ctrlINT What the industry said about every indicator, with the quote

77.91.65[.]13IP address

Reported by 1 independent source · first reported by Hudson Rock (Infostealers) · last reported

Last reported 1 month ago

What the reports say

1 report, newest first · the exact sentence from each

  1. “Deceptive TLS SNI Spoofing: Once running, Amatera connected directly to an attacker IP (77.91.65[.]13:443) but presented facebook.com through TLS SNI and HTTP authority.”

    Hudson Rock (Infostealers)Vendor
    HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation

Thanks — we review every report.

Report a wrong value
What is wrong with 77.91.65[.]13 here?
No account needed. We do not store your IP address.