ThreatFox IOC Database

You are viewing the ThreatFox database entry for domain webenysy.workers.dev.

Database Entry


IOC ID:1876508
IOC: webenysy.workers.dev
IOC Type :domain
Threat Type :botnet_cc
Malware: php.shin_webshell
Confidence Level : Confidence level is moderate (50%)
Is compromised? : True
First seen:2026-08-15 14:46:37 UTC
Last seen:2026-08-15 20:14:18 UTC
UUID:1e082a98-98b8-11f1-8a3d-42010aa4000a
Reporter xscon
Reward 5 credits from ThreatFox
Tags:Cloudflare Cloudflare Inc. gif PHP webshell WordPress workers.dev wp-admin

Avatar
xscon
This IOC is reference the injection webshell using Worker Clouflare, infected using polyglot file php over gif in WordPress.