Ruleset Update Summary - 2026/07/06 - v11227

Ruleset Updates
1

Summary:

754 new OPEN, 796 new PRO (754 + 42)

Added rules:

Open:

  • 2070360 - ET INFO DYNAMIC_DNS HTTP Request to a *.patf .net domain (info.rules)
  • 2070361 - ET INFO DYNAMIC_DNS Query to a *.ronindev .ru domain (info.rules)
  • 2070362 - ET INFO DYNAMIC_DNS HTTP Request to a *.ronindev .ru domain (info.rules)
  • 2070363 - ET INFO DYNAMIC_DNS Query to a *.bretonmeadowfarm .org domain (info.rules)
  • 2070364 - ET INFO DYNAMIC_DNS HTTP Request to a *.bretonmeadowfarm .org domain (info.rules)
  • 2070365 - ET INFO DYNAMIC_DNS Query to a *.garantialibre .com domain (info.rules)
  • 2070366 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (pearljunction .top) (exploit_kit.rules)
  • 2070367 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (cobaltorchard .top) (exploit_kit.rules)
  • 2070368 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (crystalmarket .top) (exploit_kit.rules)
  • 2070369 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (pearljunction .top) (exploit_kit.rules)
  • 2070370 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (dl .politex .app) (malware.rules)
  • 2070371 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (static .theellsworths .uk) (malware.rules)
  • 2070372 - ET MALWARE TA569 Gholoader CnC Domain in DNS Lookup (app .cloudkwekerijbloemendaal .com) (malware.rules)
  • 2070374 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (static .theellsworths .uk) (malware.rules)
  • 2070375 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (app .cloudkwekerijbloemendaal .com) (malware.rules)
  • 2070376 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (cobaltorchard .top) (exploit_kit.rules)
  • 2070377 - ET EXPLOIT_KIT ZPHP Domain in DNS Lookup (crystalmarket .top) (exploit_kit.rules)
  • 2070378 - ET INFO DYNAMIC_DNS Query to a *.hang-kei .com domain (info.rules)
  • 2070379 - ET INFO DYNAMIC_DNS HTTP Request to a *.hang-kei .com domain (info.rules)
  • 2070380 - ET INFO DYNAMIC_DNS Query to a *.naberinc .net domain (info.rules)
  • 2070381 - ET INFO DYNAMIC_DNS HTTP Request to a *.naberinc .net domain (info.rules)
  • 2070382 - ET INFO DYNAMIC_DNS Query to a *.idiotfootsteps .net domain (info.rules)
  • 2070383 - ET INFO DYNAMIC_DNS HTTP Request to a *.idiotfootsteps .net domain (info.rules)
  • 2070384 - ET INFO DYNAMIC_DNS Query to a *.sailtheuniverse .com domain (info.rules)
  • 2070385 - ET INFO DYNAMIC_DNS HTTP Request to a *.sailtheuniverse .com domain (info.rules)
  • 2070386 - ET INFO DYNAMIC_DNS Query to a *.pjfox .xyz domain (info.rules)
  • 2070387 - ET INFO DYNAMIC_DNS HTTP Request to a *.pjfox .xyz domain (info.rules)
  • 2070388 - ET INFO DYNAMIC_DNS Query to a *.cheap-car-rental .com domain (info.rules)
  • 2070389 - ET INFO DYNAMIC_DNS HTTP Request to a *.cheap-car-rental .com domain (info.rules)
  • 2070390 - ET INFO DYNAMIC_DNS Query to a *.rabinoisaacsacca .com domain (info.rules)
  • 2070391 - ET INFO DYNAMIC_DNS HTTP Request to a *.rabinoisaacsacca .com domain (info.rules)
  • 2070392 - ET INFO DYNAMIC_DNS Query to a *.itsnotrocket .co .uk domain (info.rules)
  • 2070393 - ET INFO DYNAMIC_DNS HTTP Request to a *.itsnotrocket .co .uk domain (info.rules)
  • 2070394 - ET INFO DYNAMIC_DNS Query to a *.djarvi .com domain (info.rules)
  • 2070395 - ET INFO DYNAMIC_DNS HTTP Request to a *.djarvi .com domain (info.rules)
  • 2070396 - ET INFO DYNAMIC_DNS Query to a *.fromhell .lv domain (info.rules)
  • 2070397 - ET INFO DYNAMIC_DNS HTTP Request to a *.fromhell .lv domain (info.rules)
  • 2070398 - ET INFO DYNAMIC_DNS Query to a *.verbovirtual .com .br domain (info.rules)
  • 2070399 - ET INFO DYNAMIC_DNS HTTP Request to a *.verbovirtual .com .br domain (info.rules)
  • 2070400 - ET INFO DYNAMIC_DNS Query to a *.tuevnord .hk domain (info.rules)
  • 2070401 - ET INFO DYNAMIC_DNS HTTP Request to a *.tuevnord .hk domain (info.rules)
  • 2070402 - ET INFO DYNAMIC_DNS Query to a *.davidianlandis .com domain (info.rules)
  • 2070403 - ET INFO DYNAMIC_DNS HTTP Request to a *.davidianlandis .com domain (info.rules)
  • 2070404 - ET INFO DYNAMIC_DNS Query to a *.cellophaneslinger .net domain (info.rules)
  • 2070405 - ET INFO DYNAMIC_DNS HTTP Request to a *.cellophaneslinger .net domain (info.rules)
  • 2070406 - ET INFO DYNAMIC_DNS Query to a *.deleesportsmedicine .com domain (info.rules)
  • 2070407 - ET INFO DYNAMIC_DNS HTTP Request to a *.deleesportsmedicine .com domain (info.rules)
  • 2070408 - ET INFO DYNAMIC_DNS Query to a *.yue .com .br domain (info.rules)
  • 2070409 - ET INFO DYNAMIC_DNS HTTP Request to a *.yue .com .br domain (info.rules)
  • 2070410 - ET INFO DYNAMIC_DNS Query to a *.abwild .net domain (info.rules)
  • 2070411 - ET INFO DYNAMIC_DNS HTTP Request to a *.abwild .net domain (info.rules)
  • 2070412 - ET INFO DYNAMIC_DNS Query to a *.brettejones .com domain (info.rules)
  • 2070413 - ET INFO DYNAMIC_DNS HTTP Request to a *.brettejones .com domain (info.rules)
  • 2070414 - ET INFO DYNAMIC_DNS Query to a *.lvkita .net domain (info.rules)
  • 2070415 - ET INFO DYNAMIC_DNS HTTP Request to a *.lvkita .net domain (info.rules)
  • 2070416 - ET INFO DYNAMIC_DNS Query to a *.rickcee .net domain (info.rules)
  • 2070417 - ET INFO DYNAMIC_DNS HTTP Request to a *.rickcee .net domain (info.rules)
  • 2070418 - ET INFO DYNAMIC_DNS Query to a *.retrospelexperten .com domain (info.rules)
  • 2070419 - ET INFO DYNAMIC_DNS HTTP Request to a *.retrospelexperten .com domain (info.rules)
  • 2070420 - ET INFO DYNAMIC_DNS Query to a *.adipeq .cl domain (info.rules)
  • 2070421 - ET INFO DYNAMIC_DNS HTTP Request to a *.adipeq .cl domain (info.rules)
  • 2070422 - ET INFO DYNAMIC_DNS Query to a *.edsonlopesguitar .com domain (info.rules)
  • 2070423 - ET INFO DYNAMIC_DNS HTTP Request to a *.edsonlopesguitar .com domain (info.rules)
  • 2070424 - ET INFO DYNAMIC_DNS Query to a *.cefsk .ca domain (info.rules)
  • 2070425 - ET INFO DYNAMIC_DNS HTTP Request to a *.cefsk .ca domain (info.rules)
  • 2070426 - ET INFO DYNAMIC_DNS Query to a *.treyager .com domain (info.rules)
  • 2070427 - ET INFO DYNAMIC_DNS HTTP Request to a *.treyager .com domain (info.rules)
  • 2070428 - ET INFO DYNAMIC_DNS Query to a *.mori-baum .com domain (info.rules)
  • 2070429 - ET INFO DYNAMIC_DNS HTTP Request to a *.mori-baum .com domain (info.rules)
  • 2070430 - ET INFO DYNAMIC_DNS Query to a *.texmotive .com domain (info.rules)
  • 2070431 - ET INFO DYNAMIC_DNS HTTP Request to a *.texmotive .com domain (info.rules)
  • 2070432 - ET INFO DYNAMIC_DNS Query to a *.50friends .com .mx domain (info.rules)
  • 2070433 - ET INFO DYNAMIC_DNS HTTP Request to a *.50friends .com .mx domain (info.rules)
  • 2070434 - ET INFO DYNAMIC_DNS Query to a *.tygerson-art .com domain (info.rules)
  • 2070435 - ET INFO DYNAMIC_DNS HTTP Request to a *.tygerson-art .com domain (info.rules)
  • 2070436 - ET INFO DYNAMIC_DNS Query to a *.barneysaurous .net domain (info.rules)
  • 2070437 - ET INFO DYNAMIC_DNS HTTP Request to a *.barneysaurous .net domain (info.rules)
  • 2070438 - ET INFO DYNAMIC_DNS Query to a *.tuvnord .hk domain (info.rules)
  • 2070439 - ET INFO DYNAMIC_DNS HTTP Request to a *.tuvnord .hk domain (info.rules)
  • 2070440 - ET INFO DYNAMIC_DNS Query to a *.pettica .com domain (info.rules)
  • 2070441 - ET INFO DYNAMIC_DNS HTTP Request to a *.pettica .com domain (info.rules)
  • 2070442 - ET INFO DYNAMIC_DNS Query to a *.semioptimal .net domain (info.rules)
  • 2070443 - ET INFO DYNAMIC_DNS HTTP Request to a *.semioptimal .net domain (info.rules)
  • 2070444 - ET INFO DYNAMIC_DNS Query to a *.vanitypanels .com domain (info.rules)
  • 2070445 - ET INFO DYNAMIC_DNS HTTP Request to a *.vanitypanels .com domain (info.rules)
  • 2070446 - ET INFO DYNAMIC_DNS Query to a *.vslui .net domain (info.rules)
  • 2070447 - ET INFO DYNAMIC_DNS HTTP Request to a *.vslui .net domain (info.rules)
  • 2070448 - ET INFO DYNAMIC_DNS Query to a *.athreattosociety .com domain (info.rules)
  • 2070449 - ET INFO DYNAMIC_DNS HTTP Request to a *.athreattosociety .com domain (info.rules)
  • 2070450 - ET INFO DYNAMIC_DNS Query to a *.msspsparaguay .org domain (info.rules)
  • 2070451 - ET INFO DYNAMIC_DNS HTTP Request to a *.msspsparaguay .org domain (info.rules)
  • 2070452 - ET INFO DYNAMIC_DNS Query to a *.the-kaisers .net domain (info.rules)
  • 2070453 - ET INFO DYNAMIC_DNS HTTP Request to a *.the-kaisers .net domain (info.rules)
  • 2070454 - ET INFO DYNAMIC_DNS Query to a *.centralvigia .com .ar domain (info.rules)
  • 2070455 - ET INFO DYNAMIC_DNS HTTP Request to a *.centralvigia .com .ar domain (info.rules)
  • 2070456 - ET INFO DYNAMIC_DNS Query to a *.thealcohall .com domain (info.rules)
  • 2070457 - ET INFO DYNAMIC_DNS HTTP Request to a *.thealcohall .com domain (info.rules)
