[
    {
        "date": "2026-08-16 01:04:58",
        "user": "masaomi346",
        "type": "domain",
        "value": "hndjsy.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2088794108454465822"
    },
    {
        "date": "2026-08-16 02:10:04",
        "user": "scanmalware",
        "type": "domain",
        "value": "test1.sougoucloud.workers.dev",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/scanmalware/status/2088810492248641784"
    },
    {
        "date": "2026-08-16 07:00:42",
        "user": "phishunt_io",
        "type": "domain",
        "value": "allegro.823ggg.casa",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2088883633650114695"
    },
    {
        "date": "2026-08-16 12:00:52",
        "user": "phishunt_io",
        "type": "domain",
        "value": "trustwallet.42web.io",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2088959171274138109"
    },
    {
        "date": "2026-08-16 12:43:32",
        "user": "masaomi346",
        "type": "domain",
        "value": "chisel-84.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2088969908919091619"
    },
    {
        "date": "2026-08-16 16:30:36",
        "user": "blackorbird",
        "type": "domain",
        "value": "plugandpwn.com",
        "tags": [],
        "tweet": "https://x.com/blackorbird/status/2089027052733424051"
    },
    {
        "date": "2026-08-16 17:00:44",
        "user": "phishunt_io",
        "type": "domain",
        "value": "docs-ledger-live-feq.typedream.app",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089034638161309916"
    },
    {
        "date": "2026-08-16 17:36:48",
        "user": "TKemmerling",
        "type": "domain",
        "value": "hriver.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089043712743702536"
    },
    {
        "date": "2026-08-16 17:36:48",
        "user": "TKemmerling",
        "type": "domain",
        "value": "styleompl.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089043712743702536"
    },
    {
        "date": "2026-08-16 17:47:26",
        "user": "TKemmerling",
        "type": "domain",
        "value": "yjeexpress.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089046389175308636"
    },
    {
        "date": "2026-08-16 17:47:26",
        "user": "TKemmerling",
        "type": "domain",
        "value": "rfastorm.co.uk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089046389175308636"
    },
    {
        "date": "2026-08-16 17:55:00",
        "user": "TKemmerling",
        "type": "domain",
        "value": "morleyknowledge.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089048293997494664"
    },
    {
        "date": "2026-08-16 17:55:00",
        "user": "TKemmerling",
        "type": "domain",
        "value": "axpclear.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089048293997494664"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "domain",
        "value": "japan-act2.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 17:59:41",
        "user": "skocherhan",
        "type": "domain",
        "value": "japan-act.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089049471472591346"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "dexscreenertrade.com",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "sucessful.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "gu-grant-gz.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "fiancepsi1.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "remcooox.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "aileen75.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "japanaction059.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "superdomain8765.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "stachi.ydns.eu",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "purelog.duckdns.org",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "billionsonlinee.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:10:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "20billionn.ddns.net",
        "tags": [
            "#Remcos",
            "#Xworm",
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2089052085459296766"
    },
    {
        "date": "2026-08-16 18:20:35",
        "user": "skocherhan",
        "type": "domain",
        "value": "87hermana26laafirmacion.vip",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089054731574341775"
    },
    {
        "date": "2026-08-16 20:07:31",
        "user": "TKemmerling",
        "type": "domain",
        "value": "wonderho.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089081641268543939"
    },
    {
        "date": "2026-08-16 20:07:31",
        "user": "TKemmerling",
        "type": "domain",
        "value": "wahlimit.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089081641268543939"
    },
    {
        "date": "2026-08-16 20:27:38",
        "user": "skocherhan",
        "type": "domain",
        "value": "otalbala.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089086706402168854"
    },
    {
        "date": "2026-08-16 20:59:09",
        "user": "kubotaa3",
        "type": "domain",
        "value": "syhzp.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/kubotaa3/status/2089094634501013893"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "start-live--ledger-app.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-live-app-us-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezr-io-start-cloud-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-trezor-io-start-app.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-trezursuite-auth.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "docs--login--ledger-live-desktop-io.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezur-start-base-faqs-io.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "us-conect-ledger-live-login.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-login-web-conect-web-sso-in.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "learn-start-io-trezor-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-live-wallet-start-conect-us-en.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-live-download-sso-conect.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-io-start-treezer.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "support--legderlive-us--learn.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-ledger-eng-start.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "public-faq-start-helps_-trezr.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "connect-ledgercom-help.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faqs-trezcom-web-doc.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "webpages-trzor-suite.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "portal-io-start-docs.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-us-public-trezzr-io-com-cdn.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "us-io-tzore-io.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "io-hardware-doc.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "suite--trezror.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "en-io-start-help.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-trzro-io-pro.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezor-io-start-public-sso-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezor-app-bridge.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "begin-hardware-trezo.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "public-trzr-en-bridge.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "us--start-en-trazor-io-com-cdn--en.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "access-divace-bridge.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "bright-secure-blokf-com-authd.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "start-io-trezr-public-cdn.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "welcome-begin-trezo-en.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "hardware-trezr-faq-wallets.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "begin-new-trezrio-strt.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "docs-base-bridge-faq.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "publlic-trezor-suite.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "co-web-ledger-live-login.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-us-public-trezzr-io-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-login-conect-sso-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-legjliewlt.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-live-login-conect-auth.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-eng-begin.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-login-ledger-us-en.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-en-ledger.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-public-trezro-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "io-public-trzors-com.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "docs-trezr-begin-help.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "suite-trezzor-com.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezr-page-start.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezor-io-start-access-us-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-start-trezor-io-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "app----en-bybit-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "learn-bridge-trezeer.