Maltrail IOC for 2026-07-21
Maltrail IOC for 2026-07-21
AI Analysis
Technical Summary
The report details a Maltrail IOC for malware activity identified on 2026-07-21, sourced from the CIRCL OSINT feed. It is classified as a medium-risk threat based on observed network activity patterns. The data lacks specific technical indicators or affected software versions, and no exploit or patch information is available. This is an observational report from open-source intelligence without direct actionable remediation.
Potential Impact
The impact is limited to the identification of potential malware-related network activity. No direct exploit or vulnerability is documented, and no affected software or systems are specified. The threat level is medium, indicating a moderate concern for network security monitoring but no immediate critical risk.
Mitigation Recommendations
No patch or official remediation is available or applicable for this IOC. Security teams should incorporate this IOC into their detection and monitoring tools as part of ongoing threat intelligence updates. No urgent action is required beyond standard monitoring for the reported indicators.
Indicators of Compromise
- url: https://api.github.com/repos/stamparm/maltrail/commits/f40ff4ba8a0a7247c4c05b813f3d554552e3a3c7
- domain: oliieira.click
- url: https://api.github.com/repos/stamparm/maltrail/commits/8c3ef1dd2b15a9a70ebf56809206ab0893f11049
- url: https://x.com/d1v35hresearch/status/2079440521102319764
- domain: ccleaner.click
- domain: ccleaner.lat
- domain: ccleaner.lol
- domain: ccleaner.mom
- url: https://api.github.com/repos/stamparm/maltrail/commits/6428c2e3c73b5f829f09367cf15957ff9e302210
- domain: kumlman.lol
- domain: nonseca.lol
- url: https://api.github.com/repos/stamparm/maltrail/commits/bd2701e1b904d2bafd07b063805e44a38296b85a
- url: https://x.com/skocherhan/status/2079357326184632386
- domain: bbvalues.uk
- domain: corraia.icu
- domain: hegmaen.com
- domain: lombaidi.lol
- domain: meduurst.space
- domain: monteiro.click
- domain: reynoldy.lol
- domain: ritchie.click
- domain: schuttc.lol
- domain: sigmatauethifarma.com
- domain: treviro.icu
- domain: vtcircuits.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/38301b6c0d58c82409cd1841812ca2a3ee4b9615
- domain: analizainvestitii-ro.com
- domain: areacleintsacounts.us
- domain: aureliaromfund.com
- domain: authorlzeacsess.us
- domain: authorlzesitte.us
- domain: autnhentlcation.us
- domain: babmbach.com
- domain: balatonvitalworks.com
- domain: baptissa.com
- domain: bespokecufflinkjournal.com
- domain: bingbong.website
- domain: bucurestivantage.com
- domain: businessfundwell.com
- domain: byteforgenova.com
- domain: carpatiareport.com
- domain: carvalhl.site
- domain: cemteracsess.us
- domain: cemtercliemt.us
- domain: cleintsareaacounts.us
- domain: cooperativecreatives.us
- domain: craneservicepa.com
- domain: cystocarehungary.com
- domain: deltacasino.website
- domain: feedlister.com
- domain: getxenow.com
- domain: gzlarza.com
- domain: henriiues.space
- domain: henriquee.com
- domain: it-quotidiana.com
- domain: jurnaleconomic.com
- domain: meshcipherlab.com
- domain: michiganfostercarecloset.us
- domain: mioriticholdings.com
- domain: monitorulcapitalului.com
- domain: narz-avn.it
- domain: nodequantforge.com
- domain: observatorfinanciar-ro.com
- domain: onlinenweb.us
- domain: paradoxmellow.com
- domain: pnhuby.top
- domain: portaul.us
- domain: quadrumgroup.com
- domain: romterravest.com
- domain: rvtenterprise.com
- domain: rvtoptools.app
- domain: signaturedg.us
- domain: sinssay.com
- domain: verifica-facile.com
- domain: vita-novas.com
- domain: vmenterprise.app
- domain: webauthseciure.us
- url: https://api.github.com/repos/stamparm/maltrail/commits/030d90a3076bf97abb13bd75f520f4a89f67f8d5
- domain: assetslib.shop
- url: https://api.github.com/repos/stamparm/maltrail/commits/49f64932ed3e26ea98afc06038a73a2b1e9c61e2
- domain: velvet-pulse684.cc
- url: https://api.github.com/repos/stamparm/maltrail/commits/f9a90d30255d5669a29f0f2cb5b8f8e84b7cec96
- domain: adrooidonload.shop
- domain: ai.trilontech.blog
- domain: arcanovirexion.pro
- domain: auroracipher.info
- domain: avianhaven.cyou
- domain: bestatigung198571.com
- domain: booking.cra-earnings.cfd
- domain: booking.delivery-online.asia
- domain: booking.hotelstay-inf.cyou
- domain: booking.order0094827452.live
- domain: booking.payment-system.shop
- domain: booking.poparide-confirmation00492812.live
- domain: clothingrs.com
- domain: cozycraft.cyou
- domain: cra-earnings.cfd
- domain: cryptomeridion.pro
- domain: cuckoldbull.qpon
- domain: delivery-online.asia
- domain: dexscreen-secure.online
- domain: dfsjfisafosdikfos.info
- domain: embererchronicle.info
- domain: etoileguide.cyou
- domain: fertig-verkauft.shop
- domain: frosertmatrix.info
- domain: garnetdawnview.shop
- domain: hotelstay-inf.cyou
