Essential information

Value / Name

windowsi.ru

Confidence

100/100

Revoked

Yes

Valid from

01/04/2024 21:55

Valid until

26/01/2025 20:55

Pattern type

stix

Published

20/12/2025 23:09

Modified

21/12/2025 03:56

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'windowsi.ru']

Labels / Tags

Labels: apt dns flux dns pivoting gamaredon maldocs malware campaign passive dns phishing russia subdomain analysis threat infrastructure trident ursa ukraine

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.