IOC Radar
DomainMediumSignal 100/100

manage-dhl.com

Location
AustriaAustria
First Seen
Apr 5, 2024
Last Seen
Jan 22, 2026
Apr 5
First Seen
802d ago
Jan 22
Last Seen
144d ago
7
Reports
source reports
99%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

29 techniques

Feed Intelligence Summary

7 reports99% confidence
7
Source reports
99%
Confidence score
Category tags
accessadminasiaaustriabanking credentialsbbkbec attemptbettingbhutanblueskybotnetbrbrand impersonationcanadachemical & pharmaceuticalcmscommand and controlconfigcredential harvestingcredential theftcrypto currencycssdata exfiltrationdelivery service scamdetailsdhldhl phishing campaigndistributed attacksdomaindomainselectronic health recordsexpressfinancefintechfleet managementfrancefraudfreight servicesgaminggermanygithubglobalgroupshealth care and social assistancehealth information technologyhealthcare information systemshospital managementhtmlhttphttpshungaryic3imagesindexindicatorinfoinformation technologyinfrastructure acquisitionreconnaissanceipfsirelanditalylabhostmalicious linksmalicious softwaremalwaremaritime transportmedia & entertainmentmedical servicesmediummexiconetnetworknorth americapagepassenger transportationpatient carepersonal informationphishingphishing attackphishing domainsphishing urlsphishing-as-a-servicephppioneerplpleskpolandprocess injectionragnarokrail transportrecaptcharesearchedretailromaniascamscriptshipping & logisticsslugsmssocial engineeringsoftware publishersupportsurface webt1055t1071.001t1071.004t1078t1189t1192t1204t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1566.004t1567.001t1583t1583.001t1587.001t1588t1588.002t1588.004t1590.001t1598t1598.003telecommunicationtinymcetransportation and warehousingtransportation infrastructuretransportation technologytwitterunited statesuploadurlurlsweb securitywebsite

Activity Timeline

1 total obs
Jan 22Jan 22

Threat Activity Heatmap

· Peak: 2026-01-22
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated

The Indicator of Compromise (IOC) `manage-dhl.com` represents a critical and immediate threat, scoring 100.0 and lacking any whitelisting, indicating its highly malicious nature. This domain is unequivocally associated with sophisticated phishing campaigns, primarily targeting unsuspecting users with fraudulent DHL-themed lures to steal credentials and sensitive information. The potential impact on our organization if this IOC is encountered ranges from severe data breaches and financial losses …

Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
7
Reports
First seenApr 5, 2024
Last seenJan 22, 2026

VirusTotal

Not checked

WHOIS

description
This page stores DHL phishing page IOCs. Legitimate website for the brand is https://www.dhl.com/ NOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense
domain rank
-1
raw
Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2024-03-31 00:00:00 Domain name: manage-dhl.com Domain registrar id: 1647.0 Domain registrar url: https://www.registrar.eu Expiry date: 2025-03-31 00:00:00 Name server 1: ns2.openprovider.be Name server 2: ns3.openprovider.eu Name server 3: ns1.openprovider.nl Query time: 2024-04-01 09:54:08 Registrant city: 1f8f4166599d23ee Registrant country: United States Registrant email: 773f49acbc92c595s@ Registrant fax: 1f8f4166599d23ee Registrant name: 1f8f4166599d23ee Registrant phone: 1f8f4166599d23ee Registrant state: e2ccb5de5e880e2b Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2024-03-31 00:00:00
references
https://www.virustotal.com/gui/collection/9e06470d30593e11c8daad2157e0d4ef1ccce47787e2b5303846704767c26d6a
subdomains count
2

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 2 years ago · Last seen 4 months ago
Appeared in 7 threat reports