ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain spellmarketplace.club.

Database Entry


IOC ID:1796615
IOC: spellmarketplace.club
IOC Type :domain
Threat Type :botnet_cc
Malware: Stealc
Confidence Level : Confidence level is high (100%)
Is compromised? : False
ASN:AS13335 CLOUDFLARENET
Country:- US
First seen:2026-04-23 14:00:53 UTC
Last seen:never
UUID:609b6ed5-3f19-11f1-8759-42010aa4000a
Reporter o_zehentleitner
Reward 5 credits from ThreatFox
Tags:github-typosquatting nailproxy Stealc unicorn-binance-websocket-api
Reference: https://blog.technopathy.club/nailproxy-space-github-malware-campaign

Avatar
o_zehentleitner
StealC v2 exfiltration C2. Same URL path schema /<24-char-id>/[h|g|u] as 62.60.226.113:6673 — operator's dedicated exfil domain.