topic Suspicious DNS Query (generic:omnatour.com) in General Topics

Suspicious DNS Query (generic:omnatour.com)

JasonWindsor — Wed, 22 Dec 2021 18:55:54 GMT

Can anyone tell me if this is legitimate or if it's a false positive? My Cortex XDR hasn't found any behavioral issues to go along with it either.

Re: Suspicious DNS Query (generic:omnatour.com)

OtakarKlier — Wed, 22 Dec 2021 19:13:35 GMT

Hello,

Here are a few sites I use to determine what is and what is not safe.

virustotal.com

urlscan.io

https://dnsdumpster.com/

Regards,

Re: Suspicious DNS Query (generic:omnatour.com)

Adrian_Jensen — Tue, 28 Dec 2021 18:11:45 GMT

We have regularly seen this DNS alert as well, on random public Wifi users, though the threat ID seems to have been removed in the last couple weeks. omnatuor.com seems to be associated with adware, using the browser notification subscribe action to push popup ads via the browser. I would remove the subscriptions if found on your PCs as undesirable and a nuisance, but it doesn't seem to be actively hostile.