2026-04-24 00:17:58,masaomi346,domain,ar4615.cn,#phishing,https://x.com/masaomi346/status/2047470067794022821 2026-04-24 00:17:58,masaomi346,url,https://ar4615.cn/w2/f2/weq=guoshuis/,#phishing,https://x.com/masaomi346/status/2047470067794022821 2026-04-24 00:55:14,fbgwls245,domain,ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion,#ransomware,https://x.com/fbgwls245/status/2047479442973552693 2026-04-24 00:55:14,fbgwls245,url,http://ijexszhscln27nl263lmcd7tx3jttkhm4wjhd4e3y6r4csdbfyeprvid.onion,#ransomware,https://x.com/fbgwls245/status/2047479442973552693 2026-04-24 02:55:31,masaomi346,domain,www-pay.sprots8-milem6.com,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 02:55:31,masaomi346,url,https://www-pay.sprots8-milem6.com/utxfaZfslmoJ,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 02:55:31,masaomi346,domain,www2-pay.news-178zhibo.com,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 02:55:31,masaomi346,url,https://www2-pay.news-178zhibo.com/OuLn3jr77vMr,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 02:55:31,masaomi346,domain,www-pay.uy5722.com,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 02:55:31,masaomi346,url,https://www-pay.uy5722.com/KfsDuyo3ev86,#phishing,https://x.com/masaomi346/status/2047509714301522364 2026-04-24 04:45:44,JAMESWT_WT,domain,sensitive-olive-alligator.31-22-7-7.cpanel.site,#phishing,https://x.com/JAMESWT_WT/status/2047537450449273239 2026-04-24 04:45:44,JAMESWT_WT,url,https://sensitive-olive-alligator.31-22-7-7.cpanel.site/wind/,#phishing,https://x.com/JAMESWT_WT/status/2047537450449273239 2026-04-24 06:59:12,skocherhan,domain,esevasecurefile.store,,https://x.com/skocherhan/status/2047571039501115410 2026-04-24 06:59:12,skocherhan,url,http://esevasecurefile.store,,https://x.com/skocherhan/status/2047571039501115410 2026-04-24 06:59:12,skocherhan,md5,8cd05fd628ed7927871e9dd53d4e613b,,https://x.com/skocherhan/status/2047571039501115410 2026-04-24 08:00:21,skocherhan,md5,776302eeef68e4d5132424de18976845,#APT,https://x.com/skocherhan/status/2047586429220294843 2026-04-24 08:00:21,skocherhan,md5,4b381a89dc0f3fd44286410d7c826073,#APT,https://x.com/skocherhan/status/2047586429220294843 2026-04-24 08:05:46,skocherhan,domain,www2-pay.news-178zhibo.co,,https://x.com/skocherhan/status/2047587790771179905 2026-04-24 08:05:46,skocherhan,url,https://www2-pay.news-178zhibo.co,,https://x.com/skocherhan/status/2047587790771179905 2026-04-24 08:06:05,skocherhan,url,http://i.backedupweb3quantumledger,,https://x.com/skocherhan/status/2047587870307754228 2026-04-24 08:31:06,skocherhan,sha256,d4c184f4389d710c8aefe296486d4d3e430da609d86fa6289a8cea9fde4a1166,,https://x.com/skocherhan/status/2047594168008991143 2026-04-24 08:57:13,fbgwls245,domain,u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion,#ransomware,https://x.com/fbgwls245/status/2047600738344550679 2026-04-24 08:57:13,fbgwls245,url,http://u6lieui2dakbctcjea2bz4r4q32r7t36nwljovqbv7mxs6o2smgxixid.onion,#ransomware,https://x.com/fbgwls245/status/2047600738344550679 2026-04-24 09:29:08,skocherhan,sha256,93479fab71b4d60225d502ffc8f18fc00f74bd2e30a7ee70d18c78886d639266,,https://x.com/skocherhan/status/2047608771912823083 2026-04-24 09:59:43,smica83,url,http://85.11.161.198:9191/YRJKHYWK.msi,,https://x.com/smica83/status/2047616468909506667 2026-04-24 09:59:43,smica83,ip,85.11.161.198,,https://x.com/smica83/status/2047616468909506667 2026-04-24 10:21:00,Fact_Finder03,ip,77.92.36.10,#RAT,https://x.com/Fact_Finder03/status/2047621822917603616 2026-04-24 10:25:13,masaomi346,domain,buzxsmv.cn,#phishing,https://x.com/masaomi346/status/2047622884882079831 2026-04-24 10:25:13,masaomi346,url,https://buzxsmv.cn/k1/da2/g2/ads=jcbs/,#phishing,https://x.com/masaomi346/status/2047622884882079831 2026-04-24 10:37:16,smica83,url,http://168.100.8.179:8084,,https://x.com/smica83/status/2047625917212577950 2026-04-24 10:37:16,smica83,ip,168.100.8.179,,https://x.com/smica83/status/2047625917212577950 2026-04-24 10:40:44,skocherhan,sha256,f0da50334b44ef183ab5fd1692ac3381fc84ebe499ce15d567b53c946548ec65,,https://x.com/skocherhan/status/2047626791859179979 2026-04-24 12:56:47,skocherhan,ip,117.72.113.43,,https://x.com/skocherhan/status/2047661030231118060 2026-04-24 12:56:47,skocherhan,ip,134.122.203.197,,https://x.com/skocherhan/status/2047661030231118060 2026-04-24 12:56:47,skocherhan,ip,150.109.57.12,,https://x.com/skocherhan/status/2047661030231118060 2026-04-24 12:56:47,skocherhan,ip,154.36.152.177,,https://x.com/skocherhan/status/2047661030231118060 2026-04-24 12:56:47,skocherhan,ip,154.44.30.120,,https://x.com/skocherhan/status/2047661030231118060 2026-04-24 13:08:58,JAMESWT_WT,domain,halfmillion-iq.com,#ClickFix,https://x.com/JAMESWT_WT/status/2047664093541048542 2026-04-24 13:08:58,JAMESWT_WT,url,https://halfmillion-iq.com/halfmillion-iq.zip,#ClickFix,https://x.com/JAMESWT_WT/status/2047664093541048542 2026-04-24 13:11:21,skocherhan,ip,23.95.117.252,#RAT #Remcos,https://x.com/skocherhan/status/2047664694031196478 2026-04-24 13:11:21,skocherhan,ip,78.111.67.231,#RAT #Remcos,https://x.com/skocherhan/status/2047664694031196478 2026-04-24 13:11:21,skocherhan,ip,107.175.148.103,#RAT #Remcos,https://x.com/skocherhan/status/2047664694031196478 2026-04-24 13:11:21,skocherhan,ip,172.245.95.36,#RAT #Remcos,https://x.com/skocherhan/status/2047664694031196478 2026-04-24 13:11:21,skocherhan,ip,204.10.160.226,#RAT #Remcos,https://x.com/skocherhan/status/2047664694031196478 2026-04-24 13:48:31,skocherhan,domain,audit.checkmarx.cx,,https://x.com/skocherhan/status/2047674047115252152 2026-04-24 13:48:31,skocherhan,url,http://audit.checkmarx.cx,,https://x.com/skocherhan/status/2047674047115252152 2026-04-24 13:48:31,skocherhan,url,http://94.154.172.43,,https://x.com/skocherhan/status/2047674047115252152 2026-04-24 13:48:31,skocherhan,ip,94.154.172.43,,https://x.com/skocherhan/status/2047674047115252152 2026-04-24 15:48:41,0xPEMB,domain,passkeyactivate.com,#phishing,https://x.com/0xPEMB/status/2047704287912898963 2026-04-24 15:48:41,0xPEMB,url,http://passkeyactivate.com,#phishing,https://x.com/0xPEMB/status/2047704287912898963 2026-04-24 16:28:04,Malwarehunterr,domain,incometax.onlinegov.in.net,#phishing,https://x.com/Malwarehunterr/status/2047714198055186643 2026-04-24 16:28:04,Malwarehunterr,url,http://incometax.onlinegov.in.net,#phishing,https://x.com/Malwarehunterr/status/2047714198055186643 2026-04-24 16:28:04,Malwarehunterr,url,http://115.124.108.190,#phishing,https://x.com/Malwarehunterr/status/2047714198055186643 2026-04-24 16:28:04,Malwarehunterr,ip,115.124.108.190,#phishing,https://x.com/Malwarehunterr/status/2047714198055186643 2026-04-24 16:34:28,ViriBack,ip,154.12.253.0,,https://x.com/ViriBack/status/2047715811549175908 2026-04-24 17:05:20,ImCharlesN,url,http://t.co/dAAOGfA5xE,#Raccoon,https://x.com/ImCharlesN/status/2047723577491824724 2026-04-24 20:11:24,smica83,domain,discretion-barrel-formed-vault.trycloudflare.com,#opendir,https://x.com/smica83/status/2047770402743632327 2026-04-24 20:11:24,smica83,url,https://discretion-barrel-formed-vault.trycloudflare.com,#opendir,https://x.com/smica83/status/2047770402743632327 2026-04-25 00:02:08,PhishStats,domain,imaxstores.cfd,#phishing,https://x.com/PhishStats/status/2047828468948238771 2026-04-25 00:02:08,PhishStats,url,https://www.imaxstores.cfd/?cid=79&url=,#phishing,https://x.com/PhishStats/status/2047828468948238771 2026-04-25 00:02:08,PhishStats,ip,104.21.4.153,#phishing,https://x.com/PhishStats/status/2047828468948238771 2026-04-25 00:10:00,nahamike01,url,http://104.164.55.107,,https://x.com/nahamike01/status/2047830645406343424 2026-04-25 00:10:00,nahamike01,ip,104.164.55.107,,https://x.com/nahamike01/status/2047830645406343424 2026-04-25 05:17:00,skocherhan,domain,oscatower.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://oscatower.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,nooraeso.r-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://nooraeso.r-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,bermates.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://bermates.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,jungop.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://jungop.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,brimo.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://brimo.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,queosera2.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://queosera2.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,morotomot.r-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://morotomot.r-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,hayoungju.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://hayoungju.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,jujeong.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://jujeong.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,docotot.o-r.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://docotot.o-r.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,neratras2.kro.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://neratras2.kro.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,tradoam.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://tradoam.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,domain,artisgo.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:17:00,skocherhan,url,http://artisgo.n-e.kr,#DPRK #Kimsuky,https://x.com/skocherhan/status/2047907939814388089 2026-04-25 05:53:00,Malwarehunterr,domain,access-sharepoint-exchange.d2a8tpeb2129r7.amplifyapp.com,#phishing,https://x.com/Malwarehunterr/status/2047916824717860990 2026-04-25 05:53:00,Malwarehunterr,url,http://access-sharepoint-exchange.d2a8tpeb2129r7.amplifyapp.com,#phishing,https://x.com/Malwarehunterr/status/2047916824717860990 2026-04-25 05:53:00,Malwarehunterr,domain,secure-share-r1y7.p-cebompw5.workers.dev,#phishing,https://x.com/Malwarehunterr/status/2047916824717860990 2026-04-25 05:53:00,Malwarehunterr,url,http://secure-share-r1y7.p-cebompw5.workers.dev/l/UP4HIVXTl3Q,#phishing,https://x.com/Malwarehunterr/status/2047916824717860990 2026-04-25 05:59:41,Malwarehunterr,domain,sharepoint-files-download.pages.dev,#phishing,https://x.com/Malwarehunterr/status/2047918451440922886 2026-04-25 05:59:41,Malwarehunterr,url,http://sharepoint-files-download.pages.dev,#phishing,https://x.com/Malwarehunterr/status/2047918451440922886 2026-04-25 05:59:41,Malwarehunterr,domain,rsmixed.com,#phishing,https://x.com/Malwarehunterr/status/2047918451440922886 2026-04-25 05:59:41,Malwarehunterr,url,http://rsmixed.com/abuloma2share/mailer.php,#phishing,https://x.com/Malwarehunterr/status/2047918451440922886 2026-04-25 07:49:00,Sekurak,domain,zondanewsletter.pl,,https://x.com/Sekurak/status/2047946091040002215 2026-04-25 07:49:00,Sekurak,url,http://zondanewsletter.pl,,https://x.com/Sekurak/status/2047946091040002215 2026-04-25 08:26:32,Malwarehunterr,domain,graph.org,#phishing,https://x.com/Malwarehunterr/status/2047955407109533742 2026-04-25 08:26:32,Malwarehunterr,url,http://graph.org/Withdrawal-process-04-14,#phishing,https://x.com/Malwarehunterr/status/2047955407109533742 2026-04-25 08:26:32,Malwarehunterr,domain,97ee4.catex.at,#phishing,https://x.com/Malwarehunterr/status/2047955407109533742 2026-04-25 08:26:32,Malwarehunterr,url,http://97ee4.catex.at/cnbcard/,#phishing,https://x.com/Malwarehunterr/status/2047955407109533742 2026-04-25 09:30:00,JAMESWT_WT,ip,45.227.254.10,#ClickFix #NetSupport,https://x.com/JAMESWT_WT/status/2047971403652043004 2026-04-25 09:30:00,JAMESWT_WT,md5,c7c4568516bfe053f656549f4d97a1a5,#ClickFix #NetSupport,https://x.com/JAMESWT_WT/status/2047971403652043004 2026-04-25 09:43:00,skocherhan,domain,youtude-dl.pro,,https://x.com/skocherhan/status/2047974809154343022 2026-04-25 09:43:00,skocherhan,url,http://youtude-dl.pro,,https://x.com/skocherhan/status/2047974809154343022 2026-04-25 09:43:00,skocherhan,url,http://185.107.74.215,,https://x.com/skocherhan/status/2047974809154343022 2026-04-25 09:43:00,skocherhan,ip,185.107.74.215,,https://x.com/skocherhan/status/2047974809154343022 2026-04-25 10:14:00,PhishStats,domain,secureactivitysett726411.li,#phishing,https://x.com/PhishStats/status/2047982655778525480 2026-04-25 10:14:00,PhishStats,url,https://secureactivitysett726411.li,#phishing,https://x.com/PhishStats/status/2047982655778525480 2026-04-25 10:14:00,PhishStats,ip,82.221.136.24,#phishing,https://x.com/PhishStats/status/2047982655778525480 2026-04-25 10:59:45,Malwarehunterr,domain,wordplumbprotectstairs.