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezrsite-web-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-login-start-ledger-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure-help-eng-ledger-live-login.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-live-desktop-start-cloud.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "live-led-ger-sso-auth.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure-c-om-ledg-er-sta-rt.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "support-uphold-auths-secure.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "info-suit-e-treze-er-doc.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "app-live-ledger-wllet.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "kucoine-learn-doce.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "portal-liv-e-ap-p-ledger.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "begin-ledger-support.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "official-coinbus-help.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure----bybit-login.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-bridge-en-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledgr-walt-secure-td.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-us-en-ledger-live-wallet.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-tr-z-r-su-ite-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "begin-trezr-start-io.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezor-suite-auth-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledglive-m-auth.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-download-web-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "desktop-ledgercom-live.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "trezor-login-us-auth-start.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "cloud-warppe-d-ether-walle-t.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "official-metamoskk.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "en-treezer-logins-cdns.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "en-treezer-cdn-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ttrezur-en-us.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "begin-faq-trezer-suite-page.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ndax-login-access.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure-trezor-get-web.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "overview-en-treezor-ed.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-eng-start.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "keen-viper-0088.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure-extensn-coin-wallet.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-bridge-desk.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "en-t-r-e-z-r-io-login.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "faq-app-trzor-suite.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-trezorr-io-start--sso-docs.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "ledger-com-start-start-us-app.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "public-suite-app-trez.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "bybit-login-app.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 21:50:10",
        "user": "skocherhan",
        "type": "domain",
        "value": "help-base-start-sso.typedream.app",
        "tags": [
            "#cryptoscam",
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089107474825527555"
    },
    {
        "date": "2026-08-16 22:26:17",
        "user": "skocherhan",
        "type": "domain",
        "value": "mhrs-edevletgiris.sbs",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089116565165703285"
    },
    {
        "date": "2026-08-16 23:25:33",
        "user": "masaomi346",
        "type": "domain",
        "value": "xsmn31.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089131477397287343"
    },
    {
        "date": "2026-08-17 00:20:03",
        "user": "AP_Zenmashi",
        "type": "domain",
        "value": "ysk3kmrun.duckdns.org",
        "tags": [],
        "tweet": "https://x.com/AP_Zenmashi/status/2089145193761267869"
    },
    {
        "date": "2026-08-17 01:29:16",
        "user": "Coolcarlos17",
        "type": "domain",
        "value": "pabloclock.com",
        "tags": [
            "#phishing",
            "#scam"
        ],
        "tweet": "https://x.com/Coolcarlos17/status/2089162615607935024"
    },
    {
        "date": "2026-08-17 02:08:56",
        "user": "romonlyht",
        "type": "domain",
        "value": "keczad.ynfgc.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/romonlyht/status/2089172596801908862"
    },
    {
        "date": "2026-08-17 02:10:34",
        "user": "romonlyht",
        "type": "domain",
        "value": "highdpi-ads.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/romonlyht/status/2089173005385834806"
    },
    {
        "date": "2026-08-17 02:32:33",
        "user": "romonlyht",
        "type": "domain",
        "value": "privacy.choquettes.shop",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/romonlyht/status/2089178538939388163"
    },
    {
        "date": "2026-08-17 02:40:52",
        "user": "romonlyht",
        "type": "domain",
        "value": "halsocrest.shop",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/romonlyht/status/2089180631989449031"
    },
    {
        "date": "2026-08-17 04:35:20",
        "user": "masaomi346",
        "type": "domain",
        "value": "fmpqwyp.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089209439115218962"
    },
    {
        "date": "2026-08-17 07:00:47",
        "user": "phishunt_io",
        "type": "domain",
        "value": "secure-login-facebook.bolt.host",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089246044122923167"
    },
    {
        "date": "2026-08-17 09:48:19",
        "user": "masaomi346",
        "type": "domain",
        "value": "quest-22.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2089288204101066803"
    },
    {
        "date": "2026-08-17 10:00:29",
        "user": "masaomi346",
        "type": "domain",
        "value": "shoretapestry.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2089291267436077496"
    },
    {
        "date": "2026-08-17 11:53:37",
        "user": "Metemcyber",
        "type": "domain",
        "value": "saissodbn202607oint.u0fnd.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2089319735720907234"
    },
    {
        "date": "2026-08-17 11:57:30",
        "user": "Metemcyber",
        "type": "domain",
        "value": "aeon.pvvjkwi.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2089320715636068602"
    },
    {
        "date": "2026-08-17 12:01:02",
        "user": "Metemcyber",
        "type": "domain",
        "value": "apple.wgxdijj.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2089321601628328237"
    },
    {
        "date": "2026-08-17 12:01:10",
        "user": "phishunt_io",
        "type": "domain",
        "value": "faceb00k-br.blogspot.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089321638420439515"
    },
    {
        "date": "2026-08-17 12:43:59",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "zxcvherfgh.scienceontheweb.net",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2089332413138899116"
    },
    {
        "date": "2026-08-17 14:28:32",
        "user": "SinghSoodeep",
        "type": "domain",
        "value": "vault.zip",
        "tags": [],
        "tweet": "https://x.com/SinghSoodeep/status/2089358723995107626"
    },
    {
        "date": "2026-08-17 14:28:32",
        "user": "SinghSoodeep",
        "type": "domain",
        "value": "turkey.research-department-tusas.workers.dev",
        "tags": [],
        "tweet": "https://x.com/SinghSoodeep/status/2089358723995107626"
    },
    {
        "date": "2026-08-17 14:28:32",
        "user": "SinghSoodeep",
        "type": "domain",
        "value": "supprot.new-turkey-tr.workers.dev",
        "tags": [],
        "tweet": "https://x.com/SinghSoodeep/status/2089358723995107626"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "025sep.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:13:09",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "11243debestreeeemcoxxxx.duckdns.org",
        "tags": [
            "#RemcosRAT"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089369951635136673"
    },
    {
        "date": "2026-08-17 15:57:19",
        "user": "skocherhan",
        "type": "domain",
        "value": "gk.bnznji.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089381066251419788"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "domain",
        "value": "donta.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 16:01:32",
        "user": "skocherhan",
        "type": "domain",
        "value": "sermver.duckdns.org",
        "tags": [
            "#Remcos"
        ],
        "tweet": "https://x.com/skocherhan/status/2089382126412038598"
    },
    {
        "date": "2026-08-17 16:12:39",
        "user": "patialavii",
        "type": "domain",
        "value": "zoominviteus2.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089384925841776717"
    },
    {
