IOC Radar
DomainMediumSignal 100/100

cowertbabei.bond

Location
United StatesUnited States
First Seen
Jan 20, 2025
Last Seen
Jun 15, 2026
Jan 20
First Seen
520d ago
Jun 15
Last Seen
9d ago
17
Reports
source reports
99%
Confidence
medium
Found in 17 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Feed Intelligence Summary

17 reports99% confidence
17
Source reports
99%
Confidence score
Category tags
abuseaptautoitav-evasionbad reputationbitsight tracebotnetbotnet activitybrute forcec2c2 communicationcertcommand & controlcommand and controlcredential harvestingcredential stuffingcredential theftcryptocurrencycryptocurrency theftctadata encryptiondata exfiltrationdata store exposuredata theftdistributed attacksdropperencryptionexploitation activityextortionidentity & access exploitationindicatorinformation stealerinfostealerinfrastructure takedowningress tool transferinjection activityioclummalumma stealerlummaclummac2lummac2 iocsmaasmalicious softwaremalvertisingmalwaremalware-as-a-servicemetadata analysismfa token theftmulti-tiered c2networknorth americaoperating systempassword theftphishingphishing attackphishing campaignsprocess injectionransomwareredlineresearchedrussian threat actorserviceshamelsocial engineeringsocial media securitysteamsteam profilesystem disruptiont1021.001t1027t1041t1055t1059t1059.005t1069.001t1071t1071.001t1078t1102t1105t1189t1204t1204.002t1486t1490t1496t1499.002t1499.003t1539t1555t1555.003t1555.004t1565t1566t1566.001t1566.002t1566.003threat actortor nodetrojan malwaretrojanized softwareturkeyunited states

Activity Timeline

1 total obs
Jun 15Jun 15

Threat Activity Heatmap

· Peak: 2026-06-15
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
17
Reports
First seenJan 20, 2025
Last seenJun 15, 2026

VirusTotal

Not checked

WHOIS

description
Domain name that delivers a malware payload

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 9 days ago
Appeared in 17 threat reports