Essential information

Value / Name

kaifa.sneaws.com

Confidence

100/100

Revoked

No

Valid from

19/11/2025 10:01

Valid until

24/10/2026 19:44

Pattern type

stix

Published

21/12/2025 18:50

Modified

16/04/2026 18:04

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'kaifa.sneaws.com']

Labels / Tags

Labels: badiis chinese threat actor cobalt strike gambling redirection iis hijacking iis modules latin america m0yv seo poisoning southeast asia xlanyloader

Marking (TLP)

TLP:CLEAR