Alerts: - Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)

[H.NguyenNgoc]

Hello Friends

Our XDR system recently reported a lot of these warnings, "Abnormal Recurring Communications to a Rare Domain to a Suspicious Autonomous System (AS)". Through information from XDR from the user's computer that has queried a website through Google Chrome or MS Edge. The investigation activity gets the user's access information that they have accessed and not accessed those website addresses.
This warning keeps appearing, so how to turn it off or how to find the exact cause of why this warning is there.

Thank you.