IOC Radar
DomainMediumSignal 85/100

mikulatur.com

Location
United StatesUnited States
First Seen
Mar 21, 2026
Last Seen
May 13, 2026
Mar 21
First Seen
91d ago
May 13
Last Seen
39d ago
10
Reports
source reports
85%
Confidence
medium
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
85%
Signal Score
85 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

46 techniques

Feed Intelligence Summary

10 reports85% confidence
10
Source reports
85%
Confidence score
Category tags
abusech-threatfox-c2cactive scanactive scanningauthentication_attemptsautomated network attacksbad reputationbotnetbotnet activitybotnet c2 activitybotnet_activitybotnet_c2brute forcebrute force attackbrute_forcebrute_force_attackc2c2_communicationc2_communicationscommand & controlcommand and controlcommand_and_controlcommunication protocolcredential accesscredential stuffingcredential_attackdata exfiltrationdata store exposureddosddos attackdenial of servicedistributed attacksdnsdns attackexploitation activityhttp scannerhttp_protocolhttpsidentity & access exploitationindicatorindicators_of_compromiseinfostealerinfrastructure acquisitionreconnaissanceinitial_accessinjection activityinternet_scansiocsirckpuspriyonewsmacosmalicious softwaremalicious_trafficmalwaremalware_activitynetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork_reconnaissancenetwork_scanningnorth americapassword attacksphantompulseprocess injectionrdp_bruteforcereconnaissanceresearchedscanning activitysecurity operationsshubshub stealershubstealerssh_bruteforcessh_protocolt1005t1008t1027t1036t1040t1041t1046t1055t1059.002t1059.007t1071t1071.001t1082t1083t1087t1090t1090 - proxyt1102t1105t1110t1110.001t1110.002t1110.003t1110.004t1140t1190t1204t1486t1496t1499.002t1499.003t1539t1543.001t1543.004t1552.001t1555.001t1555.003t1560t1565t1573t1574t1587.001t1590.001t1595.001t1595.002t1595.003t1614tcp protocolthreat intelligencethreat_intelligencetor nodeunited statesurlsweb trafficydznvjljcz6f7

Activity Timeline

1 total obs
May 13May 13

Threat Activity Heatmap

· Peak: 2026-05-13
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
85
SIGNAL
Signal Score
85%
Confidence
10
Reports
First seenMar 21, 2026
Last seenMay 13, 2026

VirusTotal

Not checked

WHOIS

description
Command and Control domains for Malware. These domains are extracted from a number of sources, and are suspicious.

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 months ago · Last seen 1 month ago
Appeared in 10 threat reports