Maltrail IOC for 2026-07-29
Maltrail IOC for 2026-07-29
AI Analysis
Technical Summary
The report provides an IOC from Maltrail for the date 2026-07-29, sourced from CIRCL OSINT Feed. It is categorized as an observation of network activity linked to malware with medium risk. There are no indicators or technical specifics included, and no affected software versions or exploits in the wild are noted. This is an intelligence feed entry rather than a vulnerability or exploit report.
Potential Impact
The impact is limited to the identification of potential malicious network activity through the provided IOC. There is no direct vulnerability or exploit described, so no direct impact on software or systems is indicated.
Mitigation Recommendations
No patch or remediation is applicable for this IOC report. Security teams should integrate this IOC into their detection and monitoring tools as appropriate. No urgent action is mandated by the report itself.
Indicators of Compromise
- url: https://api.github.com/repos/stamparm/maltrail/commits/7c601edeef2fde8e0cf59c4f75886769efac7be5
- ip: 103.118.42.79
- ip: 181.215.205.246
- ip: 23.95.130.140
- ip: 38.55.132.229
- ip: 38.76.201.231
- ip: 38.95.74.4
- ip: 43.156.118.105
- domain: agent-old-export.zeabur.app
- domain: agent-pppp.zeabur.app
- domain: huoshan.sbs
- domain: k8adm.huoshan.sbs
- domain: kali.huoshan.sbs
- domain: luodi.huoshan.sbs
- url: https://api.github.com/repos/stamparm/maltrail/commits/176f0c7647b466722b3adb6159b38df2646ea0cd
- domain: abandon.dynuddns.net
- domain: able.dynu.org
- domain: about.dynu.net
- domain: about.dynuddns.net
- domain: absorb.dynuddns.net
- domain: abstract.dynuddns.net
- domain: abuse.dynu.org
- domain: accident.dynu.org
- domain: accident.dynuddns.net
- domain: account.dynu.net
- domain: account.dynuddns.net
- domain: app.donply.pw
- domain: auction.dynu.net
- domain: cnhisrps.dynu.net
- domain: edoc.abstract.dynuddns.net
- domain: edoc.view.dynu.net
- domain: edocservice-kakao.dynu.net
- domain: hslnistms.dynu.org
- domain: hsnivnidl.dynu.net
- domain: inrestrictblocks.dynu.net
- domain: locnhis.dynu.org
- domain: mlsintms.dynu.org
- domain: moisedow.dynu.net
- domain: moisedow.dynuddns.net
- domain: moscop.dynu.net
- domain: msdnsmt.dynu.org
- domain: msdtnsmsu.dynu.org
- domain: msnhor.dynu.org
- domain: msutsidmc.dynu.org
- domain: ncodgtcheck.dynu.org
- domain: ncodguverify.dynu.org
- domain: ncodgvcheck.dynu.org
- domain: ncodgxcheck.dynu.org
- domain: ncodhancheck.dynu.org
- domain: ncodhanpass.dynu.org
- domain: ncodhaverify.dynu.org
- domain: nhis-edoc-cigarette.dynuddns.net
- domain: nhis-edoc-sign.dynuddns.net
- domain: nhis.abandon.dynuddns.net
- domain: nhis.able.dynu.org
- domain: nhis.about.dynu.net
- domain: nhis.about.dynuddns.net
- domain: nhis.absorb.dynuddns.net
- domain: nhis.abuse.dynu.net
- domain: nhis.abuse.dynu.org
- domain: nhis.accident.dynu.org
- domain: nhis.accident.dynuddns.net
- domain: nhis.account.dynu.net
- domain: nhis.account.dynuddns.net
- domain: nhis.dynuddns.net
- domain: nhis.edoc.abstract.dynuddns.net
- domain: nhis.edoc.view.dynu.net
- domain: nhisotps.dynu.net
- domain: nhpayrestrict.dynu.net
- domain: nhsintdle.dynu.net
- domain: nipsverifications.dynu.net
- domain: nlsdtime.dynu.net
- domain: nlskghsu.dynu.net
- domain: nsmcihsd.dynu.org
- domain: ntclos.dynu.net
- domain: opcnhis.dynu.org
- domain: publishndocs.dynu.net
- domain: pvcntse.dynu.org
- domain: shop.favnshield.fun
- domain: smchecksm.dynu.org
- domain: snkenafse.dynu.net
- domain: usrprofileoption.dynu.net
- domain: usrprofileoptions.dynu.net
- domain: view.dynu.net
- domain: vipsdoc.dynu.net
- url: https://api.github.com/repos/stamparm/maltrail/commits/3c272e0ca10b8cdeb40d73bfa89e2d38e0ea883c
- domain: arcyloriantech.com
- domain: hunherbal.com
- domain: urovitalmagyar.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/598c331b4716422849e2ab62392861ae69d07580
