DomainHighVerifiedSignal 55/100
com-account-challenge.email
Location
First Seen
Jul 21, 2021
Last Seen
Feb 19, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
55%
Signal Score
55 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
5 reports55% confidence
5
Source reports
55%
Confidence score
Category tags
active scanningaddressadsenseadsense naapt34azure rsabody lengthbotnetbrute forcec0002 wininetca odigicertcertcertificate authoritycndigicert sha2cnmicrosoft ecccnwe1 ogooglecommandcommand and controlcommand executioncommunication protocolconnectcontrol ta0011corporation cuscreation datecredential accesscredential harvestingcredential stuffingcus subjectcustom audiencedangerous tooldata exfiltrationdistributed attacksentriesevasion ta0005expiration dateftp brute forcegeckoget httphttp requesthttp responsehttp scannerinc cusindicatorinfostealerkhtmlmaasmalicious powershell activitymalicious softwaremalvertisingmalwarename serversnetworknetwork probingnetwork scanningnumberoperating systemphishing attackprocess injectionpulse submitreconnaissanceremote accessremote servicesrequestresearchedrsascripting attackssearchsecure serverserver caserving ipsocial engineeringspyware infectionssh attackstatusstatus codestwa lredmondsubjectt1016t1021t1021.001t1055t1059t1059.001t1069.001t1071.001t1076t1078t1086t1105t1110t1110.002t1189t1190t1204.002t1486t1496t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1588.006t1595t1595.001t1595.002t1595.003ta0004 defensetag managertlstls issuingtrustturkeyunitedunknown soaupdate secureutc facebookutc googleutc gsrdlm5jnx1utc gtmwrp73mtvoid manticoreweb trafficwindows ntwininetyellow liderc
Activity Timeline
Feb 19Feb 19
Threat Activity Heatmap
· Peak: 2026-02-19LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated
The domain **com-account-challenge.email** has been identified as a critical indicator of compromise (IOC) associated with botnet and malware activities, originating from Turkey. First observed on July
Threat ScoreMedium Risk
55
SIGNAL
Signal Score
55%
Confidence
5
Reports
First seenJul 21, 2021
Last seenFeb 19, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- description
- And I've been walking, talking Believing the things that are true And I've been finding The difference between right and wrong, bad and good See me put things together Put them back where they belong When I look at each other Have I always been singing the same song? She said This is a perfect world Riding on an incline I'm staring in your face You'll photograph mine I-I-I-I-I Whoo, ah-ha-ha Ha-ha-ha-ha-ha-ha Somebody said that it happens all over the world I do believe that it's true (•o•) #spyware #MaaS #malvertizing #bullyfor$ #unethical #dangerous_tool
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 4 years ago · Last seen 4 months ago
Appeared in 5 threat reports