🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain niggerlover.ddns.net.

Database Entry


IOC ID:1569060
IOC: niggerlover.ddns.net
IOC Type :domain
Threat Type :botnet_cc
Malware: Quasar RAT
Malware alias:CinaRAT, QuasarRAT, Yggdrasil
Confidence Level : Confidence level is elevated (75%)
Is compromised? : False
ASN:AS3308 TELIANET-DENMARK
Country:- SE
First seen:2025-08-15 14:50:45 UTC
Last seen:2025-09-13 11:43:30 UTC
UUID:392ed30a-79e7-11f0-b2c6-42010aa4000a
Reporter abuse_ch
Reward 5 credits from ThreatFox
Tags:quasar
Reference: https://bazaar.abuse.ch/sample/97ac7f267466d0546e1655f199aadde77aa0bf94d63d3b9efb086ed6c3b7b7da/

Avatar
abuse_ch
quasar (aka CinaRAT,QuasarRAT,Yggdrasil) botnet C2 on port 8888 TCP