[ { "date": "2026-04-23 00:09:03", "user": "PhishStats", "type": "url", "value": "http://pedagiodigital-automatico.com", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2047105433081397411" }, { "date": "2026-04-23 00:14:33", "user": "Merlax_", "type": "url", "value": "https://onlinemediascifras.lat", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2047106819974169055" }, { "date": "2026-04-23 00:14:33", "user": "Merlax_", "type": "url", "value": "https://bcondinoclientes.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2047106819974169055" }, { "date": "2026-04-23 00:14:33", "user": "Merlax_", "type": "url", "value": "https://www.abc-acessoseguro.site", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2047106819974169055" }, { "date": "2026-04-23 00:14:33", "user": "Merlax_", "type": "url", "value": "https://de-kunden-sicherheit.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2047106819974169055" }, { "date": "2026-04-23 00:46:26", "user": "masaomi346", "type": "url", "value": "http://macclean-storage.gitlab.io", "tags": [ "#malware" ], "tweet": "https://x.com/masaomi346/status/2047114841899626502" }, { "date": "2026-04-23 00:46:26", "user": "masaomi346", "type": "url", "value": "http://arkypc.com", "tags": [ "#malware" ], "tweet": "https://x.com/masaomi346/status/2047114841899626502" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://additioniqqwu.shop", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://coneogz.cyou", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://grannndjtaom.shop", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://jhardwaredwi.buzz", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://leypuuq.cyou", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://overwrougemny.shop", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 05:36:48", "user": "ishivtripathi", "type": "url", "value": "http://sep0.filetip.shop", "tags": [ "#malware" ], "tweet": "https://x.com/ishivtripathi/status/2047187915395281292" }, { "date": "2026-04-23 06:03:46", "user": "skocherhan", "type": "url", "value": "http://leypuuq.cy", "tags": [], "tweet": "https://x.com/skocherhan/status/2047194700109517205" }, { "date": "2026-04-23 06:26:03", "user": "Metemcyber", "type": "url", "value": "https://yrcwaptq.x13hm8.cn/gpajp/accunt/lginox/", "tags": [], "tweet": "https://x.com/Metemcyber/status/2047200310414942400" }, { "date": "2026-04-23 06:36:07", "user": "Metemcyber", "type": "url", "value": "https://meekys.mtffx.cn/gpajp/accunt/lginox/", "tags": [], "tweet": "https://x.com/Metemcyber/status/2047202842575052876" }, { "date": "2026-04-23 07:12:21", "user": "skocherhan", "type": "url", "value": "http://FranceVerif.fr", "tags": [], "tweet": "https://x.com/skocherhan/status/2047211959875936301" }, { "date": "2026-04-23 07:16:00", "user": "skocherhan", "type": "url", "value": "http://vk6t8m2.travelmarkbd.com", "tags": [], "tweet": "https://x.com/skocherhan/status/2047212879460417908" }, { "date": "2026-04-23 07:22:15", "user": "Metemcyber", "type": "url", "value": "https://rbxmnbuzo.ksfmdqq.cn/nomelo/login_index/", "tags": [], "tweet": "https://x.com/Metemcyber/status/2047214450617524456" }, { "date": "2026-04-23 08:23:42", "user": "malwrhunterteam", "type": "url", "value": "http://144.126.148.231", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2047229915389370795" }, { "date": "2026-04-23 08:23:42", "user": "malwrhunterteam", "type": "url", "value": "http://144.126.148.231/share/", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2047229915389370795" }, { "date": "2026-04-23 08:49:09", "user": "malwrhunterteam", "type": "url", "value": "http://paksecurity.org", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2047236320410374389" }, { "date": "2026-04-23 09:02:46", "user": "smica83", "type": "url", "value": "http://visaimage-storage.icu", "tags": [], "tweet": "https://x.com/smica83/status/2047239747685249414" }, { "date": "2026-04-23 09:07:42", "user": "smica83", "type": "url", "value": "http://193.169.194.39", "tags": [], "tweet": "https://x.com/smica83/status/2047240990591680806" }, { "date": "2026-04-23 09:17:31", "user": "smica83", "type": "url", "value": "http://188.137.255.66/l/2e0b44/raw.js", "tags": [], "tweet": "https://x.com/smica83/status/2047243460424442266" }, { "date": "2026-04-23 09:56:25", "user": "skocherhan", "type": "url", "value": "http://38.60.235.109", "tags": [], "tweet": "https://x.com/skocherhan/status/2047253251230232603" }, { "date": "2026-04-23 10:34:36", "user": "FalconFeedsio", "type": "url", "value": "https://t.co/NBfpS0qBVw", "tags": [], "tweet": "https://x.com/FalconFeedsio/status/2047262860347408479" }, { "date": "2026-04-23 11:54:01", "user": "smica83", "type": "url", "value": "http://154.81.37.170", "tags": [], "tweet": "https://x.com/smica83/status/2047282842942521762" }, { "date": "2026-04-23 11:58:55", "user": "smica83", "type": "url", "value": "http://myrawupdate.duckdns.org:2404", "tags": [], "tweet": "https://x.com/smica83/status/2047284078748074151" }, { "date": "2026-04-23 11:59:20", "user": "sicehice", "type": "url", "value": "http://14.1.107.44:53652/Mozi.m", "tags": [], "tweet": "https://x.com/sicehice/status/2047284182791885108" }, { "date": "2026-04-23 12:33:29", "user": "skocherhan", "type": "url", "value": "http://188.137.255.66/l/2e0b44/ra", "tags": [], "tweet": "https://x.com/skocherhan/status/2047292778338558093" }, { "date": "2026-04-23 13:59:46", "user": "klawlikula", "type": "url", "value": "http://storage.googleapis.com/hmdbox/hmd-v1-cl2(.)html", "tags": [], "tweet": "https://x.com/klawlikula/status/2047314488613896214" }, { "date": "2026-04-23 14:05:54", "user": "smica83", "type": "url", "value": "http://quote-texas-son-manufactured.trycloudflare.com", "tags": [], "tweet": "https://x.com/smica83/status/2047316034114183459" }, { "date": "2026-04-23 15:29:07", "user": "JAMESWT_WT", "type": "url", "value": "https://www.abc-acessos", "tags": [ "#phishing" ], "tweet": "https://x.com/JAMESWT_WT/status/2047336975074517236" }, { "date": "2026-04-23 15:59:56", "user": "luke92881", "type": "url", "value": "https://www-rarlab.com", "tags": [], "tweet": "https://x.com/luke92881/status/2047344730992742758" }, { "date": "2026-04-23 16:51:27", "user": "skocherhan", "type": "url", "value": "http://authorities-vessel-denver-indie.trycloudflare.com/ssadoc/", "tags": [], "tweet": "https://x.com/skocherhan/status/2047357694210617570" }, { "date": "2026-04-23 18:00:04", "user": "phatomcandle", "type": "url", "value": "http://nid.navmercorp.n-e.kr", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2047374964760949174" }, { "date": "2026-04-23 18:00:04", "user": "phatomcandle", "type": "url", "value": "http://163.245.215.46", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2047374964760949174" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://oercm-3load.