gs.thc.org

Domain

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

June 24, 2026

Last Seen

June 24, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Part of the GSRN relay infrastructure, indicating attacker-controlled domain

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

Operation Highland: Velvet Ant's Decade-Long Espionage Campaign

Jun 13·9 sources

Related Articles (1)

Operation Highland Velvet Ant

www.sygnia.co·Jun 24

Related Entities

Malware Operation Highland China CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials GS-Netcat Velvetshell T1003 - OS Credential Dumping T1021 - Remote Services T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol Cisco Nexus