hosts-blocklists icon indicating copy to clipboard operation
hosts-blocklists copied to clipboard

gluvoob.com - suggestion to be added to blacklist

Open lucamosca1 opened this issue 1 year ago • 2 comments

Hi there! Today we've been warned by AWS GuardDuty that one of our internal dns tried to resolve this harmful domain

lucamosca1 avatar May 18 '23 13:05 lucamosca1

What specifically is malicious about this domain?

notracking avatar May 30 '23 18:05 notracking

GuardDuty details says: EC2 instance i-XXX is querying a domain name associated with a known Command & Control server.

Evidence: Threat intelligence details Threat IP list CrowdStrike Threat names PdfCaptchaLure21

lucamosca1 avatar May 31 '23 07:05 lucamosca1