DNS Resolution to Taken-Over netdna-ssl.com CDN Domain
Detects DNS queries and network connections to 'netdna-ssl.com' and its subdomains, as well as specific IP addresses (104.21.72.58, 172.67.175.240) associated with the re-registered domain. This domain was re-registered by a third party in July 2025 and now resolves legacy WP Engine CDN hostnames, creating a potential supply chain risk.
Microsoft Sentinel (KQL)
