Forensia: Free Threat Intelligence Lookup

FORENSIA

Indicator investigation

warming up…

Resolving indicator evidenceacquiring

Loading verdict, provenance, relationships and sightings.

Opening Forensia workspaceacquiring

Loading the current evidence view. Navigation and account controls remain available.

Loading recent evidenceacquiring

Verdict

KNOWN MALWARE — Unidentified_001

What is this: Malware domain — Unidentified_001. Registered 9 months ago.
Should you care: Yes — Unidentified_001 is known-malicious, attributed by name.
What to do: Block it.

INVESTIGATEMODERATE EVIDENCE COVERAGEDeterministic · stored evidence only

Domain investigation

Unidentified macOS 001 (UnionCryptoTrader) command-and-control infrastructure

The warehouse identifies this domain as Unidentified macOS 001 (UnionCryptoTrader). It was registered 9 months ago. 1 stored citation support the local history. Domain ownership, hosting, and content can change, so attribution remains bounded to the cited observation.

Observed role

Command-and-control infrastructure

Role derived only from stored classifications and tags.

Registration

9 months ago

2025-11-20 · Web Commerce Communications Limited dba WebNic.cc

Certificate history

Not established

Certificate Transparency lookup did not complete.

Current DNS

2 current IPv4 addresses

188.114.96.3, 188.114.97.3 · observed 2026-08-07

Corpus evidence

1 connectors · 1 citations

Generic co-tags were excluded to avoid false relationships.

Observation window

2025-12-15 → 2026-08-20

First and last appearance in the local corpus, not global activity dates.

What the evidence supports

Findings stay bounded to named sources and observable infrastructure.

2 findings

Unidentified macOS 001 (UnionCryptoTrader)

MODERATE

Stored source metadata classifies this domain as command-and-control infrastructure.

botnet_cc · 1 stored observation

The classification applies to the observed domain at that time; it does not identify the current registrant or operator.

Current DNS infrastructure is available for pivoting

MODERATE

The domain resolved to 188.114.96.3, 188.114.97.3 when checked on 2026-08-07.

Live DNS or stored domain-resolution connector

A record is point-in-time and may be a shared CDN, proxy, or rapidly changing host.

What remains unknown

Certificate Transparency did not complete, so issuance history is unknown.
No explicitly tagged family or campaign peer is available; generic co-tags were not treated as relationships.
Domains can be transferred, parked, sinkholed, or repointed after the recorded observation.

What this is

Domain indicator: mioisiskwowiwjowuwjwolab.club

Live page

Screenshot of the actual page, via urlscan.io. Hover to view full.

urlscan screenshot of https://mioisiskwowiwjowuwjwolab.club/login

via urlscan.io· scanned 2026-01-29

related indicators · 14

Graph preview

Neighborhood topology. Open the graph for interactive pivots.

Open full investigation canvas →

Building relationship previewacquiring

Loading connected indicators, reports and entities.

Continue investigation

High-signal pivots without leaving the thread you started in search.

Related alerts, reports, and entities
Structured pivots from local graph context.
Open in graph
Full investigation canvas with neighbor expansion.