Source descriptions describe reported observations. They are not a CTIDAO verdict.
This source did not provide an event description.
malware · malicious
First observed date unavailable · Last observed date unavailable
Reported source: CTIBrain;role=reported_malicious_url;tier=research;first=2026-11-03T11:23:59Z;seen=2026-11-03T11:23:59Z;expires=2026-11-06T11:23:59Z;state=active;via=tweetfeed
2 observed relationships
1 current DNS records
Listed in top1m.org
Popularity is neutral context, not threat evidence.
Use the evidence tabs to inspect complete observations and follow related entities. An absence of observations does not establish safety.
| Indicator | Type | Tag | Source | Last seen |
|---|---|---|---|---|
| http://github.com/udt-101026 | url | malware, malicious | Published 2026-11-03 11:47:43 |
Observed relationships do not establish maliciousness.
| Hostname | IP | Last seen | Hits | Provenance |
|---|---|---|---|---|
| github.com | 140.82.121.3 | Oct 2026First seen: Apr 2025 | 21 | Provider + CTIDAO |
| github.com | 140.82.121.4 | Oct 2026First seen: May 2025 | 25 | Provider + CTIDAO |
Active DNS lookup; this is separate from passive DNS history.
Checked 10/18/2026, 6:48:09 PM
Daily link and hosting prominence from top1m.org; not a security verdict or traffic estimate.
2 public pDNS relationships are available. Account research adds exact timing, focused pivots, and matching paid-feed intelligence.