- domain: hypermeridian.info
- domain: id124214.cfd
- domain: ketsuekigata.cyou
- domain: laposte-paiement.com
- domain: lewokodwqko.icu
- domain: live209.live
- domain: luminoravelis.pro
- domain: marblecloudward.shop
- domain: mythicgateway.info
- domain: noravexalithor.pro
- domain: novatheryxion.pro
- domain: obsidianparallax.info
- domain: olimpusgates.best
- domain: olimpusgates.one
- domain: opalineeverfrontier.shop
- domain: opalinevault.info
- domain: orchidsnowport.shop
- domain: order-page.shop
- domain: order00486572216.live
- domain: order00948269262.live
- domain: order0094827452.live
- domain: order00948737652.live
- domain: order00967342467.live
- domain: order009764234543.live
- domain: order092527184.live
- domain: orivandralith.pro
- domain: page826852.net
- domain: payment-system.shop
- domain: poparide-confirmation00492812.live
- domain: poparide-order.live
- domain: poparide-order001528511.live
- domain: poparide-order004928152.live
- domain: poparide-order0148272.live
- domain: praxiomeridian.pro
- domain: quantalytheron.pro
- domain: quartzhorizon.info
- domain: quentharadrix.pro
- domain: radiassntforge.info
- domain: sexwifekiss.bond
- domain: solona.cyou
- domain: syntheravolix.pro
- domain: trilontech.blog
- domain: tutto-sub.com
- domain: umbralstormmarch.shop
- domain: ups.cra-earnings.cfd
- domain: ups.poparide-confirmation00492812.live
- domain: ups.poparide-order0148272.live
- domain: valeriomantix.pro
- domain: web-id2384.cfd
- domain: willowfirevale.shop
- domain: willowthornwind.shop
- domain: xandravirelix.pro
- domain: zenthoriadrix.pro
- url: https://api.github.com/repos/stamparm/maltrail/commits/525b13b5fba76c06daee235a64658b0a75a02166
- domain: cdn.leownas.icu
- url: https://api.github.com/repos/stamparm/maltrail/commits/8d2a5158ec3a02c046588ee79213555a52ff5225
- domain: granitealcove.top
- domain: isthmusandanvil.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/58acf5ab70b7108641fd858fe5a6525cab283aaa
- domain: cloudlanecdn.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/3473ad4f906466ad2df74b8199000c992459b0aa
- domain: 0u9vm1.info
- domain: 0wrljh.info
- domain: 1ppvxl.info
- domain: 1yt4mj.info
- domain: 24alf9.info
- domain: 24gp2d.info
- domain: 2cmj5p.info
- domain: 2r2d53.info
- domain: 3qbdnw.info
- domain: 3wxve3.info
- domain: 491wvk.info
- domain: 4ep47y.info
- domain: 4eye6j.info
- domain: 4lhfqz.info
- domain: 4mrxyl.info
- domain: 52e6pp.info
- domain: 58w168.info
- domain: 5ivluf.info
- domain: 5tuajy.info
- domain: 5wdgm7.info
- domain: 66fage.info
- domain: 6d7u6a.info
- domain: 6v7j73.info
- domain: 75wrbh.info
- domain: 76891x.info
- domain: 7r9raz.info
- domain: 7ulgkw.info
- domain: 82bft7.info
- domain: 82ixrn.info
- domain: 89zm51.info
- domain: 8bklwd.info
- domain: 8q2vq5.info
- domain: 9dlxc5.info
- domain: a1gsjk.info
- domain: afkdl1.info
- domain: api.3qbdnw.info
- domain: as2q23.info
- domain: bdqwff.info
- domain: beta.3qbdnw.info
- domain: bhirn1.info
- domain: bot.3qbdnw.info
- domain: client.3qbdnw.info
- domain: cn.3qbdnw.info
- domain: csktjr.info
- domain: dlpbgz.info
- domain: e59f2g.info
- domain: eh8hct.info
- domain: em4w30.info
- domain: evfo5i.info
- domain: f6z4rx.info
- domain: fcrze7.info
- domain: fqbb1m.info
- domain: fuovnc.info
- domain: gmxt3l.info
- domain: hfryu1.info
- domain: hh.ydfy.cc
- domain: hhpnju.info
- domain: hvs2c4.info
- domain: hykoug.info
- domain: isrt0j.info
- domain: jc7nfi.info
- domain: jhajgv.info
- domain: jrctgw.info
- domain: jyevdi.info
- domain: k7m80f.info
- domain: kbujmg.info
- domain: kujpa.cn
- domain: l1rki1.info
- domain: l1xt0x.info
- domain: lusp3t.info
- domain: mailserver.3qbdnw.info
- domain: media.3qbdnw.info
- domain: mx.3qbdnw.info
- domain: mysixf.info
- domain: n9nw8j.info
- domain: new.3qbdnw.info
- domain: news.3qbdnw.info
- domain: nj.3qbdnw.info
- domain: nm1912.info
- domain: nnk2ww.info
- domain: np7tgu.info
- domain: nx.58w168.info
- domain: o1.76891x.info
- domain: o3qpc3.info
- domain: os.2r2d53.info
- domain: osa8w0.info
- domain: oxcwnp.info
- domain: oy.nm1912.info
- domain: pd.6v7j73.info
- domain: pf.t313z4.info
- domain: ph.vr3691.info
- domain: pk.89zm51.info
- domain: pmjur0.info
- domain: q4.24alf9.info
- domain: q4.e59f2g.info
- domain: q5.24gp2d.info
- domain: q9ux66.info
- domain: qe.as2q23.info
- domain: qf.6d7u6a.info
- domain: qf.82bft7.info
- domain: qf.k7m80f.info
- domain: qh08mo.info
- domain: qi.em4w30.info
- domain: qk.52e6pp.info
- domain: ql.v102tf.info
- domain: qlkqh1.info
- domain: qp.r9k93e.info
- domain: qp0bvz.info
- domain: qr.wf6o16.info
- domain: qv.4ep47y.info
- domain: qy.ydfy.cc
- domain: qz9vzh.info
- domain: r0.0u9vm1.info
- domain: r4.491wvk.info
- domain: r5.8q2vq5.info
- domain: r7.vn566t.info
- domain: r9k93e.info
- domain: rd.66fage.info
- domain: rh.q9ux66.info
