Essential information

Value / Name

https://bxphp.westooo.com/u.php

Confidence

100/100

Revoked

Yes

Valid from

29/01/2026 13:49

Valid until

27/02/2026 19:32

Pattern type

stix

Published

29/01/2026 17:48

Modified

27/02/2026 19:33

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://bxphp.westooo.com/u.php']

Labels / Tags

Labels: asia badiis gotohttp iis persistence powershell regional targeting seo fraud thailand vietnam web shells

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.