DomainHighVerifiedSignal 67/100
reglementpay.fr
Location
First Seen
Jun 28, 2024
Last Seen
Mar 31, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
67%
Signal Score
67 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
5 reports67% confidence
5
Source reports
67%
Confidence score
Category tags
botnetbotnet activitybrute forcecommand and controlcredential harvestingcredential stuffingdata exfiltrationdata store exposuredgadistributed attackseuropeexploitation activityfrancefraud domainsfraudulent websitesidentity & access exploitationindicatorinjection activitymalicious domainmalicious softwaremalwaremalware distribution domainsmalware domainsnetworkphishingphishing attackphishing domainsprocess injectionred flag domainsresearchedscams & fraudsocial engineeringt1055t1071t1071.001t1105t1189t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1583t1583.001t1588t1591
Activity Timeline
Mar 31Mar 31
Threat Activity Heatmap
· Peak: 2026-03-31LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
67
SIGNAL
Signal Score
67%
Confidence
5
Reports
First seenJun 28, 2024
Last seenMar 31, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- registrar
- SAS Ligne Web Services - LWS
- description
- Entries from https://red.flag.domains/ - malicious domains targeting french citizens. Auto-updated each day.
- domain rank
- -1
- raw
- Expiry Date: 2024-11-02T22:35:56.780392Z changed: 2024-10-29T00:25:08.197677Z country: FR created: 2023-11-02T22:35:56.798505Z domain: reglementpay.fr e-mail: [email protected] e-mail: [email protected] eligsource: REGISTRAR eligstatus: ok eppstatus: active eppstatus: associated last-update: 2023-11-07T22:42:12.594844Z nic-hdl: ANO00-FRNIC nic-hdl: SL6122-FRNIC nserver: ns1.dnshostservices.com nserver: ns2.dnshostservices.com nserver: ns3.dnshostservices.com nserver: ns4.dnshostservices.com reachsource: REGISTRAR reachstatus: ok registered: 2007-01-01T00:00:00Z registrar: SAS Ligne Web Services - LWS source: FRNIC status: ACTIVE type: ORGANIZATION type: PERSON
- references
- https://threatintel.cybsec.fr/2023IOCs4_cybsec.txt
- subdomains count
- 0
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 year ago · Last seen 2 months ago
Appeared in 5 threat reports