IOC Radar
DomainHighVerifiedSignal 100/100

transcorpbank.com

Location
NetherlandsNetherlands
First Seen
Mar 16, 2026
Last Seen
Jun 10, 2026
Mar 16
First Seen
99d ago
Jun 10
Last Seen
13d ago
6
Reports
source reports
99%
Confidence
high
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

6 techniques

Feed Intelligence Summary

6 reports99% confidence
6
Source reports
99%
Confidence score
Category tags
brand impersonationbrute forcecredential harvestingcredential stuffingdestroylist_phishingeuropeexploitation activityidentity & access exploitationindicatorinitial access vectornetherlandsnetworkphishingphishing activityphishing attackphishing domainsransomwareresearchedsocial engineeringt1566t1566.001t1566.002t1566.003t1583t1598tor node

Activity Timeline

1 total obs
Jun 10Jun 10

Threat Activity Heatmap

· Peak: 2026-06-10
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **transcorpbank.com** has been identified as a critical indicator of compromise (IOC) associated with sophisticated phishing and ransomware campaigns originating from the Netherlands. First observed on March

Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
6
Reports
First seenMar 16, 2026
Last seenJun 10, 2026
Verified IOC

VirusTotal

Not checked

WHOIS

registrar
NAMECHEAP INC
domain rank
-1
raw
Admin City: Reykjavik Admin Country: IS Admin Email: [email protected] Admin Organization: Privacy service provided by Withheld for Privacy ehf Admin Postal Code: 101 Admin State/Province: Capital Region Creation Date: 2018-11-12T17:29:33.00Z Creation Date: 2018-11-12T17:29:33Z DNSSEC: unsigned Domain Name: TRANSCORPBANK.COM Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain name: transcorpbank.com Name Server: NS1.DNS-GLOBALLY.COM Name Server: NS10.DNS-GLOBALLY.COM Name Server: NS2.DNS-GLOBALLY.COM Name Server: NS3.DNS-GLOBALLY.COM Name Server: NS4.DNS-GLOBALLY.COM Name Server: NS5.DNS-GLOBALLY.COM Name Server: NS6.DNS-GLOBALLY.COM Name Server: NS7.DNS-GLOBALLY.COM Name Server: NS8.DNS-GLOBALLY.COM Name Server: NS9.DNS-GLOBALLY.COM Name Server: ns1.dns-globally.com Name Server: ns10.dns-globally.com Name Server: ns2.dns-globally.com Name Server: ns3.dns-globally.com Name Server: ns4.dns-globally.com Name Server: ns5.dns-globally.com Name Server: ns6.dns-globally.com Name Server: ns7.dns-globally.com Name Server: ns8.dns-globally.com Name Server: ns9.dns-globally.com Registrant City: ddbf76e4e8cee320 Registrant Country: IS Registrant Email: [email protected] Registrant Fax Ext: 3432650ec337c945 Registrant Fax: 3432650ec337c945 Registrant Name: 37bfbc24cafea5d2 Registrant Organization: 4b7a0912c26a13e2 Registrant Phone Ext: 3432650ec337c945 Registrant Phone: 1c9a7bcdeaf95e9f Registrant Postal Code: f206c9d9737ad45d Registrant State/Province: 3e0204199d8ebf9c Registrant Street: c6523241936df1ba Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.6613102107 Registrar Abuse Contact Phone: +1.9854014545 Registrar IANA ID: 1068 Registrar Registration Expiration Date: 2026-11-12T17:29:33.00Z Registrar URL: http://www.namecheap.com Registrar WHOIS Server: whois.namecheap.com Registrar: NAMECHEAP INC Registrar: NameCheap, Inc. Registry Domain ID: 2331876916_DOMAIN_COM-VRSN Registry Expiry Date: 2026-11-12T17:29:33Z Tech City: Reykjavik Tech Country: IS Tech Email: [email protected] Tech Organization: Privacy service provided by Withheld for Privacy ehf Tech Postal Code: 101 Tech State/Province: Capital Region Updated Date: 2025-11-17T04:37:50.22Z Updated Date: 2025-11-17T04:37:50Z
subdomains count
3

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 3 months ago · Last seen 13 days ago
Appeared in 6 threat reports