IOC Radar
DomainMediumSignal 81/100

enrollmentdm.com

Location
RomaniaRomania
First Seen
Jan 11, 2025
Last Seen
Jun 5, 2026
Jan 11
First Seen
516d ago
Jun 5
Last Seen
7d ago
15
Reports
source reports
81%
Confidence
medium
Found in 15 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
81%
Signal Score
81 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

28 techniques

Feed Intelligence Summary

15 reports81% confidence
15
Source reports
81%
Confidence score
Category tags
abuseactive scanaptbad reputationbotnetbotnet activitybrute forcec2c2 ipcentral asiacertcisa kevcivil servicescommand & controlcommand and controlcredential harvestingcredential stuffingcrypto cybercryptocurrencyctacyber threatcyber-espionagedata exfiltrationdata store exposuredefencedistributed attacksdomainseuropeexploit avaliableexploitation activitygovernment targetsgovernment technologyhatvibeidentity & access exploitationin the wildindicatorinfrastructure acquisitionreconnaissanceinjection activitylogpiemalicious softwaremalwaremanualnetworkphishingphishing attackprocess injectionpublic administrationpublic infrastructurepublic policypythonratregulatory agenciesremote access trojanresearchedroromaniasocial engineeringt1003t1003.001t1027t1047t1053.005t1055t1059.005t1071t1071.001t1082t1105t1189t1190t1204.002t1486t1496t1499.002t1499.003t1547.001t1565t1566t1566.001t1566.002t1566.003t1573t1573.001t1587.001t1590.001threat actortimetor nodeturkeyukrainevendor-advisoryweaponized documents

Activity Timeline

1 total obs
Jun 5Jun 5

Threat Activity Heatmap

· Peak: 2026-06-05
Less
More
Mon
Wed
Fri
Jun
·
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Threat ScoreHigh Risk
81
SIGNAL
Signal Score
81%
Confidence
15
Reports
First seenJan 11, 2025
Last seenJun 5, 2026

VirusTotal

Not checked

WHOIS

description
The full text of the full document, containing the details of all the security procedures used by users to access the NHS, has been released by the Department of Health, Social Security and the Office of National Statistics.
domain rank
-1
raw
Administrative city: Reykjavik Administrative country: Iceland Administrative email: [email protected] Administrative state: Capital Region Create date: 2024-05-13 00:00:00 Domain name: enrollmentdm.com Domain registrar id: 1068 Domain registrar url: http://www.namecheap.com Expiry date: 2027-05-13 00:00:00 Name server 1: dns1.registrar-servers.com Name server 2: dns2.registrar-servers.com Query time: 2024-05-14 10:36:00 Registrant city: ddbf76e4e8cee320 Registrant company: 4b7a0912c26a13e2 Registrant country: Iceland Registrant email: [email protected] Registrant name: 37bfbc24cafea5d2 Registrant phone: fc40cd552aeaa6b8 Registrant state: 3e0204199d8ebf9c Registrant zip: f206c9d9737ad45d Technical city: Reykjavik Technical country: Iceland Technical email: [email protected] Technical state: Capital Region Update date: 2024-05-13 00:00:00
references
https://www.bitdefender.com/en-us/blog/businessinsights/uac-0063-cyber-espionage-operation-expanding-from-central-asia, https://threatfox.abuse.ch/export/csv/recent/, https://cert.gov.ua/article/6280129, https://cert.gov.ua/article/6280099
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 7 days ago
Appeared in 15 threat reports