- domain: rkxb87.info
- domain: rv.2cmj5p.info
- domain: ry.l1rki1.info
- domain: s1.4eye6j.info
- domain: s3.9dlxc5.info
- domain: s3.o3qpc3.info
- domain: s4.hvs2c4.info
- domain: s5.5wdgm7.info
- domain: s5prjz.info
- domain: s5zooa.info
- domain: s7.qh08mo.info
- domain: s9.75wrbh.info
- domain: sc.osa8w0.info
- domain: sc.xu3i2g.info
- domain: sg.rkxb87.info
- domain: sh.xcn83s.info
- domain: site.3qbdnw.info
- domain: sj.1yt4mj.info
- domain: sl.82ixrn.info
- domain: sn.zl3yk0.info
- domain: so.n9nw8j.info
- domain: sp.7r9raz.info
- domain: sq.3wxve3.info
- domain: sr.l1xt0x.info
- domain: sso-google.3qbdnw.info
- domain: st.afkdl1.info
- domain: st.yb0eba.info
- domain: su.f6z4rx.info
- domain: sz.fqbb1m.info
- domain: t313z4.info
- domain: t6lhix.info
- domain: t7.a1gsjk.info
- domain: t7.jc7nfi.info
- domain: ta.bhirn1.info
- domain: ta.eh8hct.info
- domain: test.3qbdnw.info
- domain: tg.vjla7f.info
- domain: ti.8bklwd.info
- domain: tk.evfo5i.info
- domain: tl.3qbdnw.info
- domain: tn.fcrze7.info
- domain: to.qlkqh1.info
- domain: tp.w0unfc.info
- domain: tq.ujh7qe.info
- domain: tt.0wrljh.info
- domain: tv.4lhfqz.info
- domain: tx.5ivluf.info
- domain: ty.isrt0j.info
- domain: u0.pmjur0.info
- domain: u1.gmxt3l.info
- domain: u1.hfryu1.info
- domain: u1.t6lhix.info
- domain: u1.wxf1du.info
- domain: u3.7ulgkw.info
- domain: u3.s5zooa.info
- domain: u4.5tuajy.info
- domain: u5.qp0bvz.info
- domain: u7.np7tgu.info
- domain: u9.nnk2ww.info
- domain: ud.1ppvxl.info
- domain: ud.lusp3t.info
- domain: ug.s5prjz.info
- domain: ui.4mrxyl.info
- domain: ujh7qe.info
- domain: ul.vb9vsy.info
- domain: ul.wfv9zm.info
- domain: us.bdqwff.info
- domain: us.jhajgv.info
- domain: uu.qz9vzh.info
- domain: uy.kbujmg.info
- domain: v1.dlpbgz.info
- domain: v102tf.info
- domain: v9.jyevdi.info
- domain: vb.hhpnju.info
- domain: vb9vsy.info
- domain: vf.csktjr.info
- domain: vf.fuovnc.info
- domain: vf.jrctgw.info
- domain: viliam.3qbdnw.info
- domain: vjla7f.info
- domain: vl.hykoug.info
- domain: vn566t.info
- domain: vr3691.info
- domain: vt.oxcwnp.info
- domain: vu.mysixf.info
- domain: w0unfc.info
- domain: wd.kujpa.cn
- domain: wf6o16.info
- domain: wfv9zm.info
- domain: wxf1du.info
- domain: xcn83s.info
- domain: xu3i2g.info
- domain: yb0eba.info
- domain: zl3yk0.info
- url: https://api.github.com/repos/stamparm/maltrail/commits/123504cf900779579c01545c295a0130ac7bfd03
- url: https://x.com/smica83/status/2079291245168374100
- url: https://www.virustotal.com/gui/file/3e1a33683e59ff25fa992373da74fd8df0c82f403ce4144566e1bff5d6635339/detection
- url: https://www.virustotal.com/gui/file/3e2fd1aba7bb462c272a650ff4f39ae1f23146476aa02b910b1d4a75a3ccc352/detection
- url: https://www.virustotal.com/gui/file/b3f7ec26d68bb33246a55379982afe5304a1d2f5a3ee30f43cec618d6f919d89/detection
- domain: ydfy.cc
- url: https://api.github.com/repos/stamparm/maltrail/commits/4e7853322440c0568bc2e6b772f44e13104178bb
- domain: 1z.riotplat.shop
- domain: 4b.fancourier.vip
- domain: 7g.fancourier.cyou
- domain: api.kupui.biz
- domain: dex.tradingskill.cc
- domain: ftp.cdn-cookie.com
- domain: ftp.cdn-gstatic.com
- domain: ftp.detail-best.com
- domain: ftp.google-manager.com
- domain: ftp.hacptcha.com
- domain: ftp.ipifly.com
- domain: ftp.newasest.com
- domain: ftp.omappepi.com
- domain: globalvexor.com
- domain: mail.cdn-cookie.com
- domain: mail.cdn-gstatic.com
- domain: mail.detail-best.com
- domain: mail.hacptcha.com
- domain: mail.ipifly.com
- domain: mail.newasest.com
- domain: mail.omappepi.com
- domain: pc.riot-ex.cc
- domain: riot-ex.cc
- domain: tradingskill.cc
- domain: u5.riot-ex.net
- domain: vireon.lol
- domain: zoltar.sbs
- url: https://api.github.com/repos/stamparm/maltrail/commits/1b46b0ff4cf8b4de331268d75759647eb100a653
- domain: 10bet.space
- domain: aiagentanalytics.com
- domain: areaclienntsaccoumts.us
- domain: buletineconomic.com
- domain: cemtersitte.us
- domain: cemterweb.us
- domain: clienntsareaaccoumts.us
- domain: cooperativecaffes.us
- domain: cooperativecreatives.com
- domain: cooperativecreativs.com
- domain: cromwellstorage.com
- domain: danubereview.com
- domain: dashbourd.us
- domain: datatools26.org
- domain: egeszsegtippek-magazin.com
- domain: estnews-ro.com
- domain: fluxquantorian.com
- domain: gyogynovenyvilag24.com
- domain: hirekazegeszsegrol.com
- domain: hungarovitalcenter.com
- domain: karpatwellnesslab.com
- domain: mail.aussierealestate.net.au
- domain: parsoraviant.com
- domain: pietezi.com
- domain: pontuscarpathia.com
- domain: rerluke.com
- domain: rvtoolenterprise.com
- domain: rvtop.app
- domain: shhiller.com
- domain: sign-ms.online
- domain: stiridininvestitii.com
- domain: tokmu.top
- domain: transilvanequity.com
- domain: valahinvestcore.com
- domain: vivere-meglio.com
- domain: vmoneenterprise.app
- domain: vmw.enterprises
- domain: vmwone.app