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm25v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm58v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm96v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nopdoc69load.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm14v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm19v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm4v.dynv6.net", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 18:28:45", "user": "skocherhan", "type": "url", "value": "http://nhpolercm83v.dynv6.ne", "tags": [ "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047382182000312798" }, { "date": "2026-04-23 19:15:30", "user": "skocherhan", "type": "url", "value": "http://storage.googleapis.com/hmdbox/hm", "tags": [], "tweet": "https://x.com/skocherhan/status/2047393945705992622" }, { "date": "2026-04-23 19:24:02", "user": "PhishStats", "type": "url", "value": "https://michel.suiv-expd001.pro", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2047396096020824220" }, { "date": "2026-04-24 00:17:58", "user": "masaomi346", "type": "url", "value": "https://ar4615.cn/w2/f2/weq=guoshuis/", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2047470067794022821" }, { "date": "2026-04-24 00:55:14", "user": "fbgwls245", "type": "url", "value": "http://ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion", "tags": [ "#ransomware" ], "tweet": "https://x.com/fbgwls245/status/2047479442973552693" }, { "date": "2026-04-24 02:55:31", "user": "masaomi346", "type": "url", "value": "https://www-pay.sprots8-milem6.com/utxfaZfslmoJ", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2047509714301522364" }, { "date": "2026-04-24 02:55:31", "user": "masaomi346", "type": "url", "value": "https://www2-pay.news-178zhibo.com/OuLn3jr77vMr", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2047509714301522364" }, { "date": "2026-04-24 02:55:31", "user": "masaomi346", "type": "url", "value": "https://www-pay.uy5722.com/KfsDuyo3ev86", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2047509714301522364" }, { "date": "2026-04-24 04:45:44", "user": "JAMESWT_WT", "type": "url", "value": "https://sensitive-olive-alligator.31-22-7-7.cpanel.site/wind/", "tags": [ "#phishing" ], "tweet": "https://x.com/JAMESWT_WT/status/2047537450449273239" }, { "date": "2026-04-24 06:59:12", "user": "skocherhan", "type": "url", "value": "http://esevasecurefile.store", "tags": [], "tweet": "https://x.com/skocherhan/status/2047571039501115410" }, { "date": "2026-04-24 08:05:46", "user": "skocherhan", "type": "url", "value": "https://www2-pay.news-178zhibo.co", "tags": [], "tweet": "https://x.com/skocherhan/status/2047587790771179905" }, { "date": "2026-04-24 08:06:05", "user": "skocherhan", "type": "url", "value": "http://i.backedupweb3quantumledger", "tags": [], "tweet": "https://x.com/skocherhan/status/2047587870307754228" }, { "date": "2026-04-24 08:57:13", "user": "fbgwls245", "type": "url", "value": "http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion", "tags": [ "#ransomware" ], "tweet": "https://x.com/fbgwls245/status/2047600738344550679" }, { "date": "2026-04-24 09:59:43", "user": "smica83", "type": "url", "value": "http://85.11.161.198:9191/YRJKHYWK.msi", "tags": [], "tweet": "https://x.com/smica83/status/2047616468909506667" }, { "date": "2026-04-24 10:25:13", "user": "masaomi346", "type": "url", "value": "https://buzxsmv.cn/k1/da2/g2/ads=jcbs/", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2047622884882079831" }, { "date": "2026-04-24 10:37:16", "user": "smica83", "type": "url", "value": "http://168.100.8.179:8084", "tags": [], "tweet": "https://x.com/smica83/status/2047625917212577950" }, { "date": "2026-04-24 13:08:58", "user": "JAMESWT_WT", "type": "url", "value": "https://halfmillion-iq.com/halfmillion-iq.zip", "tags": [ "#ClickFix" ], "tweet": "https://x.com/JAMESWT_WT/status/2047664093541048542" }, { "date": "2026-04-24 13:48:31", "user": "skocherhan", "type": "url", "value": "http://audit.checkmarx.cx", "tags": [], "tweet": "https://x.com/skocherhan/status/2047674047115252152" }, { "date": "2026-04-24 13:48:31", "user": "skocherhan", "type": "url", "value": "http://94.154.172.43", "tags": [], "tweet": "https://x.com/skocherhan/status/2047674047115252152" }, { "date": "2026-04-24 15:48:41", "user": "0xPEMB", "type": "url", "value": "http://passkeyactivate.com", "tags": [ "#phishing" ], "tweet": "https://x.com/0xPEMB/status/2047704287912898963" }, { "date": "2026-04-24 16:28:04", "user": "Malwarehunterr", "type": "url", "value": "http://incometax.onlinegov.in.net", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047714198055186643" }, { "date": "2026-04-24 16:28:04", "user": "Malwarehunterr", "type": "url", "value": "http://115.124.108.190", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047714198055186643" }, { "date": "2026-04-24 17:05:20", "user": "ImCharlesN", "type": "url", "value": "http://t.co/dAAOGfA5xE", "tags": [ "#Raccoon" ], "tweet": "https://x.com/ImCharlesN/status/2047723577491824724" }, { "date": "2026-04-24 20:11:24", "user": "smica83", "type": "url", "value": "https://discretion-barrel-formed-vault.trycloudflare.com", "tags": [ "#opendir" ], "tweet": "https://x.com/smica83/status/2047770402743632327" }, { "date": "2026-04-25 00:02:08", "user": "PhishStats", "type": "url", "value": "https://www.imaxstores.cfd/?cid=79&url=", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2047828468948238771" }, { "date": "2026-04-25 00:10:00", "user": "nahamike01", "type": "url", "value": "http://104.164.55.107", "tags": [], "tweet": "https://x.com/nahamike01/status/2047830645406343424" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://oscatower.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://nooraeso.r-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://bermates.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://jungop.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://brimo.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://queosera2.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://morotomot.r-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://hayoungju.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://jujeong.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://docotot.o-r.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://neratras2.kro.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://tradoam.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:17:00", "user": "skocherhan", "type": "url", "value": "http://artisgo.n-e.kr", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2047907939814388089" }, { "date": "2026-04-25 05:53:00", "user": "Malwarehunterr", "type": "url", "value": "http://access-sharepoint-exchange.d2a8tpeb2129r7.amplifyapp.