IOC Radar
DomainMediumSignal 91/100

rvdownloads.com

Location
United StatesUnited States
First Seen
Mar 23, 2026
Last Seen
May 11, 2026
Mar 23
First Seen
94d ago
May 11
Last Seen
45d ago
11
Reports
source reports
91%
Confidence
medium
Found in 11 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
91%
Signal Score
91 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

45 techniques

Feed Intelligence Summary

11 reports91% confidence
11
Source reports
91%
Confidence score
Category tags
abuse reportabusech-threatfox-c2cactive scanactive scanningauthentication_attemptsbad reputationbotnetbotnet activitybotnet c2 activitybotnet_activitybotnet_c2brand abusebrute forcebrute_force_attackc2c2_communicationc2_communicationscommand & controlcommand and controlcommand_and_controlcredential harvestingcredential stuffingcredential theftcredential_attackdata exfiltrationdata store exposuredistributed attacksexploitation activityhttp_protocolidentity & access exploitationindicatorindicators_of_compromiseinfostealerinfrastructure acquisitionreconnaissanceinitial_accessinjection activityinternet_scansiocsmacosmacsyncmalicious softwaremalicious_trafficmalwaremalware hostingmalware_activitymanual-collectionmedium-risknetworknetwork probingnetwork_scanningnorth americaphantompulsephishingphishing attackprocess injectionreconnaissanceresearchedrogue domainshub stealersocial engineeringssh_protocolstealert1005t1008t1027t1036t1041t1046t1055t1059.002t1059.007t1071.001t1082t1083t1087t1090t1102t1110t1140t1204t1486t1496t1499.002t1499.003t1539t1543.001t1543.004t1552.001t1555.001t1555.003t1560t1565t1566t1566.001t1566.002t1566.003t1573t1574t1583t1583.001t1587.001t1590.001t1595.001t1595.002t1595.003t1598.003t1614tor nodetype osintunited states

Activity Timeline

1 total obs
May 11May 11

Threat Activity Heatmap

· Peak: 2026-05-11
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreHigh Risk
91
SIGNAL
Signal Score
91%
Confidence
11
Reports
First seenMar 23, 2026
Last seenMay 11, 2026

VirusTotal

Not checked

WHOIS

description
Command and Control domains for Malware. These domains are extracted from a number of sources, and are suspicious.

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 3 months ago · Last seen 1 month ago
Appeared in 11 threat reports