hxxps://fk.bubuneeko.workers[.]dev/_cf/relURL

Reported by 1 independent source · first reported 1 Jan 1970 by Huntress · last reported 1 Jan 1970

Last reported 56 years ago

What the reports say

1 report, newest first · the exact sentence from each

“hxxps://fk.bubuneeko.workers[.]dev/_cf/rel”

HuntressVendor1 Jan 1970
Determined Attacker Uploads Malicious Webshells to Parks and Rec Management Platform Servers

Indicators reported together

named in the same reports

redacted[.]comin 1 report
secure.redacted[.]comin 1 report
hxxps://chat.ririmochii.workers[.]dev/core.jsin 1 report
chat.ririmochii.workers[.]devin 1 report
fk.bubuneeko.workers[.]devin 1 report
hxxps://fk.bubuneeko.workers[.]dev/_cf/icein 1 report
0d8f7bf30aa1ac95…c841c6e861d3in 1 report
5f69ff7a2e024f94…dfdd4472905ein 1 report
e9dee286069afb6b…ef1a7e0e3879in 1 report
0d93c3a8ded46887…2e34f238d19ain 1 report
b06b581d91f41089…1bd670867485in 1 report
7bb594a77f726bf2…9301de1f1ab4in 1 report

Copy these 12 indicators · defanged

12 indicators, defanged, one per line

redacted[.]com
secure.redacted[.]com
hxxps://chat.ririmochii.workers[.]dev/core.js
chat.ririmochii.workers[.]dev
fk.bubuneeko.workers[.]dev
hxxps://fk.bubuneeko.workers[.]dev/_cf/ice
0d8f7bf30aa1ac95d59fed24c433dd2b3d57767f38c088721699c841c6e861d3
5f69ff7a2e024f94cc5f816fa16c90054b09d9ac430b1f8b0631dfdd4472905e
e9dee286069afb6b411febb96b91a963cd16baffbf8b6aa951e0ef1a7e0e3879
0d93c3a8ded46887f79ac4ca7f238c458de2231243176f6c05062e34f238d19a
b06b581d91f4108900d188c3ee1af18502a8cb65d4e101663b791bd670867485
7bb594a77f726bf21a49f717024f2915f82f47eb623d2ad305259301de1f1ab4

Thanks — we review every report.

Report a wrong value