IOC Radar
DomainHighVerifiedSignal 75/100

etcmeisai-nexconirt.help

Location
United StatesUnited States
First Seen
Apr 10, 2026
Last Seen
Apr 24, 2026
Apr 10
First Seen
70d ago
Apr 24
Last Seen
56d ago
6
Reports
source reports
75%
Confidence
high
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
75%
Signal Score
75 / 100
IDS Rule
No
Threat Context
Tags

Feed Intelligence Summary

6 reports75% confidence
6
Source reports
75%
Confidence score
Category tags
indicatornetworknorth americaresearchedunited states

Activity Timeline

1 total obs
Apr 24Apr 24

Threat Activity Heatmap

· Peak: 2026-04-24
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

This Indicator of Compromise (IOC), the domain `etcmeisai-nexconirt.help`, represents a critical and immediate threat to organizational security, evidenced by its high risk score of 75.48 and its explicit association with phishing and scam campaigns. Such domains are typically used in sophisticated social engineering attacks designed to illicitly acquire sensitive information, including user credentials, financial data, or proprietary company secrets. If successfully leveraged, this IOC could le…

Threat ScoreHigh Risk
75
SIGNAL
Signal Score
75%
Confidence
6
Reports
First seenApr 10, 2026
Last seenApr 24, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

description
Phishing, scams, all junk goes here.
domain rank
-1
raw
Administrative city: Phoenix Administrative country: United States Administrative email: [email protected] Administrative state: AZ Create date: 2026-04-01 00:00:00 Domain name: etcmeisai-nexconirt.help Domain registrar id: 1479.0 Domain registrar url: whois.namesilo.com Expiry date: 2027-04-01 00:00:00 Name server 1: NS1.DNSOWL.COM Name server 2: NS2.DNSOWL.COM Name server 3: NS3.DNSOWL.COM Query time: 2026-04-01 20:11:37 Registrant address: 4450dc66882e5a1e Registrant city: 7a96e04d2a2490b3 Registrant company: 566bb814321610e4 Registrant country: United States Registrant email: [email protected] Registrant name: 40b2fd933eae1182 Registrant phone: ae3ea006f3cca5c3 Registrant state: e1c7c1911395a3cf Registrant zip: c692e0cb8851b160 Technical city: Phoenix Technical country: United States Technical email: [email protected] Technical state: AZ Update date: 2026-04-01 00:00:00
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 2 months ago · Last seen 1 month ago
Appeared in 6 threat reports