216.73.217.98

Indicator (IOC)

stix Revoked AlienVault · Published 20/12/2025 19:57 · Modified 16/05/2026 20:23

Essential information

Value / Name
romanovas.duckdns.org
Confidence
100/100
Revoked
Yes
Valid from
11/06/2025 11:40
Valid until
16/05/2026 20:22
Pattern type
stix
Published
20/12/2025 19:57
Modified
16/05/2026 20:23
Author / Source
AlienVault

Description

No description.

Pattern

[hostname:value = 'romanovas.duckdns.org']

Labels / Tags

Labels: asyncrat bitrat blotchyquasar dcrat limerat njrat opendir quasarrat remcos remcos rat south america spearphishing tag-144 xworm

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.