IOC Radar
DomainMediumSignal 43/100

lindiomargomes.com

Location
BhutanBhutan
First Seen
Apr 20, 2024
Last Seen
Mar 9, 2026
Apr 20
First Seen
784d ago
Mar 9
Last Seen
96d ago
9
Reports
source reports
43%
Confidence
medium
12/91
VirusTotal
detections
Found in 9 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
43%
Signal Score
43 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

30 techniques

Feed Intelligence Summary

9 reports43% confidence
9
Source reports
43%
Confidence score
Category tags
accessadminasiaattachment-basedattackattack-vectoraustriabbkbecbec attemptbettingbhutanblueskybotnetbrbrand impersonationbusiness email compromisecanadachemical & pharmaceuticalcmscommand and controlconfigcredential harvestingcredential phishingcredential theftcredential-harvestingcredential-theftcrypto currencycssdata exfiltrationdelivery service scamdetailsdhldhl phishing campaigndistributed attacksdomaindomainsemail-based-attackemail-fraudemail-phishingexpressfake login pagefinancefintechfleet managementfrancefraudfreight servicesgaminggermanygithubglobalgroupshtmlhttphttpshungaryimagesindexindicatorindicators-of-compromiseinfoinformation technologyinfrastructure acquisitionreconnaissanceipfsirelanditalylink injectionlink redirectionmalicious activitymalicious attachmentmalicious linksmalicious softwaremalicious-attachmentmalicious-urlmalwaremalware deliverymalware distributionmaritime transportmedia & entertainmentmediummexiconetnetworknorth americapagepassenger transportationphishingphishing attackphishing campaignphishing domainsphishing indicatorsphishing sitephishing urlsphishing-databasephppioneerplpleskpolandprocess injectionragnarokrail transportrecaptcharesearchedretailromaniascamscriptshipping & logisticsslugsmssms phishingsocial engineeringsoftware publisherspamsupportsurface webt1055t1071.001t1071.004t1078t1078.004t1189t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1566.004t1567.001t1583t1583.001t1587.001t1588t1588.002t1588.004t1590.001t1598t1598.003telecommunicationthreat actorthreat-actor: unknowntinymcetransportation and warehousingtransportation infrastructuretransportation technologytwitterunited statesuploadurgent requesturlurlsweb securitywebsitewebsite spoofing

Activity Timeline

1 total obs
Mar 9Mar 9

Threat Activity Heatmap

· Peak: 2026-03-09
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The domain **lindiomargomes.com** has emerged as a significant indicator of compromise (IOC) linked to multiple cyber threats originating from Bhutan. First observed on April

Threat ScoreMedium Risk
43
SIGNAL
Signal Score
43%
Confidence
9
Reports
First seenApr 20, 2024
Last seenMar 9, 2026

VirusTotal

12/ 91vendors flagged
13% detection rateJun 8, 2026

WHOIS

registrar
PDR Ltd. d/b/a PublicDomainRegistry.com
description
This page stores DHL phishing page IOCs. Legitimate website for the brand is https://www.dhl.com/ NOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense
domain rank
-1
raw
Admin City: Palmas de Monte Alto Admin Country: BR Admin Email: [email protected] Admin Postal Code: 46460-000 Admin State/Province: BA Creation Date: 2022-05-11T17:06:55Z DNSSEC: Unsigned DNSSEC: unsigned Domain Name: LINDIOMARGOMES.COM Domain Status: REDEMPTIONPERIOD https://icann.org/epp#redemptionPeriod Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: redemptionPeriod https://icann.org/epp#redemptionPeriod Name Server: DNS10.PARKPAGE.FOUNDATIONAPI.COM Name Server: DNS11.PARKPAGE.FOUNDATIONAPI.COM Registrant City: 2c9b0f3c0ebf35a6 Registrant Country: BR Registrant Email: [email protected] Registrant Fax Ext: 3432650ec337c945 Registrant Fax: 3432650ec337c945 Registrant Name: 3f2aafc8d663b609 Registrant Organization: 3432650ec337c945 Registrant Phone Ext: 3432650ec337c945 Registrant Phone: 0a16bbf2798d9389 Registrant Postal Code: 3e1fdca8ea2014e8 Registrant State/Province: e808d85e1bb54f9f Registrant Street: 95e8e82d371e9826 Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.2013775952 Registrar IANA ID: 303 Registrar Registration Expiration Date: 2024-05-11T17:06:55Z Registrar URL: http://www.publicdomainregistry.com Registrar URL: www.publicdomainregistry.com Registrar WHOIS Server: whois.PublicDomainRegistry.com Registrar WHOIS Server: whois.publicdomainregistry.com Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com Registry Admin ID: Not Available From Registry Registry Domain ID: 2695373870_DOMAIN_COM-VRSN Registry Expiry Date: 2024-05-11T17:06:55Z Registry Registrant ID: Not Available From Registry Registry Tech ID: Not Available From Registry Tech City: Palmas de Monte Alto Tech Country: BR Tech Email: [email protected] Tech Postal Code: 46460-000 Tech State/Province: BA Updated Date: 2024-06-22T18:08:14Z Updated Date: 2024-06-22T18:08:15Z
references
https://www.virustotal.com/gui/collection/9e06470d30593e11c8daad2157e0d4ef1ccce47787e2b5303846704767c26d6a
subdomains count
1

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 3 months ago
Appeared in 9 threat reports