- domain: gulderopre.club
- url: https://api.github.com/repos/stamparm/maltrail/commits/55df262fc55d0e203c1498f25e19527a3f770343
- domain: markthunder.xyz
- domain: noisebait.space
- domain: snailsreading.xyz
- url: https://api.github.com/repos/stamparm/maltrail/commits/d4ae22ca8a94e5fa87d270f1fb629f7d0c41ff0a
- domain: cdn.keoenxa.icu
- domain: joiewq.icu
- domain: koewna.icu
- domain: pqwoaa.icu
- domain: shootspirit.monster
- url: https://api.github.com/repos/stamparm/maltrail/commits/3e1fe536e464bde5f868331a3aeb6e4f8718af1b
- domain: flintazimuth.top
- domain: niujaus.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/9f161fede995485295fd9ba237af66efa9531d23
- domain: country-selected.com
- url: https://api.github.com/repos/stamparm/maltrail/commits/7c36f7920f4c2e71fb18fc97f68f2f972313f634
- ip: 145.63.138.63
- ip: 145.63.138.87
- ip: 2.24.128.29
- ip: 46.225.113.75
- ip: 89.124.93.136
Maltrail IOC for 2026-07-29
Description
Maltrail IOC for 2026-07-29
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The report provides an IOC from Maltrail for the date 2026-07-29, sourced from CIRCL OSINT Feed. It is categorized as an observation of network activity linked to malware with medium risk. There are no indicators or technical specifics included, and no affected software versions or exploits in the wild are noted. This is an intelligence feed entry rather than a vulnerability or exploit report.
Potential Impact
The impact is limited to the identification of potential malicious network activity through the provided IOC. There is no direct vulnerability or exploit described, so no direct impact on software or systems is indicated.
Defensive Guidance
No patch or remediation is applicable for this IOC report. Security teams should integrate this IOC into their detection and monitoring tools as appropriate. No urgent action is mandated by the report itself.
Technical Details
- Uuid
- 9f824470-689b-4047-b487-03f572d4cb3f
- Original Timestamp
- 1785312022
Indicators of Compromise
Url
| Value | Description | Copy |
|---|---|---|
urlhttps://api.github.com/repos/stamparm/maltrail/commits/7c601edeef2fde8e0cf59c4f75886769efac7be5 | cyberstrikeai | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/176f0c7647b466722b3adb6159b38df2646ea0cd | apt_kimsuky | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/3c272e0ca10b8cdeb40d73bfa89e2d38e0ea883c | apt_unc2465 | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/598c331b4716422849e2ab62392861ae69d07580 | osx_nova | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/55df262fc55d0e203c1498f25e19527a3f770343 | offloader | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/d4ae22ca8a94e5fa87d270f1fb629f7d0c41ff0a | android_fvncbot | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/3e1fe536e464bde5f868331a3aeb6e4f8718af1b | ek_zphp | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/9f161fede995485295fd9ba237af66efa9531d23 | magentocore | |
urlhttps://api.github.com/repos/stamparm/maltrail/commits/7c36f7920f4c2e71fb18fc97f68f2f972313f634 | sectoprat |
Ip
| Value | Description | Copy |
|---|---|---|
ip103.118.42.79 | cyberstrikeai | |
ip181.215.205.246 | cyberstrikeai | |
ip23.95.130.140 | cyberstrikeai | |
ip38.55.132.229 | cyberstrikeai | |
ip38.76.201.231 | cyberstrikeai | |
ip38.95.74.4 | cyberstrikeai | |
ip43.156.118.105 | cyberstrikeai | |
ip145.63.138.63 | sectoprat | |
ip145.63.138.87 | sectoprat | |
ip2.24.128.29 | sectoprat | |
ip46.225.113.75 | sectoprat | |
ip89.124.93.136 | sectoprat |
Domain
| Value | Description | Copy |
|---|---|---|
domainagent-old-export.zeabur.app | cyberstrikeai | |
domainagent-pppp.zeabur.app | cyberstrikeai | |
domainhuoshan.sbs | cyberstrikeai | |
domaink8adm.huoshan.sbs | cyberstrikeai | |
domainkali.huoshan.sbs | cyberstrikeai | |
domainluodi.huoshan.sbs | cyberstrikeai | |
domainabandon.dynuddns.net | apt_kimsuky | |
