IOC Radar
DomainMediumSignal 12/100

clubtelco.com

Location
ArubaAruba
First Seen
Apr 20, 2025
Last Seen
Aug 29, 2025
Apr 20
First Seen
433d ago
Aug 29
Last Seen
301d ago
2
Reports
source reports
12%
Confidence
medium
Found in 2 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
12%
Signal Score
12 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

47 techniques

Feed Intelligence Summary

2 reports12% confidence
2
Source reports
12%
Confidence score
Category tags
academic institutionsactive scanningarubaaustraliabotnetbrrnyaw8 peexebrute forcecanadacertificate analysiscode injectioncommand and controlcondrv textcredential accessdata exfiltrationdistributed attackseducationeducational resourceseducational serviceseducational technologyelectronic health recordsentitygegkn peexehd0 bluescsihd1 bluescsihealth care and social assistancehealth information technologyhealthcare information systemshero designerhigher educationhistorical sslhospital managementindicatorinformation technologyit infrastructurek-12 educationlettermalicious network activitymalicious softwaremalwaremedical servicesnetherlandsnetworknetwork scanningno meaningfuloceaniapanamapatient carepleaseprocess injectionreconnaissanceresearchedsoftware developmentsslt1005t1016t1018t1027t1036t1047t1048t1053t1055t1057t1059t1059.007t1068t1071t1071.001t1078t1082t1083t1105t1190t1204t1204.001t1486t1496t1499.002t1499.003t1547t1565t1566t1567t1574t1583t1584t1586t1587t1588t1589t1590t1591t1592t1593t1594t1595t1595.001t1595.002t1595.003t1598web exploitation

Activity Timeline

1 total obs
Aug 29Aug 29

Threat Activity Heatmap

· Peak: 2025-08-29
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain **clubtelco.com**, originating from Aruba, has emerged as a significant indicator of compromise (IOC) in recent threat intelligence reports. First observed on April

Threat ScoreLow Risk
12
SIGNAL
Signal Score
12%
Confidence
2
Reports
First seenApr 20, 2025
Last seenAug 29, 2025

VirusTotal

Not checked

WHOIS

description
Quick look at XUSOM
domain rank
-1
references
https://www.virustotal.com/graph/embed/gb4b60d48558e41e6a7f35bc267b94c247e75f61fcc1b4ca68cc45e49cf626be8?theme=dark, https://www.virustotal.com/gui/collection/6aa3f483cde0f6cd32061b192f75c13358eb90f3a10343feba94d4e44a6c1b74/iocs
subdomains count
18

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 10 months ago
Appeared in 2 threat reports