DomainMediumSignal 70/100
proton66.ru
Location
Russian FederationFirst Seen
Mar 20, 2025
Last Seen
Jun 11, 2026
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
70%
Signal Score
70 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
7 reports70% confidence
7
Source reports
70%
Confidence score
Category tags
active scanactive scanninganti-fraud bypassbad web botblackbastablog spambotnetbotnet activitybrute forcebrute force attackbrute-forcebruteforcec2c2 dashboardcommand & controlcommand and controlcompromised devicescredential accesscredential harvestingcredential stuffingdata exfiltrationdata store exposuredatabase securityddosddos attackdenial of servicedistributed attacksdouble victimizationeurope/asiaexploitation activityexploited hostfraud ordersfraud voipftp brute forceftp brute-forceghostsocksgolanghackinghk relayidentity & access exploitationindicatorinformation technologyinfostealerinjection activityinjection attacksiocs: ip addressesiot securityiot targetedit infrastructureltd rulummastealermaasmalwaremultiple apt/malwarenetworknetwork scanningopen proxypassword attacksphishingphishing attackping of deathprotocol: ftpprotocol: sshproxyproxy malwareransomwarereconnaissanceresearchedresidential proxyruru relayrussiarussian federationscams & fraudscannersocial engineeringsocks5software developmentspamsql injectionsshssh attackt1021t1046t1059t1059.003t1071t1090t1105t1110t1110.001t1110.002t1110.003t1110.004t1190t1203t1486t1496t1499.001t1499.002t1499.003t1566.001t1566.002t1566.003t1571t1595t1595.001t1595.002t1595.003targeting databasethreat actortor nodeuk relayvpnvpn ipweb app attackweb application attackweb exploitationweb spam
Activity Timeline
Jun 11Jun 11
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
1
Minimal
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
70
SIGNAL
Signal Score
70%
Confidence
7
Reports
First seenMar 20, 2025
Last seenJun 11, 2026
VirusTotal
Not checked
WHOIS
- registrar
- BEGET-RU
- creation date
- 2023-02-20T15:43:34
- expiration date
- 2027-02-20T15:43:34
- name servers
- ns1.beget.com., ns1.beget.pro., ns2.beget.com., ns2.beget.pro.
- org
- OOO "Proton66"
- status
- REGISTERED, DELEGATED, UNVERIFIED
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 1 year ago · Last seen today
Appeared in 7 threat reports