  • 2070458 - ET INFO DYNAMIC_DNS Query to a *.nondestructivetesting .ca domain (info.rules)
  • 2070459 - ET INFO DYNAMIC_DNS HTTP Request to a *.nondestructivetesting .ca domain (info.rules)
  • 2070460 - ET INFO DYNAMIC_DNS Query to a *.panhandleflyers .net domain (info.rules)
  • 2070461 - ET INFO DYNAMIC_DNS HTTP Request to a *.panhandleflyers .net domain (info.rules)
  • 2070462 - ET INFO DYNAMIC_DNS Query to a *.hotel-am-brillantengrund .at domain (info.rules)
  • 2070463 - ET INFO DYNAMIC_DNS HTTP Request to a *.hotel-am-brillantengrund .at domain (info.rules)
  • 2070464 - ET INFO DYNAMIC_DNS Query to a *.custombisolutions .com domain (info.rules)
  • 2070465 - ET INFO DYNAMIC_DNS HTTP Request to a *.custombisolutions .com domain (info.rules)
  • 2070466 - ET INFO DYNAMIC_DNS Query to a *.luhu .jp domain (info.rules)
  • 2070467 - ET INFO DYNAMIC_DNS HTTP Request to a *.luhu .jp domain (info.rules)
  • 2070468 - ET INFO DYNAMIC_DNS Query to a *.arm-m .ru domain (info.rules)
  • 2070469 - ET INFO DYNAMIC_DNS HTTP Request to a *.arm-m .ru domain (info.rules)
  • 2070470 - ET INFO DYNAMIC_DNS Query to a *.stpetersandstpauls .org domain (info.rules)
  • 2070471 - ET INFO DYNAMIC_DNS HTTP Request to a *.stpetersandstpauls .org domain (info.rules)
  • 2070472 - ET INFO DYNAMIC_DNS Query to a *.phatsilver .ca domain (info.rules)
  • 2070473 - ET INFO DYNAMIC_DNS HTTP Request to a *.phatsilver .ca domain (info.rules)
  • 2070474 - ET INFO DYNAMIC_DNS Query to a *.kaskjer .org domain (info.rules)
  • 2070475 - ET INFO DYNAMIC_DNS HTTP Request to a *.kaskjer .org domain (info.rules)
  • 2070476 - ET INFO DYNAMIC_DNS Query to a *.jophey .net domain (info.rules)
  • 2070477 - ET INFO DYNAMIC_DNS HTTP Request to a *.jophey .net domain (info.rules)
  • 2070478 - ET INFO DYNAMIC_DNS Query to a *.lipizzan-register .com domain (info.rules)
  • 2070479 - ET INFO DYNAMIC_DNS HTTP Request to a *.lipizzan-register .com domain (info.rules)
  • 2070480 - ET INFO DYNAMIC_DNS Query to a *.promedika .cl domain (info.rules)
  • 2070481 - ET INFO DYNAMIC_DNS HTTP Request to a *.promedika .cl domain (info.rules)
  • 2070482 - ET INFO DYNAMIC_DNS Query to a *.royaltec .com .ar domain (info.rules)
  • 2070483 - ET INFO DYNAMIC_DNS HTTP Request to a *.royaltec .com .ar domain (info.rules)
  • 2070484 - ET INFO DYNAMIC_DNS Query to a *.niteryder .net domain (info.rules)
  • 2070485 - ET INFO DYNAMIC_DNS HTTP Request to a *.niteryder .net domain (info.rules)
  • 2070486 - ET INFO DYNAMIC_DNS Query to a *.catbox .co domain (info.rules)
  • 2070487 - ET INFO DYNAMIC_DNS HTTP Request to a *.catbox .co domain (info.rules)
  • 2070488 - ET INFO DYNAMIC_DNS Query to a *.tuv-nord .hk domain (info.rules)
  • 2070489 - ET INFO DYNAMIC_DNS HTTP Request to a *.tuv-nord .hk domain (info.rules)
  • 2070490 - ET INFO DYNAMIC_DNS Query to a *.zambeezee .com domain (info.rules)
  • 2070491 - ET INFO DYNAMIC_DNS HTTP Request to a *.zambeezee .com domain (info.rules)
  • 2070492 - ET INFO DYNAMIC_DNS Query to a *.umlach .org domain (info.rules)
  • 2070493 - ET INFO DYNAMIC_DNS HTTP Request to a *.umlach .org domain (info.rules)
  • 2070494 - ET INFO DYNAMIC_DNS Query to a *.partasalan .is domain (info.rules)
  • 2070495 - ET INFO DYNAMIC_DNS HTTP Request to a *.partasalan .is domain (info.rules)
  • 2070496 - ET INFO DYNAMIC_DNS Query to a *.ufgqgrid .org domain (info.rules)
  • 2070497 - ET INFO DYNAMIC_DNS HTTP Request to a *.ufgqgrid .org domain (info.rules)
  • 2070498 - ET INFO DYNAMIC_DNS Query to a *.valejo .net domain (info.rules)
  • 2070499 - ET INFO DYNAMIC_DNS HTTP Request to a *.valejo .net domain (info.rules)
  • 2070500 - ET INFO DYNAMIC_DNS Query to a *.australianwildharvest .com domain (info.rules)
  • 2070501 - ET INFO DYNAMIC_DNS HTTP Request to a *.australianwildharvest .com domain (info.rules)
  • 2070502 - ET INFO DYNAMIC_DNS Query to a *.loopas .cl domain (info.rules)
  • 2070503 - ET INFO DYNAMIC_DNS HTTP Request to a *.loopas .cl domain (info.rules)
  • 2070504 - ET INFO DYNAMIC_DNS Query to a *.xxxtream .net domain (info.rules)
  • 2070505 - ET INFO DYNAMIC_DNS HTTP Request to a *.xxxtream .net domain (info.rules)
  • 2070506 - ET INFO DYNAMIC_DNS Query to a *.malsky .net domain (info.rules)
  • 2070507 - ET INFO DYNAMIC_DNS HTTP Request to a *.malsky .net domain (info.rules)
  • 2070508 - ET INFO DYNAMIC_DNS Query to a *.alcrb .ru domain (info.rules)
  • 2070509 - ET INFO DYNAMIC_DNS HTTP Request to a *.alcrb .ru domain (info.rules)
  • 2070510 - ET INFO DYNAMIC_DNS Query to a *.shootsell .com domain (info.rules)
  • 2070511 - ET INFO DYNAMIC_DNS HTTP Request to a *.shootsell .com domain (info.rules)
  • 2070512 - ET INFO DYNAMIC_DNS Query to a *.braginskiy .net domain (info.rules)
  • 2070513 - ET INFO DYNAMIC_DNS HTTP Request to a *.braginskiy .net domain (info.rules)
  • 2070514 - ET INFO DYNAMIC_DNS Query to a *.young-jet .com domain (info.rules)
  • 2070515 - ET INFO DYNAMIC_DNS HTTP Request to a *.young-jet .com domain (info.rules)
  • 2070516 - ET INFO DYNAMIC_DNS Query to a *.monkeyconveyancing .org domain (info.rules)
  • 2070517 - ET INFO DYNAMIC_DNS HTTP Request to a *.monkeyconveyancing .org domain (info.rules)
  • 2070518 - ET INFO DYNAMIC_DNS Query to a *.hkgcca .org domain (info.rules)
  • 2070519 - ET INFO DYNAMIC_DNS HTTP Request to a *.hkgcca .org domain (info.rules)
  • 2070520 - ET INFO DYNAMIC_DNS Query to a *.inducort .com domain (info.rules)
  • 2070521 - ET INFO DYNAMIC_DNS HTTP Request to a *.inducort .com domain (info.rules)
  • 2070522 - ET INFO DYNAMIC_DNS Query to a *.thepotionsmaster .net domain (info.rules)
  • 2070523 - ET INFO DYNAMIC_DNS HTTP Request to a *.thepotionsmaster .net domain (info.rules)
  • 2070524 - ET INFO DYNAMIC_DNS Query to a *.serhanceki .com domain (info.rules)
  • 2070525 - ET INFO DYNAMIC_DNS HTTP Request to a *.serhanceki .com domain (info.rules)
  • 2070526 - ET INFO DYNAMIC_DNS Query to a *.trfield58 .com domain (info.rules)
  • 2070527 - ET INFO DYNAMIC_DNS HTTP Request to a *.trfield58 .com domain (info.rules)
  • 2070528 - ET INFO DYNAMIC_DNS Query to a *.embeddedcontrolsinc .com domain (info.rules)
  • 2070529 - ET INFO DYNAMIC_DNS HTTP Request to a *.embeddedcontrolsinc .com domain (info.rules)
  • 2070530 - ET INFO DYNAMIC_DNS Query to a *.hn-mes .com domain (info.rules)
  • 2070531 - ET INFO DYNAMIC_DNS HTTP Request to a *.hn-mes .com domain (info.rules)
  • 2070532 - ET INFO DYNAMIC_DNS Query to a *.electricalone .com domain (info.rules)
  • 2070533 - ET INFO DYNAMIC_DNS HTTP Request to a *.electricalone .com domain (info.rules)
  • 2070534 - ET INFO DYNAMIC_DNS Query to a *.lareida .org domain (info.rules)
  • 2070535 - ET INFO DYNAMIC_DNS HTTP Request to a *.lareida .org domain (info.rules)
  • 2070536 - ET INFO DYNAMIC_DNS Query to a *.kump .si domain (info.rules)
  • 2070537 - ET INFO DYNAMIC_DNS HTTP Request to a *.kump .si domain (info.rules)
  • 2070538 - ET INFO DYNAMIC_DNS Query to a *.bartlondon .com domain (info.rules)
  • 2070539 - ET INFO DYNAMIC_DNS HTTP Request to a *.bartlondon .com domain (info.rules)
  • 2070540 - ET INFO DYNAMIC_DNS Query to a *.splashweave .com domain (info.rules)
  • 2070541 - ET INFO DYNAMIC_DNS HTTP Request to a *.splashweave .com domain (info.rules)
  • 2070542 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (nonseca .lol) (exploit_kit.rules)
  • 2070543 - ET EXPLOIT_KIT LandUpdate808 Domain in DNS Lookup (schester .beer) (exploit_kit.rules)
  • 2070544 - ET EXPLOIT_KIT LandUpdate808 Domain in TLS SNI (nonseca .lol) (exploit_kit.rules)
  • 2070545 - ET EXPLOIT_KIT LandUpdate808 Domain in TLS SNI (schester .beer) (exploit_kit.rules)
  • 2070546 - ET INFO DYNAMIC_DNS Query to a *.ecoeduc .cl domain (info.rules)
  • 2070547 - ET INFO DYNAMIC_DNS HTTP Request to a *.ecoeduc .cl domain (info.rules)
  • 2070548 - ET INFO DYNAMIC_DNS Query to a *.thecorporationofthings .com domain (info.rules)
  • 2070549 - ET INFO DYNAMIC_DNS HTTP Request to a *.thecorporationofthings .com domain (info.rules)
  • 2070550 - ET INFO DYNAMIC_DNS Query to a *.dderby .net domain (info.rules)
  • 2070551 - ET INFO DYNAMIC_DNS HTTP Request to a *.dderby .net domain (info.rules)
  • 2070552 - ET INFO DYNAMIC_DNS Query to a *.envytations .co .uk domain (info.rules)
  • 2070553 - ET INFO DYNAMIC_DNS HTTP Request to a *.envytations .co .uk domain (info.rules)
  • 2070554 - ET INFO DYNAMIC_DNS Query to a *.paulgross .net domain (info.rules)
  • 2070555 - ET INFO DYNAMIC_DNS HTTP Request to a *.paulgross .net domain (info.rules)
  • 2070556 - ET INFO DYNAMIC_DNS Query to a *.cwqso .net domain (info.rules)
  • 2070557 - ET INFO DYNAMIC_DNS HTTP Request to a *.cwqso .net domain (info.rules)
