About the platform
Threat intelligence built for Africa and the Gulf, with global sources and practical investigation tools.
AEGLIX MIND brings URL checking, threat feeds, vulnerability intelligence, security news, investigations, campaign research, public-source OSINT, AI model discovery and security-tool discovery together. Guardian is our URL and message checking product within this wider platform.
Check suspicious URLs using threat-provider verdicts, machine learning and available NVIDIA Nemotron assessment. Use the Message and Screenshot tabs to review suspicious content; screenshot text can be reviewed before analysis. Review risk factors, scan history and feedback; use deep or bulk scanning when needed.
Open Guardian workspaceExplore URLhaus, OpenPhish and ThreatFox indicators. Filter available feed entries by threat type, severity and regional context.
Open Threat intelligence workspaceSearch vulnerability information from NVD and CISA’s Known Exploited Vulnerabilities catalogue. Review CVSS severity and source guidance before planning remediation.
Open CVE intelligence workspaceFollow cybersecurity reporting from global, African and Gulf sources. Open original articles for the publisher’s full reporting and context.
Open Security news workspaceLook up URLs, domains, IPs, email addresses and file hashes. Connect available public intelligence, reviewed campaign indicators and your own Guardian history; export findings as JSON, CSV, PDF or STIX.
Open Investigation workspace workspaceExplore reviewed campaign records, historical MITRE ATT&CK context, linked indicators, infrastructure and evidence where available. Unknown attribution and impact remain unknown.
Open Campaigns and actors workspaceDiscover security tools and exploit references, compare capabilities, and follow original documentation. Source evidence and review labels help you assess each listing; inclusion does not guarantee safety. Use tools only where you have authorization.
Open ArsenalResearch public people reference entries, usernames, legal entities, domains and public IP addresses. Follow source records from Wikidata, Wikipedia, GitHub, GitLab, Wikimedia, Bluesky, GLEIF, certificate transparency, Google Public DNS and RIPEstat. Extract image text and QR/barcodes locally; optionally research visual clues and public places. Inspect evidence connections, add temporary notes, keep selected evidence in an in-memory case notebook, cite findings, prepare search operators, print a report or export records and hashes as JSON. Public domain research also includes archive availability; IP research can include best-effort Shodan InternetDB observations. Matching names remain separate candidates, not confirmed identities. Signed-in users can explicitly request optional authenticated Shodan enrichment for a public IPv4 address when configured. This sends the IP to Shodan; these results are not cached or saved to the public archive, and indexed observations do not confirm current exposure. Signed-in researchers can use Private cases to save domains or CVEs, source-reference pins and their own findings, resume work and export JSON. Cases belong only to their account; exports are unencrypted files under their control. Unlike the temporary OSINT notebook, cases are retained in the account database until removed or the account is deleted. Pinned sources are rechecked and can become unavailable when deleted or withdrawn.
Open Public OSINTGuardian combines available provider signals with its machine-learning result. When enabled, NVIDIA Nemotron adds a separate assessment, risk flags and recommendations. AI assessment confidence expresses certainty in that assessment; it is not the probability that a URL is malicious.
OTX subscribed pulses and CISA reports are collected into a private review inbox. A source report is not automatically a confirmed campaign: publication requires review. Historical MITRE records provide research context, not proof that a campaign is active today.
Our focus is helping people and security teams understand threats affecting Africa and the Gulf. Coverage depends on available sources, provider access and reporting. Regional labels, related indicators and attribution should be checked against their evidence; missing data does not establish safety.
AEGLIX MIND is built by Aeglix Security Research, led by Abdushshakur Sulaiman Abubakar, a cybersecurity researcher and software developer from Potiskum, Yobe State, Nigeria. The platform grew from a need to make suspicious links and security intelligence easier to assess.
Send feedback, source corrections, research collaboration requests or responsible security disclosures to [email protected]. See Contact for what to include, or read our FAQ for help using the platform.
Sign in with an email and password, Google or GitHub. Your dashboard keeps signed-in Guardian URL scans together; Profile and Settings manage personal details, preferences, sessions and account deletion. Message checks are separate from saved scan history.