Essential information

Value / Name

https://bxphp.westooo.com/?xhost=%s\u0026url=%s\u0026ua=Googlespider\u0026f=bd

Confidence

100/100

Revoked

Yes

Valid from

29/01/2026 13:49

Valid until

27/02/2026 19:32

Pattern type

stix

Published

29/01/2026 17:48

Modified

27/02/2026 19:33

Author / Source

AlienVault

Description

No description.

Pattern

[url:value = 'https://bxphp.westooo.com/?xhost=%s\\u0026url=%s\\u0026ua=Googlespider\\u0026f=bd']

Labels / Tags

Labels: asia badiis gotohttp iis persistence powershell regional targeting seo fraud thailand vietnam web shells

Marking (TLP)

TLP:CLEAR