webstizkgao[.]comDomain
Reported by 1 independent source · first reported by Sophos X-Ops · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix campaign abuses Deno runtime for infostealer delivery“…and and control (C2) infrastructure via a scheduled task that used deno.exe to execute a remote JavaScript payload hosted at hxxp://webstizkgao[.]com/v020def066f14754be9.js.”
Indicators reported together
named in the same reports- hxxps://columbnezhjdq[.]com/goolgetagmanager.js?v=2.0&_cb=in 1 report
- columbnezhjdq[.]comin 1 report
- 162.33.177[.]16in 1 report
- hxxp://webstizkgao[.]com/v020def066f14754be9.jsin 1 report
- hxxps://ordinary-computer-analytical-spell.trycloudflare[.]com/cin 1 report
- ordinary-computer-analytical-spell.trycloudflare[.]comin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.