Skip to content
NewVerdictIQ Connector is here. One Docker image enriches your DNS logs with verdicts inside your network and forwards them to your SIEM.Install guide
High76/100actionblock_domain
VerdictIQSecurity Report

Subject

dropship-hub[.]digital

Recommended actionblock_domainIOC typedomainVerified2026-08-01

Risk level

High

score 76 / 100

VerdictIQ scores dropship-hub[.]digital as High (risk 76/100), driven by Dead Domain; recommended action: block. Source: VerdictIQ, 2026-08-01.

Why this verdict

Evidence and analysis

VerdictIQ AIGenerated from 4 deterministic signals

dropship-hub[.]digital is classified as high with a risk score of 76/100: elevated-risk posture; converging signals indicate intent. The recommended downstream action is block_domain.

The risk model observed 4 signals (including 1 core signals) across 3 taxonomy groups (Threat Intelligence, DNS History, WHOIS). The strongest indicators are Dead Domain, Registered in Last Week, Cleared by Security Vendors, plus 1 additional supporting signal. Each signal carries its own trigger evidence and direction; signal fusion drives the calibrated tier assignment.

Recommended response. Block at the perimeter (DNS firewall, SWG, EDR network rules). The signal stack supports a deny-by-default posture; blocking is unlikely to disrupt legitimate traffic. For active investigation, run POST /verdict with the indicator to confirm the verdict against the current state of the domain. VerdictIQ's scoring recomputes today's signals on every call.

VerdictIQ AI re-states deterministic signal evidence as natural language. The verdict itself comes from the calibrated risk model, not the AI layer. Re-runs are stable and explainable.

Signal evidence

Showing all 4Showing all 4
  • Dead DomainDNS HistoryIt refers to domains that have not been active or resolvable through DNS for an extended period.
  • Registered in Last WeekWHOISIt indicates that the domain was registered very recently, within the last week, month, or few months.
  • Cleared by Security VendorscoreThreat IntelligenceIt means that none of the commercial or open-source security vendors, such as antivirus engines, sandbox platforms, or threat intelligence providers, have classified or reported this domain as…
  • Not Listed in Open-Source Threat FeedsThreat IntelligenceIt indicates that the domain does not appear in any public or open-source threat intelligence feeds, malware repositories, or IOC databases.

Read the full scoring methodology at /product/ioc-verdict or the canonical signal taxonomy at /signal-library.

More like this

Similar verdicts

Domains sharing signals with dropship-hub[.]digital. Pattern similarity often indicates campaign reuse or shared infrastructure.

Query any domain, not just this one

POST /verdict returns the same signals, score and recommended action for any indicator you send, computed against today's data.

Part of a curated wave, re-verified periodically; reports older than 90 days are marked stale until re-verified. Dispute a verdict at reports@verdictiq.io, response within 5 business days. Trust & compliance →