ctrlINT What the industry said about every indicator, with the quote

winmanage-me[.]networkDomain

Reported by 1 independent source · first reported by Google Threat Intelligence · last reported

Last reported 29 days ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “In September 2026 intrusions, UNC6240 continued to use IT-themed infrastructure associated with MeshAgent (winmanage-me[.]network on 104.219.234.138) for secondary staging and management.”

    Google Threat IntelligenceVendor
    ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft

Indicators reported together

named in the same reports
Copy these 12 indicators · defanged

Also named with it: CVE-2026-35273

Thanks — we review every report.

Report a wrong value
What is wrong with winmanage-me[.]network here?
No account needed. We do not store your IP address.