  • 2070558 - ET INFO DYNAMIC_DNS Query to a *.ur-net .com domain (info.rules)
  • 2070559 - ET INFO DYNAMIC_DNS HTTP Request to a *.ur-net .com domain (info.rules)
  • 2070560 - ET INFO DYNAMIC_DNS Query to a *.nektarios .gr domain (info.rules)
  • 2070561 - ET INFO DYNAMIC_DNS HTTP Request to a *.nektarios .gr domain (info.rules)
  • 2070562 - ET INFO DYNAMIC_DNS Query to a *.hospedajemariafresia .cl domain (info.rules)
  • 2070563 - ET INFO DYNAMIC_DNS HTTP Request to a *.hospedajemariafresia .cl domain (info.rules)
  • 2070564 - ET INFO DYNAMIC_DNS Query to a *.streetdirectory .net .my domain (info.rules)
  • 2070565 - ET INFO DYNAMIC_DNS HTTP Request to a *.streetdirectory .net .my domain (info.rules)
  • 2070566 - ET INFO DYNAMIC_DNS Query to a *.avenuecarriagecrossing .com domain (info.rules)
  • 2070567 - ET INFO DYNAMIC_DNS HTTP Request to a *.avenuecarriagecrossing .com domain (info.rules)
  • 2070568 - ET INFO DYNAMIC_DNS Query to a *.ajatar .org domain (info.rules)
  • 2070569 - ET INFO DYNAMIC_DNS HTTP Request to a *.ajatar .org domain (info.rules)
  • 2070570 - ET INFO DYNAMIC_DNS Query to a *.stanharvell .com domain (info.rules)
  • 2070571 - ET INFO DYNAMIC_DNS HTTP Request to a *.stanharvell .com domain (info.rules)
  • 2070572 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (buyinpt .cyou) (malware.rules)
  • 2070573 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (buyinpt .cyou) in TLS SNI (malware.rules)
  • 2070574 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (litigatin .cfd) (malware.rules)
  • 2070575 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (litigatin .cfd) in TLS SNI (malware.rules)
  • 2070576 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (proclaimykn .buzz) (malware.rules)
  • 2070577 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (proclaimykn .buzz) in TLS SNI (malware.rules)
  • 2070578 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (submiytinh .biz) (malware.rules)
  • 2070579 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (submiytinh .biz) in TLS SNI (malware.rules)
  • 2070580 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (suiatcarew .biz) (malware.rules)
  • 2070581 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (suiatcarew .biz) in TLS SNI (malware.rules)
  • 2070582 - ET INFO DYNAMIC_DNS Query to a *.smtmarking .com domain (info.rules)
  • 2070583 - ET INFO DYNAMIC_DNS HTTP Request to a *.smtmarking .com domain (info.rules)
  • 2070584 - ET INFO DYNAMIC_DNS Query to a *.vets .co .il domain (info.rules)
  • 2070585 - ET INFO DYNAMIC_DNS HTTP Request to a *.vets .co .il domain (info.rules)
  • 2070586 - ET INFO DYNAMIC_DNS Query to a *.alt169 .net domain (info.rules)
  • 2070587 - ET INFO DYNAMIC_DNS HTTP Request to a *.alt169 .net domain (info.rules)
  • 2070588 - ET INFO DYNAMIC_DNS Query to a *.xy-solutions .com domain (info.rules)
  • 2070589 - ET INFO DYNAMIC_DNS HTTP Request to a *.xy-solutions .com domain (info.rules)
  • 2070590 - ET INFO DYNAMIC_DNS Query to a *.wbcc .org .au domain (info.rules)
  • 2070591 - ET INFO DYNAMIC_DNS HTTP Request to a *.wbcc .org .au domain (info.rules)
  • 2070592 - ET INFO DYNAMIC_DNS Query to a *.hldj .nl domain (info.rules)
  • 2070593 - ET INFO DYNAMIC_DNS HTTP Request to a *.hldj .nl domain (info.rules)
  • 2070594 - ET INFO DYNAMIC_DNS Query to a *.diagprog .co .uk domain (info.rules)
  • 2070595 - ET INFO DYNAMIC_DNS HTTP Request to a *.diagprog .co .uk domain (info.rules)
  • 2070596 - ET INFO DYNAMIC_DNS Query to a *.babysittercircle .co .uk domain (info.rules)
  • 2070597 - ET INFO DYNAMIC_DNS HTTP Request to a *.babysittercircle .co .uk domain (info.rules)
  • 2070598 - ET INFO DYNAMIC_DNS Query to a *.custermd .com domain (info.rules)
  • 2070599 - ET INFO DYNAMIC_DNS HTTP Request to a *.custermd .com domain (info.rules)
  • 2070600 - ET INFO DYNAMIC_DNS Query to a *.groomthegroom .net domain (info.rules)
  • 2070601 - ET INFO DYNAMIC_DNS HTTP Request to a *.groomthegroom .net domain (info.rules)
  • 2070602 - ET INFO DYNAMIC_DNS Query to a *.bsas .com .ar domain (info.rules)
  • 2070603 - ET INFO DYNAMIC_DNS HTTP Request to a *.bsas .com .ar domain (info.rules)
  • 2070604 - ET INFO DYNAMIC_DNS Query to a *.tripreceipts .com domain (info.rules)
  • 2070605 - ET INFO DYNAMIC_DNS HTTP Request to a *.tripreceipts .com domain (info.rules)
  • 2070606 - ET INFO DYNAMIC_DNS Query to a *.hoster .my .id domain (info.rules)
  • 2070607 - ET INFO DYNAMIC_DNS HTTP Request to a *.hoster .my .id domain (info.rules)
  • 2070608 - ET INFO DYNAMIC_DNS Query to a *.interplan .com .mx domain (info.rules)
  • 2070609 - ET INFO DYNAMIC_DNS HTTP Request to a *.interplan .com .mx domain (info.rules)
  • 2070610 - ET INFO DYNAMIC_DNS Query to a *.amistr .net domain (info.rules)
  • 2070611 - ET INFO DYNAMIC_DNS HTTP Request to a *.amistr .net domain (info.rules)
  • 2070612 - ET INFO DYNAMIC_DNS Query to a *.paranormal .com .my domain (info.rules)
  • 2070613 - ET INFO DYNAMIC_DNS HTTP Request to a *.paranormal .com .my domain (info.rules)
  • 2070614 - ET INFO DYNAMIC_DNS Query to a *.stressmap .ru domain (info.rules)
  • 2070615 - ET INFO DYNAMIC_DNS HTTP Request to a *.stressmap .ru domain (info.rules)
  • 2070616 - ET INFO DYNAMIC_DNS Query to a *.casadotricolor .com .br domain (info.rules)
  • 2070617 - ET INFO DYNAMIC_DNS HTTP Request to a *.casadotricolor .com .br domain (info.rules)
  • 2070618 - ET INFO DYNAMIC_DNS Query to a *.streetdirectory .sg domain (info.rules)
  • 2070619 - ET INFO DYNAMIC_DNS HTTP Request to a *.streetdirectory .sg domain (info.rules)
  • 2070620 - ET INFO DYNAMIC_DNS Query to a *.osperkins .com .ar domain (info.rules)
  • 2070621 - ET INFO DYNAMIC_DNS HTTP Request to a *.osperkins .com .ar domain (info.rules)
  • 2070622 - ET INFO DYNAMIC_DNS Query to a *.undo .cl domain (info.rules)
  • 2070623 - ET INFO DYNAMIC_DNS HTTP Request to a *.undo .cl domain (info.rules)
  • 2070624 - ET INFO DYNAMIC_DNS Query to a *.goodworth .id .au domain (info.rules)
  • 2070625 - ET INFO DYNAMIC_DNS HTTP Request to a *.goodworth .id .au domain (info.rules)
  • 2070626 - ET INFO DYNAMIC_DNS Query to a *.bclib .org domain (info.rules)
  • 2070627 - ET INFO DYNAMIC_DNS HTTP Request to a *.bclib .org domain (info.rules)
  • 2070628 - ET INFO DYNAMIC_DNS Query to a *.edgeindustries .co .uk domain (info.rules)
  • 2070629 - ET INFO DYNAMIC_DNS HTTP Request to a *.edgeindustries .co .uk domain (info.rules)
  • 2070630 - ET INFO DYNAMIC_DNS Query to a *.monkeyconveyancing .net domain (info.rules)
  • 2070631 - ET INFO DYNAMIC_DNS HTTP Request to a *.monkeyconveyancing .net domain (info.rules)
  • 2070632 - ET INFO DYNAMIC_DNS Query to a *.netmarket .gr domain (info.rules)
  • 2070633 - ET INFO DYNAMIC_DNS HTTP Request to a *.netmarket .gr domain (info.rules)
  • 2070634 - ET INFO DYNAMIC_DNS Query to a *.whimsy .me domain (info.rules)
  • 2070635 - ET INFO DYNAMIC_DNS HTTP Request to a *.whimsy .me domain (info.rules)
  • 2070636 - ET INFO DYNAMIC_DNS Query to a *.tribuideas .cl domain (info.rules)
  • 2070637 - ET INFO DYNAMIC_DNS HTTP Request to a *.tribuideas .cl domain (info.rules)
  • 2070638 - ET INFO DYNAMIC_DNS Query to a *.estradatech .com domain (info.rules)
  • 2070639 - ET INFO DYNAMIC_DNS HTTP Request to a *.estradatech .com domain (info.rules)
  • 2070640 - ET INFO DYNAMIC_DNS Query to a *.ponyhost .xyz domain (info.rules)
  • 2070641 - ET INFO DYNAMIC_DNS HTTP Request to a *.ponyhost .xyz domain (info.rules)
  • 2070642 - ET INFO DYNAMIC_DNS Query to a *.rocheclan .org domain (info.rules)
  • 2070643 - ET INFO DYNAMIC_DNS HTTP Request to a *.rocheclan .org domain (info.rules)
  • 2070644 - ET INFO DYNAMIC_DNS Query to a *.elettro-pio .ch domain (info.rules)
  • 2070645 - ET INFO DYNAMIC_DNS HTTP Request to a *.elettro-pio .ch domain (info.rules)
  • 2070646 - ET INFO DYNAMIC_DNS Query to a *.autoindependentreflexes .net domain (info.rules)
  • 2070647 - ET INFO DYNAMIC_DNS HTTP Request to a *.autoindependentreflexes .net domain (info.rules)
  • 2070648 - ET INFO DYNAMIC_DNS Query to a *.megaokazii .ro domain (info.rules)
  • 2070649 - ET INFO DYNAMIC_DNS HTTP Request to a *.megaokazii .ro domain (info.rules)
  • 2070650 - ET INFO DYNAMIC_DNS Query to a *.icp-seigyo .com domain (info.rules)
  • 2070651 - ET INFO DYNAMIC_DNS HTTP Request to a *.icp-seigyo .com domain (info.rules)
  • 2070652 - ET INFO DYNAMIC_DNS Query to a *.salyani .org .np domain (info.rules)
  • 2070653 - ET INFO DYNAMIC_DNS HTTP Request to a *.salyani .org .np domain (info.rules)
  • 2070654 - ET INFO DYNAMIC_DNS Query to a *.opinari .net domain (info.rules)
  • 2070655 - ET INFO DYNAMIC_DNS HTTP Request to a *.opinari .net domain (info.rules)
  • 2070656 - ET INFO DYNAMIC_DNS Query to a *.insilico .at domain (info.rules)