        "date": "2026-08-17 16:25:47",
        "user": "patialavii",
        "type": "domain",
        "value": "landingingtradesinternational.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089388228340318357"
    },
    {
        "date": "2026-08-17 16:25:47",
        "user": "patialavii",
        "type": "domain",
        "value": "mychap.co.uk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089388228340318357"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "06updatelive.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "08liv3zorn-update3.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "08updatedlive.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "2oomiinvittee.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "2z1alloom2.click",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "blvas.online",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "bvas.site",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "candidatezoomcall.im",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "clientmeetingzoomspace.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "cloud-access.heiantrello.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "cloud-access.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "cubana.cloud",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "currentme.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "gmeetus6invite.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "googlemeet0.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "googlemeet06web.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "id3basketball.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "interviewdeskhub.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invite.clararise.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invite.fonoon.ae",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invite.jalallinux.ir",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invite.schengenvizeci.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invitee-io.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "invitee-us.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "join-01nw8900.click",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "joinmeetlive.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "joinzoom.click",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "khoancatbetong89.vn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "lankystocks.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "logisticabiomedica.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "mail.zoomlive.us",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "meeting.joinzooms.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "meetzoommeeting2day.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "netvitualconnect.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "ngoilopviet.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "nownownow.help",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "online-interview-meeting.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "painel.guintter.com.br",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "relyaccessed-virtual.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "requisinvitte.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "samiksha.com.sg",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "sec3viewing.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "surel.sbs",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "take.ameliaflick.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "teak.gen.tr",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "teams-voicemail-connect.teams-connect-voice.online",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "tecnicoepc.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "uespp2.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "update50lite.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "updatelivemeet.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "updatenew.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "us-web007-zoom.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "us03zoomwebjoin.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "us05livenet.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "us69webacc.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "uss001web.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "usweb08acc.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "usweb4zoom.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "usz00mczyiee.store",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "vbhgv.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "viewers-media.de",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "vinegarhills.co.za",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-interview.online",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-meets.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "web-zorm.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "webinvitemeeting.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "workmeetlng.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zom-6ep.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-afp.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-i.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-in.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-invite-1tx.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-meets.us",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom-workspaces.top",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom.carlakit.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom.d0c-web.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom.girirajpaudel.com.np",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom.hopquatet.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoom.web-interviews.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomcallmeeting.im",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomcandidates.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomclient.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomconference.sbs",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoominviteme.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoominviteus06-bci.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoominviteus08.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoominviteus1.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomlive.us",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoommcall.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoommeeting2day.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoommeetingg.click",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoommeets.us",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomsclientupdate.pages.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomus.gt.tc",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoomwebinviite.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoorn-meet.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zoorning.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:27:04",
        "user": "skocherhan",
        "type": "domain",
        "value": "zzoomiinvitee.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089388552882622939"
    },
    {
        "date": "2026-08-17 16:35:17",
        "user": "patialavii",
        "type": "domain",
        "value": "horusian.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089390620968452104"
    },
    {
        "date": "2026-08-17 16:35:17",
        "user": "patialavii",
        "type": "domain",
        "value": "valeriediedrich3.screenconnect.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089390620968452104"
    },
    {
        "date": "2026-08-17 16:35:17",
        "user": "patialavii",
        "type": "domain",
        "value": "gsjwba.shop",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089390620968452104"
    },
    {
        "date": "2026-08-17 16:40:28",
        "user": "patialavii",
        "type": "domain",
        "value": "viralizate.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089391922880413839"
    },
    {
        "date": "2026-08-17 17:00:56",
        "user": "phishunt_io",
        "type": "domain",
        "value": "843824910-google.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089397074475327674"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "ntdc.gov.pk.rnicrosort.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:02:08",
        "user": "volrant136",
        "type": "domain",
        "value": "pakarmy.insyaallah2k25.workers.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/volrant136/status/2089397376490623455"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "t0loka.live",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 17:16:14",
        "user": "teamcymru_S2",
        "type": "domain",
        "value": "hurtomtracker.live",
        "tags": [
            "#RemcosRAT",
            "#malware"
        ],
        "tweet": "https://x.com/teamcymru_S2/status/2089400926507274706"
    },
    {
        "date": "2026-08-17 18:00:07",
        "user": "phatomcandle",
        "type": "domain",
