8e8a88f8fc968996eed0d7ddd.6ceca998199c18f8d968889898896899789978997.westurn.in

Domain

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

July 23, 2026

Last Seen

July 23, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Identified as C2 server used by TrickBot

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

TrickBot Malware Adopts DNS Tunneling for Command-and-Control Communication

Jul 22·3 sources

Related Articles (1)

Inside A Trickbot Variant Using Dns Tunneling For C2

www.fortinet.com·Jul 23

Related Entities

Malware Trickbot T1053 - Scheduled Task/Job T1055 - Process Injection T1071 - Application Layer Protocol Windows Windows Task Scheduler Rundll32.exe