Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
Matched indicatorxprime.su/_app/immutable/chunks/CZ6AO76J.js
WEBSITE ANALYSIS REPORT
http://xprime.su/watch/76331/4/8?fullscreen=true
public
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
10DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #3 HTTP #7 HTTP #10 HTTP #11 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #19 HTTP #25 HTTP #27 HTTP #28 HTTP #33 HTTP #34 HTTP #39 HTTP #40 HTTP #41 HTTP #46 HTTP #48 HTTP #53 HTTP #56 HTTP #63 HTTP #65 HTTP #69 HTTP #77 HTTP #85 HTTP #86 HTTP #87 HTTP #93 HTTP #97 HTTP #105 HTTP #106 HTTP #109 HTTP #124 HTTP #125 HTTP #129 HTTP #131 HTTP #137 HTTP #138 HTTP #139 HTTP #142 HTTP #143 HTTP #147 HTTP #149 HTTP #151 HTTP #152
Matched indicatorxprime.su
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #70
Matched indicatorusrpubtrk.com
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #70
Matched indicatorusrpubtrk.com
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #70
Matched indicatorusrpubtrk.com
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #132
Matched indicatordj.fattingnines.com
IDS
1Suricata IDS ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
VerdictVerdict not recorded
Severitylow
Suricata /w Emerging Threats Pro
Triggered on Report-level