        "value": "packetcheck.online",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089411971171209665"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "trade-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "connect-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "portal-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "rewards-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "app-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "verify-bitmoon.fun",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "sharjahaquarium.com",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 19:15:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "andresherrerapi66.gleeze.com",
        "tags": [
            "#AsyncRAT",
            "#Dcrat",
            "#Xworm"
        ],
        "tweet": "https://x.com/skocherhan/status/2089430925595619565"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "paintshop.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "flb.obd.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "yxm.smo.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "pjn.kjz.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "dlq.ojd.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "fcp.tiu.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ozi.xtn.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ypj.wie.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "evandrofoltram.com.br",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "uui.lgj.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "xbc.tvn.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "hgh.nyd.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "bfo.dls.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ppy.dls.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "uyu.ker.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "hok.okv.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ntalospro.gr",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "fnp.tha.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "payeesuv.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "alz.rgg.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "xcv.chi.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "cke.hlf.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ddy.okv.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "invites.chat",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "floristeria-petitflowers.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "jbi.aey.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "xwf.ynd.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "dilan-wine.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "edh.rgg.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "wkd.rgg.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "jfcg.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "zir.hlf.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "eeh.otw.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "esrcafe.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "babyland.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "ofu.ker.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "twinclothing.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "accounts-faqterms.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "manpowersrilanka.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "pet.opx.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "nmkr.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "deshitha.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "thakshila-mobile.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "esrpos.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "titanium-art.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "techview.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "oneelia.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "qzc.jiv.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "laundry.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "hly.oed.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "vepaints.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "henz.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "patracorps.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "snc.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "cell-doctor.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "farhan.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "projectp.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "medkin.posmasters.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "frs.jbq.mybluehost.me",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "icesgreencampus.lk",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "travelistaan.co",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-17 21:14:37",
        "user": "skocherhan",
        "type": "domain",
        "value": "x-uptades.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089460918170366153"
    },
    {
        "date": "2026-08-18 02:20:02",
        "user": "scanmalware",
        "type": "domain",
        "value": "yktpm1b20pz-lhjndlsi-1l8i2b-ykk57c.pages.dev",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/scanmalware/status/2089537777675190546"
    },
    {
        "date": "2026-08-18 03:02:26",
        "user": "masaomi346",
        "type": "domain",
        "value": "ktmnos.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089548447892619716"
    },
    {
        "date": "2026-08-18 03:06:44",
        "user": "bomccss",
        "type": "domain",
        "value": "wordtax.ink",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2089549529335140762"
    },
    {
        "date": "2026-08-18 03:06:44",
        "user": "bomccss",
        "type": "domain",
        "value": "jpword.cc",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2089549529335140762"
    },
    {
        "date": "2026-08-18 03:06:44",
        "user": "bomccss",
        "type": "domain",
        "value": "w1mail.com",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2085282098601243004"
    },
    {
        "date": "2026-08-18 03:25:18",
        "user": "patialavii",
        "type": "domain",
        "value": "tecnicoepc.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089554202267656553"
    },
    {
        "date": "2026-08-18 03:25:18",
        "user": "patialavii",
        "type": "domain",
        "value": "none.kingsnone-cpa.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089554202267656553"
    },
    {
        "date": "2026-08-18 03:32:09",
        "user": "Metemcyber",
        "type": "domain",
        "value": "aeon.dkoix.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2089555925057278119"
    },
    {
        "date": "2026-08-18 03:36:43",
        "user": "bomccss",
        "type": "domain",
        "value": "rkm-20260817-3684.zip",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2089557077018738924"
    },
    {
        "date": "2026-08-18 06:32:48",
        "user": "masaomi346",
        "type": "domain",
        "value": "tichbox.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089601387902730388"
    },
    {
        "date": "2026-08-18 07:01:14",
        "user": "phishunt_io",
        "type": "domain",
        "value": "facebookxlogin.blogspot.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089608544127479902"
    },
    {
        "date": "2026-08-18 07:30:14",
        "user": "Metemcyber",
        "type": "domain",
        "value": "aeon.pvvjkwi.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2089615842145427692"
    },
    {
        "date": "2026-08-18 12:01:18",
        "user": "phishunt_io",
        "type": "domain",
        "value": "allegrolokalnie.lokalna-ofeta2435245.shop",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089684057764290760"
    },
    {
        "date": "2026-08-18 12:36:09",
        "user": "masaomi346",
        "type": "domain",
        "value": "parentpreneurx.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2089692827701973179"
    },
    {
        "date": "2026-08-18 12:36:09",
        "user": "masaomi346",
        "type": "domain",
        "value": "neststudio16.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2089692827701973179"
    },
    {
        "date": "2026-08-18 13:00:11",
        "user": "g0njxa",
        "type": "domain",
        "value": "zddfgrw.com",
        "tags": [],
        "tweet": "https://x.com/g0njxa/status/2089698874914947397"
    },
    {
        "date": "2026-08-18 13:00:11",
        "user": "g0njxa",
        "type": "domain",
        "value": "gitgubusercontnet.com",
        "tags": [],
        "tweet": "https://x.com/g0njxa/status/2089698874914947397"
    },
    {
        "date": "2026-08-18 15:33:13",
        "user": "L0Psec",
        "type": "domain",
        "value": "nancyclipboard.com",
        "tags": [],
        "tweet": "https://x.com/L0Psec/status/2089737386775265740"
    },
    {
        "date": "2026-08-18 15:33:15",
        "user": "L0Psec",
        "type": "domain",
        "value": "update-gateway.com",
        "tags": [],
        "tweet": "https://x.com/L0Psec/status/2089737394786275724"
    },
    {
        "date": "2026-08-18 16:12:36",
        "user": "scanmalware",
        "type": "domain",
        "value": "sp13ct-zormel-biz-fravvik-lardik.pages.dev",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/scanmalware/status/2089747298645385608"
    },
    {
