IOC Radar
DomainMediumSignal 59/100

yotaboix.com

Location
PolandPoland
First Seen
Sep 8, 2025
Last Seen
Jun 4, 2026
Sep 8
First Seen
278d ago
Jun 4
Last Seen
10d ago
7
Reports
source reports
59%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
59%
Signal Score
59 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

44 techniques

Feed Intelligence Summary

7 reports59% confidence
7
Source reports
59%
Confidence score
Category tags
aaaaabout contactacceptaccessaccount securityactive scanadded activeaddress googleamerica flagapacheapplearmadillov171australiaauthoritybackdoorblackie virusbrute forcec2cheat servicecheckinchina asnchina unknownck idck matrixclick-based attackcode executioncode injectioncode overlapcommandcommand & controlcommand and controlcommand decodecommand executioncommunication protocolcommunication technologiescompromised infrastructurecontactcontent homecontent typecouriercreation datecredential harvestingcredential stuffingcrlf linedarkdata exfiltrationdata store exposuredefense evasiondeletedelete cdelphidiscovery attdns attackdockdynamicdynamic apidynamicloadererroret toreuropeevasion attexitexploitation activityfilesfiles ipfoundfrance asng2 cgenco labshighhostilehostname addhttp attackhttp scannerhttpsidentity & access exploitationindicatorinfrastructure acquisitionreconnaissanceingress tool transferinjection activityinput validation bypassinteliot securityipv4ipv4 addknown torlearnlengthlocallowfimainmalicious domain disseminationmalicious linksmalicious softwaremalwaremalware hostingmarkusmediummenu closemenu homemetadata analysismisc attackmitre attmobile carriersmobile networksmonitored targetmovedmozillamsiename serversname tacticsnetworknextnext associatednode trafficnorth americaoceaniaoperating system securitypackedpassive dnspath traversalpe sectionpe32 executablephishphishingphishing attackpolandpolcertportportalportal openpresent aprpresent augpresent decpresent janpresent junpresent marpresent sepprocessprocess injectionpythonransomwareread creadsrecord valuerelated pulsesremote accessremote servicesresearchedresponse ipreverse dnssafe browsingsearchshowingsocial engineeringsocial media securitysoftware exploitationspawnsstatusstringst1012t1021t1027t1040t1041t1045t1047t1053t1055t1057t1059t1060t1063t1067t1071t1071.001t1078t1082t1090t1105t1112t1113t1129t1133t1140t1143t1190t1203t1204.001t1204.002t1205t1480t1480 executiont1486t1499.002t1565t1566t1566.001t1566.002t1566.003t1573t1587.001t1588t1588.002t1590.001telecom servicestelecommunicationsthreat actorthustitletortor exittor nodetotaltrojan malwaretrojandroppertulach typetwittertype indicatorunitedunited statesunknown nsurlsuser executionvirgin islandsweb application attackweb application exploitationweb securityweb trafficwin32 malwarewindows malwarewindows ntwine emulatorwritex appleyarayara detectionsyara signature

Activity Timeline

1 total obs
Jun 4Jun 4

Threat Activity Heatmap

· Peak: 2026-06-04
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
59
SIGNAL
Signal Score
59%
Confidence
7
Reports
First seenSep 8, 2025
Last seenJun 4, 2026

VirusTotal

Not checked

WHOIS

description
Google.com is the world's largest web server, with an address address of 2.5 million users.. and a domain of 1.6 million servers. £1.3bn

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 9 months ago · Last seen 10 days ago
Appeared in 7 threat reports