DomainHighVerifiedSignal 53/100
alllianz.fr
Location
United StatesFirst Seen
Dec 2, 2023
Last Seen
Apr 7, 2026
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
53%
Signal Score
53 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
6 reports53% confidence
6
Source reports
53%
Confidence score
Category tags
botnetbotnet activitybrute forcecommand and controlcredential harvestingcredential stuffingdata exfiltrationdata store exposuredgadistributed attackseuropeexploitation activityfrancefraud domainsfraudulent websitesidentity & access exploitationindicatorinjection activitymalicious domainmalicious softwaremalwaremalware distribution domainsmalware domainsnetworknorth americaphishingphishing attackphishing domainsprocess injectionred flag domainsresearchedscams & fraudsocial engineeringt1055t1071t1071.001t1105t1189t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1583t1583.001t1588t1591united states
Activity Timeline
Apr 7Apr 7
Threat Activity Heatmap
· Peak: 2026-04-07LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **alllianz.fr** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnet activity, malware distribution, and phishing campaigns. First observed on December
Threat ScoreMedium Risk
53
SIGNAL
Signal Score
53%
Confidence
6
Reports
First seenDec 2, 2023
Last seenApr 7, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- registrar
- XNS Registrar B.V.
- description
- Entries from https://red.flag.domains/ - malicious domains targeting french citizens. Auto-updated each day.
- domain rank
- -1
- raw
- Expiry Date: 2025-12-29T11:32:07.370113Z country: NL created: 2024-12-29T11:32:07.394152Z domain: alllianz.fr e-mail: [email protected] e-mail: [email protected] eligsource: REGISTRAR eligstatus: ok eppstatus: active eppstatus: associated eppstatus: serverUpdateProhibited last-update: 2025-01-03T11:34:04.293444Z nic-hdl: CTC1415426-FRNIC nserver: ns1.dovendi.nl nserver: ns2.dovendi.eu nserver: ns3.dovendi.eu reachsource: REGISTRAR reachstatus: ok registered: 2014-04-21T00:00:00Z registrar: XNS Registrar B.V. source: FRNIC status: ACTIVE type: ORGANIZATION
- references
- https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt, https://dl.red.flag.domains/red.flag.domains.txt, https://www.trendmicro.com/en_us/research/23/i/cybercriminals-exploit-the-moroccan-tragedy-in-new-scam-campaign.html
- subdomains count
- 35
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 2 years ago · Last seen 2 months ago
Appeared in 6 threat reports