Reconnecting to live updates…
Maltrail IOC for 2026-07-28
Severity: mediumType: malware
Maltrail IOC for 2026-07-28
Indicators of Compromise
- url: https://api.github.com/repos/stamparm/maltrail/commits/45c2ebcabcd88c95f4a0cbcaebe00394e2ba13b4
- url: https://x.com/skocherhan/status/2081704943946228161
- url: https://x.com/skocherhan/status/2081703303151264245
- domain: gameoflovewb.gleeze.com
- domain: gameofloveweb.duckdns.org
- domain: uafsoftware.in
- url: https://api.github.com/repos/stamparm/maltrail/commits/3a6c666098453ebb05357a27a1a6eec4ea8568b6
- url: https://x.com/skocherhan/status/2081702139940745306
- domain: finalmundial202620262026mesiii.dynuddns.com
- domain: mundialmexicotransmision20262026.1cooldns.com
- domain: unoparatodosytodospara123.duckdns.org
- domain: windowsdefenderupdate004993004343.dynuddns.net
- domain: wolrdcup2026202620262026.dynuddns.net
- url: https://api.github.com/repos/stamparm/maltrail/commits/0f1dcc06d2d33d8290e091ff51ecffd32510e7f8
- domain: backhappylove.duckdns.org
- domain: backhappymann.duckdns.org
- domain: ddnsgeek.overgainweb.duckdns.org
- domain: hopenewrediff.duckdns.org
- domain: kumarrajweb.duckdns.org
- domain: newhopereddif.duckdns.org
- domain: newhoperediff.ddnsgeek.com
- domain: overgaainweb.ddnsgeek.com
- domain: overgaainweb.ddnsgeek.overgainweb.duckdns.org
- domain: overgainweb.duckdns.org
- domain: rajkumarred.ddnsgeek.com
- domain: rajkumarred.duckdns.org
- domain: sandeepkumar.ddnsgeek.com
- domain: sanjayrajweb.ddnsgeek.com
- domain: sanjayrajweb.duckdns.org
- domain: sanjayred.duckdns.org
- url: https://api.github.com/repos/stamparm/maltrail/commits/f6e42c5428c00df83032b0a53564b95efdd58e23
- domain: validaempresa.info
- url: https://api.github.com/repos/stamparm/maltrail/commits/3a235f6d7bcc648ba9ad91c0b661544ae1cf1a7c
- url: https://x.com/Merlax_/status/2081905778751897664
- ip: 102.165.46.129
- ip: 102.165.46.21
- ip: 15.228.199.254
- ip: 151.243.218.121
- ip: 151.243.219.162
- ip: 151.243.219.67
- ip: 157.254.55.222
- ip: 157.254.55.234
- ip: 177.136.234.233
- ip: 177.155.199.100
- ip: 177.155.199.21
- ip: 190.102.40.218
- ip: 190.102.42.133
- ip: 190.102.43.41
- ip: 190.102.43.66
- ip: 190.102.43.74
- ip: 191.101.131.105
- ip: 191.101.131.41
- ip: 191.101.131.74
- ip: 191.96.78.192
- ip: 191.96.79.144
- ip: 191.96.79.197
- ip: 200.9.154.111
- ip: 200.9.154.151
- ip: 200.9.155.94
- ip: 216.238.124.15
- ip: 216.238.124.48
- ip: 38.60.241.44
- ip: 45.157.157.138
- ip: 45.157.157.142
- ip: 45.158.8.117
- ip: 45.158.8.127
- ip: 45.158.8.30
- ip: 45.158.8.68
- ip: 86.106.87.135
- domain: aggbet.net
- domain: krakenthecontrol10oficial.xyz
- domain: krakenthecontrol11oficial.xyz
- domain: krakenthecontrol12oficial.xyz
- domain: krakenthecontrol13oficial.xyz
- domain: krakenthecontrol14oficial.xyz
- domain: krakenthecontrol15oficial.xyz
- domain: krakenthecontrol16oficial.xyz
- domain: krakenthecontrol17oficial.xyz
- domain: krakenthecontrol18oficial.xyz
- domain: krakenthecontrol1oficial.xyz
- domain: krakenthecontrol2oficial.xyz
- domain: krakenthecontrol3oficial.xyz
- domain: krakenthecontrol4oficial.xyz
- domain: krakenthecontrol5oficial.xyz
- domain: krakenthecontrol6oficial.xyz
- domain: krakenthecontrol7oficial.xyz
