IOC Radar
DomainMediumSignal 42/100

dxcyq.com

First Seen
Jun 9, 2024
Last Seen
Mar 9, 2026
Jun 9
First Seen
736d ago
Mar 9
Last Seen
97d ago
7
Reports
source reports
42%
Confidence
medium
13/91
VirusTotal
detections
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
42%
Signal Score
42 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

45 techniques

Feed Intelligence Summary

7 reports42% confidence
7
Source reports
42%
Confidence score
Category tags
account discoveryaccount profilingaccount takeoveraccount takeover attemptactive scanningattachment basedattachment phishingauthentication attackbecbotnetbrand impersonationbrute forcebusiness email compromisecommand and controlcredential accesscredential harvestingcredential phishingcredential stuffingcredential theftdata exfiltrationdata theftdenial of servicedistributed attacksfinancefraudftp brute forcehttp brute forcehydra attackindicatorlink injectionlink obfuscationlink redirectionlogin attacklogin attemptsmalicious attachmentmalicious linkmalicious linksmalicious softwaremalwaremalware deliverymalware distributionmalware phishingmedusa attacknetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackphishing kitphishing-databaseprocess injectionprotocol exploitationrdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedservice enumerationsmb scanningsmtp brute forcesocial engineeringssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1189t1190t1192t1204t1204.001t1486t1496t1499.002t1499.003t1539t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1567t1567.001t1589t1589.002t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tcp scantcp scanningtelnet threatudp scanvulnerability scanweb security

Activity Timeline

1 total obs
Mar 9Mar 9

Threat Activity Heatmap

· Peak: 2026-03-09
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain **dxcyq.com** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnet activity, malware distribution, and phishing campaigns. First observed on June

Threat ScoreMedium Risk
42
SIGNAL
Signal Score
42%
Confidence
7
Reports
First seenJun 9, 2024
Last seenMar 9, 2026

VirusTotal

13/ 91vendors flagged
14% detection rateJun 11, 2026

WHOIS

description
For POC
domain rank
-1
raw
Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Billing city: REDACTED FOR PRIVACY Billing country: REDACTED FOR PRIVACY Billing state: REDACTED FOR PRIVACY Create date: 2025-04-17 00:00:00 Domain name: dxcyq.com Domain registrar id: 1697 Domain registrar url: https://www.dnspod.com Expiry date: 2026-04-17 00:00:00 Query time: 2025-04-18 16:33:17 Registrant city: 1f8f4166599d23ee Registrant company: 1f8f4166599d23ee Registrant country: China Registrant email: 3983e0ed4ef024c3s@ Registrant fax: 31d1617d95c9a75c Registrant name: 1f8f4166599d23ee Registrant phone: 31d1617d95c9a75c Registrant zip: 1f8f4166599d23ee Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2025-04-18 00:00:00
references
https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt
subdomains count
1

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 3 months ago
Appeared in 7 threat reports