- domain: vmwone.enterprises
- domain: vmwoneenterprise.app
- domain: webacncess.us
- domain: webauthsecvre.us
- domain: webauthseicure.us
- domain: webnaccenss.us
- domain: zopanews.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/f0ee5324b94d53be71a06792b4ecd754ba0531ae
- domain: workbright.shop
- domain: y69.org
- url: https://api.github.com/repos/stamparm/maltrail/commits/108e321193bab3039ecd9db72bade477234c5050
- domain: mettl.app
- domain: mettl.pro
- domain: mettl.xyz
- url: https://api.github.com/repos/stamparm/maltrail/commits/6a9bbbb87f593a5f7f17e8c4ff7e083e1667258e
- domain: api.sapia.us
- domain: canditech.co
- domain: canditech.ink
- domain: canditech.net
- domain: canditech.online
- domain: canditech.org
- domain: canditech.xyz
- domain: employ-check.com
- domain: sapia.us
- domain: szynergy.org
- url: https://api.github.com/repos/stamparm/maltrail/commits/e98b9524cd516d9bf2e248a06847a1b7e68c383b
- url: https://socradar.io/blog/dprk-clickfake-pylangghost-golangghost-rats
- ip: 95.216.92.207
- domain: canditech.us
- domain: mettl.us
- domain: nvidiadriver.net
- domain: tecmlny.com
- domain: workbright.us
- domain: zavnia.us
- domain: ziggeo.tech
- url: https://api.github.com/repos/stamparm/maltrail/commits/0d29233f55999e63794cd3f7e37191bdeaf5b073
- ip: 117.72.29.14
- ip: 135.106.167.63
- ip: 192.253.229.28
- ip: 34.44.34.195
- ip: 45.207.222.64
- domain: admin.9tian.app
- domain: iv.vnshu.com
- domain: zerodusk.online
- domain: zhuce001.de5.net
Maltrail IOC for 2026-07-21
Description
Maltrail IOC for 2026-07-21
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The report details a Maltrail IOC for malware activity identified on 2026-07-21, sourced from the CIRCL OSINT feed. It is classified as a medium-risk threat based on observed network activity patterns. The data lacks specific technical indicators or affected software versions, and no exploit or patch information is available. This is an observational report from open-source intelligence without direct actionable remediation.
Potential Impact
The impact is limited to the identification of potential malware-related network activity. No direct exploit or vulnerability is documented, and no affected software or systems are specified. The threat level is medium, indicating a moderate concern for network security monitoring but no immediate critical risk.
Mitigation Recommendations
No patch or official remediation is available or applicable for this IOC. Security teams should incorporate this IOC into their detection and monitoring tools as part of ongoing threat intelligence updates. No urgent action is required beyond standard monitoring for the reported indicators.
Technical Details
- Uuid
- dfc9ef66-d6ff-4417-901f-801bb22384a3
- Original Timestamp
- 1784646009
Indicators of Compromise
Url
| Value | Description | Copy |
|---|---|---|
urlhttps://api.github.com/repos/stamparm/maltrail/commits/f40ff4ba8a0a7247c4c05b813f3d554552e3a3c7 | ek_landupdate808 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8c3ef1dd2b15a9a70ebf56809206ab0893f11049 | android_fakeapp | |
urlhttps://x.com/d1v35hresearch/status/2079440521102319764 | android_fakeapp | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6428c2e3c73b5f829f09367cf15957ff9e302210 | ek_landupdate808 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/bd2701e1b904d2bafd07b063805e44a38296b85a | ek_landupdate808 | |
urlhttps://x.com/skocherhan/status/2079357326184632386 | ek_landupdate808 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/38301b6c0d58c82409cd1841812ca2a3ee4b9615 | apt_unc2465 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/030d90a3076bf97abb13bd75f520f4a89f67f8d5 | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/49f64932ed3e26ea98afc06038a73a2b1e9c61e2 | santa | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/f9a90d30255d5669a29f0f2cb5b8f8e84b7cec96 | osx_nova | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/525b13b5fba76c06daee235a64658b0a75a02166 | android_fvncbot | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8d2a5158ec3a02c046588ee79213555a52ff5225 | ek_zphp | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/58acf5ab70b7108641fd858fe5a6525cab283aaa | hollowgraph | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/3473ad4f906466ad2df74b8199000c992459b0aa | silverfox | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/123504cf900779579c01545c295a0130ac7bfd03 | silverfox | |
urlhttps://x.com/smica83/status/2079291245168374100 | silverfox | |
urlhttps://www.virustotal.com/gui/file/3e1a33683e59ff25fa992373da74fd8df0c82f403ce4144566e1bff5d6635339/detection | silverfox | |
urlhttps://www.virustotal.com/gui/file/3e2fd1aba7bb462c272a650ff4f39ae1f23146476aa02b910b1d4a75a3ccc352/detection | silverfox | |
