DomainHighVerifiedSignal 100/100
aegissecurity.online
Location
GermanyFirst Seen
Feb 19, 2026
Last Seen
Feb 20, 2026
Found in 6 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
99%
Signal Score
100 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK
MITRE ATT&CK TTPs
Feed Intelligence Summary
6 reports99% confidence
6
Source reports
99%
Confidence score
Category tags
cephalus ransomwarecommand executioncommunication protocolcveeuropegermanyheadhead marehttp scannerindicatorkeenadumalicious powershell activitymalwaremarenetworkoperating systemphantomheartpostresearchedscripting attackssystemt1003t1021.001t1055t1059t1059.001t1069.001t1071.001t1078t1086t1190t1204.002t1499.002t1566transparent tribeuxxxxxxweb traffic
Activity Timeline
Feb 20Feb 20
Threat Activity Heatmap
· Peak: 2026-02-20LessMore
Mon
Wed
Fri
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Intelligence SummaryAI Generated
The domain **aegissecurity.online** has emerged as a critical indicator of compromise (IOC) linked to sophisticated cyber threats originating from Germany. First observed on February
Threat ScoreHigh Risk
100
SIGNAL
Signal Score
99%
Confidence
6
Reports
First seenFeb 19, 2026
Last seenFeb 20, 2026
Verified IOC
VirusTotal
Not checked
WHOIS
- registrar
- NameCheap, Inc.
- creation date
- 2025-10-15T08:29:57
- expiration date
- 2026-10-15T23:59:59
- updated date
- 2025-11-01T14:23:37
- name servers
- david.ns.cloudflare.com, stella.ns.cloudflare.com
- status
- clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 4 months ago · Last seen 4 months ago
Appeared in 6 threat reports