tritonplus.co
Classification: Malicious
tritonplus.co is a malicious hostname. Linked to Asyncrat malware. Reported by ThreatFox Abuse.ch, last seen 2026-10-14. Resolves to 172.64.80.1 and 1 more.
Current activity
- Online — resolving/reachable. Last checked 2026-10-17 20:38:29.
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2026-10-14 15:05:24 | 2026-10-14 15:25:04 | botnet malicious-activity | S1087 AsyncRAT |
Tags
asyncratIP addresses resolved by this hostname
- 172.64.80.1 (2026-10-17 20:38:29)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-17 20:38:29)
Whois information
- Domain
- tritonplus.co
- TLD
- co
- First indexed
- 2026-10-14 15:25:04
- Last updated
- 2026-10-17 20:38:29