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://wordplumbprotectstairs.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,domain,bowl-fire-ceil-found.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://bowl-fire-ceil-found.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,domain,candle-plumb-found-ceil.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://candle-plumb-found-ceil.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,domain,floor-interior-fire-found.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://floor-interior-fire-found.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,domain,plumb-table-floor-protect.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://plumb-table-floor-protect.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,domain,bowl-interior-word-plumb.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 10:59:45,Malwarehunterr,url,http://bowl-interior-word-plumb.autos,#phishing,https://x.com/Malwarehunterr/status/2047993964595388805 2026-04-25 11:28:00,skocherhan,url,http://188.53.207.222,,https://x.com/skocherhan/status/2048001121621357014 2026-04-25 11:28:00,skocherhan,ip,188.53.207.222,,https://x.com/skocherhan/status/2048001121621357014 2026-04-25 13:12:00,harugasumi,domain,nufesafew.z1.web.core.windows.net,,https://x.com/harugasumi/status/2048027347069358122 2026-04-25 13:12:00,harugasumi,url,https://nufesafew.z1.web.core.windows.net,,https://x.com/harugasumi/status/2048027347069358122 2026-04-25 13:54:59,masaomi346,domain,zamknj.xagnnx.cn,#phishing,https://x.com/masaomi346/status/2048038064321331477 2026-04-25 13:54:59,masaomi346,url,https://zamknj.xagnnx.cn/gpajp/accunt/lginox/,#phishing,https://x.com/masaomi346/status/2048038064321331477 2026-04-25 14:30:00,ReBensk,md5,8b4bf067ce212b01548137af6da1f57f,#Android #Trojan #malware,https://x.com/ReBensk/status/2048047113142153378 2026-04-25 14:50:00,blackorbird,domain,hostednowhere.com,,https://x.com/blackorbird/status/2048052130192507293 2026-04-25 14:50:00,blackorbird,url,http://hostednowhere.com,,https://x.com/blackorbird/status/2048052130192507293 2026-04-25 15:00:00,volrant136,domain,webapp-getdocumentodwnload-pacapp.malik-jaani786.workers.dev,#APT,https://x.com/volrant136/status/2048054426078724126 2026-04-25 15:00:00,volrant136,url,https://webapp-getdocumentodwnload-pacapp.malik-jaani786.workers.dev/?pdf_download3,#APT,https://x.com/volrant136/status/2048054426078724126 2026-04-25 16:17:00,Malwarehunterr,domain,nmc.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,url,http://nmc.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,domain,mp.pwd.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,url,http://mp.pwd.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,domain,rpf.hrms.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,url,http://rpf.hrms.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,domain,irctc.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,url,http://irctc.govonline.online,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,url,http://115.124.108.190,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 16:17:00,Malwarehunterr,ip,115.124.108.190,#phishing,https://x.com/Malwarehunterr/status/2048073842187436201 2026-04-25 17:43:00,sicehice,url,http://85.11.167.177/Yboats.arm7,,https://x.com/sicehice/status/2048095632515113182 2026-04-25 17:43:00,sicehice,ip,130.12.180.78,,https://x.com/sicehice/status/2048095632515113182 2026-04-25 17:43:00,sicehice,ip,85.11.167.177,,https://x.com/sicehice/status/2048095632515113182 2026-04-25 17:43:00,sicehice,md5,1f6956055553bf37ba73dd32dc50bbaa,,https://x.com/sicehice/status/2048095632515113182 2026-04-25 18:00:00,phatomcandle,domain,bigfile.navcloudstorage.n-e.kr,#APT #C2 #Kimsuky #malware,https://x.com/phatomcandle/status/2048099743025541384 2026-04-25 18:00:00,phatomcandle,url,http://bigfile.navcloudstorage.n-e.kr,#APT #C2 #Kimsuky #malware,https://x.com/phatomcandle/status/2048099743025541384 2026-04-25 18:00:00,phatomcandle,url,http://163.245.215.46,#APT #C2 #Kimsuky #malware,https://x.com/phatomcandle/status/2048099743025541384 2026-04-25 18:00:00,phatomcandle,ip,163.245.215.46,#APT #C2 #Kimsuky #malware,https://x.com/phatomcandle/status/2048099743025541384 2026-04-25 19:09:14,JRoosen,url,http://149.28.141.17/timesyncd/share/,,https://x.com/JRoosen/status/2048117144336961967 2026-04-25 19:09:14,JRoosen,ip,149.28.141.17,,https://x.com/JRoosen/status/2048117144336961967 2026-04-25 21:01:00,skocherhan,domain,cj597826.tw1.ru,#AgentTesla,https://x.com/skocherhan/status/2048145505524289720 2026-04-25 21:01:00,skocherhan,url,http://cj597826.tw1.ru,#AgentTesla,https://x.com/skocherhan/status/2048145505524289720 2026-04-25 21:17:00,skocherhan,domain,authorities-vessel-denver-indie.trycloudflare.com,,https://x.com/skocherhan/status/2048149423058833783 2026-04-25 21:17:00,skocherhan,url,http://authorities-vessel-denver-indie.trycloudflare.com/ssadoc/,,https://x.com/skocherhan/status/2048149423058833783 2026-04-25 21:32:00,skocherhan,domain,uofficialerc5v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://uofficialerc5v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,nmethodsrc21v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://nmethodsrc21v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,erpolicies-21v.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://erpolicies-21v.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,polercm-55v.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://polercm-55v.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,uofficialerc34v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://uofficialerc34v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,uofficialerc20v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://uofficialerc20v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,uofficialerc33v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://uofficialerc33v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,domain,uofficialerc45v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:32:00,skocherhan,url,http://uofficialerc45v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048153192563613921 2026-04-25 21:34:00,skocherhan,domain,agfsddfdfdfndesfr.forum,,https://x.com/skocherhan/status/2048153684840796379 2026-04-25 21:34:00,skocherhan,url,http://agfsddfdfdfndesfr.forum,,https://x.com/skocherhan/status/2048153684840796379 2026-04-25 22:40:00,sicehice,url,http://163.61.39.140/hiddenbin/boatnet.mips,,https://x.com/sicehice/status/2048170213082825187 2026-04-25 22:40:00,sicehice,ip,163.61.39.140,,https://x.com/sicehice/status/2048170213082825187 2026-04-25 22:40:00,sicehice,md5,380c1a0da340b8c2aa6002616fcf7310,,https://x.com/sicehice/status/2048170213082825187 2026-04-26 01:07:00,PhishStats,domain,cmdvitorborges.com,#phishing,https://x.com/PhishStats/status/2048207321625497714 2026-04-26 01:07:00,PhishStats,url,http://cmdvitorborges.com,#phishing,https://x.com/PhishStats/status/2048207321625497714 2026-04-26 01:07:00,PhishStats,ip,136.243.144.249,#phishing,https://x.com/PhishStats/status/2048207321625497714 2026-04-26 06:03:00,skocherhan,domain,greenwoodsinvestmentsltd.pro,#phishing,https://x.com/skocherhan/status/2048281696961745290 2026-04-26 06:03:00,skocherhan,url,http://greenwoodsinvestmentsltd.pro,#phishing,https://x.com/skocherhan/status/2048281696961745290 2026-04-26 09:17:00,masaomi346,domain,dsoqqcfd.vjxjrfyu.cn,#phishing,https://x.com/masaomi346/status/2048330734994420149 2026-04-26 09:17:00,masaomi346,url,https://dsoqqcfd.vjxjrfyu.cn/optmer-prefere_html/,#phishing,https://x.com/masaomi346/status/2048330734994420149 2026-04-26 10:05:00,404LABSx,ip,50.16.16.211,#malware,https://x.com/404LABSx/status/2048342737120886922 2026-04-26 11:24:00,fbgwls245,domain,4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion,#ransomware,https://x.com/fbgwls245/status/2048362508742975738 2026-04-26 11:24:00,fbgwls245,url,http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion,#ransomware,https://x.com/fbgwls245/status/2048362508742975738 2026-04-26 12:43:00,BlinkzSec,url,https://urlhaus.abuse.ch/host/176.65.139.143/,,https://x.com/BlinkzSec/status/2048382400040743096 2026-04-26 12:43:00,BlinkzSec,ip,176.65.139.143,,https://x.com/BlinkzSec/status/2048382400040743096 2026-04-26 13:25:00,Malwarehunterr,domain,zon123.online,#phishing,https://x.com/Malwarehunterr/status/2048392934865916244 2026-04-26 13:25:00,Malwarehunterr,url,http://zon123.online,#phishing,https://x.com/Malwarehunterr/status/2048392934865916244 2026-04-26 14:04:00,AlvieriD,domain,pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion,,https://x.com/AlvieriD/status/2048402779467620710 2026-04-26 14:04:00,AlvieriD,url,https://pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion,,https://x.com/AlvieriD/status/2048402779467620710 2026-04-26 14:15:00,Malwarehunterr,domain,notifications.googleapis.com,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,url,http://notifications.googleapis.com/email/redirect,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,domain,markhamkidsclinic.com,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,url,http://markhamkidsclinic.com/o1234i678z,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,domain,maxbarkod.com,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,url,http://maxbarkod.com/log/login.php,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:15:00,Malwarehunterr,url,http://maxbarkod.com/log/send_login.php,#phishing,https://x.com/Malwarehunterr/status/2048405527336738920 2026-04-26 14:26:00,Malwarehunterr,domain,monopizzapos.online,#phishing,https://x.com/Malwarehunterr/status/2048408321703731274 2026-04-26 14:26:00,Malwarehunterr,url,http://monopizzapos.online/cgi/login.php,#phishing,https://x.com/Malwarehunterr/status/2048408321703731274 2026-04-26 15:44:00,sicehice,url,http://42.224.7.121:44950/Mozi.m,,https://x.com/sicehice/status/2048427969484304838 2026-04-26 15:44:00,sicehice,ip,42.224.7.121,,https://x.com/sicehice/status/2048427969484304838 2026-04-26 15:47:00,sicehice,url,http://83.168.110.191/cat.sh,,https://x.com/sicehice/status/2048428725658652942 2026-04-26 15:47:00,sicehice,ip,176.65.139.140,,https://x.com/sicehice/status/2048428725658652942 2026-04-26 15:47:00,sicehice,ip,83.168.110.191,,https://x.com/sicehice/status/2048428725658652942 2026-04-26 15:47:00,sicehice,md5,dca40f08cc93bc2fba8e3f5fec18593f,,https://x.com/sicehice/status/2048428725658652942 2026-04-26 16:00:00,volrant136,domain,zimbra-nyatel-production.up.railway.app,#APT,https://x.com/volrant136/status/2048431910871875851 2026-04-26 16:00:00,volrant136,url,https://zimbra-nyatel-production.up.railway.app/login.html?gfjdliotrgojnghgherbegrehureert0e0ee=1,#APT,https://x.com/volrant136/status/2048431910871875851 2026-04-26 18:00:00,phatomcandle,url,http://31.58.220.250,#APT #C2 #malware,https://x.com/phatomcandle/status/2048462127254696300 2026-04-26 18:00:00,phatomcandle,ip,31.58.220.250,#APT #C2 #malware,https://x.com/phatomcandle/status/2048462127254696300 2026-04-26 18:10:00,skocherhan,domain,jer.piexlt.com,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,url,http://jer.piexlt.com,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,domain,main.