ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain e6ednstx1d.workers.dev.

Database Entry


IOC ID:1873926
IOC: e6ednstx1d.workers.dev
IOC Type :domain
Threat Type :botnet_cc
Malware: php.shin_webshell
Confidence Level : Confidence level is moderate (50%)
Is compromised? : True
First seen:2026-08-14 06:20:03 UTC
Last seen:never
UUID:d8038075-9771-11f1-8a3d-42010aa4000a
Reporter xscon
Reward 5 credits from ThreatFox
Tags:Cloudflare PHP webshell WordPress workes.dev wp-admin

Avatar
xscon
This IOCs indicate injection webshell using workers.dev of cloudflare in WordPress, this work injected file polyglot GIF for work PHP