DomainMediumSignal 36/100
poornima.edu.in
Location
United StatesFirst Seen
Jul 18, 2025
Last Seen
May 30, 2026
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
36%
Signal Score
36 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
4 reports36% confidence
4
Source reports
36%
Confidence score
Category tags
aaaaactive scanaddressassociated urlsavast avgbackdoorbodybotnetbotnet activitybrute forcecheckinchromecommand and controlcommunication protocolcompromised websiteconfigcontentcopycreation datecredential accesscredential harvestingcredential stuffingcrypcvedata accessdata copyingdata exfiltrationdata store exposuredata transferddosddos attacksdeathdeletedistributed attacksdns attackdomaindomains showenomentriesentries relatedexecutable fileexpirationexpiration dateexploitexploitation activityfilesfiles domainfiles ipfiles relatedfiles showfor privacyformbook cncgoogle safehistorical otxhostnamehostname addhostname enumerationhttphttp attackhttp scanneridentity & access exploitationindexindicatorindicators of compromiseinformation gatheringinfrastructure acquisitionreconnaissanceingress tool transferinjection activityinternet of thingsiociot botnetiot securityiot/ics attackipv4ipv4 addlowfimalicious linksmalicious softwaremalwaremediummetameta httpmetadata analysismirai botnetmsiename serversnetworknetwork scanningneuenext associatednext httpnext relatednone googlenorth americaopen portsotxoverview ippassive dnsphishingphishing attackpost httppresent decpresent janpresent julpresent junpresent marpresent novpresent octpresent sepprocess injectionpulse pulsespulse submitpulses noneransomransomwareread creconnaissancerecord valueredacted forrelatedrelated tagsremote accessremote servicesresearchedresources whoisresults julreverse dnssafe browsingscript domainsscript urlssearchserver responseshowshowingsocial engineeringsocial media securitystatust1003t1005t1021t1027t1030t1053t1055t1059t1068t1071t1071.001t1078t1082t1105t1119t1133t1189t1190t1195t1204t1204.001t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1573t1587.001t1589.001t1590.001threat actortofseetor nodetrojantrojan malwaretrojandroppertwitter runningunitedunited statesunknown cnameunknown nsurlsurlvoidverdictvirtoolvulnerability scanweb securityweb trafficwhois registrarwhois showwin32 malwarewindows malwarewindows ntwormwrite
Activity Timeline
May 30May 30
Threat Activity Heatmap
· Peak: 2026-05-30LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **poornima.edu.in** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnets, exploits, malware, phishing, and ransomware. First observed on July
Threat ScoreLow Risk
36
SIGNAL
Signal Score
36%
Confidence
4
Reports
First seenJul 18, 2025
Last seenMay 30, 2026
VirusTotal
Not checked
WHOIS
- registrar
- ERNET India
- description
- Tracker found in ‘alleged ‘ Jefferson County, Co website also a single link was found in a collection of phishing websites by a OTX researcher in 2023. I can’t comment much. #overreach #https://reviewable.io/reviews/palantir/godel-conjure-plugin/549
- domain rank
- 847780
- raw
- Admin City: REDACTED FOR PRIVACY Admin Country: REDACTED FOR PRIVACY Admin Organization: REDACTED FOR PRIVACY Admin Postal Code: REDACTED FOR PRIVACY Admin State/Province: REDACTED FOR PRIVACY Billing City: REDACTED FOR PRIVACY Billing Country: REDACTED FOR PRIVACY Billing Organization: REDACTED FOR PRIVACY Billing Postal Code: REDACTED FOR PRIVACY Billing State/Province: REDACTED FOR PRIVACY Creation Date: 2012-01-09T10:52:42.051Z DNSSEC: unsigned Domain Name: poornima.edu.in Domain Status: ok https://icann.org/epp#ok Name Server: rosalyn.ns.cloudflare.com Name Server: trace.ns.cloudflare.com Registrant City: 1f8f4166599d23ee Registrant Country: IN Registrant Email: f651612a2f356ad3s@ Registrant Fax: 1f8f4166599d23ee Registrant Name: 1f8f4166599d23ee Registrant Organization: 3432650ec337c945 Registrant Phone: 1f8f4166599d23ee Registrant Postal Code: 1f8f4166599d23ee Registrant State/Province: 3432650ec337c945 Registrant Street: 1f8f4166599d23ee Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +91.1123358248 Registrar IANA ID: 800068 Registrar URL: http://www.ernet.in Registrar: ERNET India Registry Admin ID: REDACTED FOR PRIVACY Registry Billing ID: REDACTED FOR PRIVACY Registry Domain ID: D5702153-IN Registry Expiry Date: 2028-01-09T10:52:42.051Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: REDACTED FOR PRIVACY Tech Country: REDACTED FOR PRIVACY Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2023-04-11T11:52:28.601Z
- subdomains count
- 52
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 10 months ago · Last seen 11 days ago
Appeared in 4 threat reports