Essential information

Value / Name

arch2.maxdatahost1.cyou

Confidence

100/100

Revoked

No

Valid from

06/03/2026 20:39

Valid until

09/02/2027 05:21

Pattern type

stix

Published

09/03/2026 11:31

Modified

04/06/2026 11:09

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'arch2.maxdatahost1.cyou']

Labels / Tags

Labels: animateclipper backdoor click hijacking cryptocurrency clipper dll sideloading donation scam infostealer lotuslite meme-coin middle east phishing remusstealer sessiongate shellcode stealc traffic distribution system

Marking (TLP)

TLP:CLEAR