IOC Radar
DomainMediumSignal 94/100

nslsconscloud.beer

Location
GermanyGermany
First Seen
Apr 21, 2026
Last Seen
May 23, 2026
Apr 21
First Seen
55d ago
May 23
Last Seen
24d ago
10
Reports
source reports
94%
Confidence
medium
Found in 10 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
94%
Signal Score
94 / 100
IDS Rule
No
Threat Context
Tags

Feed Intelligence Summary

10 reports94% confidence
10
Source reports
94%
Confidence score
Category tags
abusech-threatfox-c2cbad reputationblock-or-filter-listc2command & controldeeuropegermanyindicatormalwaremanual-collectionmedium-risknetworkresearchedtype osint

Activity Timeline

1 total obs
May 23May 23

Threat Activity Heatmap

· Peak: 2026-05-23
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
1
Minimal
3mo
1
Minimal
Intelligence SummaryAI Generated

The domain **nslsconscloud.beer**, originating from Germany, has been identified as a potential command and control (C

Threat ScoreHigh Risk
94
SIGNAL
Signal Score
94%
Confidence
10
Reports
First seenApr 21, 2026
Last seenMay 23, 2026

VirusTotal

Not checked

WHOIS

registrar
Dynadot Inc
description
LTNA Cyber provides additional enrichment for domain and URL indicators, including RIR and DNS intelligence, domain registration context, routing verification, BGP stream visibility, and GeoIP/ISP attribution. Learn more: https://ltna.com.au/cyber
domain rank
-1
raw
Creation Date: 2026-04-21T13:30:12Z DNSSEC: unsigned Domain Name: nslsconscloud.beer Domain Status: addPeriod https://icann.org/epp#addPeriod Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited Name Server: aaron.ns.cloudflare.com Name Server: elinore.ns.cloudflare.com Registrant City: 1f8f4166599d23ee Registrant Country: US Registrant Email: f651612a2f356ad3s@ Registrant Fax Ext: 1f8f4166599d23ee Registrant Fax: 1f8f4166599d23ee Registrant Name: 1f8f4166599d23ee Registrant Organization: 473daf17453d83cd Registrant Phone Ext: 1f8f4166599d23ee Registrant Phone: 1f8f4166599d23ee Registrant Postal Code: 1f8f4166599d23ee Registrant State/Province: 77ab92f1911d7c5f Registrant Street: 1f8f4166599d23ee Registrar Abuse Contact Email: [email protected] Registrar Abuse Contact Phone: +1.6502620100 Registrar IANA ID: 472 Registrar URL: https://www.dynadot.com/ Registrar WHOIS Server: whois.dynadot.com Registrar: Dynadot Inc Registry Domain ID: REDACTED FOR PRIVACY Registry Expiry Date: 2027-04-21T13:30:12Z Registry Registrant ID: REDACTED FOR PRIVACY Registry Tech ID: REDACTED FOR PRIVACY Tech City: REDACTED FOR PRIVACY Tech Country: REDACTED FOR PRIVACY Tech Organization: REDACTED FOR PRIVACY Tech Postal Code: REDACTED FOR PRIVACY Tech State/Province: REDACTED FOR PRIVACY Updated Date: 2026-04-21T13:30:28Z
references
https://ltna.com.au/cyber
subdomains count
0

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 month ago · Last seen 24 days ago
Appeared in 10 threat reports