DomainMediumSignal 43/100
baltfishplus.ru
First Seen
Jun 28, 2025
Last Seen
Jun 8, 2026
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
43%
Signal Score
43 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
6 reports43% confidence
6
Source reports
43%
Confidence score
Category tags
account discoveryaccount profilingaccount takeoveractive scanattachment based attackattachment exploitationattachment phishingbecbec attackbrand impersonationbrute forcebusiness email compromisecommunication protocolcredential accesscredential harvestingcredential stuffingcredential theftcredential-harvestingcredential_harvestingcredential_phishingdata exfiltrationdata store exposureemail-fraudeurope/asiaexploitation activityfinancefraudhttp scannerhttpsidentity & access exploitationindicatorindicators of compromiseinfrastructure acquisitionreconnaissanceinitial accessinjection activitylink injectionlink manipulationlink phishinglink redirectionmalicious attachmentmalicious linkmalicious linksmalicious softwaremalicious urlsmalicious_attachmentmalicious_urlmalwaremalware deliverymalware distributionnetworkphishingphishing activityphishing attackphishing campaignphishing indicatorsphishing-databaseprocess injectionransomwareresearchedrussiascams & fraudsecurity awarenesssecurity operationssmtpsocial engineeringspearphishingt1055t1071.001t1078t1078.003t1189t1190t1192t1204t1204.001t1486t1499.002t1535t1539t1550t1565t1566t1566.001t1566.002t1566.003t1566.004t1567t1567.001t1587.001t1590.001t1598t1598.003threat actorthreat detectionthreat intelligencethreat intelligence feedthreat_intelligencetor nodeweb securityweb traffic
Activity Timeline
Jun 8Jun 8
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
43
SIGNAL
Signal Score
43%
Confidence
6
Reports
First seenJun 28, 2025
Last seenJun 8, 2026
VirusTotal
Not checked
WHOIS
- description
- LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
- domain rank
- -1
- subdomains count
- 1
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 11 months ago · Last seen 2 days ago
Appeared in 6 threat reports