kkkwork.org/online/devices

domain not resolving

Tracked by C2 Tracker · Updated as of 2026-10-07 · Whois queried 2026-10-07T14:55:21

Registration

Registrar
—
Registered
—
Expires
—

DNS

Resolves to
—
Nameservers
—
Status
—

Observed in malware

FamilySample SHA-256First seen
SMS-Eye (provisional) b44270b7f7d5… 2025-06-13

Signing certificate

Subject CN
BotSigner
Issuer CN
BotSigner
Valid
2025-03-19 → 2052-08-04
Fingerprint
6e1c70020afda44cd0e6ff17ea0e069dea5d521a2bb6604a2ae7bda69c72d7c1

Other samples signed with this certificate? That's a lead worth checking — but not proof of a shared operator, since signing keys (and the Android debug certificate in particular) are widely reused. See the certificate page for every sample signed with it.