domain

telemetry.car-loans.io

Fabricated telemetry domain appearing only in @car-loans scope README text. Social engineering artifact — not confirmed functional C2. Declared opt-out: CAR_LOANS_NO_TELEMETRY=1. Actual exfiltration target is oob.moika.tech.

discovered 2026-05-28

Campaigns

Linked packages

Read the full analysis →