DomainHighVerifiedSignal 69/100
uncofig.com
Location
TurkeyFirst Seen
Apr 21, 2025
Last Seen
May 2, 2026
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
69%
Signal Score
69 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
5 reports69% confidence
5
Source reports
69%
Confidence score
Category tags
c2command & controlcommand and controldata exfiltrationdata store exposureeurope/asiaexploitation activityindicatorinfostealerinjection activitymalicious softwaremalwarenetworknjratprocess injectionratredline stealerresearchedt1005t1041t1055t1071t1071.001t1105t1486t1565t1573turkey
Activity Timeline
May 2May 2
Threat Activity Heatmap
· Peak: 2026-05-02LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreMedium Risk
69
SIGNAL
Signal Score
69%
Confidence
5
Reports
First seenApr 21, 2025
Last seenMay 2, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- domain rank
- -1
- raw
- Create date: 2024-12-26 00:00:00 Domain name: uncofig.com Domain registrar id: 146.0 Domain registrar url: whois.godaddy.com Expiry date: 2026-12-26 00:00:00 Name server 1: CLAYTON.NS.CLOUDFLARE.COM Name server 2: FISH.NS.CLOUDFLARE.COM Query time: 2026-01-02 02:45:49 Technical country: Saudi Arabia Update date: 2025-12-29 00:00:00
- references
- https://github.com/Abjuri5t/SarlackLab/raw/refs/heads/main/IOCs.csv, https://github.com/Abjuri5t/SarlackLab/tree/main/IOCs.csv/, https://abjuri5t.github.io/SarlackLab/, https://malpedia.caad.fkie.fraunhofer.de/details/win.nanocore //, https://malpedia.caad.fkie.fraunhofer.de/details/win.redline_ste, https://malpedia.caad.fkie.fraunhofer.de/details/win.njrat // ak
- subdomains count
- 11
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 1 year ago · Last seen 1 month ago
Appeared in 5 threat reports