Twitter Bot Network

An analyst observed a coordinated Twitter/X bot-driven phishing campaign: roughly 60/100 bot accounts linked to nudepopsy71c.com that redirected to a stoute-vrouwen.com phishing page, ~20 used various .buzz domains that attempted system information gathering before 404s/Google redirects, and ~20 used domains with SA/ZA suffixes; the URLs shared consistent username-based structures, and hosting appeared geographically diverse, indicating organized operations but with no specific actor attribution.