- domain: krakenthecontrol8oficial.xyz
- domain: krakenthecontrol9oficial.xyz
- domain: krakenthecontroloficial21.online
- domain: krakenthecontroloficial23.online
- domain: krakenthecontroloficial24.online
- domain: krkcontrol25.store
- domain: krkcontrol26.store
- domain: krkcontrol27.store
- domain: krkcontrol28.store
- domain: krkcontrol29.store
- domain: krkcontrol30.store
- domain: krkcontrol31.store
- domain: krkcontrol32.store
- domain: krkcontrol33.store
- domain: krkcontrol34.store
- domain: watchtv.tech
- url: https://api.github.com/repos/stamparm/maltrail/commits/a44b5752d958cc033ade188253966cb5d0a62bf0
- domain: krakenthecontrol22.online
- url: https://api.github.com/repos/stamparm/maltrail/commits/d5ab221ce723dd80f93a2a8d8adac5679993b052
- domain: apieuatendo6.com
- domain: krakenelonmusk.xyz
- domain: krakenmodorestrito.xyz
- domain: krakenthecontroloficial19.lol
- domain: krakenthecontroloficial20.lol
- domain: novaddtank.com
- domain: paineltrincaosso.top
- domain: redewhatxxp.xyz
- url: https://api.github.com/repos/stamparm/maltrail/commits/1193343bc643ad28927b7715a62fd821c76767b8
- url: https://x.com/sdcyberresearch/status/2082043384588317115
- domain: woocompay.com
- domain: wpguarding.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/96f287bc88635de6b861c63338745ce37c8e564c
- domain: scdncon.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/8023d2950ee6a3fb08ba4109d92e54003e747a1c
- domain: analyticsweb.pro
- domain: apistatics.com
- domain: fonts-statics.com
- domain: google-analytics.shop
- domain: jsdelivrcdn.co
- domain: smrtpayments.com
- domain: snow-cdn.cc
- domain: staticsapi.com
- domain: woo-gateway.com
- domain: woocome.shop
- domain: wordpress-woo.com
- domain: wp-ping.com
- domain: wpblack.com
Maltrail IOC for 2026-07-28
0
MediumMalwaretlp:clearmalwaremisp:threat-level="medium-risk"misp:event-type="observation"misp:automation-level="unsupervised"type:osintosint:lifetime="perpetual"osint:source-type="manual-collection"
Published: 07/27/2026 (07/27/2026, 00:00:00 UTC)
Source: CIRCL OSINT Feed
Description
Maltrail IOC for 2026-07-28
Technical Details
- Uuid
- bcf9036e-b356-45a7-8191-dd4ffec7d159
- Original Timestamp
- 1785240007
Indicators of Compromise
Url
| Value | Description | Copy |
|---|---|---|
urlhttps://api.github.com/repos/stamparm/maltrail/commits/45c2ebcabcd88c95f4a0cbcaebe00394e2ba13b4 | xworm | |
urlhttps://x.com/skocherhan/status/2081704943946228161 | xworm | |
urlhttps://x.com/skocherhan/status/2081703303151264245 | xworm | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/3a6c666098453ebb05357a27a1a6eec4ea8568b6 | asyncrat | |
urlhttps://x.com/skocherhan/status/2081702139940745306 | asyncrat | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/0f1dcc06d2d33d8290e091ff51ecffd32510e7f8 | xworm | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/f6e42c5428c00df83032b0a53564b95efdd58e23 | android_kraken | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/3a235f6d7bcc648ba9ad91c0b661544ae1cf1a7c | android_kraken | |
