DomainMediumSignal 73/100
allsydevs.com
Location
GermanyFirst Seen
Mar 18, 2026
Last Seen
Jun 5, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
73%
Signal Score
73 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
10 reports73% confidence
10
Source reports
73%
Confidence score
Category tags
.net.net reactoracrstealeractive scanamadeyanzarcarmasciiasyncratattack_vector:deliverybackdoorbanking-trojan-frontendbase64-loaderbatbendigobotnetbotnet activitybotnetdomainbratbrute forcebrute_force_attackc2campaign:unknownchromeelevatorchromelevatorcode injectioncoinminercommand & controlcommand and controlcommand executioncommand_and_controlcommbankcommunication protocolcountloadercowrie honeypotcredential accesscredential harvestingcredential stuffingcredential_stuffingcryptocurrencycryptonecyber_attackdata encryptiondata exfiltrationdata store exposuredata_type:indicators_of_compromiseddosddos attacksddosagentdecoy systemdeudistributed attacksdownloaderdropped-by-amadeydropped-by-gcleanerdropperelfemotetencodedencryptioneuropeevent_type:malware_deliveryexeexecutable binaryexecutable fileexploitation activityextortionfake_ssaftpgafgytgermanyguloaderhajimehashheodohijackloaderhsbchtahttp scannerhttpsidentity & access exploitationindicatorindicatorsindicators_of_compromiseinfostealerinfrastructure acquisitionreconnaissanceingress tool transferinitial access attemptsinitial_accessinjection activityinternet of thingsiot botnetiot securityiot/ics attackisojarjpg-base64-loaderjs filejwrlateral movementlloydslodalodaratlualumma stealerlummastealerm68kmalicious linksmalicious powershell activitymalicious softwaremalicious_attachmentmalicious_urlmalvertisingmalwaremalware distributionmalware loadermalware_distributionmalware_name lummastealermassloggermeterpretermipsmiraimirai botnetmozimsimulti-architecture malwarenatwestnetworknetwork protocolnetwork_scanningopendirpaasphantomgatephantomstealerphishingphishing attackpluginpotassiumpowerpcpowershellprocess injectionprtps1pureratqantasquasarratransomwarerarratrbcremcosratremote accessremote access trojanremote servicesreport_source:ltna_cyberresearchedrev-base64-loaderrmmrustystealersaint helena, ascension and tristan da cunhasalatstealersantastealerscams & fraudscript executionscripting attackssilentnetsilverfoxsmartloadersmtpsocial engineeringsoftware_vulnerability_exploitationsparcssh attackssh monitoringstealerstgeorgesuncorpsuperhswzsystem disruptiont1021.001t1021.002t1027t1055t1059t1059.001t1059.007t1071t1071.001t1076t1077t1078t1086t1105t1110.002t1133t1189t1190t1204t1204.001t1204.002t1486t1490t1496t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1587.001t1590.001t1595targeting databasethreat actorthreat intelligencethreat_actor:unknownthreat_intelligencethreat_type:malwaretofseetor nodetrojan downloadertrojan malwaretrojan-downloaderua-mshtaua-wgetunited statesvbsvenomratvidarvipkeyloggervulnerability scanweb exploitationweb securityweb trafficwestpacwshratx86x86-32x86-64xmlxwormzigclipperzip
Activity Timeline
Jun 5Jun 5
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **allsydevs.com**, originating from Germany, has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats. First observed on March
Threat ScoreHigh Risk
73
SIGNAL
Signal Score
73%
Confidence
10
Reports
First seenMar 18, 2026
Last seenJun 5, 2026
VirusTotal
Not checked
WHOIS
- registrar
- Realtime Register B.V.
- description
- LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
- domain rank
- -1
- raw
- Creation Date: 2021-03-20T20:35:41Z DNSSEC: unsigned Domain Name: ALLSYDEVS.COM Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: NS1.ALLSYDEVS.COM Name Server: NS2.ALLSYDEVS.COM Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +31.384530759 Registrar IANA ID: 839 Registrar URL: http://www.realtimeregister.com Registrar WHOIS Server: whois.yoursrs.com Registrar: Realtime Register B.V. Registry Domain ID: 2599400540_DOMAIN_COM-VRSN Registry Expiry Date: 2027-03-20T20:35:41Z Updated Date: 2025-03-20T14:07:11Z
- references
- https://ltna.com.au/cyber, https://urlhaus.abuse.ch/browse/
- subdomains count
- 32
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 2 months ago · Last seen 1 day ago
Appeared in 10 threat reports