From 75ed2ced542e2dad8054c0041e667453e75ab907 Mon Sep 17 00:00:00 2001
From: IlluminatiFish <45714340+IlluminatiFish@users.noreply.github.com>
Date: Sun, 10 Mar 2024 23:22:34 +0000
Subject: [PATCH] Update opensea-389-9bec97c22fa2e411.yml

---
 indicators/opensea-389-9bec97c22fa2e411.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/indicators/opensea-389-9bec97c22fa2e411.yml b/indicators/opensea-389-9bec97c22fa2e411.yml
index fe891b6..e2d9d28 100644
--- a/indicators/opensea-389-9bec97c22fa2e411.yml
+++ b/indicators/opensea-389-9bec97c22fa2e411.yml
@@ -8,11 +8,14 @@ references:
     
 detection:
 
-  file:
+  fileRequest:
+    requests|endswith: '/389-9bec97c22fa2e411.gif'
+    
+  fileUsage:
     # This GIF file is used on a lot of OpenSea scams.
     html|contains: '/389-9bec97c22fa2e411.gif'
 
-  condition: file
+  condition: fileRequest and fileUsage
 
 tags:
     - target.opensea