#StagedC2 config observed at Thu Oct 22 23:55:02 2026 UTC, located at hXXps://pastebin[.]com/raw/dC3YXmD8 C2: rails-kirk[.]tun[.]ply[.]gg:28466 (IP: 209.25.140.16)