asdf[.]idDomain
Reported by 1 independent source · first reported by watchTowr Labs · last reported
Last reported 3 months ago
What the reports say
2 reports, newest first · the exact sentence from each-
CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)“00000000 61 73 64 66 00 49 44 3d 3c 73 61 6d 6c 3a 49 73 |asdf[.]ID=<saml:Is|”
-
The Sequels Are Never As Good, But We're Still In Pain (Citrix NetScaler CVE-2026-3055 Memory Overread)“00000000 61 73 64 66 00 49 44 3d 26 62 69 6e 64 3d 70 6f |asdf[.]ID=&bind=po|”
Indicators reported together
named in the same reports- hxxps://192.168.80[.]125/cgi/logoutin 1 report
- hxxps://192.168.80[.]125/saml/loginin 1 report
- mple[.]comin 1 report
- hxxps://192.168.80[.]125in 1 report
- hxxps://all-ur-boxen[.]comin 1 report
- all-ur-boxen[.]comin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2026-3055, CVE-2025-5777, CVE-2026-8451, CVE-2025-12101
Thanks — we review every report.