags": [ "#C2", "#CobaltStrike", "#malware" ], "tweet": "https://x.com/etugenio/status/2066440762737217575" }, { "date": "2026-06-15 08:40:00", "user": "etugenio", "type": "url", "value": "http://49.232.4.71", "tags": [ "#C2", "#CobaltStrike", "#malware" ], "tweet": "https://x.com/etugenio/status/2066440762737217575" }, { "date": "2026-06-15 08:40:00", "user": "etugenio", "type": "ip", "value": "49.232.4.71", "tags": [ "#C2", "#CobaltStrike", "#malware" ], "tweet": "https://x.com/etugenio/status/2066440762737217575" }, { "date": "2026-06-15 15:25:00", "user": "volrant136", "type": "domain", "value": "ptnrmat.xyz", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2066542631711343042" }, { "date": "2026-06-15 15:25:00", "user": "volrant136", "type": "url", "value": "http://ptnrmat.xyz", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2066542631711343042" }, { "date": "2026-06-15 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://172.193.180.150", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2066581520794649077" }, { "date": "2026-06-15 18:00:00", "user": "phatomcandle", "type": "ip", "value": "172.193.180.150", "tags": [ "#C2", "#Havoc", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2066581520794649077" }, { "date": "2026-06-16 05:53:00", "user": "Fact_Finder03", "type": "ip", "value": "157.173.203.13", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2066761141737697504" }, { "date": "2026-06-16 06:30:00", "user": "Fact_Finder03", "type": "ip", "value": "107.189.20.42", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2066770247907152329" }, { "date": "2026-06-16 07:06:00", "user": "Fact_Finder03", "type": "ip", "value": "190.102.41.231", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2066779322959196592" }, { "date": "2026-06-16 15:26:00", "user": "etugenio", "type": "ip", "value": "152.32.138.15", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2066905168642212154" }, { "date": "2026-06-17 03:47:00", "user": "Fact_Finder03", "type": "ip", "value": "104.251.180.168", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2067091644969877977" }, { "date": "2026-06-17 04:41:00", "user": "Fact_Finder03", "type": "ip", "value": "64.188.72.114", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2067105203820880237" }, { "date": "2026-06-17 07:58:00", "user": "etugenio", "type": "url", "value": "http://85.239.155.68", "tags": [ "#C2", "#Dcrat", "#malware" ], "tweet": "https://x.com/etugenio/status/2067154914455732287" }, { "date": "2026-06-17 07:58:00", "user": "etugenio", "type": "ip", "value": "85.239.155.68", "tags": [ "#C2", "#Dcrat", "#malware" ], "tweet": "https://x.com/etugenio/status/2067154914455732287" }, { "date": "2026-06-17 07:58:00", "user": "etugenio", "type": "md5", "value": "85c1f3ccbfad1126ef14b372ba38cbf8", "tags": [ "#C2", "#Dcrat", "#malware" ], "tweet": "https://x.com/etugenio/status/2067154914455732287" }, { "date": "2026-06-17 07:58:00", "user": "etugenio", "type": "sha256", "value": "06edb1c24b98cd2c92f0e652ed4e4700d6a76f2299debed06f54c3ffa18ee5d9", "tags": [ "#C2", "#Dcrat", "#malware" ], "tweet": "https://x.com/etugenio/status/2067154914455732287" }, { "date": "2026-06-17 11:27:00", "user": "etugenio", "type": "url", "value": "http://123.56.252.12", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2067207480766042184" }, { "date": "2026-06-17 11:27:00", "user": "etugenio", "type": "ip", "value": "123.56.252.12", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2067207480766042184" }, { "date": "2026-06-18 05:19:00", "user": "Fact_Finder03", "type": "ip", "value": "178.104.81.225", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2067477385633784163" }, { "date": "2026-06-18 05:29:00", "user": "Fact_Finder03", "type": "ip", "value": "151.243.126.22", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2067479911439479038" }, { "date": "2026-06-18 05:29:00", "user": "Fact_Finder03", "type": "ip", "value": "154.197.154.64", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2067479911439479038" }, { "date": "2026-06-18 21:19:00", "user": "phantmradar", "type": "domain", "value": "konstructurellc.screenconnect.com", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/phantmradar/status/2067718821977182492" }, { "date": "2026-06-18 21:19:00", "user": "phantmradar", "type": "url", "value": "http://konstructurellc.screenconnect.com", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/phantmradar/status/2067718821977182492" }, { "date": "2026-06-19 09:32:00", "user": "etugenio", "type": "url", "value": "http://78.110.122.17", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2067903231674433779" }, { "date": "2026-06-19 09:32:00", "user": "etugenio", "type": "ip", "value": "78.110.122.17", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2067903231674433779" }, { "date": "2026-06-20 12:20:00", "user": "Fact_Finder03", "type": "ip", "value": "23.95.31.58", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068308057550102931" }, { "date": "2026-06-20 12:31:00", "user": "Fact_Finder03", "type": "ip", "value": "136.116.65.13", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068310733927125499" }, { "date": "2026-06-20 