Malicious JavaScript Redirect to Exploit Page

Darshan Thummar@Mighty

•updated Jun 11, 2026•0•0•2

This rule detects HTTP responses containing JavaScript that attempts to redirect the user's browser to another page and executes code using 'eval()'. This combination is often used in malicious web pages to redirect users to exploit kits or phishing sites, and to obfuscate malicious JavaScript.