DNS query for known ClickFix delivery domain karburatorotzhigi.com

Duo Tech@duotech

•updated Aug 13, 2026•1•0•5

Detects DNS, TLS SNI, and HTTP Host traffic to the known ClickFix delivery domain karburatorotzhigi[.]com or the exact Cloudflare R2 hosting bucket subdomain pub-b7e3d7ad9f6e4b08a24cde45feeb417e.r2[.]dev used in UNC5142 campaign infrastructure.