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,url,http://main.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,domain,master.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,url,http://master.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,domain,servers.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:10:00,skocherhan,url,http://servers.zeosshop.ir,,https://x.com/skocherhan/status/2048464654775541779 2026-04-26 18:18:00,skocherhan,domain,ncodccpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodccpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodcbpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodcbpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodcapass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodcapass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,nid.ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://nid.ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,nid.ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://nid.ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodbypass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodbypass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,domain,ncodbvpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 18:18:00,skocherhan,url,http://ncodbvpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048466653331988537 2026-04-26 19:56:34,skocherhan,domain,previous-everywhere-achieving-bobby.trycloudflare.com,#phishing,https://x.com/skocherhan/status/2048491443971305619 2026-04-26 19:56:34,skocherhan,url,"http://previous-everywhere-achieving-bobby.trycloudflare.com/IGhhbmR5IG9ubGluZSB,0b29sIHRvIGVuY29kZSBvciBkZWNvZGUgeW91/",#phishing,https://x.com/skocherhan/status/2048491443971305619 2026-04-26 20:01:00,skocherhan,domain,deposit-crew-appointed-princess.trycloudflare.com,#phishing,https://x.com/skocherhan/status/2048492627096404397 2026-04-26 20:01:00,skocherhan,url,http://deposit-crew-appointed-princess.trycloudflare.com/xxace36/26sc/web/mail.php,#phishing,https://x.com/skocherhan/status/2048492627096404397 2026-04-26 20:41:00,Malwarehunterr,domain,smartbenefits.site,#phishing,https://x.com/Malwarehunterr/status/2048502759331389910 2026-04-26 20:41:00,Malwarehunterr,url,http://smartbenefits.site,#phishing,https://x.com/Malwarehunterr/status/2048502759331389910 2026-04-26 20:41:00,Malwarehunterr,domain,cartspecials.com,#phishing,https://x.com/Malwarehunterr/status/2048502759331389910 2026-04-26 20:41:00,Malwarehunterr,url,http://cartspecials.com,#phishing,https://x.com/Malwarehunterr/status/2048502759331389910 2026-04-26 23:28:00,Priv8Shops,domain,iepvirgendecopacabana.com,#phishing,https://x.com/Priv8Shops/status/2048544885494747285 2026-04-26 23:28:00,Priv8Shops,url,https://iepvirgendecopacabana.com/cgibin/,#phishing,https://x.com/Priv8Shops/status/2048544885494747285 2026-04-26 23:28:00,Priv8Shops,url,https://iepvirgendecopacabana.com/htaccess/,#phishing,https://x.com/Priv8Shops/status/2048544885494747285 2026-04-27 00:57:00,G60930953,md5,b3bf26bfbf7aec43379523bd18b1ec16,,https://x.com/G60930953/status/2048567059684942207 2026-04-27 00:58:00,sicehice,url,http://87.121.79.73/ok,,https://x.com/sicehice/status/2048567388187025858 2026-04-27 00:58:00,sicehice,ip,87.121.84.136,,https://x.com/sicehice/status/2048567388187025858 2026-04-27 00:58:00,sicehice,ip,87.121.79.73,,https://x.com/sicehice/status/2048567388187025858 2026-04-27 00:58:00,sicehice,md5,d6fc1b8c97634893b5638fa39f47b89f,,https://x.com/sicehice/status/2048567388187025858 2026-04-27 01:28:00,masaomi346,domain,login.b9l6kfqw.shop,#phishing,https://x.com/masaomi346/status/2048574924068118575 2026-04-27 01:28:00,masaomi346,url,https://login.b9l6kfqw.shop/login,#phishing,https://x.com/masaomi346/status/2048574924068118575 2026-04-27 02:54:00,Cyberteam008,url,http://94.126.224.99,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,domain,mofa-go-np.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,url,http://mofa-go-np.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,domain,mofa-gov-np.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,url,http://mofa-gov-np.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,domain,pakun-org.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,url,http://pakun-org.direct880.net,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 02:54:00,Cyberteam008,ip,94.126.224.99,#APT,https://x.com/Cyberteam008/status/2048596656141340906 2026-04-27 04:37:00,PhishStats,domain,nodu1718.odns.fr,#phishing,https://x.com/PhishStats/status/2048622601094742217 2026-04-27 04:37:00,PhishStats,url,http://nodu1718.odns.fr/sjssjdj/alibaba/,#phishing,https://x.com/PhishStats/status/2048622601094742217 2026-04-27 04:37:00,PhishStats,ip,109.234.164.139,#phishing,https://x.com/PhishStats/status/2048622601094742217 2026-04-27 05:12:00,prasad_dhakad,md5,5f44fb80dc20da875b4f7470e519e29f,#ransomware,https://x.com/prasad_dhakad/status/2048631468726100315 2026-04-27 05:19:00,romonlyht,url,https://rushadventure.com/cart/Pd1qtLn3XGYvDOdEKDTQ0,#phishing,https://x.com/romonlyht/status/2048633016021631347 2026-04-27 05:19:00,romonlyht,ip,34.146.190.224,#phishing,https://x.com/romonlyht/status/2048633016021631347 2026-04-27 05:20:00,romonlyht,domain,rushadventure.com,#phishing,https://x.com/romonlyht/status/2048633302719058241 2026-04-27 05:20:00,romonlyht,url,https://rushadventure.com/goods/vT0nkA3OdO9p5CbP4fwfS,#phishing,https://x.com/romonlyht/status/2048633302719058241 2026-04-27 05:20:00,romonlyht,ip,35.200.36.49,#phishing,https://x.com/romonlyht/status/2048633302719058241 2026-04-27 05:20:00,romonlyht,ip,43.167.158.31,#phishing,https://x.com/romonlyht/status/2048633302719058241 2026-04-27 05:33:00,romonlyht,domain,bwymenu.com,#phishing,https://x.com/romonlyht/status/2048636617435525508 2026-04-27 05:33:00,romonlyht,url,https://bwymenu.com/read/odtgzw,#phishing,https://x.com/romonlyht/status/2048636617435525508 2026-04-27 05:33:00,romonlyht,ip,34.179.152.198,#phishing,https://x.com/romonlyht/status/2048636617435525508 2026-04-27 05:33:00,romonlyht,ip,43.167.162.143,#phishing,https://x.com/romonlyht/status/2048636617435525508 2026-04-27 05:33:00,romonlyht,url,https://sfht.mobi/kokiy1/,#phishing,https://x.com/romonlyht/status/2048636623055962233 2026-04-27 05:34:00,romonlyht,domain,haikek.com,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:34:00,romonlyht,url,https://haikek.com/awapsf/redirect,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:34:00,romonlyht,domain,sfht.mobi,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:34:00,romonlyht,url,https://sfht.mobi/kokiy1,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:34:00,romonlyht,ip,34.182.190.206,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:34:00,romonlyht,ip,43.153.172.251,#phishing,https://x.com/romonlyht/status/2048636940279595352 2026-04-27 05:35:11,skocherhan,domain,iepvirgendecopacabana.com,,https://x.com/skocherhan/status/2048637060919996814 2026-04-27 05:35:11,skocherhan,url,https://iepvirgendecopacabana.com/cgibin/,,https://x.com/skocherhan/status/2048637060919996814 2026-04-27 05:35:11,skocherhan,url,https://iepvirgendecopacabana.com/htaccess/,,https://x.com/skocherhan/status/2048637060919996814 2026-04-27 05:37:00,K_N1kolenko,ip,38.76.193.60,,https://x.com/K_N1kolenko/status/2048637515507106100 2026-04-27 05:37:00,K_N1kolenko,ip,143.92.51.15,,https://x.com/K_N1kolenko/status/2048637515507106100 2026-04-27 05:37:00,K_N1kolenko,ip,154.23.185.75,,https://x.com/K_N1kolenko/status/2048637515507106100 2026-04-27 05:37:00,K_N1kolenko,ip,156.247.41.12,,https://x.com/K_N1kolenko/status/2048637515507106100 2026-04-27 05:37:00,K_N1kolenko,ip,192.238.184.216,,https://x.com/K_N1kolenko/status/2048637515507106100 2026-04-27 05:38:00,masaomi346,domain,login.guf792lp.shop,#phishing,https://x.com/masaomi346/status/2048637920891072891 2026-04-27 05:38:00,masaomi346,url,https://login.guf792lp.shop/login,#phishing,https://x.com/masaomi346/status/2048637920891072891 2026-04-27 05:45:00,romonlyht,domain,dhlnorth.com,#phishing,https://x.com/romonlyht/status/2048639773473182103 2026-04-27 05:45:00,romonlyht,url,https://dhlnorth.com,#phishing,https://x.com/romonlyht/status/2048639773473182103 2026-04-27 05:45:00,romonlyht,ip,146.56.133.79,#phishing,https://x.com/romonlyht/status/2048639773473182103 2026-04-27 06:37:00,Fact_Finder03,ip,148.113.136.44,#C2,https://x.com/Fact_Finder03/status/2048652847827603916 2026-04-27 06:42:00,romonlyht,domain,mountainviewnursery.online,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:42:00,romonlyht,url,https://mountainviewnursery.online,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:42:00,romonlyht,domain,ktoshi110.github.io,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:42:00,romonlyht,url,https://ktoshi110.github.io/Amazons/,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:42:00,romonlyht,ip,193.239.151.204,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:42:00,romonlyht,ip,172.67.181.183,#phishing,https://x.com/romonlyht/status/2048654115849617635 2026-04-27 06:44:00,romonlyht,url,https://hongkewood.com/6WDicTOgYw.info.jp,#phishing,https://x.com/romonlyht/status/2048654601835221159 2026-04-27 06:44:00,romonlyht,domain,beachwearcostumi.com,#phishing,https://x.com/romonlyht/status/2048654601835221159 2026-04-27 06:44:00,romonlyht,url,https://beachwearcostumi.com/bzkwzaws,#phishing,https://x.com/romonlyht/status/2048654601835221159 2026-04-27 06:44:00,romonlyht,ip,35.233.191.151,#phishing,https://x.com/romonlyht/status/2048654601835221159 2026-04-27 06:46:00,Fact_Finder03,ip,207.56.30.160,#C2,https://x.com/Fact_Finder03/status/2048655094300975563 2026-04-27 06:46:00,Fact_Finder03,sha256,d944876d729809b6933ee4797afbed840d28988b68f6726be255fdf8dd799a37,#C2,https://x.com/Fact_Finder03/status/2048655094300975563 2026-04-27 06:46:00,Fact_Finder03,sha256,ea16a69793d30869b687b607995764805c36f06b7f4205872375e9cac38662d7,#C2,https://x.com/Fact_Finder03/status/2048655094300975563 2026-04-27 06:46:00,K_N1kolenko,url,https://steamcommunity.com/profiles/76561198709529056,#Vidar #stealer,https://x.com/K_N1kolenko/status/2048655046028439966 2026-04-27 06:46:00,K_N1kolenko,url,https://telegram.me/b8bz11,#Vidar #stealer,https://x.com/K_N1kolenko/status/2048655046028439966 2026-04-27 06:46:00,romonlyht,domain,yxwhzmysgs.com,#phishing,https://x.com/romonlyht/status/2048655094305243268 2026-04-27 06:46:00,romonlyht,url,https://yxwhzmysgs.com/OONOHZy5tm.digital,#phishing,https://x.com/romonlyht/status/2048655094305243268 2026-04-27 06:46:00,romonlyht,ip,34.102.64.233,#phishing,https://x.com/romonlyht/status/2048655094305243268 2026-04-27 06:48:00,romonlyht,domain,hongkewood.com,#phishing,https://x.com/romonlyht/status/2048655579259040035 2026-04-27 06:48:00,romonlyht,url,https://hongkewood.com/UHUAJOkG0a.company,#phishing,https://x.com/romonlyht/status/2048655579259040035 2026-04-27 06:48:00,romonlyht,ip,35.236.104.208,#phishing,https://x.com/romonlyht/status/2048655579259040035 2026-04-27 06:48:00,romonlyht,ip,43.133.191.80,#phishing,https://x.com/romonlyht/status/2048655579259040035 2026-04-27 06:50:00,romonlyht,domain,gamingchaircheap.com,#phishing,https://x.com/romonlyht/status/2048656033980280955 2026-04-27 06:50:00,romonlyht,url,https://gamingchaircheap.com/?track=Ozp90nsDnouw,#phishing,https://x.com/romonlyht/status/2048656033980280955 2026-04-27 06:50:00,romonlyht,ip,192.119.111.222,#phishing,https://x.com/romonlyht/status/2048656033980280955 2026-04-27 06:52:00,romonlyht,domain,hombreropa.com,#phishing,https://x.com/romonlyht/status/2048656414722408553 2026-04-27 06:52:00,romonlyht,url,https://hombreropa.com/media/nQiEGaeVRRY-.xml,#phishing,https://x.com/romonlyht/status/2048656414722408553 2026-04-27 06:52:00,romonlyht,ip,192.236.146.83,#phishing,https://x.com/romonlyht/status/2048656414722408553 2026-04-27 06:52:00,romonlyht,ip,43.133.164.105,#phishing,https://x.com/romonlyht/status/2048656414722408553 2026-04-27 06:59:00,romonlyht,domain,www-pay.zhn-wap-hth.com,#phishing,https://x.com/romonlyht/status/2048658152523272698 2026-04-27 06:59:00,romonlyht,url,https://www-pay.zhn-wap-hth.com/?TYQc1puZ.jpg,#phishing,https://x.com/romonlyht/status/2048658152523272698 2026-04-27 06:59:00,romonlyht,ip,35.204.194.92,#phishing,https://x.com/romonlyht/status/2048658152523272698 2026-04-27 06:59:00,romonlyht,ip,172.67.153.49,#phishing,https://x.com/romonlyht/status/2048658152523272698 2026-04-27 07:05:00,romonlyht,domain,www2-pay.download-home-kaiyun.com,#phishing,https://x.com/romonlyht/status/2048659743636676743 2026-04-27 07:05:00,romonlyht,url,https://www2-pay.download-home-kaiyun.com/?fl9DdDjw.jpg,#phishing,https://x.com/romonlyht/status/2048659743636676743 2026-04-27 07:05:00,romonlyht,ip,34.178.117.125,#phishing,https://x.com/romonlyht/status/2048659743636676743 2026-04-27 07:05:00,romonlyht,ip,172.67.223.118,#phishing,https://x.com/romonlyht/status/2048659743636676743 2026-04-27 07:05:00,romonlyht,url,https://login.guf792lp.shop/mxh7ysng?_t=TA4qiO51OBD9pcHJj7jltfHiLdYoDiDTzV0DA1XWaCs,#phishing,https://x.com/romonlyht/status/2048659745620545771 2026-04-27 07:05:00,romonlyht,ip,104.21.12.25,#phishing,https://x.com/romonlyht/status/2048659745620545771 2026-04-27 07:07:00,byrne_emmy12099,sha256,aeb2cbf7f7031467d99c6fa29318bd51642ed5ff46b20458baab8fb2ef671f28,,https://x.com/byrne_emmy12099/status/2048660186722869507 2026-04-27 07:10:00,romonlyht,domain,toothbased.com,#phishing,https://x.com/romonlyht/status/2048661169339305996 2026-04-27 07:10:00,romonlyht,url,https://toothbased.com/?type=verify&key=wotdhwafcg,#phishing,https://x.com/romonlyht/status/2048661169339305996 2026-04-27 07:10:00,romonlyht,ip,158.101.137.3,#phishing,https://x.com/romonlyht/status/2048661169339305996 2026-04-27 07:52:00,malwrhunterteam,domain,zyisykm.shop,,https://x.com/malwrhunterteam/status/2048671502443180444 2026-04-27 07:52:00,malwrhunterteam,url,https://zyisykm.shop,,https://x.com/malwrhunterteam/status/2048671502443180444 2026-04-27 08:48:00,Malwarehunterr,domain,indiagov.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://indiagov.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,xhxz.info,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://xhxz.info,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,kjrywrzx.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://kjrywrzx.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,gooomld.top,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://gooomld.top,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,goolmor.cyou,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://goolmor.cyou,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,fgsdol.icu,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://fgsdol.icu,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,vsdnk.top,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://vsdnk.top,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,gooomoel.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://gooomoel.shop,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,Letter.zip,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://Letter.zip,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,domain,Check.zip,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://Check.zip,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,url,http://38.76.199.112,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 08:48:00,Malwarehunterr,ip,38.76.199.112,,https://x.com/Malwarehunterr/status/2048685639403774218 2026-04-27 09:23:00,suyog41,md5,573dc21ae52d9d6a3607dc97655e70fd,#stealer,https://x.com/suyog41/status/2048694432183234857 2026-04-27 09:56:00,smica83,domain,lesoulkir.info,,https://x.com/smica83/status/2048702700435411434 2026-04-27 09:56:00,smica83,url,http://lesoulkir.info,,https://x.com/smica83/status/2048702700435411434 2026-04-27 10:07:00,smica83,domain,imgresim.net,,https://x.com/smica83/status/2048705522451271688 2026-04-27 10:07:00,smica83,url,https://imgresim.net/Screen_Shot_1253_246469384693746_2469724.jpg.zip,,https://x.com/smica83/status/2048705522451271688 2026-04-27 10:26:00,smica83,domain,d.tmpfile.link,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,url,https://d.tmpfile.link/public/2026-04-27/afe0c156-084a-480c-9d8a-7b94450c6a04/ghhjgr.png,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,domain,lapoire6.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,url,http://lapoire6.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,domain,lapoire7.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,url,http://lapoire7.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,domain,lapoire8.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 10:26:00,smica83,url,http://lapoire8.hopto.org,#AsyncRAT,https://x.com/smica83/status/2048710333724860927 2026-04-27 11:15:00,malwrhunterteam,url,http://104.164.55.223,,https://x.com/malwrhunterteam/status/2048722660113178659 2026-04-27 11:15:00,malwrhunterteam,ip,104.164.55.223,,https://x.com/malwrhunterteam/status/2048722660113178659 2026-04-27 11:17:00,smica83,domain,telecom-exceed-aid-charts.trycloudflare.com,,https://x.com/smica83/status/2048723094185934944 2026-04-27 11:17:00,smica83,url,http://telecom-exceed-aid-charts.trycloudflare.com,,https://x.com/smica83/status/2048723094185934944 2026-04-27 12:10:00,suyog41,md5,b88fa8357f083197cafc14343ab5691a,#stealer,https://x.com/suyog41/status/2048736634817122775 2026-04-27 12:24:00,masaomi346,domain,paragon.goodfellasdiner.com,#malware,https://x.com/masaomi346/status/2048740155817930807 2026-04-27 12:24:00,masaomi346,url,http://paragon.goodfellasdiner.com,#malware,https://x.com/masaomi346/status/2048740155817930807 2026-04-27 12:29:00,Metemcyber,domain,nzrcovqs.nvasz.cn,#phishing,https://x.com/Metemcyber/status/2048741218151240179 2026-04-27 12:29:00,Metemcyber,url,https://nzrcovqs.nvasz.cn/iiufhys/eorio/loging/,#phishing,https://x.com/Metemcyber/status/2048741218151240179 2026-04-27 12:29:00,Metemcyber,url,http://43.165.166.156,#phishing,https://x.com/Metemcyber/status/2048741218151240179 2026-04-27 12:29:00,Metemcyber,ip,43.165.166.156,#phishing,https://x.com/Metemcyber/status/2048741218151240179 2026-04-27 12:34:00,Malwarehunterr,domain,netflix-home.info,#phishing,https://x.com/Malwarehunterr/status/2048742556083925203 2026-04-27 12:34:00,Malwarehunterr,url,http://netflix-home.info,#phishing,https://x.com/Malwarehunterr/status/2048742556083925203 2026-04-27 12:34:49,Metemcyber,domain,dfumbu.fytwfj.cn,,https://x.com/Metemcyber/status/2048742665014157584 2026-04-27 12:34:49,Metemcyber,url,https://dfumbu.fytwfj.cn/nomelo/login_index/,,https://x.com/Metemcyber/status/2048742665014157584 2026-04-27 12:37:00,masaomi346,domain,mac-cleantool.gitlab.io,#infostealer #malware,https://x.com/masaomi346/status/2048743434689949721 2026-04-27 12:37:00,masaomi346,url,http://mac-cleantool.gitlab.io,#infostealer #malware,https://x.com/masaomi346/status/2048743434689949721 2026-04-27 12:37:00,masaomi346,domain,dpsmuz.com,#infostealer #malware,https://x.com/masaomi346/status/2048743434689949721 2026-04-27 12:37:00,masaomi346,url,http://dpsmuz.com,#infostealer #malware,https://x.com/masaomi346/status/2048743434689949721 2026-04-27 12:38:00,Metemcyber,domain,stultiern.iceaz.cn,#phishing,https://x.com/Metemcyber/status/2048743709538431467 2026-04-27 12:38:00,Metemcyber,url,https://stultiern.iceaz.cn/yual_login_exp/getuug/,#phishing,https://x.com/Metemcyber/status/2048743709538431467 2026-04-27 13:29:00,Fact_Finder03,ip,141.147.45.169,#C2,https://x.com/Fact_Finder03/status/2048756421609807978 2026-04-27 13:54:00,500mk500,url,http://195.201.104.53,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,url,http://195.201.104.53:6931,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,url,http://195.201.104.53:6936,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,url,http://195.201.104.53:6939,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,url,http://216.126.224.220:5976,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,ip,195.201.104.53,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 13:54:00,500mk500,ip,216.126.224.220,#APT #Lazarus,https://x.com/500mk500/status/2048762621424226310 2026-04-27 16:49:00,Threatlabz,sha256,5c9b09819b196970a867b1d459f9053da38a6a2721f21264324e0a8ffef01e20,,https://x.com/Threatlabz/status/2048806728083571115 2026-04-27 17:50:00,brkalbyrk7,domain,filehappytomato.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,url,http://filehappytomato.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,domain,mendalik.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,url,http://mendalik.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,domain,cvetochek75.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,url,http://cvetochek75.com,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,sha256,f269d5f280c7f734300d3a6c769fee3f5e1f8cdc50677ed54086984b364f28d2,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 17:50:00,brkalbyrk7,sha256,897c4f7ac89d96ea2378679cc7dd7accc482add46d9395271dcc5c767bb95f4c,,https://x.com/brkalbyrk7/status/2048822026450657391 2026-04-27 18:30:00,g0njxa,domain,chocolatey.co.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,url,http://chocolatey.co.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,domain,chocolatey.net,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,url,http://chocolatey.net,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,domain,api.bio9438.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,url,http://api.bio9438.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,domain,olive3451.