BragJack: Browser session loaded leftover testing.perplexity.com subdomain (BragJack redirect bypass)

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•2

This rule detects network traffic directed to the subdomain 'testing.perplexity.com', which is identified as being associated with the BragJack campaign. This specific subdomain is leveraged by the campaign to facilitate browser session redirect bypasses, indicative of an attempt to intercept or manipulate user sessions.