15:33:00", "user": "Fact_Finder03", "type": "ip", "value": "70.39.198.181", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068356668791075048" }, { "date": "2026-06-20 16:44:00", "user": "Fact_Finder03", "type": "ip", "value": "74.208.159.237", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068374316274663905" }, { "date": "2026-06-22 06:48:00", "user": "Fact_Finder03", "type": "ip", "value": "136.175.82.101", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2068949290404495440" }, { "date": "2026-06-22 07:28:00", "user": "Fact_Finder03", "type": "ip", "value": "130.51.23.240", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2068959385792217391" }, { "date": "2026-06-22 08:31:00", "user": "Fact_Finder03", "type": "ip", "value": "159.203.95.70", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068975024560894052" }, { "date": "2026-06-22 08:54:00", "user": "Fact_Finder03", "type": "ip", "value": "202.141.236.42", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068980812578750710" }, { "date": "2026-06-22 09:13:00", "user": "Fact_Finder03", "type": "ip", "value": "198.23.209.169", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2068985594177532050" }, { "date": "2026-06-22 10:03:00", "user": "Fact_Finder03", "type": "ip", "value": "161.97.93.60", "tags": [ "#C2", "#RAT" ], "tweet": "https://x.com/Fact_Finder03/status/2068998177500340259" }, { "date": "2026-06-23 06:29:00", "user": "Fact_Finder03", "type": "ip", "value": "194.48.248.54", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069306923388993961" }, { "date": "2026-06-23 06:34:00", "user": "Fact_Finder03", "type": "ip", "value": "45.150.111.64", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069308082531037599" }, { "date": "2026-06-23 09:52:00", "user": "Fact_Finder03", "type": "ip", "value": "206.189.240.134", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069358020983963883" }, { "date": "2026-06-23 10:06:00", "user": "Fact_Finder03", "type": "ip", "value": "31.7.58.226", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069361392428437840" }, { "date": "2026-06-23 10:06:00", "user": "Fact_Finder03", "type": "ip", "value": "179.43.186.239", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069361392428437840" }, { "date": "2026-06-23 10:30:00", "user": "Fact_Finder03", "type": "ip", "value": "47.236.95.106", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069367362936267085" }, { "date": "2026-06-23 11:41:00", "user": "Fact_Finder03", "type": "ip", "value": "124.198.132.148", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069385227563061298" }, { "date": "2026-06-23 12:14:00", "user": "Fact_Finder03", "type": "ip", "value": "213.139.77.109", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069393532410810434" }, { "date": "2026-06-23 18:12:00", "user": "skocherhan", "type": "url", "value": "http://159.223.34.28", "tags": [ "#APT", "#C2", "#CobaltStrike", "#malware" ], "tweet": "https://x.com/skocherhan/status/2069483754595254724" }, { "date": "2026-06-23 18:12:00", "user": "skocherhan", "type": "ip", "value": "159.223.34.28", "tags": [ "#APT", "#C2", "#CobaltStrike", "#malware" ], "tweet": "https://x.com/skocherhan/status/2069483754595254724" }, { "date": "2026-06-24 06:32:00", "user": "Fact_Finder03", "type": "ip", "value": "45.151.91.14", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069669996251529320" }, { "date": "2026-06-24 07:06:00", "user": "etugenio", "type": "ip", "value": "166.88.160.5", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2069678495253357049" }, { "date": "2026-06-24 12:03:00", "user": "Fact_Finder03", "type": "ip", "value": "5.78.24.71", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069753335092306170" }, { "date": "2026-06-24 12:03:00", "user": "Fact_Finder03", "type": "ip", "value": "5.78.129.163", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069753335092306170" }, { "date": "2026-06-24 12:03:00", "user": "Fact_Finder03", "type": "ip", "value": "163.129.78.5", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2069753335092306170" }, { "date": "2026-06-25 06:13:00", "user": "Fact_Finder03", "type": "ip", "value": "107.189.20.42", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2066770247907152329" }, { "date": "2026-06-25 06:16:00", "user": "Fact_Finder03", "type": "ip", "value": "91.219.237.105", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2070028255424639276" }, { "date": "2026-06-25 07:18:00", "user": "Fact_Finder03", "type": "ip", "value": "208.109.189.170", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2070043817106108868" }, { "date": "2026-06-25 07:18:00", "user": "Fact_Finder03", "type": "ip", "value": "170.189.109.208", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2070043817106108868" }, { "date": "2026-06-25 18:16:00", "user": "skocherhan", "type": "domain", "value": "solutionpelle.info", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/skocherhan/status/2070209545083707547" }, { "date": "2026-06-25 