DomainMediumSignal 69/100
0cbcq8mu.com
Location
First Seen
Dec 29, 2024
Last Seen
Jun 14, 2026
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
8 reports69% confidence
8
Source reports
69%
Confidence score
Category tags
account brute forceactive scanningaerospace & defenseanomalyaptattackauthentication attackauthentication attemptautoitbase64 encodingbrute forcebrute force attackc2 communicationc2 fourthstagec2 httpc2s indicatorcertcivil servicescode injectioncommand and controlcommand executioncommunication protocolcommunication technologiescompromised websitecompromised websitescredential accesscredential harvestingcredential stuffingcredential theftdata exfiltrationdata theftdefensedefense contractingdefense logisticsdefense systemsdefense technologydenial of servicediscorddoenerium stealerdrive-by compromisedropperencryptenergyenergy distributionenterprise securityevasion techniquesfourth stage malwareftpftp brute forcegithubgithub hostinggovernment technologyhigher educationhttp attackhttp brute forcehttp scannerhttpsillegal streaming sitesimapindicatorinformation stealerinformation technologyinfostealerinfrastructure acquisitionreconnaissanceinput validation bypassit infrastructurelarge-scale infostealer campaignlummalumma stealermalicious activitymalicious linksmalicious powershell activitymalvertisingmalwaremicrosoft defendermilitary operationsmobile carriersmobile networksmulti-stage attacknational securitynetsupport ratnetworknetwork activitynetwork attacksnetwork protocolnetwork reconnaissancenetwork scanningnetwork securitynorth americansisoil & gasoil and gasoperating systempassword attackspatch managementpath traversalphishingphishing attackpower generationpower systemsprojectprotocol exploitationpsexecpublic administrationpublic infrastructurepublic policyratreconnaissanceregulatory agenciesremote access trojanrenewable energyresearchedscanning activityscripting attackssecond stage malwareserviceservice exploitationsmtpsocial engineeringsoftware developmentsoftware vulnerabilitiesssh attackstorm-0408t1003t1003.001t1005t1012t1018t1021t1021.001t1027t1036t1040t1041t1046t1049t1053.005t1055t1056t1056.001t1057t1059t1059.001t1059.003t1059.005t1059.007t1069.001t1071t1071.001t1078t1082t1083t1086t1090t1104t1105t1110t1110.001t1110.002t1110.003t1110.004t1113t1123t1125t1127t1140t1176t1189t1190t1204t1204.001t1204.002t1218.005t1499.002t1499.003t1547t1547.001t1553t1555t1566t1566.001t1566.002t1566.003t1584t1587.001t1588t1588.006t1589t1590.001t1595t1595.001t1595.002t1595.003tabletcp protocoltelecom servicestelecommunicationstelnet threatthreat actortimegeneratedturkeytwittertypetype httptype httpsunited statesurls indicatoruser agentweb application exploitationweb exploitationweb securityweb traffic
Activity Timeline
Jun 14Jun 14
Threat Activity Heatmap
· Peak: 2026-06-14LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
8
Reports
First seenDec 29, 2024
Last seenJun 14, 2026
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 12 days ago
Appeared in 8 threat reports