IOC Radar
DomainMediumSignal 45/100

dpd.tonrk.icu

First Seen
Jul 13, 2025
Last Seen
Jun 4, 2026
Jul 13
First Seen
336d ago
Jun 4
Last Seen
10d ago
6
Reports
source reports
45%
Confidence
medium
Found in 6 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
45%
Signal Score
45 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

23 techniques

Feed Intelligence Summary

6 reports45% confidence
6
Source reports
45%
Confidence score
Category tags
account compromiseattachment phishingattack vectorbecbec attackbotnetbotnet activitybrand impersonationbrute forcebusiness email compromisecommand and controlcredential harvestingcredential phishingcredential stuffingcredential theftdata exfiltrationdata store exposuredeceptive emailsdeceptive websitesdistributed attacksexploitation activityfinancial phishingfraudulent emailsidentity & access exploitationindicatorinitial accessinjection activitylink injectionlink redirectionmalicious attachmentmalicious linkmalicious linksmalicious softwaremalwaremalware deliverymalware distributionnetworkpayload deliveryphishingphishing activityphishing attackphishing campaignphishing campaign detectedphishing campaign detectionphishing domainsphishing indicatorsphishing-databaseprocess injectionransomwareresearchedscams & fraudsecurity awarenesssecurity operationssocial engineeringspearphishingt1055t1071t1071.001t1078t1189t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1566.004t1568t1568.002t1598t1598.003threat intelligencetor nodeweb securitywebsite forgerywebsite phishing

Activity Timeline

1 total obs
Jun 4Jun 4

Threat Activity Heatmap

· Peak: 2026-06-04
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreMedium Risk
45
SIGNAL
Signal Score
45%
Confidence
6
Reports
First seenJul 13, 2025
Last seenJun 4, 2026

VirusTotal

Not checked

WHOIS

description
LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
raw
Create date: 2025-07-10 00:00:00 Domain name: tonrk.icu Domain registrar id: 1923 Domain registrar url: https://www.gname.com/ Expiry date: 2026-07-10 00:00:00 Name server 1: kianchau.ns.cloudflare.com Name server 2: jule.ns.cloudflare.com Query time: 2025-07-11 11:51:21 Registrant company: 3454eacb072fc7b7 Registrant country: Portugal Registrant email: 29e2c061f3c9524es@ Registrant state: 80a9f1927f9e10de Update date: 2025-07-10 00:00:00

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 11 months ago · Last seen 10 days ago
Appeared in 6 threat reports