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047916824717860990" }, { "date": "2026-04-25 05:53:00", "user": "Malwarehunterr", "type": "url", "value": "http://secure-share-r1y7.p-cebompw5.workers.dev/l/UP4HIVXTl3Q", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047916824717860990" }, { "date": "2026-04-25 05:59:41", "user": "Malwarehunterr", "type": "url", "value": "http://sharepoint-files-download.pages.dev", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047918451440922886" }, { "date": "2026-04-25 05:59:41", "user": "Malwarehunterr", "type": "url", "value": "http://rsmixed.com/abuloma2share/mailer.php", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047918451440922886" }, { "date": "2026-04-25 07:49:00", "user": "Sekurak", "type": "url", "value": "http://zondanewsletter.pl", "tags": [], "tweet": "https://x.com/Sekurak/status/2047946091040002215" }, { "date": "2026-04-25 08:26:32", "user": "Malwarehunterr", "type": "url", "value": "http://graph.org/Withdrawal-process-04-14", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047955407109533742" }, { "date": "2026-04-25 08:26:32", "user": "Malwarehunterr", "type": "url", "value": "http://97ee4.catex.at/cnbcard/", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047955407109533742" }, { "date": "2026-04-25 09:43:00", "user": "skocherhan", "type": "url", "value": "http://youtude-dl.pro", "tags": [], "tweet": "https://x.com/skocherhan/status/2047974809154343022" }, { "date": "2026-04-25 09:43:00", "user": "skocherhan", "type": "url", "value": "http://185.107.74.215", "tags": [], "tweet": "https://x.com/skocherhan/status/2047974809154343022" }, { "date": "2026-04-25 10:14:00", "user": "PhishStats", "type": "url", "value": "https://secureactivitysett726411.li", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2047982655778525480" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://wordplumbprotectstairs.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://bowl-fire-ceil-found.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://candle-plumb-found-ceil.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://floor-interior-fire-found.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://plumb-table-floor-protect.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 10:59:45", "user": "Malwarehunterr", "type": "url", "value": "http://bowl-interior-word-plumb.autos", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2047993964595388805" }, { "date": "2026-04-25 11:28:00", "user": "skocherhan", "type": "url", "value": "http://188.53.207.222", "tags": [], "tweet": "https://x.com/skocherhan/status/2048001121621357014" }, { "date": "2026-04-25 13:12:00", "user": "harugasumi", "type": "url", "value": "https://nufesafew.z1.web.core.windows.net", "tags": [], "tweet": "https://x.com/harugasumi/status/2048027347069358122" }, { "date": "2026-04-25 13:54:59", "user": "masaomi346", "type": "url", "value": "https://zamknj.xagnnx.cn/gpajp/accunt/lginox/", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2048038064321331477" }, { "date": "2026-04-25 14:50:00", "user": "blackorbird", "type": "url", "value": "http://hostednowhere.com", "tags": [], "tweet": "https://x.com/blackorbird/status/2048052130192507293" }, { "date": "2026-04-25 15:00:00", "user": "volrant136", "type": "url", "value": "https://webapp-getdocumentodwnload-pacapp.malik-jaani786.workers.dev/?pdf_download3", "tags": [ "#APT" ], "tweet": "https://x.com/volrant136/status/2048054426078724126" }, { "date": "2026-04-25 16:17:00", "user": "Malwarehunterr", "type": "url", "value": "http://nmc.govonline.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048073842187436201" }, { "date": "2026-04-25 16:17:00", "user": "Malwarehunterr", "type": "url", "value": "http://mp.pwd.govonline.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048073842187436201" }, { "date": "2026-04-25 16:17:00", "user": "Malwarehunterr", "type": "url", "value": "http://rpf.hrms.govonline.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048073842187436201" }, { "date": "2026-04-25 16:17:00", "user": "Malwarehunterr", "type": "url", "value": "http://irctc.govonline.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048073842187436201" }, { "date": "2026-04-25 16:17:00", "user": "Malwarehunterr", "type": "url", "value": "http://115.124.108.190", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048073842187436201" }, { "date": "2026-04-25 17:43:00", "user": "sicehice", "type": "url", "value": "http://85.11.167.177/Yboats.arm7", "tags": [], "tweet": "https://x.com/sicehice/status/2048095632515113182" }, { "date": "2026-04-25 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://bigfile.navcloudstorage.n-e.kr", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2048099743025541384" }, { "date": "2026-04-25 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://163.245.215.46", "tags": [ "#APT", "#C2", "#Kimsuky", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2048099743025541384" }, { "date": "2026-04-25 19:09:14", "user": "JRoosen", "type": "url", "value": "http://149.28.141.17/timesyncd/share/", "tags": [], "tweet": "https://x.com/JRoosen/status/2048117144336961967" }, { "date": "2026-04-25 21:01:00", "user": "skocherhan", "type": "url", "value": "http://cj597826.tw1.ru", "tags": [ "#AgentTesla" ], "tweet": "https://x.com/skocherhan/status/2048145505524289720" }, { "date": "2026-04-25 21:17:00", "user": "skocherhan", "type": "url", "value": "http://authorities-vessel-denver-indie.trycloudflare.com/ssadoc/", "tags": [], "tweet": "https://x.com/skocherhan/status/2048149423058833783" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc5v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://nmethodsrc21v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://erpolicies-21v.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://polercm-55v.