← Back to Explore
sublimemediumRule
Fleek.co storage link
The message contains a Fleek.co storage link, which can be used to host malicious content.
Detection Query
type.inbound
and any(body.links, .href_url.domain.domain == 'storageapi.fleek.co')
Author
ajpc500
Data Sources
Email MessagesEmail HeadersEmail Attachments
Platforms
email
Tags
Suspicious link
Raw Content
name: "Fleek.co storage link"
description: |
The message contains a Fleek.co storage link, which can be used to host malicious content.
type: "rule"
severity: "medium"
authors:
- twitter: "ajpc500"
source: |
type.inbound
and any(body.links, .href_url.domain.domain == 'storageapi.fleek.co')
tags:
- "Suspicious link"