ask-bdtj-selohjszlw.cn-shenzhen.fcapp[.]runDomain
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 12 months ago
What the reports say
1 report, newest first · the exact sentence from each-
TOLLBOOTH: What's yours, IIS mine“…red, it contacts one of the attacker-controlled endpoints at asf-sikkeiyjga.cn-shenzhen.fcapp.run/index/index?href= or ask-bdtj-selohjszlw.cn-shenzhen.fcapp[.]run/index/index?key=, appending the current page’s URL as a Base64-encoded parameter to identify the compromised site.”
Indicators reported together
named in the same reports- gotohttp[.]comin 1 report
- hxxps://c.cseo99[.]com/config/in 1 report
- c.cseo99[.]comin 1 report
- hxxps://c.cseo99[.]com/config/127.0.0.1.jsonin 1 report
- hxxps://f.fseo99[.]com/in 1 report
- f.fseo99[.]comin 1 report
- hxxps://api.aseo99[.]com/client/landpagein 1 report
- api.aseo99[.]comin 1 report
- asf-sikkeiyjga.cn-shenzhen.fcapp[.]runin 1 report
- co[.]ukin 1 report
- 913431f1d36ee843…aabc19f1e2fcin 1 report
- f9dd0b57a5c133ca…f78653af00c1in 1 report
- c1ca053e3c346513…e131ec1b9fb2in 1 report
- c348996e27fc14e3…caf88154edd2in 1 report
- 82b7f077021df9dc…f0b63a1b5788in 1 report
- bd2de6ca6c561cec…2ad00859f7d3in 1 report
- 915441b7d7ddb7d8…023ce1e05964in 1 report
- bae5a7722814948f…022a533a84fein 1 report
- 230b84398e873938…ee22028026e9in 1 report
- hxxps://blog.blacklanternsecurity[.]com/p/aspnet-cryptography-for-pentestersin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.