instances.httpworkbench[.]comDomain
Reported by 1 independent source · first reported by Help Net Security · last reported
Last reported 25 days ago
What the reports say
1 report, newest first · the exact sentence from each-
NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)“…tication.do requests whose body contains pitboss PPE unexpectedly died NSPPE, and to watch DNS for outbound lookups ending in instances.httpworkbench[.]com, which indicates a host in their estate has already been hit.”
Indicators reported together
named in the same reports- doauthentication[.]doin 1 report
- 138.199.200[.]90in 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-88771, CVE-2026-88772
Thanks — we review every report.