        "date": "2026-08-18 17:01:54",
        "user": "phishunt_io",
        "type": "domain",
        "value": "trezo-homenew.zapier.app",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089759704620687382"
    },
    {
        "date": "2026-08-18 17:33:24",
        "user": "skocherhan",
        "type": "domain",
        "value": "03webzoominvite.us",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089767634472472992"
    },
    {
        "date": "2026-08-18 17:33:24",
        "user": "skocherhan",
        "type": "domain",
        "value": "jokermav.online",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/skocherhan/status/2089767634472472992"
    },
    {
        "date": "2026-08-18 17:38:04",
        "user": "ex_raritas",
        "type": "domain",
        "value": "tcpsync.com",
        "tags": [],
        "tweet": "https://x.com/ex_raritas/status/2089768806818168985"
    },
    {
        "date": "2026-08-18 17:38:04",
        "user": "ex_raritas",
        "type": "domain",
        "value": "prebuga.net",
        "tags": [],
        "tweet": "https://x.com/ex_raritas/status/2089768806818168985"
    },
    {
        "date": "2026-08-18 17:38:04",
        "user": "ex_raritas",
        "type": "domain",
        "value": "semado.net",
        "tags": [],
        "tweet": "https://x.com/ex_raritas/status/2089768806818168985"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "132.226.100.149.nip.io",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "13stripescleaning.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "7days2die.condetradingcorp.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "a.loaagouda.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "admin.thotera.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "api.fildeler.dk",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "api.mbpartnersfinance.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "autoconfig.thotera.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "b4.dirc.us",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "backend.padmi.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.absolutely-not-a-virus.zip",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.apollo-labs.xyz",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.bbw-education.de",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.bluec2ops.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.cuteops.fr",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.desuper.ipv64.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.greifvogel.ch",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.hexius.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.jacobriggs.io",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.olivermeowface.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.poseidonops.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.shemaria.tech",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2.socops.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "c2test.ranftler.eu",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "cc2.sstcorporate.dev",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "cyber.gbinvestigations.ca",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "denpi.org",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "drc2.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "drive-sharepoint.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "enceladus.thornton.info",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "followtheflan.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "ftp.cuteops.fr",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "gsgc2.ddns.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "h5.aylesworth.info",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "hack.calerobinson.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "hilly6000.online",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "hotspottesting.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "hunt.sabalillc.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "labresults.me",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "mail.loaagouda.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "mail.thotera.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "meshcore.nephelae-cloud.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "network45-238-142-host-234.inethn.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "nhwis.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "nhwis.tech",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "nimbostratus.dev",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "nsfhw.tech",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "pac2.duckdns.org",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "pihole.cuteops.fr",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "sarudy.ovh",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "secure.place",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "syndikatet.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "vacationrental-directory.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "vectrion.de",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "vmi3101759.contaboserver.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "webdisk.thotera.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "whm.thotera.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 17:50:47",
        "user": "skocherhan",
        "type": "domain",
        "value": "wxcdc.movaci.net",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2089772009744150862"
    },
    {
        "date": "2026-08-18 18:00:05",
        "user": "phatomcandle",
        "type": "domain",
        "value": "auth-accounts.dynuddns.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2089774346592202787"
    },
    {
        "date": "2026-08-18 21:14:44",
        "user": "skocherhan",
        "type": "domain",
        "value": "check-pass.com",
        "tags": [
            "#ClickFix"
        ],
        "tweet": "https://x.com/skocherhan/status/2089823333265047729"
    },
    {
        "date": "2026-08-18 21:43:06",
        "user": "skocherhan",
        "type": "domain",
        "value": "akb.cat",
        "tags": [
            "#ClickFix"
        ],
        "tweet": "https://x.com/skocherhan/status/2089830470884143452"
    },
    {
        "date": "2026-08-19 00:52:38",
        "user": "MsftSecIntel",
        "type": "domain",
        "value": "auto.c3pool.org",
        "tags": [],
        "tweet": "https://x.com/MsftSecIntel/status/2089878169037738202"
    },
    {
        "date": "2026-08-19 03:58:50",
        "user": "masaomi346",
        "type": "domain",
        "value": "exg3gtfcc9gtlyv5tu.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089925028418900250"
    },
    {
        "date": "2026-08-19 04:00:30",
        "user": "patialavii",
        "type": "domain",
        "value": "file-share-image-2026-8368-736-dropbox.cloud",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2089925448478454266"
    },
    {
        "date": "2026-08-19 04:13:43",
        "user": "TKemmerling",
        "type": "domain",
        "value": "nwvearly.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089928775593287751"
    },
    {
        "date": "2026-08-19 04:13:43",
        "user": "TKemmerling",
        "type": "domain",
        "value": "kwmsteam.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089928775593287751"
    },
    {
        "date": "2026-08-19 04:23:09",
        "user": "TKemmerling",
        "type": "domain",
        "value": "robertszutyiart.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089931147900006709"
    },
    {
        "date": "2026-08-19 04:23:09",
        "user": "TKemmerling",
        "type": "domain",
        "value": "columbuswealthplanning.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089931147900006709"
    },
    {
        "date": "2026-08-19 04:30:51",
        "user": "TKemmerling",
        "type": "domain",
        "value": "meetings.onlinecommunityconsultation.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089933086977143226"
    },
    {
        "date": "2026-08-19 04:30:51",
        "user": "TKemmerling",
        "type": "domain",
        "value": "mmcharty.s3.us-east-1.amazonaws.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089933086977143226"
    },
    {
        "date": "2026-08-19 04:41:29",
        "user": "TKemmerling",
        "type": "domain",
        "value": "flowers.theflowerflat.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089935762632630504"
    },
    {
        "date": "2026-08-19 04:41:29",
        "user": "TKemmerling",
        "type": "domain",
        "value": "ntiein.s3.us-east-1.amazonaws.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089935762632630504"
    },
    {
        "date": "2026-08-19 04:49:52",
        "user": "TKemmerling",
        "type": "domain",
        "value": "hriver.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089937873655177467"
    },
    {
        "date": "2026-08-19 04:49:52",
        "user": "TKemmerling",
        "type": "domain",
