IOC Radar
DomainHighVerifiedSignal 82/100

cn-zh-ng28games.com

First Seen
Apr 16, 2026
Last Seen
Apr 23, 2026
Apr 16
First Seen
59d ago
Apr 23
Last Seen
53d ago
5
Reports
source reports
82%
Confidence
high
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
82%
Signal Score
82 / 100
IDS Rule
No
Threat Context
Tags

Feed Intelligence Summary

5 reports82% confidence
5
Source reports
82%
Confidence score
Category tags
dgaindicatornetworkresearched

Activity Timeline

1 total obs
Apr 23Apr 23

Threat Activity Heatmap

· Peak: 2026-04-23
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), a domain name identified as `cn-zh-ng28games.com`, carries a high threat score of 82.435 and is critically significant as it has been widely flagged across multiple reputable threat intelligence feeds, including the Phishing Army Extended Domain List and ThreatHose. The presence of this domain in such feeds strongly indicates its likely involvement in sophisticated phishing campaigns or other malicious activities designed to compromise organizational assets. F…

Threat ScoreHigh Risk
82
SIGNAL
Signal Score
82%
Confidence
5
Reports
First seenApr 16, 2026
Last seenApr 23, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

description
Phishing, scams, all junk goes here.
domain rank
-1
raw
Administrative country: United States Create date: 2025-05-20 00:00:00 Domain name: cn-zh-ng28games.com Domain registrar id: 1923.0 Domain registrar url: https://rdap.gname.com/ Expiry date: 2026-05-20 00:00:00 Name server 1: DAPHNE.NS.CLOUDFLARE.COM Name server 2: YEW.NS.CLOUDFLARE.COM Query time: 2026-04-14 23:00:55 Registrant country: United States Registrant name: 37bfbc24cafea5d2 Technical country: United States Update date: 2026-04-14 00:00:00
subdomains count
1

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 1 month ago · Last seen 1 month ago
Appeared in 5 threat reports