>Let’s explore.

No detections reported.

No detections reported.

No detections reported.

No detections reported.

No detections reported.

• Sinkholed DigiCert UltraDNS · medium severity Malicious

• Sinkholed Cloudflare DNS · medium severity Malicious
• Sinkholed DNS4EU · medium severity Malicious

No detections reported.

No detections reported.

No detections reported.

No detections reported.

No detections reported.

• Generic JSP webshell with base64 encoded payload Nextron YARA rules · medium severity malware

• ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI Suricata IDS · medium severity

• Hunting_JS_WebAssembly Private YARA rules · audit severity audit

• Scans presence of the found strings using the in-house brute force method YARAhub by abuse.ch · medium severity malware

• Sinkholed DigiCert UltraDNS · medium severity Malicious
• Hunting_JS_WebAssembly Private YARA rules · audit severity audit

• Scans presence of the found strings using the in-house brute force method YARAhub by abuse.ch · medium severity malware

• Hunting_JS_WebAssembly Private YARA rules · audit severity audit

No detections reported.

No detections reported.

• ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI Suricata IDS · low severity

• Sinkholed Hagezi Threat Feed · medium severity Malicious
• ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M1 Suricata IDS · low severity
• ET HUNTING [TW] Likely Javascript-Obfuscator Usage Observed M2 Suricata IDS · low severity

No detections reported.