urlhttps://www.virustotal.com/gui/file/b3f7ec26d68bb33246a55379982afe5304a1d2f5a3ee30f43cec618d6f919d89/detection | silverfox | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/4e7853322440c0568bc2e6b772f44e13104178bb | magentocore | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/1b46b0ff4cf8b4de331268d75759647eb100a653 | apt_unc2465 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/f0ee5324b94d53be71a06792b4ecd754ba0531ae | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/108e321193bab3039ecd9db72bade477234c5050 | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/6a9bbbb87f593a5f7f17e8c4ff7e083e1667258e | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/e98b9524cd516d9bf2e248a06847a1b7e68c383b | apt_lazarus | |
urlhttps://socradar.io/blog/dprk-clickfake-pylangghost-golangghost-rats | apt_lazarus | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/0d29233f55999e63794cd3f7e37191bdeaf5b073 | cyberstrikeai |
Domain
| Value | Description | Copy |
|---|---|---|
domainoliieira.click | ek_landupdate808 | |
domainccleaner.click | android_fakeapp | |
domainccleaner.lat | android_fakeapp | |
domainccleaner.lol | android_fakeapp | |
domainccleaner.mom | android_fakeapp | |
domainkumlman.lol | ek_landupdate808 | |
domainnonseca.lol | ek_landupdate808 | |
domainbbvalues.uk | ek_landupdate808 | |
domaincorraia.icu | ek_landupdate808 | |
domainhegmaen.com | ek_landupdate808 | |
domainlombaidi.lol | ek_landupdate808 | |
domainmeduurst.space | ek_landupdate808 | |
domainmonteiro.click | ek_landupdate808 | |
domainreynoldy.lol | ek_landupdate808 | |
domainritchie.click | ek_landupdate808 | |
domainschuttc.lol | ek_landupdate808 | |
domainsigmatauethifarma.com | ek_landupdate808 | |
domaintreviro.icu | ek_landupdate808 | |
domainvtcircuits.com | ek_landupdate808 | |
domainanalizainvestitii-ro.com | apt_unc2465 | |
domainareacleintsacounts.us | apt_unc2465 | |
domainaureliaromfund.com | apt_unc2465 | |
domainauthorlzeacsess.us | apt_unc2465 | |
domainauthorlzesitte.us | apt_unc2465 | |
domainautnhentlcation.us | apt_unc2465 | |
domainbabmbach.com | apt_unc2465 | |
domainbalatonvitalworks.com | apt_unc2465 | |
domainbaptissa.com | apt_unc2465 | |
domainbespokecufflinkjournal.com | apt_unc2465 | |
domainbingbong.website | apt_unc2465 | |
domainbucurestivantage.com | apt_unc2465 | |
domainbusinessfundwell.com | apt_unc2465 | |
domainbyteforgenova.com | apt_unc2465 | |
domaincarpatiareport.com | apt_unc2465 | |
domaincarvalhl.site | apt_unc2465 | |
domaincemteracsess.us | apt_unc2465 | |
domaincemtercliemt.us | apt_unc2465 | |
domaincleintsareaacounts.us | apt_unc2465 | |
domaincooperativecreatives.us | apt_unc2465 | |
domaincraneservicepa.com | apt_unc2465 | |
domaincystocarehungary.com | apt_unc2465 | |
domaindeltacasino.website | apt_unc2465 | |
domainfeedlister.com | apt_unc2465 | |
domaingetxenow.com | apt_unc2465 | |
domaingzlarza.com | apt_unc2465 | |
domainhenriiues.space | apt_unc2465 | |
domainhenriquee.com | apt_unc2465 | |
domainit-quotidiana.com | apt_unc2465 | |
domainjurnaleconomic.com | apt_unc2465 | |
domainmeshcipherlab.com | apt_unc2465 | |
domainmichiganfostercarecloset.us | apt_unc2465 | |
domainmioriticholdings.com | apt_unc2465 | |
domainmonitorulcapitalului.com | apt_unc2465 | |
domainnarz-avn.it | apt_unc2465 | |
domainnodequantforge.com | apt_unc2465 | |
domainobservatorfinanciar-ro.com | apt_unc2465 | |
domainonlinenweb.us | apt_unc2465 | |
domainparadoxmellow.com | apt_unc2465 | |
domainpnhuby.top | apt_unc2465 | |
domainportaul.us | apt_unc2465 | |
domainquadrumgroup.com | apt_unc2465 | |
domainromterravest.com | apt_unc2465 | |
domainrvtenterprise.com | apt_unc2465 | |
domainrvtoptools.app | apt_unc2465 | |
domainsignaturedg.us | apt_unc2465 | |
domainsinssay.com | apt_unc2465 | |
domainverifica-facile.com | apt_unc2465 | |
domainvita-novas.com | apt_unc2465 | |
domainvmenterprise.app | apt_unc2465 | |
domainwebauthseciure.us | apt_unc2465 | |
domainassetslib.shop | apt_lazarus | |
domainvelvet-pulse684.cc | santa | |
domainadrooidonload.shop | osx_nova | |
domainai.trilontech.blog | osx_nova | |
domainarcanovirexion.pro | osx_nova | |
domainauroracipher.info | osx_nova | |
domainavianhaven.cyou | osx_nova | |
domainbestatigung198571.com | osx_nova | |
domainbooking.cra-earnings.cfd | osx_nova | |
domainbooking.delivery-online.asia | osx_nova | |
domainbooking.hotelstay-inf.cyou | osx_nova | |
domainbooking.order0094827452.live | osx_nova | |
domainbooking.payment-system.shop | osx_nova | |
domainbooking.poparide-confirmation00492812.live | osx_nova | |
domainclothingrs.com | osx_nova | |
domaincozycraft.cyou | osx_nova | |
domaincra-earnings.cfd | osx_nova | |
domaincryptomeridion.pro | osx_nova | |
domaincuckoldbull.qpon | osx_nova | |
domaindelivery-online.asia | osx_nova | |
domaindexscreen-secure.online | osx_nova | |
domaindfsjfisafosdikfos.info | osx_nova | |
domainembererchronicle.info | osx_nova | |
domainetoileguide.cyou | osx_nova | |
