Essential information

Value / Name

nslookup.dnserver.life

Confidence

100/100

Revoked

No

Valid from

30/04/2026 21:11

Valid until

05/04/2027 05:54

Pattern type

stix

Published

04/05/2026 15:59

Modified

04/05/2026 15:59

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'nslookup.dnserver.life']

Labels / Tags

Labels: exchange server compromise godzilla godzilla webshell noodlerat proxylogon exploitation ringq shadowpad vshell

Marking (TLP)

TLP:CLEAR