IOC Radar
DomainHighVerifiedSignal 38/100

analytics.dermloop.io

First Seen
Mar 19, 2024
Last Seen
Mar 27, 2026
Mar 19
First Seen
814d ago
Mar 27
Last Seen
76d ago
4
Reports
source reports
38%
Confidence
high
Found in 4 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
38%
Signal Score
38 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

31 techniques

Feed Intelligence Summary

4 reports38% confidence
4
Source reports
38%
Confidence score
Category tags
.cc domainacceptaccount compromiseaccount discoveryaccount manipulationaccount profilingaccount takeoveractive scanninganalysis ob0001analysis ob0002ascii textblack bastablack-bastabotnetbotnet activitycatalog treecjutxgcnamecnmicrosoft ecccommandcommand and controlcontrol ta0011country namecovacova cryptbotcredential accesscryptbotcus subjectdatadata deletiondata exfiltrationdata oc0004defense evasiondenial of servicedistributed attacksdnsedgeerror httpsevasion ta0005exchange metafollow bot activitygeckoget httpget httpsgoogle taggtmkvjvztk dlhtml documenthtml interneticmpiframe tagsimpact ta0040indicatorkhtmllearnmalicious softwaremalwaremutexes nothingnetworknetwork probingnothingnumberob0007 impactob0012 fileomicrosoft copen threatportpost httpsprocess injectionprocess oc0003reconnaissancerequestresearchedresolved ipsscript tagsself-signedserver casnisocial media attacksocial media manipulationstealerstwa lredmondsystem oc0001t1005t1027t1055t1059t1068t1071t1071.001t1078t1105t1189t1190t1204t1485t1486t1496t1499t1499.002t1499.003t1564t1565t1566t1567t1573t1583t1583.001t1588.002t1589t1595t1595.001t1595.002t1595.003ta0004 defenseta0009 commandtags twittertlstwitterupdate securewindows nt

Activity Timeline

1 total obs
Mar 27Mar 27

Threat Activity Heatmap

· Peak: 2026-03-27
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **analytics.dermloop.io** has been identified as a critical indicator of compromise (IOC) associated with botnet and malware activities. First observed on March

Threat ScoreLow Risk
38
SIGNAL
Signal Score
38%
Confidence
4
Reports
First seenMar 19, 2024
Last seenMar 27, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

registrar
NameCheap, Inc.
description
Surprised: Follow bot account affects threat researcher(s)account(s). % path , attempts DoS. Threatening account name,. (00285c99b52d41679b1aa3b8a80895b037df8a7500f4ad97ce06068eac4a95b7 | = follow) || {2025-05-20_bf3a6ba6e3421a7214ffbfe97642a578_amadey_black-basta_cova_cryptbot_elex_luca-stealer FastCopy5.9.0.exe} ET DNS Query for .cc PROTOCOL-ICMP PATH MTU denial of service attempt PROTOCOL-ICMP Destination Unreachable Fragmentation Needed and DF bit was set
raw
Admin City: REDACTED FOR PRIVACY Admin Country: REDACTED FOR PRIVACY Admin Organization: REDACTED FOR PRIVACY Admin Postal Code: REDACTED FOR PRIVACY Admin State/Province: REDACTED FOR PRIVACY Creation Date: 2020-09-28T09:57:47Z DNSSEC: unsigned Domain Name: dermloop.io Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: dns1.registrar-servers.com Name Server: dns2.registrar-servers.com Registrant City: 1f8f4166599d23ee Registrant Country: IS Registrant Email: f651612a2f356ad3s@ Registrant Fax Ext: 1f8f4166599d23ee Registrant Fax: 1f8f4166599d23ee Registrant Name: 1f8f4166599d23ee Registrant Organization: 4b7a0912c26a13e2 Registrant Phone Ext: 1f8f4166599d23ee Registrant Phone: 1f8f4166599d23ee Registrant Postal Code: 1f8f4166599d23ee Registrant State/Province: 3e0204199d8ebf9c Registrant Street: 1f8f4166599d23ee Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.9854014545 Registrar IANA ID: 1068 Registrar URL: https://www.namecheap.com/ Registrar WHOIS Server: whois.namecheap.com Registrar: NameCheap, Inc. Registry Admin ID: REDACTED FOR PRIVACY Registry Domain ID: eb7e90b1407044f7a7185c6243ae5079-DONUTS Registry Expiry Date: 2028-09-28T09:57:47Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: REDACTED FOR PRIVACY Tech Country: REDACTED FOR PRIVACY Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2024-09-22T07:58:48Z

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 years ago · Last seen 2 months ago
Appeared in 4 threat reports