domainfertig-verkauft.shop | osx_nova | |
domainfrosertmatrix.info | osx_nova | |
domaingarnetdawnview.shop | osx_nova | |
domainhotelstay-inf.cyou | osx_nova | |
domainhypermeridian.info | osx_nova | |
domainid124214.cfd | osx_nova | |
domainketsuekigata.cyou | osx_nova | |
domainlaposte-paiement.com | osx_nova | |
domainlewokodwqko.icu | osx_nova | |
domainlive209.live | osx_nova | |
domainluminoravelis.pro | osx_nova | |
domainmarblecloudward.shop | osx_nova | |
domainmythicgateway.info | osx_nova | |
domainnoravexalithor.pro | osx_nova | |
domainnovatheryxion.pro | osx_nova | |
domainobsidianparallax.info | osx_nova | |
domainolimpusgates.best | osx_nova | |
domainolimpusgates.one | osx_nova | |
domainopalineeverfrontier.shop | osx_nova | |
domainopalinevault.info | osx_nova | |
domainorchidsnowport.shop | osx_nova | |
domainorder-page.shop | osx_nova | |
domainorder00486572216.live | osx_nova | |
domainorder00948269262.live | osx_nova | |
domainorder0094827452.live | osx_nova | |
domainorder00948737652.live | osx_nova | |
domainorder00967342467.live | osx_nova | |
domainorder009764234543.live | osx_nova | |
domainorder092527184.live | osx_nova | |
domainorivandralith.pro | osx_nova | |
domainpage826852.net | osx_nova | |
domainpayment-system.shop | osx_nova | |
domainpoparide-confirmation00492812.live | osx_nova | |
domainpoparide-order.live | osx_nova | |
domainpoparide-order001528511.live | osx_nova | |
domainpoparide-order004928152.live | osx_nova | |
domainpoparide-order0148272.live | osx_nova | |
domainpraxiomeridian.pro | osx_nova | |
domainquantalytheron.pro | osx_nova | |
domainquartzhorizon.info | osx_nova | |
domainquentharadrix.pro | osx_nova | |
domainradiassntforge.info | osx_nova | |
domainsexwifekiss.bond | osx_nova | |
domainsolona.cyou | osx_nova | |
domainsyntheravolix.pro | osx_nova | |
domaintrilontech.blog | osx_nova | |
domaintutto-sub.com | osx_nova | |
domainumbralstormmarch.shop | osx_nova | |
domainups.cra-earnings.cfd | osx_nova | |
domainups.poparide-confirmation00492812.live | osx_nova | |
domainups.poparide-order0148272.live | osx_nova | |
domainvaleriomantix.pro | osx_nova | |
domainweb-id2384.cfd | osx_nova | |
domainwillowfirevale.shop | osx_nova | |
domainwillowthornwind.shop | osx_nova | |
domainxandravirelix.pro | osx_nova | |
domainzenthoriadrix.pro | osx_nova | |
domaincdn.leownas.icu | android_fvncbot | |
domaingranitealcove.top | ek_zphp | |
domainisthmusandanvil.com | ek_zphp | |
domaincloudlanecdn.com | hollowgraph | |
domain0u9vm1.info | silverfox | |
domain0wrljh.info | silverfox | |
domain1ppvxl.info | silverfox | |
domain1yt4mj.info | silverfox | |
domain24alf9.info | silverfox | |
domain24gp2d.info | silverfox | |
domain2cmj5p.info | silverfox | |
domain2r2d53.info | silverfox | |
domain3qbdnw.info | silverfox | |
domain3wxve3.info | silverfox | |
domain491wvk.info | silverfox | |
domain4ep47y.info | silverfox | |
domain4eye6j.info | silverfox | |
domain4lhfqz.info | silverfox | |
domain4mrxyl.info | silverfox | |
domain52e6pp.info | silverfox | |
domain58w168.info | silverfox | |
domain5ivluf.info | silverfox | |
domain5tuajy.info | silverfox | |
domain5wdgm7.info | silverfox | |
domain66fage.info | silverfox | |
domain6d7u6a.info | silverfox | |
domain6v7j73.info | silverfox | |
domain75wrbh.info | silverfox | |
domain76891x.info | silverfox | |
domain7r9raz.info | silverfox | |
domain7ulgkw.info | silverfox | |
domain82bft7.info | silverfox | |
domain82ixrn.info | silverfox | |
domain89zm51.info | silverfox | |
domain8bklwd.info | silverfox | |
domain8q2vq5.info | silverfox | |
domain9dlxc5.info | silverfox | |
domaina1gsjk.info | silverfox | |
domainafkdl1.info | silverfox | |
domainapi.3qbdnw.info | silverfox | |
domainas2q23.info | silverfox | |
domainbdqwff.info | silverfox | |
domainbeta.3qbdnw.info | silverfox | |
domainbhirn1.info | silverfox | |
domainbot.3qbdnw.info | silverfox | |
domainclient.3qbdnw.info | silverfox | |
domaincn.3qbdnw.info | silverfox | |
domaincsktjr.info | silverfox | |
domaindlpbgz.info | silverfox | |
domaine59f2g.info | silverfox | |
domaineh8hct.info | silverfox | |
domainem4w30.info | silverfox | |
domainevfo5i.info | silverfox | |
domainf6z4rx.info | silverfox | |
domainfcrze7.info | silverfox | |
domainfqbb1m.info | silverfox | |
domainfuovnc.info | silverfox | |
domaingmxt3l.info | silverfox | |
domainhfryu1.info | silverfox | |
domainhh.ydfy.cc | silverfox | |
domainhhpnju.info | silverfox | |
domainhvs2c4.info | silverfox | |
domainhykoug.info | silverfox | |
domainisrt0j.info | silverfox | |
domainjc7nfi.info | silverfox | |
domainjhajgv.info | silverfox | |
domainjrctgw.info | silverfox | |
domainjyevdi.info | silverfox | |
domaink7m80f.info | silverfox | |
domainkbujmg.info | silverfox | |
domainkujpa.cn | silverfox | |
domainl1rki1.info | silverfox | |
domainl1xt0x.info | silverfox | |
