Back to Security Events
HIGHConfidence: 94%
Rule: RULE-JS-042Incident: INC-2026-0819
Suspicious JavaScript Response
What BOSS Detected
BOSS detected multiple suspicious indicators in a JavaScript response from an unfamiliar external origin.
Observed Evidence
Destination URL:
https://cdn.example-untrusted.com/v2/loader.jsContent Type:application/javascript
Payload Size:14.2 KB
Redirect Hops:2
Matched Indicators:
Dynamic eval() usageBase64 payload stringDomain age < 7 days
Correlated Detection Signals
Suspicious external origin
96%Obfuscation indicator
92%Unexpected redirect
88%Event Sequence Timeline
14:02:11
Request observed by boss-sw.js
14:02:12
Redirect chain detected (2 hops)
14:02:12
Response payload analyzed for static indicators
14:02:12
Suspicious pattern score calculated (94%)
14:02:13
Security telemetry payload reported to Rust backend
{
"event_type": "SECURITY_FINDING",
"agent_version": "BOSS-SW 1.0.0",
"rule_triggered": "RULE-JS-042",
"confidence_score": 0.94,
"target_url": "https://cdn.example-untrusted.com/v2/loader.js",
"origin": "cdn.example-untrusted.com",
"http_status": 200,
"headers_analyzed": {
"content-type": "application/javascript",
"x-cache": "MISS",
"access-control-allow-origin": "*"
},
"indicators": [
{
"type": "OBFUSCATION",
"score": 0.92,
"snippet": "eval(atob('aW1wb3J0...'))"
},
{
"type": "ORIGIN_REPUTATION",
"score": 0.96,
"reason": "New origin registration"
}
]
}