[
    {
        "date": "2026-08-03 10:14:00",
        "user": "D3LabIT",
        "type": "domain",
        "value": "tomwim.ygto.com",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2084221238768029845"
    },
    {
        "date": "2026-08-03 10:14:00",
        "user": "D3LabIT",
        "type": "url",
        "value": "http://tomwim.ygto.com",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2084221238768029845"
    },
    {
        "date": "2026-08-03 10:14:00",
        "user": "D3LabIT",
        "type": "md5",
        "value": "a0cea8cab9dffb06bed0ddd29c9b55c0",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2084221238768029845"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "domain",
        "value": "cinnamonthai.com",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "url",
        "value": "http://cinnamonthai.com/cgi-bins/05.08_8080_64.exe",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "domain",
        "value": "comeforreealz.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "url",
        "value": "http://comeforreealz.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "domain",
        "value": "careerlongprofit.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "url",
        "value": "http://careerlongprofit.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-07 07:53:00",
        "user": "D3LabIT",
        "type": "md5",
        "value": "c5572f461bcc603de50104ec6c245098",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/D3LabIT/status/2085635481727897848"
    },
    {
        "date": "2026-08-09 21:39:56",
        "user": "skocherhan",
        "type": "md5",
        "value": "5f87d01f11666a7d4fd0db155797db32",
        "tags": [
            "#Remcos",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2086568186271478140"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "domain",
        "value": "japan-act2.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "url",
        "value": "http://japan-act2.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "domain",
        "value": "japan-act.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "url",
        "value": "http://japan-act.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "dexscreenertrade.com",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://dexscreenertrade.com",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "sucessful.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://sucessful.duckdns.org:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "gu-grant-gz.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://gu-grant-gz.ydns.eu:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "fiancepsi1.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://fiancepsi1.duckdns.org:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "remcooox.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://remcooox.duckdns.org:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "aileen75.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://aileen75.ddns.net:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "japanaction059.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://japanaction059.duckdns.org:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "superdomain8765.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://superdomain8765.ddns.net:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "stachi.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://stachi.ydns.eu:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "purelog.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://purelog.duckdns.org:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "billionsonlinee.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://billionsonlinee.ddns.net:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "20billionn.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "url",
        "value": "http://20billionn.ddns.net:62699",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "025sep.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "url",
        "value": "http://025sep.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "11243debestreeeemcoxxxx.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "url",
        "value": "http://11243debestreeeemcoxxxx.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "102.220.160.104",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "102.220.160.105",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "103.83.86.143",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "103.83.86.48",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "108.181.253.47",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "109.248.151.11",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "domain",
        "value": "donta.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "url",
        "value": "http://donta.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "domain",
        "value": "sermver.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "url",
        "value": "http://sermver.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "t0loka.live",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "url",
        "value": "http://t0loka.live:7312",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "hurtomtracker.live",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "url",
        "value": "http://hurtomtracker.live:2428",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "194.87.31.229",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "ip",
        "value": "194.87.31.181",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "sha256",
        "value": "0fc5b813c114443d20a4bb88adcff5dbd010f45bb4bb4fa2f5e825b85606730b",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "sha256",
        "value": "5be83ef1061cc0e3addb28146c4117989180e6f3b54248e3f3b9aa22884d9445",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "sha256",
        "value": "d68810f29a58f09db1f036393cfc52c6b0934e7089077bc90a38fdece78489d9",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "sha256",
        "value": "07c9e525a4c2196234ea5f8d588916e23c9ac49a0df837a002b283eceb6ca5c0",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "sha256",
        "value": "83726f65084b85630aa0bd7b1808d4941484065991f58f1789ad819cd004cf4e",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    }
]