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,url,http://olive3451.com,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,domain,community.chocolatey.net,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:30:00,g0njxa,url,http://community.chocolatey.net/install.ps1,,https://x.com/g0njxa/status/2048832122618847252 2026-04-27 18:59:00,skocherhan,domain,unlockeblog12s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://unlockeblog12s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,unlockeblog15s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://unlockeblog15s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,eboardreport5s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://eboardreport5s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,unlockeblog10s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://unlockeblog10s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,eboardreport18s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://eboardreport18s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,unlockeblog19s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://unlockeblog19s.dynuddns.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,domain,enboardingreport18s.dns.army,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 18:59:00,skocherhan,url,http://enboardingreport18s.dns.army,#DPRK #Kimsuky,https://x.com/skocherhan/status/2048839411962396813 2026-04-27 20:47:00,James_inthe_box,sha256,bf777e4dee6918d2373ba83433b4a7530d6e69465a1b6107ef4fd43f4ea60ec4,,https://x.com/James_inthe_box/status/2048866534932779273 2026-04-27 20:54:00,smica83,domain,witch-skins-lip-coal.trycloudflare.com,,https://x.com/smica83/status/2048868515348652107 2026-04-27 20:54:00,smica83,url,http://witch-skins-lip-coal.trycloudflare.com,,https://x.com/smica83/status/2048868515348652107 2026-04-27 21:11:00,malwrhunterteam,domain,maiden-apply-looks-education.trycloudflare.com,,https://x.com/malwrhunterteam/status/2048872565095936175 2026-04-27 21:11:00,malwrhunterteam,url,http://maiden-apply-looks-education.trycloudflare.com,,https://x.com/malwrhunterteam/status/2048872565095936175 2026-04-27 21:17:00,hipdead010,domain,dianegov.co,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:17:00,hipdead010,url,http://dianegov.co,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:17:00,hipdead010,domain,consultaprocesosramajudicialgov.run.place,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:17:00,hipdead010,url,http://consultaprocesosramajudicialgov.run.place,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:17:00,hipdead010,ip,151.243.109.231,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:17:00,hipdead010,sha256,02a4812ad5c4caf9f3f3887589f1b2cb9895680c10bffcd762826d4a19b4c9a0,#AsyncRAT #Dcrat,https://x.com/hipdead010/status/2048874206431969653 2026-04-27 21:35:00,skocherhan,url,http://38.83.112.137:443,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,url,http://38.83.112.137:3000,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,url,http://149.56.141.176:8081,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,url,http://193.181.211.79:5001,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,url,http://77.110.120.34:5000,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,ip,38.83.112.137,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,ip,149.56.141.176,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,ip,193.181.211.79,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 21:35:00,skocherhan,ip,77.110.120.34,,https://x.com/skocherhan/status/2048878734149579050 2026-04-27 22:54:00,skocherhan,domain,edeliever-address-verify.biz,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://edeliever-address-verify.biz,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,appleviewer.sbs,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://appleviewer.sbs,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,digital-notice-kr.sbs,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://digital-notice-kr.sbs,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,public-revenue-info.biz,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://public-revenue-info.biz,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,urgent-notice-check.click,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://urgent-notice-check.click,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,epdf-user-view.quest,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://epdf-user-view.quest,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,digital-post.live,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://digital-post.live,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,domain,official-notice.click,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://official-notice.click,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,url,http://152.32.243.224,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 22:54:00,skocherhan,ip,152.32.243.224,,https://x.com/skocherhan/status/2048898639506891100 2026-04-27 23:04:00,skocherhan,domain,newday.inet-mark.com,,https://x.com/skocherhan/status/2048901120009880019 2026-04-27 23:04:00,skocherhan,url,http://newday.inet-mark.com,,https://x.com/skocherhan/status/2048901120009880019 2026-04-27 23:04:00,skocherhan,domain,terazosine.fit,,https://x.com/skocherhan/status/2048901120009880019 2026-04-27 23:04:00,skocherhan,url,http://terazosine.fit,,https://x.com/skocherhan/status/2048901120009880019 2026-04-28 00:05:00,PaduckLee,domain,723pt5dc2plfexrfvudhdhzvesgesqbcl4yivijjubptnogukxxv3hqd.onion,#ransomware,https://x.com/PaduckLee/status/2048916422630466037 2026-04-28 00:05:00,PaduckLee,url,http://723pt5dc2plfexrfvudhdhzvesgesqbcl4yivijjubptnogukxxv3hqd.onion,#ransomware,https://x.com/PaduckLee/status/2048916422630466037 2026-04-28 00:05:00,PaduckLee,md5,44b00a98918e058650aeaacc741d10e5,#ransomware,https://x.com/PaduckLee/status/2048916422630466037 2026-04-28 00:07:00,PhishStats,domain,6.accessbenefitscenter.com,#phishing,https://x.com/PhishStats/status/2048917088593461541 2026-04-28 00:07:00,PhishStats,url,https://6.accessbenefitscenter.com/journey?rdrx=1&s=3b5ee3cc-638c-4c17-967f-b0e56fbfbbe2#back,#phishing,https://x.com/PhishStats/status/2048917088593461541 2026-04-28 00:07:00,PhishStats,ip,34.111.175.190,#phishing,https://x.com/PhishStats/status/2048917088593461541 2026-04-28 01:01:13,masaomi346,domain,macclrupspace.gitlab.io,#infostealer #malware,https://x.com/masaomi346/status/2048930503227801657 2026-04-28 01:01:13,masaomi346,url,http://macclrupspace.gitlab.io,#infostealer #malware,https://x.com/masaomi346/status/2048930503227801657 2026-04-28 01:01:13,masaomi346,domain,termopasta.com,#infostealer #malware,https://x.com/masaomi346/status/2048930503227801657 2026-04-28 01:01:13,masaomi346,url,http://termopasta.com,#infostealer #malware,https://x.com/masaomi346/status/2048930503227801657 2026-04-28 01:41:00,Metemcyber,domain,lcatscpzx.cz592401.cn,#phishing,https://x.com/Metemcyber/status/2048940649949614538 2026-04-28 01:41:00,Metemcyber,url,https://lcatscpzx.cz592401.cn/optmer-prefere_html/,#phishing,https://x.com/Metemcyber/status/2048940649949614538 2026-04-28 01:41:00,Metemcyber,url,http://43.165.166.156,#phishing,https://x.com/Metemcyber/status/2048940649949614538 2026-04-28 01:41:00,Metemcyber,ip,43.165.166.156,#phishing,https://x.com/Metemcyber/status/2048940649949614538 2026-04-28 01:52:00,Metemcyber,domain,site4-sbisec.gsy2cg1u.shop,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 01:52:00,Metemcyber,url,https://site4-sbisec.gsy2cg1u.shop/login,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 01:52:00,Metemcyber,url,http://172.67.130.142,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 01:52:00,Metemcyber,url,http://104.21.8.163,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 01:52:00,Metemcyber,ip,172.67.130.142,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 01:52:00,Metemcyber,ip,104.21.8.163,#phishing,https://x.com/Metemcyber/status/2048943310602227836 2026-04-28 02:03:00,Metemcyber,domain,pseudotachylite.cfd,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 02:03:00,Metemcyber,url,https://www.pseudotachylite.cfd/myNZ6X,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 02:03:00,Metemcyber,url,http://172.67.152.169,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 02:03:00,Metemcyber,url,http://104.21.82.38,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 02:03:00,Metemcyber,ip,172.67.152.169,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 02:03:00,Metemcyber,ip,104.21.82.38,#phishing,https://x.com/Metemcyber/status/2048946258849808698 2026-04-28 03:37:00,masaomi346,domain,site4-sbisec.gtt6ss20.shop,#phishing,https://x.com/masaomi346/status/2048969911708602441 2026-04-28 03:37:00,masaomi346,url,https://site4-sbisec.gtt6ss20.shop/login,#phishing,https://x.com/masaomi346/status/2048969911708602441 2026-04-28 04:50:00,solostalking,ip,217.145.227.150,,https://x.com/solostalking/status/2048988205882732888 2026-04-28 05:35:00,K_N1kolenko,ip,8.222.225.32,,https://x.com/K_N1kolenko/status/2048999422495711437 2026-04-28 05:35:00,K_N1kolenko,ip,108.187.4.36,,https://x.com/K_N1kolenko/status/2048999422495711437 2026-04-28 05:49:00,suyog41,md5,4f500333f102a9352418f14ff2973bb9,,https://x.com/suyog41/status/2049003157532115232 2026-04-28 05:59:00,suyog41,url,http://r3m0t3.t3mp1a73.1nj3ct10n/89e9b490ce8568df/doc.rtf,,https://x.com/suyog41/status/2049005523710939553 2026-04-28 05:59:00,suyog41,md5,dd307599773b339f789d0929ffc81c79,,https://x.com/suyog41/status/2049005523710939553 2026-04-28 06:13:07,Fact_Finder03,ip,160.179.52.9,#C2,https://x.com/Fact_Finder03/status/2049008992966590860 2026-04-28 07:19:00,Fact_Finder03,ip,192.151.146.82,#C2,https://x.com/Fact_Finder03/status/2049025572584493443 2026-04-28 07:40:00,Fact_Finder03,ip,144.31.221.172,#C2,https://x.com/Fact_Finder03/status/2049030857780867342 2026-04-28 08:05:00,Metemcyber,domain,vavny.oflndm.cn,#phishing,https://x.com/Metemcyber/status/2049037385464479769 2026-04-28 08:05:00,Metemcyber,url,https://vavny.oflndm.cn/RSV_P/smart_index.htm/,#phishing,https://x.com/Metemcyber/status/2049037385464479769 2026-04-28 08:20:00,Metemcyber,domain,mhqajiz.bl8cz6.cn,#phishing,https://x.com/Metemcyber/status/2049041046399779218 2026-04-28 08:20:00,Metemcyber,url,https://mhqajiz.bl8cz6.cn/apusetop/jupindx/,#phishing,https://x.com/Metemcyber/status/2049041046399779218 2026-04-28 08:49:00,Fact_Finder03,ip,185.107.74.61,#phishing,https://x.com/Fact_Finder03/status/2049048221859590380 2026-04-28 09:06:00,PhishStats,domain,xan3ri.cfd,#phishing,https://x.com/PhishStats/status/2049052715871772726 2026-04-28 09:06:00,PhishStats,url,https://xan3ri.cfd/dulidpgo/PbkHGx/LTjfPu,#phishing,https://x.com/PhishStats/status/2049052715871772726 2026-04-28 09:06:00,PhishStats,ip,172.67.151.168,#phishing,https://x.com/PhishStats/status/2049052715871772726 2026-04-28 09:30:00,smica83,domain,lotuscare.com.my,,https://x.com/smica83/status/2049058768508342486 2026-04-28 09:30:00,smica83,url,https://www.lotuscare.com.my/Keller.ps1,,https://x.com/smica83/status/2049058768508342486 2026-04-28 09:40:00,smica83,domain,hx1.bounceme.net:4433,,https://x.com/smica83/status/2049061239314076024 2026-04-28 09:40:00,smica83,url,https://hx1.bounceme.net:4433/victim.dll,,https://x.com/smica83/status/2049061239314076024 