DomainMediumSignal 76/100
surveygifts.org
Location
TurkeyFirst Seen
Feb 5, 2026
Last Seen
Jun 6, 2026
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
76%
Signal Score
76 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
10 reports76% confidence
10
Source reports
76%
Confidence score
Category tags
abuseaccount securityalienvault_ransomwareaptbackdoorbad reputationbelarusbitcoinblockchainbodybrute forcec2 infrastructurecaptchaclickfix malware campaigncode injectioncommand & controlcommand executioncommodity contracts intermediationcredential harvestingcredential stuffingcrypto exchangecrypto miningcrypto walletcryptocurrencycyber campaigncybersecurity companyczechczech republicdata encryptiondata exfiltrationdata store exposuredecentralized financedigital currencyencryptioneuropeeurope/asiaexecutable fileexodusexploitation activityexposure assessment platformexposure managementextortionfake captchaglasswormhtmlhtmlcsshungaryidentity & access exploitationimpure stealerindicatorinformation stealerinfostealerinjection activityiociocsjavascript injectionloaderloader c2sloader malwaremalicious powershell activitymalicious softwaremalwaremanaged security solutionsmulti-vector threat campaignmustnetworkoperating systemoperating system securityoperation camelclonephishingpolandpolishprocess injectionpythonransomwarerapid7remote accessresearchedscams & fraudscripting attackssecurity operationsslovakiastealcstealerswedenswedishsystem disruptiont1005t1021.001t1027t1027.002t1041t1055t1059t1059.001t1059.007t1069.001t1071t1071.001t1078t1086t1095t1102.001t1104t1105t1132.002t1133t1140t1189t1190t1204.001t1204.002t1486t1490t1497.001t1497.003t1499.002t1539t1552t1555t1555.003t1565t1566t1571t1573.001t1583.001t1584.006t1587t1588.001t1608.001t1608.004tengu ransomwarethreat actorthreat groupthreat intelligencetor nodeturkeyturkishtwittervidarvidar stealervodkastealervoid#geistweb exploitationweb-based malwarewordpress compromiseyarayara rule
Activity Timeline
Jun 6Jun 6
Threat Activity Heatmap
· Peak: 2026-06-06LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated
The domain **surveygifts.org**, originating from Turkey, has been identified as a significant indicator of compromise (IOC) associated with multiple cyber threats. First observed on February
Threat ScoreHigh Risk
76
SIGNAL
Signal Score
76%
Confidence
10
Reports
First seenFeb 5, 2026
Last seenJun 6, 2026
VirusTotal
Not checked
WHOIS
- registrar
- NameSilo, LLC
- creation date
- 2025-11-03T15:05:19
- expiration date
- 2026-11-03T15:05:19
- updated date
- 2025-11-08T15:05:41
- name servers
- ns1.dnsowl.com, ns2.dnsowl.com, ns3.dnsowl.com
- emails
- [email protected]
- status
- ok https://icann.org/epp#ok
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
mediumFirst detected 4 months ago · Last seen 11 days ago
Appeared in 10 threat reports