data[.]asDomain

Reported by 1 independent source · first reported 31 Mar 2026 by Zscaler ThreatLabz · last reported 31 Mar 2026

Last reported 6 months ago

What the reports say

1 report, newest first · the exact sentence from each

“Xloader uses the derived key to encrypt the network data[.]As a final step, Xloader encodes the encrypted data and prepends the hardcoded string &dat=, even though this string value is stripped (and therefore not sent).Xloader uses HTTP GET requests solely for PKT2 request…”

Zscaler ThreatLabzVendor31 Mar 2026
Latest Xloader Obfuscation Methods and Network Protocol

named in the same reports

Copy these 8 indicators · defanged

8 indicators, defanged, one per line

obfuscation[.]in
8.1[.]in
8.1[.]network
actions[.]network
layers[.]network
specified[.]as
script[.]windows
file[.]windows

Thanks — we review every report.

Report a wrong value