IOC Radar
DomainMediumSignal 26/100

hp.kt168.org

First Seen
Jul 17, 2025
Last Seen
Feb 19, 2026
Jul 17
First Seen
339d ago
Feb 19
Last Seen
122d ago
1
Reports
source reports
26%
Confidence
medium
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
26%
Signal Score
26 / 100
IDS Rule
No
Threat Context
Tags

Feed Intelligence Summary

1 report26% confidence
1
Source reports
26%
Confidence score
Category tags
indicatornetworkresearched

Activity Timeline

1 total obs
Feb 19Feb 19

Threat Activity Heatmap

· Peak: 2026-02-19
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain `hp.kt168.org` has been identified as an Indicator of Compromise (IOC) with a threat score of 25.65, signaling a potential association with malicious activities. This IOC is notably listed in Maltrail Malware Feeds, which strongly suggests its involvement in malware distribution, command and control (C2) operations, or other hostile network interactions. The unaddressed presence of this domain in an organizational environment could expose systems to compromise, potentially leading to …

Threat ScoreLow Risk
26
SIGNAL
Signal Score
26%
Confidence
1
Reports
First seenJul 17, 2025
Last seenFeb 19, 2026

VirusTotal

Not checked

WHOIS

registrar
Gname.com Pte. Ltd.
creation date
2025-03-29T13:35:45
expiration date
2027-03-29T13:35:45
updated date
2026-04-02T07:21:31
name servers
a2.share-dns.com, b2.share-dns.net
emails
[email protected]
status
clientTransferProhibited https://icann.org/epp#clientTransferProhibited

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 11 months ago · Last seen 4 months ago
Appeared in 1 threat report