Essential information

Value / Name

https://49.89.41.187:8002/protocol/tcp-data

Confidence

100/100

Revoked

Yes

Valid from

06/02/2026 17:18

Valid until

07/03/2026 23:01

Pattern type

stix

Published

06/02/2026 17:57

Modified

07/03/2026 23:01

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://49.89.41.187:8002/protocol/tcp-data']

Labels / Tags

Labels: aitm china-nexus darknimbus dknife dns hijacking gateway-monitoring poisonplug.shadow shadowpad traffic manipulation wizardnet

Marking (TLP)

TLP:CLEAR