Private YARA rules ·Hunting_JS_WebAssemblyVerdict○auditSeverity○audit Triggered on HTTP #70 →JavaScript #41 →Matched indicatorwww.youtube.com/s/player/8e54e4ea/player_embed_es6.vflset/en_US/base.js⧉
DigiCert UltraDNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #1 →HTTP #3 →HTTP #4 →HTTP #5 →HTTP #15 →HTTP #16 →HTTP #18 →HTTP #21 →HTTP #22 →HTTP #23 →HTTP #25 →HTTP #31 →HTTP #34 →HTTP #50 →HTTP #53 →HTTP #54 →HTTP #60 →HTTP #68 →HTTP #69 →HTTP #74 →HTTP #79 →HTTP #81 →HTTP #83 →HTTP #84 →HTTP #85 →HTTP #89 →HTTP #93 →HTTP #95 →HTTP #101 →HTTP #102 →HTTP #104 →HTTP #105 →HTTP #108 →HTTP #113 →HTTP #114 →HTTP #118 →HTTP #121 →HTTP #124 →Matched indicatorxrysoi3.space⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #2 →HTTP #11 →HTTP #75 →HTTP #117 →Matched indicatorcreative-sb1.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #2 →HTTP #11 →HTTP #75 →HTTP #117 →Matched indicatorcreative-sb1.com⧉
DigiCert UltraDNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #7 →HTTP #8 →HTTP #26 →HTTP #38 →HTTP #45 →HTTP #52 →HTTP #57 →HTTP #61 →HTTP #62 →HTTP #65 →HTTP #71 →HTTP #72 →HTTP #73 →HTTP #78 →HTTP #80 →HTTP #82 →HTTP #87 →HTTP #91 →HTTP #103 →HTTP #107 →HTTP #109 →HTTP #110 →HTTP #115 →HTTP #119 →HTTP #120 →Matched indicatortainiesonline.xrysoi3.space⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #14 →Matched indicatorcupidirresolute.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #14 →Matched indicatorcupidirresolute.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #19 →HTTP #30 →HTTP #33 →HTTP #37 →HTTP #49 →HTTP #58 →HTTP #59 →HTTP #99 →Matched indicatorkettledroopingcontinuation.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #19 →HTTP #30 →HTTP #33 →HTTP #37 →HTTP #49 →HTTP #58 →HTTP #59 →HTTP #99 →Matched indicatorkettledroopingcontinuation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #19 →HTTP #30 →HTTP #33 →HTTP #37 →HTTP #49 →HTTP #58 →HTTP #59 →HTTP #99 →Matched indicatorkettledroopingcontinuation.com⧉
Quad9 DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #19 →HTTP #30 →HTTP #33 →HTTP #37 →HTTP #49 →HTTP #58 →HTTP #59 →HTTP #99 →Matched indicatorkettledroopingcontinuation.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #28 →Matched indicatorcdn.show-sb.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #28 →Matched indicatorcdn.show-sb.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #47 →HTTP #48 →HTTP #92 →HTTP #98 →HTTP #106 →Matched indicatorskinnycrawlinglax.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #47 →HTTP #48 →HTTP #92 →HTTP #98 →HTTP #106 →Matched indicatorskinnycrawlinglax.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #32 →HTTP #47 →HTTP #48 →HTTP #92 →HTTP #98 →HTTP #106 →Matched indicatorskinnycrawlinglax.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #41 →HTTP #55 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #41 →HTTP #55 →Matched indicatorflushpersist.com⧉
Hagezi Threat Feed ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #42 →HTTP #56 →Matched indicatorpreferencenail.com⧉
Cloudflare DNS ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #42 →HTTP #56 →Matched indicatorpreferencenail.com⧉
DNS4EU ·SinkholedVerdict!MaliciousSeverity△medium Triggered on HTTP #51 →Matched indicatorplantationhick.com⧉