Private YARA rules ·Hunting_JS_WebAssemblyVerdict○auditSeverity○audit Triggered on HTTP #39 →JavaScript #7 →Matched indicatorsite.coomer.com.co/assets/index-Cc6RzG_Y.js⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #17 →HTTP #22 →HTTP #29 →HTTP #37 →HTTP #38 →HTTP #41 →HTTP #43 →HTTP #44 →HTTP #66 →HTTP #67 →HTTP #75 →HTTP #76 →HTTP #78 →HTTP #81 →HTTP #92 →HTTP #105 →Matched indicatorcreative-sb1.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #17 →HTTP #22 →HTTP #29 →HTTP #37 →HTTP #38 →HTTP #41 →HTTP #43 →HTTP #44 →HTTP #66 →HTTP #67 →HTTP #75 →HTTP #76 →HTTP #78 →HTTP #81 →HTTP #92 →HTTP #105 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #17 →HTTP #22 →HTTP #29 →HTTP #37 →HTTP #38 →HTTP #41 →HTTP #43 →HTTP #44 →HTTP #66 →HTTP #67 →HTTP #75 →HTTP #76 →HTTP #78 →HTTP #81 →HTTP #92 →HTTP #105 →Matched indicatorcreative-sb1.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →HTTP #32 →HTTP #96 →Matched indicatorwayfarerorthodox.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →HTTP #32 →HTTP #96 →Matched indicatorwayfarerorthodox.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →HTTP #32 →HTTP #96 →Matched indicatorwayfarerorthodox.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #9 →HTTP #83 →Matched indicatorprotrafficinspector.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #34 →Matched indicatorpreferencenail.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #34 →Matched indicatorpreferencenail.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #34 →Matched indicatorpreferencenail.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #18 →HTTP #19 →HTTP #51 →HTTP #95 →HTTP #98 →Matched indicatorkettledroopingcontinuation.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #18 →HTTP #19 →HTTP #51 →HTTP #95 →HTTP #98 →Matched indicatorkettledroopingcontinuation.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #18 →HTTP #19 →HTTP #51 →HTTP #95 →HTTP #98 →Matched indicatorkettledroopingcontinuation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #18 →HTTP #19 →HTTP #51 →HTTP #95 →HTTP #98 →Matched indicatorkettledroopingcontinuation.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →Matched indicatorskinnycrawlinglax.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →Matched indicatorskinnycrawlinglax.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →Matched indicatorskinnycrawlinglax.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #53 →Matched indicatorskinnycrawlinglax.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #61 →HTTP #89 →HTTP #94 →Matched indicatorlampshadescreen.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #61 →HTTP #89 →HTTP #94 →Matched indicatorlampshadescreen.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #65 →HTTP #111 →Matched indicatorflushpersist.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #65 →HTTP #111 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #65 →HTTP #111 →Matched indicatorflushpersist.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #74 →Matched indicatorcdn.show-creative1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #77 →HTTP #86 →HTTP #101 →Matched indicatorimg.coomer.st⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #77 →HTTP #86 →HTTP #101 →Matched indicatorimg.coomer.st⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #103 →Matched indicatorweirdopt.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #103 →Matched indicatorweirdopt.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #103 →Matched indicatorweirdopt.com⧉