PURPLEHAZE

Overview 12 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

Principal sources 2 reports

Ranked by how many of this actor's indicators each report brought in.

• 12x.com/milenkowski/status/1932038909455684056
• 12sentinelone.com/labs/follow-the-smoke-china-nexus-threa…

Timeline 12 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.

1. 2026-01-02 or earlier 11 domain, 1 ipv4this year

   x.com/milenkowski/status/1932038909455684056 · sentinelone.com/labs/follow-the-smoke-china-nexus-threa…

   domain	ccna.organiccrap.com
   domain	cloud.trendav.co
   domain	downloads.trendav.vip
   domain	epp.navy.ddns.info
   domain	mail.ccna.organiccrap.com
   domain	mail.secmailbox.us
   domain	navy.ddns.info
   domain	secmailbox.us
   domain	sentinelxdr.us
   domain	tatacom.duckdns.org
   domain	trendav.vip
   ipv4	45.13.199.209:443

   copy batch

Further reading 2

• sentinelone.com/labs/follow-the-smoke-china-nexus-threa…
• x.com/milenkowski/status/1932038909455684056