ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain ceranet.goliath.st.

Database Entry


IOC ID:1848904
IOC: ceranet.goliath.st
IOC Type :domain
Threat Type :botnet_cc
Malware: Aisuru
Confidence Level : Confidence level is high (100%)
Is compromised? : False
First seen:2026-07-12 07:42:16 UTC
Last seen:never
UUID:a592f7f9-7dc4-11f1-97fa-42010aa4000a
Reporter deepfield_ert
Reward 5 credits from ThreatFox
Tags:AISURU c2 CAFEBABE DNS-TXT

Avatar
deepfield_ert
Aisuru gen2 DNS-TXT C2 domains; TXT records are CAFEBABE-XOR encoded and decode to the C2 IP:port; confirmed via sample reverse-engineering and live probing (e.g. 5748.reformuk.st -> DigitalOcean pool on 8001/8080).