DomainMediumSignal 47/100
m00nlight.top
First Seen
Feb 16, 2023
Last Seen
May 8, 2026
Found in 3 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
47%
Signal Score
47 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
3 reports47% confidence
3
Source reports
47%
Confidence score
Category tags
anna paulabotnetcommand and controldata exfiltrationdgadistributed attacksfrom emailheadersindicatormalicious softwaremalspam emailmalwaremsi filenetworkphishingprocess injectionransomwareresearchedself-signedspamt1055t1071.001t1486t1496t1499.002t1499.003t1565zip archive
Activity Timeline
May 8May 8
Threat Activity Heatmap
· Peak: 2026-05-08LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **mnlight.top** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnets, malware, phishing, ransomware, and spam activities. First observed on February
Threat ScoreMedium Risk
47
SIGNAL
Signal Score
47%
Confidence
3
Reports
First seenFeb 16, 2023
Last seenMay 8, 2026
VirusTotal
Not checked
WHOIS
- description
- In the latest episode of the LNK forensic analysis series, we look at how a malicious file was linked to a Chinese-speaking threat actor, who then modified the file to target a powershell program.
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 3 years ago · Last seen 1 month ago
Appeared in 3 threat reports