        "value": "onxsm.styleompl.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2089937873655177467"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "powerepq.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "wkssa8wo7nzoxmb.libertyirow.com.de",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "acdh4mwy.mvconstruoeincorporaslholtda.vu",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "microcontrol-gucpbrefazgue6ad.z02.azurefd.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "bverster.store",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "cwhe.qualitypresence.de",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "sharedocufill.exceltecbusinessbwpsolutions.vu",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "tdto.prodesignscommunicate.de",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "mcbspvtlsamtd.vu",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "3347silver.shoplyo.com.de",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "folders-them9782-safe-empty-files-9w478262.b-cdn.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 05:17:49",
        "user": "Kb4Threatlabs",
        "type": "domain",
        "value": "rfq1ox88.wisnetcomlrfnlc.vu",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Kb4Threatlabs/status/2089944905661771919"
    },
    {
        "date": "2026-08-19 06:53:50",
        "user": "masaomi346",
        "type": "domain",
        "value": "rq9wvjyc912c1ofpm5.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2089969069210652708"
    },
    {
        "date": "2026-08-19 07:01:08",
        "user": "phishunt_io",
        "type": "domain",
        "value": "ledger-live-login-conect-auth.typedream.app",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2089970907645190365"
    },
    {
        "date": "2026-08-19 08:25:06",
        "user": "tdatwja",
        "type": "domain",
        "value": "hsacnajklnsdcm8u.pages.dev",
        "tags": [],
        "tweet": "https://x.com/tdatwja/status/2089992039144542615"
    },
    {
        "date": "2026-08-19 08:25:06",
        "user": "tdatwja",
        "type": "domain",
        "value": "hxn20160817021han.zip",
        "tags": [],
        "tweet": "https://x.com/tdatwja/status/2089992039144542615"
    },
    {
        "date": "2026-08-19 08:25:07",
        "user": "tdatwja",
        "type": "domain",
        "value": "rukeyou.com",
        "tags": [],
        "tweet": "https://x.com/tdatwja/status/2089992042139283697"
    },
    {
        "date": "2026-08-19 09:10:54",
        "user": "ThantZin_Ron",
        "type": "domain",
        "value": "rongassist.xiaofengzi.cc",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/ThantZin_Ron/status/2090003561128280303"
    },
    {
        "date": "2026-08-19 10:59:34",
        "user": "OpcodeIntel",
        "type": "domain",
        "value": "usa-legalforms.com",
        "tags": [],
        "tweet": "https://x.com/OpcodeIntel/status/2090030910423138706"
    },
    {
        "date": "2026-08-19 11:28:30",
        "user": "abuse_ch",
        "type": "domain",
        "value": "woolvilli.com",
        "tags": [],
        "tweet": "https://x.com/abuse_ch/status/2090038189347987611"
    },
    {
        "date": "2026-08-19 11:28:30",
        "user": "abuse_ch",
        "type": "domain",
        "value": "allremdeskriki.com",
        "tags": [],
        "tweet": "https://x.com/abuse_ch/status/2090038189347987611"
    },
    {
        "date": "2026-08-19 11:28:30",
        "user": "abuse_ch",
        "type": "domain",
        "value": "dubl1allremriki.com",
        "tags": [],
        "tweet": "https://x.com/abuse_ch/status/2090038189347987611"
    },
    {
        "date": "2026-08-19 11:28:30",
        "user": "abuse_ch",
        "type": "domain",
        "value": "dubl2allremriki.com",
        "tags": [],
        "tweet": "https://x.com/abuse_ch/status/2090038189347987611"
    },
    {
        "date": "2026-08-19 12:02:07",
        "user": "phishunt_io",
        "type": "domain",
        "value": "allegrolokalnie.lokalna-oferta9813434.lol",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090046651595428228"
    },
    {
        "date": "2026-08-19 12:19:14",
        "user": "Coolcarlos17",
        "type": "domain",
        "value": "lojacasalima.com",
        "tags": [
            "#phishing",
            "#scam"
        ],
        "tweet": "https://x.com/Coolcarlos17/status/2090050959032344747"
    },
    {
        "date": "2026-08-19 12:22:01",
        "user": "Coolcarlos17",
        "type": "domain",
        "value": "havan-com-br.site",
        "tags": [
            "#phishing",
            "#scam"
        ],
        "tweet": "https://x.com/Coolcarlos17/status/2090051658931732935"
    },
    {
        "date": "2026-08-19 13:13:28",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "lkjhgb6yu.mywebcommunity.org",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090064605334937877"
    },
    {
        "date": "2026-08-19 13:40:09",
        "user": "masaomi346",
        "type": "domain",
        "value": "julxi.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090071320428216684"
    },
    {
        "date": "2026-08-19 13:49:35",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "gyfguyhb.onlinewebshop.net",
        "tags": [],
        "tweet": "https://x.com/byrne_emmy12099/status/2090073695104778625"
    },
    {
        "date": "2026-08-19 16:19:38",
        "user": "skocherhan",
        "type": "domain",
        "value": "wer-ldr.duckdns.org",
        "tags": [
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2090111458142994915"
    },
    {
        "date": "2026-08-19 16:19:38",
        "user": "skocherhan",
        "type": "domain",
        "value": "wereng.duckdns.org",
        "tags": [
            "#opendir"
        ],
        "tweet": "https://x.com/skocherhan/status/2090111458142994915"
    },
    {
        "date": "2026-08-19 17:00:54",
        "user": "phishunt_io",
        "type": "domain",
        "value": "hotmail-session-ftmew3sm-2fexofgrs-----bzalpryr2e.kharwadejewellers.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090121843013201940"
    },
    {
        "date": "2026-08-19 18:57:59",
        "user": "TKemmerling",
        "type": "domain",
        "value": "lmdbound.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090151309496418631"
    },
    {
        "date": "2026-08-19 18:57:59",
        "user": "TKemmerling",
        "type": "domain",
        "value": "edufloat.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090151309496418631"
    },
    {
        "date": "2026-08-19 19:58:50",
        "user": "skocherhan",
        "type": "domain",
        "value": "quest-22.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2090166619435683931"
    },
    {
        "date": "2026-08-19 20:10:32",
        "user": "skocherhan",
        "type": "domain",
        "value": "grove-satin.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2090169563958653315"
    },
    {
        "date": "2026-08-19 20:24:23",
        "user": "skocherhan",
        "type": "domain",
        "value": "atlas-compass.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2090173049282662577"
    },
    {
        "date": "2026-08-19 20:30:58",
        "user": "skocherhan",
        "type": "domain",
        "value": "sheltercirrus.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2090174708910018605"
    },
    {
        "date": "2026-08-20 00:51:55",
        "user": "masaomi346",
        "type": "domain",
        "value": "leap39.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2090240377358102881"
    },
    {
        "date": "2026-08-20 04:17:29",
        "user": "bomccss",
        "type": "domain",
        "value": "hijndil-ownguen.pages.dev",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090292110943764709"
    },
    {
        "date": "2026-08-20 04:17:30",
        "user": "bomccss",
        "type": "domain",
        "value": "fshsjlk.cc",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090292114236260732"
    },
    {
        "date": "2026-08-20 04:20:04",
        "user": "bomccss",
        "type": "domain",
        "value": "toyotechnicaljp.pages.dev",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090292760750572023"
    },
    {
        "date": "2026-08-20 04:20:04",
        "user": "tdatwja",
        "type": "domain",
        "value": "du-a2026081702100.zip",
        "tags": [],
        "tweet": "https://x.com/tdatwja/status/2089988933946130695"
    },
    {
        "date": "2026-08-20 04:20:04",
        "user": "tdatwja",
        "type": "domain",
        "value": "apm.hexin.cn",
        "tags": [],
        "tweet": "https://x.com/tdatwja/status/2089988933946130695"
    },
    {
        "date": "2026-08-20 04:22:15",
        "user": "TKemmerling",
        "type": "domain",
        "value": "southfloridafitnessbootcamp.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090293310216892804"
    },
    {
        "date": "2026-08-20 04:22:15",
        "user": "TKemmerling",
        "type": "domain",
        "value": "itnessequipmentfor.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090293310216892804"
    },
    {
        "date": "2026-08-20 04:24:42",
        "user": "bomccss",
        "type": "domain",
        "value": "hsacnajklnsdcm8u.pages.dev",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090293927584923937"
    },
    {
        "date": "2026-08-20 04:24:42",
        "user": "bomccss",
        "type": "domain",
