#icedid
Live, measured metrics for the hashtag #icedid from the open social web. Every number carries a named source and the time it was fetched. Nothing is estimated.
Own #icedid
This #name is available to claim. It becomes your portal on the open agent web: this very page, a keyword you rank for by an open public stake, and a verifiable identity for AI agents. Nobody else sells a page like this for every #name.
Day-by-day usage
measured · mastodon.online (Mastodon public tags API) · fetched 2026-10-29 21:33 UTC0 uses by 0 unique accounts across the window. Real per-day counts, not estimates. Newest bar is today so far.
Related hashtags
measured · mastodon.online (Mastodon public search API) · fetched 2026-10-29 21:33 UTCNo related tags with measured usage found for #icedid.
Live pulse
measured · mastodon.online (Mastodon tag timeline) · fetched 2026-10-29 21:33 UTCEverything below is measured over the latest 40 public posts (spanning ~31963 hours).
Posting hours (UTC) — busiest: 10:00
Languages: English (36) · Italian (3) · Japanese (1)
Avg boosts / post: 1.6
Top of the latest posts
TrickBot's revived webinject module borrows Zeus configs and forges certs to hijack banking sessions. 9 detections, 23 IOCs. Full analysis + IOCs: https://intel.threadlinqs.com/threat/TL-2026-3838 #ThreatIntel #TrickBot #IcedID #Zeus #Webin
Latrodectus hides in an 845KB junk-comment JScript, then lets WMI+msiexec install the payload. 9 detections, 31 IOCs. Full analysis + IOCs: https://intel.threadlinqs.com/threat/TL-2026-1486 #ThreatIntel #Latrodectus #IcedID #QakBot #TA578 #
One IP, 36 lookalike domains, and a 302-redirect trick that hands Latrodectus the keys to your browser. 9 detections, 45 IOCs. Full analysis + IOCs: https://intel.threadlinqs.com/threat/TL-2026-1483 #ThreatIntel #Latrodectus #Lumma #IcedID
#icedid across platforms
every network with a public tag surfaceFollow #icedid straight to each platform’s own tag page. Where a platform publishes open data we measure it above; the rest lock their numbers behind paid APIs, so we link rather than guess.
Every number above is measured from a named public API at the shown fetch time. Nothing is estimated or extrapolated. Platforms that lock their data behind paid APIs are not shown. Agents: the same numbers, as JSON, at /api/hashtags/icedid