2026-04-28 10:08:00,malwrhunterteam,domain,xtrafftrck.net:3000,,https://x.com/malwrhunterteam/status/2049068289607737541 2026-04-28 10:08:00,malwrhunterteam,url,http://xtrafftrck.net:3000,,https://x.com/malwrhunterteam/status/2049068289607737541 2026-04-28 10:09:00,smica83,domain,vpntop.com.cn,,https://x.com/smica83/status/2049068445682037229 2026-04-28 10:09:00,smica83,url,https://vpntop.com.cn/letsvpn_v3.5.6_x64.msi,,https://x.com/smica83/status/2049068445682037229 2026-04-28 11:24:00,SansLimit3,url,http://151.240.151.83,,https://x.com/SansLimit3/status/2049087449234645347 2026-04-28 11:24:00,SansLimit3,url,https://151.240.151.83/:9090,,https://x.com/SansLimit3/status/2049087449234645347 2026-04-28 11:24:00,SansLimit3,ip,151.240.151.83,,https://x.com/SansLimit3/status/2049087449234645347 2026-04-28 12:08:00,suyog41,domain,glowmedaesthetics.com,#stealer,https://x.com/suyog41/status/2049098438089073128 2026-04-28 12:08:00,suyog41,url,http://glowmedaesthetics.com,#stealer,https://x.com/suyog41/status/2049098438089073128 2026-04-28 12:08:00,suyog41,md5,4fd228e2bbe7eca0dc1e44c0662018bb,#stealer,https://x.com/suyog41/status/2049098438089073128 2026-04-28 12:21:00,Slvlombardo,domain,barberspot.in,#phishing,https://x.com/Slvlombardo/status/2049101792466571632 2026-04-28 12:21:00,Slvlombardo,url,https://barberspot.in/2ininjbbv/c22f55rr/sd0x2yy/:right_arrow_curving_down,#phishing,https://x.com/Slvlombardo/status/2049101792466571632 2026-04-28 12:21:00,Slvlombardo,domain,it-me-id-pagit-id.com,#phishing,https://x.com/Slvlombardo/status/2049101792466571632 2026-04-28 12:21:00,Slvlombardo,url,https://it-me-id-pagit-id.com/wenfiIT/lderIT/cellta-net/app/log.php,#phishing,https://x.com/Slvlombardo/status/2049101792466571632 2026-04-28 12:24:00,The_lesyk,url,http://43.165.7.227,#phishing,https://x.com/The_lesyk/status/2049102376171135373 2026-04-28 12:24:00,The_lesyk,ip,43.165.7.227,#phishing,https://x.com/The_lesyk/status/2049102376171135373 2026-04-28 12:55:00,Sandguard_malwR,sha256,163cf00168d6fd28366db6c88a1216f95b10b8bb71359d161b542a67c40bffc0,#malware,https://x.com/Sandguard_malwR/status/2049110376495636846 2026-04-28 13:53:00,James_inthe_box,url,http://66.179.248.120/img/,#Remcos,https://x.com/James_inthe_box/status/2049124737096527922 2026-04-28 13:53:00,James_inthe_box,url,http://23.95.62.25:7070,#Remcos,https://x.com/James_inthe_box/status/2049124737096527922 2026-04-28 13:53:00,James_inthe_box,ip,66.179.248.120,#Remcos,https://x.com/James_inthe_box/status/2049124737096527922 2026-04-28 13:53:00,James_inthe_box,ip,23.95.62.25,#Remcos,https://x.com/James_inthe_box/status/2049124737096527922 2026-04-28 14:54:00,sicehice,url,http://78.11.101.78/Beastmode.sh,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,url,http://78.11.10.78/Beastmode.sh,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,137.184.20.87,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,78.11.101.78,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,78.11.10.78,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,78.11.10.7,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,77.111.101.78,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:54:00,sicehice,ip,77.11.101.78,,https://x.com/sicehice/status/2049140297595080819 2026-04-28 14:59:00,vmray,domain,Pastee.dev,,https://x.com/vmray/status/2049141348926669126 2026-04-28 14:59:00,vmray,url,http://Pastee.dev,,https://x.com/vmray/status/2049141348926669126 2026-04-28 15:14:00,anylink20240604,sha256,42a1aded85892a80c83f741a7ac00e7e75015166c3be0bae29d93d3a4714711d,#ransomware,https://x.com/anylink20240604/status/2049145349793804744 2026-04-28 15:18:40,Erreklamatu,domain,info@erreklamatu.com,#phishing,https://x.com/Erreklamatu/status/2049146287652536675 2026-04-28 15:18:40,Erreklamatu,url,https://info@erreklamatu.com,#phishing,https://x.com/Erreklamatu/status/2049146287652536675 2026-04-28 15:27:00,harugasumi,domain,meekys.mtffx.cn,#phishing,https://x.com/harugasumi/status/2049148402471145825 2026-04-28 15:27:00,harugasumi,url,https://meekys.mtffx.cn/gpajp/accunt/lginox/,#phishing,https://x.com/harugasumi/status/2049148402471145825 2026-04-28 16:06:00,L0Psec,sha256,80d5202d63558ed81be51101c65bc98a2bbda74084b46acd58ce48607da8a3a3,,https://x.com/L0Psec/status/2049158325372125450 2026-04-28 16:30:00,sicehice,url,https://217.60.241.36/sh,,https://x.com/sicehice/status/2049164321519779866 2026-04-28 16:30:00,sicehice,ip,115.190.211.111,,https://x.com/sicehice/status/2049164321519779866 2026-04-28 16:30:00,sicehice,ip,217.60.241.36,,https://x.com/sicehice/status/2049164321519779866 2026-04-28 16:30:00,sicehice,md5,8c45305df1afb2a9d0249ba3d0576b41,,https://x.com/sicehice/status/2049164321519779866 2026-04-28 17:22:00,malwrhunterteam,domain,scp749.com,,https://x.com/malwrhunterteam/status/2049177426706481303 2026-04-28 17:22:00,malwrhunterteam,url,http://scp749.com,,https://x.com/malwrhunterteam/status/2049177426706481303 2026-04-28 18:14:08,malwrhunterteam,domain,vayusena.online,,https://x.com/malwrhunterteam/status/2049190442084835702 2026-04-28 18:14:08,malwrhunterteam,url,https://vayusena.online/login,,https://x.com/malwrhunterteam/status/2049190442084835702 2026-04-28 18:33:00,skocherhan,domain,inlinepol1s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://inlinepol1s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,docinfo.inlinepol1s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://docinfo.inlinepol1s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,inlinepol19s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://inlinepol19s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,inlinepol17s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://inlinepol17s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,edoc.inlinepol14s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://edoc.inlinepol14s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,newaltercm42s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://newaltercm42s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,inlinepol14s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://inlinepol14s.roxa.org,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,uofficialerc22v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://uofficialerc22v.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,domain,newpolinf48s.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:33:00,skocherhan,url,http://newpolinf48s.dynuddns.com,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049195306487853319 2026-04-28 18:50:00,smica83,domain,vayusena.online:48973,,https://x.com/smica83/status/2049199564901454092 2026-04-28 18:50:00,smica83,url,https://vayusena.online:48973/systemdd,,https://x.com/smica83/status/2049199564901454092 2026-04-28 20:13:00,Malwarehunterr,domain,lace-desktop.io,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:13:00,Malwarehunterr,url,http://lace-desktop.io,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:13:00,Malwarehunterr,domain,store4.gofile.io,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:13:00,Malwarehunterr,url,http://store4.gofile.io/download/direct/956fe713-cea0-4157-9f10-6a4e385b49e7/LaceDesktop-installer.msi,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:13:00,Malwarehunterr,domain,lace-desktop.live,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:13:00,Malwarehunterr,url,http://lace-desktop.live,,https://x.com/Malwarehunterr/status/2049220391357628591 2026-04-28 20:17:00,smica83,url,http://138.201.128.249,,https://x.com/smica83/status/2049221402163544167 2026-04-28 20:17:00,smica83,ip,138.201.128.249,,https://x.com/smica83/status/2049221402163544167 2026-04-28 20:23:00,malwrhunterteam,domain,spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com,,https://x.com/malwrhunterteam/status/2049223060062970275 2026-04-28 20:23:00,malwrhunterteam,url,http://spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws.com,,https://x.com/malwrhunterteam/status/2049223060062970275 2026-04-28 21:18:00,smica83,domain,drazyland.us,,https://x.com/smica83/status/2049236774271045773 2026-04-28 21:18:00,smica83,url,http://drazyland.us,,https://x.com/smica83/status/2049236774271045773 2026-04-28 21:19:00,malwrhunterteam,domain,centralcoretech.com,,https://x.com/malwrhunterteam/status/2049237054857285793 2026-04-28 21:19:00,malwrhunterteam,url,http://centralcoretech.com,,https://x.com/malwrhunterteam/status/2049237054857285793 2026-04-28 21:26:00,smica83,url,https://35.196.105.113/wp-admin/x64_v6,,https://x.com/smica83/status/2049238817958232532 2026-04-28 21:26:00,smica83,ip,35.196.105.113,,https://x.com/smica83/status/2049238817958232532 2026-04-28 21:30:00,Merlax_,domain,facilitandoagora.online,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,url,https://facilitandoagora.online/validacao,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,domain,mercadolib-es.shop,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,url,https://mercadolib-es.shop,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,domain,guepardodelivery-entregador.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,url,https://guepardodelivery-entregador.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,domain,ailosapp.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,url,https://ailosapp.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,domain,playstorelivelo.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-28 21:30:00,Merlax_,url,https://playstorelivelo.com,#phishing,https://x.com/Merlax_/status/2049239733578969593 2026-04-29 00:06:00,fbgwls245,domain,ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion,#ransomware,https://x.com/fbgwls245/status/2049279082215710749 2026-04-29 00:06:00,fbgwls245,url,http://ttvbuilv5mf2wggfjgmvin22ndzghpukhsyy6coz3p4wt5nqnxah7tyd.onion,#ransomware,https://x.com/fbgwls245/status/2049279082215710749 2026-04-29 00:09:00,eKg_sec,ip,38.146.25.206,#ClickFix #malware,https://x.com/eKg_sec/status/2049279879141564588 2026-04-29 01:11:00,harugasumi,domain,tafirizipi.z1.web.core.windows.net,,https://x.com/harugasumi/status/2049295427103813988 2026-04-29 01:11:00,harugasumi,url,https://tafirizipi.z1.web.core.windows.net,,https://x.com/harugasumi/status/2049295427103813988 2026-04-29 01:11:00,harugasumi,ip,52.239.251.161,,https://x.com/harugasumi/status/2049295427103813988 2026-04-29 03:13:00,masaomi346,domain,e-stat.8mpf2yml.shop,#phishing,https://x.com/masaomi346/status/2049326139265720321 2026-04-29 03:13:00,masaomi346,url,https://e-stat.8mpf2yml.shop/home,#phishing,https://x.com/masaomi346/status/2049326139265720321 2026-04-29 03:18:00,harugasumi,domain,e-stat.dcch5jvl.shop,#phishing,https://x.com/harugasumi/status/2049327338736013808 2026-04-29 03:18:00,harugasumi,url,https://e-stat.dcch5jvl.shop,#phishing,https://x.com/harugasumi/status/2049327338736013808 2026-04-29 03:18:00,harugasumi,domain,e-stat.9g4icuky.shop,#phishing,https://x.com/harugasumi/status/2049327338736013808 2026-04-29 03:18:00,harugasumi,url,https://e-stat.9g4icuky.shop/oo6z309q,#phishing,https://x.com/harugasumi/status/2049327338736013808 2026-04-29 04:26:00,Cyberteam008,url,http://108.181.153.57:9616,#C2 #RAT,https://x.com/Cyberteam008/status/2049344545972986204 2026-04-29 04:26:00,Cyberteam008,ip,108.181.153.57,#C2 #RAT,https://x.com/Cyberteam008/status/2049344545972986204 2026-04-29 04:26:00,Cyberteam008,md5,b915e9fe3d5541e75609b220ed2e88b0,#C2 #RAT,https://x.com/Cyberteam008/status/2049344545972986204 2026-04-29 05:08:00,patialavii,domain,certifysubmited.com,#phishing,https://x.com/patialavii/status/2049354999793393861 2026-04-29 05:08:00,patialavii,url,http://certifysubmited.com,#phishing,https://x.com/patialavii/status/2049354999793393861 2026-04-29 05:08:00,patialavii,md5,e1f3a7b45dad8aec1bf2f5e4d63f0c69,#phishing,https://x.com/patialavii/status/2049354999793393861 2026-04-29 05:36:27,suyog41,md5,9a25d0d4a647745681b8db289941d407,#stealer,https://x.com/suyog41/status/2049362152688156787 2026-04-29 06:09:00,Fact_Finder03,ip,165.245.250.220,#C2,https://x.com/Fact_Finder03/status/2049370492763840687 2026-04-29 06:30:00,JAMESWT_WT,domain,assertive-onyx-canary.31-22-7-7.cpanel.site,#phishing,https://x.com/JAMESWT_WT/status/2049375732669825206 2026-04-29 06:30:00,JAMESWT_WT,url,https://assertive-onyx-canary.31-22-7-7.cpanel.site/session/,#phishing,https://x.com/JAMESWT_WT/status/2049375732669825206 2026-04-29 06:55:00,suyog41,url,http://stake-casino.stream,#stealer,https://x.com/suyog41/status/2049382164463268033 2026-04-29 06:55:00,suyog41,domain,iuta.today,#stealer,https://x.com/suyog41/status/2049382164463268033 2026-04-29 06:55:00,suyog41,url,http://iuta.today,#stealer,https://x.com/suyog41/status/2049382164463268033 2026-04-29 06:55:00,suyog41,md5,c2699723fed437cfedb0a7e6762741e7,#stealer,https://x.com/suyog41/status/2049382164463268033 2026-04-29 06:55:00,suyog41,md5,b80700935a4ef074810583dd7e093c78,#stealer,https://x.com/suyog41/status/2049382164463268033 2026-04-29 06:55:00,Fact_Finder03,ip,95.111.244.90,,https://x.com/Fact_Finder03/status/2049382106619576417 2026-04-29 07:00:00,malwrhunterteam,domain,stake-casino.stream,,https://x.com/malwrhunterteam/status/2049383256441671998 2026-04-29 07:00:00,malwrhunterteam,url,https://stake-casino.stream,,https://x.com/malwrhunterteam/status/2049383256441671998 2026-04-29 07:35:00,masaomi346,domain,ljbrwu.cn,#phishing,https://x.com/masaomi346/status/2049391999577645422 2026-04-29 07:35:00,masaomi346,url,https://ljbrwu.cn,#phishing,https://x.com/masaomi346/status/2049391999577645422 2026-04-29 07:35:00,masaomi346,domain,qviega.cn,#phishing,https://x.com/masaomi346/status/2049391999577645422 2026-04-29 07:35:00,masaomi346,url,https://qviega.cn,#phishing,https://x.com/masaomi346/status/2049391999577645422 2026-04-29 07:47:00,Fact_Finder03,ip,79.7.152.162,#C2,https://x.com/Fact_Finder03/status/2049395063659307421 2026-04-29 07:47:00,Fact_Finder03,sha256,901fc6771ccdfc5194dfa63f949cce05298c999a813af2cec2ebf2dcc50aed1f,#C2,https://x.com/Fact_Finder03/status/2049395063659307421 2026-04-29 07:47:00,Fact_Finder03,sha256,6c513a3caaf0e368f8336a307b1d4ccb2ad16fdc8428d8397acd0b2594bbc5c8,#C2,https://x.com/Fact_Finder03/status/2049395063659307421 2026-04-29 08:00:00,JAMESWT_WT,domain,jif-9-dodol-7793ce.netlify.app,#phishing,https://x.com/JAMESWT_WT/status/2049398435556577391 2026-04-29 08:00:00,JAMESWT_WT,url,https://jif-9-dodol-7793ce.netlify.app,#phishing,https://x.com/JAMESWT_WT/status/2049398435556577391 2026-04-29 08:00:00,JAMESWT_WT,domain,intesasanpaolo-proteggi-la-mia-carta.netlify.app,#phishing,https://x.com/JAMESWT_WT/status/2049398435556577391 2026-04-29 08:00:00,JAMESWT_WT,url,https://intesasanpaolo-proteggi-la-mia-carta.netlify.app,#phishing,https://x.com/JAMESWT_WT/status/2049398435556577391 2026-04-29 08:00:00,Fact_Finder03,ip,31.57.156.127,#C2,https://x.com/Fact_Finder03/status/2049398324990758971 2026-04-29 08:00:00,Fact_Finder03,sha256,64e6353f01583ef365ee3e835cff0c21b21e523b9c466c2a6cc99910a6438c17,#C2,https://x.com/Fact_Finder03/status/2049398324990758971 2026-04-29 08:20:00,suyog41,md5,229a945794ad056001982803a6a58a8c,#stealer,https://x.com/suyog41/status/2049403329491431791 2026-04-29 09:18:00,harugasumi,domain,e-stat.75lcvzk6.shop,#phishing,https://x.com/harugasumi/status/2049418155660103859 2026-04-29 09:18:00,harugasumi,url,https://e-stat.75lcvzk6.shop,#phishing,https://x.com/harugasumi/status/2049418155660103859 2026-04-29 09:18:00,harugasumi,domain,e-stat.26rni3t0.shop,#phishing,https://x.com/harugasumi/status/2049418155660103859 2026-04-29 09:18:00,harugasumi,url,https://e-stat.26rni3t0.shop/2xj3nsrm,#phishing,https://x.com/harugasumi/status/2049418155660103859 2026-04-29 09:24:18,harugasumi,domain,e-stat.dcrj1bfm.shop,#phishing,https://x.com/harugasumi/status/2049419493974450530 2026-04-29 09:24:18,harugasumi,url,https://e-stat.dcrj1bfm.shop,#phishing,https://x.com/harugasumi/status/2049419493974450530 2026-04-29 10:13:00,malwrhunterteam,url,http://115.175.16.26,,https://x.com/malwrhunterteam/status/2049431879208616237 2026-04-29 10:13:00,malwrhunterteam,ip,115.175.16.26,,https://x.com/malwrhunterteam/status/2049431879208616237 2026-04-29 10:24:00,malwrhunterteam,url,http://185.102.115.84:4000/login,,https://x.com/malwrhunterteam/status/2049434562522935614 2026-04-29 10:24:00,malwrhunterteam,ip,185.102.115.84,,https://x.com/malwrhunterteam/status/2049434562522935614 2026-04-29 10:25:00,smica83,url,https://raw.githubusercontent.com/gdq2/F/refs/heads/main/5,,https://x.com/smica83/status/2049434807977865313 2026-04-29 10:33:00,suyog41,domain,cloud-verificate.com,#stealer,https://x.com/suyog41/status/2049436796225036688 2026-04-29 10:33:00,suyog41,url,http://cloud-verificate.com,#stealer,https://x.com/suyog41/status/2049436796225036688 2026-04-29 10:33:00,suyog41,md5,f920747af86b9e42e38a530ff977b499,#stealer,https://x.com/suyog41/status/2049436796225036688 2026-04-29 10:35:00,smica83,domain,heliosdue.info,,https://x.com/smica83/status/2049437377546903716 2026-04-29 10:35:00,smica83,url,http://heliosdue.info,,https://x.com/smica83/status/2049437377546903716 2026-04-29 10:43:00,smica83,domain,xeniominb.info,,https://x.com/smica83/status/2049439487491510434 2026-04-29 10:43:00,smica83,url,http://xeniominb.info,,https://x.com/smica83/status/2049439487491510434 2026-04-29 11:07:00,smica83,domain,dashwake.info,,https://x.com/smica83/status/2049445426521092596 2026-04-29 11:07:00,smica83,url,http://dashwake.info,,https://x.com/smica83/status/2049445426521092596 2026-04-29 11:17:00,suyog41,domain,qusetagent.com,#stealer,https://x.com/suyog41/status/2049447854947848561 2026-04-29 11:17:00,suyog41,url,http://qusetagent.com,#stealer,https://x.com/suyog41/status/2049447854947848561 2026-04-29 11:17:00,suyog41,md5,dcb3f8501b0e060ef5a180d9605d6681,#stealer,https://x.com/suyog41/status/2049447854947848561 2026-04-29 11:58:00,malwrhunterteam,domain,sagiw.chatcamic.com,,https://x.com/malwrhunterteam/status/2049458253243810069 2026-04-29 11:58:00,malwrhunterteam,url,http://sagiw.chatcamic.com,,https://x.com/malwrhunterteam/status/2049458253243810069 2026-04-29 11:58:14,Erreklamatu,domain,info@erreklamatu.com,#phishing,https://x.com/Erreklamatu/status/2049458232410669170 2026-04-29 11:58:14,Erreklamatu,url,https://info@erreklamatu.com,#phishing,https://x.com/Erreklamatu/status/2049458232410669170 2026-04-29 12:07:00,500mk500,url,https://35.196.105.113/wp-admin/x64_v6,,https://x.com/500mk500/status/2049460649885855948 2026-04-29 12:07:00,500mk500,url,http://35.196.105.113:8000,,https://x.com/500mk500/status/2049460649885855948 2026-04-29 12:07:00,500mk500,ip,35.196.105.113,,https://x.com/500mk500/status/2049460649885855948 2026-04-29 12:08:00,PhishStats,domain,u.to,#phishing,https://x.com/PhishStats/status/2049460843079717124 2026-04-29 12:08:00,PhishStats,url,https://u.to/FMrdIA,#phishing,https://x.com/PhishStats/status/2049460843079717124 2026-04-29 12:08:00,PhishStats,ip,186.2.165.57,#phishing,https://x.com/PhishStats/status/2049460843079717124 2026-04-29 14:14:00,mugu_reporter,ip,163.61.188.2,#phishing,https://x.com/mugu_reporter/status/2049492548498993629 2026-04-29 14:16:39,mugu_reporter,domain,check.spamhaus.org,#phishing,https://x.com/mugu_reporter/status/2049493067388817785 2026-04-29 14:16:39,mugu_reporter,url,https://check.spamhaus.org/results/?query=163.61.188.5,#phishing,https://x.com/mugu_reporter/status/2049493067388817785 2026-04-29 14:16:39,mugu_reporter,url,https://check.spamhaus.org/results/?query=163.61.188.7,#phishing,https://x.com/mugu_reporter/status/2049493067388817785 2026-04-29 14:16:39,mugu_reporter,ip,163.61.188.5,#phishing,https://x.com/mugu_reporter/status/2049493067388817785 2026-04-29 14:16:39,mugu_reporter,ip,163.61.188.7,#phishing,https://x.com/mugu_reporter/status/2049493067388817785 2026-04-29 14:36:00,smica83,domain,theoryviraleliminate.com,,https://x.com/smica83/status/2049498081347919982 2026-04-29 14:36:00,smica83,url,http://theoryviraleliminate.com,,https://x.com/smica83/status/2049498081347919982 2026-04-29 15:10:00,harugasumi,domain,e-eslectronic.jp,#phishing,https://x.com/harugasumi/status/2049506623148998973 2026-04-29 15:10:00,harugasumi,url,https://e-eslectronic.jp/e/Ticket/plus/etC6Fsh5,#phishing,https://x.com/harugasumi/status/2049506623148998973 2026-04-29 17:49:00,patialavii,domain,onlinepaperfile.com,,https://x.com/patialavii/status/2049546595520397676 2026-04-29 17:49:00,patialavii,url,http://onlinepaperfile.com,,https://x.com/patialavii/status/2049546595520397676 2026-04-29 17:49:00,patialavii,domain,onlinepaperfiles.com,,https://x.com/patialavii/status/2049546595520397676 2026-04-29 17:49:00,patialavii,url,http://onlinepaperfiles.com,,https://x.com/patialavii/status/2049546595520397676 2026-04-29 18:00:00,phatomcandle,url,http://185.76.79.125,#APT #C2 #malware,https://x.com/phatomcandle/status/2049549292755734604 2026-04-29 18:00:00,phatomcandle,ip,185.76.79.125,#APT #C2 #malware,https://x.com/phatomcandle/status/2049549292755734604 2026-04-29 18:12:10,skocherhan,domain,lace-wallet-aap.weebly.com,,https://x.com/skocherhan/status/2049552334569513276 2026-04-29 18:12:10,skocherhan,url,http://lace-wallet-aap.weebly.com,,https://x.com/skocherhan/status/2049552334569513276 2026-04-29 18:18:00,skocherhan,domain,ncodcepass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodcepass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,nidloes.ncodcepass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://nidloes.ncodcepass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,ncodccpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodccpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,ncodcbpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodcbpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,ncodcapass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodcapass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,nid.ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://nid.ncodbspass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,nid.ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://nid.ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,domain,ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:18:00,skocherhan,url,http://ncodbzpass.dynv6.net,#DPRK #Kimsuky,https://x.com/skocherhan/status/2049553999653945709 2026-04-29 18:29:00,Malwarehunterr,domain,asdasdasz.cfd,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:29:00,Malwarehunterr,url,http://asdasdasz.cfd,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:29:00,Malwarehunterr,domain,binfinance.cfd,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:29:00,Malwarehunterr,url,http://binfinance.cfd,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:29:00,Malwarehunterr,url,http://94.154.35.90,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:29:00,Malwarehunterr,ip,94.154.35.90,#phishing #scam,https://x.com/Malwarehunterr/status/2049556634012401794 2026-04-29 18:36:00,sicehice,url,https://tmUnblock.cgi,,https://x.com/sicehice/status/2049558462632218765 2026-04-29 18:36:00,sicehice,url,http://88.214.20.14/bins/tux.mips,,https://x.com/sicehice/status/2049558462632218765 2026-04-29 18:36:00,sicehice,ip,61.58.234.15,,https://x.com/sicehice/status/2049558462632218765 2026-04-29 18:36:00,sicehice,ip,88.214.20.14,,https://x.com/sicehice/status/2049558462632218765 2026-04-29 18:36:00,sicehice,md5,d372cfe6854782eb1f3b2cc341187c88,,https://x.com/sicehice/status/2049558462632218765 2026-04-29 19:04:00,skocherhan,domain,clarifypost.forum,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://clarifypost.forum,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,k-admin-portal.quest,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://k-admin-portal.quest,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,secsettingcheck.quest,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://secsettingcheck.quest,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,alarm-doc-review.site,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://alarm-doc-review.site,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,e-billing-service.autos,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://e-billing-service.autos,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,confirm-userorder.biz,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://confirm-userorder.biz,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,paperless-korea.one,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://paperless-korea.one,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,checko.paperless-korea.one,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://checko.paperless-korea.one,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,domain,cdn-verifying.homes,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://cdn-verifying.homes,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,url,http://152.32.243.169,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 19:04:00,skocherhan,ip,152.32.243.169,,https://x.com/skocherhan/status/2049565434685325594 2026-04-29 20:09:00,Malwarehunterr,domain,securedoc-photos.info,#ClickFix,https://x.com/Malwarehunterr/status/2049581740398887017 2026-04-29 20:09:00,Malwarehunterr,url,http://securedoc-photos.info,#ClickFix,https://x.com/Malwarehunterr/status/2049581740398887017 2026-04-29 20:09:00,Malwarehunterr,sha256,eacf50d94110e59e27c80cc8b1a10632bf4d3e51d0d887937060479b402ca0d9,#ClickFix,https://x.com/Malwarehunterr/status/2049581740398887017 2026-04-29 21:59:00,masaomi346,domain,luxoriahub.shop,#phishing,https://x.com/masaomi346/status/2049609513725222967 2026-04-29 21:59:00,masaomi346,url,https://luxoriahub.shop,#phishing,https://x.com/masaomi346/status/2049609513725222967 2026-04-30 01:11:00,masaomi346,domain,e-stat.26rni3t0.shop,#phishing,https://x.com/masaomi346/status/2049657818085781664 2026-04-30 01:11:00,masaomi346,url,https://e-stat.26rni3t0.shop/home,#phishing,https://x.com/masaomi346/status/2049657818085781664 2026-04-30 01:11:00,masaomi346,domain,e-stat.8mpf2yml.shop,#phishing,https://x.com/masaomi346/status/2049657818085781664 2026-04-30 01:11:00,masaomi346,url,https://e-stat.8mpf2yml.shop/home,#phishing,https://x.com/masaomi346/status/2049657818085781664 2026-04-30 01:17:00,masaomi346,domain,server-restore-biglobe-ne-jp.weebly.com,#phishing,https://x.com/masaomi346/status/2049659323278864411 2026-04-30 01:17:00,masaomi346,url,https://server-restore-biglobe-ne-jp.weebly.com,#phishing,https://x.com/masaomi346/status/2049659323278864411 2026-04-30 02:30:00,Fact_Finder03,ip,116.118.47.206,#C2,https://x.com/Fact_Finder03/status/2049677620678107196 2026-04-30 05:40:00,K_N1kolenko,ip,91.219.238.166,#AsyncRAT,https://x.com/K_N1kolenko/status/2049725521005588913 2026-04-30 05:40:00,K_N1kolenko,ip,176.65.132.249,#AsyncRAT,https://x.com/K_N1kolenko/status/2049725521005588913 2026-04-30 05:40:00,K_N1kolenko,ip,178.16.52.105,#AsyncRAT,https://x.com/K_N1kolenko/status/2049725521005588913 2026-04-30 05:51:00,K_N1kolenko,url,http://91.92.243.46,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,domain,driplin.cyou,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,url,http://driplin.cyou,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,domain,pomflgf.vu,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,url,http://pomflgf.vu,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,domain,ulmudhw.shop,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,url,http://ulmudhw.shop,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 05:51:00,K_N1kolenko,ip,91.92.243.46,#LummaStealer,https://x.com/K_N1kolenko/status/2049728280052339142 2026-04-30 06:03:00,K_N1kolenko,ip,38.240.51.74,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,38.247.130.219,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,45.74.61.23,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,45.141.148.126,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,91.92.120.68,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,178.193.174.6,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,185.233.164.186,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:03:00,K_N1kolenko,ip,203.202.232.149,#RAT #Xworm,https://x.com/K_N1kolenko/status/2049731413654524089 2026-04-30 06:07:00,PhishStats,domain,va.permata.bankslemansyariah.co.id,#phishing,https://x.com/PhishStats/status/2049732366982091153 2026-04-30 06:07:00,PhishStats,url,https://www.va.permata.bankslemansyariah.co.id,#phishing,https://x.com/PhishStats/status/2049732366982091153 2026-04-30 06:07:00,PhishStats,ip,153.92.13.152,#phishing,https://x.com/PhishStats/status/2049732366982091153 2026-04-30 06:18:00,harugasumi,domain,rhythmite.cfd,#phishing,https://x.com/harugasumi/status/2049735138163200263 2026-04-30 06:18:00,harugasumi,url,https://www.rhythmite.cfd/duodmqqglfugMcsjfekhdt,#phishing,https://x.com/harugasumi/status/2049735138163200263 2026-04-30 07:07:00,malwrhunterteam,url,http://45.150.66.241,,https://x.com/malwrhunterteam/status/2049747425431081322 2026-04-30 07:07:00,malwrhunterteam,ip,45.150.66.241,,https://x.com/malwrhunterteam/status/2049747425431081322 2026-04-30 07:36:00,harugasumi,domain,e-stat.e3ed5msd.shop,#phishing,https://x.com/harugasumi/status/2049754658357600647 2026-04-30 07:36:00,harugasumi,url,https://e-stat.e3ed5msd.shop,#phishing,https://x.com/harugasumi/status/2049754658357600647 2026-04-30 07:36:00,harugasumi,url,https://e-stat.8mpf2yml.shop/oo6z309q,#phishing,https://x.com/harugasumi/status/2049754658357600647 2026-04-30 08:35:17,ShadowOpCode,url,http://185.29.10.77/VbnpIdAHD29.bin,#AgentTesla,https://x.com/ShadowOpCode/status/2049769546609832080 2026-04-30 08:35:17,ShadowOpCode,ip,185.29.10.77,#AgentTesla,https://x.com/ShadowOpCode/status/2049769546609832080 2026-04-30 08:36:00,nextronresearch,sha256,1da4f7f001d239a54fab50eb7c3cbc985db392a3d4405e19c3a5d2035d591004,,https://x.com/nextronresearch/status/2049769824952148131 2026-04-30 08:44:00,Fact_Finder03,ip,192.229.87.227,#C2,https://x.com/Fact_Finder03/status/2049771804743614790 2026-04-30 09:00:00,nextronresearch,sha256,5fc61384dd6f15e6bb510e0421000c1301a40d7acf05cedbeb6bc789c0a99d00,,https://x.com/nextronresearch/status/2049775774027124938 2026-04-30 09:07:00,Fact_Finder03,ip,185.102.115.84,#C2,https://x.com/Fact_Finder03/status/2049777575980118322 2026-04-30 09:07:00,Fact_Finder03,sha256,3b9bbec828c3c3bde9f909fd785953629a88de4bbdcf338fa9ed92973ca212df,#C2,https://x.com/Fact_Finder03/status/2049777575980118322 2026-04-30 09:07:00,Fact_Finder03,sha256,e06e46d24342407c6b491440b33a7d68c5424c5e92c07906488389d347bdf8db,#C2,https://x.com/Fact_Finder03/status/2049777575980118322 2026-04-30 09:08:00,masaomi346,domain,oilorigin.cfd,#phishing,https://x.com/masaomi346/status/2049777983947514020 2026-04-30 09:08:00,masaomi346,url,https://www.oilorigin.cfd/qgidteclapbsMnhhpcrrvt,#phishing,https://x.com/masaomi346/status/2049777983947514020 2026-04-30 09:08:00,masaomi346,url,https://www.rhythmite.cfd/alidsesglnzuMuxypptgtt,#phishing,https://x.com/masaomi346/status/2049777983947514020 2026-04-30 09:10:00,malwrhunterteam,domain,kunden-accounts-dkb.ddns.info,,https://x.com/malwrhunterteam/status/2049778430892183767 2026-04-30 09:10:00,malwrhunterteam,url,http://kunden-accounts-dkb.ddns.info,,https://x.com/malwrhunterteam/status/2049778430892183767 2026-04-30 09:31:00,Fact_Finder03,ip,209.99.184.44,#C2,https://x.com/Fact_Finder03/status/2049783567618912741 2026-04-30 10:33:00,Fact_Finder03,sha256,73a0f53968477f796f87a9fbd825ad41e204b246a3cd293460d79a9c56daa210,#C2,https://x.com/Fact_Finder03/status/2049799170320687111 2026-04-30 11:01:00,BlinkzSec,sha256,e3db497158afe3307a90ab2b1aaf40e9cbc76374a837d876fbe7eb3b02518e8b,#opendir,https://x.com/BlinkzSec/status/2049806355435782537 2026-04-30 11:01:00,BlinkzSec,sha256,e375467b0f62e04c62c73564f61fd4fbaf664cdfb2fbdf3edc75a1d6454ac40e,#opendir,https://x.com/BlinkzSec/status/2049806355435782537 2026-04-30 12:22:00,JAMESWT_WT,domain,ftp.abcebikes.com,#AgentTesla,https://x.com/JAMESWT_WT/status/2049826752688456080 2026-04-30 12:22:00,JAMESWT_WT,url,ftp://ftp.abcebikes.com,#AgentTesla,https://x.com/JAMESWT_WT/status/2049826752688456080 2026-04-30 12:44:51,ViriBack,url,http://193.58.122.24,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 12:44:51,ViriBack,url,http://144.31.165.219,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 12:44:51,ViriBack,url,http://144.31.165.210,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 12:44:51,ViriBack,ip,193.58.122.24,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 12:44:51,ViriBack,ip,144.31.165.219,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 12:44:51,ViriBack,ip,144.31.165.210,,https://x.com/ViriBack/status/2049832350817624516 2026-04-30 13:18:00,BlinkzSec,url,https://bazaar.abuse/.ch/sample/a793c1a77afeb7d85ee525d6333339e40e2fec841a9d79d87d02524cf9034909/,#Rhadamanthys,https://x.com/BlinkzSec/status/2049840780060115265 2026-04-30 13:18:00,BlinkzSec,sha256,a793c1a77afeb7d85ee525d6333339e40e2fec841a9d79d87d02524cf9034909,#Rhadamanthys,https://x.com/BlinkzSec/status/2049840780060115265 2026-04-30 13:20:00,AddressIntel,domain,wordpress-1617813-6377570.cloudwaysapps.com,#phishing,https://x.com/AddressIntel/status/2049841222022254881 2026-04-30 13:20:00,AddressIntel,url,https://wordpress-1617813-6377570.cloudwaysapps.com/PAGI/au,#phishing,https://x.com/AddressIntel/status/2049841222022254881 2026-04-30 14:40:00,smica83,domain,autos-gateway-enhanced-governor.trycloudflare.com,,https://x.com/smica83/status/2049861452186472895 2026-04-30 14:40:00,smica83,url,http://autos-gateway-enhanced-governor.trycloudflare.com,,https://x.com/smica83/status/2049861452186472895 2026-04-30 15:10:00,kubotaa3,domain,web.mufgbkjp.com,#scam,https://x.com/kubotaa3/status/2049868968803119210 2026-04-30 15:10:00,kubotaa3,url,https://web.mufgbkjp.com,#scam,https://x.com/kubotaa3/status/2049868968803119210 2026-04-30 15:10:00,kubotaa3,ip,175.41.25.174,#scam,https://x.com/kubotaa3/status/2049868968803119210