        "value": "hxn20160817021han.zip",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090293927584923937"
    },
    {
        "date": "2026-08-20 04:28:27",
        "user": "bomccss",
        "type": "domain",
        "value": "io8rthrtthgfjglklibvfgt.pages.dev",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090294868581204201"
    },
    {
        "date": "2026-08-20 04:28:27",
        "user": "bomccss",
        "type": "domain",
        "value": "nx_2026073083242.zip",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090294868581204201"
    },
    {
        "date": "2026-08-20 04:28:27",
        "user": "bomccss",
        "type": "domain",
        "value": "rukeyou.com",
        "tags": [],
        "tweet": "https://x.com/bomccss/status/2090294870426652909"
    },
    {
        "date": "2026-08-20 04:34:13",
        "user": "TKemmerling",
        "type": "domain",
        "value": "helengarentals.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090296320225657079"
    },
    {
        "date": "2026-08-20 05:14:59",
        "user": "masaomi346",
        "type": "domain",
        "value": "accoun.bligi.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090306582538240373"
    },
    {
        "date": "2026-08-20 06:14:36",
        "user": "Metemcyber",
        "type": "domain",
        "value": "chiotetpapparel.shop",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2090321582589907192"
    },
    {
        "date": "2026-08-20 06:28:06",
        "user": "Metemcyber",
        "type": "domain",
        "value": "zfktseu.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2090324982274683153"
    },
    {
        "date": "2026-08-20 06:41:04",
        "user": "Metemcyber",
        "type": "domain",
        "value": "aikt888.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2090328242783957086"
    },
    {
        "date": "2026-08-20 06:50:03",
        "user": "AP_Zenmashi",
        "type": "domain",
        "value": "lixsjsd.duckdns.org",
        "tags": [],
        "tweet": "https://x.com/AP_Zenmashi/status/2090330506919580063"
    },
    {
        "date": "2026-08-20 07:01:17",
        "user": "phishunt_io",
        "type": "domain",
        "value": "auth-ledgrelive-net.wasmer.app",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090333329971183699"
    },
    {
        "date": "2026-08-20 08:50:18",
        "user": "nextronresearch",
        "type": "domain",
        "value": "build.rs",
        "tags": [],
        "tweet": "https://x.com/nextronresearch/status/2090360765156818965"
    },
    {
        "date": "2026-08-20 09:01:17",
        "user": "threatcluster",
        "type": "domain",
        "value": "spyroid.net",
        "tags": [],
        "tweet": "https://x.com/threatcluster/status/2090363532218880234"
    },
    {
        "date": "2026-08-20 09:30:48",
        "user": "skocherhan",
        "type": "domain",
        "value": "mail.upgoogle.com",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2090370956959080903"
    },
    {
        "date": "2026-08-20 09:44:02",
        "user": "masaomi346",
        "type": "domain",
        "value": "ultraspeed.pro",
        "tags": [
            "#ClickFix",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2090374287777800497"
    },
    {
        "date": "2026-08-20 12:00:54",
        "user": "phishunt_io",
        "type": "domain",
        "value": "hotmail-session-twmgxsyd-4hleuexj1-----z5imb2ponk.kharwadejewellers.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090408734719656119"
    },
    {
        "date": "2026-08-20 12:31:13",
        "user": "masaomi346",
        "type": "domain",
        "value": "quartfication.wmsrdj.cn",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090416362359570899"
    },
    {
        "date": "2026-08-20 16:21:03",
        "user": "ThreatOpsX",
        "type": "domain",
        "value": "microsoftdesk.vintagefabrcations.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/ThreatOpsX/status/2090474202553786604"
    },
    {
        "date": "2026-08-20 18:58:24",
        "user": "BreachHistoryBH",
        "type": "domain",
        "value": "workl.com",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/BreachHistoryBH/status/2090513801049432155"
    },
    {
        "date": "2026-08-20 18:59:26",
        "user": "BreachHistoryBH",
        "type": "domain",
        "value": "wrappiness.co",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/BreachHistoryBH/status/2090514060148142191"
    },
    {
        "date": "2026-08-20 19:05:21",
        "user": "DezeStijn",
        "type": "domain",
        "value": "j4suf.test-app.link",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/DezeStijn/status/2090515549381943750"
    },
    {
        "date": "2026-08-20 19:56:48",
        "user": "ExpectedErr0r",
        "type": "domain",
        "value": "fuoe333.club",
        "tags": [],
        "tweet": "https://x.com/ExpectedErr0r/status/2090011242547261839"
    },
    {
        "date": "2026-08-20 23:24:49",
        "user": "masaomi346",
        "type": "domain",
        "value": "etc.meisai.zywblog.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090580847909113945"
    },
    {
        "date": "2026-08-21 00:11:04",
        "user": "Merlax_",
        "type": "domain",
        "value": "sistematroll.net",
        "tags": [
            "#malware"
        ],
        "tweet": "https://x.com/Merlax_/status/2090592485814714549"
    },
    {
        "date": "2026-08-21 03:00:07",
        "user": "Metemcyber",
        "type": "domain",
        "value": "login.gkpfz.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2090635029261230470"
    },
    {
        "date": "2026-08-21 03:11:46",
        "user": "Metemcyber",
        "type": "domain",
        "value": "lsxlhj.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Metemcyber/status/2090637960010223625"
    },
    {
        "date": "2026-08-21 03:15:55",
        "user": "masaomi346",
        "type": "domain",
        "value": "y82cup0r.xyz",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090639005381804099"
    },
    {
        "date": "2026-08-21 03:41:53",
        "user": "patialavii",
        "type": "domain",
        "value": "docusign-server.github.io",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2090645538446450825"
    },
    {
        "date": "2026-08-21 03:41:53",
        "user": "patialavii",
        "type": "domain",
        "value": "file-iwl3-2.w-4mm9yl.workers.dev",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2090645538446450825"
    },
    {
        "date": "2026-08-21 04:10:19",
        "user": "patialavii",
        "type": "domain",
        "value": "swanbitcoinguideline.live",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2090652692762743220"
    },
    {
        "date": "2026-08-21 04:10:19",
        "user": "patialavii",
        "type": "domain",
        "value": "clevercarves.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2090652692762743220"
    },
    {
        "date": "2026-08-21 04:22:20",
        "user": "patialavii",
        "type": "domain",
        "value": "uniabjpoliticalsciencejournals.com.ng",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2090655720584974676"
    },
    {
        "date": "2026-08-21 06:14:22",
        "user": "TKemmerling",
        "type": "domain",
        "value": "transmitraisin.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090683910833447230"
    },
    {
        "date": "2026-08-21 06:14:22",
        "user": "TKemmerling",
        "type": "domain",
        "value": "fcacarry.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090683910833447230"
    },
    {
        "date": "2026-08-21 06:14:22",
        "user": "TKemmerling",
        "type": "domain",
        "value": "checkoutacceleration.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090683910833447230"
    },
    {
        "date": "2026-08-21 06:14:22",
        "user": "TKemmerling",
        "type": "domain",
        "value": "tastyvibescbd.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090683910833447230"
    },
    {
        "date": "2026-08-21 06:28:31",
        "user": "TKemmerling",
        "type": "domain",
        "value": "edufloat.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687474364449087"
    },
    {
        "date": "2026-08-21 06:29:04",
        "user": "TKemmerling",
        "type": "domain",
        "value": "stylishhomegallery.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687614030676140"
    },
    {
        "date": "2026-08-21 06:29:06",
        "user": "TKemmerling",
        "type": "domain",
        "value": "wahlimit.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687619697172646"
    },
    {
        "date": "2026-08-21 06:29:06",
        "user": "TKemmerling",
        "type": "domain",
        "value": "vkvfaith.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687619697172646"
    },
    {
        "date": "2026-08-21 06:29:07",
        "user": "TKemmerling",
        "type": "domain",
        "value": "indelibleaggravate.net",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687624998769008"
    },
    {
        "date": "2026-08-21 06:29:11",
        "user": "TKemmerling",
        "type": "domain",
        "value": "columbuswealthplanning.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090687640991608965"
