perplexity-ai.online Typosquatted C2 Domain — DNS + Repeated Browser Connections

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•0

This rule detects potential command-and-control (C2) activity or data exfiltration by monitoring for first-time DNS resolution of known typosquatted domains targeting 'Perplexity AI', followed by persistent outbound network connections from common web browsers to the same domain family.