wizardexpensive[.]comDomain
Reported by 1 independent source · first reported by The Hacker News · last reported
Last reported 4 days ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan“wizardexpensive[.]com (Payloading hosting and command-and-control)”
Indicators reported together
named in the same reports- 2.27.248[.]127in 1 report
- 96.62.218[.]59in 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2026-110936
Thanks — we review every report.