Private YARA rules ·Hunting_JS_WebAssemblyVerdict○auditSeverity○audit Triggered on HTTP #10 →JavaScript #15 →Matched indicatorwww.youtube.com/s/player/99f55c01/player_es6.vflset/en_US/base.js⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #2 →Matched indicatorcdn.show-sb.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #2 →Matched indicatorcdn.show-sb.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #2 →Matched indicatorcdn.show-sb.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #3 →HTTP #17 →HTTP #42 →HTTP #46 →HTTP #57 →HTTP #66 →HTTP #67 →Matched indicatorcreative-sb1.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #3 →HTTP #17 →HTTP #42 →HTTP #46 →HTTP #57 →HTTP #66 →HTTP #67 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #3 →HTTP #17 →HTTP #42 →HTTP #46 →HTTP #57 →HTTP #66 →HTTP #67 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #13 →HTTP #31 →HTTP #47 →HTTP #58 →HTTP #62 →HTTP #68 →HTTP #75 →Matched indicatorskinnycrawlinglax.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #13 →HTTP #31 →HTTP #47 →HTTP #58 →HTTP #62 →HTTP #68 →HTTP #75 →Matched indicatorskinnycrawlinglax.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #13 →HTTP #31 →HTTP #47 →HTTP #58 →HTTP #62 →HTTP #68 →HTTP #75 →Matched indicatorskinnycrawlinglax.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #4 →HTTP #13 →HTTP #31 →HTTP #47 →HTTP #58 →HTTP #62 →HTTP #68 →HTTP #75 →Matched indicatorskinnycrawlinglax.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →Matched indicatorwayfarerorthodox.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →Matched indicatorwayfarerorthodox.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #6 →Matched indicatorwayfarerorthodox.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #9 →Matched indicatorprotrafficinspector.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #65 →Matched indicatorflushpersist.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #65 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #12 →HTTP #65 →Matched indicatorflushpersist.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #26 →Matched indicatorpreferencenail.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #26 →Matched indicatorpreferencenail.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #16 →HTTP #26 →Matched indicatorpreferencenail.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #29 →HTTP #34 →HTTP #48 →HTTP #51 →HTTP #64 →HTTP #72 →Matched indicatorrealizationnewestfangs.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #29 →HTTP #34 →HTTP #48 →HTTP #51 →HTTP #64 →HTTP #72 →Matched indicatorrealizationnewestfangs.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →Matched indicatorweirdopt.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →Matched indicatorweirdopt.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #30 →Matched indicatorweirdopt.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #43 →Matched indicatorwww.highperformanceformat.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #43 →Matched indicatorwww.highperformanceformat.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #43 →Matched indicatorwww.highperformanceformat.com⧉