Derp.ca
Data by Hatching Triage opens in a new tab

maskgramstealer

C2 tracking

Seven-day C2 activity

Derp observations, rolling seven-day window

Observed infrastructure

Last seven days

First activity
Aug 6, 2026
Last activity
Aug 8, 2026
Feed role
C2 / Distribution
Host form
1 IP / 1 hostnames

Leading locations

  • LU1
  • US1

Leading providers

  • Cloudflare, Inc.1
  • Ghosty Networks LLC1

Infrastructure traits

  • Hosting 2
  • Anycast 1
  • Proxy 1

Samples

Recent associated samples

b19b9dc2315ab0cae11f295a640f85ea2ef617394a6cb268e9c4d569c8397ba7
Observed Aug 8, 2026Triage
2e2e035ece4accdee838ecaacdc263fa526939597954d18d1320d73c8bf810c2
Observed Aug 6, 2026Triage
2fd3e4fed8a88f9aa00a921cbb6fb564aa64943b20fc512ce3eb134d5ebfd2d3
Observed Aug 6, 2026Triage
401b70e0313d7f6dd1fd444a8d61e25ae433a5944a2607405fe5ddbc9b8f7afc
Observed Aug 6, 2026Triage
65ba3988d38f83b9ee1f31cafa5bd37dc6b72279f5618aac94d71a904efa0cac
Observed Aug 6, 2026Triage
b4a3205341b7d6eee7d8a810300a39960ac66c7fb89f585a06c6e1e921a49820
Observed Aug 6, 2026Triage

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.

Hatching Triage opens in new tab IPinfo opens in new tab urlscan.io opens in new tab Mallory opens in new tab eCrime.ch opens in new tab ransomware.live opens in new tab