    },
    {
        "date": "2026-08-21 06:44:19",
        "user": "OpcodeIntel",
        "type": "domain",
        "value": "panel.xxcqw.icu",
        "tags": [
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/OpcodeIntel/status/2090691448287179250"
    },
    {
        "date": "2026-08-21 07:01:01",
        "user": "phishunt_io",
        "type": "domain",
        "value": "netflx-update.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090695651789086809"
    },
    {
        "date": "2026-08-21 09:26:22",
        "user": "masaomi346",
        "type": "domain",
        "value": "gzmingbo.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090732229744115892"
    },
    {
        "date": "2026-08-21 09:41:50",
        "user": "scanmalware",
        "type": "domain",
        "value": "xyx055.cc",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/scanmalware/status/2090736122959733030"
    },
    {
        "date": "2026-08-21 10:38:36",
        "user": "spamhaus",
        "type": "domain",
        "value": "evergreenhorizonoutdoorcampinggear.com",
        "tags": [],
        "tweet": "https://x.com/spamhaus/status/2090750407827972397"
    },
    {
        "date": "2026-08-21 11:31:43",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "go-ns.org.ua",
        "tags": [
            "#malware"
        ],
        "tweet": "https://x.com/TheM3gatr0n/status/2090763777990176929"
    },
    {
        "date": "2026-08-21 12:01:54",
        "user": "phishunt_io",
        "type": "domain",
        "value": "allegrolokalnie.pl-aibt8.sbs",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/phishunt_io/status/2090771372746088617"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "ent34ndx3cz8k.x.pipedream.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "zexzehqwb.b17da333ec194ec4b767.d.requestbin.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "ddmyukztqt.b17da333ec194ec4b767.d.requestbin.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "ufzmtsfulfxk.b17da333ec194ec4b767.d.requestbin.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "muewgjlydqln.b17da333ec194ec4b767.d.requestbin.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:23:16",
        "user": "TheM3gatr0n",
        "type": "domain",
        "value": "yzvomdohdwqm.b17da333ec194ec4b767.d.requestbin.net",
        "tags": [],
        "tweet": "https://x.com/TheM3gatr0n/status/2090776748212576720"
    },
    {
        "date": "2026-08-21 12:25:15",
        "user": "masaomi346",
        "type": "domain",
        "value": "codex-notes.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2090777247179489573"
    },
    {
        "date": "2026-08-21 12:25:15",
        "user": "masaomi346",
        "type": "domain",
        "value": "quill-flint.com",
        "tags": [
            "#infostealer",
            "#malvertising",
            "#malware"
        ],
        "tweet": "https://x.com/masaomi346/status/2090777247179489573"
    },
    {
        "date": "2026-08-21 13:36:41",
        "user": "_AkatsukiLegion",
        "type": "domain",
        "value": "ceyq9jos-wildberries.nevadafencing.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/_AkatsukiLegion/status/2090795225736450110"
    },
    {
        "date": "2026-08-21 13:36:41",
        "user": "_AkatsukiLegion",
        "type": "domain",
        "value": "ceyq9jos-wildberries.rageforest.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/_AkatsukiLegion/status/2090795225736450110"
    },
    {
        "date": "2026-08-21 13:36:41",
        "user": "_AkatsukiLegion",
        "type": "domain",
        "value": "ceyq9jos-wildberries.txspay.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/_AkatsukiLegion/status/2090795225736450110"
    },
    {
        "date": "2026-08-21 14:08:27",
        "user": "skocherhan",
        "type": "domain",
        "value": "manalyzer.org",
        "tags": [],
        "tweet": "https://x.com/skocherhan/status/2090803218368303283"
    },
    {
        "date": "2026-08-21 14:46:09",
        "user": "TKemmerling",
        "type": "domain",
        "value": "anadolucuhuriyeti.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090812709092962792"
    },
    {
        "date": "2026-08-21 14:46:28",
        "user": "TKemmerling",
        "type": "domain",
        "value": "terminandoconlatrata.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090812785970303089"
    },
    {
        "date": "2026-08-21 14:46:28",
        "user": "TKemmerling",
        "type": "domain",
        "value": "itnessequipmentfor.info",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090812785970303089"
    },
    {
        "date": "2026-08-21 15:30:43",
        "user": "TKemmerling",
        "type": "domain",
        "value": "malfeasantboogie.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090823923332239431"
    },
    {
        "date": "2026-08-21 15:30:43",
        "user": "TKemmerling",
        "type": "domain",
        "value": "tkmmanage.org",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/TKemmerling/status/2090823923332239431"
    },
    {
        "date": "2026-08-21 15:46:39",
        "user": "Coolcarlos17",
        "type": "domain",
        "value": "havan-com.site",
        "tags": [
            "#phishing",
            "#scam"
        ],
        "tweet": "https://x.com/Coolcarlos17/status/2090827933820584266"
    },
    {
        "date": "2026-08-21 17:25:39",
        "user": "ReBensk",
        "type": "domain",
        "value": "dichcxosghnd-dsvekdc.top",
        "tags": [
            "#Android",
            "#Trojan",
            "#malware"
        ],
        "tweet": "https://x.com/ReBensk/status/2090852847550418994"
    },
    {
        "date": "2026-08-21 18:11:24",
        "user": "Threatlabz",
        "type": "domain",
        "value": "download.cctoken.us",
        "tags": [],
        "tweet": "https://x.com/Threatlabz/status/2090864360738677070"
    },
    {
        "date": "2026-08-21 18:11:24",
        "user": "Threatlabz",
        "type": "domain",
        "value": "download.vvtoken.top",
        "tags": [],
        "tweet": "https://x.com/Threatlabz/status/2090864360738677070"
    },
    {
        "date": "2026-08-21 18:11:24",
        "user": "Threatlabz",
        "type": "domain",
        "value": "stripl.win-win.buzz",
        "tags": [],
        "tweet": "https://x.com/Threatlabz/status/2090864360738677070"
    },
    {
        "date": "2026-08-21 18:11:24",
        "user": "Threatlabz",
        "type": "domain",
        "value": "dl.vvtoken.top",
        "tags": [],
        "tweet": "https://x.com/Threatlabz/status/2090864360738677070"
    },
    {
        "date": "2026-08-21 18:11:24",
        "user": "Threatlabz",
        "type": "domain",
        "value": "api.us8266iw.xyz",
        "tags": [],
        "tweet": "https://x.com/Threatlabz/status/2090864360738677070"
    },
    {
        "date": "2026-08-21 20:51:04",
        "user": "Neiki__",
        "type": "domain",
        "value": "jlab.threat.rip",
        "tags": [],
        "tweet": "https://x.com/Neiki__/status/2090904540690170057"
    },
    {
        "date": "2026-08-21 22:15:57",
        "user": "Naouxq7",
        "type": "domain",
        "value": "dossieretudiant.polymlt.ca",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/Naouxq7/status/2090925904927011233"
    },
    {
        "date": "2026-08-21 22:16:40",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "getgreatgoodies.com",
        "tags": [],
        "tweet": "https://x.com/byrne_emmy12099/status/2090926084116369463"
    },
    {
        "date": "2026-08-21 22:41:06",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "dora0xyz.site",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2090932231158268119"
    },
    {
        "date": "2026-08-21 23:14:05",
        "user": "masaomi346",
        "type": "domain",
        "value": "biglcobeauth.vercel.app",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/masaomi346/status/2090940532818416110"
    },
    {
        "date": "2026-08-21 23:20:23",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "hiuier00304.github.io",
        "tags": [],
        "tweet": "https://x.com/byrne_emmy12099/status/2090942119838134728"
    },
    {
        "date": "2026-08-22 02:53:35",
        "user": "scanmalware",
        "type": "domain",
        "value": "cvqgs36nhw-wtrkblpw-3i2d0e-cvq79c.pages.dev",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/scanmalware/status/2090995771168481618"
    },
    {
        "date": "2026-08-22 03:45:03",
        "user": "patialavii",
        "type": "domain",
        "value": "scr33nc0nn3ctz00m.com",
        "tags": [],
        "tweet": "https://x.com/patialavii/status/2091008723959623721"
    },
    {
        "date": "2026-08-22 04:23:30",
        "user": "patialavii",
        "type": "domain",
        "value": "live-zoorn.com",
        "tags": [
            "#phishing"
        ],
        "tweet": "https://x.com/patialavii/status/2091018400403501447"
    },
    {
        "date": "2026-08-22 04:50:02",
        "user": "scanmalware",
        "type": "domain",
        "value": "gfytvd-wiyn-np4qjd-g9ewg7.pages.dev",
        "tags": [
            "#ransomware"
        ],
        "tweet": "https://x.com/scanmalware/status/2091025078561452488"
    }
]