DomainHighVerifiedSignal 49/100
ead8b.bar
First Seen
Jul 11, 2021
Last Seen
May 1, 2026
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
49%
Signal Score
49 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
6 reports49% confidence
6
Source reports
49%
Confidence score
Category tags
active scanactive scanningauthentication attackbotnetbotnet activitybrute forcecommand and controlcredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposureddosdenial of servicedistributed attacksexploitation activityftp brute forcehttp brute forcehydra attackidentity & access exploitationindicatorinjection activitylogin attacklogin attemptsmalicious softwaremalwaremedusa attacknetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackprocess injectionprotocol exploitationransomwarerdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedservice enumerationservice scansmb scanningsmtp brute forcesocial engineeringssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1190t1486t1496t1499.002t1499.003t1563t1565t1566.001t1566.002t1566.003t1589t1589.002t1592t1595t1595.001t1595.002t1595.003tcp scantcp scanningtelnet threatudp scanvulnerability scan
Activity Timeline
May 1May 1
Threat Activity Heatmap
· Peak: 2026-05-01LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
This Indicator of Compromise (IOC), `ead8b.bar`, represents a critical threat, primarily associated with phishing campaigns and potential command-and-control infrastructure. Its elevated score of 49.47 and explicit non-whitelist status strongly suggest malicious intent. Organizations failing to address this IOC risk significant security breaches, including credential harvesting, malware delivery, and initial access for more advanced attacks like data exfiltration or ransomware. The presence of t…
Threat ScoreMedium Risk
49
SIGNAL
Signal Score
49%
Confidence
6
Reports
First seenJul 11, 2021
Last seenMay 1, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- registrar
- Key-Systems GmbH
- description
- For POC
- domain rank
- -1
- raw
- Admin City: REDACTED FOR PRIVACY Admin Country: REDACTED FOR PRIVACY Admin Email: [email protected] Admin Organization: REDACTED FOR PRIVACY Admin Postal Code: REDACTED FOR PRIVACY Admin State/Province: REDACTED FOR PRIVACY Billing City: REDACTED FOR PRIVACY Billing Country: REDACTED FOR PRIVACY Billing Email: [email protected] Billing Organization: REDACTED FOR PRIVACY Billing Postal Code: REDACTED FOR PRIVACY Billing State/Province: REDACTED FOR PRIVACY Creation Date: 2021-03-06T05:36:54.0Z Creation Date: 2021-03-06T05:36:54Z DNSSEC: unsigned Domain Name: EAD8B.BAR Domain Name: ead8b.bar Domain Status: clientHold https://icann.org/epp#clientHold Domain Status: serverHold https://icann.org/epp#serverHold Name Server: NS1.DOMAINS-HOLD.COM Name Server: NS2.DOMAINS-HOLD.COM Name Server: ns1.domains-hold.com Name Server: ns2.domains-hold.com Registrant City: 1f8f4166599d23ee Registrant Country: CN Registrant Email: [email protected] Registrant Email: f651612a2f356ad3s@ Registrant Fax Ext: 1f8f4166599d23ee Registrant Fax: 1f8f4166599d23ee Registrant Name: 1f8f4166599d23ee Registrant Organization: 1f8f4166599d23ee Registrant Organization: 3432650ec337c945 Registrant Phone Ext: 1f8f4166599d23ee Registrant Phone: 1f8f4166599d23ee Registrant Postal Code: 1f8f4166599d23ee Registrant State/Province: 3432650ec337c945 Registrant Street: 1f8f4166599d23ee Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +49.68949396850 Registrar IANA ID: 1345 Registrar IANA ID: 269 Registrar Registration Expiration Date: 2022-03-06T23:59:59Z Registrar URL: http://www.key-systems.net Registrar WHOIS Server: whois.rrpproxy.net Registrar: Key-Systems GmbH Registrar: Key-Systems LLC Registry Admin ID: REDACTED FOR PRIVACY Registry Billing ID: REDACTED FOR PRIVACY Registry Domain ID: D224743113-CNIC Registry Expiry Date: 2022-03-06T23:59:59.0Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: REDACTED FOR PRIVACY Tech Country: REDACTED FOR PRIVACY Tech Email: [email protected] Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2021-07-24T07:15:02.0Z Updated Date: 2021-07-24T07:15:02Z
- subdomains count
- 1
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 4 years ago · Last seen 1 month ago
Appeared in 6 threat reports