  • 2070657 - ET INFO DYNAMIC_DNS HTTP Request to a *.insilico .at domain (info.rules)
  • 2070658 - ET INFO DYNAMIC_DNS Query to a *.marchd .ru domain (info.rules)
  • 2070659 - ET INFO DYNAMIC_DNS HTTP Request to a *.marchd .ru domain (info.rules)
  • 2070660 - ET INFO DYNAMIC_DNS Query to a *.assuregloves .com domain (info.rules)
  • 2070661 - ET INFO DYNAMIC_DNS HTTP Request to a *.assuregloves .com domain (info.rules)
  • 2070662 - ET INFO DYNAMIC_DNS Query to a *.vserver .app domain (info.rules)
  • 2070663 - ET INFO DYNAMIC_DNS HTTP Request to a *.vserver .app domain (info.rules)
  • 2070664 - ET INFO DYNAMIC_DNS Query to a *.hitechplus .biz domain (info.rules)
  • 2070665 - ET INFO DYNAMIC_DNS HTTP Request to a *.hitechplus .biz domain (info.rules)
  • 2070666 - ET INFO DYNAMIC_DNS Query to a *.canalcoruna .es domain (info.rules)
  • 2070667 - ET INFO DYNAMIC_DNS HTTP Request to a *.canalcoruna .es domain (info.rules)
  • 2070668 - ET INFO DYNAMIC_DNS Query to a *.sponsorafuture .net domain (info.rules)
  • 2070669 - ET INFO DYNAMIC_DNS HTTP Request to a *.sponsorafuture .net domain (info.rules)
  • 2070670 - ET INFO DYNAMIC_DNS Query to a *.falki .pl domain (info.rules)
  • 2070671 - ET INFO DYNAMIC_DNS HTTP Request to a *.falki .pl domain (info.rules)
  • 2070672 - ET INFO DYNAMIC_DNS Query to a *.warm4u .co .uk domain (info.rules)
  • 2070673 - ET INFO DYNAMIC_DNS HTTP Request to a *.warm4u .co .uk domain (info.rules)
  • 2070674 - ET INFO DYNAMIC_DNS Query to a *.xn–cnqxy420li2r .hk domain (info.rules)
  • 2070675 - ET INFO DYNAMIC_DNS HTTP Request to a *.xn–cnqxy420li2r .hk domain (info.rules)
  • 2070676 - ET INFO DYNAMIC_DNS Query to a *.scarboroughgymelites .ca domain (info.rules)
  • 2070677 - ET INFO DYNAMIC_DNS HTTP Request to a *.scarboroughgymelites .ca domain (info.rules)
  • 2070678 - ET INFO DYNAMIC_DNS Query to a *.happy0 .co .uk domain (info.rules)
  • 2070679 - ET INFO DYNAMIC_DNS HTTP Request to a *.happy0 .co .uk domain (info.rules)
  • 2070680 - ET INFO DYNAMIC_DNS Query to a *.fiat500 .li domain (info.rules)
  • 2070681 - ET INFO DYNAMIC_DNS HTTP Request to a *.fiat500 .li domain (info.rules)
  • 2070682 - ET INFO DYNAMIC_DNS Query to a *.barney .ro domain (info.rules)
  • 2070683 - ET INFO DYNAMIC_DNS HTTP Request to a *.barney .ro domain (info.rules)
  • 2070684 - ET INFO DYNAMIC_DNS Query to a *.istan .to domain (info.rules)
  • 2070685 - ET INFO DYNAMIC_DNS HTTP Request to a *.istan .to domain (info.rules)
  • 2070686 - ET INFO DYNAMIC_DNS Query to a *.steveward .ws domain (info.rules)
  • 2070687 - ET INFO DYNAMIC_DNS HTTP Request to a *.steveward .ws domain (info.rules)
  • 2070688 - ET INFO DYNAMIC_DNS Query to a *.lindore .net domain (info.rules)
  • 2070689 - ET INFO DYNAMIC_DNS HTTP Request to a *.lindore .net domain (info.rules)
  • 2070690 - ET INFO DYNAMIC_DNS Query to a *.3cx-systems .co .uk domain (info.rules)
  • 2070691 - ET INFO DYNAMIC_DNS HTTP Request to a *.3cx-systems .co .uk domain (info.rules)
  • 2070692 - ET INFO DYNAMIC_DNS Query to a *.whenisthenextnhllockout .com domain (info.rules)
  • 2070693 - ET INFO DYNAMIC_DNS HTTP Request to a *.whenisthenextnhllockout .com domain (info.rules)
  • 2070694 - ET INFO DYNAMIC_DNS Query to a *.mtcouros .com .br domain (info.rules)
  • 2070695 - ET INFO DYNAMIC_DNS HTTP Request to a *.mtcouros .com .br domain (info.rules)
  • 2070696 - ET INFO DYNAMIC_DNS Query to a *.segurosdepersonas .cl domain (info.rules)
  • 2070697 - ET INFO DYNAMIC_DNS HTTP Request to a *.segurosdepersonas .cl domain (info.rules)
  • 2070698 - ET INFO DYNAMIC_DNS Query to a *.simpleelegance-us .com domain (info.rules)
  • 2070699 - ET INFO DYNAMIC_DNS HTTP Request to a *.simpleelegance-us .com domain (info.rules)
  • 2070700 - ET INFO DYNAMIC_DNS Query to a *.depression-anxiety-assessment .com domain (info.rules)
  • 2070701 - ET INFO DYNAMIC_DNS HTTP Request to a *.depression-anxiety-assessment .com domain (info.rules)
  • 2070702 - ET INFO DYNAMIC_DNS Query to a *.edrivensports .com domain (info.rules)
  • 2070703 - ET INFO DYNAMIC_DNS HTTP Request to a *.edrivensports .com domain (info.rules)
  • 2070704 - ET INFO DYNAMIC_DNS Query to a *.rabinovich .co .il domain (info.rules)
  • 2070705 - ET INFO DYNAMIC_DNS HTTP Request to a *.rabinovich .co .il domain (info.rules)
  • 2070706 - ET INFO DYNAMIC_DNS Query to a *.drnathhome .com domain (info.rules)
  • 2070707 - ET INFO DYNAMIC_DNS HTTP Request to a *.drnathhome .com domain (info.rules)
  • 2070708 - ET INFO DYNAMIC_DNS Query to a *.feedcube .org domain (info.rules)
  • 2070709 - ET INFO DYNAMIC_DNS HTTP Request to a *.feedcube .org domain (info.rules)
  • 2070710 - ET INFO DYNAMIC_DNS Query to a *.aidbayarea .org domain (info.rules)
  • 2070711 - ET INFO DYNAMIC_DNS HTTP Request to a *.aidbayarea .org domain (info.rules)
  • 2070712 - ET INFO DYNAMIC_DNS Query to a *.surukle .me domain (info.rules)
  • 2070713 - ET INFO DYNAMIC_DNS HTTP Request to a *.surukle .me domain (info.rules)
  • 2070714 - ET INFO DYNAMIC_DNS Query to a *.cmr .com .ar domain (info.rules)
  • 2070715 - ET INFO DYNAMIC_DNS HTTP Request to a *.cmr .com .ar domain (info.rules)
  • 2070716 - ET INFO DYNAMIC_DNS Query to a *.millalen .cl domain (info.rules)
  • 2070717 - ET INFO DYNAMIC_DNS HTTP Request to a *.millalen .cl domain (info.rules)
  • 2070718 - ET INFO DYNAMIC_DNS Query to a *.giuras .cl domain (info.rules)
  • 2070719 - ET INFO DYNAMIC_DNS HTTP Request to a *.giuras .cl domain (info.rules)
  • 2070720 - ET INFO DYNAMIC_DNS Query to a *.pessalacia .com .br domain (info.rules)
  • 2070721 - ET INFO DYNAMIC_DNS HTTP Request to a *.pessalacia .com .br domain (info.rules)
  • 2070722 - ET INFO DYNAMIC_DNS Query to a *.veho .com .au domain (info.rules)
  • 2070723 - ET INFO DYNAMIC_DNS HTTP Request to a *.veho .com .au domain (info.rules)
  • 2070724 - ET INFO DYNAMIC_DNS Query to a *.reldas .com .ar domain (info.rules)
  • 2070725 - ET INFO DYNAMIC_DNS HTTP Request to a *.reldas .com .ar domain (info.rules)
  • 2070726 - ET INFO DYNAMIC_DNS Query to a *.ctotw .tw domain (info.rules)
  • 2070727 - ET INFO DYNAMIC_DNS HTTP Request to a *.ctotw .tw domain (info.rules)
  • 2070728 - ET INFO DYNAMIC_DNS Query to a *.octagono .cl domain (info.rules)
  • 2070729 - ET INFO DYNAMIC_DNS HTTP Request to a *.octagono .cl domain (info.rules)
  • 2070730 - ET INFO DYNAMIC_DNS Query to a *.gofman .co .il domain (info.rules)
  • 2070731 - ET INFO DYNAMIC_DNS HTTP Request to a *.gofman .co .il domain (info.rules)
  • 2070732 - ET INFO DYNAMIC_DNS Query to a *.shor .ch domain (info.rules)
  • 2070733 - ET INFO DYNAMIC_DNS HTTP Request to a *.shor .ch domain (info.rules)
  • 2070734 - ET INFO DYNAMIC_DNS Query to a *.mesca .ro domain (info.rules)
  • 2070735 - ET INFO DYNAMIC_DNS HTTP Request to a *.mesca .ro domain (info.rules)
  • 2070736 - ET INFO DYNAMIC_DNS Query to a *.totomul .com .ar domain (info.rules)
  • 2070737 - ET INFO DYNAMIC_DNS HTTP Request to a *.totomul .com .ar domain (info.rules)
  • 2070738 - ET INFO DYNAMIC_DNS Query to a *.atf .com .np domain (info.rules)
  • 2070739 - ET INFO DYNAMIC_DNS HTTP Request to a *.atf .com .np domain (info.rules)
  • 2070740 - ET INFO DYNAMIC_DNS Query to a *.koyuman .com domain (info.rules)
  • 2070741 - ET INFO DYNAMIC_DNS HTTP Request to a *.koyuman .com domain (info.rules)
  • 2070742 - ET INFO DYNAMIC_DNS Query to a *.johnanddenise .org .uk domain (info.rules)
  • 2070743 - ET INFO DYNAMIC_DNS HTTP Request to a *.johnanddenise .org .uk domain (info.rules)
  • 2070744 - ET INFO DYNAMIC_DNS Query to a *.train .web .id domain (info.rules)
  • 2070745 - ET INFO DYNAMIC_DNS HTTP Request to a *.train .web .id domain (info.rules)
  • 2070746 - ET INFO DYNAMIC_DNS Query to a *.grouper .cl domain (info.rules)
  • 2070747 - ET INFO DYNAMIC_DNS HTTP Request to a *.grouper .cl domain (info.rules)
  • 2070748 - ET INFO DYNAMIC_DNS Query to a *.syac .ca domain (info.rules)
  • 2070749 - ET INFO DYNAMIC_DNS HTTP Request to a *.syac .ca domain (info.rules)
  • 2070750 - ET INFO DYNAMIC_DNS Query to a *.biblosconsulting .ru domain (info.rules)
  • 2070751 - ET INFO DYNAMIC_DNS HTTP Request to a *.biblosconsulting .ru domain (info.rules)
  • 2070752 - ET INFO DYNAMIC_DNS Query to a *.avaprovi .com .mx domain (info.rules)
  • 2070753 - ET INFO DYNAMIC_DNS HTTP Request to a *.avaprovi .com .mx domain (info.rules)
  • 2070754 - ET INFO DYNAMIC_DNS Query to a *.defender24hs .com .br domain (info.rules)
  • 2070755 - ET INFO DYNAMIC_DNS HTTP Request to a *.defender24hs .com .br domain (info.rules)
  • 2070756 - ET INFO DYNAMIC_DNS Query to a *.pilas .biz domain (info.rules)
  • 2070757 - ET INFO DYNAMIC_DNS HTTP Request to a *.pilas .biz domain (info.rules)
  • 2070758 - ET INFO DYNAMIC_DNS Query to a *.xn–c-sga .net domain (info.rules)
