DomainHighVerifiedSignal 100/100
er6ulg.top
First Seen
Jul 13, 2025
Last Seen
Jul 31, 2025
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
5 reports99% confidence
5
Source reports
99%
Confidence score
Category tags
botnetbrand impersonationcommand and controlcredential harvestingcredential phishingcredential theftdata exfiltrationdeceptive websitesdgadistributed attacksfinancial phishingindicatorinfrastructure acquisitionreconnaissancemalicious linksmalicious softwaremalwaremalware distributionnetworkphishingphishing attackphishing campaign detectedphishing campaign detectionphishing domain listphishing domainsprocess injectionresearchedsocial engineeringt1055t1071t1071.001t1189t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1568t1568.002t1587.001t1590.001t1598t1598.003web securitywebsite forgery
Activity Timeline
Jul 31Jul 31
Threat Activity Heatmap
· Peak: 2025-07-31LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
5
Reports
First seenJul 13, 2025
Last seenJul 31, 2025
Verified IOC
VirusTotal
Not checked
WHOIS
- domain rank
- -1
- raw
- Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2025-03-23 00:00:00 Domain name: er6ulg.top Domain registrar id: 1915 Domain registrar url: http://www.hkdns.hk Expiry date: 2026-03-23 00:00:00 Name server 1: ns1.myhostadmin.net Name server 2: ns6.myhostadmin.net Name server 3: ns3.myhostadmin.net Name server 4: ns2.myhostadmin.net Query time: 2025-03-24 12:40:15 Registrant city: 1f8f4166599d23ee Registrant company: 1f8f4166599d23ee Registrant country: China Registrant email: 29e2c061f3c9524es@ Registrant fax: 31d1617d95c9a75c Registrant name: 1f8f4166599d23ee Registrant phone: 31d1617d95c9a75c Registrant state: 18b3ed01d3bce948 Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2025-03-23 00:00:00
- subdomains count
- 0
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 11 months ago · Last seen 10 months ago
Appeared in 5 threat reports