indicatordomain
df8293da[.]ae37b3b425fb3581cc1db2d9[.]workers[.]dev
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- The Unintentional Enabler: How Cloudflare Services are Abused for Credential Theft and Malware Distribution
Cloudflare Workers subdomain hosting a fake Microsoft AiTM credential phishing page.