WelchSec C2 Domain Monitor

📡 LIVE FEED MONITOR

🔎 CHECK A DOMAIN

☠ KNOWN C2 FEEDS

CONFIGURATION

WORKER URL

MIN RISK SCORE TO SHOW

MAX DOMAINS TO ANALYZE

SCORING WEIGHTS

+35 Known C2 TLD (.xyz .top .tk etc)
+30 DGA pattern (random chars)
+25 Brand impersonation
+20 High entropy domain name
+15 Excessive hyphens/numbers
+15 No MX records
+10 Very new domain (<7 days)
+10 Suspicious keywords
-10 Established TLD (.com .org)

STATS

FETCHED

FLAGGED

CRITICAL

HIGH

Waiting...

FLAGGED 0

CRITICAL 0

ALL ANALYZED 0

LOG

⚠ This tool is for defensive threat intelligence only. Use findings to protect your organization — monitor for lookalike domains, brand impersonation, and emerging C2 infrastructure targeting your sector.

📡

CLICK FETCH & ANALYZE TO PULL TODAY'S
NEWLY REGISTERED DOMAINS AND SCORE
EACH ONE FOR C2 INDICATORS

DOMAINSCOREAGETLDRISK

🔎

ENTER A DOMAIN AND CLICK ANALYZE
FULL C2 RISK SCORING WITH DETAILED
BREAKDOWN OF EVERY INDICATOR

ALL IOCs 0

DOMAINS 0

IP ADDRESSES 0

LOG

⚠ C2 feed data sourced from abuse.ch public threat intelligence feeds. For defensive use — block these IOCs in your firewall, DNS resolver, and SIEM.

IOCSOURCETYPEDATE

☠

LOAD C2 FEEDS TO SEE KNOWN MALICIOUS
DOMAINS AND IPs FROM ABUSE.CH

DOMAINSOURCETYPEDATE

IP ADDRESSSOURCETYPEDATE