← Back to Explore
sublimelowRule
Navohost.com hosting link
The message contains a Navohost.com link, which can be used to host malicious content.
Detection Query
type.inbound
and any(body.links, .href_url.domain.root_domain == 'navohost.com')
Author
ajpc500
Data Sources
Email MessagesEmail HeadersEmail Attachments
Platforms
email
Tags
Suspicious link
Raw Content
name: "Navohost.com hosting link"
description: |
The message contains a Navohost.com link, which can be used to host malicious content.
type: "rule"
severity: "low"
authors:
- twitter: "ajpc500"
source: |
type.inbound
and any(body.links, .href_url.domain.root_domain == 'navohost.com')
tags:
- "Suspicious link"