domainlusp3t.info | silverfox | |
domainmailserver.3qbdnw.info | silverfox | |
domainmedia.3qbdnw.info | silverfox | |
domainmx.3qbdnw.info | silverfox | |
domainmysixf.info | silverfox | |
domainn9nw8j.info | silverfox | |
domainnew.3qbdnw.info | silverfox | |
domainnews.3qbdnw.info | silverfox | |
domainnj.3qbdnw.info | silverfox | |
domainnm1912.info | silverfox | |
domainnnk2ww.info | silverfox | |
domainnp7tgu.info | silverfox | |
domainnx.58w168.info | silverfox | |
domaino1.76891x.info | silverfox | |
domaino3qpc3.info | silverfox | |
domainos.2r2d53.info | silverfox | |
domainosa8w0.info | silverfox | |
domainoxcwnp.info | silverfox | |
domainoy.nm1912.info | silverfox | |
domainpd.6v7j73.info | silverfox | |
domainpf.t313z4.info | silverfox | |
domainph.vr3691.info | silverfox | |
domainpk.89zm51.info | silverfox | |
domainpmjur0.info | silverfox | |
domainq4.24alf9.info | silverfox | |
domainq4.e59f2g.info | silverfox | |
domainq5.24gp2d.info | silverfox | |
domainq9ux66.info | silverfox | |
domainqe.as2q23.info | silverfox | |
domainqf.6d7u6a.info | silverfox | |
domainqf.82bft7.info | silverfox | |
domainqf.k7m80f.info | silverfox | |
domainqh08mo.info | silverfox | |
domainqi.em4w30.info | silverfox | |
domainqk.52e6pp.info | silverfox | |
domainql.v102tf.info | silverfox | |
domainqlkqh1.info | silverfox | |
domainqp.r9k93e.info | silverfox | |
domainqp0bvz.info | silverfox | |
domainqr.wf6o16.info | silverfox | |
domainqv.4ep47y.info | silverfox | |
domainqy.ydfy.cc | silverfox | |
domainqz9vzh.info | silverfox | |
domainr0.0u9vm1.info | silverfox | |
domainr4.491wvk.info | silverfox | |
domainr5.8q2vq5.info | silverfox | |
domainr7.vn566t.info | silverfox | |
domainr9k93e.info | silverfox | |
domainrd.66fage.info | silverfox | |
domainrh.q9ux66.info | silverfox | |
domainrkxb87.info | silverfox | |
domainrv.2cmj5p.info | silverfox | |
domainry.l1rki1.info | silverfox | |
domains1.4eye6j.info | silverfox | |
domains3.9dlxc5.info | silverfox | |
domains3.o3qpc3.info | silverfox | |
domains4.hvs2c4.info | silverfox | |
domains5.5wdgm7.info | silverfox | |
domains5prjz.info | silverfox | |
domains5zooa.info | silverfox | |
domains7.qh08mo.info | silverfox | |
domains9.75wrbh.info | silverfox | |
domainsc.osa8w0.info | silverfox | |
domainsc.xu3i2g.info | silverfox | |
domainsg.rkxb87.info | silverfox | |
domainsh.xcn83s.info | silverfox | |
domainsite.3qbdnw.info | silverfox | |
domainsj.1yt4mj.info | silverfox | |
domainsl.82ixrn.info | silverfox | |
domainsn.zl3yk0.info | silverfox | |
domainso.n9nw8j.info | silverfox | |
domainsp.7r9raz.info | silverfox | |
domainsq.3wxve3.info | silverfox | |
domainsr.l1xt0x.info | silverfox | |
domainsso-google.3qbdnw.info | silverfox | |
domainst.afkdl1.info | silverfox | |
domainst.yb0eba.info | silverfox | |
domainsu.f6z4rx.info | silverfox | |
domainsz.fqbb1m.info | silverfox | |
domaint313z4.info | silverfox | |
domaint6lhix.info | silverfox | |
domaint7.a1gsjk.info | silverfox | |
domaint7.jc7nfi.info | silverfox | |
domainta.bhirn1.info | silverfox | |
domainta.eh8hct.info | silverfox | |
domaintest.3qbdnw.info | silverfox | |
domaintg.vjla7f.info | silverfox | |
domainti.8bklwd.info | silverfox | |
domaintk.evfo5i.info | silverfox | |
domaintl.3qbdnw.info | silverfox | |
domaintn.fcrze7.info | silverfox | |
domainto.qlkqh1.info | silverfox | |
domaintp.w0unfc.info | silverfox | |
domaintq.ujh7qe.info | silverfox | |
domaintt.0wrljh.info | silverfox | |
domaintv.4lhfqz.info | silverfox | |
domaintx.5ivluf.info | silverfox | |
domainty.isrt0j.info | silverfox | |
domainu0.pmjur0.info | silverfox | |
domainu1.gmxt3l.info | silverfox | |
domainu1.hfryu1.info | silverfox | |
domainu1.t6lhix.info | silverfox | |
domainu1.wxf1du.info | silverfox | |
domainu3.7ulgkw.info | silverfox | |
domainu3.s5zooa.info | silverfox | |
domainu4.5tuajy.info | silverfox | |
domainu5.qp0bvz.info | silverfox | |
domainu7.np7tgu.info | silverfox | |
domainu9.nnk2ww.info | silverfox | |
domainud.1ppvxl.info | silverfox | |
domainud.lusp3t.info | silverfox | |
domainug.s5prjz.info | silverfox | |
domainui.4mrxyl.info | silverfox | |
domainujh7qe.info | silverfox | |
domainul.vb9vsy.info | silverfox | |
domainul.wfv9zm.info | silverfox | |
domainus.bdqwff.info | silverfox | |
domainus.jhajgv.info | silverfox | |
domainuu.qz9vzh.info | silverfox | |
domainuy.kbujmg.info | silverfox | |
domainv1.dlpbgz.info | silverfox | |
domainv102tf.info | silverfox | |
domainv9.jyevdi.info | silverfox | |
domainvb.hhpnju.info | silverfox | |
domainvb9vsy.info | silverfox | |
domainvf.csktjr.info | silverfox | |
domainvf.fuovnc.info | silverfox | |
domainvf.jrctgw.info | silverfox | |
domainviliam.3qbdnw.info | silverfox | |
domainvjla7f.info | silverfox | |
domainvl.hykoug.info | silverfox | |
domainvn566t.info | silverfox | |
domainvr3691.info | silverfox | |