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc34v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc20v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc33v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:32:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc45v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048153192563613921" }, { "date": "2026-04-25 21:34:00", "user": "skocherhan", "type": "url", "value": "http://agfsddfdfdfndesfr.forum", "tags": [], "tweet": "https://x.com/skocherhan/status/2048153684840796379" }, { "date": "2026-04-25 22:40:00", "user": "sicehice", "type": "url", "value": "http://163.61.39.140/hiddenbin/boatnet.mips", "tags": [], "tweet": "https://x.com/sicehice/status/2048170213082825187" }, { "date": "2026-04-26 01:07:00", "user": "PhishStats", "type": "url", "value": "http://cmdvitorborges.com", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2048207321625497714" }, { "date": "2026-04-26 06:03:00", "user": "skocherhan", "type": "url", "value": "http://greenwoodsinvestmentsltd.pro", "tags": [ "#phishing" ], "tweet": "https://x.com/skocherhan/status/2048281696961745290" }, { "date": "2026-04-26 09:17:00", "user": "masaomi346", "type": "url", "value": "https://dsoqqcfd.vjxjrfyu.cn/optmer-prefere_html/", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2048330734994420149" }, { "date": "2026-04-26 11:24:00", "user": "fbgwls245", "type": "url", "value": "http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion", "tags": [ "#ransomware" ], "tweet": "https://x.com/fbgwls245/status/2048362508742975738" }, { "date": "2026-04-26 12:43:00", "user": "BlinkzSec", "type": "url", "value": "https://urlhaus.abuse.ch/host/176.65.139.143/", "tags": [], "tweet": "https://x.com/BlinkzSec/status/2048382400040743096" }, { "date": "2026-04-26 13:25:00", "user": "Malwarehunterr", "type": "url", "value": "http://zon123.online", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048392934865916244" }, { "date": "2026-04-26 14:04:00", "user": "AlvieriD", "type": "url", "value": "https://pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion", "tags": [], "tweet": "https://x.com/AlvieriD/status/2048402779467620710" }, { "date": "2026-04-26 14:15:00", "user": "Malwarehunterr", "type": "url", "value": "http://notifications.googleapis.com/email/redirect", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048405527336738920" }, { "date": "2026-04-26 14:15:00", "user": "Malwarehunterr", "type": "url", "value": "http://markhamkidsclinic.com/o1234i678z", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048405527336738920" }, { "date": "2026-04-26 14:15:00", "user": "Malwarehunterr", "type": "url", "value": "http://maxbarkod.com/log/login.php", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048405527336738920" }, { "date": "2026-04-26 14:15:00", "user": "Malwarehunterr", "type": "url", "value": "http://maxbarkod.com/log/send_login.php", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048405527336738920" }, { "date": "2026-04-26 14:26:00", "user": "Malwarehunterr", "type": "url", "value": "http://monopizzapos.online/cgi/login.php", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048408321703731274" }, { "date": "2026-04-26 15:44:00", "user": "sicehice", "type": "url", "value": "http://42.224.7.121:44950/Mozi.m", "tags": [], "tweet": "https://x.com/sicehice/status/2048427969484304838" }, { "date": "2026-04-26 15:47:00", "user": "sicehice", "type": "url", "value": "http://83.168.110.191/cat.sh", "tags": [], "tweet": "https://x.com/sicehice/status/2048428725658652942" }, { "date": "2026-04-26 16:00:00", "user": "volrant136", "type": "url", "value": "https://zimbra-nyatel-production.up.railway.app/login.html?gfjdliotrgojnghgherbegrehureert0e0ee=1", "tags": [ "#APT" ], "tweet": "https://x.com/volrant136/status/2048431910871875851" }, { "date": "2026-04-26 18:00:00", "user": "phatomcandle", "type": "url", "value": "http://31.58.220.250", "tags": [ "#APT", "#C2", "#malware" ], "tweet": "https://x.com/phatomcandle/status/2048462127254696300" }, { "date": "2026-04-26 18:10:00", "user": "skocherhan", "type": "url", "value": "http://jer.piexlt.com", "tags": [], "tweet": "https://x.com/skocherhan/status/2048464654775541779" }, { "date": "2026-04-26 18:10:00", "user": "skocherhan", "type": "url", "value": "http://main.zeosshop.ir", "tags": [], "tweet": "https://x.com/skocherhan/status/2048464654775541779" }, { "date": "2026-04-26 18:10:00", "user": "skocherhan", "type": "url", "value": "http://master.zeosshop.ir", "tags": [], "tweet": "https://x.com/skocherhan/status/2048464654775541779" }, { "date": "2026-04-26 18:10:00", "user": "skocherhan", "type": "url", "value": "http://servers.zeosshop.ir", "tags": [], "tweet": "https://x.com/skocherhan/status/2048464654775541779" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodccpass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodcbpass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodcapass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodbspass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://nid.ncodbspass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://nid.ncodbzpass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodbypass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodbzpass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 18:18:00", "user": "skocherhan", "type": "url", "value": "http://ncodbvpass.dynv6.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048466653331988537" }, { "date": "2026-04-26 19:56:34", "user": "skocherhan", "type": "url", "value": "http://previous-everywhere-achieving-bobby.trycloudflare.com/IGhhbmR5IG9ubGluZSB,0b29sIHRvIGVuY29kZSBvciBkZWNvZGUgeW91/", "tags": [ "#phishing" ], "tweet": "https://x.com/skocherhan/status/2048491443971305619" }, { "date": "2026-04-26 20:01:00", "user": "skocherhan", "type": "url", "value": "http://deposit-crew-appointed-princess.trycloudflare.com/xxace36/26sc/web/mail.php", "tags": [ "#phishing" ], "tweet": "https://x.com/skocherhan/status/2048492627096404397" }, { "date": "2026-04-26 20:41:00", "user": "Malwarehunterr", "type": "url", "value": "http://smartbenefits.site", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048502759331389910" }, { "date": "2026-04-26 20:41:00", "user": "Malwarehunterr", "type": "url", "value": "http://cartspecials.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048502759331389910" }, { "date": "2026-04-26 23:28:00", "user": "Priv8Shops", "type": "url", "value": "https://iepvirgendecopacabana.com/cgibin/", "tags": [ "#phishing" ], "tweet": "https://x.com/Priv8Shops/status/2048544885494747285" }, { "date": "2026-04-26 23:28:00", "user": "Priv8Shops", "type": "url", "value": "https://iepvirgendecopacabana.com/htaccess/", "tags": [ "#phishing" ], "tweet": "https://x.com/Priv8Shops/status/2048544885494747285" }, { "date": "2026-04-27 00:58:00", "user": "sicehice", "type": "url", "value": "http://87.121.79.73/ok", "tags": [], "tweet": "https://x.com/sicehice/status/2048567388187025858" }, { "date": "2026-04-27 01:28:00", "user": "masaomi346", "type": "url", "value": "https://login.b9l6kfqw.shop/login", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2048574924068118575" }, { "date": "2026-04-27 02:54:00", "user": "Cyberteam008", "type": "url", "value": "http://94.126.224.99", "tags": [ "#APT" ], "tweet": "https://x.com/Cyberteam008/status/2048596656141340906" }, { "date": "2026-04-27 02:54:00", "user": "Cyberteam008", "type": "url", "value": "http://mofa-go-np.direct880.net", "tags": [ "#APT" ], "tweet": "https://x.com/Cyberteam008/status/2048596656141340906" }, { "date": "2026-04-27 02:54:00", "user": "Cyberteam008", "type": "url", "value": "http://mofa-gov-np.direct880.net", "tags": [ "#APT" ], "tweet": "https://x.com/Cyberteam008/status/2048596656141340906" }, { "date": "2026-04-27 02:54:00", "user": "Cyberteam008", "type": "url", "value": "http://pakun-org.direct880.net", "tags": [ "#APT" ], "tweet": "https://x.com/Cyberteam008/status/2048596656141340906" }, { "date": "2026-04-27 04:37:00", "user": "PhishStats", "type": "url", "value": "http://nodu1718.odns.fr/sjssjdj/alibaba/", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2048622601094742217" }, { "date": "2026-04-27 05:19:00", "user": "romonlyht", "type": "url", "value": "https://rushadventure.com/cart/Pd1qtLn3XGYvDOdEKDTQ0", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048633016021631347" }, { "date": "2026-04-27 05:20:00", "user": "romonlyht", "type": "url", "value": "https://rushadventure.com/goods/vT0nkA3OdO9p5CbP4fwfS", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048633302719058241" }, { "date": "2026-04-27 05:33:00", "user": "romonlyht", "type": "url", "value": "https://bwymenu.com/read/odtgzw", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048636617435525508" }, { "date": "2026-04-27 05:33:00", "user": "romonlyht", "type": "url", "value": "https://sfht.mobi/kokiy1/", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048636623055962233" }, { "date": "2026-04-27 05:34:00", "user": "romonlyht", "type": "url", "value": "https://haikek.com/awapsf/redirect", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048636940279595352" }, { "date": "2026-04-27 05:34:00", "user": "romonlyht", "type": "url", "value": "https://sfht.mobi/kokiy1", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048636940279595352" }, { "date": "2026-04-27 05:35:11", "user": "skocherhan", "type": "url", "value": "https://iepvirgendecopacabana.com/cgibin/", "tags": [], "tweet": "https://x.com/skocherhan/status/2048637060919996814" }, { "date": "2026-04-27 05:35:11", "user": "skocherhan", "type": "url", "value": "https://iepvirgendecopacabana.com/htaccess/", "tags": [], "tweet": "https://x.com/skocherhan/status/2048637060919996814" }, { "date": "2026-04-27 05:38:00", "user": "masaomi346", "type": "url", "value": "https://login.guf792lp.shop/login", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2048637920891072891" }, { "date": "2026-04-27 05:45:00", "user": "romonlyht", "type": "url", "value": "https://dhlnorth.com", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048639773473182103" }, { "date": "2026-04-27 06:42:00", "user": "romonlyht", "type": "url", "value": "https://mountainviewnursery.online", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048654115849617635" }, { "date": "2026-04-27 06:42:00", "user": "romonlyht", "type": "url", "value": "https://ktoshi110.github.io/Amazons/", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048654115849617635" }, { "date": "2026-04-27 06:44:00", "user": "romonlyht", "type": "url", "value": "https://hongkewood.com/6WDicTOgYw.info.jp", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048654601835221159" }, { "date": "2026-04-27 06:44:00", "user": "romonlyht", "type": "url", "value": "https://beachwearcostumi.com/bzkwzaws", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048654601835221159" }, { "date": "2026-04-27 06:46:00", "user": "K_N1kolenko", "type": "url", "value": "https://steamcommunity.com/profiles/76561198709529056", "tags": [ "#Vidar", "#stealer" ], "tweet": "https://x.com/K_N1kolenko/status/2048655046028439966" }, { "date": "2026-04-27 06:46:00", "user": "K_N1kolenko", "type": "url", "value": "https://telegram.me/b8bz11", "tags": [ "#Vidar", "#stealer" ], "tweet": "https://x.com/K_N1kolenko/status/2048655046028439966" }, { "date": "2026-04-27 06:46:00", "user": "romonlyht", "type": "url", "value": "https://yxwhzmysgs.com/OONOHZy5tm.digital", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048655094305243268" }, { "date": "2026-04-27 06:48:00", "user": "romonlyht", "type": "url", "value": "https://hongkewood.com/UHUAJOkG0a.company", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048655579259040035" }, { "date": "2026-04-27 06:50:00", "user": "romonlyht", "type": "url", "value": "https://gamingchaircheap.com/?track=Ozp90nsDnouw", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048656033980280955" }, { "date": "2026-04-27 06:52:00", "user": "romonlyht", "type": "url", "value": "https://hombreropa.com/media/nQiEGaeVRRY-.xml", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048656414722408553" }, { "date": "2026-04-27 06:59:00", "user": "romonlyht", "type": "url", "value": "https://www-pay.zhn-wap-hth.com/?TYQc1puZ.jpg", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048658152523272698" }, { "date": "2026-04-27 07:05:00", "user": "romonlyht", "type": "url", "value": "https://www2-pay.download-home-kaiyun.com/?fl9DdDjw.jpg", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048659743636676743" }, { "date": "2026-04-27 07:05:00", "user": "romonlyht", "type": "url", "value": "https://login.guf792lp.shop/mxh7ysng?_t=TA4qiO51OBD9pcHJj7jltfHiLdYoDiDTzV0DA1XWaCs", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048659745620545771" }, { "date": "2026-04-27 07:10:00", "user": "romonlyht", "type": "url", "value": "https://toothbased.com/?type=verify&key=wotdhwafcg", "tags": [ "#phishing" ], "tweet": "https://x.com/romonlyht/status/2048661169339305996" }, { "date": "2026-04-27 07:52:00", "user": "malwrhunterteam", "type": "url", "value": "https://zyisykm.shop", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2048671502443180444" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://indiagov.shop", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://xhxz.info", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://kjrywrzx.shop", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://gooomld.top", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://goolmor.cyou", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://fgsdol.icu", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://vsdnk.top", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://gooomoel.shop", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://Letter.zip", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://Check.zip", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 08:48:00", "user": "Malwarehunterr", "type": "url", "value": "http://38.76.199.112", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2048685639403774218" }, { "date": "2026-04-27 09:56:00", "user": "smica83", "type": "url", "value": "http://lesoulkir.info", "tags": [], "tweet": "https://x.com/smica83/status/2048702700435411434" }, { "date": "2026-04-27 