IOC Radar
DomainMediumSignal 45/100

cudoigre.rs

Location
SerbiaSerbia
First Seen
Jul 13, 2025
Last Seen
Jun 9, 2026
Jul 13
First Seen
333d ago
Jun 9
Last Seen
yesterday
7
Reports
source reports
45%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

26 techniques

Feed Intelligence Summary

7 reports45% confidence
7
Source reports
45%
Confidence score
Category tags
attachment based phishingattachment phishingattack vectorbecbotnetbotnet activitybrand impersonationbrute forcebusiness email compromisecommand and controlcredential harvestingcredential phishingcredential stuffingcredential theftdata exfiltrationdata store exposuredeceptive websitesdistributed attacksexploitation activityfinancefinancial phishingfraudidentity & access exploitationindicatorinjection activitylink injectionlink manipulationlink redirectionmalicious attachmentmalicious domainmalicious linkmalicious linksmalicious softwaremalwaremalware deliverymalware distributionnetworkphishingphishing attackphishing campaign detectedphishing campaign detectionphishing domainsphishing-databaseprocess injectionransomwareresearchedscamscams & fraudsecurity awarenesssecurity operationsserbiasocial engineeringspamspearphishingt1055t1071t1071.001t1078t1078.004t1189t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1539t1565t1566t1566.001t1566.002t1566.003t1566.004t1567.001t1568t1568.002t1598t1598.003threat intelligencetor nodeweb securitywebsite forgery

Activity Timeline

1 total obs
Jun 9Jun 9

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **cudoigre.rs**, originating from Serbia, has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats. First observed on July

Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
7
Reports
First seenJul 13, 2025
Last seenJun 9, 2026

VirusTotal

Not checked

WHOIS

registrar
TELEKOM SRBIJA A.D.
description
LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
domain rank
-1
raw
Domain name: cudoigre.rs Domain status: Active https://www.rnids.rs/en/domain-name-status-codes#Active Expiration date: 30.09.2025 11:59:25 Modification date: 30.09.2024 00:05:30 Postal Code: 32250 Registrant: 4e421c5e562684f4 Registrar: TELEKOM SRBIJA A.D. Registration date: 30.09.2020 11:59:25 Tax ID: 109798998
subdomains count
2

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 11 months ago · Last seen 1 day ago
Appeared in 7 threat reports