IOC Radar
DomainMediumSignal 12/100

www.aagn.top

First Seen
Mar 4, 2025
Last Seen
Apr 29, 2025
Mar 4
First Seen
469d ago
Apr 29
Last Seen
412d ago
2
Reports
source reports
12%
Confidence
medium
Found in 2 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
Domain Name
Malicious domain used for C2, phishing, or malware distribution.
MISP Category
Network Activity
Confidence
12%
Signal Score
12 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

25 techniques

Feed Intelligence Summary

2 reports12% confidence
2
Source reports
12%
Confidence score
Category tags
american expressamexbankingbotnetbrand abusebrand impersonationcommand and controlcredential harvestingcredential phishingcredit cardcredit card phishingcredit card servicesdata exfiltrationdistributed attacksfinancefinance and insurancefinancial sector targetingfinancial servicesfinancial services targetingfinancial technologyfraudindicatorinfrastructure acquisitionreconnaissanceiocsmalicious linksmalicious softwaremalicious websitemalwarenetworknola defensepayment processingphishingphishing attackphishing domainphishing urlprocess injectionresearchedscamsocial engineeringt1055t1071.001t1078t1078.004t1105t1189t1195t1195.002t1204.001t1204.002t1486t1496t1499.002t1499.003t1565t1566t1566.001t1566.002t1566.003t1583t1583.001t1587.001t1588t1588.002t1590.001urlswealth managementweb security

Activity Timeline

1 total obs
Apr 29Apr 29

Threat Activity Heatmap

Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
0
Dormant
Threat ScoreLow Risk
12
SIGNAL
Signal Score
12%
Confidence
2
Reports
First seenMar 4, 2025
Last seenApr 29, 2025

VirusTotal

Not checked

WHOIS

description
This page stores American Express Card phishing page IOCs. Legitimate website for the brand is https://www.americanexpress.com/ NOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense
raw
Administrative city: REDACTED FOR PRIVACY Administrative country: REDACTED FOR PRIVACY Administrative state: REDACTED FOR PRIVACY Create date: 2023-07-02 00:00:00 Domain name: aagn.top Domain registrar id: 1599.0 Domain registrar url: http://www.net.cn Expiry date: 2024-07-02 00:00:00 Name server 1: dns2.hichina.com Name server 2: dns1.hichina.com Query time: 2023-07-03 10:23:37 Registrant city: 1f8f4166599d23ee Registrant company: 6d1d5c69da896d9d Registrant country: China Registrant email: f651612a2f356ad3s@ Registrant fax: 1f8f4166599d23ee Registrant name: 1f8f4166599d23ee Registrant phone: 1f8f4166599d23ee Registrant state: 1c2b582fe8d1cbf3 Registrant zip: 1f8f4166599d23ee Technical city: REDACTED FOR PRIVACY Technical country: REDACTED FOR PRIVACY Technical state: REDACTED FOR PRIVACY Update date: 2023-07-02 00:00:00

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 1 year ago
Appeared in 2 threat reports