DomainMediumSignal 65/100

`ecom.bio`

First Seen

Sep 4, 2024

Last Seen

Apr 6, 2026

Sep 4

First Seen

656d ago

Apr 6

Last Seen

78d ago

Reports

source reports

65%

Confidence

medium

Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.

Domain Name

Malicious domain used for C2, phishing, or malware distribution.

MISP Category

Network Activity

Confidence

65%

Signal Score

65 / 100

IDS Rule

Threat Context

MITRE ATT&CK TTPs

45 techniques

Feed Intelligence Summary

10 reports65% confidence

Source reports

65%

Confidence score

Category tags

active scanactive scanningattachment phishingattackauthentication attackbecbec attackbotnetbotnet activitybrand impersonationbrute forcebusiness email compromisebusiness_email_compromisec2command & controlcommand and controlcredential accesscredential harvestingcredential phishingcredential stuffingcredential theftcredential_harvestingdata exfiltrationdata store exposureddosdenial of servicedistributed attacksemail-based attackexploitation activityfraudulent websiteftp brute forcehttp brute forcehydra attackidentity & access exploitationindicatorinitial accessinjection activityiocslink injectionlink manipulationlink obfuscationlogin attacklogin attemptsmalicious activitymalicious attachmentmalicious attachmentsmalicious domainmalicious linksmalicious softwaremalwaremalware deliverymalware distributionmedusa attacknetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackphishing campaignphishing-databaseprocess injectionprotocol exploitationransomwarerdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedscams & fraudservice enumerationservice scansmb scanningsmtp brute forcesocial engineeringssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1189t1190t1192t1204t1204.001t1486t1496t1499.002t1499.003t1534t1552.001t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1588.002t1589t1589.002t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tcp scantcp scanningtelnet threatthreat actorthreat intelligence feedthreat_actor_activitytor nodeudp scanvulnerability scanweb securitywhaling attack

Activity Timeline

1 total obs

Apr 6Apr 6

Threat Activity Heatmap

· Peak: 2026-04-06

Less

Mon

Wed

Fri

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Jan

Feb

Mar

Apr

May

Jun

24h

Dormant

30d

Dormant

3mo

Minimal

Threat ScoreMedium Risk

SIGNAL

Signal Score

65%

Confidence

Reports

First seenSep 4, 2024

Last seenApr 6, 2026

VirusTotal

Not checked

WHOIS

registrar: GoDaddy.com, LLC
description: For POC
domain rank: -1
raw: Admin City: REDACTED Admin Country: REDACTED Admin Organization: REDACTED Admin Postal Code: REDACTED Admin State/Province: REDACTED Creation Date: 2021-11-19T02:06:32Z DNSSEC: unsigned Domain Name: ecom.bio Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited Name Server: hope.ns.cloudflare.com Name Server: rustam.ns.cloudflare.com Registrant City: 3495bcf1839c6374 Registrant Country: US Registrant Email: fb6ff66ef97c0518s@ Registrant Fax Ext: 3495bcf1839c6374 Registrant Fax: 3495bcf1839c6374 Registrant Name: 3495bcf1839c6374 Registrant Organization: b46a98a26fe2fd9f Registrant Phone Ext: 3495bcf1839c6374 Registrant Phone: 3495bcf1839c6374 Registrant Postal Code: 3495bcf1839c6374 Registrant State/Province: 30bdd2917a604c83 Registrant Street: 3495bcf1839c6374 Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.4806242505 Registrar IANA ID: 146 Registrar URL: http://www.godaddy.com/domains/search.aspx?ci=8990 Registrar WHOIS Server: whois.godaddy.com Registrar: GoDaddy.com, LLC Registry Admin ID: REDACTED Registry Domain ID: d17a239ff5cc4882a1ba5cf08032eff2-DONUTS Registry Expiry Date: 2025-11-19T02:06:32Z Registry Registrant ID: REDACTED Registry Tech ID: REDACTED Tech City: REDACTED Tech Country: REDACTED Tech Organization: REDACTED Tech Postal Code: REDACTED Tech State/Province: REDACTED Updated Date: 2025-04-11T14:08:01Z
references: https://malware-filter.gitlab.io/malware-filter/phishing-filter-domains.txt
subdomains count: 8

`ecom.bio`

MITRE ATT&CK TTPs

Feed Intelligence Summary

Activity Timeline

Threat Activity Heatmap

VirusTotal

WHOIS

Export & API

IOC Journey