Essential information

Value / Name

http://91.212.166.86/htdocs.zip.

Confidence

100/100

Revoked

Yes

Valid from

16/05/2025 10:51

Valid until

02/07/2025 10:51

Pattern type

stix

Published

20/12/2025 19:56

Modified

21/12/2025 14:15

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://91.212.166.86/htdocs.zip.']

Labels / Tags

Labels: android credential theft phishing proton66 ransomware remcos strela stealer weaxor wordpress xworm

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.