IOC Radar
DomainHighVerifiedSignal 100/100

www.bczqw.cn

First Seen
Jun 29, 2024
Last Seen
Feb 15, 2026
Jun 29
First Seen
717d ago
Feb 15
Last Seen
121d ago
5
Reports
source reports
99%
Confidence
high
9/91
VirusTotal
detections
Found in 5 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

25 techniques

Feed Intelligence Summary

5 reports99% confidence
5
Source reports
99%
Confidence score
Category tags
american expressamexbankingbotnetbrand abusebrand impersonationcommand and controlcredential harvestingcredential phishingcredit cardcredit card phishingcredit card servicesdata exfiltrationdistributed attacksfinancefinance and insurancefinancial sector targetingfinancial servicesfinancial services targetingfinancial technologyfraudindicatorinfrastructure acquisitionreconnaissanceiocsmalicious linksmalicious softwaremalicious websitemalwarenetworknola defensepayment processingphishingphishing attackphishing domainphishing urlprocess injectionresearchedscamsocial engineeringt1055t1071.001t1078t1078.004t1105t1189t1195t1195.002t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1583t1583.001t1587.001t1588t1588.002t1590.001urlswealth managementweb security

Activity Timeline

1 total obs
Feb 15Feb 15

Threat Activity Heatmap

· Peak: 2026-02-15
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain www.bczqw.cn has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnet activity, malware distribution, and phishing campaigns. First observed on June

Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
5
Reports
First seenJun 29, 2024
Last seenFeb 15, 2026
Verified IOC

VirusTotal

9/ 91vendors flagged
10% detection rateJun 8, 2026

WHOIS

description
This page stores American Express Card phishing page IOCs. Legitimate website for the brand is https://www.americanexpress.com/ NOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense
raw
DNSSEC: unsigned Domain Name: bczqw.cn Domain Status: ok Expiration Time: 2025-11-05 05:23:24 Name Server: elisabeth.ns.cloudflare.com Name Server: jerome.ns.cloudflare.com Registrant Contact Email: [email protected] Registrant: 26cf79088b31f77a Registration Time: 2024-11-05 05:23:24 Sponsoring Registrar: 阿里云计算有限公司（万网）

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 1 year ago · Last seen 4 months ago
Appeared in 5 threat reports