Jewelbug XG-Web C2 check-in domain lookup

Duo Tech@duotech

•updated Aug 14, 2026•1•0•5

Detects XG-Web implant check-in beacons — DNS lookups and HTTP config_*.js fetches — against Jewelbug's typosquatted C2 domain set, the unified panel reported to have logged over one million implant check-ins.