ET INFO Observed Digital Advertising Domain (ad-shield .io in TLS SNI)

SID: 2065813Rev: 13 viewsHistory

Sourceet/open

CreatedNovember 18, 2025

UpdatedNovember 18, 2025

Classificationmisc-activity

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"ET INFO Observed Digital Advertising Domain (ad-shield .io in TLS SNI)"; flow:established,to_server; tls.sni; bsize:12; content:"ad-shield.io"; fast_pattern; reference:url,www.ad-shield.io/; classtype:misc-activity; sid:2065813; rev:1; metadata:attack_target Client_and_Server, created_at 2025_11_18, deployment Perimeter, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2025_11_18, mitre_tactic_id TA0001, mitre_tactic_name Initial_Access, mitre_technique_id T1189, mitre_technique_name Drive_by_Compromise;)

References

url	www.ad-shield.io/

Metadata

attack targetClient_and_Server

created at2025_11_18

deploymentPerimeter

confidenceHigh

signature severityInformational

tagDescription_Generated_By_Proofpoint_Nexus

updated at2025_11_18

mitre tactic idTA0001

mitre tactic nameInitial_Access

mitre technique idT1189

mitre technique nameDrive_by_Compromise

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!