domainvt.oxcwnp.info | silverfox | |
domainvu.mysixf.info | silverfox | |
domainw0unfc.info | silverfox | |
domainwd.kujpa.cn | silverfox | |
domainwf6o16.info | silverfox | |
domainwfv9zm.info | silverfox | |
domainwxf1du.info | silverfox | |
domainxcn83s.info | silverfox | |
domainxu3i2g.info | silverfox | |
domainyb0eba.info | silverfox | |
domainzl3yk0.info | silverfox | |
domainydfy.cc | silverfox | |
domain1z.riotplat.shop | magentocore | |
domain4b.fancourier.vip | magentocore | |
domain7g.fancourier.cyou | magentocore | |
domainapi.kupui.biz | magentocore | |
domaindex.tradingskill.cc | magentocore | |
domainftp.cdn-cookie.com | magentocore | |
domainftp.cdn-gstatic.com | magentocore | |
domainftp.detail-best.com | magentocore | |
domainftp.google-manager.com | magentocore | |
domainftp.hacptcha.com | magentocore | |
domainftp.ipifly.com | magentocore | |
domainftp.newasest.com | magentocore | |
domainftp.omappepi.com | magentocore | |
domainglobalvexor.com | magentocore | |
domainmail.cdn-cookie.com | magentocore | |
domainmail.cdn-gstatic.com | magentocore | |
domainmail.detail-best.com | magentocore | |
domainmail.hacptcha.com | magentocore | |
domainmail.ipifly.com | magentocore | |
domainmail.newasest.com | magentocore | |
domainmail.omappepi.com | magentocore | |
domainpc.riot-ex.cc | magentocore | |
domainriot-ex.cc | magentocore | |
domaintradingskill.cc | magentocore | |
domainu5.riot-ex.net | magentocore | |
domainvireon.lol | magentocore | |
domainzoltar.sbs | magentocore | |
domain10bet.space | apt_unc2465 | |
domainaiagentanalytics.com | apt_unc2465 | |
domainareaclienntsaccoumts.us | apt_unc2465 | |
domainbuletineconomic.com | apt_unc2465 | |
domaincemtersitte.us | apt_unc2465 | |
domaincemterweb.us | apt_unc2465 | |
domainclienntsareaaccoumts.us | apt_unc2465 | |
domaincooperativecaffes.us | apt_unc2465 | |
domaincooperativecreatives.com | apt_unc2465 | |
domaincooperativecreativs.com | apt_unc2465 | |
domaincromwellstorage.com | apt_unc2465 | |
domaindanubereview.com | apt_unc2465 | |
domaindashbourd.us | apt_unc2465 | |
domaindatatools26.org | apt_unc2465 | |
domainegeszsegtippek-magazin.com | apt_unc2465 | |
domainestnews-ro.com | apt_unc2465 | |
domainfluxquantorian.com | apt_unc2465 | |
domaingyogynovenyvilag24.com | apt_unc2465 | |
domainhirekazegeszsegrol.com | apt_unc2465 | |
domainhungarovitalcenter.com | apt_unc2465 | |
domainkarpatwellnesslab.com | apt_unc2465 | |
domainmail.aussierealestate.net.au | apt_unc2465 | |
domainparsoraviant.com | apt_unc2465 | |
domainpietezi.com | apt_unc2465 | |
domainpontuscarpathia.com | apt_unc2465 | |
domainrerluke.com | apt_unc2465 | |
domainrvtoolenterprise.com | apt_unc2465 | |
domainrvtop.app | apt_unc2465 | |
domainshhiller.com | apt_unc2465 | |
domainsign-ms.online | apt_unc2465 | |
domainstiridininvestitii.com | apt_unc2465 | |
domaintokmu.top | apt_unc2465 | |
domaintransilvanequity.com | apt_unc2465 | |
domainvalahinvestcore.com | apt_unc2465 | |
domainvivere-meglio.com | apt_unc2465 | |
domainvmoneenterprise.app | apt_unc2465 | |
domainvmw.enterprises | apt_unc2465 | |
domainvmwone.app | apt_unc2465 | |
domainvmwone.enterprises | apt_unc2465 | |
domainvmwoneenterprise.app | apt_unc2465 | |
domainwebacncess.us | apt_unc2465 | |
domainwebauthsecvre.us | apt_unc2465 | |
domainwebauthseicure.us | apt_unc2465 | |
domainwebnaccenss.us | apt_unc2465 | |
domainzopanews.com | apt_unc2465 | |
domainworkbright.shop | apt_lazarus | |
domainy69.org | apt_lazarus | |
domainmettl.app | apt_lazarus | |
domainmettl.pro | apt_lazarus | |
domainmettl.xyz | apt_lazarus | |
domainapi.sapia.us | apt_lazarus | |
domaincanditech.co | apt_lazarus | |
domaincanditech.ink | apt_lazarus | |
domaincanditech.net | apt_lazarus | |
domaincanditech.online | apt_lazarus | |
domaincanditech.org | apt_lazarus | |
domaincanditech.xyz | apt_lazarus | |
domainemploy-check.com | apt_lazarus | |
domainsapia.us | apt_lazarus | |
domainszynergy.org | apt_lazarus | |
domaincanditech.us | apt_lazarus | |
domainmettl.us | apt_lazarus | |
domainnvidiadriver.net | apt_lazarus | |
domaintecmlny.com | apt_lazarus | |
domainworkbright.us | apt_lazarus | |
domainzavnia.us | apt_lazarus | |
domainziggeo.tech | apt_lazarus | |
domainadmin.9tian.app | cyberstrikeai | |
domainiv.vnshu.com | cyberstrikeai | |
domainzerodusk.online | cyberstrikeai | |
domainzhuce001.de5.net | cyberstrikeai |
Ip
| Value | Description | Copy |
|---|---|---|
ip95.216.92.207 | apt_lazarus | |
ip117.72.29.14 | cyberstrikeai | |
ip135.106.167.63 | cyberstrikeai | |
ip192.253.229.28 | cyberstrikeai | |
ip34.44.34.195 | cyberstrikeai | |
ip45.207.222.64 | cyberstrikeai |
Threat ID: 6a5fa8462a4a8d598975c56f
Added to database: 07/21/2026, 17:11:34 UTC
Last enriched: 07/21/2026, 17:30:11 UTC
Last updated: 07/21/2026, 20:52:03 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.