c2.installscenter[.]comDomain
Reported by 3 independent sources · first reported by Group-IB · last reported
Last reported 16 days ago
What the reports say
4 reports, newest first · the exact sentence from each-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories“Hunt.io, in a new analysis of the network indicators, said "the command hostname reported on 31 August, c2.installscenter[.]com, was already serving TLS on a second VPS (80.78.27.252) on port 2083 from 4 April 2026, almost five months before the disclosure.”
-
Hunt.io Finds New Infrastructure Of BraZetsu Access Broker Months Before Disclosure“The command server hostname mentioned in the August report, c2.installscenter[.]com, had already been using TLS on a second server since April 4, almost five months before the report was published.”
-
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino“Configuración C2 de BraZetsu en c2.installscenter[.]com”
-
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem“BraZetsu c2.installscenter[.]com configuration”
Indicators reported together
named in the same reports- installscenter[.]comin 3 reports
- hunt[.]ioin 2 reports
- caixaentradas1inboxshop[.]sitein 2 reports
- caixaentradas1boxshop[.]sitein 2 reports
- infect[.]onlinein 2 reports
- 38.242.246[.]176in 2 reports
- hxxps://pastebin[.]com/raw/aF0WCxiain 2 reports
- hxxps://pastebin[.]com/raw/hM0nXNBPin 2 reports
- hxxps://pastebin[.]com/raw/9ChwVzzwin 2 reports
- infectonline[.]storein 2 reports
- f775fe06a4c2563c…cee7972e6b17in 2 reports
- 54e313434a7f3fa3…cdd9fabf2700in 2 reports
- 91f225dcc7a01f92…02ce638fa6b0in 2 reports
- cd8fc8effea20d28…41d51b6f6c78in 2 reports
- d881a60ccd03b541…65843643af99in 2 reports
- 0fa785bb9f95b113…2d85746fc5bfin 2 reports
- 1510823e7c80b4db…2e1c5cf30246in 2 reports
- 96960409b6e1abf2…d5aa56579042in 2 reports
- 0cd0cc49ea4ff48c…7f70bb6c0d5din 2 reports
- 30af2ec2437af0f4…a7a781c1e2fein 2 reports
Copy these 20 indicators · defanged
Thanks — we review every report.