Sublime Security medium experimental mql

Open redirect: Atdmt

Message contains use of the Atdmt (Facebook) open redirect.

View Source

Detection Logic

type.inbound
and any(body.links,
        .href_url.domain.domain == 'ad.atdmt.com'
        and strings.ilike(.href_url.path, '*/c*')
)

Field Validations

Loading…

Comments (0)

Loading comments...