tcwine.us

Classification: Malicious

tcwine.us is a malicious hostname. Linked to Quasarrat malware. Reported by ThreatFox Abuse.ch (Quasar RAT), last seen 2026-09-14.

Current activity

Online — resolving/reachable. Last checked 2026-10-17 16:35:33.
Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: QUASARRAT (S0262)

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Quasar RAT	ThreatFox Abuse.ch	2026-09-14 13:58:20	2026-09-14 13:58:20	botnet malicious-activity	S0262 QuasarRAT

Tags

quasar cinarat quasarrat yggdrasil

IP addresses resolved by this hostname

2606:4700:3035::ac43:8cd9 (2026-09-22 16:32:31)
2606:4700:3031::6815:596e (2026-09-22 16:32:31)
172.67.140.217 (2026-10-11 04:37:37)
104.21.89.110 (2026-10-11 04:37:37)
172.64.80.1 (2026-10-17 16:35:33)
2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 16:35:33)

Whois information

Domain: tcwine.us
TLD: us
Nameservers: jo.ns.cloudflare.com, felicity.ns.cloudflare.com
Registrant: VO HOANG VAN NGOC HUYNH
City: Ho Chi Minh
Country: VN — Viet Nam 🇻🇳
Contact email: [email protected]
Domain created: 2026-08-25 03:45:17
Domain expires: 2027-08-25 03:45:17
First indexed: 2026-09-14 14:25:04
Last updated: 2026-10-17 16:35:33