First seen May 22, 2026 · Last seen May 24, 2026 · Restricted Intelligence
Public preview
IOC type, status and defensive guidance visible. Pro adds alert context, Pro+ adds exports and deeper relationships.
Context
Redacted mock web shell upload path on Phantom Crane staging infrastructure. Restricted intelligence.
Defensive Guidance
Monitor web server upload directories for unexpected files. Deploy file integrity monitoring on web roots.
Tags
Safety Note
Uses .invalid reserved TLD (RFC 2606). Path partially redacted. Not a real web shell URL.
Actions
Related Threat Feed Items
Deeper context available with Pro++
View plans →
