IOC Radar
DomainMediumSignal 42/100

countrysidefiles.download

Location
United StatesUnited States
First Seen
Apr 9, 2026
Last Seen
Apr 15, 2026
Apr 9
First Seen
69d ago
Apr 15
Last Seen
63d ago
4
Reports
source reports
42%
Confidence
medium
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
42%
Signal Score
42 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

9 techniques

Feed Intelligence Summary

4 reports42% confidence
4
Source reports
42%
Confidence score
Category tags
access controlblocklistbrute forcecredential harvestingcredential stuffingcredential theftcryptocryptocurrencycryptocurrency threatscryptojackingdrainerfinancefraudidentity & access exploitationindicatornetworknorth americaphishingphishing attackransomwareresearchedresource hijackingscamscams & fraudsecurity policysocial engineeringt1078t1204.002t1486t1496t1566t1566.001t1566.002t1566.003t1567.001threat preventionunited states

Activity Timeline

1 total obs
Apr 15Apr 15

Threat Activity Heatmap

· Peak: 2026-04-15
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
42
SIGNAL
Signal Score
42%
Confidence
4
Reports
First seenApr 9, 2026
Last seenApr 15, 2026

VirusTotal

Not checked

WHOIS

registrar
Cloudflare, Inc.
description
Real-time feed of phishing, crypto drainer, and scam domains detected by PhishDestroy (phishdestroy.io). Updated hourly. 108K+ domains tracked, 55K+ currently active. Source: github.com/phishdestroy/destroylist
domain rank
-1
raw
Creation Date: 2019-05-02T10:55:48Z DNSSEC: unsigned Domain Name: COUNTRYSIDEFILES.DOWNLOAD Domain Name: countrysidefiles.download Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: clienttransferprohibited https://icann.org/epp#clienttransferprohibited Domain Status: renewperiod https://icann.org/epp#renewperiod Name Server: cortney.ns.cloudflare.com Name Server: dion.ns.cloudflare.com Registrant City: 1f8f4166599d23ee Registrant City: acfd0ee3752cd95d Registrant Country: US Registrant Email: 3432650ec337c945s@ Registrant Email: f651612a2f356ad3s@ Registrant Fax Ext: 1f8f4166599d23ee Registrant Fax Ext: 3432650ec337c945 Registrant Fax: 1f8f4166599d23ee Registrant Fax: 3432650ec337c945 Registrant Name: 1f8f4166599d23ee Registrant Name: acfd0ee3752cd95d Registrant Organization: acfd0ee3752cd95d Registrant Organization: efb7ba7b2f033635 Registrant Phone Ext: 1f8f4166599d23ee Registrant Phone Ext: 3432650ec337c945 Registrant Phone: 1f8f4166599d23ee Registrant Phone: e67c90d3f62b3476 Registrant Postal Code: 1f8f4166599d23ee Registrant Postal Code: acfd0ee3752cd95d Registrant State/Province: d9cc8d50b25ba09c Registrant Street: 1f8f4166599d23ee Registrant Street: acfd0ee3752cd95d Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.4153197517 Registrar IANA ID: 1910 Registrar Registration Expiration Date: 2027-05-02T10:55:48Z Registrar URL: https://www.cloudflare.com Registrar URL: www.cloudflare.com Registrar WHOIS Server: whois.cloudflare.com Registrar: Cloudflare, Inc. Registry Domain ID: D110ABDBAFFA8442CA88FC9CCF975365C-NSR Registry Domain ID: REDACTED FOR PRIVACY Registry Expiry Date: 2027-05-02T10:55:48Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: DATA REDACTED Tech City: REDACTED FOR PRIVACY Tech Country: DATA REDACTED Tech Country: REDACTED FOR PRIVACY Tech Organization: DATA REDACTED Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: DATA REDACTED Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: DATA REDACTED Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2026-04-02T04:04:48Z Updated Date: 2026-04-07T04:04:52Z
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 months ago · Last seen 2 months ago
Appeared in 4 threat reports