DomainMediumSignal 75/100
ns2.iqwebservice.com
Location
ItalyFirst Seen
Sep 25, 2024
Last Seen
Apr 29, 2026
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
75%
Signal Score
75 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
7 reports75% confidence
7
Source reports
75%
Confidence score
Category tags
active scanactive scanningaptapt34backdoorbladedfelinebotnetbotnet activitybrute forcec servercode executioncommand and controlcommand executioncredential accesscredential harvestingcredential stuffingdanabotdanbotdata exfiltrationdata store exposuredistributed attackseuropeexploitation activityfirstformatftp brute forceidentity & access exploitationiis moduleindicatorinfostealerinjection activityiran-aligned aptititalykeyloggerkrg systemlaretlateral movementlsasslumma stealermalicious powershell activitymalicious softwaremalwaremangomarkmilannetworknetwork probingnetwork scanningnextoilrigolalaphishingphishing attackpinarplinkprocess injectionpsexecpythonransomwarerdatreconnaissanceremote accessremote servicesresearchedscripting attackssharkshellsocial engineeringsoftware exploitationsolarssh attackstepstrongt1003t1016t1021t1021.001t1027t1041t1048t1053t1055t1059t1059.001t1070t1071t1071.001t1076t1078t1086t1105t1110t1110.002t1132t1133t1140t1190t1203t1204.002t1486t1496t1499.002t1499.003t1546t1547t1559t1563t1565t1566t1566.001t1566.002t1566.003t1569t1573t1583t1586t1595t1595.001t1595.002t1595.003threat actortipstor nodevoid manticorewhisperyellow liderc
Activity Timeline
Apr 29Apr 29
Threat Activity Heatmap
· Peak: 2026-04-29LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
75
SIGNAL
Signal Score
75%
Confidence
7
Reports
First seenSep 25, 2024
Last seenApr 29, 2026
VirusTotal
Not checked
WHOIS
- registrar
- Hosting Concepts B.V. d/b/a Registrar.eu
- raw
- Admin City: Rotterdam Admin Country: NL Admin Organization: Whois Privacy Protection Foundation Admin Postal Code: 3032 AC Admin State/Province: Zuid-Holland Creation Date: 2023-10-31T11:36:13Z DNSSEC: unsigned Domain Name: IQWEBSERVICE.COM Domain Name: iqwebservice.com Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: NS1.IQWEBSERVICE.COM Name Server: NS2.IQWEBSERVICE.COM Name Server: ns1.iqwebservice.com Name Server: ns2.iqwebservice.com Registrant City: 5f1950895e30f0b6 Registrant Country: NL Registrant Email: 6d64acd5a19240f2s@ Registrant Fax Ext: 3432650ec337c945 Registrant Fax: 3432650ec337c945 Registrant Name: 1facd30fba15e069 Registrant Organization: 1facd30fba15e069 Registrant Phone Ext: 3432650ec337c945 Registrant Phone: 8d93a7b7219b61c6 Registrant Postal Code: ebfadb2402ddf2da Registrant State/Province: a60153145b56f263 Registrant Street: 0161806d4b802124 Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +31.104482297 Registrar IANA ID: 1647 Registrar Registration Expiration Date: 2025-10-31T11:36:13Z Registrar URL: http://www.openprovider.com Registrar URL: https://www.registrar.eu Registrar WHOIS Server: whois.registrar.eu Registrar: Hosting Concepts B.V. d/b/a Registrar.eu Registry Admin ID: REDACTED FOR PRIVACY Registry Domain ID: 2825974151_DOMAIN_COM-VRSN Registry Expiry Date: 2025-10-31T11:36:13Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: Rotterdam Tech Country: NL Tech Organization: Whois Privacy Protection Foundation Tech Postal Code: 3032 AC Tech State/Province: Zuid-Holland Updated Date: 2025-07-15T13:47:46Z Updated Date: 2025-07-15T15:47:46Z
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen 1 month ago
Appeared in 7 threat reports