Private YARA rules ·Hunting_JS_WebAssemblyVerdict○auditSeverity○audit Triggered on HTTP #146 →JavaScript #62 →Matched indicatorwww.youtube.com/s/player/4c5cf06a/player_es6.vflset/en_US/base.js⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #16 →HTTP #38 →HTTP #39 →HTTP #76 →HTTP #92 →HTTP #104 →HTTP #135 →HTTP #143 →HTTP #145 →HTTP #157 →HTTP #170 →HTTP #173 →HTTP #180 →Matched indicatorsourshaped.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #16 →HTTP #38 →HTTP #39 →HTTP #76 →HTTP #92 →HTTP #104 →HTTP #135 →HTTP #143 →HTTP #145 →HTTP #157 →HTTP #170 →HTTP #173 →HTTP #180 →Matched indicatorsourshaped.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #16 →HTTP #38 →HTTP #39 →HTTP #76 →HTTP #92 →HTTP #104 →HTTP #135 →HTTP #143 →HTTP #145 →HTTP #157 →HTTP #170 →HTTP #173 →HTTP #180 →Matched indicatorsourshaped.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #3 →HTTP #7 →HTTP #19 →HTTP #41 →HTTP #57 →HTTP #71 →HTTP #83 →HTTP #130 →HTTP #134 →HTTP #139 →HTTP #162 →HTTP #166 →HTTP #171 →HTTP #172 →Matched indicatorpawsconservation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #3 →HTTP #7 →HTTP #19 →HTTP #41 →HTTP #57 →HTTP #71 →HTTP #83 →HTTP #130 →HTTP #134 →HTTP #139 →HTTP #162 →HTTP #166 →HTTP #171 →HTTP #172 →Matched indicatorpawsconservation.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #174 →Matched indicatorpreferencenail.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #174 →Matched indicatorpreferencenail.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #174 →Matched indicatorpreferencenail.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #9 →Matched indicatorweirdopt.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #9 →Matched indicatorweirdopt.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #9 →Matched indicatorweirdopt.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #14 →HTTP #15 →HTTP #28 →HTTP #30 →HTTP #81 →HTTP #87 →HTTP #94 →HTTP #101 →HTTP #102 →HTTP #103 →HTTP #116 →HTTP #140 →HTTP #144 →HTTP #155 →HTTP #169 →HTTP #175 →Matched indicatorkettledroopingcontinuation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #14 →HTTP #15 →HTTP #28 →HTTP #30 →HTTP #81 →HTTP #87 →HTTP #94 →HTTP #101 →HTTP #102 →HTTP #103 →HTTP #116 →HTTP #140 →HTTP #144 →HTTP #155 →HTTP #169 →HTTP #175 →Matched indicatorkettledroopingcontinuation.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #14 →HTTP #15 →HTTP #28 →HTTP #30 →HTTP #81 →HTTP #87 →HTTP #94 →HTTP #101 →HTTP #102 →HTTP #103 →HTTP #116 →HTTP #140 →HTTP #144 →HTTP #155 →HTTP #169 →HTTP #175 →Matched indicatorkettledroopingcontinuation.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #14 →HTTP #15 →HTTP #28 →HTTP #30 →HTTP #81 →HTTP #87 →HTTP #94 →HTTP #101 →HTTP #102 →HTTP #103 →HTTP #116 →HTTP #140 →HTTP #144 →HTTP #155 →HTTP #169 →HTTP #175 →Matched indicatorkettledroopingcontinuation.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #20 →HTTP #22 →HTTP #48 →HTTP #49 →HTTP #62 →HTTP #67 →HTTP #70 →HTTP #73 →HTTP #80 →HTTP #105 →HTTP #106 →HTTP #167 →Matched indicatorprotrafficinspector.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #24 →HTTP #29 →HTTP #40 →HTTP #64 →HTTP #84 →HTTP #109 →HTTP #121 →HTTP #129 →HTTP #159 →Matched indicatorrealizationnewestfangs.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #24 →HTTP #29 →HTTP #40 →HTTP #64 →HTTP #84 →HTTP #109 →HTTP #121 →HTTP #129 →HTTP #159 →Matched indicatorrealizationnewestfangs.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #45 →HTTP #51 →HTTP #52 →HTTP #60 →HTTP #66 →HTTP #72 →HTTP #79 →HTTP #90 →HTTP #96 →HTTP #136 →HTTP #161 →HTTP #163 →HTTP #176 →HTTP #181 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #45 →HTTP #51 →HTTP #52 →HTTP #60 →HTTP #66 →HTTP #72 →HTTP #79 →HTTP #90 →HTTP #96 →HTTP #136 →HTTP #161 →HTTP #163 →HTTP #176 →HTTP #181 →Matched indicatorcreative-sb1.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #45 →HTTP #51 →HTTP #52 →HTTP #60 →HTTP #66 →HTTP #72 →HTTP #79 →HTTP #90 →HTTP #96 →HTTP #136 →HTTP #161 →HTTP #163 →HTTP #176 →HTTP #181 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →HTTP #95 →Matched indicatorflushpersist.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →HTTP #95 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →HTTP #95 →Matched indicatorflushpersist.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #61 →HTTP #89 →HTTP #115 →HTTP #156 →Matched indicatorwayfarerorthodox.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #61 →HTTP #89 →HTTP #115 →HTTP #156 →Matched indicatorwayfarerorthodox.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #61 →HTTP #89 →HTTP #115 →HTTP #156 →Matched indicatorwayfarerorthodox.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #112 →Matched indicatorwvt24.top⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #122 →Matched indicatorcdn.show-sb.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #122 →Matched indicatorcdn.show-sb.com⧉
Suricata IDS ·ET INFO Suspicious Domain (*.icu) in TLS SNIVerdict○Verdict not recordedSeverity△mediumSuricata /w Emerging Threats Pro Triggered on Report-level