ThreatFox IOC Database

You are viewing the ThreatFox database entry for url https://api.nailproxy.space/api/v1/data/sync.

Database Entry


IOC ID:1796614
IOC: https://api.nailproxy.space/api/v1/data/sync
IOC Type :url
Threat Type :payload_delivery
Malware: Stealc
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-04-23 14:00:54 UTC
Last seen:never
UUID:5c8bd2fb-3f19-11f1-8759-42010aa4000a
Reporter o_zehentleitner
Reward 5 credits from ThreatFox
Tags:github-typosquatting nailproxy Stealc unicorn-binance-websocket-api
Reference: https://blog.technopathy.club/nailproxy-space-github-malware-campaign

Avatar
o_zehentleitner
Stage-2 delivery: signed challenge returns AES-GCM-encrypted Windows PE payload.