10:07:00", "user": "smica83", "type": "url", "value": "https://imgresim.net/Screen_Shot_1253_246469384693746_2469724.jpg.zip", "tags": [], "tweet": "https://x.com/smica83/status/2048705522451271688" }, { "date": "2026-04-27 10:26:00", "user": "smica83", "type": "url", "value": "https://d.tmpfile.link/public/2026-04-27/afe0c156-084a-480c-9d8a-7b94450c6a04/ghhjgr.png", "tags": [ "#AsyncRAT" ], "tweet": "https://x.com/smica83/status/2048710333724860927" }, { "date": "2026-04-27 10:26:00", "user": "smica83", "type": "url", "value": "http://lapoire6.hopto.org", "tags": [ "#AsyncRAT" ], "tweet": "https://x.com/smica83/status/2048710333724860927" }, { "date": "2026-04-27 10:26:00", "user": "smica83", "type": "url", "value": "http://lapoire7.hopto.org", "tags": [ "#AsyncRAT" ], "tweet": "https://x.com/smica83/status/2048710333724860927" }, { "date": "2026-04-27 10:26:00", "user": "smica83", "type": "url", "value": "http://lapoire8.hopto.org", "tags": [ "#AsyncRAT" ], "tweet": "https://x.com/smica83/status/2048710333724860927" }, { "date": "2026-04-27 11:15:00", "user": "malwrhunterteam", "type": "url", "value": "http://104.164.55.223", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2048722660113178659" }, { "date": "2026-04-27 11:17:00", "user": "smica83", "type": "url", "value": "http://telecom-exceed-aid-charts.trycloudflare.com", "tags": [], "tweet": "https://x.com/smica83/status/2048723094185934944" }, { "date": "2026-04-27 12:24:00", "user": "masaomi346", "type": "url", "value": "http://paragon.goodfellasdiner.com", "tags": [ "#malware" ], "tweet": "https://x.com/masaomi346/status/2048740155817930807" }, { "date": "2026-04-27 12:29:00", "user": "Metemcyber", "type": "url", "value": "https://nzrcovqs.nvasz.cn/iiufhys/eorio/loging/", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048741218151240179" }, { "date": "2026-04-27 12:29:00", "user": "Metemcyber", "type": "url", "value": "http://43.165.166.156", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048741218151240179" }, { "date": "2026-04-27 12:34:00", "user": "Malwarehunterr", "type": "url", "value": "http://netflix-home.info", "tags": [ "#phishing" ], "tweet": "https://x.com/Malwarehunterr/status/2048742556083925203" }, { "date": "2026-04-27 12:34:49", "user": "Metemcyber", "type": "url", "value": "https://dfumbu.fytwfj.cn/nomelo/login_index/", "tags": [], "tweet": "https://x.com/Metemcyber/status/2048742665014157584" }, { "date": "2026-04-27 12:37:00", "user": "masaomi346", "type": "url", "value": "http://mac-cleantool.gitlab.io", "tags": [ "#infostealer", "#malware" ], "tweet": "https://x.com/masaomi346/status/2048743434689949721" }, { "date": "2026-04-27 12:37:00", "user": "masaomi346", "type": "url", "value": "http://dpsmuz.com", "tags": [ "#infostealer", "#malware" ], "tweet": "https://x.com/masaomi346/status/2048743434689949721" }, { "date": "2026-04-27 12:38:00", "user": "Metemcyber", "type": "url", "value": "https://stultiern.iceaz.cn/yual_login_exp/getuug/", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048743709538431467" }, { "date": "2026-04-27 13:54:00", "user": "500mk500", "type": "url", "value": "http://195.201.104.53", "tags": [ "#APT", "#Lazarus" ], "tweet": "https://x.com/500mk500/status/2048762621424226310" }, { "date": "2026-04-27 13:54:00", "user": "500mk500", "type": "url", "value": "http://195.201.104.53:6931", "tags": [ "#APT", "#Lazarus" ], "tweet": "https://x.com/500mk500/status/2048762621424226310" }, { "date": "2026-04-27 13:54:00", "user": "500mk500", "type": "url", "value": "http://195.201.104.53:6936", "tags": [ "#APT", "#Lazarus" ], "tweet": "https://x.com/500mk500/status/2048762621424226310" }, { "date": "2026-04-27 13:54:00", "user": "500mk500", "type": "url", "value": "http://195.201.104.53:6939", "tags": [ "#APT", "#Lazarus" ], "tweet": "https://x.com/500mk500/status/2048762621424226310" }, { "date": "2026-04-27 13:54:00", "user": "500mk500", "type": "url", "value": "http://216.126.224.220:5976", "tags": [ "#APT", "#Lazarus" ], "tweet": "https://x.com/500mk500/status/2048762621424226310" }, { "date": "2026-04-27 17:50:00", "user": "brkalbyrk7", "type": "url", "value": "http://filehappytomato.com", "tags": [], "tweet": "https://x.com/brkalbyrk7/status/2048822026450657391" }, { "date": "2026-04-27 17:50:00", "user": "brkalbyrk7", "type": "url", "value": "http://mendalik.com", "tags": [], "tweet": "https://x.com/brkalbyrk7/status/2048822026450657391" }, { "date": "2026-04-27 17:50:00", "user": "brkalbyrk7", "type": "url", "value": "http://cvetochek75.com", "tags": [], "tweet": "https://x.com/brkalbyrk7/status/2048822026450657391" }, { "date": "2026-04-27 18:30:00", "user": "g0njxa", "type": "url", "value": "http://chocolatey.co.com", "tags": [], "tweet": "https://x.com/g0njxa/status/2048832122618847252" }, { "date": "2026-04-27 18:30:00", "user": "g0njxa", "type": "url", "value": "http://chocolatey.net", "tags": [], "tweet": "https://x.com/g0njxa/status/2048832122618847252" }, { "date": "2026-04-27 18:30:00", "user": "g0njxa", "type": "url", "value": "http://api.bio9438.com", "tags": [], "tweet": "https://x.com/g0njxa/status/2048832122618847252" }, { "date": "2026-04-27 18:30:00", "user": "g0njxa", "type": "url", "value": "http://olive3451.com", "tags": [], "tweet": "https://x.com/g0njxa/status/2048832122618847252" }, { "date": "2026-04-27 18:30:00", "user": "g0njxa", "type": "url", "value": "http://community.chocolatey.net/install.ps1", "tags": [], "tweet": "https://x.com/g0njxa/status/2048832122618847252" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://unlockeblog12s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://unlockeblog15s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://eboardreport5s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://unlockeblog10s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://eboardreport18s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://unlockeblog19s.dynuddns.net", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 18:59:00", "user": "skocherhan", "type": "url", "value": "http://enboardingreport18s.dns.army", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2048839411962396813" }, { "date": "2026-04-27 20:54:00", "user": "smica83", "type": "url", "value": "http://witch-skins-lip-coal.trycloudflare.com", "tags": [], "tweet": "https://x.com/smica83/status/2048868515348652107" }, { "date": "2026-04-27 21:11:00", "user": "malwrhunterteam", "type": "url", "value": "http://maiden-apply-looks-education.trycloudflare.com", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2048872565095936175" }, { "date": "2026-04-27 21:17:00", "user": "hipdead010", "type": "url", "value": "http://dianegov.co", "tags": [ "#AsyncRAT", "#Dcrat" ], "tweet": "https://x.com/hipdead010/status/2048874206431969653" }, { "date": "2026-04-27 