IOC Radar
DomainMediumSignal 54/100

parapcc.com

Location
United StatesUnited States
First Seen
Feb 12, 2026
Last Seen
Jun 13, 2026
Feb 12
First Seen
134d ago
Jun 13
Last Seen
12d ago
8
Reports
source reports
54%
Confidence
medium
Found in 8 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
54%
Signal Score
54 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

35 techniques

Feed Intelligence Summary

8 reports54% confidence
8
Source reports
54%
Confidence score
Category tags
acr stealeractive scanactive scanningapi abusebad reputationbrute forcecephalus ransomwarecommand and controlcommunication protocolcredential accesscredential stealingcredential stuffingcvedetected malicious activitydll injectiondomainexploit deliveryexploitation activityf httpsfin scanftp brute forcehashmd5hijackloaderhttphttp attackhttp brute forcehttp scannerhttpsidentity & access exploitationindicatorinfostealerinfrastructure acquisitionreconnaissanceinjection activitykeenaduloaderlummalumma stealermalicious linksmalwaremalware distributionnetworknetwork scanningnorth americanull scanphishingpirated gamespossible reconnaissanceprocess injectionransomwarereconnaissanceremote accessremote servicesren'pyrenpyresearchedservice scanssh attackstealersyn scant1003t1021t1021.001t1027t1036t1046t1055t1055.012t1059t1059.003t1071t1071.001t1076t1078t1087t1105t1106t1110t1110.002t1129t1190t1204.001t1204.002t1499.002t1547t1563t1564.003t1566t1574.002t1587.001t1590.001t1595t1595.001t1595.002t1595.003threat actortransparent tribeudp port scanunited statesuxxxxxxvidarvidar stealervulnerability scanweb application attackweb securityweb trafficxmas scan

Activity Timeline

1 total obs
Jun 13Jun 13

Threat Activity Heatmap

· Peak: 2026-06-13
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain parapcc.com has emerged as a significant indicator of compromise (IOC) linked to multiple cyber threats originating from the United States. First observed on February

Threat ScoreMedium Risk
54
SIGNAL
Signal Score
54%
Confidence
8
Reports
First seenFeb 12, 2026
Last seenJun 13, 2026

VirusTotal

Not checked

WHOIS

domain rank
-1
raw
Administrative city: Burlington Administrative country: United States Administrative email: [email protected] Administrative state: MA Create date: 2024-12-04 00:00:00 Domain name: parapcc.com Domain registrar id: 303.0 Domain registrar url: whois.publicdomainregistry.com Expiry date: 2026-12-04 00:00:00 Name server 1: audrey.ns.cloudflare.com Name server 2: brett.ns.cloudflare.com Query time: 2025-12-05 04:22:54 Registrant address: 53b107811872c5e2 Registrant city: 7ba6c62985322478 Registrant company: b61af69881455ade Registrant country: United States Registrant email: [email protected] Registrant name: edeae57e15fec50a Registrant phone: 6cf2874f9409354d Registrant state: 36e414cc8874c746 Registrant zip: d56d0c6445f56866 Technical city: Burlington Technical country: United States Technical email: [email protected] Technical state: MA Update date: 2025-12-03 00:00:00
references
https://securelist.com/renengine-campaign-with-hijackloader-lumma-and-acr-stealer/118891/, IOCs2.csv
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 4 months ago · Last seen 12 days ago
Appeared in 8 threat reports