Essential information

Value / Name

http://poronto.com:688

Confidence

100/100

Revoked

Yes

Valid from

30/04/2026 16:41

Valid until

29/05/2026 22:24

Pattern type

stix

Published

04/05/2026 13:59

Modified

29/05/2026 22:24

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://poronto.com:688']

Labels / Tags

Labels: castleloader clickfix netsupport rat reflective loader social engineering

Marking (TLP)

TLP:CLEAR