urlhttps://x.com/Merlax_/status/2081905778751897664 | android_kraken | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/a44b5752d958cc033ade188253966cb5d0a62bf0 | android_kraken | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/d5ab221ce723dd80f93a2a8d8adac5679993b052 | android_kraken | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/1193343bc643ad28927b7715a62fd821c76767b8 | magentocore | |
urlhttps://x.com/sdcyberresearch/status/2082043384588317115 | magentocore | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/96f287bc88635de6b861c63338745ce37c8e564c | magentocore | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/8023d2950ee6a3fb08ba4109d92e54003e747a1c | magentocore |
Domain
| Value | Description | Copy |
|---|---|---|
domaingameoflovewb.gleeze.com | xworm | |
domaingameofloveweb.duckdns.org | xworm | |
domainuafsoftware.in | xworm | |
domainfinalmundial202620262026mesiii.dynuddns.com | asyncrat | |
domainmundialmexicotransmision20262026.1cooldns.com | asyncrat | |
domainunoparatodosytodospara123.duckdns.org | asyncrat | |
domainwindowsdefenderupdate004993004343.dynuddns.net | asyncrat | |
domainwolrdcup2026202620262026.dynuddns.net | asyncrat | |
domainbackhappylove.duckdns.org | xworm | |
domainbackhappymann.duckdns.org | xworm | |
domainddnsgeek.overgainweb.duckdns.org | xworm | |
domainhopenewrediff.duckdns.org | xworm | |
domainkumarrajweb.duckdns.org | xworm | |
domainnewhopereddif.duckdns.org | xworm | |
domainnewhoperediff.ddnsgeek.com | xworm | |
domainovergaainweb.ddnsgeek.com | xworm | |
domainovergaainweb.ddnsgeek.overgainweb.duckdns.org | xworm | |
domainovergainweb.duckdns.org | xworm | |
domainrajkumarred.ddnsgeek.com | xworm | |
domainrajkumarred.duckdns.org | xworm | |
domainsandeepkumar.ddnsgeek.com | xworm | |
domainsanjayrajweb.ddnsgeek.com | xworm | |
domainsanjayrajweb.duckdns.org | xworm | |
domainsanjayred.duckdns.org | xworm | |
domainvalidaempresa.info | android_kraken | |
domainaggbet.net | android_kraken | |
domainkrakenthecontrol10oficial.xyz | android_kraken | |
domainkrakenthecontrol11oficial.xyz | android_kraken | |
domainkrakenthecontrol12oficial.xyz | android_kraken | |
domainkrakenthecontrol13oficial.xyz | android_kraken | |
domainkrakenthecontrol14oficial.xyz | android_kraken | |
domainkrakenthecontrol15oficial.xyz | android_kraken | |
domainkrakenthecontrol16oficial.xyz | android_kraken | |
domainkrakenthecontrol17oficial.xyz | android_kraken | |
domainkrakenthecontrol18oficial.xyz | android_kraken | |
domainkrakenthecontrol1oficial.xyz | android_kraken | |
domainkrakenthecontrol2oficial.xyz | android_kraken | |
domainkrakenthecontrol3oficial.xyz | android_kraken | |
domainkrakenthecontrol4oficial.xyz | android_kraken | |
domainkrakenthecontrol5oficial.xyz | android_kraken | |
domainkrakenthecontrol6oficial.xyz | android_kraken | |
domainkrakenthecontrol7oficial.xyz | android_kraken | |
domainkrakenthecontrol8oficial.xyz | android_kraken | |
domainkrakenthecontrol9oficial.xyz | android_kraken | |
domainkrakenthecontroloficial21.online | android_kraken | |
domainkrakenthecontroloficial23.online | android_kraken | |
domainkrakenthecontroloficial24.online | android_kraken | |
domainkrkcontrol25.store | android_kraken | |
domainkrkcontrol26.store | android_kraken | |
domainkrkcontrol27.store | android_kraken | |
domainkrkcontrol28.store | android_kraken | |
domainkrkcontrol29.store | android_kraken | |
