# StagedC2 config observed at Fri Aug 28 13:12:05 2026 UTC, located at hXXps://pastebin[.]com/raw/3jReqf4a C2: dod[.]cantdown[.]su:1538 (IP: 91.92.47.228)
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
# StagedC2 config observed at Fri Aug 28 13:12:05 2026 UTC, located at hXXps://pastebin[.]com/raw/3jReqf4a C2: dod[.]cantdown[.]su:1538 (IP: 91.92.47.228)
# StagedC2 config observed at Fri Aug 28 15:24:05 2026 UTC, located at hXXps://pastebin[.]com/raw/8FtbVCBa C2: Marwan5559-39385[.]portmap[.]host:39385 (IP: 193.161.193.99)
# StagedC2 config observed at Fri Aug 28 16:39:02 2026 UTC, located at hXXps://pastebin[.]com/raw/k6N7xst1 C2: zrweety-31027[.]portmap[.]host:31027 (IP: 193.161.193.99)
# StagedC2 config observed at Fri Aug 28 17:54:04 2026 UTC, located at hXXps://pastebin[.]com/raw/VD8HwHwW C2: 1[.]1[.]1[.]1:1234
# StagedC2 config observed at Fri Aug 28 18:23:03 2026 UTC, located at hXXps://pastebin[.]com/raw/DEJjBN7Q C2: 163[.]245[.]215[.]235:8848
# StagedC2 config observed at Fri Aug 28 20:46:02 2026 UTC, located at hXXps://pastebin[.]com/raw/D30qfEuQ C2: 0[.]tcp[.]sa[.]ngrok[.]io:26216 (IP: 56.124.50.97)
# StagedC2 config observed at Fri Aug 28 22:49:04 2026 UTC, located at hXXps://pastebin[.]com/raw/1YFzHviT C2: ramp-navigate[.]tun[.]ply[.]gg:1225 (IP: 147.185.221.230)
# StagedC2 config observed at Sat Aug 29 02:17:19 2026 UTC, located at hXXps://pastebin[.]com/raw/WyBFFM1q C2: tfdhxw-64859[.]portmap[.]host:64859 (IP: 193.161.193.99)
# StagedC2 config observed at Sat Aug 29 09:50:07 2026 UTC, located at hXXps://pastebin[.]com/raw/gz89Q1bK C2: 2[.]26[.]86[.]75:23325
# StagedC2 config observed at Sat Aug 29 13:59:03 2026 UTC, located at hXXps://pastebin[.]com/raw/9bbBTejH C2: 79[.]110[.]63[.]80:50207
# StagedC2 config observed at Sat Aug 29 16:16:02 2026 UTC, located at hXXps://pastebin[.]com/raw/X3yqQbLy C2: 40[.]76[.]239[.]32:1177
# StagedC2 config observed at Sat Aug 29 20:05:04 2026 UTC, located at hXXps://pastebin[.]com/raw/7rfvis8C C2: loesal-53987[.]portmap[.]host:53987 (IP: 193.161.193.99)
# StagedC2 config observed at Sat Aug 29 22:00:04 2026 UTC, located at hXXps://pastebin[.]com/raw/d8PtT5R0 C2: tfdhxw-36463[.]portmap[.]host:36463 (IP: 193.161.193.99)
# StagedC2 config observed at Sat Aug 29 23:10:04 2026 UTC, located at hXXps://pastebin[.]com/raw/E7fH6emJ C2: 163[.]245[.]215[.]235:8080
# StagedC2 config observed at Sun Aug 30 05:19:02 2026 UTC, located at hXXps://pastebin[.]com/raw/e3HzWxrF C2: 0[.]tcp[.]sa[.]ngrok[.]io:26841 (IP: 18.228.82.60)