Censys tracked over 400 web properties running AdaptixC2, an open-source post-exploitation command-and-control framework identifiable through default HTTP headers and configuration patterns. The research identified three beacon listener clusters suggesting coordinated multi-server deployments.