hxxps://columbnezhjdq[.]com/goolgetagmanager.js?v=2.0&_cb=URL
Reported by 1 independent source · first reported by Sophos X-Ops · last reported
Last reported 2 months ago
What the reports say
1 report, newest first · the exact sentence from each-
ClickFix campaign abuses Deno runtime for infostealer delivery“CTU researchers identified injected script references to hxxps://columbnezhjdq[.]com/goolgetagmanager.js?v=2.0&_cb=[REDACTED], which performed browser environment checks before presenting staged verification prompts and ClickFix instructions (see Figure 1).”
Indicators reported together
named in the same reports- columbnezhjdq[.]comin 1 report
- 162.33.177[.]16in 1 report
- hxxp://webstizkgao[.]com/v020def066f14754be9.jsin 1 report
- webstizkgao[.]comin 1 report
- hxxps://ordinary-computer-analytical-spell.trycloudflare[.]com/cin 1 report
- ordinary-computer-analytical-spell.trycloudflare[.]comin 1 report
Copy these 6 indicators · defanged
Thanks — we review every report.