  • 2070759 - ET INFO DYNAMIC_DNS HTTP Request to a *.xn–c-sga .net domain (info.rules)
  • 2070760 - ET INFO DYNAMIC_DNS Query to a *.skamaria .co domain (info.rules)
  • 2070761 - ET INFO DYNAMIC_DNS HTTP Request to a *.skamaria .co domain (info.rules)
  • 2070762 - ET INFO DYNAMIC_DNS Query to a *.seba .cl domain (info.rules)
  • 2070763 - ET INFO DYNAMIC_DNS HTTP Request to a *.seba .cl domain (info.rules)
  • 2070764 - ET INFO DYNAMIC_DNS Query to a *.peachsoft .co .uk domain (info.rules)
  • 2070765 - ET INFO DYNAMIC_DNS HTTP Request to a *.peachsoft .co .uk domain (info.rules)
  • 2070766 - ET INFO DYNAMIC_DNS Query to a *.nanobit .org domain (info.rules)
  • 2070767 - ET INFO DYNAMIC_DNS HTTP Request to a *.nanobit .org domain (info.rules)
  • 2070768 - ET INFO DYNAMIC_DNS Query to a *.galaxysoft .ro domain (info.rules)
  • 2070769 - ET INFO DYNAMIC_DNS HTTP Request to a *.galaxysoft .ro domain (info.rules)
  • 2070770 - ET INFO DYNAMIC_DNS Query to a *.thsa .com .ar domain (info.rules)
  • 2070771 - ET INFO DYNAMIC_DNS HTTP Request to a *.thsa .com .ar domain (info.rules)
  • 2070772 - ET INFO DYNAMIC_DNS Query to a *.kc-felty .net domain (info.rules)
  • 2070773 - ET INFO DYNAMIC_DNS HTTP Request to a *.kc-felty .net domain (info.rules)
  • 2070774 - ET INFO DYNAMIC_DNS Query to a *.kdits .ca domain (info.rules)
  • 2070775 - ET INFO DYNAMIC_DNS HTTP Request to a *.kdits .ca domain (info.rules)
  • 2070776 - ET INFO DYNAMIC_DNS Query to a *.brusin .net domain (info.rules)
  • 2070777 - ET INFO DYNAMIC_DNS HTTP Request to a *.brusin .net domain (info.rules)
  • 2070778 - ET INFO DYNAMIC_DNS Query to a *.gra-sc .co .id domain (info.rules)
  • 2070779 - ET INFO DYNAMIC_DNS HTTP Request to a *.gra-sc .co .id domain (info.rules)
  • 2070780 - ET INFO DYNAMIC_DNS Query to a *.cnblue .cl domain (info.rules)
  • 2070781 - ET INFO DYNAMIC_DNS HTTP Request to a *.cnblue .cl domain (info.rules)
  • 2070782 - ET INFO DYNAMIC_DNS Query to a *.chen-yang .tw domain (info.rules)
  • 2070783 - ET INFO DYNAMIC_DNS HTTP Request to a *.chen-yang .tw domain (info.rules)
  • 2070784 - ET INFO DYNAMIC_DNS Query to a *.mohearn .co .uk domain (info.rules)
  • 2070785 - ET INFO DYNAMIC_DNS HTTP Request to a *.mohearn .co .uk domain (info.rules)
  • 2070786 - ET INFO DYNAMIC_DNS Query to a *.superr .cc domain (info.rules)
  • 2070787 - ET INFO DYNAMIC_DNS HTTP Request to a *.superr .cc domain (info.rules)
  • 2070788 - ET INFO DYNAMIC_DNS Query to a *.webpersonal .cl domain (info.rules)
  • 2070789 - ET INFO DYNAMIC_DNS HTTP Request to a *.webpersonal .cl domain (info.rules)
  • 2070790 - ET INFO DYNAMIC_DNS Query to a *.chinapoem .org domain (info.rules)
  • 2070791 - ET INFO DYNAMIC_DNS HTTP Request to a *.chinapoem .org domain (info.rules)
  • 2070792 - ET INFO DYNAMIC_DNS Query to a *.expertdiagnoza .ro domain (info.rules)
  • 2070793 - ET INFO DYNAMIC_DNS HTTP Request to a *.expertdiagnoza .ro domain (info.rules)
  • 2070794 - ET INFO DYNAMIC_DNS Query to a *.i-umix .com .ar domain (info.rules)
  • 2070795 - ET INFO DYNAMIC_DNS HTTP Request to a *.i-umix .com .ar domain (info.rules)
  • 2070796 - ET INFO DYNAMIC_DNS Query to a *.wendyandnick .net domain (info.rules)
  • 2070797 - ET INFO DYNAMIC_DNS HTTP Request to a *.wendyandnick .net domain (info.rules)
  • 2070798 - ET INFO DYNAMIC_DNS Query to a *.castroyasociados .cl domain (info.rules)
  • 2070799 - ET INFO DYNAMIC_DNS HTTP Request to a *.castroyasociados .cl domain (info.rules)
  • 2070800 - ET INFO DYNAMIC_DNS Query to a *.fishfx .com domain (info.rules)
  • 2070801 - ET INFO DYNAMIC_DNS HTTP Request to a *.fishfx .com domain (info.rules)
  • 2070802 - ET INFO DYNAMIC_DNS Query to a *.labgarreguevara .com .ar domain (info.rules)
  • 2070803 - ET INFO DYNAMIC_DNS HTTP Request to a *.labgarreguevara .com .ar domain (info.rules)
  • 2070804 - ET INFO DYNAMIC_DNS Query to a *.marcus-mesquita .com domain (info.rules)
  • 2070805 - ET INFO DYNAMIC_DNS HTTP Request to a *.marcus-mesquita .com domain (info.rules)
  • 2070806 - ET INFO DYNAMIC_DNS Query to a *.fundacioncidea .org .ar domain (info.rules)
  • 2070807 - ET INFO DYNAMIC_DNS HTTP Request to a *.fundacioncidea .org .ar domain (info.rules)
  • 2070808 - ET INFO DYNAMIC_DNS Query to a *.sammarkham .co .uk domain (info.rules)
  • 2070809 - ET INFO DYNAMIC_DNS HTTP Request to a *.sammarkham .co .uk domain (info.rules)
  • 2070810 - ET INFO DYNAMIC_DNS Query to a *.truthortrust .com domain (info.rules)
  • 2070811 - ET INFO DYNAMIC_DNS HTTP Request to a *.truthortrust .com domain (info.rules)
  • 2070812 - ET INFO DYNAMIC_DNS Query to a *.macauley .info domain (info.rules)
  • 2070813 - ET INFO DYNAMIC_DNS HTTP Request to a *.macauley .info domain (info.rules)
  • 2070814 - ET INFO DYNAMIC_DNS Query to a *.informaticavenado .com .ar domain (info.rules)
  • 2070815 - ET INFO DYNAMIC_DNS HTTP Request to a *.informaticavenado .com .ar domain (info.rules)
  • 2070816 - ET INFO DYNAMIC_DNS Query to a *.caribgonewild .net domain (info.rules)
  • 2070817 - ET INFO DYNAMIC_DNS HTTP Request to a *.caribgonewild .net domain (info.rules)
  • 2070818 - ET INFO DYNAMIC_DNS Query to a *.rednutricional .cl domain (info.rules)
  • 2070819 - ET INFO DYNAMIC_DNS HTTP Request to a *.rednutricional .cl domain (info.rules)
  • 2070820 - ET INFO DYNAMIC_DNS Query to a *.papillon .cl domain (info.rules)
  • 2070821 - ET INFO DYNAMIC_DNS HTTP Request to a *.papillon .cl domain (info.rules)
  • 2070822 - ET INFO DYNAMIC_DNS Query to a *.cyberdine .ca domain (info.rules)
  • 2070823 - ET INFO DYNAMIC_DNS HTTP Request to a *.cyberdine .ca domain (info.rules)
  • 2070824 - ET INFO DYNAMIC_DNS Query to a *.mfc-krsulin .ru domain (info.rules)
  • 2070825 - ET INFO DYNAMIC_DNS HTTP Request to a *.mfc-krsulin .ru domain (info.rules)
  • 2070826 - ET INFO DYNAMIC_DNS Query to a *.creditcaronline .com .ar domain (info.rules)
  • 2070827 - ET INFO DYNAMIC_DNS HTTP Request to a *.creditcaronline .com .ar domain (info.rules)
  • 2070828 - ET INFO DYNAMIC_DNS Query to a *.lasersoft .com .au domain (info.rules)
  • 2070829 - ET INFO DYNAMIC_DNS HTTP Request to a *.lasersoft .com .au domain (info.rules)
  • 2070830 - ET INFO DYNAMIC_DNS Query to a *.fenesisu .moe domain (info.rules)
  • 2070831 - ET INFO DYNAMIC_DNS HTTP Request to a *.fenesisu .moe domain (info.rules)
  • 2070832 - ET INFO DYNAMIC_DNS Query to a *.tuoitrevn .nl domain (info.rules)
  • 2070833 - ET INFO DYNAMIC_DNS HTTP Request to a *.tuoitrevn .nl domain (info.rules)
  • 2070834 - ET INFO DYNAMIC_DNS Query to a *.clickandmortar .ca domain (info.rules)
  • 2070835 - ET INFO DYNAMIC_DNS HTTP Request to a *.clickandmortar .ca domain (info.rules)
  • 2070836 - ET INFO DYNAMIC_DNS Query to a *.leso-pis .com domain (info.rules)
  • 2070837 - ET INFO DYNAMIC_DNS HTTP Request to a *.leso-pis .com domain (info.rules)
  • 2070838 - ET INFO DYNAMIC_DNS Query to a *.eggvena .eu domain (info.rules)
  • 2070839 - ET INFO DYNAMIC_DNS HTTP Request to a *.eggvena .eu domain (info.rules)
  • 2070840 - ET INFO DYNAMIC_DNS Query to a *.japan .is domain (info.rules)
  • 2070841 - ET INFO DYNAMIC_DNS HTTP Request to a *.japan .is domain (info.rules)
  • 2070842 - ET INFO DYNAMIC_DNS Query to a *.brettanderson .co .uk domain (info.rules)
  • 2070843 - ET INFO DYNAMIC_DNS HTTP Request to a *.brettanderson .co .uk domain (info.rules)
  • 2070844 - ET INFO DYNAMIC_DNS Query to a *.ekomediagroup .ro domain (info.rules)
  • 2070845 - ET INFO DYNAMIC_DNS HTTP Request to a *.ekomediagroup .ro domain (info.rules)
  • 2070846 - ET INFO DYNAMIC_DNS Query to a *.skysoft .us domain (info.rules)
  • 2070847 - ET INFO DYNAMIC_DNS HTTP Request to a *.skysoft .us domain (info.rules)
  • 2070848 - ET INFO DYNAMIC_DNS Query to a *.stonepolishing .tw domain (info.rules)
  • 2070849 - ET INFO DYNAMIC_DNS HTTP Request to a *.stonepolishing .tw domain (info.rules)
  • 2070850 - ET INFO DYNAMIC_DNS Query to a *.isca-artificial .com .br domain (info.rules)
  • 2070851 - ET INFO DYNAMIC_DNS HTTP Request to a *.isca-artificial .com .br domain (info.rules)
  • 2070852 - ET INFO DYNAMIC_DNS Query to a *.eilong .com domain (info.rules)
  • 2070853 - ET INFO DYNAMIC_DNS HTTP Request to a *.eilong .com domain (info.rules)
  • 2070854 - ET INFO DYNAMIC_DNS Query to a *.embedded-controls .com domain (info.rules)
  • 2070855 - ET INFO DYNAMIC_DNS HTTP Request to a *.embedded-controls .com domain (info.rules)
  • 2070856 - ET INFO DYNAMIC_DNS Query to a *.mollo .com .ar domain (info.rules)
  • 2070857 - ET INFO DYNAMIC_DNS HTTP Request to a *.mollo .com .ar domain (info.rules)
  • 2070858 - ET INFO DYNAMIC_DNS Query to a *.mr24 .co domain (info.rules)
  • 2070859 - ET INFO DYNAMIC_DNS HTTP Request to a *.mr24 .co domain (info.rules)
