Malicious Extension Two-Hop Search Redirect via perplexity-ai.online

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•2

This rule detects outbound network connections to a specific typosquatted domain 'perplexity-ai.online'. This domain is associated with a malicious browser extension designed to intercept and exfiltrate search queries before forwarding them to legitimate search providers.