baccha-a07d9-default-rtdb.firebaseio.com
domainTracked by C2 Tracker · Whois queried never
Registration
- Registrar
- —
- Registered
- —
- Expires
- —
DNS
- Resolves to
- —
- Nameservers
- —
- Status
- —
Observed in malware
| Family | Sample SHA-256 | First seen |
|---|---|---|
| HDFC eChallan RAT | 021d92dd0026… | 2026-07-23 |
Signing certificate
- Subject CN
- f07ab108b4744256
- Issuer CN
- f07ab108b4744256
- Valid
- 2026-07-23 → 2053-12-08
- Fingerprint
- e477e7c9f338e9bef0f13a89c29a8453615e71ad2b18e6cf5e8bb2808e7003e6
Other samples signed with this certificate? That's a lead worth checking — but not proof of a shared operator, since signing keys (and the Android debug certificate in particular) are widely reused. See the certificate page for every sample signed with it.