domainable.dynu.org | apt_kimsuky | |
domainabout.dynu.net | apt_kimsuky | |
domainabout.dynuddns.net | apt_kimsuky | |
domainabsorb.dynuddns.net | apt_kimsuky | |
domainabstract.dynuddns.net | apt_kimsuky | |
domainabuse.dynu.org | apt_kimsuky | |
domainaccident.dynu.org | apt_kimsuky | |
domainaccident.dynuddns.net | apt_kimsuky | |
domainaccount.dynu.net | apt_kimsuky | |
domainaccount.dynuddns.net | apt_kimsuky | |
domainapp.donply.pw | apt_kimsuky | |
domainauction.dynu.net | apt_kimsuky | |
domaincnhisrps.dynu.net | apt_kimsuky | |
domainedoc.abstract.dynuddns.net | apt_kimsuky | |
domainedoc.view.dynu.net | apt_kimsuky | |
domainedocservice-kakao.dynu.net | apt_kimsuky | |
domainhslnistms.dynu.org | apt_kimsuky | |
domainhsnivnidl.dynu.net | apt_kimsuky | |
domaininrestrictblocks.dynu.net | apt_kimsuky | |
domainlocnhis.dynu.org | apt_kimsuky | |
domainmlsintms.dynu.org | apt_kimsuky | |
domainmoisedow.dynu.net | apt_kimsuky | |
domainmoisedow.dynuddns.net | apt_kimsuky | |
domainmoscop.dynu.net | apt_kimsuky | |
domainmsdnsmt.dynu.org | apt_kimsuky | |
domainmsdtnsmsu.dynu.org | apt_kimsuky | |
domainmsnhor.dynu.org | apt_kimsuky | |
domainmsutsidmc.dynu.org | apt_kimsuky | |
domainncodgtcheck.dynu.org | apt_kimsuky | |
domainncodguverify.dynu.org | apt_kimsuky | |
domainncodgvcheck.dynu.org | apt_kimsuky | |
domainncodgxcheck.dynu.org | apt_kimsuky | |
domainncodhancheck.dynu.org | apt_kimsuky | |
domainncodhanpass.dynu.org | apt_kimsuky | |
domainncodhaverify.dynu.org | apt_kimsuky | |
domainnhis-edoc-cigarette.dynuddns.net | apt_kimsuky | |
domainnhis-edoc-sign.dynuddns.net | apt_kimsuky | |
domainnhis.abandon.dynuddns.net | apt_kimsuky | |
domainnhis.able.dynu.org | apt_kimsuky | |
domainnhis.about.dynu.net | apt_kimsuky | |
domainnhis.about.dynuddns.net | apt_kimsuky | |
domainnhis.absorb.dynuddns.net | apt_kimsuky | |
domainnhis.abuse.dynu.net | apt_kimsuky | |
domainnhis.abuse.dynu.org | apt_kimsuky | |
domainnhis.accident.dynu.org | apt_kimsuky | |
domainnhis.accident.dynuddns.net | apt_kimsuky | |
domainnhis.account.dynu.net | apt_kimsuky | |
domainnhis.account.dynuddns.net | apt_kimsuky | |
domainnhis.dynuddns.net | apt_kimsuky | |
domainnhis.edoc.abstract.dynuddns.net | apt_kimsuky | |
domainnhis.edoc.view.dynu.net | apt_kimsuky | |
domainnhisotps.dynu.net | apt_kimsuky | |
domainnhpayrestrict.dynu.net | apt_kimsuky | |
domainnhsintdle.dynu.net | apt_kimsuky | |
domainnipsverifications.dynu.net | apt_kimsuky | |
domainnlsdtime.dynu.net | apt_kimsuky | |
domainnlskghsu.dynu.net | apt_kimsuky | |
domainnsmcihsd.dynu.org | apt_kimsuky | |
domainntclos.dynu.net | apt_kimsuky | |
domainopcnhis.dynu.org | apt_kimsuky | |
domainpublishndocs.dynu.net | apt_kimsuky | |
domainpvcntse.dynu.org | apt_kimsuky | |
domainshop.favnshield.fun | apt_kimsuky | |
domainsmchecksm.dynu.org | apt_kimsuky | |
domainsnkenafse.dynu.net | apt_kimsuky | |
domainusrprofileoption.dynu.net | apt_kimsuky | |
domainusrprofileoptions.dynu.net | apt_kimsuky | |
domainview.dynu.net | apt_kimsuky | |
domainvipsdoc.dynu.net | apt_kimsuky | |
domainarcyloriantech.com | apt_unc2465 | |
domainhunherbal.com | apt_unc2465 | |
domainurovitalmagyar.com | apt_unc2465 | |
domaingulderopre.club | osx_nova | |
domainmarkthunder.xyz | offloader | |
domainnoisebait.space | offloader | |
domainsnailsreading.xyz | offloader | |
domaincdn.keoenxa.icu | android_fvncbot | |
domainjoiewq.icu | android_fvncbot | |
domainkoewna.icu | android_fvncbot | |
domainpqwoaa.icu | android_fvncbot | |
domainshootspirit.monster | android_fvncbot | |
domainflintazimuth.top | ek_zphp | |
domainniujaus.com | ek_zphp | |
domaincountry-selected.com | magentocore |
Threat ID: 6a69c6329c2644c7f84222f0
Added to database: 07/29/2026, 09:21:54 UTC
Last enriched: 08/05/2026, 18:36:35 UTC
Last updated: 09/09/2026, 17:33:29 UTC
Views: 101
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.