hagaseca.com

Domain

Threat entity extracted from intelligence sources

Frequency

1

occurrences

First Seen

September 8, 2026

Last Seen

September 8, 2026

IOC Validation

ThreatCluster AI

Confirmed IOC — High confidence

Dedicated domain used by THost9 as attacker infrastructure

This indicator was confirmed as a true IOC by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (1)

THost9 Android RAT Exploits ADB Services to Spread Malware

2d ago·4 sources

Related Articles (1)

Hagaseca Inside A Packed Android Rat Loader

darkatlas.io·2d ago

Related Entities

Malware Trojan Worm CWE-287 - Improper Authentication CWE-798 - Use of Hard-coded Credentials Hagaseca THost4 THost9 T1021 - Remote Services T1055 - Process Injection T1059 - Command and Scripting Interpreter T1071 - Application Layer Protocol