Essential information

Value / Name

http://tdkfsdfa.cnmseo.com/jump/ll.js

Confidence

100/100

Revoked

Yes

Valid from

29/01/2026 13:49

Valid until

27/02/2026 19:32

Pattern type

stix

Published

29/01/2026 17:48

Modified

27/02/2026 19:33

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'http://tdkfsdfa.cnmseo.com/jump/ll.js']

Labels / Tags

Labels: asia badiis gotohttp iis persistence powershell regional targeting seo fraud thailand vietnam web shells

Marking (TLP)

TLP:CLEAR

Related entities

No linked attack reports or intrusion sets yet.