dosya.co

Classification: Whitelisted

dosya.co is a whitelisted (trusted) hostname. Reported by 5 threat sources, last seen 2026-09-03. IoC context and downloadable threat intel on Maltiverse.

Current activity

  • Online — resolving/reachable. Last checked 2026-09-03 06:36:43.
  • Command & Control server — Used by cybercriminals to control victim computers.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087) ANDRORAT (S0292) DARKCOMET (S0334)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Top Popularity Site Tranco 2026-04-04 19:49:34 2026-09-03 06:36:44 benign
Hawkeye Triage 2026-08-30 14:57:42 2026-08-30 14:57:42 malicious-activity
Darkcomet Triage 2026-03-27 18:03:25 2026-08-21 12:32:36 malicious-activity S0334 DarkComet
Androrat Triage 2026-08-19 17:08:27 2026-08-19 17:08:27 malicious-activity S0292 AndroRAT
Quasar Triage 2026-07-18 02:56:32 2026-08-16 14:05:06 malicious-activity
Xworm Triage 2026-07-18 03:01:46 2026-08-10 20:11:50 malicious-activity
Ratonrat Triage 2026-08-07 22:18:07 2026-08-07 22:18:07 malicious-activity
Darksiderat Triage 2026-07-28 19:50:10 2026-07-28 19:50:10 malicious-activity
Exelastealer Triage 2026-07-22 13:11:49 2026-07-22 13:11:49 malicious-activity
Luna_stealer Triage 2026-07-18 20:47:37 2026-07-18 20:47:37 malicious-activity
Blankgrabber Triage 2026-02-27 22:04:47 2026-07-18 04:09:42 malicious-activity
Suspicious URL Triage 2026-05-18 23:46:11 2026-07-11 22:09:42 anomalous-activity malicious-activity
Arsink Triage 2026-06-27 11:20:53 2026-06-27 11:20:53 malicious-activity
Asyncrat Triage 2026-04-08 03:41:22 2026-06-15 14:26:29 malicious-activity S1087 AsyncRAT
Xmrig Triage 2026-06-03 20:07:14 2026-06-03 20:07:14 malicious-activity
Killmbr Triage 2026-05-22 12:55:04 2026-05-22 12:55:04 malicious-activity
Malicious URL Triage 2026-02-09 13:01:49 2026-04-21 14:09:51 malicious-activity
Top Popularity Site Cisco Umbrella 2022-07-19 05:23:33 2023-10-16 01:30:41 benign
Alexa Top 1 Million Alexa 2020-04-21 01:11:12 2022-07-05 02:11:34 benign
Malicious site Hybrid-Analysis 2021-08-09 15:01:00 2022-01-12 15:30:23

Tags

collection credential_access defense_evasion discovery execution persistence privilege_escalation spyware stealer upx blankgrabber pyinstaller ransomware darkcomet sazan0 rat trojan sazan bootkit asyncrat default adware killmbr wiper xmrig miner suricata arsink android quasar office04 xworm luna_stealer exelastealer darksiderat ratonrat costura packer guest16 androrat infostealer metasploit office04g backdoor hawkeye keylogger

IP addresses resolved by this hostname

Whois information

AS name
AS206617 East Pro Consulting S.r.l.
Domain
dosya.co
TLD
co
First indexed
2020-04-21 01:11:12
Last updated
2026-09-03 06:36:44