Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
phanman
New Contributor

loadm.exelator.com

This morning a few users are triggering a web filter alert.  Pages they are visiting such as msn.com or yahoo.com shows compromised host detected.  Referring to loadm.exelator.com.  I since then blocked the url from our end to prevent access to it.  Ran a scan on the computers and came back clean.  Any suggestions?

Information Security
Information Security
2 REPLIES 2
serk
New Contributor

We saw this domain come up as IOCs against a few users over the last 24 hours, all blocked by web filter. It looks like some malvertisements on news websites. If you had some successful sessions I would suggest to investigate the users browsers.

 

mike_theknife

I got those as well.

2023 Google Chrome won't allow third party cookies anymore. The Nielsen Company is developing tracking systems and use the Domain exelator.com to Track.

see: https://better.fyi/trackers/exelator.com

At the same time "s.0cf.io" showed up. Trying to find out more about this.

Regards Mike

Labels
Top Kudoed Authors