DomainMediumSignal 100/100
gauntlxdgq.run
Location
EstoniaFirst Seen
Jun 6, 2025
Last Seen
Jun 14, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
10 reports99% confidence
10
Source reports
99%
Confidence score
Category tags
botnetbotnet activitybrowser infectionbrute forcec2c2 communicationclipboard data theftcobalt strikecommand & controlcommand and controlcookie theftcookies stealercredential accesscredential stealingcredential stuffingcrypto wallet stealercrypto wallet theftcryptocurrencydata exfiltrationdata store exposuredgadistributed attacksestoniaeuropeexploitation activityform grabbinghavochavokiz havocidentity & access exploitationindicatorinformation stealerinfostealerinjection activitylummalumma infostealer activitylumma stealerlumma stealer activitylummastealermalicious softwaremalwaremalware distributionnetworknone vidarpassword stealerphishingprocess injectionransomwareresearchedt1003t1005t1041t1055t1059t1059.001t1071t1071.001t1081t1105t1115t1189t1483t1486t1496t1499.002t1499.003t1539t1552t1555t1555.001t1555.002t1555.003t1560t1565t1566t1569.002t1573t1583.001threat actorthreat actor activitytor nodevidarweb data theft
Activity Timeline
Jun 14Jun 14
Threat Activity Heatmap
· Peak: 2026-06-14LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **gauntlxdgq.run**, originating from Estonia, has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats. First observed on June
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
10
Reports
First seenJun 6, 2025
Last seenJun 14, 2026
VirusTotal
Not checked
WHOIS
- description
- Domain that is used for botnet Command&control (C&C)
- domain rank
- -1
- raw
- Administrative city: REDACTED Administrative country: REDACTED Administrative state: REDACTED Create date: 2025-06-02 00:00:00 Domain name: gauntlxdgq.run Domain registrar id: 303 Domain registrar url: http://www.PublicDomainRegistry.com Expiry date: 2026-06-02 00:00:00 Name server 1: c.ns.selectel.ru Name server 2: d.ns.selectel.ru Name server 3: a.ns.selectel.ru Name server 4: b.ns.selectel.ru Query time: 2025-06-03 09:42:48 Registrant city: 3495bcf1839c6374 Registrant company: c3cd3ab0b45f9759 Registrant country: Russia Registrant email: fb6ff66ef97c0518s@ Registrant fax: 3495bcf1839c6374 Registrant name: 3495bcf1839c6374 Registrant phone: 3495bcf1839c6374 Registrant state: d3e02b6a2e05b4cf Registrant zip: 3495bcf1839c6374 Technical city: REDACTED Technical country: REDACTED Technical state: REDACTED Update date: 2025-06-02 00:00:00
- references
- https://www.virustotal.com/graph/embed/gc46a4e8056a7450da632babf7573164dae8ee12a0f86421596e775d0067a6c81?theme=light, https://www.virustotal.com/gui/collection/88240b6df014a6ccd3077a3fee4605c3f4884451867f79d2516fb3f409bc0ba2
- subdomains count
- 0
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 12 days ago
Appeared in 10 threat reports