r[.]servermanagemen[.]xyz

Posts referencing this indicator

• The SOC Files: ScreenConnect masked as freeware. An inside look at a large-scale campaign

  KKaspersky

  ScreenConnect C2 server domain passed via command line when the service is created as an Access-type connection

  2026-07-01