18:16:00", "user": "skocherhan", "type": "url", "value": "http://solutionpelle.info", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/skocherhan/status/2070209545083707547" }, { "date": "2026-06-25 18:16:00", "user": "skocherhan", "type": "url", "value": "http://149.28.128.239", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/skocherhan/status/2070209545083707547" }, { "date": "2026-06-25 18:16:00", "user": "skocherhan", "type": "ip", "value": "149.28.128.239", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/skocherhan/status/2070209545083707547" }, { "date": "2026-06-26 05:21:00", "user": "Fact_Finder03", "type": "ip", "value": "85.11.167.42", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2070376788463849829" }, { "date": "2026-06-26 18:00:00", "user": "phatomcandle", "type": "domain", "value": "upflowinfo.info", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2070567787400253600" }, { "date": "2026-06-26 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://upflowinfo.info", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2070567787400253600" }, { "date": "2026-06-26 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://45.77.34.242", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2070567787400253600" }, { "date": "2026-06-26 18:00:00", "user": "phatomcandle", "type": "ip", "value": "45.77.34.242", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2070567787400253600" }, { "date": "2026-06-28 09:21:00", "user": "Fact_Finder03", "type": "ip", "value": "20.87.213.75", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2071162026542678154" }, { "date": "2026-06-28 10:30:00", "user": "Fact_Finder03", "type": "ip", "value": "163.176.193.12", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071179299021852925" }, { "date": "2026-06-28 10:30:00", "user": "Fact_Finder03", "type": "ip", "value": "66.55.64.59", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071179299021852925" }, { "date": "2026-06-28 10:45:00", "user": "Fact_Finder03", "type": "ip", "value": "185.69.123.93", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071183074013188352" }, { "date": "2026-06-28 10:48:00", "user": "Fact_Finder03", "type": "ip", "value": "174.138.18.212", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071183828891340992" }, { "date": "2026-06-28 10:55:00", "user": "Fact_Finder03", "type": "ip", "value": "193.26.115.79", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071185590578520407" }, { "date": "2026-06-28 10:55:00", "user": "Fact_Finder03", "type": "ip", "value": "91.92.40.212", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071185590578520407" }, { "date": "2026-06-28 11:42:00", "user": "Fact_Finder03", "type": "ip", "value": "121.173.30.1", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071197418457059721" }, { "date": "2026-06-29 10:54:00", "user": "Fact_Finder03", "type": "ip", "value": "89.125.146.28", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071547793626587476" }, { "date": "2026-06-29 10:58:00", "user": "Fact_Finder03", "type": "ip", "value": "107.152.44.183", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071548751752434012" }, { "date": "2026-06-29 11:26:00", "user": "Fact_Finder03", "type": "ip", "value": "45.87.173.235", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2071555829480997279" }, { "date": "2026-06-29 11:26:00", "user": "Fact_Finder03", "type": "sha256", "value": "44080c2a10824c6c75c7deca6588d9cc2e5fca4666940a79329bf816b212af71", "tags": [ "#C2", "#stealer" ], "tweet": "https://x.com/Fact_Finder03/status/2071555829480997279" }, { "date": "2026-06-29 12:02:00", "user": "Fact_Finder03", "type": "ip", "value": "163.245.195.26", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071564839936242109" }, { "date": "2026-06-29 12:56:00", "user": "Fact_Finder03", "type": "ip", "value": "5.230.74.79", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071578429195976711" }, { "date": "2026-06-29 15:37:00", "user": "volrant136", "type": "url", "value": "http://31.56.209.80:7834", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2071619178847715622" }, { "date": "2026-06-29 15:37:00", "user": "volrant136", "type": "ip", "value": "31.56.209.80", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2071619178847715622" }, { "date": "2026-06-29 15:37:00", "user": "volrant136", "type": "md5", "value": "90559288e4b4b2f41157d7f7b1f9adb1", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2071619178847715622" }, { "date": "2026-06-29 15:37:00", "user": "volrant136", "type": "md5", "value": "c59d83ce3b43dd07757910b4c1694b40", "tags": [ "#C2" ], "tweet": "https://x.com/volrant136/status/2071619178847715622" }, { "date": "2026-06-29 16:58:00", "user": "Fact_Finder03", "type": "ip", "value": "104.193.195.159", "tags": [ "#C2" ], "tweet": "https://x.com/Fact_Finder03/status/2071639456785006820" }, { "date": "2026-06-29 18:49:00", "user": "etugenio", "type": "url", "value": "http://94.154.43.208", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2071667423627858015" }, { "date": "2026-06-29 18:49:00", "user": "etugenio", "type": "ip", "value": "94.154.43.208", "tags": [ "#C2", "#malware" ], "tweet": "https://x.com/etugenio/status/2071667423627858015" } ]