Update opensea-389-9bec97c22fa2e411.yml

phish-report · Mar 10, 2024 · 75ed2ce · 75ed2ce
1 parent 0786c0d
commit 75ed2ce
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/indicators/opensea-389-9bec97c22fa2e411.yml b/indicators/opensea-389-9bec97c22fa2e411.yml
@@ -8,11 +8,14 @@ references:
 
 detection:
 
-  file:
+  fileRequest:
+    requests|endswith: '/389-9bec97c22fa2e411.gif'
+
+  fileUsage:
     # This GIF file is used on a lot of OpenSea scams.
     html|contains: '/389-9bec97c22fa2e411.gif'
 
-  condition: file
+  condition: fileRequest and fileUsage
 
 tags:
     - target.opensea