4 ms·
ycxrl.com (registered at godaddy with privacy) is the command-and-control domain mentioned in the article, which currently resolves to 192.53.113.52 (Linode). D
by throwawayapples 4y ago
ycxrl.com (registered at godaddy with privacy) is the command-and-control domain mentioned in the article, which currently resolves to 192.53.113.52 (Linode). DNS is run through DOMAINCONTROL.COM, which seems to be a nextcloud instance?
- perryh2 4y agoThe domaincontrol.com nameservers are operated by GoDaddy.
- palebluedot 4y agoLooks like 139.162.63.161 may also be involved, it has the same ssh server key: https://search.censys.io/search?q=services.ssh.server_host_key.fingerprint_sha256%3D%223cefded7c878f75026b5de2cc3dd0abe163bb06aaf8241ab6d883c877456e43a%22&resource=hosts https://search.censys.io/search?q=services.ssh.server_host_k...