21:17:00", "user": "hipdead010", "type": "url", "value": "http://consultaprocesosramajudicialgov.run.place", "tags": [ "#AsyncRAT", "#Dcrat" ], "tweet": "https://x.com/hipdead010/status/2048874206431969653" }, { "date": "2026-04-27 21:35:00", "user": "skocherhan", "type": "url", "value": "http://38.83.112.137:443", "tags": [], "tweet": "https://x.com/skocherhan/status/2048878734149579050" }, { "date": "2026-04-27 21:35:00", "user": "skocherhan", "type": "url", "value": "http://38.83.112.137:3000", "tags": [], "tweet": "https://x.com/skocherhan/status/2048878734149579050" }, { "date": "2026-04-27 21:35:00", "user": "skocherhan", "type": "url", "value": "http://149.56.141.176:8081", "tags": [], "tweet": "https://x.com/skocherhan/status/2048878734149579050" }, { "date": "2026-04-27 21:35:00", "user": "skocherhan", "type": "url", "value": "http://193.181.211.79:5001", "tags": [], "tweet": "https://x.com/skocherhan/status/2048878734149579050" }, { "date": "2026-04-27 21:35:00", "user": "skocherhan", "type": "url", "value": "http://77.110.120.34:5000", "tags": [], "tweet": "https://x.com/skocherhan/status/2048878734149579050" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://edeliever-address-verify.biz", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://appleviewer.sbs", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://digital-notice-kr.sbs", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://public-revenue-info.biz", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://urgent-notice-check.click", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://epdf-user-view.quest", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://digital-post.live", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://official-notice.click", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 22:54:00", "user": "skocherhan", "type": "url", "value": "http://152.32.243.224", "tags": [], "tweet": "https://x.com/skocherhan/status/2048898639506891100" }, { "date": "2026-04-27 23:04:00", "user": "skocherhan", "type": "url", "value": "http://newday.inet-mark.com", "tags": [], "tweet": "https://x.com/skocherhan/status/2048901120009880019" }, { "date": "2026-04-27 23:04:00", "user": "skocherhan", "type": "url", "value": "http://terazosine.fit", "tags": [], "tweet": "https://x.com/skocherhan/status/2048901120009880019" }, { "date": "2026-04-28 00:05:00", "user": "PaduckLee", "type": "url", "value": "http://723pt5dc2plfexrfvudhdhzvesgesqbcl4yivijjubptnogukxxv3hqd.onion", "tags": [ "#ransomware" ], "tweet": "https://x.com/PaduckLee/status/2048916422630466037" }, { "date": "2026-04-28 00:07:00", "user": "PhishStats", "type": "url", "value": "https://6.accessbenefitscenter.com/journey?rdrx=1&s=3b5ee3cc-638c-4c17-967f-b0e56fbfbbe2#back", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2048917088593461541" }, { "date": "2026-04-28 01:01:13", "user": "masaomi346", "type": "url", "value": "http://macclrupspace.gitlab.io", "tags": [ "#infostealer", "#malware" ], "tweet": "https://x.com/masaomi346/status/2048930503227801657" }, { "date": "2026-04-28 01:01:13", "user": "masaomi346", "type": "url", "value": "http://termopasta.com", "tags": [ "#infostealer", "#malware" ], "tweet": "https://x.com/masaomi346/status/2048930503227801657" }, { "date": "2026-04-28 01:41:00", "user": "Metemcyber", "type": "url", "value": "https://lcatscpzx.cz592401.cn/optmer-prefere_html/", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048940649949614538" }, { "date": "2026-04-28 01:41:00", "user": "Metemcyber", "type": "url", "value": "http://43.165.166.156", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048940649949614538" }, { "date": "2026-04-28 01:52:00", "user": "Metemcyber", "type": "url", "value": "https://site4-sbisec.gsy2cg1u.shop/login", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048943310602227836" }, { "date": "2026-04-28 01:52:00", "user": "Metemcyber", "type": "url", "value": "http://172.67.130.142", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048943310602227836" }, { "date": "2026-04-28 01:52:00", "user": "Metemcyber", "type": "url", "value": "http://104.21.8.163", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048943310602227836" }, { "date": "2026-04-28 02:03:00", "user": "Metemcyber", "type": "url", "value": "https://www.pseudotachylite.cfd/myNZ6X", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048946258849808698" }, { "date": "2026-04-28 02:03:00", "user": "Metemcyber", "type": "url", "value": "http://172.67.152.169", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048946258849808698" }, { "date": "2026-04-28 02:03:00", "user": "Metemcyber", "type": "url", "value": "http://104.21.82.38", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2048946258849808698" }, { "date": "2026-04-28 03:37:00", "user": "masaomi346", "type": "url", "value": "https://site4-sbisec.gtt6ss20.shop/login", "tags": [ "#phishing" ], "tweet": "https://x.com/masaomi346/status/2048969911708602441" }, { "date": "2026-04-28 05:59:00", "user": "suyog41", "type": "url", "value": "http://r3m0t3.t3mp1a73.1nj3ct10n/89e9b490ce8568df/doc.rtf", "tags": [], "tweet": "https://x.com/suyog41/status/2049005523710939553" }, { "date": "2026-04-28 08:05:00", "user": "Metemcyber", "type": "url", "value": "https://vavny.oflndm.cn/RSV_P/smart_index.htm/", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2049037385464479769" }, { "date": "2026-04-28 08:20:00", "user": "Metemcyber", "type": "url", "value": "https://mhqajiz.bl8cz6.cn/apusetop/jupindx/", "tags": [ "#phishing" ], "tweet": "https://x.com/Metemcyber/status/2049041046399779218" }, { "date": "2026-04-28 09:06:00", "user": "PhishStats", "type": "url", "value": "https://xan3ri.cfd/dulidpgo/PbkHGx/LTjfPu", "tags": [ "#phishing" ], "tweet": "https://x.com/PhishStats/status/2049052715871772726" }, { "date": "2026-04-28 09:30:00", "user": "smica83", "type": "url", "value": "https://www.lotuscare.com.my/Keller.ps1", "tags": [], "tweet": "https://x.com/smica83/status/2049058768508342486" }, { "date": "2026-04-28 09:40:00", "user": "smica83", "type": "url", "value": "https://hx1.bounceme.net:4433/victim.dll", "tags": [], "tweet": "https://x.com/smica83/status/2049061239314076024" }, { "date": "2026-04-28 10:08:00", "user": "malwrhunterteam", "type": "url", "value": "http://xtrafftrck.net:3000", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2049068289607737541" }, { "date": "2026-04-28 10:09:00", "user": "smica83", "type": "url", "value": "https://vpntop.com.cn/letsvpn_v3.5.6_x64.msi", "tags": [], "tweet": "https://x.com/smica83/status/2049068445682037229" }, { "date": "2026-04-28 11:24:00", "user": "SansLimit3", "type": "url", "value": "http://151.240.151.83", "tags": [], "tweet": "https://x.com/SansLimit3/status/2049087449234645347" }, { "date": "2026-04-28 