  • 2070860 - ET INFO DYNAMIC_DNS Query to a *.damanfm .org .np domain (info.rules)
  • 2070861 - ET INFO DYNAMIC_DNS HTTP Request to a *.damanfm .org .np domain (info.rules)
  • 2070862 - ET INFO DYNAMIC_DNS Query to a *.travishughes .ca domain (info.rules)
  • 2070863 - ET INFO DYNAMIC_DNS HTTP Request to a *.travishughes .ca domain (info.rules)
  • 2070864 - ET INFO DYNAMIC_DNS Query to a *.problem-gambler-assessment .com domain (info.rules)
  • 2070865 - ET INFO DYNAMIC_DNS HTTP Request to a *.problem-gambler-assessment .com domain (info.rules)
  • 2070866 - ET INFO DYNAMIC_DNS Query to a *.aichi .me domain (info.rules)
  • 2070867 - ET INFO DYNAMIC_DNS HTTP Request to a *.aichi .me domain (info.rules)
  • 2070868 - ET INFO DYNAMIC_DNS Query to a *.pcspeedyfix .co .uk domain (info.rules)
  • 2070869 - ET INFO DYNAMIC_DNS HTTP Request to a *.pcspeedyfix .co .uk domain (info.rules)
  • 2070870 - ET INFO DYNAMIC_DNS Query to a *.aeycia .cl domain (info.rules)
  • 2070871 - ET INFO DYNAMIC_DNS HTTP Request to a *.aeycia .cl domain (info.rules)
  • 2070872 - ET INFO DYNAMIC_DNS Query to a *.dimensionless .space domain (info.rules)
  • 2070873 - ET INFO DYNAMIC_DNS HTTP Request to a *.dimensionless .space domain (info.rules)
  • 2070874 - ET INFO DYNAMIC_DNS Query to a *.newhopes .info domain (info.rules)
  • 2070875 - ET INFO DYNAMIC_DNS HTTP Request to a *.newhopes .info domain (info.rules)
  • 2070876 - ET INFO DYNAMIC_DNS Query to a *.ourdevices .us domain (info.rules)
  • 2070877 - ET INFO DYNAMIC_DNS HTTP Request to a *.ourdevices .us domain (info.rules)
  • 2070878 - ET INFO DYNAMIC_DNS Query to a *.mjureta .cl domain (info.rules)
  • 2070879 - ET INFO DYNAMIC_DNS HTTP Request to a *.mjureta .cl domain (info.rules)
  • 2070880 - ET INFO DYNAMIC_DNS Query to a *.aifos .cl domain (info.rules)
  • 2070881 - ET INFO DYNAMIC_DNS HTTP Request to a *.aifos .cl domain (info.rules)
  • 2070882 - ET INFO DYNAMIC_DNS Query to a *.relaps-club .li domain (info.rules)
  • 2070883 - ET INFO DYNAMIC_DNS HTTP Request to a *.relaps-club .li domain (info.rules)
  • 2070884 - ET INFO DYNAMIC_DNS Query to a *.espinosa .cl domain (info.rules)
  • 2070885 - ET INFO DYNAMIC_DNS HTTP Request to a *.espinosa .cl domain (info.rules)
  • 2070886 - ET INFO DYNAMIC_DNS Query to a *.bookworm .com .np domain (info.rules)
  • 2070887 - ET INFO DYNAMIC_DNS HTTP Request to a *.bookworm .com .np domain (info.rules)
  • 2070888 - ET INFO DYNAMIC_DNS Query to a *.xn–hgnestrand-q5a .se domain (info.rules)
  • 2070889 - ET INFO DYNAMIC_DNS HTTP Request to a *.xn–hgnestrand-q5a .se domain (info.rules)
  • 2070890 - ET INFO DYNAMIC_DNS Query to a *.vanitydomain .co .uk domain (info.rules)
  • 2070891 - ET INFO DYNAMIC_DNS HTTP Request to a *.vanitydomain .co .uk domain (info.rules)
  • 2070892 - ET INFO DYNAMIC_DNS Query to a *.91282618 .com domain (info.rules)
  • 2070893 - ET INFO DYNAMIC_DNS HTTP Request to a *.91282618 .com domain (info.rules)
  • 2070894 - ET INFO DYNAMIC_DNS Query to a *.openchain .pt domain (info.rules)
  • 2070895 - ET INFO DYNAMIC_DNS HTTP Request to a *.openchain .pt domain (info.rules)
  • 2070896 - ET INFO DYNAMIC_DNS Query to a *.sacrebl .eu domain (info.rules)
  • 2070897 - ET INFO DYNAMIC_DNS HTTP Request to a *.sacrebl .eu domain (info.rules)
  • 2070898 - ET INFO DYNAMIC_DNS Query to a *.losmolles .com .ar domain (info.rules)
  • 2070899 - ET INFO DYNAMIC_DNS HTTP Request to a *.losmolles .com .ar domain (info.rules)
  • 2070900 - ET INFO DYNAMIC_DNS Query to a *.lxqb .pt domain (info.rules)
  • 2070901 - ET INFO DYNAMIC_DNS HTTP Request to a *.lxqb .pt domain (info.rules)
  • 2070902 - ET INFO DYNAMIC_DNS Query to a *.medaconsult .ro domain (info.rules)
  • 2070903 - ET INFO DYNAMIC_DNS HTTP Request to a *.medaconsult .ro domain (info.rules)
  • 2070904 - ET INFO DYNAMIC_DNS Query to a *.choperascabodefrio .com .ar domain (info.rules)
  • 2070905 - ET INFO DYNAMIC_DNS HTTP Request to a *.choperascabodefrio .com .ar domain (info.rules)
  • 2070906 - ET INFO DYNAMIC_DNS Query to a *.agroinvestprojetos .com .br domain (info.rules)
  • 2070907 - ET INFO DYNAMIC_DNS HTTP Request to a *.agroinvestprojetos .com .br domain (info.rules)
  • 2070908 - ET INFO DYNAMIC_DNS Query to a *.redchat .nl domain (info.rules)
  • 2070909 - ET INFO DYNAMIC_DNS HTTP Request to a *.redchat .nl domain (info.rules)
  • 2070910 - ET INFO DYNAMIC_DNS Query to a *.booka .dj domain (info.rules)
  • 2070911 - ET INFO DYNAMIC_DNS HTTP Request to a *.booka .dj domain (info.rules)
  • 2070912 - ET INFO DYNAMIC_DNS Query to a *.alan-n-chanda .com domain (info.rules)
  • 2070913 - ET INFO DYNAMIC_DNS HTTP Request to a *.alan-n-chanda .com domain (info.rules)
  • 2070914 - ET INFO DYNAMIC_DNS Query to a *.irisstom .ru domain (info.rules)
  • 2070915 - ET INFO DYNAMIC_DNS HTTP Request to a *.irisstom .ru domain (info.rules)
  • 2070916 - ET INFO DYNAMIC_DNS Query to a *.mouregazet .com .ar domain (info.rules)
  • 2070917 - ET INFO DYNAMIC_DNS HTTP Request to a *.mouregazet .com .ar domain (info.rules)
  • 2070918 - ET INFO DYNAMIC_DNS Query to a *.installgentoo .org domain (info.rules)
  • 2070919 - ET INFO DYNAMIC_DNS HTTP Request to a *.installgentoo .org domain (info.rules)
  • 2070920 - ET INFO DYNAMIC_DNS Query to a *.pradol .cl domain (info.rules)
  • 2070921 - ET INFO DYNAMIC_DNS HTTP Request to a *.pradol .cl domain (info.rules)
  • 2070922 - ET INFO DYNAMIC_DNS Query to a *.retaliate .co .uk domain (info.rules)
  • 2070923 - ET INFO DYNAMIC_DNS HTTP Request to a *.retaliate .co .uk domain (info.rules)
  • 2070924 - ET INFO DYNAMIC_DNS Query to a *.meeps .us domain (info.rules)
  • 2070925 - ET INFO DYNAMIC_DNS HTTP Request to a *.meeps .us domain (info.rules)
  • 2070926 - ET INFO DYNAMIC_DNS Query to a *.tth .com .pk domain (info.rules)
  • 2070927 - ET INFO DYNAMIC_DNS HTTP Request to a *.tth .com .pk domain (info.rules)
  • 2070928 - ET INFO DYNAMIC_DNS Query to a *.hipicoabril .com .ar domain (info.rules)
  • 2070929 - ET INFO DYNAMIC_DNS HTTP Request to a *.hipicoabril .com .ar domain (info.rules)
  • 2070930 - ET INFO DYNAMIC_DNS Query to a *.sponsorafuture .co .uk domain (info.rules)
  • 2070931 - ET INFO DYNAMIC_DNS HTTP Request to a *.sponsorafuture .co .uk domain (info.rules)
  • 2070932 - ET INFO DYNAMIC_DNS Query to a *.vomytdaug .biz domain (info.rules)
  • 2070933 - ET INFO DYNAMIC_DNS HTTP Request to a *.vomytdaug .biz domain (info.rules)
  • 2070934 - ET INFO DYNAMIC_DNS Query to a *.edah .us domain (info.rules)
  • 2070935 - ET INFO DYNAMIC_DNS HTTP Request to a *.edah .us domain (info.rules)
  • 2070936 - ET INFO DYNAMIC_DNS Query to a *.joemullins .info domain (info.rules)
  • 2070937 - ET INFO DYNAMIC_DNS HTTP Request to a *.joemullins .info domain (info.rules)
  • 2070938 - ET INFO DYNAMIC_DNS Query to a *.gku-gazk .ru domain (info.rules)
  • 2070939 - ET INFO DYNAMIC_DNS HTTP Request to a *.gku-gazk .ru domain (info.rules)
  • 2070940 - ET INFO DYNAMIC_DNS Query to a *.ugnss .ru domain (info.rules)
  • 2070941 - ET INFO DYNAMIC_DNS HTTP Request to a *.ugnss .ru domain (info.rules)
  • 2070942 - ET INFO DYNAMIC_DNS Query to a *.jaaax .net domain (info.rules)
  • 2070943 - ET INFO DYNAMIC_DNS HTTP Request to a *.jaaax .net domain (info.rules)
  • 2070944 - ET INFO DYNAMIC_DNS Query to a *.ansoft .cl domain (info.rules)
  • 2070945 - ET INFO DYNAMIC_DNS HTTP Request to a *.ansoft .cl domain (info.rules)
  • 2070946 - ET INFO DYNAMIC_DNS Query to a *.orientretreatwellness .com domain (info.rules)
  • 2070947 - ET INFO DYNAMIC_DNS HTTP Request to a *.orientretreatwellness .com domain (info.rules)
  • 2070948 - ET INFO DYNAMIC_DNS Query to a *.kancilja .si domain (info.rules)
  • 2070949 - ET INFO DYNAMIC_DNS HTTP Request to a *.kancilja .si domain (info.rules)
  • 2070950 - ET INFO DYNAMIC_DNS Query to a *.davisempresas .cl domain (info.rules)
  • 2070951 - ET INFO DYNAMIC_DNS HTTP Request to a *.davisempresas .cl domain (info.rules)
  • 2070952 - ET INFO DYNAMIC_DNS Query to a *.xn–ds-bja .info domain (info.rules)
  • 2070953 - ET INFO DYNAMIC_DNS HTTP Request to a *.xn–ds-bja .info domain (info.rules)
  • 2070954 - ET INFO DYNAMIC_DNS Query to a *.barhousefarm .co .uk domain (info.rules)
  • 2070955 - ET INFO DYNAMIC_DNS HTTP Request to a *.barhousefarm .co .uk domain (info.rules)
  • 2070956 - ET INFO DYNAMIC_DNS Query to a *.rima .cl domain (info.rules)
  • 2070957 - ET INFO DYNAMIC_DNS HTTP Request to a *.rima .cl domain (info.rules)
  • 2070958 - ET INFO DYNAMIC_DNS Query to a *.sponsorafuture .org .uk domain (info.rules)
  • 2070959 - ET INFO DYNAMIC_DNS HTTP Request to a *.sponsorafuture .org .uk domain (info.rules)
  • 2070960 - ET INFO DYNAMIC_DNS Query to a *.swiderski .ca domain (info.rules)
