IOC Radar
DomainHighVerifiedSignal 48/100

proposai-morpho.net

Location
United StatesUnited States
First Seen
Apr 10, 2025
Last Seen
Apr 20, 2026
Apr 10
First Seen
428d ago
Apr 20
Last Seen
53d ago
6
Reports
source reports
48%
Confidence
high
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
48%
Signal Score
48 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

20 techniques

Feed Intelligence Summary

6 reports48% confidence
6
Source reports
48%
Confidence score
Category tags
botnetbotnet activitybrand impersonationbrute forcecommand and controlcredential harvestingcredential phishingcredential stuffingdata exfiltrationdata store exposuredistributed attacksexploitation activityfraudidentity & access exploitationindicatorinjection activitymalicious linkmalicious redirectsmalicious softwaremalwaremalware distributionmalware phishingnetworknorth americapayload deliveryphishingphishing attackphishing campaign detectionphishing kitprocess injectionransomwareresearchedscamscams & fraudsocial engineeringsocial media phishingt1055t1071t1071.001t1078t1189t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1598t1598.003twitterunited statesweb application attackxss

Activity Timeline

1 total obs
Apr 20Apr 20

Threat Activity Heatmap

· Peak: 2026-04-20
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **proposai-morpho.net** has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats originating from the United States. First observed on April

Threat ScoreMedium Risk
48
SIGNAL
Signal Score
48%
Confidence
6
Reports
First seenApr 10, 2025
Last seenApr 20, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