11:24:00", "user": "SansLimit3", "type": "url", "value": "https://151.240.151.83/:9090", "tags": [], "tweet": "https://x.com/SansLimit3/status/2049087449234645347" }, { "date": "2026-04-28 12:08:00", "user": "suyog41", "type": "url", "value": "http://glowmedaesthetics.com", "tags": [ "#stealer" ], "tweet": "https://x.com/suyog41/status/2049098438089073128" }, { "date": "2026-04-28 12:21:00", "user": "Slvlombardo", "type": "url", "value": "https://barberspot.in/2ininjbbv/c22f55rr/sd0x2yy/:right_arrow_curving_down", "tags": [ "#phishing" ], "tweet": "https://x.com/Slvlombardo/status/2049101792466571632" }, { "date": "2026-04-28 12:21:00", "user": "Slvlombardo", "type": "url", "value": "https://it-me-id-pagit-id.com/wenfiIT/lderIT/cellta-net/app/log.php", "tags": [ "#phishing" ], "tweet": "https://x.com/Slvlombardo/status/2049101792466571632" }, { "date": "2026-04-28 12:24:00", "user": "The_lesyk", "type": "url", "value": "http://43.165.7.227", "tags": [ "#phishing" ], "tweet": "https://x.com/The_lesyk/status/2049102376171135373" }, { "date": "2026-04-28 13:53:00", "user": "James_inthe_box", "type": "url", "value": "http://66.179.248.120/img/", "tags": [ "#Remcos" ], "tweet": "https://x.com/James_inthe_box/status/2049124737096527922" }, { "date": "2026-04-28 13:53:00", "user": "James_inthe_box", "type": "url", "value": "http://23.95.62.25:7070", "tags": [ "#Remcos" ], "tweet": "https://x.com/James_inthe_box/status/2049124737096527922" }, { "date": "2026-04-28 14:54:00", "user": "sicehice", "type": "url", "value": "http://78.11.101.78/Beastmode.sh", "tags": [], "tweet": "https://x.com/sicehice/status/2049140297595080819" }, { "date": "2026-04-28 14:54:00", "user": "sicehice", "type": "url", "value": "http://78.11.10.78/Beastmode.sh", "tags": [], "tweet": "https://x.com/sicehice/status/2049140297595080819" }, { "date": "2026-04-28 14:59:00", "user": "vmray", "type": "url", "value": "http://Pastee.dev", "tags": [], "tweet": "https://x.com/vmray/status/2049141348926669126" }, { "date": "2026-04-28 15:18:40", "user": "Erreklamatu", "type": "url", "value": "https://info@erreklamatu.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Erreklamatu/status/2049146287652536675" }, { "date": "2026-04-28 15:27:00", "user": "harugasumi", "type": "url", "value": "https://meekys.mtffx.cn/gpajp/accunt/lginox/", "tags": [ "#phishing" ], "tweet": "https://x.com/harugasumi/status/2049148402471145825" }, { "date": "2026-04-28 16:30:00", "user": "sicehice", "type": "url", "value": "https://217.60.241.36/sh", "tags": [], "tweet": "https://x.com/sicehice/status/2049164321519779866" }, { "date": "2026-04-28 17:22:00", "user": "malwrhunterteam", "type": "url", "value": "http://scp749.com", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2049177426706481303" }, { "date": "2026-04-28 18:14:08", "user": "malwrhunterteam", "type": "url", "value": "https://vayusena.online/login", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2049190442084835702" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://inlinepol1s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://docinfo.inlinepol1s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://inlinepol19s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://inlinepol17s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://edoc.inlinepol14s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://newaltercm42s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://inlinepol14s.roxa.org", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://uofficialerc22v.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:33:00", "user": "skocherhan", "type": "url", "value": "http://newpolinf48s.dynuddns.com", "tags": [ "#DPRK", "#Kimsuky" ], "tweet": "https://x.com/skocherhan/status/2049195306487853319" }, { "date": "2026-04-28 18:50:00", "user": "smica83", "type": "url", "value": "https://vayusena.online:48973/systemdd", "tags": [], "tweet": "https://x.com/smica83/status/2049199564901454092" }, { "date": "2026-04-28 20:13:00", "user": "Malwarehunterr", "type": "url", "value": "http://lace-desktop.io", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2049220391357628591" }, { "date": "2026-04-28 20:13:00", "user": "Malwarehunterr", "type": "url", "value": "http://store4.gofile.io/download/direct/956fe713-cea0-4157-9f10-6a4e385b49e7/LaceDesktop-installer.msi", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2049220391357628591" }, { "date": "2026-04-28 20:13:00", "user": "Malwarehunterr", "type": "url", "value": "http://lace-desktop.live", "tags": [], "tweet": "https://x.com/Malwarehunterr/status/2049220391357628591" }, { "date": "2026-04-28 20:17:00", "user": "smica83", "type": "url", "value": "http://138.201.128.249", "tags": [], "tweet": "https://x.com/smica83/status/2049221402163544167" }, { "date": "2026-04-28 20:23:00", "user": "malwrhunterteam", "type": "url", "value": "http://spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2049223060062970275" }, { "date": "2026-04-28 21:18:00", "user": "smica83", "type": "url", "value": "http://drazyland.us", "tags": [], "tweet": "https://x.com/smica83/status/2049236774271045773" }, { "date": "2026-04-28 21:19:00", "user": "malwrhunterteam", "type": "url", "value": "http://centralcoretech.com", "tags": [], "tweet": "https://x.com/malwrhunterteam/status/2049237054857285793" }, { "date": "2026-04-28 21:26:00", "user": "smica83", "type": "url", "value": "https://35.196.105.113/wp-admin/x64_v6", "tags": [], "tweet": "https://x.com/smica83/status/2049238817958232532" }, { "date": "2026-04-28 21:30:00", "user": "Merlax_", "type": "url", "value": "https://facilitandoagora.online/validacao", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2049239733578969593" }, { "date": "2026-04-28 21:30:00", "user": "Merlax_", "type": "url", "value": "https://mercadolib-es.shop", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2049239733578969593" }, { "date": "2026-04-28 21:30:00", "user": "Merlax_", "type": "url", "value": "https://guepardodelivery-entregador.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2049239733578969593" }, { "date": "2026-04-28 21:30:00", "user": "Merlax_", "type": "url", "value": "https://ailosapp.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2049239733578969593" }, { "date": "2026-04-28 21:30:00", "user": "Merlax_", "type": "url", "value": "https://playstorelivelo.com", "tags": [ "#phishing" ], "tweet": "https://x.com/Merlax_/status/2049239733578969593" }, { "date": "2026-04-29 00:06:00", "user": "fbgwls245", "type": "url", "value": "http://ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion", "tags": [ "#ransomware" ], "tweet": "https://x.com/fbgwls245/status/2049279082215710749" } ]