LIVEcommunity - Who Me Too'd this topic

We are investigating alerts of this DNS signature for x1.c.lencr.org.

I'd expect that a match for a clear text string in a DNS Request that it is very unlikely this is a false detection.

However to get alerts so quickly after this signature creation, suggests we are either very unlucky or a very common public internet resource if causing this fly-by access. Anyone else receiving this threat alert shortly after an apparent WF update.

KR,

Lee

Who Me Too'd this topic

L0 Member

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L1 Bithead

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L1 Bithead

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L0 Member

Me Too date:

L1 Bithead

Me Too date:

Unlock your full community experience!

Who Me Too'd this topic

Threat ID 411977850 created 2021-06-11 13:58:04 (UTC)