IOC Radar
DomainMediumSignal 0/100

cardpayment.microransom.us

First Seen
Apr 11, 2026
Last Seen
Apr 24, 2026
Apr 11
First Seen
70d ago
Apr 24
Last Seen
57d ago
1
Reports
source reports
0%
Confidence
medium
Found in 1 report. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
0%
Signal Score
0 / 100
IDS Rule
No
Threat Context
Tags

Feed Intelligence Summary

1 report0% confidence
1
Source reports
0%
Confidence score
Category tags
indicatornetworkresearched

Activity Timeline

1 total obs
Apr 24Apr 24

Threat Activity Heatmap

· Peak: 2026-04-24
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This indicator, `cardpayment.microransom.us`, has been identified within threat intelligence feeds. However, it holds a threat score of 0.0 and is explicitly whitelisted, indicating it is currently considered benign or harmless. Its presence does not suggest an active compromise or an imminent threat to organizational systems. While its inclusion in threat intelligence may seem concerning at first glance, there is no corroborating evidence to suggest malicious activity. Therefore, this IOC is cl…

Threat ScoreLow Risk
0
SIGNAL
Signal Score
0%
Confidence
1
Reports
First seenApr 11, 2026
Last seenApr 24, 2026

VirusTotal

Not checked

WHOIS

registrar
Gandi SAS
raw
Admin City: Clearwater Admin Country: US Admin Email: [email protected] Admin Organization: KnowBe4 Admin Postal Code: 33755 Admin State/Province: FL Creation Date: 2014-07-18T10:33:30Z DNSSEC: unsigned Domain Name: microransom.us Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: ns-1473.awsdns-56.org Name Server: ns-1653.awsdns-14.co.uk Name Server: ns-648.awsdns-17.net Name Server: ns-87.awsdns-10.com Registrant Application Purpose: 97f9aa8e7c9dcd53 Registrant City: 9f17c16e0cbd11e5 Registrant Country: US Registrant Email: [email protected] Registrant Fax Ext: 3432650ec337c945 Registrant Fax: 3432650ec337c945 Registrant Name: 24277ff58446df8f Registrant Nexus Category: bf1e48e0de7e5ac5 Registrant Organization: cc2a1400bee48afc Registrant Phone Ext: 3432650ec337c945 Registrant Phone: 6099a769d1923d4a Registrant Postal Code: f28adb1ee249d449 Registrant State/Province: 6eb233f5a5adbed8 Registrant Street: 28651bdeab6813b9 Registrant Street: 3432650ec337c945 Registrant Street: 7285ce853b13d7e7 Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +33.170377661 Registrar IANA ID: 81 Registrar URL: whois.gandi.net Registrar: Gandi SAS Registry Admin ID: C8754E3D1FC2F40FE91893A2E02F156F8-NSR Registry Domain ID: D46018682-US Registry Expiry Date: 2026-07-17T23:59:59Z Registry Registrant ID: C8754E3D1FC2F40FE91893A2E02F156F8-NSR Registry Tech ID: C8754E3D1FC2F40FE91893A2E02F156F8-NSR Tech City: Clearwater Tech Country: US Tech Email: [email protected] Tech Organization: KnowBe4 Tech Postal Code: 33755 Tech State/Province: FL Updated Date: 2025-06-18T00:05:25Z

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 1 month ago
Appeared in 1 threat report