  • 2070961 - ET INFO DYNAMIC_DNS HTTP Request to a *.swiderski .ca domain (info.rules)
  • 2070962 - ET INFO DYNAMIC_DNS Query to a *.montesmdq .com .ar domain (info.rules)
  • 2070963 - ET INFO DYNAMIC_DNS HTTP Request to a *.montesmdq .com .ar domain (info.rules)
  • 2070964 - ET INFO DYNAMIC_DNS Query to a *.bujanoci .net domain (info.rules)
  • 2070965 - ET INFO DYNAMIC_DNS HTTP Request to a *.bujanoci .net domain (info.rules)
  • 2070966 - ET INFO DYNAMIC_DNS Query to a *.kal-ram .co .il domain (info.rules)
  • 2070967 - ET INFO DYNAMIC_DNS HTTP Request to a *.kal-ram .co .il domain (info.rules)
  • 2070968 - ET INFO DYNAMIC_DNS Query to a *.freridein .nl domain (info.rules)
  • 2070969 - ET INFO DYNAMIC_DNS HTTP Request to a *.freridein .nl domain (info.rules)
  • 2070970 - ET INFO DYNAMIC_DNS Query to a *.bosquesdelmaule .cl domain (info.rules)
  • 2070971 - ET INFO DYNAMIC_DNS HTTP Request to a *.bosquesdelmaule .cl domain (info.rules)
  • 2070972 - ET INFO DYNAMIC_DNS Query to a *.kletterfranz .ch domain (info.rules)
  • 2070973 - ET INFO DYNAMIC_DNS HTTP Request to a *.kletterfranz .ch domain (info.rules)
  • 2070974 - ET INFO DYNAMIC_DNS Query to a *.oliver .adm .br domain (info.rules)
  • 2070975 - ET INFO DYNAMIC_DNS HTTP Request to a *.oliver .adm .br domain (info.rules)
  • 2070976 - ET INFO DYNAMIC_DNS Query to a *.casa-raul .com .ar domain (info.rules)
  • 2070977 - ET INFO DYNAMIC_DNS HTTP Request to a *.casa-raul .com .ar domain (info.rules)
  • 2070978 - ET INFO DYNAMIC_DNS Query to a *.truealex .ru domain (info.rules)
  • 2070979 - ET INFO DYNAMIC_DNS HTTP Request to a *.truealex .ru domain (info.rules)
  • 2070980 - ET INFO DYNAMIC_DNS Query to a *.mylocallan .de domain (info.rules)
  • 2070981 - ET INFO DYNAMIC_DNS HTTP Request to a *.mylocallan .de domain (info.rules)
  • 2070982 - ET INFO DYNAMIC_DNS Query to a *.aguirrealcaino .cl domain (info.rules)
  • 2070983 - ET INFO DYNAMIC_DNS HTTP Request to a *.aguirrealcaino .cl domain (info.rules)
  • 2070984 - ET INFO DYNAMIC_DNS Query to a *.katan .ro domain (info.rules)
  • 2070985 - ET INFO DYNAMIC_DNS HTTP Request to a *.katan .ro domain (info.rules)
  • 2070986 - ET INFO DYNAMIC_DNS Query to a *.iseasy .tw domain (info.rules)
  • 2070987 - ET INFO DYNAMIC_DNS HTTP Request to a *.iseasy .tw domain (info.rules)
  • 2070988 - ET INFO DYNAMIC_DNS Query to a *.astrodestin .ro domain (info.rules)
  • 2070989 - ET INFO DYNAMIC_DNS HTTP Request to a *.astrodestin .ro domain (info.rules)
  • 2070990 - ET INFO DYNAMIC_DNS Query to a *.imkerei-zach .at domain (info.rules)
  • 2070991 - ET INFO DYNAMIC_DNS HTTP Request to a *.imkerei-zach .at domain (info.rules)
  • 2070992 - ET INFO DYNAMIC_DNS Query to a *.eglobaltravelmedia .asia domain (info.rules)
  • 2070993 - ET INFO DYNAMIC_DNS HTTP Request to a *.eglobaltravelmedia .asia domain (info.rules)
  • 2070994 - ET INFO DYNAMIC_DNS Query to a *.black-mail .com .au domain (info.rules)
  • 2070995 - ET INFO DYNAMIC_DNS HTTP Request to a *.black-mail .com .au domain (info.rules)
  • 2070996 - ET INFO DYNAMIC_DNS Query to a *.darkwolf .ca domain (info.rules)
  • 2070997 - ET INFO DYNAMIC_DNS HTTP Request to a *.darkwolf .ca domain (info.rules)
  • 2070998 - ET INFO DYNAMIC_DNS Query to a *.ekivotos .gr domain (info.rules)
  • 2070999 - ET INFO DYNAMIC_DNS HTTP Request to a *.ekivotos .gr domain (info.rules)
  • 2071000 - ET INFO DYNAMIC_DNS Query to a *.molotov-thought .net domain (info.rules)
  • 2071001 - ET INFO DYNAMIC_DNS HTTP Request to a *.molotov-thought .net domain (info.rules)
  • 2071002 - ET INFO DYNAMIC_DNS Query to a *.ambientinformatica .com .br domain (info.rules)
  • 2071003 - ET INFO DYNAMIC_DNS HTTP Request to a *.ambientinformatica .com .br domain (info.rules)
  • 2071004 - ET INFO DYNAMIC_DNS Query to a *.cyberlation .net domain (info.rules)
  • 2071005 - ET INFO DYNAMIC_DNS HTTP Request to a *.cyberlation .net domain (info.rules)
  • 2071006 - ET INFO DYNAMIC_DNS Query to a *.aerwear .ro domain (info.rules)
  • 2071007 - ET INFO DYNAMIC_DNS HTTP Request to a *.aerwear .ro domain (info.rules)
  • 2071008 - ET INFO DYNAMIC_DNS Query to a *.rmit .ms domain (info.rules)
  • 2071009 - ET INFO DYNAMIC_DNS HTTP Request to a *.rmit .ms domain (info.rules)
  • 2071010 - ET INFO DYNAMIC_DNS Query to a *.louisedaviesyoga .co .uk domain (info.rules)
  • 2071011 - ET INFO DYNAMIC_DNS HTTP Request to a *.louisedaviesyoga .co .uk domain (info.rules)
  • 2071012 - ET INFO DYNAMIC_DNS Query to a *.patf .net domain (info.rules)
  • 2071013 - ET INFO DYNAMIC_DNS HTTP Request to a *.garantialibre .com domain (info.rules)
  • 2071014 - ET INFO DYNAMIC_DNS Query to a *.adis .web .id domain (info.rules)
  • 2071015 - ET INFO DYNAMIC_DNS HTTP Request to a *.adis .web .id domain (info.rules)
  • 2071016 - ET INFO DYNAMIC_DNS Query to a *.lxnch .ro domain (info.rules)
  • 2071017 - ET INFO DYNAMIC_DNS HTTP Request to a *.lxnch .ro domain (info.rules)
  • 2071018 - ET INFO DYNAMIC_DNS Query to a *.ikrastev .net domain (info.rules)
  • 2071019 - ET INFO DYNAMIC_DNS HTTP Request to a *.ikrastev .net domain (info.rules)
  • 2071020 - ET INFO DYNAMIC_DNS Query to a *.theavenuecarriagecrossing .com domain (info.rules)
  • 2071021 - ET INFO DYNAMIC_DNS HTTP Request to a *.theavenuecarriagecrossing .com domain (info.rules)
  • 2071022 - ET INFO DYNAMIC_DNS Query to a *.dutz .ro domain (info.rules)
  • 2071023 - ET INFO DYNAMIC_DNS HTTP Request to a *.dutz .ro domain (info.rules)
  • 2071024 - ET INFO DYNAMIC_DNS Query to a *.missouriprobate .biz domain (info.rules)
  • 2071025 - ET INFO DYNAMIC_DNS HTTP Request to a *.missouriprobate .biz domain (info.rules)
  • 2071026 - ET INFO DYNAMIC_DNS Query to a *.thryxt .com domain (info.rules)
  • 2071027 - ET INFO DYNAMIC_DNS HTTP Request to a *.thryxt .com domain (info.rules)
  • 2071028 - ET INFO DYNAMIC_DNS Query to a *.cornwallprayerinitiative .com domain (info.rules)
  • 2071029 - ET INFO DYNAMIC_DNS HTTP Request to a *.cornwallprayerinitiative .com domain (info.rules)
  • 2071030 - ET INFO DYNAMIC_DNS Query to a *.e-visionweb .com domain (info.rules)
  • 2071031 - ET INFO DYNAMIC_DNS HTTP Request to a *.e-visionweb .com domain (info.rules)
  • 2071032 - ET INFO DYNAMIC_DNS Query to a *.blackbooth .com .au domain (info.rules)
  • 2071033 - ET INFO DYNAMIC_DNS HTTP Request to a *.blackbooth .com .au domain (info.rules)
  • 2071034 - ET INFO DYNAMIC_DNS Query to a *.birchmeier .org domain (info.rules)
  • 2071035 - ET INFO DYNAMIC_DNS HTTP Request to a *.birchmeier .org domain (info.rules)
  • 2071036 - ET INFO DYNAMIC_DNS Query to a *.sanditours .si domain (info.rules)
  • 2071037 - ET INFO DYNAMIC_DNS HTTP Request to a *.sanditours .si domain (info.rules)
  • 2071038 - ET INFO DYNAMIC_DNS Query to a *.comtek .com .ar domain (info.rules)
  • 2071039 - ET INFO DYNAMIC_DNS HTTP Request to a *.comtek .com .ar domain (info.rules)
  • 2071040 - ET INFO DYNAMIC_DNS Query to a *.databots .co .uk domain (info.rules)
  • 2071041 - ET INFO DYNAMIC_DNS HTTP Request to a *.databots .co .uk domain (info.rules)
  • 2071042 - ET INFO DYNAMIC_DNS Query to a *.servimont .cl domain (info.rules)
  • 2071043 - ET INFO DYNAMIC_DNS HTTP Request to a *.servimont .cl domain (info.rules)
  • 2071044 - ET INFO DYNAMIC_DNS Query to a *.billblog .co .uk domain (info.rules)
  • 2071045 - ET INFO DYNAMIC_DNS HTTP Request to a *.billblog .co .uk domain (info.rules)
  • 2071046 - ET INFO DYNAMIC_DNS Query to a *.lunnevik .net domain (info.rules)
  • 2071047 - ET INFO DYNAMIC_DNS HTTP Request to a *.lunnevik .net domain (info.rules)
  • 2071048 - ET INFO DYNAMIC_DNS Query to a *.telenova .ca domain (info.rules)
  • 2071049 - ET INFO DYNAMIC_DNS HTTP Request to a *.telenova .ca domain (info.rules)
  • 2071050 - ET INFO DYNAMIC_DNS Query to a *.taufonua .to domain (info.rules)
  • 2071051 - ET INFO DYNAMIC_DNS HTTP Request to a *.taufonua .to domain (info.rules)
  • 2071052 - ET INFO DYNAMIC_DNS Query to a *.poteica .com .mx domain (info.rules)
  • 2071053 - ET INFO DYNAMIC_DNS HTTP Request to a *.poteica .com .mx domain (info.rules)
  • 2071054 - ET INFO DYNAMIC_DNS Query to a *.bdumitriu .ro domain (info.rules)
  • 2071055 - ET INFO DYNAMIC_DNS HTTP Request to a *.bdumitriu .ro domain (info.rules)
  • 2071056 - ET INFO DYNAMIC_DNS Query to a *.oresumodaopera .com .br domain (info.rules)
  • 2071057 - ET INFO DYNAMIC_DNS HTTP Request to a *.oresumodaopera .com .br domain (info.rules)
  • 2071058 - ET INFO DYNAMIC_DNS Query to a *.espacoextra .pt domain (info.rules)
  • 2071059 - ET INFO DYNAMIC_DNS HTTP Request to a *.espacoextra .pt domain (info.rules)
  • 2071060 - ET INFO DYNAMIC_DNS Query to a *.qr-code .co .za domain (info.rules)
  • 2071061 - ET INFO DYNAMIC_DNS HTTP Request to a *.qr-code .co .za domain (info.rules)