domainkrkcontrol30.store | android_kraken | |
domainkrkcontrol31.store | android_kraken | |
domainkrkcontrol32.store | android_kraken | |
domainkrkcontrol33.store | android_kraken | |
domainkrkcontrol34.store | android_kraken | |
domainwatchtv.tech | android_kraken | |
domainkrakenthecontrol22.online | android_kraken | |
domainapieuatendo6.com | android_kraken | |
domainkrakenelonmusk.xyz | android_kraken | |
domainkrakenmodorestrito.xyz | android_kraken | |
domainkrakenthecontroloficial19.lol | android_kraken | |
domainkrakenthecontroloficial20.lol | android_kraken | |
domainnovaddtank.com | android_kraken | |
domainpaineltrincaosso.top | android_kraken | |
domainredewhatxxp.xyz | android_kraken | |
domainwoocompay.com | magentocore | |
domainwpguarding.com | magentocore | |
domainscdncon.com | magentocore | |
domainanalyticsweb.pro | magentocore | |
domainapistatics.com | magentocore | |
domainfonts-statics.com | magentocore | |
domaingoogle-analytics.shop | magentocore | |
domainjsdelivrcdn.co | magentocore | |
domainsmrtpayments.com | magentocore | |
domainsnow-cdn.cc | magentocore | |
domainstaticsapi.com | magentocore | |
domainwoo-gateway.com | magentocore | |
domainwoocome.shop | magentocore | |
domainwordpress-woo.com | magentocore | |
domainwp-ping.com | magentocore | |
domainwpblack.com | magentocore |
Ip
| Value | Description | Copy |
|---|---|---|
ip102.165.46.129 | android_kraken | |
ip102.165.46.21 | android_kraken | |
ip15.228.199.254 | android_kraken | |
ip151.243.218.121 | android_kraken | |
ip151.243.219.162 | android_kraken | |
ip151.243.219.67 | android_kraken | |
ip157.254.55.222 | android_kraken | |
ip157.254.55.234 | android_kraken | |
ip177.136.234.233 | android_kraken | |
ip177.155.199.100 | android_kraken | |
ip177.155.199.21 | android_kraken | |
ip190.102.40.218 | android_kraken | |
ip190.102.42.133 | android_kraken | |
ip190.102.43.41 | android_kraken | |
ip190.102.43.66 | android_kraken | |
ip190.102.43.74 | android_kraken | |
ip191.101.131.105 | android_kraken | |
ip191.101.131.41 | android_kraken | |
ip191.101.131.74 | android_kraken | |
ip191.96.78.192 | android_kraken | |
ip191.96.79.144 | android_kraken | |
ip191.96.79.197 | android_kraken | |
ip200.9.154.111 | android_kraken | |
ip200.9.154.151 | android_kraken | |
ip200.9.155.94 | android_kraken | |
ip216.238.124.15 | android_kraken | |
ip216.238.124.48 | android_kraken | |
ip38.60.241.44 | android_kraken | |
ip45.157.157.138 | android_kraken | |
ip45.157.157.142 | android_kraken | |
ip45.158.8.117 | android_kraken | |
ip45.158.8.127 | android_kraken | |
ip45.158.8.30 | android_kraken | |
ip45.158.8.68 | android_kraken | |
ip86.106.87.135 | android_kraken |
Threat ID: 6a68a96e9c2644c7f8a62dc1
Added to database: 07/28/2026, 13:06:54 UTC
Last updated: 07/28/2026, 22:06:54 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Sort by
Loading community insights…
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Please log in to the Console to use AI analysis features.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Breach by OffSeqOFFSEQFRIENDS — 25% OFF
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
OffSeq TrainingCredly Certified
Lead Pen Test Professional
Technical5-day eLearningPECB Accredited