IOC Radar
DomainMediumSignal 37/100

dvlavehicletax-refund.com

First Seen
Dec 30, 2024
Last Seen
Feb 13, 2026
Dec 30
First Seen
530d ago
Feb 13
Last Seen
120d ago
4
Reports
source reports
37%
Confidence
medium
Found in 4 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
37%
Signal Score
37 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

39 techniques

Feed Intelligence Summary

4 reports37% confidence
4
Source reports
37%
Confidence score
Category tags
account takeover attemptactive scanningauthentication attackbotnetbrand impersonationbrute forcecommand and controlcredential accesscredential harvestingcredential phishingcredential stuffingcredential theftdata exfiltrationdenial of servicedistributed attacksftp brute forcehttp brute forcehydra attackindicatorlogin attacklogin attemptsmalicious attachmentmalicious linkmalicious softwaremalwaremedusa attacknetworknetwork attacksnetwork probingnetwork protocolnetwork scanningnetwork securitynetwork service scanningnmap scanphishingphishing attackphishing-databaseprocess injectionprotocol exploitationrdp scanningreconnaissancereconnaissance activityremote accessremote servicesresearchedservice enumerationsmb scanningsmtp brute forcesocial engineeringssh attacksyn scant1018t1021t1021.001t1021.002t1040t1046t1055t1059t1059.001t1059.004t1071.001t1076t1078t1110t1110.001t1110.002t1110.003t1189t1190t1486t1496t1499.002t1499.003t1563t1565t1566t1566.001t1566.002t1566.003t1566.004t1589t1589.002t1592t1595t1595.001t1595.002t1595.003t1598t1598.003tcp scantcp scanningtelnet threatudp scanvulnerability scan

Activity Timeline

1 total obs
Feb 13Feb 13

Threat Activity Heatmap

· Peak: 2026-02-13
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain **dvlavehicletax-refund.com** has emerged as a significant indicator of compromise (IOC) associated with multiple cyber threats, including botnet activity, malware distribution, and phishing campaigns. First observed on December

Threat ScoreLow Risk
37
SIGNAL
Signal Score
37%
Confidence
4
Reports
First seenDec 30, 2024
Last seenFeb 13, 2026

VirusTotal

Not checked

WHOIS

registrar
NameCheap, Inc.
description
For POC
domain rank
-1
raw
Creation Date: 2021-05-24T08:10:23Z DNSSEC: unsigned Domain Name: DVLAVEHICLETAX-REFUND.COM Domain Status: clientHold https://icann.org/epp#clientHold Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Name Server: DNS1.NAMECHEAPHOSTING.COM Name Server: DNS2.NAMECHEAPHOSTING.COM Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.6613102107 Registrar IANA ID: 1068 Registrar URL: http://www.namecheap.com Registrar WHOIS Server: whois.namecheap.com Registrar: NameCheap, Inc. Registry Domain ID: 2614496005_DOMAIN_COM-VRSN Registry Expiry Date: 2022-05-24T08:10:23Z Updated Date: 2021-05-24T11:10:18Z
subdomains count
1

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 4 months ago
Appeared in 4 threat reports