delta.com.de
Classification: Malicious
delta.com.de is a malicious hostname. Linked to Darkcomet malware. 7 sightings from Threat Observatory and Triage (Malicious URL), last seen 2026-04-16.
Current activity
- Online — resolving/reachable. Last checked 2026-10-18 08:39:59.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: DARKCOMET (S0334)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in BR and US, across education networks.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Darkcomet | Maltiverse Threat Observatory | 2026-04-16 21:10:09 | 2026-04-16 21:10:09 | anomalous-activity country_code:br country_code:us industry:education-and-nonprofits malware | S0334 DarkComet |
| Darkcomet | Triage | 2026-04-16 20:13:23 | 2026-04-16 20:13:23 | malicious-activity | S0334 DarkComet |
| Malicious URL | Triage | 2026-04-16 19:38:09 | 2026-04-16 19:38:09 | malicious-activity |
Tags
discovery darkcomet guest1111 defense_evasion persistence rat trojanIP addresses resolved by this hostname
- 172.67.164.105 (2026-09-19 04:31:13)
- 104.21.50.171 (2026-09-19 04:31:13)
- 2606:4700:3036::6815:32ab (2026-10-03 08:37:26)
- 2606:4700:3032::ac43:a469 (2026-10-03 08:37:26)
- 172.64.80.1 (2026-10-18 08:39:59)
- 2606:4700:130:436c:6f75:6466:6c61:7265 (2026-10-18 08:39:59)
Whois information
- Domain
- com.de
- TLD
- de
- First indexed
- 2026-04-16 19:56:04
- Last updated
- 2026-10-18 08:39:59