Details

_id 5fb6f95b6e308a5ed025ffb0
reference ['https://gist.github.com/lazydaemon/d2030a6ef6083dcdc87248822594c255']
md5 ['d2030a6ef6083dcdc87248822594c255']
sha1 []
sha256 []
mail []
ip []
domain ['bit.ly']
url ['https://bit.ly/3kGvmJv']
user lazy_daemon
tweet @abuse_ch @malware_traffic looks like I have to update my blog post on trickbot fake IPs. see https://bit.ly/3kGvmJv . the configs for your sample can be found here: https://gist.github.com/lazydaemon/d2030a6ef6083dcdc87248822594c255 Seems like fake IPs and at least one real IP are mixed together in the config.
id 1329364076733100033
retweets 0
link https://twitter.com/lazy_daemon/status/1329364076733100033
mentions ['@abuse_ch', '@malware_traffic']
hashtags []
date 2020-11-19 10:01:08
timestamp 1605776468

Tweet