IOC Radar
DomainHighVerifiedSignal 37/100

easycommerce.plus

Location
AustriaAustria
First Seen
Jun 5, 2020
Last Seen
Jun 14, 2026
Jun 5
First Seen
2208d ago
Jun 14
Last Seen
8d ago
5
Reports
source reports
37%
Confidence
high
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
37%
Signal Score
37 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

41 techniques

Feed Intelligence Summary

5 reports37% confidence
5
Source reports
37%
Confidence score
Category tags
active scanactive scanningattachment phishingaustriaauthentication attackbotnetbotnet activitybrand impersonationbrute forcebusiness email compromisecommand and controlcredential accesscredential harvestingcredential harvesting phishingcredential phishingcredential stuffingcredential theftdata exfiltrationdata store exposureddosdenial of servicedistributed attackseuropeexploitation activityftp brute forcehttp brute forcehydra attackidentity & access exploitationindicatorinjection activitylink injectionlink manipulationlink redirectionlink redirection phishinglogin attacklogin attemptsmalicious linkmalicious softwaremalwaremalware deliverymalware delivery phishingmalware distributionmalware phishingmedusa attacknetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackphishing-databaseprocess injectionprotocol exploitationransomwarerdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedsecurity awarenessservice enumerationservice scansmb scanningsmtp brute forcesocial engineeringssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1189t1190t1192t1204.001t1486t1496t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1589t1589.002t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tcp scantcp scanningtelnet threatudp scanvulnerability scan

Activity Timeline

1 total obs
Jun 14Jun 14

Threat Activity Heatmap

· Peak: 2026-06-14
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **easycommerce.plus**, originating from Austria, has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats. First observed on June

Threat ScoreLow Risk
37
SIGNAL
Signal Score
37%
Confidence
5
Reports
First seenJun 5, 2020
Last seenJun 14, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

registrar
OVH SAS
description
LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
domain rank
-1
raw
Admin City: REDACTED FOR PRIVACY Admin Country: REDACTED FOR PRIVACY Admin Organization: REDACTED FOR PRIVACY Admin Postal Code: REDACTED FOR PRIVACY Admin State/Province: REDACTED FOR PRIVACY Creation Date: 2016-01-14T16:55:06Z DNSSEC: signedDelegation Domain Name: easycommerce.plus Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: dns18.ovh.net Name Server: ns18.ovh.net Registrant City: 1f8f4166599d23ee Registrant Country: AT Registrant Email: 46860fe85ca2a91ds@ Registrant Email: f651612a2f356ad3s@ Registrant Fax Ext: 1f8f4166599d23ee Registrant Fax: 1f8f4166599d23ee Registrant Name: 1f8f4166599d23ee Registrant Organization: 6a7f0984169d1d67 Registrant Phone Ext: 1f8f4166599d23ee Registrant Phone: 1f8f4166599d23ee Registrant Postal Code: 1f8f4166599d23ee Registrant State/Province: 3432650ec337c945 Registrant Street: 1f8f4166599d23ee Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +33.972101007 Registrar IANA ID: 433 Registrar Registration Expiration Date: 2027-01-14T16:55:06+01:00 Registrar URL: http://www.ovh.com Registrar URL: https://www.ovh.com Registrar WHOIS Server: whois.ovh.com Registrar: OVH SAS Registrar: OVH, SAS Registry Admin ID: REDACTED FOR PRIVACY Registry Admin ID: ovh602ae2f11tr3 Registry Domain ID: df559df5508347e0bd28c32666db49a5-DONUTS Registry Expiry Date: 2027-01-14T16:55:06Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Registrant ID: ovh602ae2f0w5tp Registry Tech ID: REDACTED FOR PRIVACY Registry Tech ID: ovh602ae2f11tr3 Tech City: REDACTED FOR PRIVACY Tech Country: REDACTED FOR PRIVACY Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2023-08-07T08:47:52Z
subdomains count
1

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 6 years ago · Last seen 8 days ago
Appeared in 5 threat reports