Sxyprn.com%2a

| Type | Indicator | Comments | |------|-----------|----------| | Domain | sxyprn.com | Primary C2 / phishing host | | URL (encoded) | https://sxyprn.com%2A/* | Use of %2A to bypass filters | | URL (decoded) | https://sxyprn.com*/login | Equivalent after decoding | | Shortened URL | https://bit.ly/3kX9zY → redirects to sxyprn.com%2A | Frequently used in spam |

If you include special characters or operators (like %2A or * ), the browser recognizes that this is not a valid, standard web address. It immediately treats the entire string as a keyword phrase and forwards it to your default search engine. sxyprn.com%2A