  • 2071062 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (civiliq .cyou) (malware.rules)
  • 2071063 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (civiliq .cyou) in TLS SNI (malware.rules)
  • 2071064 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (parachutedkw .buzz) (malware.rules)
  • 2071065 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (parachutedkw .buzz) in TLS SNI (malware.rules)
  • 2071066 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (shootyprovedn .biz) (malware.rules)
  • 2071067 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (shootyprovedn .biz) in TLS SNI (malware.rules)
  • 2071068 - ET INFO DYNAMIC_DNS Query to a *.everich-airfreight .com domain (info.rules)
  • 2071069 - ET INFO DYNAMIC_DNS HTTP Request to a *.everich-airfreight .com domain (info.rules)
  • 2071070 - ET INFO DYNAMIC_DNS Query to a *.tuplantaforma .com domain (info.rules)
  • 2071071 - ET INFO DYNAMIC_DNS HTTP Request to a *.tuplantaforma .com domain (info.rules)
  • 2071072 - ET INFO DYNAMIC_DNS Query to a *.bigjaco .com domain (info.rules)
  • 2071073 - ET INFO DYNAMIC_DNS HTTP Request to a *.bigjaco .com domain (info.rules)
  • 2071074 - ET INFO DYNAMIC_DNS Query to a *.saptagunautama .com domain (info.rules)
  • 2071075 - ET INFO DYNAMIC_DNS HTTP Request to a *.saptagunautama .com domain (info.rules)
  • 2071076 - ET INFO DYNAMIC_DNS Query to a *.europeserv .org domain (info.rules)
  • 2071077 - ET INFO DYNAMIC_DNS HTTP Request to a *.europeserv .org domain (info.rules)
  • 2071078 - ET INFO DYNAMIC_DNS Query to a *.441creative .co .uk domain (info.rules)
  • 2071079 - ET INFO DYNAMIC_DNS HTTP Request to a *.441creative .co .uk domain (info.rules)
  • 2071080 - ET INFO DYNAMIC_DNS Query to a *.portek .net .au domain (info.rules)
  • 2071081 - ET INFO DYNAMIC_DNS HTTP Request to a *.portek .net .au domain (info.rules)
  • 2071082 - ET INFO DYNAMIC_DNS Query to a *.richardwaddingham .com domain (info.rules)
  • 2071083 - ET INFO DYNAMIC_DNS HTTP Request to a *.richardwaddingham .com domain (info.rules)
  • 2071084 - ET INFO DYNAMIC_DNS Query to a *.propertyshots .net domain (info.rules)
  • 2071085 - ET INFO DYNAMIC_DNS HTTP Request to a *.propertyshots .net domain (info.rules)
  • 2071086 - ET INFO DYNAMIC_DNS Query to a *.brittainlawfirm .net domain (info.rules)
  • 2071087 - ET INFO DYNAMIC_DNS HTTP Request to a *.brittainlawfirm .net domain (info.rules)
  • 2071088 - ET INFO DYNAMIC_DNS Query to a *.danleevogler .net domain (info.rules)
  • 2071089 - ET INFO DYNAMIC_DNS HTTP Request to a *.danleevogler .net domain (info.rules)
  • 2071090 - ET INFO DYNAMIC_DNS Query to a *.bucknine .com domain (info.rules)
  • 2071091 - ET INFO DYNAMIC_DNS HTTP Request to a *.bucknine .com domain (info.rules)
  • 2071092 - ET INFO DYNAMIC_DNS Query to a *.pohley .org domain (info.rules)
  • 2071093 - ET INFO DYNAMIC_DNS HTTP Request to a *.pohley .org domain (info.rules)
  • 2071094 - ET INFO DYNAMIC_DNS Query to a *.cakk .us domain (info.rules)
  • 2071095 - ET INFO DYNAMIC_DNS HTTP Request to a *.cakk .us domain (info.rules)
  • 2071096 - ET INFO DYNAMIC_DNS Query to a *.atcfirealarms .co .uk domain (info.rules)
  • 2071097 - ET INFO DYNAMIC_DNS HTTP Request to a *.atcfirealarms .co .uk domain (info.rules)
  • 2071098 - ET INFO DYNAMIC_DNS Query to a *.rolotec .ro domain (info.rules)
  • 2071099 - ET INFO DYNAMIC_DNS HTTP Request to a *.rolotec .ro domain (info.rules)
  • 2071100 - ET INFO DYNAMIC_DNS Query to a *.mwheller .co .uk domain (info.rules)
  • 2071101 - ET INFO DYNAMIC_DNS HTTP Request to a *.mwheller .co .uk domain (info.rules)
  • 2071102 - ET INFO DYNAMIC_DNS Query to a *.cobraproject .com domain (info.rules)
  • 2071103 - ET INFO DYNAMIC_DNS HTTP Request to a *.cobraproject .com domain (info.rules)
  • 2071104 - ET INFO DYNAMIC_DNS Query to a *.maxmir .ru domain (info.rules)
  • 2071105 - ET INFO DYNAMIC_DNS HTTP Request to a *.maxmir .ru domain (info.rules)
  • 2071106 - ET INFO DYNAMIC_DNS Query to a *.jericocomputing .com domain (info.rules)
  • 2071107 - ET INFO DYNAMIC_DNS HTTP Request to a *.jericocomputing .com domain (info.rules)
  • 2071108 - ET INFO DYNAMIC_DNS Query to a *.kokuakatsfarm .com domain (info.rules)
  • 2071109 - ET INFO DYNAMIC_DNS HTTP Request to a *.kokuakatsfarm .com domain (info.rules)
  • 2071110 - ET INFO DYNAMIC_DNS Query to a *.ruiz-tagle .com domain (info.rules)
  • 2071111 - ET INFO DYNAMIC_DNS HTTP Request to a *.ruiz-tagle .com domain (info.rules)
  • 2071112 - ET INFO DYNAMIC_DNS Query to a *.death .cl domain (info.rules)
  • 2071113 - ET INFO DYNAMIC_DNS HTTP Request to a *.death .cl domain (info.rules)
  • 2071114 - ET MALWARE TA569 Gholoader CnC Domain in TLS SNI (dl .politex .app) (malware.rules)

Pro:

  • 2867882 - ETPRO WEB_SERVER Check Point IKEv1 Remote Access VPN Certificate Authentication Bypass (CVE-2026-50751) (web_server.rules)
  • 2867883 - ETPRO WEB_SPECIFIC_APPS Adobe ColdFusion RDS Path Traversal (CVE-2026-48282) (web_specific_apps.rules)
  • 2867884 - ETPRO MALWARE LOTUSLITE v1 CnC Checkin (malware.rules)
  • 2867885 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - PING Outbound (malware.rules)
  • 2867886 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867887 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867888 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - Ping Inbound (malware.rules)
  • 2867889 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD+ Outbound (malware.rules)
  • 2867890 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD- Inbound (malware.rules)
  • 2867891 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - sendfileto Inbound (malware.rules)
  • 2867892 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - sendPlugin Outbound (malware.rules)
  • 2867893 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - savePlugin Inbound (malware.rules)
  • 2867894 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - Informations Outbound (malware.rules)
  • 2867895 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Inbound (malware.rules)
  • 2867896 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Outbound (malware.rules)
  • 2867897 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PCShutdown Inbound (malware.rules)
  • 2867898 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - PING Outbound (malware.rules)
  • 2867899 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867900 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867901 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867902 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - Ping Inbound (malware.rules)
  • 2867903 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - INFO Outbound (malware.rules)
  • 2867904 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD+ Outbound (malware.rules)
  • 2867905 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - RD+ Inbound (malware.rules)
  • 2867906 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - RD- Outbound (malware.rules)
  • 2867907 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD- Inbound (malware.rules)
  • 2867908 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - sendfileto Inbound (malware.rules)
  • 2867909 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - sendPlugin Outbound (malware.rules)
  • 2867910 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - savePlugin Inbound (malware.rules)
  • 2867911 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - Informations Outbound (malware.rules)
  • 2867912 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Inbound (malware.rules)
  • 2867913 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Outbound (malware.rules)
  • 2867914 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PCShutdown Inbound (malware.rules)
  • 2867915 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - PING Outbound (malware.rules)
  • 2867916 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PING Outbound (malware.rules)
  • 2867917 - ETPRO MALWARE TA584 Win32/XWorm CnC Command - Ping Inbound (malware.rules)
  • 2867918 - ETPRO MALWARE TA584 Win32/XWorm V2 CnC Command - RD- Inbound (malware.rules)
  • 2867919 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - sendPlugin Outbound (malware.rules)
  • 2867920 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - Informations Outbound (malware.rules)
  • 2867921 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Inbound (malware.rules)
  • 2867922 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - GetInformations Outbound (malware.rules)
  • 2867923 - ETPRO MALWARE TA584 Win32/XWorm V3 CnC Command - PCShutdown Inbound (malware.rules)

Modified inactive rules:

  • 2070118 - ET EXPLOIT_KIT ZPHP Domain in TLS SNI (coralwayfinder .top) (exploit_kit.rules)