ThreatFox IOC Database
You are viewing the ThreatFox database entry for domain ays.gamepazarin.com.
Database Entry
| IOC ID: | 1902969 |
|---|---|
| IOC: | ays.gamepazarin.com |
| IOC Type : | domain |
| Threat Type : | botnet_cc |
| Malware: | Unknown Stealer |
| Confidence Level : | Confidence level is high (100%) |
| Is compromised? : | False |
| First seen: | 2026-09-06 18:25:58 UTC |
| Last seen: | never |
| UUID: | fd28b84d-aa1f-11f1-b569-42010aa4000a |
| Reporter |  devmihaylov |
| Reward |
10 credits from asdasdasdasd3e2 |
| Tags: | java MythStealer RAT stealer |
| Reference: | https://x.com/devmihaylov/status/2096664388849615038 |
devmihaylov
Myth Stealer 3.2-FIX backup HTTPS C2, hardcoded in the stage 3 payload alongside 146.19.191.11, serving the same protocol at /s, /e and /l. It is a typosquat of the legitimate Turkish game marketplace gamepazari.comNXDOMAIN as of 2026-09-06, the whole domain was pulled from the .com zone.