westurn[.]in

Posts referencing this indicator

• Inside a TrickBot Variant Using DNS Tunneling for C2

  FFortinet

  C2 domain used for DNS tunneling; encrypted hex-encoded payloads are prepended as subdomains to this domain in malformed DNS queries

  2026-07-22