Private YARA rules ·Hunting_JS_WebAssemblyVerdict○auditSeverity○audit Triggered on HTTP #37 →JavaScript #12 →Matched indicatorupdate.aupdate.9876543214329876543210app.v2202508276858377817.happysrv.de/b?id=2⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #5 →HTTP #9 →HTTP #12 →HTTP #15 →HTTP #33 →HTTP #35 →HTTP #40 →HTTP #50 →HTTP #51 →HTTP #60 →HTTP #64 →HTTP #71 →HTTP #89 →HTTP #90 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #5 →HTTP #9 →HTTP #12 →HTTP #15 →HTTP #33 →HTTP #35 →HTTP #40 →HTTP #50 →HTTP #51 →HTTP #60 →HTTP #64 →HTTP #71 →HTTP #89 →HTTP #90 →Matched indicatorcreative-sb1.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #5 →HTTP #9 →HTTP #12 →HTTP #15 →HTTP #33 →HTTP #35 →HTTP #40 →HTTP #50 →HTTP #51 →HTTP #60 →HTTP #64 →HTTP #71 →HTTP #89 →HTTP #90 →Matched indicatorcreative-sb1.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →HTTP #81 →HTTP #88 →Matched indicatorprotrafficinspector.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #13 →HTTP #14 →HTTP #16 →HTTP #20 →HTTP #21 →HTTP #22 →HTTP #23 →HTTP #24 →HTTP #31 →HTTP #36 →HTTP #41 →HTTP #49 →HTTP #55 →HTTP #63 →HTTP #65 →HTTP #77 →HTTP #84 →Matched indicatorskinnycrawlinglax.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #13 →HTTP #14 →HTTP #16 →HTTP #20 →HTTP #21 →HTTP #22 →HTTP #23 →HTTP #24 →HTTP #31 →HTTP #36 →HTTP #41 →HTTP #49 →HTTP #55 →HTTP #63 →HTTP #65 →HTTP #77 →HTTP #84 →Matched indicatorskinnycrawlinglax.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #13 →HTTP #14 →HTTP #16 →HTTP #20 →HTTP #21 →HTTP #22 →HTTP #23 →HTTP #24 →HTTP #31 →HTTP #36 →HTTP #41 →HTTP #49 →HTTP #55 →HTTP #63 →HTTP #65 →HTTP #77 →HTTP #84 →Matched indicatorskinnycrawlinglax.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #13 →HTTP #14 →HTTP #16 →HTTP #20 →HTTP #21 →HTTP #22 →HTTP #23 →HTTP #24 →HTTP #31 →HTTP #36 →HTTP #41 →HTTP #49 →HTTP #55 →HTTP #63 →HTTP #65 →HTTP #77 →HTTP #84 →Matched indicatorskinnycrawlinglax.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →HTTP #72 →HTTP #73 →HTTP #83 →Matched indicatorpreferencenail.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →HTTP #72 →HTTP #73 →HTTP #83 →Matched indicatorpreferencenail.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →HTTP #72 →HTTP #73 →HTTP #83 →Matched indicatorpreferencenail.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #68 →HTTP #69 →HTTP #70 →Matched indicatorflushpersist.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #68 →HTTP #69 →HTTP #70 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #68 →HTTP #69 →HTTP #70 →Matched indicatorflushpersist.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #34 →HTTP #45 →HTTP #67 →Matched indicatorcdn.show-sb.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #34 →HTTP #45 →HTTP #67 →Matched indicatorcdn.show-sb.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #34 →HTTP #45 →HTTP #67 →Matched indicatorcdn.show-sb.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #42 →HTTP #52 →HTTP #57 →HTTP #58 →HTTP #76 →Matched indicatorrealizationnewestfangs.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #42 →HTTP #52 →HTTP #57 →HTTP #58 →HTTP #76 →Matched indicatorrealizationnewestfangs.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #56 →Matched indicatorweirdopt.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #56 →Matched indicatorweirdopt.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #56 →Matched indicatorweirdopt.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #82 →HTTP #87 →Matched indicatorkettledroopingcontinuation.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #82 →HTTP #87 →Matched indicatorkettledroopingcontinuation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #82 →HTTP #87 →Matched indicatorkettledroopingcontinuation.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #82 →HTTP #87 →Matched indicatorkettledroopingcontinuation.com⧉