DomainMediumSignal 82/100
raytherrien.com
Location
First Seen
Feb 19, 2026
Last Seen
Jun 24, 2026
Found in 13 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
82%
Signal Score
82 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
13 reports82% confidence
13
Source reports
82%
Confidence score
Category tags
abuseabusech-threatfox-c2cactive scanactive scanningalienvault_ransomwareaptattackautomated analysisbackdoorbad reputationblock-or-filter-listbrute forcebrute force attackbrute force attemptc2c2 communicationcommand & controlcredential accesscredential stuffingcyber campaigndata encryptiondata exfiltrationdata store exposureencryptionexploitation activityextortionftpglasswormglobal campaigngoogle adsidentity & access exploitationindicatorinformation stealerinfostealerinitial accessinjection activityiocmacosmalicious activitymalicious softwaremalvertisingmalwaremalware activitymalware deliverymulti-vector threat campaignnetworknetwork scanningnetwork securitynorth americanovel iocnovel-iocobserved macosoperation camelclonepassword attackspatched samplephantompulsephishingport-scanningprecogprocess injectionprotocol exploitationransomwarereconnaissanceremote accessremote servicesresearchedservice scanshub stealerssh attacksystem disruptiont1005t1016t1021t1021.001t1027t1036t1040t1041t1046t1055t1056.002t1057t1059t1059.002t1059.004t1059.007t1070.004t1071t1071.001t1076t1078t1082t1083t1087t1105t1110t1110.001t1110.002t1110.003t1110.004t1133t1140t1190t1204t1486t1490t1539t1543.001t1543.004t1552.001t1555.001t1555.003t1560t1563t1565t1566t1574t1595t1595.001t1595.002t1595.003t1614telnet threattengu ransomwaretext-sharing platformthreat actorthreat grouptor nodeunited statesvm detectionvoid#geistyarayara rule
Activity Timeline
Jun 24Jun 24
Threat Activity Heatmap
LessMore
Mon
Wed
Fri
24h
1
Minimal
7d
1
Minimal
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
82
SIGNAL
Signal Score
82%
Confidence
13
Reports
First seenFeb 19, 2026
Last seenJun 24, 2026
VirusTotal
Not checked
WHOIS
- description
- Command and Control domains for Malware. These domains are extracted from a number of sources, and are suspicious.
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 4 months ago · Last seen today
Appeared in 13 threat reports