domain rank
-1
raw
Create date: 2025-04-10 00:00:00 Domain name: proposai-morpho.net Domain registrar id: 3765 Domain registrar url: http://www.nicenic.net Expiry date: 2026-04-10 00:00:00 Name server 1: michael.ns.cloudflare.com Name server 2: gene.ns.cloudflare.com Query time: 2025-04-12 17:53:27 Registrant company: 1f8f4166599d23ee Registrant country: United States Registrant email: 9253e579452ffad5s@ Registrant state: 77ab92f1911d7c5f Update date: 2025-04-10 00:00:00
references
https://x.com/Phish_Destroy/status/1910333768591646790, https://x.com/Phish_Destroy/status/1910334093461516631, https://x.com/Phish_Destroy/status/1910334260977746022, https://x.com/Phish_Destroy/status/1910334724591042918, https://x.com/Phish_Destroy/status/1910335092049994132, https://x.com/Phish_Destroy/status/1910336395752714242, https://x.com/Phish_Destroy/status/1910336517551116434, https://x.com/Phish_Destroy/status/1910336678142636213, https://x.com/Phish_Destroy/status/1910337105227633151, https://x.com/Phish_Destroy/status/1910337878468538639, https://x.com/Phish_Destroy/status/1910338836468539658, https://x.com/Phish_Destroy/status/1910339099673698610, https://x.com/Phish_Destroy/status/1910339563861553429, https://x.com/Phish_Destroy/status/1910339651639914848, https://x.com/Phish_Destroy/status/1910339958495228197, https://x.com/Phish_Destroy/status/1910340248376049971, https://x.com/Phish_Destroy/status/1910341266065305631, https://x.com/Phish_Destroy/status/1910341545720488056, https://x.com/Phish_Destroy/status/1910341643158368573, https://x.com/Phish_Destroy/status/1910342125989883954, https://x.com/Phish_Destroy/status/1910342555826282851, https://x.com/Phish_Destroy/status/1910344985565602066, https://x.com/Phish_Destroy/status/1910345277858267644, https://x.com/Phish_Destroy/status/1910345421710320058, https://x.com/Phish_Destroy/status/1910345510034059707, https://x.com/Phish_Destroy/status/1910345735704359001, https://x.com/Phish_Destroy/status/1910345953590002086, https://x.com/Phish_Destroy/status/1910347037838631363, https://x.com/Phish_Destroy/status/1910347296191004907, https://x.com/Phish_Destroy/status/1910347499455324308, https://x.com/Phish_Destroy/status/1910347783757799647, https://x.com/Phish_Destroy/status/1910348672128123244, https://x.com/Phish_Destroy/status/1910348764725866605, https://x.com/Phish_Destroy/status/1910349153898582118, https://x.com/Phish_Destroy/status/1910349236329120019, https://x.com/Phish_Destroy/status/1910349337848140141, https://x.com/Phish_Destroy/status/1910349613791379967, https://x.com/Phish_Destroy/status/1910359257666515057, https://x.com/Phish_Destroy/status/1910359459936755969, https://x.com/Phish_Destroy/status/1910360494466085355, https://x.com/Phish_Destroy/status/1910360675932594350, https://x.com/Phish_Destroy/status/1910360876453863657, https://x.com/Phish_Destroy/status/1910361501451370852, https://x.com/Phish_Destroy/status/1910366490898895065, https://x.com/Phish_Destroy/status/1910366638521667673, https://x.com/Phish_Destroy/status/1910367383711084779, https://x.com/Phish_Destroy/status/1910370856477618349, https://x.com/Phish_Destroy/status/1910371035771294138, https://x.com/Phish_Destroy/status/1910372013178257682, https://x.com/Phish_Destroy/status/1910372781654417416, https://x.com/Phish_Destroy/status/1910374299954983354, https://x.com/Phish_Destroy/status/1910374377381601721, https://x.com/Phish_Destroy/status/1910374874645770362, https://x.com/Phish_Destroy/status/1910375596573483289, https://x.com/Phish_Destroy/status/1910375898433401194, https://x.com/Phish_Destroy/status/1910376549125079410, https://x.com/Phish_Destroy/status/1910377152123371899, https://x.com/Phish_Destroy/status/1910377406881292654, https://x.com/Phish_Destroy/status/1910377650998083813, https://x.com/Phish_Destroy/status/1910379427394974129, https://x.com/Phish_Destroy/status/1910381430212898849, https://x.com/Phish_Destroy/status/1910381974293766621, https://x.com/Phish_Destroy/status/1910382183694414239, https://x.com/Phish_Destroy/status/1910382394344874468, https://x.com/Phish_Destroy/status/1910383153849512057, https://x.com/Phish_Destroy/status/1910383289631731762, https://x.com/Phish_Destroy/status/1910383831640674514, https://x.com/Phish_Destroy/status/1910384059659763766, https://x.com/Phish_Destroy/status/1910385043266216076, https://x.com/Phish_Destroy/status/1910385126237691970, https://x.com/Phish_Destroy/status/1910386245168988444, https://x.com/Phish_Destroy/status/1910386377201512855, https://x.com/Phish_Destroy/status/1910386679082369162, https://x.com/Phish_Destroy/status/1910386811286831256, https://x.com/Phish_Destroy/status/1910386876181065773, https://x.com/Phish_Destroy/status/1910387967572447446, https://x.com/Phish_Destroy/status/1910388275019198475, https://x.com/Phish_Destroy/status/1910388473267380573, https://x.com/Phish_Destroy/status/1910388602254876717, https://x.com/Phish_Destroy/status/1910393105943048668, https://x.com/Phish_Destroy/status/1910393224625361084, https://x.com/Phish_Destroy/status/1910393523167179113, https://x.com/Phish_Destroy/status/1910393734317183109, https://x.com/Phish_Destroy/status/1910393927779098900, https://x.com/Phish_Destroy/status/1910395110929453196, https://x.com/Phish_Destroy/status/1910395365926351193, https://x.com/Phish_Destroy/status/1910398098020409552, https://x.com/Phish_Destroy/status/1910398544197956083, https://x.com/Phish_Destroy/status/1910399298778386500, https://x.com/Phish_Destroy/status/1910411354718040106, https://x.com/Phish_Destroy/status/1910412839463846304, https://x.com/Phish_Destroy/status/1910414914524492175, https://x.com/Phish_Destroy/status/1910416550596608500
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 1 year ago · Last seen 1 month ago
Appeared in 6 threat reports