Skip to main content
phanman
phanman
New Member
November 10, 2021
Question

loadm.exelator.com

  • November 10, 2021
  • 2 replies
  • 4119 views

This morning a few users are triggering a web filter alert.  Pages they are visiting such as msn.com or yahoo.com shows compromised host detected.  Referring to loadm.exelator.com.  I since then blocked the url from our end to prevent access to it.  Ran a scan on the computers and came back clean.  Any suggestions?

    2 replies

    serk
    serk
    New Member
    November 11, 2021

    We saw this domain come up as IOCs against a few users over the last 24 hours, all blocked by web filter. It looks like some malvertisements on news websites. If you had some successful sessions I would suggest to investigate the users browsers.

     

    mike_theknife
    mike_theknife
    New Member
    November 11, 2021

    I got those as well.

    2023 Google Chrome won't allow third party cookies anymore. The Nielsen Company is developing tracking systems and use the Domain exelator.com to Track.

    see: https://better.fyi/trackers/exelator.com

    At the same time "s.0cf.io" showed up. Trying to find out more about this.

    Regards Mike

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!