This GreyNoise Labs report provides detailed analysis of out-of-band interaction domain (OAST) activity observed during January 3-9, 2026, identifying three distinct campaigns exploiting vulnerabilities including MCP server command injection and React2Shell (CVE-2025-55182). It includes comprehensive telemetry such as JA4 fingerprint clusters, payload samples, IOC tables, and detection recommendations, offering actionable intelligence for defenders.